Demo 1 — nginx config drift

A production nginx config is manually edited on the listen port → triggers a range constraint, a remediation hint, and a key-level self-healing rollback. Reuses the examples/mydsl-parser plugin to also demonstrate custom parser support.

What it demonstrates

• Pluggable parser (--format mydsl, no built-in nginx parser needed)
• Constraint inference: server[0].listen 8080 → 99999 violates range [1, 65535]
• G4 remediation hint: expected value + rollback command + git/基线 provenance
• G1 precise rollback: after cfgdrift remediate --apply, re-diff shows no drift

Run it

bash docs/gallery/nginx/run.sh

Files & expected output

The demo source lives in the repository: docs/gallery/nginx/ — see its README.md for the full scenario walkthrough and expected_output.txt for the acceptance output.