#!/bin/sh
# Audit: code execution control (docs/Контроль_выполнения_кода)
set -eu

REPORT="${REPORT:-/reports/audit.log}"

{
  echo ""
  echo "=== Code execution control audit $(date -Iseconds) ==="
  nginx -T 2>/dev/null | grep -E 'fastcgi_pass|uwsgi_pass|scgi_pass|grpc_pass|perl|js_import|internal|^\s*root\s|alias' || true
  echo "--- SCRIPT_FILENAME ---"
  nginx -T 2>/dev/null | grep SCRIPT_FILENAME || echo "(no fastcgi)"
} >> "$REPORT"

echo "Code control audit appended -> $REPORT"