#!/bin/bash
set -uo pipefail
SSH_CMD="ssh -n -o BatchMode=yes -o ConnectTimeout=4 fin21"
echo "## 2. Периметр: Белый VPS (Host: fin21, IP: 153.76.194.24)"
echo "### WireGuard wg0 на VPS:"
echo '```text'
timeout 4s ${SSH_CMD} "sudo wg show wg0" 2>&1 || echo "VPS или WireGuard недоступен"
echo '```'
echo "### Статус системных сервисов (Edge Stack):"
echo '```text'
timeout 4s ${SSH_CMD} "sudo systemctl is-active wg-quick@wg0 haproxy xray nginx | paste -d' ' -s - | awk '{print \"WireGuard:\", \$1, \"| HAProxy:\", \$2, \"| Xray:\", \$3, \"| Nginx:\", \$4}'" 2>&1 || echo "Ошибка проверки systemd"
echo '```'
echo "### Прослушиваемые сокеты (Ports 80, 443, 4443, 8443, 51820):"
echo '```text'
timeout 4s ${SSH_CMD} "sudo ss -tulpn | grep -E '80|443|4443|8443|51820'" 2>&1 || echo "Ошибка ss"
echo '```'
echo "### Тест аварийной заглушки Nginx (127.0.0.1:8443):"
echo '```text'
timeout 3s ${SSH_CMD} "curl -k -s https://127.0.0.1:8443" 2>&1 || echo "Nginx fallback не отвечает"
echo '```'
echo "### Конфигурация SSH-демона (sshd runtime):"
echo '```text'
timeout 4s ${SSH_CMD} "sudo sshd -T | grep -E 'passwordauthentication|permitrootlogin'" 2>&1 || echo "Ошибка проверки sshd"
echo '```'
echo "---"