PapaTramp/ssh-monitor
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
110 Commits 1 Branch 0 Tags
0399a6d3840404a7374432f4fe702be82492009a
Commit Graph

15 Commits

Author SHA1 Message Date
PapaTramp 0399a6d384 fix: manifest SHA256 from git blobs (CRLF/LF) — release 2.2.2-SAC 
Manifest was hashed from Windows working tree while Linux checkout uses
git blobs; verify failed with sha256 mismatch. build-release-manifest.sh
now hashes :index/HEAD; .gitattributes enforces LF for agent scripts.
 2026-07-08 12:00:51 +10:00
PapaTramp 6df83f1838 feat: release 2.2.1-SAC — phase 2 manifest verify and quiet SAC updates 
Pinned GIT_REF/verify, release manifest, no blind reset --hard; suppress
lifecycle and watchdog Telegram during updater; healthcheck via json.dumps.
 2026-07-08 11:48:34 +10:00
PapaTramp 275d305d62 feat: watchdog Telegram shows server name (2.1.9-SAC) 
Add shared server label helpers in ssh-monitor-perms.sh; roadmap marks
phase 1 done and phase 2.2.0 as next release.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-07-08 11:28:57 +10:00
PapaTramp 2048162057 feat: release 2.1.8-SAC — security phase 1 and SAC-first update hardening 
Updater applies chmod/chown on config, spool and state paths on every run.
SAC is the primary update path; optional cron uses the same behavior.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-07-08 09:44:24 +10:00
PapaTramp ec0857b8f2 docs: security roadmap по аудиту (фазы 1–4, чек-лист) 2026-07-07 20:57:45 +10:00
PapaTramp 1361fd264c feat: merge missing SAC keys into config on deploy (2.1.2-SAC) 
Append absent SAC variables from example instead of overwriting ssh-monitor.conf; set UseSAC=fallback on install and update.
 2026-06-21 12:20:33 +10:00
PapaTramp 577db1da47 chore(docs): sync repository URLs for kalinamall mirror 2026-06-16 11:37:52 +10:00
PapaTramp 2956d14d94 chore(docs): GitHub repo URLs, remove .cursor from git, mirror scripts 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-16 11:36:51 +10:00
PapaTramp 7f4d25b91c fix: sync /opt/scripts/update_ssh_monitor.sh from git clone each run 
After git pull, copy updater from clone to DEPLOY_INSTALL_PATH and re-exec
once so cron always picks up new logging without manual cp.
 2026-05-28 08:15:51 +10:00
PapaTramp f3b7c9d41c feat: verbose update_ssh_monitor action log and run summary 
Log each step to /var/log/update_script.log and stdout (unless --quiet).
End-of-run summary explains skip reasons: checksum match, git pull fail,
missing clone path, versions and sha256 prefixes.
 2026-05-28 08:13:24 +10:00
PapaTramp f1c4adcc13 feat: first deploy via update_ssh_monitor.sh --deploy 
Add first_deploy.sh wrapper and --deploy mode: git clone, install
ssh-monitor and sac-client, optional config/systemd/updater copy,
console summary and config variable checklist.
 2026-05-27 12:36:02 +10:00
PapaTramp 4cb158f30a fix: always sync sac-client.sh in update_ssh_monitor 
Copy sac-client.sh on every git pull by checksum, not only when
ssh-monitor binary changes. Restart service when either file updates.
 2026-05-27 12:20:14 +10:00
PapaTramp 2c65edf7db sync: align internal repo with 1.1.3-server-label 
- REPO_URL points to git.kalinamall.ru

- ssh-monitor.conf may be committed here (secrets); .env still ignored

- Docs note for closed vs public GitHub
 2026-05-26 19:34:01 +10:00
PapaTramp b801cf2385 feat: подпись сервера во всех уведомлениях и документация 
Добавлены message_ensure_server_line и SERVER_DISPLAY_NAME; версия 1.1.3-server-label.
Гайды по уведомлениям и автообновлению.
 2026-05-25 09:23:32 +10:00
ssh-monitor b5b37b7e84 Переход автобана на ipset, документация и правки README 
- ssh-monitor: баны через ipset (hash:ip timeout), одно правило iptables/ip6tables;
  нормализация бан-листа (один IP — одна строка), версия 1.1.1-ipset.
- docs/install-prerequisites.ru.md: зависимости и установка пакетов (в т.ч. ipset).
- README: ссылка на docs, установка скрипта/systemd без дублирования apt; пометка про ipset.
- IPSET-NOTES.txt: заметки по развёртыванию ipset.
- ssh-monitor.conf.example: закомментированные переменные IPSET_*.
 2026-04-16 11:30:04 +10:00