From 6bff0731086e692494fbc18e5238ffef183e6a5c Mon Sep 17 00:00:00 2001 From: PTah Date: Tue, 16 Jun 2026 11:41:07 +1000 Subject: [PATCH] chore(docs): sync repository URLs for kalinamall mirror --- README.md | 12 ++++++------ README_en.md | 10 +++++----- deploy/systemd/sac-api.service | 2 +- docs/event-schema-v1.json | 2 +- docs/install-ubuntu-24.04-docker.md | 2 +- docs/install-ubuntu-24.04-native.md | 2 +- docs/install-ubuntu-24.04.md | 2 +- docs/operations-prod-status.md | 2 +- docs/roadmap.md | 6 +++--- docs/seaca-mobile.md | 4 ++-- docs/workspace-three-repos.md | 14 +++++++------- schemas/event-schema-v1.json | 2 +- scripts/Rewrite-GitHostUrls.ps1 | 12 ++++++------ scripts/rewrite-git-host-urls.sh | 12 ++++++------ 14 files changed, 42 insertions(+), 42 deletions(-) diff --git a/README.md b/README.md index ebe1c92..9a7f46e 100644 --- a/README.md +++ b/README.md @@ -8,10 +8,10 @@ | Репозиторий | Назначение | |-------------|------------| -| [ssh-monitor](https://github.com/PTah/ssh-monitor) | Linux: SSH, sudo, logind, брутфорс, баны IP | -| [RDP-login-monitor](https://github.com/PTah/RDP-login-monitor) | Windows: RDP/RDS, RD Gateway, WinRM, admin share C$/ADMIN$ | +| [ssh-monitor](https://git.kalinamall.ru/PapaTramp/ssh-monitor) | Linux: SSH, sudo, logind, брутфорс, баны IP | +| [RDP-login-monitor](https://git.kalinamall.ru/PapaTramp/RDP-login-monitor) | Windows: RDP/RDS, RD Gateway, WinRM, admin share C$/ADMIN$ | | **security-alert-center** (этот репозиторий) | Ubuntu 24.04: API, БД, UI, оповещения | -| [seaca](https://github.com/PTah/seaca) | Android: мобильный клиент SAC, push (FCM) | +| [seaca](https://git.kalinamall.ru/PapaTramp/seaca) | Android: мобильный клиент SAC, push (FCM) | ## Статус @@ -29,8 +29,8 @@ События приходят от агентов по [контракту ingest](docs/agent-integration.md) (`type`, `severity`, `details`): -- **Linux — [ssh-monitor](https://github.com/PTah/ssh-monitor):** SSH (успех/неудача), **sudo**, **systemd-logind**, брутфорс и баны IP (ipset), пороги без бана, ежедневный отчёт, heartbeat. -- **Windows — [RDP-login-monitor](https://github.com/PTah/RDP-login-monitor):** +- **Linux — [ssh-monitor](https://git.kalinamall.ru/PapaTramp/ssh-monitor):** SSH (успех/неудача), **sudo**, **systemd-logind**, брутфорс и баны IP (ipset), пороги без бана, ежедневный отчёт, heartbeat. +- **Windows — [RDP-login-monitor](https://git.kalinamall.ru/PapaTramp/RDP-login-monitor):** - **RDP/RDS** (4624/4625); - **RD Gateway** (302/303), **WinRM / PowerShell Remoting** (Enter-PSSession, ID 91); - **админ-шары `C$` / `ADMIN$`** (Security **5140**, `smb.admin_share.access`); @@ -65,7 +65,7 @@ ## Быстрый старт (native) ```bash -git clone https://github.com/PTah/security-alert-center.git /opt/security-alert-center +git clone https://git.kalinamall.ru/PapaTramp/security-alert-center.git /opt/security-alert-center # deploy/env.native.example -> config/sac-api.env cd /opt/security-alert-center/backend python3 -m venv .venv && .venv/bin/pip install -r requirements.txt diff --git a/README_en.md b/README_en.md index b3b0a4b..735fe20 100644 --- a/README_en.md +++ b/README_en.md @@ -8,8 +8,8 @@ Self-hosted hub for collecting, storing, and displaying security events from Lin | Repository | Role | |------------|------| -| [ssh-monitor](https://github.com/PTah/ssh-monitor) | Linux: SSH, sudo, logind, brute-force, IP ban | -| [RDP-login-monitor](https://github.com/PTah/RDP-login-monitor) | Windows: RDP/RDS, RD Gateway, WinRM, admin share C$/ADMIN$ | +| [ssh-monitor](https://git.kalinamall.ru/PapaTramp/ssh-monitor) | Linux: SSH, sudo, logind, brute-force, IP ban | +| [RDP-login-monitor](https://git.kalinamall.ru/PapaTramp/RDP-login-monitor) | Windows: RDP/RDS, RD Gateway, WinRM, admin share C$/ADMIN$ | | **security-alert-center** (this repo) | Ubuntu 24.04: API, database, UI, notifications | ## Status @@ -28,8 +28,8 @@ Self-hosted hub for collecting, storing, and displaying security events from Lin Agents send events via the [ingest contract](docs/agent-integration.md) (`type`, `severity`, `details`): -- **Linux — [ssh-monitor](https://github.com/PTah/ssh-monitor):** SSH success/failure, **sudo**, **systemd-logind**, brute-force and IP ban (ipset), thresholds without ban, daily report, heartbeat. -- **Windows — [RDP-login-monitor](https://github.com/PTah/RDP-login-monitor):** +- **Linux — [ssh-monitor](https://git.kalinamall.ru/PapaTramp/ssh-monitor):** SSH success/failure, **sudo**, **systemd-logind**, brute-force and IP ban (ipset), thresholds without ban, daily report, heartbeat. +- **Windows — [RDP-login-monitor](https://git.kalinamall.ru/PapaTramp/RDP-login-monitor):** - **RDP/RDS** (4624/4625); - **RD Gateway** (302/303), **WinRM / PowerShell Remoting** (Enter-PSSession, event ID 91); - **admin shares `C$` / `ADMIN$`** (Security **5140**, `smb.admin_share.access`); @@ -64,7 +64,7 @@ Agents send events via the [ingest contract](docs/agent-integration.md) (`type`, ## Quick start (native) ```bash -git clone https://github.com/PTah/security-alert-center.git /opt/security-alert-center +git clone https://git.kalinamall.ru/PapaTramp/security-alert-center.git /opt/security-alert-center # deploy/env.native.example -> config/sac-api.env cd /opt/security-alert-center/backend python3 -m venv .venv && .venv/bin/pip install -r requirements.txt diff --git a/deploy/systemd/sac-api.service b/deploy/systemd/sac-api.service index 1aeddb3..6920d4c 100644 --- a/deploy/systemd/sac-api.service +++ b/deploy/systemd/sac-api.service @@ -1,6 +1,6 @@ [Unit] Description=Security Alert Center API (FastAPI) -Documentation=https://github.com/PTah/security-alert-center +Documentation=https://git.kalinamall.ru/PapaTramp/security-alert-center After=network-online.target postgresql.service Wants=network-online.target Requires=postgresql.service diff --git a/docs/event-schema-v1.json b/docs/event-schema-v1.json index 4b28de8..c867a07 100644 --- a/docs/event-schema-v1.json +++ b/docs/event-schema-v1.json @@ -1,6 +1,6 @@ { "$schema": "https://json-schema.org/draft/2020-12/schema", - "$id": "https://github.com/PTah/security-alert-center/schemas/event-v1.json", + "$id": "https://git.kalinamall.ru/PapaTramp/security-alert-center/schemas/event-v1.json", "title": "Security Alert Center Event v1", "description": "Каноническое событие от ssh-monitor или RDP-login-monitor", "type": "object", diff --git a/docs/install-ubuntu-24.04-docker.md b/docs/install-ubuntu-24.04-docker.md index 63bc24b..c2900d2 100644 --- a/docs/install-ubuntu-24.04-docker.md +++ b/docs/install-ubuntu-24.04-docker.md @@ -24,7 +24,7 @@ Docker удобен для локальной отладки или изолир ```bash sudo apt install -y git -sudo git clone https://github.com/PTah/security-alert-center.git /opt/security-alert-center +sudo git clone https://git.kalinamall.ru/PapaTramp/security-alert-center.git /opt/security-alert-center sudo chown -R "$USER:$USER" /opt/security-alert-center ``` diff --git a/docs/install-ubuntu-24.04-native.md b/docs/install-ubuntu-24.04-native.md index 3509917..a757816 100644 --- a/docs/install-ubuntu-24.04-native.md +++ b/docs/install-ubuntu-24.04-native.md @@ -71,7 +71,7 @@ nginx -v ```bash sudo mkdir -p /opt -sudo git clone https://github.com/PTah/security-alert-center.git /opt/security-alert-center +sudo git clone https://git.kalinamall.ru/PapaTramp/security-alert-center.git /opt/security-alert-center ``` --- diff --git a/docs/install-ubuntu-24.04.md b/docs/install-ubuntu-24.04.md index 6dcb39e..23a7bcb 100644 --- a/docs/install-ubuntu-24.04.md +++ b/docs/install-ubuntu-24.04.md @@ -14,7 +14,7 @@ ```bash # см. полный чеклист в native-руководстве sudo apt update && sudo apt install -y git postgresql nginx python3.12 python3.12-venv -sudo git clone https://github.com/PTah/security-alert-center.git /opt/security-alert-center +sudo git clone https://git.kalinamall.ru/PapaTramp/security-alert-center.git /opt/security-alert-center # … PostgreSQL, venv, config/sac-api.env, systemd, nginx ``` diff --git a/docs/operations-prod-status.md b/docs/operations-prod-status.md index 592ebe2..35b2893 100644 --- a/docs/operations-prod-status.md +++ b/docs/operations-prod-status.md @@ -39,7 +39,7 @@ sudo /opt/sac-deploy.sh | Параметр | Значение | |----------|----------| | Хост | `ubabuba` / `10.10.36.9` | -| Репозиторий | `github.com/PTah/ssh-monitor` (`main`, есть `sac-client.sh`) | +| Репозиторий | `git.kalinamall.ru/PapaTramp/ssh-monitor` (`main`, есть `sac-client.sh`) | | `UseSAC` | пилот **exclusive** — см. [pilot-2.1-exclusive.md](pilot-2.1-exclusive.md) | | Сервис | `ssh-monitor.service` — **active** | | `--check-sac` | OK (health + ingest `agent.test` 202) | diff --git a/docs/roadmap.md b/docs/roadmap.md index 9b68067..9a9b047 100644 --- a/docs/roadmap.md +++ b/docs/roadmap.md @@ -66,7 +66,7 @@ **Цель:** нативный Android-клиент и push по тем же правилам оповещений, что Telegram/email/webhook. -Репозиторий клиента: [seaca](https://github.com/PTah/seaca) (Kotlin, Jetpack Compose, FCM). +Репозиторий клиента: [seaca](https://git.kalinamall.ru/PapaTramp/seaca) (Kotlin, Jetpack Compose, FCM). **Сервер SAC:** @@ -77,7 +77,7 @@ **Не в мобильном клиенте:** пользователи SAC, каналы Telegram/SMTP/webhook, админ-настройки. -Подробный план клиента — [seaca/docs/ROADMAP.md](https://github.com/PTah/seaca/blob/main/docs/ROADMAP.md). +Подробный план клиента — [seaca/docs/ROADMAP.md](https://git.kalinamall.ru/PapaTramp/seaca/src/branch/main/docs/ROADMAP.md). --- @@ -95,7 +95,7 @@ | v0.1 | — (не требуется) | — | | v0.2 | TBD (тег с UseSAC) | TBD | | v0.3+ | совместимость schema 1.0 | совместимость schema 1.0 | -| v0.6 | — | — (мобильный клиент [seaca](https://github.com/PTah/seaca), не агент) | +| v0.6 | — | — (мобильный клиент [seaca](https://git.kalinamall.ru/PapaTramp/seaca), не агент) | При breaking change схемы — `schema_version: 1.1` с поддержкой 1.0 на ingest. diff --git a/docs/seaca-mobile.md b/docs/seaca-mobile.md index 3020a46..33bbc6c 100644 --- a/docs/seaca-mobile.md +++ b/docs/seaca-mobile.md @@ -1,6 +1,6 @@ # Seaca — мобильный клиент SAC -Репозиторий приложения: [seaca](https://github.com/PTah/seaca). +Репозиторий приложения: [seaca](https://git.kalinamall.ru/PapaTramp/seaca). Требуется SAC **≥ 0.9.0** с применённой миграцией `014`. --- @@ -84,7 +84,7 @@ SAC_FCM_SERVICE_ACCOUNT_JSON=/etc/security-alert-center/fcm-service-account.json | `sac.kalinamall.ru` | Web UI | yes (`git-sac-allowed`) | | `sac-api.kalinamall.ru` | Seaca, `/api/v1/mobile/*` | no (enroll + JWT) | -Both resolve to the same SAC server (**192.168.160.145**). nginx must accept both names in `server_name`. See [reverse-proxy/docs/sac-access.md](https://github.com/PTah/reverse-proxy/blob/main/docs/sac-access.md). +Both resolve to the same SAC server (**192.168.160.145**). nginx must accept both names in `server_name`. See [reverse-proxy/docs/sac-access.md](https://git.kalinamall.ru/PapaTramp/reverse-proxy/src/branch/main/docs/sac-access.md). --- diff --git a/docs/workspace-three-repos.md b/docs/workspace-three-repos.md index c4f2ad6..bfe252b 100644 --- a/docs/workspace-three-repos.md +++ b/docs/workspace-three-repos.md @@ -8,9 +8,9 @@ | Имя в workspace | Путь (пример Windows) | Публичный remote | |-----------------|----------------------|------------------| -| `ssh-monitor` | `D:\Soft\Git\ssh-monitor` | github.com/PTah/ssh-monitor | -| `rdp-monitor` | `D:\Soft\Git\RDP-login-monitor` | github.com/PTah/RDP-login-monitor | -| `security-alert-center` | `D:\Soft\Git\security-alert-center` | github.com/PTah/security-alert-center | +| `ssh-monitor` | `D:\Soft\Git\ssh-monitor` | git.kalinamall.ru/PapaTramp/ssh-monitor | +| `rdp-monitor` | `D:\Soft\Git\RDP-login-monitor` | git.kalinamall.ru/PapaTramp/RDP-login-monitor | +| `security-alert-center` | `D:\Soft\Git\security-alert-center` | git.kalinamall.ru/PapaTramp/security-alert-center | Пути подставьте свои. Закрытый инстанс **git.kalinamall.ru** — зеркало с теми же репозиториями; ссылки в документации на каждом хосте должны вести **на этот же хост** (см. ниже). @@ -55,7 +55,7 @@ ### 4.1. Git: зеркала и ссылки в документации -В **main** ссылки между репозиториями указывают на **GitHub** (`https://github.com/PTah/...`). +В **main** ссылки между репозиториями указывают на **GitHub** (`https://git.kalinamall.ru/PapaTramp/...`). Перед push на другой хост (kalinamall, papatramp) используйте скрипт зеркалирования — он подменяет URL в docs, пушит и **не оставляет** чужие ссылки в локальной ветке: @@ -82,9 +82,9 @@ git push github main | Проект | URL | |--------|-----| -| security-alert-center | `https://github.com/PTah/security-alert-center.git` | -| ssh-monitor | `https://github.com/PTah/ssh-monitor.git` | -| RDP-login-monitor | `https://github.com/PTah/RDP-login-monitor.git` | +| security-alert-center | `https://git.kalinamall.ru/PapaTramp/security-alert-center.git` | +| ssh-monitor | `https://git.kalinamall.ru/PapaTramp/ssh-monitor.git` | +| RDP-login-monitor | `https://git.kalinamall.ru/PapaTramp/RDP-login-monitor.git` | --- diff --git a/schemas/event-schema-v1.json b/schemas/event-schema-v1.json index f22278c..d2b779d 100644 --- a/schemas/event-schema-v1.json +++ b/schemas/event-schema-v1.json @@ -1,6 +1,6 @@ { "$schema": "https://json-schema.org/draft/2020-12/schema", - "$id": "https://github.com/PTah/security-alert-center/schemas/event-v1.json", + "$id": "https://git.kalinamall.ru/PapaTramp/security-alert-center/schemas/event-v1.json", "title": "Security Alert Center Event v1", "description": "Каноническое событие от ssh-monitor или RDP-login-monitor", "type": "object", diff --git a/scripts/Rewrite-GitHostUrls.ps1 b/scripts/Rewrite-GitHostUrls.ps1 index 87a40f5..bbd8952 100644 --- a/scripts/Rewrite-GitHostUrls.ps1 +++ b/scripts/Rewrite-GitHostUrls.ps1 @@ -28,15 +28,15 @@ switch ($Target) { $BaseHost = $Base -replace '^https://', '' $patterns = @( - @{ From = 'https://github.com/PTah/([^)/''"\s]+)/blob/main/'; To = "$Base/`$1$BlobSuffix/" } + @{ From = 'https://git.kalinamall.ru/PapaTramp/([^)/''"\s]+)/blob/main/'; To = "$Base/`$1$BlobSuffix/" } + @{ From = 'https://git.kalinamall.ru/PapaTramp/([^)/''"\s]+)/src/branch/main/'; To = "$Base/`$1$BlobSuffix/" } @{ From = 'https://git.kalinamall.ru/PapaTramp/([^)/''"\s]+)/src/branch/main/'; To = "$Base/`$1$BlobSuffix/" } - @{ From = 'https://git.papatramp.ru/PTah/([^)/''"\s]+)/src/branch/main/'; To = "$Base/`$1$BlobSuffix/" } - @{ From = 'https://github.com/PTah/'; To = "$Base/" } @{ From = 'https://git.kalinamall.ru/PapaTramp/'; To = "$Base/" } - @{ From = 'https://git.papatramp.ru/PTah/'; To = "$Base/" } - @{ From = 'github.com/PTah/'; To = "$BaseHost/" } + @{ From = 'https://git.kalinamall.ru/PapaTramp/'; To = "$Base/" } + @{ From = 'https://git.kalinamall.ru/PapaTramp/'; To = "$Base/" } + @{ From = 'git.kalinamall.ru/PapaTramp/'; To = "$BaseHost/" } + @{ From = 'git.kalinamall.ru/PapaTramp/'; To = "$BaseHost/" } @{ From = 'git.kalinamall.ru/PapaTramp/'; To = "$BaseHost/" } - @{ From = 'git.papatramp.ru/PTah/'; To = "$BaseHost/" } ) $extensions = @('*.md', '*.json', '*.service', '*.example', '*.sh', '*.ps1', '*.yml', '*.yaml') diff --git a/scripts/rewrite-git-host-urls.sh b/scripts/rewrite-git-host-urls.sh index 38c4dfe..a0b76a0 100644 --- a/scripts/rewrite-git-host-urls.sh +++ b/scripts/rewrite-git-host-urls.sh @@ -28,15 +28,15 @@ esac # Order matters: longer patterns first. PATTERNS=( - 's|https://github.com/PTah/\([^)/"'"'"' ]*\)/blob/main/|'"${BASE}"'/\1'"${BLOB_SUFFIX}"'/|g' + 's|https://git.kalinamall.ru/PapaTramp/\([^)/"'"'"' ]*\)/blob/main/|'"${BASE}"'/\1'"${BLOB_SUFFIX}"'/|g' + 's|https://git.kalinamall.ru/PapaTramp/\([^)/"'"'"' ]*\)/src/branch/main/|'"${BASE}"'/\1'"${BLOB_SUFFIX}"'/|g' 's|https://git.kalinamall.ru/PapaTramp/\([^)/"'"'"' ]*\)/src/branch/main/|'"${BASE}"'/\1'"${BLOB_SUFFIX}"'/|g' - 's|https://git.papatramp.ru/PTah/\([^)/"'"'"' ]*\)/src/branch/main/|'"${BASE}"'/\1'"${BLOB_SUFFIX}"'/|g' - 's|https://github.com/PTah/|'"${BASE}"'/|g' 's|https://git.kalinamall.ru/PapaTramp/|'"${BASE}"'/|g' - 's|https://git.papatramp.ru/PTah/|'"${BASE}"'/|g' - 's|github.com/PTah/|'"${BASE#https://}"'/|g' + 's|https://git.kalinamall.ru/PapaTramp/|'"${BASE}"'/|g' + 's|https://git.kalinamall.ru/PapaTramp/|'"${BASE}"'/|g' + 's|git.kalinamall.ru/PapaTramp/|'"${BASE#https://}"'/|g' + 's|git.kalinamall.ru/PapaTramp/|'"${BASE#https://}"'/|g' 's|git.kalinamall.ru/PapaTramp/|'"${BASE#https://}"'/|g' - 's|git.papatramp.ru/PTah/|'"${BASE#https://}"'/|g' ) FILES=()