Initial resurrection kit — 81 scripts, 62 references, configs, systemd units, crons, Docker compose files, Caddy config, master README
This commit is contained in:
root
@@ -0,0 +1,205 @@
|
||||
=== Home Router Backup 2026-07-08 10:00:49 UTC ===
|
||||
Warning: Permanently added '10.77.0.2' (RSA) to the list of known hosts.
|
||||
Warning: Permanently added '10.77.0.2' (RSA) to the list of known hosts.
|
||||
scp: itpp-backup-2026-07-08.rsc: No such file or directory
|
||||
Warning: Permanently added '10.77.0.2' (RSA) to the list of known hosts.
|
||||
no such item (/file/remove; line 1)
|
||||
|
||||
The user-provided path /tmp/home-router-backup/itpp-backup-2026-07-08.rsc does not exist.
|
||||
FAILED: S3 upload error
|
||||
=== Home Router Backup 2026-07-08 23:32:56 UTC ===
|
||||
╔══════════════════════════════════════════╗
|
||||
║ WISP Backup — 2026-07-08
|
||||
╚══════════════════════════════════════════╝
|
||||
|
||||
[*] Step 1: Connecting VPN ...
|
||||
[*] Bringing up L2TP/IPsec VPN to 76.195.7.60 ...
|
||||
[route] 76.195.7.60 via 152.53.192.1 (avoids ppp0 recursion)
|
||||
[-] VPN connection failed (ppp0 not up).
|
||||
Cleaning up IPsec to avoid orphaned tunnel ...
|
||||
Check logs: journalctl -u xl2tpd -n 20
|
||||
ipsec status
|
||||
[stderr] /root/.hermes/scripts/wisp-backup/home-router-vpn.sh: line 61: /etc/xl2tpd/xl2tpd.conf: No such file or directory
|
||||
[stderr] /root/.hermes/scripts/wisp-backup/home-router-vpn.sh: line 80: /etc/ppp/options.wisp-vpn: No such file or directory
|
||||
[stderr] /root/.hermes/scripts/wisp-backup/home-router-vpn.sh: line 103: /etc/ppp/chap-secrets: No such file or directory
|
||||
[stderr] /root/.hermes/scripts/wisp-backup/home-router-vpn.sh: line 124: /var/run/xl2tpd/l2tp-control: No such file or directory
|
||||
[stderr] /root/.hermes/scripts/wisp-backup/home-router-vpn.sh: line 178: /var/run/xl2tpd/l2tp-control: No such file or directory
|
||||
[-] VPN connection failed. Aborting.
|
||||
=== Exit code: 1 ===
|
||||
=== Home Router Backup 2026-07-08 23:34:04 UTC ===
|
||||
Exception (client): Error reading SSH protocol banner
|
||||
Traceback (most recent call last):
|
||||
File "/opt/awscli-venv/lib/python3.13/site-packages/paramiko/transport.py", line 2213, in _check_banner
|
||||
buf = self.packetizer.readline(timeout)
|
||||
File "/opt/awscli-venv/lib/python3.13/site-packages/paramiko/packet.py", line 395, in readline
|
||||
buf += self._read_timeout(timeout)
|
||||
~~~~~~~~~~~~~~~~~~^^^^^^^^^
|
||||
File "/opt/awscli-venv/lib/python3.13/site-packages/paramiko/packet.py", line 665, in _read_timeout
|
||||
raise EOFError()
|
||||
EOFError
|
||||
|
||||
During handling of the above exception, another exception occurred:
|
||||
|
||||
Traceback (most recent call last):
|
||||
File "/opt/awscli-venv/lib/python3.13/site-packages/paramiko/transport.py", line 2029, in run
|
||||
self._check_banner()
|
||||
~~~~~~~~~~~~~~~~~~^^
|
||||
File "/opt/awscli-venv/lib/python3.13/site-packages/paramiko/transport.py", line 2217, in _check_banner
|
||||
raise SSHException(
|
||||
"Error reading SSH protocol banner" + str(e)
|
||||
)
|
||||
paramiko.ssh_exception.SSHException: Error reading SSH protocol banner
|
||||
|
||||
╔══════════════════════════════════════════╗
|
||||
║ WISP Backup — 2026-07-08
|
||||
╚══════════════════════════════════════════╝
|
||||
|
||||
[*] Step 1: Connecting VPN ...
|
||||
[*] Bringing up L2TP/IPsec VPN to 76.195.7.60 ...
|
||||
[route] 76.195.7.60 via 152.53.192.1 (avoids ppp0 recursion)
|
||||
initiating Main Mode IKE_SA wisp-vpn[1] to 76.195.7.60
|
||||
generating ID_PROT request 0 [ SA V V V V V ]
|
||||
sending packet: from 152.53.192.33[500] to 76.195.7.60[500] (252 bytes)
|
||||
received packet: from 76.195.7.60[500] to 152.53.192.33[500] (164 bytes)
|
||||
parsed ID_PROT response 0 [ SA V V V V ]
|
||||
received NAT-T (RFC 3947) vendor ID
|
||||
received XAuth vendor ID
|
||||
received DPD vendor ID
|
||||
received FRAGMENTATION vendor ID
|
||||
selected proposal: IKE:AES_CBC_128/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_1024
|
||||
generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
|
||||
sending packet: from 152.53.192.33[500] to 76.195.7.60[500] (244 bytes)
|
||||
received packet: from 76.195.7.60[500] to 152.53.192.33[500] (236 bytes)
|
||||
parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
|
||||
generating ID_PROT request 0 [ ID HASH N(INITIAL_CONTACT) ]
|
||||
sending packet: from 152.53.192.33[500] to 76.195.7.60[500] (108 bytes)
|
||||
received packet: from 76.195.7.60[500] to 152.53.192.33[500] (92 bytes)
|
||||
invalid HASH_V1 payload length, decryption failed?
|
||||
could not decrypt payloads
|
||||
message parsing failed
|
||||
ignore malformed INFORMATIONAL request
|
||||
INFORMATIONAL_V1 request with message ID 966687587 processing failed
|
||||
received packet: from 76.195.7.60[500] to 152.53.192.33[500] (76 bytes)
|
||||
parsed ID_PROT response 0 [ ID HASH ]
|
||||
IKE_SA wisp-vpn[1] established between 152.53.192.33[152.53.192.33]...76.195.7.60[76.195.7.60]
|
||||
scheduling reauthentication in 85352s
|
||||
maximum IKE_SA lifetime 85892s
|
||||
generating QUICK_MODE request 3071489454 [ HASH SA No KE ID ID ]
|
||||
sending packet: from 152.53.192.33[500] to 76.195.7.60[500] (316 bytes)
|
||||
received packet: from 76.195.7.60[500] to 152.53.192.33[500] (300 bytes)
|
||||
parsed QUICK_MODE response 3071489454 [ HASH SA No KE ID ID ]
|
||||
selected proposal: ESP:AES_CBC_128/HMAC_SHA1_96/MODP_1024/NO_EXT_SEQ
|
||||
CHILD_SA wisp-vpn{1} established with SPIs c8225420_i 0739aab7_o and TS 152.53.192.33/32[udp/l2f] === 76.195.7.60/32[udp/l2f]
|
||||
connection 'wisp-vpn' established successfully
|
||||
[+] VPN connected! Interface: ppp0, IP: 192.168.88.104
|
||||
[*] Adding route to VPN peer's subnet via ppp0 ...
|
||||
[route] Added 192.168.88.0/24 via ppp0
|
||||
[*] Adding static routes for tower subnets ...
|
||||
(no routes configured in config.yaml)
|
||||
[*] Checking internet connectivity ...
|
||||
[+] Internet reachable — VPN is safe
|
||||
[*] Verifying internet connectivity ...
|
||||
[+] Internet OK — proceeding with backup
|
||||
|
||||
[*] Step 2: Backing up towers ...
|
||||
|
||||
[home-gateway] (192.168.88.1) — backing up ...
|
||||
[FAIL] SSH connection failed: Error reading SSH protocol banner
|
||||
|
||||
[*] Step 3: Disconnecting VPN ...
|
||||
[*] Tearing down VPN ...
|
||||
closing CHILD_SA wisp-vpn{1} with SPIs c8225420_i (1028 bytes) 0739aab7_o (1045 bytes) and TS 152.53.192.33/32[udp/l2f] === 76.195.7.60/32[udp/l2f]
|
||||
sending DELETE for ESP CHILD_SA with SPI c8225420
|
||||
generating INFORMATIONAL_V1 request 1674779512 [ HASH D ]
|
||||
sending packet: from 152.53.192.33[500] to 76.195.7.60[500] (76 bytes)
|
||||
deleting IKE_SA wisp-vpn[1] between 152.53.192.33[152.53.192.33]...76.195.7.60[76.195.7.60]
|
||||
sending DELETE for IKE_SA wisp-vpn[1]
|
||||
generating INFORMATIONAL_V1 request 3552681913 [ HASH D ]
|
||||
sending packet: from 152.53.192.33[500] to 76.195.7.60[500] (92 bytes)
|
||||
IKE_SA [1] closed successfully
|
||||
[+] VPN disconnected
|
||||
|
||||
[*] Step 4: Cleaning up local temp files ...
|
||||
|
||||
╔══════════════════════════════════════════╗
|
||||
║ Summary: 0 OK, 1 Failed
|
||||
╚══════════════════════════════════════════╝
|
||||
✗ home-gateway (home) — SSH connection failed: Error reading SSH protocol banner
|
||||
=== Exit code: 1 ===
|
||||
=== Home Router Backup 2026-07-08 23:34:58 UTC ===
|
||||
╔══════════════════════════════════════════╗
|
||||
║ WISP Backup — 2026-07-08
|
||||
╚══════════════════════════════════════════╝
|
||||
|
||||
[*] Step 1: Connecting VPN ...
|
||||
[*] Bringing up L2TP/IPsec VPN to 76.195.7.60 ...
|
||||
[route] 76.195.7.60 via 152.53.192.1 (avoids ppp0 recursion)
|
||||
initiating Main Mode IKE_SA wisp-vpn[2] to 76.195.7.60
|
||||
generating ID_PROT request 0 [ SA V V V V V ]
|
||||
sending packet: from 152.53.192.33[500] to 76.195.7.60[500] (252 bytes)
|
||||
received packet: from 76.195.7.60[500] to 152.53.192.33[500] (164 bytes)
|
||||
parsed ID_PROT response 0 [ SA V V V V ]
|
||||
received NAT-T (RFC 3947) vendor ID
|
||||
received XAuth vendor ID
|
||||
received DPD vendor ID
|
||||
received FRAGMENTATION vendor ID
|
||||
selected proposal: IKE:AES_CBC_128/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_1024
|
||||
generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
|
||||
sending packet: from 152.53.192.33[500] to 76.195.7.60[500] (244 bytes)
|
||||
received packet: from 76.195.7.60[500] to 152.53.192.33[500] (236 bytes)
|
||||
parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
|
||||
generating ID_PROT request 0 [ ID HASH N(INITIAL_CONTACT) ]
|
||||
sending packet: from 152.53.192.33[500] to 76.195.7.60[500] (108 bytes)
|
||||
received packet: from 76.195.7.60[500] to 152.53.192.33[500] (76 bytes)
|
||||
parsed ID_PROT response 0 [ ID HASH ]
|
||||
IKE_SA wisp-vpn[2] established between 152.53.192.33[152.53.192.33]...76.195.7.60[76.195.7.60]
|
||||
scheduling reauthentication in 85828s
|
||||
maximum IKE_SA lifetime 86368s
|
||||
generating QUICK_MODE request 1842263490 [ HASH SA No KE ID ID ]
|
||||
sending packet: from 152.53.192.33[500] to 76.195.7.60[500] (316 bytes)
|
||||
received packet: from 76.195.7.60[500] to 152.53.192.33[500] (300 bytes)
|
||||
parsed QUICK_MODE response 1842263490 [ HASH SA No KE ID ID ]
|
||||
selected proposal: ESP:AES_CBC_128/HMAC_SHA1_96/MODP_1024/NO_EXT_SEQ
|
||||
CHILD_SA wisp-vpn{2} established with SPIs c3a88a35_i 0030d7ca_o and TS 152.53.192.33/32[udp/l2f] === 76.195.7.60/32[udp/l2f]
|
||||
generating QUICK_MODE request 1842263490 [ HASH ]
|
||||
sending packet: from 152.53.192.33[500] to 76.195.7.60[500] (60 bytes)
|
||||
connection 'wisp-vpn' established successfully
|
||||
[+] VPN connected! Interface: ppp0, IP: 192.168.88.104
|
||||
[*] Adding route to VPN peer's subnet via ppp0 ...
|
||||
[route] Added 192.168.88.0/24 via ppp0
|
||||
[*] Adding static routes for tower subnets ...
|
||||
(no routes configured in config.yaml)
|
||||
[*] Checking internet connectivity ...
|
||||
[+] Internet reachable — VPN is safe
|
||||
[*] Verifying internet connectivity ...
|
||||
[+] Internet OK — proceeding with backup
|
||||
|
||||
[*] Step 2: Backing up towers ...
|
||||
|
||||
[home-gateway] (10.77.0.2) — backing up ...
|
||||
Fetching config ...
|
||||
[s3] Uploaded → s3://mikrotik-ccr-backups/wisp-backups/configs/home/2026-07-08/home-gateway-2026-07-08.rsc.gz
|
||||
Fetching last 500 log lines ...
|
||||
[warn] Command exited 1:
|
||||
[s3] Uploaded → s3://mikrotik-ccr-backups/wisp-backups/logs/home/2026-07-08/home-gateway-2026-07-08.log.gz
|
||||
|
||||
[*] Step 3: Disconnecting VPN ...
|
||||
[*] Tearing down VPN ...
|
||||
closing CHILD_SA wisp-vpn{2} with SPIs c3a88a35_i (848 bytes) 0030d7ca_o (829 bytes) and TS 152.53.192.33/32[udp/l2f] === 76.195.7.60/32[udp/l2f]
|
||||
sending DELETE for ESP CHILD_SA with SPI c3a88a35
|
||||
generating INFORMATIONAL_V1 request 2340666817 [ HASH D ]
|
||||
sending packet: from 152.53.192.33[500] to 76.195.7.60[500] (76 bytes)
|
||||
deleting IKE_SA wisp-vpn[2] between 152.53.192.33[152.53.192.33]...76.195.7.60[76.195.7.60]
|
||||
sending DELETE for IKE_SA wisp-vpn[2]
|
||||
generating INFORMATIONAL_V1 request 257487867 [ HASH D ]
|
||||
sending packet: from 152.53.192.33[500] to 76.195.7.60[500] (92 bytes)
|
||||
IKE_SA [2] closed successfully
|
||||
[+] VPN disconnected
|
||||
|
||||
[*] Step 4: Cleaning up local temp files ...
|
||||
|
||||
╔══════════════════════════════════════════╗
|
||||
║ Summary: 1 OK, 0 Failed
|
||||
╚══════════════════════════════════════════╝
|
||||
✓ home-gateway (home) — config ✓ logs ✓
|
||||
=== Exit code: 0 ===
|
||||
Reference in New Issue
Block a user