Commit Graph

26 Commits

Author SHA1 Message Date
PapaTramp 2048162057 feat: release 2.1.8-SAC — security phase 1 and SAC-first update hardening
Updater applies chmod/chown on config, spool and state paths on every run.
SAC is the primary update path; optional cron uses the same behavior.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-08 09:44:24 +10:00
PapaTramp 9e756674d0 fix: daily report без локального Telegram при fallback SAC (2.1.6-SAC)
Суточные report.daily.* уходят только в SAC/spool; SAC_TIMEOUT_SEC=45;
приоритет report.* в sac_flush_spool, до 50 файлов за цикл.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-06 12:00:35 +10:00
PapaTramp 489d071208 feat(deploy): sync SERVER_IPV4 hint and DAILY_REPORT_ENABLED on update (2.1.3-SAC)
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-06-22 10:01:16 +10:00
PapaTramp 1361fd264c feat: merge missing SAC keys into config on deploy (2.1.2-SAC)
Append absent SAC variables from example instead of overwriting ssh-monitor.conf; set UseSAC=fallback on install and update.
2026-06-21 12:20:33 +10:00
PapaTramp 2ff60280ef fix: default updater git to kalinamall and honor REPO_URL from SAC (2.1.1-SAC)
Always sync kalinamall remote from REPO_URL; support GIT_BRANCH env for SAC-driven updates.
2026-06-20 19:28:14 +10:00
PapaTramp 2956d14d94 chore(docs): GitHub repo URLs, remove .cursor from git, mirror scripts
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-06-16 11:36:51 +10:00
PapaTramp 9a3855bf0a feat: deploy дописывает HEARTBEAT_INTERVAL при отсутствии в конфиге (2.0.6-SAC)
Явная проверка ключей в /etc/ssh-monitor.conf, блок 240 мин + watchdog; исправлен текст startup heartbeat.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-06-12 16:46:41 +10:00
PapaTramp 42af3b1ae6 fix: sync heartbeat interval on every deploy run
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-06-11 09:26:03 +10:00
PapaTramp 7e5cad0231 feat: install ssh-monitor-watchdog on agent update (2.0.4-SAC)
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-06-10 17:41:47 +10:00
PapaTramp 908f8958a4 feat: heartbeat 4h via HEARTBEAT_INTERVAL_MINUTES (2.0.2-SAC)
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-06-10 17:25:19 +10:00
PapaTramp 3d0876bb0b feat: deploy UseSAC fallback by default on install and script upgrade
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-06-03 09:15:22 +10:00
PapaTramp 3e1199e2ec chore: align ssh monitor and SAC module version 1.2.6-SAC
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-05-28 13:01:51 +10:00
PapaTramp f06fbae8ee fix: update_ssh_monitor fetch+reset after kalinamall force-push
Release 1.2.5-SAC; prefer kalinamall remote; ff-only or hard reset.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-05-28 09:40:13 +10:00
PapaTramp fe2a38857b chore: release 1.2.4-SAC — SAC ingest HTTP 201/409/202
Bump SSH_MONITOR_VERSION; sac-client release tag; updater logs sac-client ver.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-05-28 09:34:19 +10:00
PapaTramp 31c4265716 fix: log_action to stderr so captured paths stay valid
find_remote_ssh_monitor_path output was polluted by log_action on stdout,
breaking -f checks; mirror user messages to stderr instead.
2026-05-28 08:24:09 +10:00
PapaTramp 731c50b0bc fix: find ssh-monitor in clone via git checkout and broader search
Restore ssh-monitor from HEAD when missing on disk; try git ls-files and
find fallback; log clone root listing on failure.
2026-05-28 08:20:37 +10:00
PapaTramp 7f4d25b91c fix: sync /opt/scripts/update_ssh_monitor.sh from git clone each run
After git pull, copy updater from clone to DEPLOY_INSTALL_PATH and re-exec
once so cron always picks up new logging without manual cp.
2026-05-28 08:15:51 +10:00
PapaTramp f3b7c9d41c feat: verbose update_ssh_monitor action log and run summary
Log each step to /var/log/update_script.log and stdout (unless --quiet).
End-of-run summary explains skip reasons: checksum match, git pull fail,
missing clone path, versions and sha256 prefixes.
2026-05-28 08:13:24 +10:00
PapaTramp 746a8f8f76 feat: bootstrap SAC config on update from pre-SAC installs
ssh-monitor.conf.example ships dual SAC + Telegram defaults; updater
overwrites /etc/ssh-monitor.conf when UseSAC is off or SAC_API_KEY empty
or sac-client.sh is missing, with backup. Leaves configured hosts untouched.
2026-05-27 15:23:35 +10:00
PapaTramp 3a1c9655ca feat: exclusive pilot — spool flush and verify script
Replay spool on each monitor loop; sac_post_payload refactor;
pilot-verify-exclusive.sh and --check-sac hints for exclusive mode.
2026-05-27 13:25:47 +10:00
PapaTramp f1c4adcc13 feat: first deploy via update_ssh_monitor.sh --deploy
Add first_deploy.sh wrapper and --deploy mode: git clone, install
ssh-monitor and sac-client, optional config/systemd/updater copy,
console summary and config variable checklist.
2026-05-27 12:36:02 +10:00
PapaTramp 4cb158f30a fix: always sync sac-client.sh in update_ssh_monitor
Copy sac-client.sh on every git pull by checksum, not only when
ssh-monitor binary changes. Restart service when either file updates.
2026-05-27 12:20:14 +10:00
PapaTramp a58027ed9b fix: update_ssh_monitor копирует sac-client.sh, REPO kalinamall 2026-05-27 10:47:38 +10:00
PapaTramp 2c65edf7db sync: align internal repo with 1.1.3-server-label
- REPO_URL points to git.kalinamall.ru

- ssh-monitor.conf may be committed here (secrets); .env still ignored

- Docs note for closed vs public GitHub
2026-05-26 19:34:01 +10:00
PapaTramp e2c0d5cbc7 Update update_ssh_monitor.sh 2026-05-14 12:59:12 +10:00
PapaTramp 3d20498515 Create update_ssh_monitor.sh
Скрипт проверки наличия обновлений основного скрипта
2026-05-14 12:57:55 +10:00