watchdog: mac2 set NOAUTH (probe+alert only) until key authorized — stop knocking on locked box

ed31140783fda7a26d9d57c5dc7b9d9d0fbed0e6 · 2026-08-17 11:22:51 -0700 · steve

Files touched

M data/latest.json
M watchdog.sh

Diff

commit ed31140783fda7a26d9d57c5dc7b9d9d0fbed0e6
Author: steve <steve@designerwallcoverings.com>
Date:   Mon Aug 17 11:22:51 2026 -0700

    watchdog: mac2 set NOAUTH (probe+alert only) until key authorized — stop knocking on locked box
---
 data/latest.json | 2 +-
 watchdog.sh      | 7 +++++--
 2 files changed, 6 insertions(+), 3 deletions(-)

diff --git a/data/latest.json b/data/latest.json
index 2aa2d5c..fa986fe 100644
--- a/data/latest.json
+++ b/data/latest.json
@@ -1 +1 @@
-{"generated_at":"2026-08-17T18:16:44Z","verdict":"WARN","status":"WARN","serving":2,"expected":3,"self_up":1,"down":"mac2","healed":"","headline":"WARN: exo cluster 2/3 serving | down: mac2"}
\ No newline at end of file
+{"generated_at":"2026-08-17T18:22:51Z","verdict":"WARN","status":"WARN","serving":2,"expected":3,"self_up":1,"down":"mac2","healed":"","headline":"WARN: exo cluster 2/3 serving | down: mac2"}
\ No newline at end of file
diff --git a/watchdog.sh b/watchdog.sh
index c9e1b8b..b966f33 100755
--- a/watchdog.sh
+++ b/watchdog.sh
@@ -16,11 +16,12 @@ ALERTS="$DATA/alerts.log"
 PORT=52415
 mkdir -p "$DATA"
 
-# Node table:  name | host | ssh_target(or LOCAL)
+# Node table:  name | host | ssh_target(LOCAL | user@host | NOAUTH)
+# NOAUTH = do NOT ssh this node (key not authorized / avoid touching it); probe+alert only.
 NODES=(
   "macstudio3|127.0.0.1|LOCAL"
   "mac1|192.168.1.133|steve@192.168.1.133"
-  "mac2|192.168.1.54|steve@192.168.1.54"
+  "mac2|192.168.1.54|NOAUTH"
 )
 EXPECTED=${#NODES[@]}
 
@@ -44,6 +45,8 @@ for row in "${NODES[@]}"; do
   if [ "$tgt" = "LOCAL" ]; then
     launchctl kickstart -k "gui/$(id -u)/com.steve.exo-keepalive" 2>/dev/null
     healed+=("$name(local-kick)"); notes+=("$name exo was down -> local exo-keepalive kicked")
+  elif [ "$tgt" = "NOAUTH" ]; then
+    down+=("$name"); notes+=("$name exo down — ssh heal DISABLED (key not authorized yet); probe+alert only, NOT touching this box")
   elif pings "$host"; then
     # host up; try ssh heal (BatchMode so it fails fast if key not authorized)
     rc=$(ssh -o BatchMode=yes -o ConnectTimeout=6 -o StrictHostKeyChecking=accept-new "$tgt" "$REMOTE_HEAL" >/dev/null 2>&1; echo $?)

← 5081ca1 add harden-peer.sh: per-node exo-keepalive + pmset autoresta · back to Exo Cluster Watchdog · auto-data-snapshot: 2026-08-17T11:27:07 (1 data files) — dat 1c93772 →