warden / service

Vigil

A public site. If it is down, visitors get nothing.

on this machine · pm2 vigil · /home/ubuntu/vigil

may act

What it checks600 looks kept

What it may do here

This is the whole list — there is nothing else Warden is able to do.

“Restart it if it is just stopped. Ask me before anything that does not undo itself. Three minutes between acts, not ten: this is the service the console lets visitors break on purpose, and it is put back more often than anything else here.” At most 3 actions on one problem, and no acting twice within 3 minutes.

whatwhat it doesyour rule
load the pageAsks a URL and reports the status and how long it took. Reads nothing else.may
check the certificateReads the TLS certificate a URL is served with and reports how many days are left on it.asks first
look up the nameAsks DNS what a URL's host name points at, so a name that stopped resolving is caught by name.asks first
ask what answersFetches a URL without following it off-site and reports what answered: the status, the server, whether it is a proxy's error page.asks first
list the processesLists the processes on the machine with their status, uptime and restart count.may
read the logReads the last lines of a process's output and error logs.may
read recent commitsReads the recent commits in the checkout — what landed, when, and by whom.may
read one commitReads one commit's diff, to see what a change actually did.may
read a fileReads one file from inside the service's checkout. It cannot read outside it.may
search the codeSearches the checkout for a string, to find where something is configured.may
check disk spaceReads how much disk is left, because a full disk looks like everything else.may
restart the processRestarts the process. Undoes itself: the same code comes back up.may
start the processStarts the process when it is stopped. Undoes itself.may
run the testsRuns the test suite in the checkout and reads the result. Changes nothing.may
call the deploy hookPOSTs the deploy or restart hook the owner gave this service, which redeploys or restarts it. Undoes itself: the same code comes back.asks first
roll back to the last deployChecks out the previous commit and restarts. This changes which code is running.asks first
run a migrationWould run database migrations. Refused by name — a migration is not undone by a restart.never, whatever your rules say
delete dataWould delete data. Refused by name. There is no incident this is the answer to.never, whatever your rules say
rotate a secretWould rotate a credential. Refused by name — it breaks everything still holding the old one.never, whatever your rules say
destroy infrastructureWould destroy infrastructure. Refused by name, and listed here so you can see it is.never, whatever your rules say

What you have told it

What has gone wrong32 problems · 30 fixed without a human

Vigil — Warden