health-check.sh: only check last 60 seconds of autossh logs for tunnel failures to avoid false positives from old log entries

health-check.sh

@@ -121,7 +121,7 @@ check_spoke() {
         ok "autossh container running ($autossh_container)"
 
         local logs
-        logs=$(docker logs "$autossh_container" 2>&1 | tail -20 || true)
+        logs=$(docker logs "$autossh_container" --since 60s 2>&1 || true)
         if echo "$logs" | grep -q "remote port forwarding failed"; then
             fail "Tunnel reports port forwarding failed — check hub authorized_keys"
         else
@@ -206,7 +206,7 @@ check_hub() {
             fail "rclone remote [${spoke_name}-remote] not found in rclone.conf"
         fi
 
-        if crontab -u "$(basename "$HUB_HOME")" -l 2>/dev/null | grep -q "${spoke_name}-remote:"; then
+        if crontab -u "$(basename "$HUB_HOME")" -l 2>/dev/null | grep -qE "${spoke_name}-remote:|mount-${spoke_name}"; then
             ok "Auto-mount crontab entry present"
         else
             warn "No auto-mount crontab entry for $spoke_name"

hub/onboard-spoke.sh

@@ -230,8 +230,15 @@ echo "${SPOKE_NAME} ${TUNNEL_PORT} ${KEY_PATH} ${MOUNT_POINT}" >> "$REGISTRY"
 info "$SPOKE_NAME registered."
 
 header "Setting Up Auto-Mount"
-MOUNT_CMD="/usr/bin/rclone mount ${SPOKE_NAME}-remote: ${MOUNT_POINT} --config ${HOME}/.config/rclone/rclone.conf --vfs-cache-mode writes --allow-other --allow-non-empty --daemon"
-CRON_ENTRY="@reboot ${MOUNT_CMD}"
+MOUNT_SCRIPT="${HOME}/mount-${SPOKE_NAME}.sh"
+cat > "$MOUNT_SCRIPT" << MOUNTEOF
+#!/usr/bin/env bash
+sleep 90
+/usr/bin/rclone mount ${SPOKE_NAME}-remote: ${MOUNT_POINT} --config ${HOME}/.config/rclone/rclone.conf --vfs-cache-mode writes --allow-other --allow-non-empty --daemon
+MOUNTEOF
+chmod +x "$MOUNT_SCRIPT"
+
+CRON_ENTRY="@reboot $MOUNT_SCRIPT >> ${HOME}/rclone-${SPOKE_NAME}.log 2>&1"
 EXISTING=$(crontab -l 2>/dev/null || true)
 if echo "$EXISTING" | grep -qF "${SPOKE_NAME}-remote:"; then
     warn "Crontab entry for ${SPOKE_NAME}-remote already exists, skipping."
@@ -245,7 +252,7 @@ else
 fi
 info "Starting mount now..."
 mkdir -p "$MOUNT_POINT"
-eval "$MOUNT_CMD" 2>/dev/null && info "Mounted ${SPOKE_NAME} at ${MOUNT_POINT}." || warn "Mount failed — will retry on next reboot."
+/usr/bin/rclone mount ${SPOKE_NAME}-remote: ${MOUNT_POINT} --config ${HOME}/.config/rclone/rclone.conf --vfs-cache-mode writes --allow-other --allow-non-empty --daemon 2>/dev/null && info "Mounted ${SPOKE_NAME} at ${MOUNT_POINT}." || warn "Mount failed — will retry on next reboot."
 
 header "Onboarding Complete"
 echo -e "  Spoke:       ${GREEN}$SPOKE_NAME${NC}"