Skip to main content
POST
Repair named drifted host security controls

Authorizations

Authorization
string
header
required

OIDC/JWKS bearer token. Self-hosted defaults to Pocket ID; SaaS uses Auth0 through the edge. PocketBase JWT is legacy migration compatibility only.

Path Parameters

serverId
string
required

Canonical server runtime ID

Body

application/json
controls
enum<string>[]
required
Required array length: 1 - 12 elements
Available options:
firewall.default_inbound,
ssh.password_authentication,
ssh.root_login,
ssh.port,
bruteforce.fail2ban,
updates.unattended_upgrades,
updates.pending_security,
updates.reboot_required,
kernel.sysctl,
exposure.listeners,
exposure.published_ports,
tls.certificate_expiry

Response

The repair was admitted and is running

data
object
meta
object