ci: diagnose site zone endpoint host/DNS/cert

Author: nichu42

.github/workflows/diag-site.yml

@@ -0,0 +1,36 @@
+name: Diagnose site zone endpoint
+
+on:
+  workflow_dispatch:
+
+jobs:
+  diagnose:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Identify site endpoint host + DNS
+        env:
+          ENDPOINT: ${{ secrets.HOMEPAGE_BUNNY_S3_ENDPOINT }}
+        run: |
+          HOST=$(echo "$ENDPOINT" | sed -E 's#^https?://##; s#[/:].*##')
+          echo "Host visible: ${HOST}  (length: ${#HOST})"
+          echo "--- getent attempts ---"
+          for attempt in 1 2 3 4 5; do
+            IP=$(getent ahostsv4 "$HOST" 2>/dev/null | awk '{print $1}' | sort -u | head -1)
+            echo "attempt $attempt: ${IP:-FAILED}"
+            [ -n "$IP" ] && break
+            sleep 2
+          done
+          echo "--- curl -v to endpoint ---"
+          timeout 30 curl -sv --max-time 25 "$ENDPOINT/" 2>&1 | grep -E "Connected|subjectAltName|expire date|Host:|HTTP/" || echo "curl FAILED"
+      - name: Compare with share zone endpoint
+        env:
+          SHARE_ENDPOINT: ${{ secrets.BUNNY_S3_ENDPOINT }}
+        run: |
+          SHOST=$(echo "$SHARE_ENDPOINT" | sed -E 's#^https?://##; s#[/:].*##')
+          echo "Share host: ${SHOST}"
+          for attempt in 1 2 3; do
+            IP=$(getent ahostsv4 "$SHOST" 2>/dev/null | awk '{print $1}' | sort -u | head -1)
+            echo "share attempt $attempt: ${IP:-FAILED}"
+            [ -n "$IP" ] && break
+            sleep 1
+          done