#!/bin/bash

OUT="docker_ssh_diag_$(date +%Y%m%d_%H%M%S).log"

echo "=== SYSTEM INFO ===" >> $OUT
uname -a >> $OUT
cat /etc/debian_version >> $OUT 2>/dev/null

echo -e "\n=== USER INFO ===" >> $OUT
id >> $OUT

echo -e "\n=== NETWORK INTERFACES ===" >> $OUT
ip a >> $OUT

echo -e "\n=== ROUTING TABLE ===" >> $OUT
ip r >> $OUT

echo -e "\n=== LISTENING PORTS ===" >> $OUT
ss -tulpn >> $OUT

echo -e "\n=== SSH SERVICE STATUS ===" >> $OUT
systemctl status ssh >> $OUT 2>&1

echo -e "\n=== SSH CONFIG ===" >> $OUT
cat /etc/ssh/sshd_config >> $OUT 2>/dev/null

echo -e "\n=== IPTABLES (FILTER) ===" >> $OUT
iptables -L -n -v >> $OUT 2>&1

echo -e "\n=== IPTABLES (NAT) ===" >> $OUT
iptables -t nat -L -n -v >> $OUT 2>&1

echo -e "\n=== NFTABLES RULESET ===" >> $OUT
nft list ruleset >> $OUT 2>&1

echo -e "\n=== DOCKER INFO ===" >> $OUT
docker info >> $OUT 2>&1

echo -e "\n=== DOCKER NETWORKS ===" >> $OUT
docker network ls >> $OUT 2>&1
docker network inspect bridge >> $OUT 2>&1

echo -e "\n=== ALTERNATIVES (iptables) ===" >> $OUT
update-alternatives --display iptables >> $OUT 2>&1

echo -e "\n=== JOURNAL LOGS (SSH) ===" >> $OUT
journalctl -u ssh --no-pager -n 200 >> $OUT 2>&1

echo -e "\n=== JOURNAL LOGS (NETWORK) ===" >> $OUT
journalctl -u NetworkManager --no-pager -n 200 >> $OUT 2>&1

echo -e "\n=== DONE ===" >> $OUT

echo "Готово. Лог сохранён в файл: $OUT"