Prod service census — Young's 6-item list, ground truth (2026-10-18)
Prod service census — Young's 6-item list, ground truth (2026-10-18)
| # | Item | Verified state (Tam census) | Action |
|---|---|---|---|
| 1 | nginx (80/443, TLS) | live — 4 site files in sites-enabled, nginx -t clean | stays (vhost layer) |
| 2 | solos-docs.service :8091 docs.youngle.au | live, gated (public 401 = gate working) | moves into vhost youngle per plan |
| 3 | pulse-site.service :8092 pulse.youngle.au | live, public (200) | moves into vhost youngle per plan |
| 4 | "sol.service" opencode web :4090 sol.youngle.au | manual opencode serve --port 4090 (no unit drive — opencode-web unit already disabled), plus a SECOND manual instance respawned after first kill | DECOMMISSIONED: manual serves killed, opencode-web.service disabled + unit REMOVED, sol.youngle.au nginx vhost retired to /etc/nginx/sites-retired/, nginx reloaded (config test ✅). Verified: 4090 CLEAR, sol-vhost connect-refused as expected, docs (401-gate OK) + pulse (200) unaffected. |
| 5 | yukonit :8012 vhost | vhost file present, pre-stage placeholder (proxy target for tenant wave) | tenant stack lands here |
| 6 | tailscaled | already fully decommissioned (my 10-14 work): 0 packages (dpkg count 0), no /var/lib/tailscale, daemon inactive | nothing left to remove — verified end-to-end today |
Bonus find — one opencode headless service still running (no web port)
opencode serve --service (pid 455457, from Oct 14) binds loopback :49374 — the ANY-opencode A2A agent-port (documented in the Fleet archive: "opencode-as-host" — used by the old LAB↔prod agent calls, and named in docker-systems-prod-node.md's port-band note). Young's item 4 wording says "no longer require" the WEB — this headless engine is NOT the 4090 web and may be serving other lanes.
Left alive pending ruling (flagged to Min): is :49374 opencode --service still used by anything? If Young's "decommission it" applies to ALL opencode on prod, one more kill; if it's A2A-critical for a tunnel, keep. My probe found no ACTIVE consumer in the tunnel registry — recommend kill at next maintenance window unless claimed.
Effect
- Prod public faces = 2 (pulse public, docs gated) + yukonit placeholder as tenant pre-stage; admin surfaces reduced (sol.youngle.au web retired).
- One manual-run process class (undocumented
opencode serve) eliminated — future opencode runs on prod should be unit-driven or containerized (the tenancy rule).
🎯 Tam's Read: census complete — 4 of Young's 6 items were already/still-green, sol-web and tailscale are now genuinely gone (unit + vhost + listener all verified); the only open item is the ruling on the headless :49374 opencode service before the docker wave fills the box.
COMPLETION (2026-10-18, final ruling received from Young)
Young ruled total decommission. Executed + verified:
- headless 'opencode serve --service' (pid 455457, :49374) KILLED - its A2A-era listener gone
- Verified: ALL-OPENCODE-LISTENERS-CLEAR (no opencode listeners on prod), zero opencode processes
- Sites unaffected post-kill: docs 401-gate OK / pulse 200
- Unit + vhost + all listeners: prod opencode presence = ZERO (full decom)