docs: URL sac.kalinamall.ru во всех руководствах и примерах конфигов

This commit is contained in:
PTah
2026-05-26 20:30:10 +10:00
parent 9203af90d5
commit 69547d83bc
6 changed files with 16 additions and 16 deletions
+1 -1
View File
@@ -7,7 +7,7 @@ POSTGRES_PASSWORD=change-me-long-random
POSTGRES_DB=sac
# API (публичный URL для ссылок в ответах ingest)
SAC_PUBLIC_URL=https://sac.example.com
SAC_PUBLIC_URL=https://sac.kalinamall.ru
SAC_API_PORT=8000
# JWT (UI — позже)
+1 -1
View File
@@ -4,7 +4,7 @@
DATABASE_URL=postgresql+psycopg2://sac:CHANGE_ME_POSTGRES_PASSWORD@127.0.0.1:5432/sac
SAC_PUBLIC_URL=https://sac.example.com
SAC_PUBLIC_URL=https://sac.kalinamall.ru
JWT_SECRET=CHANGE_ME_openssl_rand_hex_32
# API key для агентов: Authorization: Bearer <ключ>
+5 -5
View File
@@ -1,5 +1,5 @@
# /etc/nginx/sites-available/sac
# Замените sac.example.com на ваш FQDN.
# Production FQDN: sac.kalinamall.ru
# API слушает только 127.0.0.1:8000 (systemd sac-api).
upstream sac_api {
@@ -10,7 +10,7 @@ upstream sac_api {
server {
listen 80;
listen [::]:80;
server_name sac.example.com;
server_name sac.kalinamall.ru;
location /.well-known/acme-challenge/ {
root /var/www/html;
@@ -24,11 +24,11 @@ server {
server {
listen 443 ssl http2;
listen [::]:443 ssl http2;
server_name sac.example.com;
server_name sac.kalinamall.ru;
# После certbot пути подставятся автоматически, либо укажите вручную:
# ssl_certificate /etc/letsencrypt/live/sac.example.com/fullchain.pem;
# ssl_certificate_key /etc/letsencrypt/live/sac.example.com/privkey.pem;
# ssl_certificate /etc/letsencrypt/live/sac.kalinamall.ru/fullchain.pem;
# ssl_certificate_key /etc/letsencrypt/live/sac.kalinamall.ru/privkey.pem;
client_max_body_size 2m;
+3 -3
View File
@@ -14,7 +14,7 @@
```ini
# off | exclusive | dual | fallback
UseSAC="exclusive"
SAC_URL="https://sac.example.com/api/v1/events"
SAC_URL="https://sac.kalinamall.ru/api/v1/events"
SAC_API_KEY="sac_xxxxxxxx"
SAC_SPOOL_DIR="/var/lib/ssh-monitor/sac-spool"
SAC_SEND_HEARTBEAT="1"
@@ -26,7 +26,7 @@ SAC_TIMEOUT_SEC="12"
```powershell
$UseSAC = "exclusive" # off | exclusive | dual | fallback
$SacUrl = "https://sac.example.com/api/v1/events"
$SacUrl = "https://sac.kalinamall.ru/api/v1/events"
$SacApiKey = "sac_xxxxxxxx"
$SacSpoolDir = "D:\Soft\Logs\sac-spool"
```
@@ -54,7 +54,7 @@ $SacSpoolDir = "D:\Soft\Logs\sac-spool"
```http
POST /api/v1/events HTTP/1.1
Host: sac.example.com
Host: sac.kalinamall.ru
Content-Type: application/json
Authorization: Bearer sac_xxxxxxxx
Idempotency-Key: 550e8400-e29b-41d4-a716-446655440000
+2 -2
View File
@@ -36,7 +36,7 @@ deploy/
## 2. Сетевые правила
**Агенты →** `https://sac.example.com/api/v1/events`
**Агенты →** `https://sac.kalinamall.ru/api/v1/events`
**SAC →** Telegram, SMTP (исходящие)
**Админы →** 443 (UI/API через nginx)
@@ -60,7 +60,7 @@ deploy/
```bash
systemctl status sac-api
curl -sS http://127.0.0.1:8000/health
curl -sS https://sac.example.com/health
curl -sS https://sac.kalinamall.ru/health
```
---
+4 -4
View File
@@ -9,7 +9,7 @@
| Параметр | Пример |
|----------|--------|
| FQDN | `sac.kalinin.example` |
| FQDN | `sac.kalinamall.ru` |
| IP | `10.0.0.50` |
| Каталог | `/opt/security-alert-center` |
| Пользователь сервиса | `sac` |
@@ -132,7 +132,7 @@ sudo nano /etc/security-alert-center/sac-api.env
- `DATABASE_URL`с паролем PostgreSQL из шага 4
- `JWT_SECRET``openssl rand -hex 32`
- `SAC_PUBLIC_URL``https://sac.kalinin.example` (как будет с nginx)
- `SAC_PUBLIC_URL``https://sac.kalinamall.ru`
- `SAC_BOOTSTRAP_API_KEY``python3.12 -c "import secrets; print('sac_'+secrets.token_urlsafe(32))"`
- `EVENT_SCHEMA_PATH=/opt/security-alert-center/schemas/event-schema-v1.json`
@@ -180,7 +180,7 @@ sudo systemctl reload nginx
Let's Encrypt:
```bash
sudo certbot --nginx -d sac.kalinin.example
sudo certbot --nginx -d sac.kalinamall.ru
```
---
@@ -196,7 +196,7 @@ curl -sS http://127.0.0.1:8000/health | jq .
Через nginx (после TLS):
```bash
curl -sS https://sac.kalinin.example/health | jq .
curl -sS https://sac.kalinamall.ru/health | jq .
```
Тест ingest (подставьте `SAC_BOOTSTRAP_API_KEY`):