softvisor/Infrastruktur-Monitoring-System
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

WP-40/41/42: dashboard, security hardening, deployment and operations docs

Browse Source 
Dashboard endpoint and page aggregating inventory, vulnerabilities, cluster
health, backups and recent jobs. Security headers (CSP, nosniff, DENY,
referrer policy), 1 MB body limit, configurable login rate limit, audit
steps in CI. Installer script, systemd unit, install/architecture docs.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
This commit is contained in:
Dennis Nemec
2026-09-02 23:26:01 +02:00
parent a89395ae18
commit 9234e1ba47
29 changed files with 851 additions and 21 deletions
Download Patch File Download Diff File Expand all files Collapse all files

19
deploy/monitoring.service Normal file
View File

@ -0,0 +1,19 @@
[Unit]
Description=SoftVisor Infrastructure Monitoring
After=network-online.target snap.microk8s.daemon-kubelite.service
Wants=network-online.target
[Service]
WorkingDirectory=/opt/monitoring
EnvironmentFile=/opt/monitoring/.env
ExecStart=/opt/monitoring/monitoring-server
Restart=on-failure
RestartSec=5
# The service manages apt and the cluster, so it runs as root; keep the rest tight.
NoNewPrivileges=false
ProtectSystem=false
PrivateTmp=true
UMask=0077
[Install]
WantedBy=multi-user.target