softvisor/Infrastruktur-Monitoring-System
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

WP-40/41/42: dashboard, security hardening, deployment and operations docs

Browse Source 
Dashboard endpoint and page aggregating inventory, vulnerabilities, cluster
health, backups and recent jobs. Security headers (CSP, nosniff, DENY,
referrer policy), 1 MB body limit, configurable login rate limit, audit
steps in CI. Installer script, systemd unit, install/architecture docs.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
This commit is contained in:
Dennis Nemec
2026-09-02 23:26:01 +02:00
parent a89395ae18
commit 9234e1ba47
29 changed files with 851 additions and 21 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
ROADMAP.md
View File

@ -1,6 +1,6 @@
# SoftVisor Infrastructure Monitoring System – Roadmap
Status: v1.2 (2026-09-02) – Milestones 1 and 2 delivered, test instance on port 3333
Status: v1.5 (2026-09-02) – all five milestones delivered, test instance on port 3333
This document is derived from `CLAUDE.md`. It breaks the project into work packages (WPs),
fixes the technical decisions that are not dictated by `CLAUDE.md`, and lists the open
@ -301,8 +301,8 @@ WP-20, WP-21. Trivy is installed by the deploy script.
### Milestone 4 – Backup management (delivered 2026-09-02)
WP-30, WP-31, WP-32. Restore procedure in `docs/restore.md`.
### Milestone 5 – Hardening and release (planned)
WP-40, WP-41, WP-42.
### Milestone 5 – Hardening and release (delivered 2026-09-02)
WP-40, WP-41, WP-42. Open items: TOTP 2FA, dark mode, running as a non-root service user with a scoped sudoers file, upstream image tag check, backup failure mails.
---
@ -363,6 +363,6 @@ The server is reachable via `ssh softvisor` (as root). Findings from the inspect
| WP-30 | M4 | done | 2026-09-02; SMB via smbclient, FTP/FTPS via curl, credentials encrypted |
| WP-31 | M4 | done | 2026-09-02; sources: PVC hostpath, pg_dumpall, manifests, host dir; openssl encryption |
| WP-32 | M4 | done | 2026-09-02; upload verify, retention, records; docs/restore.md; failure mail not yet |
| WP-40 | M5 | todo | |
| WP-41 | M5 | todo | |
| WP-42 | M5 | todo | |
| WP-40 | M5 | done | 2026-09-02; dashboard with tiles for all areas; dark mode not done |
| WP-41 | M5 | done | 2026-09-02; security headers, CSP, body limit, audits in CI; TOTP 2FA and sudoers scoping not done |
| WP-42 | M5 | done | 2026-09-02; install.sh, systemd unit, docs/install.md, docs/architecture.md |