PapaTramp
18a65078fc
feat: safe config parser without source (2.3.0-SAC)
...
Whitelist-based /etc/ssh-monitor.conf load; validate URLs/enums/CIDR; remove BACKUP_WEBHOOK_URL.
2026-07-08 12:57:36 +10:00
PapaTramp
6511d34ca7
fix: suppress sudo Telegram during SAC agent update (2.2.3-SAC)
...
Whitelist SAC maintenance commands in ssh-monitor-perms and monitor_sudo; pre-commit uses working python on Windows.
2026-07-08 12:25:06 +10:00
PapaTramp
5ac4792c3c
chore: auto manifest on version bump; local manual script only
...
contrib/manifest/generate.py + pre-commit hook; install-git-hooks.sh creates
.local/build-release-manifest.sh (gitignored). Remove scripts/ from remote.
2026-07-08 12:05:21 +10:00
PapaTramp
6df83f1838
feat: release 2.2.1-SAC — phase 2 manifest verify and quiet SAC updates
...
Pinned GIT_REF/verify, release manifest, no blind reset --hard; suppress
lifecycle and watchdog Telegram during updater; healthcheck via json.dumps.
2026-07-08 11:48:34 +10:00
PapaTramp
275d305d62
feat: watchdog Telegram shows server name (2.1.9-SAC)
...
Add shared server label helpers in ssh-monitor-perms.sh; roadmap marks
phase 1 done and phase 2.2.0 as next release.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-07-08 11:28:57 +10:00
PapaTramp
2048162057
feat: release 2.1.8-SAC — security phase 1 and SAC-first update hardening
...
Updater applies chmod/chown on config, spool and state paths on every run.
SAC is the primary update path; optional cron uses the same behavior.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-07-08 09:44:24 +10:00
PapaTramp
ec0857b8f2
docs: security roadmap по аудиту (фазы 1–4, чек-лист)
2026-07-07 20:57:45 +10:00
PapaTramp