Dashboard

Open the dashboard or read its current snapshot JSON.

Publication contract

wild.loca.zone is a static nginx surface. It has no application port and needs no long-running dashboard process. Its root is /home/loca/dev/wild/site/:

• index.html: the self-contained output of renderHtml.
• snapshot.json: the pretty-printed output of renderJson.

The user-level zonescope.timer runs /home/loca/dev/wild/scripts/publish.sh every 10 minutes. A completed scan stages both artifacts and moves them into place; scan exit code 1 still publishes findings, while a crash-level exit code 2 does not replace the dashboard artifacts.

Public by operator decision

The dashboard is deliberately public by operator decision on 2026-09-03. There is no Authelia gate. That choice makes the status surface easy to inspect, but it also exposes operational detail: hostnames, upstream port mappings, configured roots, gate state, certificate state, current outages, and finding evidence. Treat the published port map and failure state as internet-visible information.

Reading the page

• Header: scan hostname and generation timestamp, followed by vhost, listener, unit, and container totals. The count pills summarize errors, warnings, and info.
• Severity chips: click Errors, Warnings, or Info to toggle that class of finding. The pressed state and dimmed chip show whether a class is enabled.
• Vhost search: enter a hostname, upstream port, or related finding code. Matching is case-insensitive and filters the vhost rows.
• Vhost row: read TLS days, HTTP status, configured and observed gate state, upstream-port badges, and static root. A green port badge has a listener; a red badge does not.
• Expanded vhost: click the row to reveal raw upstream records, the TLS probe, the HTTP probe, and findings associated with the host or its ports.

Certificate-lifetime sparkline

The certificate-lifetime sparkline summarizes the current TLS probe set; it is not a historical time series. Every finite daysLeft value becomes one bar, scaled against the largest current value. Zero or expired lifetime is red, fewer than 14 days is amber, and 14 days or more is blue. Hover text identifies the host and days; the adjacent label shows the current minimum-to-maximum range. When no certificate lifetime is available, the panel says no data.

The complete Snapshot is also embedded in index.html as the snap application/JSON element, while snapshot.json is the direct machine-readable endpoint.