PapaTramp/security-alert-center
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

docs: URL sac.kalinamall.ru во всех руководствах и примерах конфигов

Browse Source
This commit is contained in:
PTah
2026-05-26 20:30:10 +10:00
parent 9203af90d5
commit 69547d83bc
6 changed files with 16 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files
deploy/.env.example
+1 -1
View File
@@ -7,7 +7,7 @@ POSTGRES_PASSWORD=change-me-long-random
POSTGRES_DB=sac POSTGRES_DB=sac
# API (публичный URL для ссылок в ответах ingest) # API (публичный URL для ссылок в ответах ingest)
SAC_PUBLIC_URL=https://sac.example.com SAC_PUBLIC_URL=https://sac.kalinamall.ru
SAC_API_PORT=8000 SAC_API_PORT=8000
# JWT (UI — позже) # JWT (UI — позже)
deploy/env.native.example
+1 -1
View File
@@ -4,7 +4,7 @@
DATABASE_URL=postgresql+psycopg2://sac:CHANGE_ME_POSTGRES_PASSWORD@127.0.0.1:5432/sac DATABASE_URL=postgresql+psycopg2://sac:CHANGE_ME_POSTGRES_PASSWORD@127.0.0.1:5432/sac
SAC_PUBLIC_URL=https://sac.example.com SAC_PUBLIC_URL=https://sac.kalinamall.ru
JWT_SECRET=CHANGE_ME_openssl_rand_hex_32 JWT_SECRET=CHANGE_ME_openssl_rand_hex_32
# API key для агентов: Authorization: Bearer <ключ> # API key для агентов: Authorization: Bearer <ключ>
deploy/nginx/sac.conf.example
+5 -5
View File
@@ -1,5 +1,5 @@
# /etc/nginx/sites-available/sac # /etc/nginx/sites-available/sac
# Замените sac.example.com на ваш FQDN. # Production FQDN: sac.kalinamall.ru
# API слушает только 127.0.0.1:8000 (systemd sac-api). # API слушает только 127.0.0.1:8000 (systemd sac-api).
upstream sac_api { upstream sac_api {
@@ -10,7 +10,7 @@ upstream sac_api {
server { server {
listen 80; listen 80;
listen [::]:80; listen [::]:80;
server_name sac.example.com; server_name sac.kalinamall.ru;
location /.well-known/acme-challenge/ { location /.well-known/acme-challenge/ {
root /var/www/html; root /var/www/html;
@@ -24,11 +24,11 @@ server {
server { server {
listen 443 ssl http2; listen 443 ssl http2;
listen [::]:443 ssl http2; listen [::]:443 ssl http2;
server_name sac.example.com; server_name sac.kalinamall.ru;
# После certbot пути подставятся автоматически, либо укажите вручную: # После certbot пути подставятся автоматически, либо укажите вручную:
# ssl_certificate /etc/letsencrypt/live/sac.example.com/fullchain.pem; # ssl_certificate /etc/letsencrypt/live/sac.kalinamall.ru/fullchain.pem;
# ssl_certificate_key /etc/letsencrypt/live/sac.example.com/privkey.pem; # ssl_certificate_key /etc/letsencrypt/live/sac.kalinamall.ru/privkey.pem;
client_max_body_size 2m; client_max_body_size 2m;
docs/agent-integration.md
+3 -3
View File
@@ -14,7 +14,7 @@
```ini ```ini
# off | exclusive | dual | fallback # off | exclusive | dual | fallback
UseSAC="exclusive" UseSAC="exclusive"
SAC_URL="https://sac.example.com/api/v1/events" SAC_URL="https://sac.kalinamall.ru/api/v1/events"
SAC_API_KEY="sac_xxxxxxxx" SAC_API_KEY="sac_xxxxxxxx"
SAC_SPOOL_DIR="/var/lib/ssh-monitor/sac-spool" SAC_SPOOL_DIR="/var/lib/ssh-monitor/sac-spool"
SAC_SEND_HEARTBEAT="1" SAC_SEND_HEARTBEAT="1"
@@ -26,7 +26,7 @@ SAC_TIMEOUT_SEC="12"
```powershell ```powershell
$UseSAC = "exclusive" # off | exclusive | dual | fallback $UseSAC = "exclusive" # off | exclusive | dual | fallback
$SacUrl = "https://sac.example.com/api/v1/events" $SacUrl = "https://sac.kalinamall.ru/api/v1/events"
$SacApiKey = "sac_xxxxxxxx" $SacApiKey = "sac_xxxxxxxx"
$SacSpoolDir = "D:\Soft\Logs\sac-spool" $SacSpoolDir = "D:\Soft\Logs\sac-spool"
``` ```
@@ -54,7 +54,7 @@ $SacSpoolDir = "D:\Soft\Logs\sac-spool"
```http ```http
POST /api/v1/events HTTP/1.1 POST /api/v1/events HTTP/1.1
Host: sac.example.com Host: sac.kalinamall.ru
Content-Type: application/json Content-Type: application/json
Authorization: Bearer sac_xxxxxxxx Authorization: Bearer sac_xxxxxxxx
Idempotency-Key: 550e8400-e29b-41d4-a716-446655440000 Idempotency-Key: 550e8400-e29b-41d4-a716-446655440000
docs/deployment.md
+2 -2
View File
@@ -36,7 +36,7 @@ deploy/
## 2. Сетевые правила ## 2. Сетевые правила
**Агенты →** `https://sac.example.com/api/v1/events` **Агенты →** `https://sac.kalinamall.ru/api/v1/events`
**SAC →** Telegram, SMTP (исходящие) **SAC →** Telegram, SMTP (исходящие)
**Админы →** 443 (UI/API через nginx) **Админы →** 443 (UI/API через nginx)
@@ -60,7 +60,7 @@ deploy/
```bash ```bash
systemctl status sac-api systemctl status sac-api
curl -sS http://127.0.0.1:8000/health curl -sS http://127.0.0.1:8000/health
curl -sS https://sac.example.com/health curl -sS https://sac.kalinamall.ru/health
``` ```
--- ---
docs/install-ubuntu-24.04-native.md
+4 -4
View File
@@ -9,7 +9,7 @@
| Параметр | Пример | | Параметр | Пример |
|----------|--------| |----------|--------|
| FQDN | `sac.kalinin.example` | | FQDN | `sac.kalinamall.ru` |
| IP | `10.0.0.50` | | IP | `10.0.0.50` |
| Каталог | `/opt/security-alert-center` | | Каталог | `/opt/security-alert-center` |
| Пользователь сервиса | `sac` | | Пользователь сервиса | `sac` |
@@ -132,7 +132,7 @@ sudo nano /etc/security-alert-center/sac-api.env
- `DATABASE_URL` — с паролем PostgreSQL из шага 4 - `DATABASE_URL` — с паролем PostgreSQL из шага 4
- `JWT_SECRET` — `openssl rand -hex 32` - `JWT_SECRET` — `openssl rand -hex 32`
- `SAC_PUBLIC_URL` — `https://sac.kalinin.example` (как будет с nginx) - `SAC_PUBLIC_URL` — `https://sac.kalinamall.ru`
- `SAC_BOOTSTRAP_API_KEY` — `python3.12 -c "import secrets; print('sac_'+secrets.token_urlsafe(32))"` - `SAC_BOOTSTRAP_API_KEY` — `python3.12 -c "import secrets; print('sac_'+secrets.token_urlsafe(32))"`
- `EVENT_SCHEMA_PATH=/opt/security-alert-center/schemas/event-schema-v1.json` - `EVENT_SCHEMA_PATH=/opt/security-alert-center/schemas/event-schema-v1.json`
@@ -180,7 +180,7 @@ sudo systemctl reload nginx
Let's Encrypt: Let's Encrypt:
```bash ```bash
sudo certbot --nginx -d sac.kalinin.example sudo certbot --nginx -d sac.kalinamall.ru
``` ```
--- ---
@@ -196,7 +196,7 @@ curl -sS http://127.0.0.1:8000/health | jq .
Через nginx (после TLS): Через nginx (после TLS):
```bash ```bash
curl -sS https://sac.kalinin.example/health | jq . curl -sS https://sac.kalinamall.ru/health | jq .
``` ```
Тест ingest (подставьте `SAC_BOOTSTRAP_API_KEY`): Тест ingest (подставьте `SAC_BOOTSTRAP_API_KEY`):