Production hardening: host-aware install, ownership contracts, firewall safety

docs/12-operations-and-troubleshooting.md

@@ -51,6 +51,30 @@ nft list ruleset
 cat /etc/hysteria/post-install.env
 ```
 
+Проверка логов через journald:
+```bash
+journalctl -u hysteria-server -n 100 --no-pager
+journalctl -u hy2xs-admin -n 100 --no-pager
+```
+
+## Auth endpoint fail checklist
+
+```bash
+systemctl status hysteria-server
+systemctl status hy2xs-admin
+
+sudo -u hy2xs-admin test -r /etc/hysteria/config.yaml
+
+curl -sS -X POST \
+  -H 'Content-Type: application/json' \
+  --data '{"addr":"127.0.0.1:12345","auth":"invalid","tx":"0"}' \
+  http://127.0.0.1:8080/hui/hysteria2/auth
+
+curl -sS \
+  -H "Authorization: <trafficStatsSecret>" \
+  http://127.0.0.1:36712/online
+```
+
 ## Типовые проблемы
 
 ### Сервер установился, но UI не работает