docs: URL sac.kalinamall.ru во всех руководствах и примерах конфигов
This commit is contained in:
@@ -14,7 +14,7 @@
|
||||
```ini
|
||||
# off | exclusive | dual | fallback
|
||||
UseSAC="exclusive"
|
||||
SAC_URL="https://sac.example.com/api/v1/events"
|
||||
SAC_URL="https://sac.kalinamall.ru/api/v1/events"
|
||||
SAC_API_KEY="sac_xxxxxxxx"
|
||||
SAC_SPOOL_DIR="/var/lib/ssh-monitor/sac-spool"
|
||||
SAC_SEND_HEARTBEAT="1"
|
||||
@@ -26,7 +26,7 @@ SAC_TIMEOUT_SEC="12"
|
||||
|
||||
```powershell
|
||||
$UseSAC = "exclusive" # off | exclusive | dual | fallback
|
||||
$SacUrl = "https://sac.example.com/api/v1/events"
|
||||
$SacUrl = "https://sac.kalinamall.ru/api/v1/events"
|
||||
$SacApiKey = "sac_xxxxxxxx"
|
||||
$SacSpoolDir = "D:\Soft\Logs\sac-spool"
|
||||
```
|
||||
@@ -54,7 +54,7 @@ $SacSpoolDir = "D:\Soft\Logs\sac-spool"
|
||||
|
||||
```http
|
||||
POST /api/v1/events HTTP/1.1
|
||||
Host: sac.example.com
|
||||
Host: sac.kalinamall.ru
|
||||
Content-Type: application/json
|
||||
Authorization: Bearer sac_xxxxxxxx
|
||||
Idempotency-Key: 550e8400-e29b-41d4-a716-446655440000
|
||||
|
||||
+2
-2
@@ -36,7 +36,7 @@ deploy/
|
||||
|
||||
## 2. Сетевые правила
|
||||
|
||||
**Агенты →** `https://sac.example.com/api/v1/events`
|
||||
**Агенты →** `https://sac.kalinamall.ru/api/v1/events`
|
||||
**SAC →** Telegram, SMTP (исходящие)
|
||||
**Админы →** 443 (UI/API через nginx)
|
||||
|
||||
@@ -60,7 +60,7 @@ deploy/
|
||||
```bash
|
||||
systemctl status sac-api
|
||||
curl -sS http://127.0.0.1:8000/health
|
||||
curl -sS https://sac.example.com/health
|
||||
curl -sS https://sac.kalinamall.ru/health
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
@@ -9,7 +9,7 @@
|
||||
|
||||
| Параметр | Пример |
|
||||
|----------|--------|
|
||||
| FQDN | `sac.kalinin.example` |
|
||||
| FQDN | `sac.kalinamall.ru` |
|
||||
| IP | `10.0.0.50` |
|
||||
| Каталог | `/opt/security-alert-center` |
|
||||
| Пользователь сервиса | `sac` |
|
||||
@@ -132,7 +132,7 @@ sudo nano /etc/security-alert-center/sac-api.env
|
||||
|
||||
- `DATABASE_URL` — с паролем PostgreSQL из шага 4
|
||||
- `JWT_SECRET` — `openssl rand -hex 32`
|
||||
- `SAC_PUBLIC_URL` — `https://sac.kalinin.example` (как будет с nginx)
|
||||
- `SAC_PUBLIC_URL` — `https://sac.kalinamall.ru`
|
||||
- `SAC_BOOTSTRAP_API_KEY` — `python3.12 -c "import secrets; print('sac_'+secrets.token_urlsafe(32))"`
|
||||
- `EVENT_SCHEMA_PATH=/opt/security-alert-center/schemas/event-schema-v1.json`
|
||||
|
||||
@@ -180,7 +180,7 @@ sudo systemctl reload nginx
|
||||
Let's Encrypt:
|
||||
|
||||
```bash
|
||||
sudo certbot --nginx -d sac.kalinin.example
|
||||
sudo certbot --nginx -d sac.kalinamall.ru
|
||||
```
|
||||
|
||||
---
|
||||
@@ -196,7 +196,7 @@ curl -sS http://127.0.0.1:8000/health | jq .
|
||||
Через nginx (после TLS):
|
||||
|
||||
```bash
|
||||
curl -sS https://sac.kalinin.example/health | jq .
|
||||
curl -sS https://sac.kalinamall.ru/health | jq .
|
||||
```
|
||||
|
||||
Тест ingest (подставьте `SAC_BOOTSTRAP_API_KEY`):
|
||||
|
||||
Reference in New Issue
Block a user