From 9bd48e08082513913b885514855552441b3d6322 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Torjus=20H=C3=A5kestad?= <torjus@usit.uio.no>
Date: Mon, 9 Feb 2026 22:41:47 +0100
Subject: [PATCH] monitoring: explicitly list valid HTTP status codes

Empty valid_status_codes defaults to 2xx only, not "any".
Explicitly list common status codes (2xx, 3xx, 4xx, 5xx) so
services returning 400/401 like ha and nzbget pass the probe.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
---
 services/monitoring/blackbox.nix | 17 ++++++++++++++++-
 1 file changed, 16 insertions(+), 1 deletion(-)

diff --git a/services/monitoring/blackbox.nix b/services/monitoring/blackbox.nix
index bcc7308..cce4517 100644
--- a/services/monitoring/blackbox.nix
+++ b/services/monitoring/blackbox.nix
@@ -39,7 +39,22 @@ in
           http:
             fail_if_not_ssl: true
             preferred_ip_protocol: ip4
-            valid_status_codes: []  # Accept any status, we only care about TLS
+            valid_status_codes:
+              - 200
+              - 204
+              - 301
+              - 302
+              - 303
+              - 307
+              - 308
+              - 400
+              - 401
+              - 403
+              - 404
+              - 405
+              - 500
+              - 502
+              - 503
     '';
   };