I haven’t used these graphs in a while, as I normally have other means of monitoring servers. However I just dropped by to look at the page, and all the graphs are missing. Just a blank page, for daily, weekly, monthly etc.
The rrd directory has some suspiciously empty files. Don’t know if this is normal or not
/usr/local/hestia/web/rrd $: ls -hal
total 36K
drwxr-xr-x 9 root root 4.0K Jul 20 2021 .
drwxrwxr-x 34 root root 4.0K Aug 12 04:54 ..
-rw-r--r-- 1 root root 0 Aug 24 17:55 daily.rrd
drwxr-xr-x 2 root root 4.0K Jul 20 2021 db
drwxr-xr-x 2 root root 4.0K Jul 20 2021 la
drwxr-xr-x 2 root root 4.0K Jul 20 2021 mail
drwxr-xr-x 2 root root 4.0K Jul 20 2021 mem
-rw-r--r-- 1 root root 0 Aug 24 13:55 monthly.rrd
drwxr-xr-x 2 root root 4.0K Apr 8 2022 net
drwxr-xr-x 2 root root 4.0K Jul 20 2021 ssh
drwxr-xr-x 2 root root 4.0K Jul 20 2021 web
-rw-r--r-- 1 root root 0 Aug 24 17:55 weekly.rrd
-rw-r--r-- 1 root root 0 Aug 24 07:55 yearly.rrd
v-list-sys-rrd
TYPE VAL_1 VAL_2 VAL_3 TIME DATE
---- ----- ----- ----- ---- ----
LA 8 1 -nan 2023-08-24 00:05:00
MEM 1 4 5 2023-08-24 00:05:00
ETH0 4 6 -nan 2023-08-24 00:05:00
TAILSCALE0 0 0 -nan 2023-08-24 00:05:00
APACHE2 2 -nan -nan 2023-08-24 00:05:00
NGINX 6 -nan -nan 2023-08-24 00:05:00
MAIL 6 -nan -nan 2023-08-24 00:05:00
MYSQL_LOCALHOST 3 0 -nan 2023-08-24 00:05:00
SSH 0 -nan -nan 2023-08-24 00:05:00
Anyone else experiencing this? I looked at two servers, and both seemed to be affected.
Have now tried a third server. Same thing.
/usr/local/hestia/log/nginx-access.log has a load of 401s
11.20.57.17 - - [25/Aug/2023:10:50:56 +0800] GET /list/rrd/?period=monthly HTTP/2.0 "401" 574 "https://hestia.abc.com.
ph:1234/list/rrd/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.3
6" "-"
11.20.57.17 - bc [25/Aug/2023:10:50:56 +0800] GET /list/rrd/?period=monthly HTTP/2.0 "200" 3565 "https://node.bcms.co
m.ph:9090/list/rrd/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537
.36" "-"
Tried in Chrome browser and Brave Browser without success. However when I used an incognito browser window, the graphs appeared. Probably the last time I looked at this page was with the old style graphs – the js style ones were new to me – so I’m guessing its something to do with that.
That looks like it. Good find! I use basic auth on hestia control panel to stop brute forcing.
I’ll try a few things to bypass it, and report back here.
Also, strange that it works in a Private browsing/incognito window. They must do something differently.