From 69547d83bc6f2863e1f6d31cbbdb574e72d643e2 Mon Sep 17 00:00:00 2001 From: PTah Date: Tue, 26 May 2026 20:30:10 +1000 Subject: [PATCH] =?UTF-8?q?docs:=20URL=20sac.kalinamall.ru=20=D0=B2=D0=BE?= =?UTF-8?q?=20=D0=B2=D1=81=D0=B5=D1=85=20=D1=80=D1=83=D0=BA=D0=BE=D0=B2?= =?UTF-8?q?=D0=BE=D0=B4=D1=81=D1=82=D0=B2=D0=B0=D1=85=20=D0=B8=20=D0=BF?= =?UTF-8?q?=D1=80=D0=B8=D0=BC=D0=B5=D1=80=D0=B0=D1=85=20=D0=BA=D0=BE=D0=BD?= =?UTF-8?q?=D1=84=D0=B8=D0=B3=D0=BE=D0=B2?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- deploy/.env.example | 2 +- deploy/env.native.example | 2 +- deploy/nginx/sac.conf.example | 10 +++++----- docs/agent-integration.md | 6 +++--- docs/deployment.md | 4 ++-- docs/install-ubuntu-24.04-native.md | 8 ++++---- 6 files changed, 16 insertions(+), 16 deletions(-) diff --git a/deploy/.env.example b/deploy/.env.example index 52d6204..b0ff544 100644 --- a/deploy/.env.example +++ b/deploy/.env.example @@ -7,7 +7,7 @@ POSTGRES_PASSWORD=change-me-long-random POSTGRES_DB=sac # API (публичный URL для ссылок в ответах ingest) -SAC_PUBLIC_URL=https://sac.example.com +SAC_PUBLIC_URL=https://sac.kalinamall.ru SAC_API_PORT=8000 # JWT (UI — позже) diff --git a/deploy/env.native.example b/deploy/env.native.example index d1c46cb..894ca9c 100644 --- a/deploy/env.native.example +++ b/deploy/env.native.example @@ -4,7 +4,7 @@ DATABASE_URL=postgresql+psycopg2://sac:CHANGE_ME_POSTGRES_PASSWORD@127.0.0.1:5432/sac -SAC_PUBLIC_URL=https://sac.example.com +SAC_PUBLIC_URL=https://sac.kalinamall.ru JWT_SECRET=CHANGE_ME_openssl_rand_hex_32 # API key для агентов: Authorization: Bearer <ключ> diff --git a/deploy/nginx/sac.conf.example b/deploy/nginx/sac.conf.example index 3ee289a..f9238b8 100644 --- a/deploy/nginx/sac.conf.example +++ b/deploy/nginx/sac.conf.example @@ -1,5 +1,5 @@ # /etc/nginx/sites-available/sac -# Замените sac.example.com на ваш FQDN. +# Production FQDN: sac.kalinamall.ru # API слушает только 127.0.0.1:8000 (systemd sac-api). upstream sac_api { @@ -10,7 +10,7 @@ upstream sac_api { server { listen 80; listen [::]:80; - server_name sac.example.com; + server_name sac.kalinamall.ru; location /.well-known/acme-challenge/ { root /var/www/html; @@ -24,11 +24,11 @@ server { server { listen 443 ssl http2; listen [::]:443 ssl http2; - server_name sac.example.com; + server_name sac.kalinamall.ru; # После certbot пути подставятся автоматически, либо укажите вручную: - # ssl_certificate /etc/letsencrypt/live/sac.example.com/fullchain.pem; - # ssl_certificate_key /etc/letsencrypt/live/sac.example.com/privkey.pem; + # ssl_certificate /etc/letsencrypt/live/sac.kalinamall.ru/fullchain.pem; + # ssl_certificate_key /etc/letsencrypt/live/sac.kalinamall.ru/privkey.pem; client_max_body_size 2m; diff --git a/docs/agent-integration.md b/docs/agent-integration.md index 2d5b0ab..746bae2 100644 --- a/docs/agent-integration.md +++ b/docs/agent-integration.md @@ -14,7 +14,7 @@ ```ini # off | exclusive | dual | fallback UseSAC="exclusive" -SAC_URL="https://sac.example.com/api/v1/events" +SAC_URL="https://sac.kalinamall.ru/api/v1/events" SAC_API_KEY="sac_xxxxxxxx" SAC_SPOOL_DIR="/var/lib/ssh-monitor/sac-spool" SAC_SEND_HEARTBEAT="1" @@ -26,7 +26,7 @@ SAC_TIMEOUT_SEC="12" ```powershell $UseSAC = "exclusive" # off | exclusive | dual | fallback -$SacUrl = "https://sac.example.com/api/v1/events" +$SacUrl = "https://sac.kalinamall.ru/api/v1/events" $SacApiKey = "sac_xxxxxxxx" $SacSpoolDir = "D:\Soft\Logs\sac-spool" ``` @@ -54,7 +54,7 @@ $SacSpoolDir = "D:\Soft\Logs\sac-spool" ```http POST /api/v1/events HTTP/1.1 -Host: sac.example.com +Host: sac.kalinamall.ru Content-Type: application/json Authorization: Bearer sac_xxxxxxxx Idempotency-Key: 550e8400-e29b-41d4-a716-446655440000 diff --git a/docs/deployment.md b/docs/deployment.md index 1b8f9a3..aa973de 100644 --- a/docs/deployment.md +++ b/docs/deployment.md @@ -36,7 +36,7 @@ deploy/ ## 2. Сетевые правила -**Агенты →** `https://sac.example.com/api/v1/events` +**Агенты →** `https://sac.kalinamall.ru/api/v1/events` **SAC →** Telegram, SMTP (исходящие) **Админы →** 443 (UI/API через nginx) @@ -60,7 +60,7 @@ deploy/ ```bash systemctl status sac-api curl -sS http://127.0.0.1:8000/health -curl -sS https://sac.example.com/health +curl -sS https://sac.kalinamall.ru/health ``` --- diff --git a/docs/install-ubuntu-24.04-native.md b/docs/install-ubuntu-24.04-native.md index a0fd879..c52d5ca 100644 --- a/docs/install-ubuntu-24.04-native.md +++ b/docs/install-ubuntu-24.04-native.md @@ -9,7 +9,7 @@ | Параметр | Пример | |----------|--------| -| FQDN | `sac.kalinin.example` | +| FQDN | `sac.kalinamall.ru` | | IP | `10.0.0.50` | | Каталог | `/opt/security-alert-center` | | Пользователь сервиса | `sac` | @@ -132,7 +132,7 @@ sudo nano /etc/security-alert-center/sac-api.env - `DATABASE_URL` — с паролем PostgreSQL из шага 4 - `JWT_SECRET` — `openssl rand -hex 32` -- `SAC_PUBLIC_URL` — `https://sac.kalinin.example` (как будет с nginx) +- `SAC_PUBLIC_URL` — `https://sac.kalinamall.ru` - `SAC_BOOTSTRAP_API_KEY` — `python3.12 -c "import secrets; print('sac_'+secrets.token_urlsafe(32))"` - `EVENT_SCHEMA_PATH=/opt/security-alert-center/schemas/event-schema-v1.json` @@ -180,7 +180,7 @@ sudo systemctl reload nginx Let's Encrypt: ```bash -sudo certbot --nginx -d sac.kalinin.example +sudo certbot --nginx -d sac.kalinamall.ru ``` --- @@ -196,7 +196,7 @@ curl -sS http://127.0.0.1:8000/health | jq . Через nginx (после TLS): ```bash -curl -sS https://sac.kalinin.example/health | jq . +curl -sS https://sac.kalinamall.ru/health | jq . ``` Тест ingest (подставьте `SAC_BOOTSTRAP_API_KEY`):