From b37ed956f62ad2081624180d2a950938c848bea5 Mon Sep 17 00:00:00 2001
From: juanjo <desarrollo@faccsa.es>
Date: Sat, 5 Sep 2026 23:32:42 +0200
Subject: [PATCH] 05-sep: [superguardado] versiono vigilancia de salud del VPS
 (anti-minero cron + revision completa)

---
 vps_opencode_bot/README.md          |  13 +++++++++++++
 vps_opencode_bot/vps_check.sh       | Bin 0 -> 4220 bytes
 vps_opencode_bot/vps_miner_watch.sh | Bin 0 -> 1564 bytes
 3 files changed, 13 insertions(+)
 create mode 100644 vps_opencode_bot/vps_check.sh
 create mode 100644 vps_opencode_bot/vps_miner_watch.sh

diff --git a/vps_opencode_bot/README.md b/vps_opencode_bot/README.md
index a612a06..5135a1f 100644
--- a/vps_opencode_bot/README.md
+++ b/vps_opencode_bot/README.md
@@ -48,3 +48,16 @@ como documentos adjuntos (se leen de `state.metadata.files` del historial).
 API comprobada contra opencode 1.17.15: POST /session, POST /session/:id/message
 (body `parts` + `model` con `providerID`/`modelID`), GET /session/:id/message,
 GET /config/providers, GET /global/health, GET /project.
+
+## Vigilancia de salud del VPS (05-09-2026)
+
+Tras un incidente de criptomineros en el VPS se instaló vigilancia automática:
+
+- `vps_miner_watch.sh` — cron `*/10 * * * *`: detecta y mata procesos "rojos"
+  (ejecutable en /tmp, memfd o deleted, CPU > 80 %). Log: `/root/vps_miner.log`.
+- `vps_check.sh` — cron `17 */4 * * *`: revisión completa (carga, memoria, disco,
+  top CPU, mineros, servicios opencode/docker). Log: `/root/vps_health.log`.
+
+Ambos viven en `/usr/local/bin/` del VPS. Desplegar de nuevo copiándolos ahí
+y (re)instalando las líneas de cron correspondientes.
+
diff --git a/vps_opencode_bot/vps_check.sh b/vps_opencode_bot/vps_check.sh
new file mode 100644
index 0000000000000000000000000000000000000000..e7270ebe36e9df27531232b2d81e18194ecdbd4f
GIT binary patch
literal 4220
zcmb7{=}sJ15QXb^q`X5LW5Zy^14xk^9EflnVH7V>a5hDjH8k6ZSr9W|TbSp|3*=ey
zGs*dGP0j6Q1{|x^eY@{c%c;7jZvXqwUAto~+p~`KQ`@$o9ov`oh26EnF6>m_Z>?0{
zfu1M!FpU@Xm;GsfYsOFNztHNT?tx?!wy&O{wQZ!fudj~o_PD=DBV9XJpU>>7{l$K?
zUA2qSaF(Prq$g~6Dmln1^+Zmo=b0U)_qKIY@3Q(&)7mm=A4pH3k&b!?dh6+}uMwo9
z=fK|U4qLIfkoP0aJJs8sW}WG3%Sz_AboVr;XNT%po><11BZo!!kJe#oPc<LZ==1(k
zE%<yVZ+})Bwm0<tA+5tcuq-FCz@wA=U^UY59z^-d7!idd^$#@{y9<4ztEI1ju94m%
zmPFEZA4@`4qep5BMWB<`5s^BUNORp?twcU(^d%MCs@O)%7RO$0+NynJE1HFefqK{$
zc!Oicx25<Hk*;nu>{~;ZOV|=}ukDpG@(0_o=ejnef#~B0QpmgZ7#Xa2uG!m~^?#9I
z&1@}<ywKQh(vH+Edn&n)q-!N*M2vZS-)ioTy|nMOLtZ5-!6D`%>!tdC)yRDE*Y`_d
z3--Y7+3(iWvzMOilzaBf*7bamp1YdWNIEamv(Svlw!-ElldF(q*HMgn=4Q@rN=toL
z(Ua$%D;wBJL<qaDYxDIUKlV*W_!p8;m2s&416}kV>-kZ)=ONxTZS5AxFvw7OPkdWx
zc2)Ae_GCz96v<>jM;Sr?>MfE-lF5FrXFHh=Yn-W#y;}DMPDJ)WvguU1V1;w_vV)hk
zy3~E1-W-=@jRc0vvJU=o8BMk58YxE2$;xSj9wk3+#-APIEa~hKOkCfep)*H!OS!zA
zGSst}=)O~Iz>jzlH+T?#LBzeKbsym|_vW!i;ia(A^8}vt91lrd$?mI?kf|-nfuTyh
z&5vcbw1QQ0nz3e^8o{><wS8gQ)#bU5d@dLf<dHXDS&NpcEzDg=JBKxJF%dx~Yai>n
zKD(7-dM3?F%Bx%@{cAX>n*NPnd*hkp6`boML<SF+5|4dax7W|IW{-P05SBSkpX>cn
zg=Mj9DIuGA)~$6`4%;tMe4{pIAHW=IR%c*0%l<#c@d-bOE*!=BH@ZKjoqHXdYD5Og
z8PBA)GL-yjDl5pujTHIFNF@76Z#;4vGc$X^o`|Qn6JKAZj3h5c8d=oW10lXC<Y*iA
ztt?*G+tq}FJqrs(A0`Svu{M01(;D92D92zYm~T2a^G?j16|$@B&OEBhYui#Ks#clU
zouCx^)ORU8c;;VMsw7d38Hu`F%FF$P@#SP!<LkQYUrRn`-U!R;UQbuf&%*$zCqj~4
zP87e^lU?oJAZs=w6n0-%y$T|$smSG1fuH6AnJl%MWvn`s1=YUlH!?U$7WPfL$&l%4
zuu-W3yaz{;@l>ebd@MYXPqh8Suh%Oh=cmkfkzJ818Qqm}hRs5PvpMx3xR(9tr^)Ks
z4KH#Pp@#Y?(_<cZR5Q^lzgNBbxwT#|52cOTfd;n(eq;}@-_c1G^wTfMPLGaMFWEcO
z^~KNFo+U$NDyN=BN&BFidf1bWQOYJx5lwl;cSp>DCUR?-kei)X4UL885&8HIuS&^r
zuQ-9DGtS>f@|v@9Q#v`H`d<%z&l;in6BT@=Rt`VuF&6Pp26FgaPW-QrVBIhwj_>3e
zOtm0JxYUVsSABl^%<r6Kt`f&NM&&IS1$XDn=*uonNAHD)N8u(M1Iv7#CVIi|SV+!d
zKX%WHhu~e#fsxCtge<w*R!om7d&QY4WO+sCjw?dwWB<&q71bH_`rv+H&mGy?y;dKv
z?<SVd2+i4+{(5(WJ^wPH%l~5VWi_#I?uW(Zr~W>2ZU#eLY2IeyJTja0+mp!MmsIfP
ouAY!#2H2g;qn+2GH%oe`b^IZNn)7WhRp8k(a<AK&aq|<*e?d`P!~g&Q

literal 0
HcmV?d00001

diff --git a/vps_opencode_bot/vps_miner_watch.sh b/vps_opencode_bot/vps_miner_watch.sh
new file mode 100644
index 0000000000000000000000000000000000000000..f1d0398319e6a5060efd462a57aba60a30acbf18
GIT binary patch
literal 1564
zcmbW1+fGwK6o&t66W?LWAw5Xhl*B}VVxm!FLevYrGRBkwwL%Y}rAUP5^96hsFV*i~
z(}6-rJY;9~%sS2b*J*zJT+}_4+Eq`3*xMTGlkVz{7FB4f5%fp(L%y$L&ZlZ?q7GWC
zp<C#?zUc?rSCTyq)rE6}U01dnLUpj*V-;#@jeojzBTl~4l2Pb(uo+`BhGW~$an7i!
zNWZWO)_{MBZ6C`O&V6`&9pI-3pL@_ptO?7!4qV$j)f>HIZzHwm8qpNmLE4oOmEm`Y
zth^-)t5{jnh<5Z^FVy-6i&Jvf3sjD7AMZxi;OzK&L5)B<(g~b4{4SZ;<m|lKXTg_p
z(9)8sm$x|I105n=08h?kiB7t=oLMcPv94`&oS!NC0AELZwafcmtua#HwKQjE4;h1T
zRQPJ_DYKJ6a1wT#V4l}3@i7K#sk+Yj=dMfC_y+A*c4wMH@VgR8)79+Es5&>Ev0UFi
z(O9Dna(CT??+ohC=-h2>?#yWaHum~lza`Jt`z_&3-I>u(qoTQI%{4yv+|7Lb5Aq?^
zPd(9Q9^DBI>g&F0MICcrxdW1<ACiYmq<IxR(KGt_rC#Z4bdc*kK~jafkJdIZd#~v+
zbG*UnB03=FuE+Ehde3s-7?1C51>KDEhv?-AQ{ef{cB!ZRuK2C6ZIycZU2qRp@VTt#
zoR;-=)^S&_k}Xn)JN7(7X@bmgB#FAfetvfHOVWw%NxFIB9NR{`RgTe7Z1W{-Y3diQ
zp+BT!JwwjyqnTd9V%yv2Ek}QVt<RqDK}5WT%~oXHuV4e-e3UDf5w&>tGGb@>oaMLk
gII7kl|Lb8tfRm)odwz48dO#)Z*_r5t&05gE0W<dM;{X5v

literal 0
HcmV?d00001