tiennm99 e1122eec6d docs: add Coolify SSH session spam runbook ...

Document a Coolify-specific noise pattern observed in the journal
pipeline: ~300 root sessions/hour from the Coolify host's connection
checks. Verified against coollabsio/coolify v4.x source (Kernel.php,
ServerManagerJob, ServerCheckJob, SshMultiplexingHelper).

Includes:
- exact call flow and skip conditions per Coolify source
- triage commands and key-fingerprint matcher
- two mitigations: drop at Alloy (loki.process stage.drop) or enable
  Sentinel server-side to bypass the SSH polling entirely
- framing: Coolify-only, base setup unchanged

2026-04-26 09:21:11 +07:00

..

known-noise-coolify-ssh-sessions.md

docs: add Coolify SSH session spam runbook

2026-04-26 09:21:11 +07:00