# Command: `netdata:audit 5912`

**Description**: Audit and harden Netdata installations across the fleet
**Status**: completed
**Started**: 2026-08-09 20:36:53 | **Ended**: 2026-08-09 20:36:59 | **Duration**: 6s
**Jobs**: 1 dispatched / 1 completed / 0 failed

---

## Command Output

20:36:53 [INFO] Lock acquired for command: netdata:audit

20:36:53 [INFO] 🔍 Netdata Security Audit

20:36:53 [INFO] Inbound access: none (children stream out to the parent)

20:36:53 [INFO] Mode: AUDIT + FIX

20:36:53 [INFO] Auditing 1 server(s)...

20:36:53 [INFO] Running audit job for: PublicCloud 1 (ID: 5912)

20:36:59 [INFO] ✅ Dispatched 1/1 audit job(s)

20:36:59 [INFO] 🔧 Hardening will be applied to exposed servers

20:36:59 [INFO] Lock released for netdata:audit

---

## Jobs (1)

### Job #6a78e4e54faadec7a10a0c53 -- Completed -- N/A
**Started**: 2026-08-09 20:36:53 | **Duration**: 5s

<details><summary>All output (21 lines)</summary>

- [INFO] 🔍 Auditing Netdata on: PublicCloud 1 (ID: 5912)
- [INFO] Connecting via SSH (persistent key)...
- [INFO] Collecting Netdata status...
- [INFO] Netdata installed: Yes
- [INFO] Netdata running: Yes
- [INFO] Collecting Netdata config...
- [INFO] Bind address: 127.0.0.1
- [INFO] Registry enabled: No
- [INFO] Checking RunCloud firewall rules...
- [INFO] Netdata firewall rules: 0
- [SUCCESS] Netdata exposed to internet: ✅ No
- [INFO] Updated existing inventory record
- [INFO] 🔧 Applying config...
- [INFO] Reconciling Netdata config (node: kokos-publiccloud-1-5912)...
- [SUCCESS] ✅ Created config backup: /etc/netdata/netdata.conf.bak
- [SUCCESS] ✅ Updated existing bind to directive to 127.0.0.1
- [SUCCESS] ✅ Updated registry enabled to no
- [SUCCESS] ✅ Updated \[global\] hostname to kokos-publiccloud-1-5912
- [SUCCESS] ✅ Wrote stream.conf — streaming to 159.195.73.18:19999:SSL
- [SUCCESS] ✅ Netdata restarted successfully
- [SUCCESS] ✅ Not exposed — firewall rules left untouched

</details>

---

*Exported at 2026-08-17T03:10:43+00:00*
