set -euo pipefail
cd /opt/infisical
echo '== ps =='
docker compose -f docker-compose.prod.yml ps
echo '== ports/listeners =='
ss -ltnp | grep -E '8088|18080' || true
echo '== app logs tail =='
docker logs --tail 60 infisical-app 2>&1 | sed -E 's/(token|secret|password|key)=([^ ]+)/\1=[REDACTED]/Ig' || true
echo '== direct app 18080 attempts =='
for i in $(seq 1 10); do echo "try=$i"; curl -v --max-time 5 http://127.0.0.1:18080/api/status 2>&1 | tail -20 || true; sleep 2; done
echo '== proxy service =='
systemctl status infisical-wsl-proxy.service --no-pager -l || true
journalctl -u infisical-wsl-proxy.service -n 40 --no-pager || true