f0bd31c544
fix(nginx): отклонять чужие Host на SAC (default_server 444)
...
Только sac.kalinamall.ru; ext.kalinamall.ru и прочие имена на IP SAC не отдают UI. ssl_reject_handshake на :443.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-06-13 11:24:21 +10:00
56c469ddbd
feat: multi-user UI login with admin and monitor roles
...
Add sac_users table, JWT roles, settings/users API guarded for admin, Users page in UI, and sac_manage_user.py CLI.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-06-01 09:27:14 +10:00
eeba3a704d
feat: Telegram notifications from SAC on ingest
...
Send Telegram alerts for high/critical events and new Problems.
Configurable via TELEGRAM_* env vars; ingest never fails on send errors.
2026-05-27 12:21:03 +10:00
a4bbc14448
docs: prod status, sac-deploy.sh; update install and deployment guides
2026-05-26 22:03:10 +10:00
bdfc7016e6
feat: phase 1C JWT UI, events/hosts API, Vue frontend
2026-05-26 21:46:34 +10:00
d8a8329397
docs: права /etc/ssl/sac — root:ssl-cert, www-data в группе
2026-05-26 21:37:56 +10:00
a9bea3d276
docs: PFX -legacy на Ubuntu 24.04, scp с другого Linux
2026-05-26 21:27:52 +10:00
0c5d2537db
docs: подробное руководство по копированию wildcard TLS на сервер
2026-05-26 21:15:38 +10:00
21578b27c9
docs: nginx TLS с корпоративным wildcard VeriSign
2026-05-26 21:14:22 +10:00
2c12f161a1
fix(nginx): только HTTP до certbot, без ssl без сертификата
2026-05-26 21:12:48 +10:00
934a5a0c9c
fix: загрузка sac-api.env через pydantic, не EnvironmentFile systemd
2026-05-26 21:07:51 +10:00
539126b75e
fix(deploy): конфиг в /opt/security-alert-center/config (sac:sac)
...
Убирает ошибку Permission denied при каталоге /etc root:root.
2026-05-26 20:59:44 +10:00
38c137cbd3
fix(docs): chmod 750 на каталог /etc/security-alert-center для группы sac
2026-05-26 20:56:38 +10:00
6d33669ac2
fix(docs): sac-api.env chmod 640 root:sac для пользователя sac
2026-05-26 20:53:10 +10:00
69547d83bc
docs: URL sac.kalinamall.ru во всех руководствах и примерах конфигов
2026-05-26 20:30:10 +10:00
9203af90d5
docs: native Ubuntu install as primary; systemd and nginx
...
- install-ubuntu-24.04-native.md (production) and -docker.md (alternative)
- deploy/systemd/sac-api.service, nginx/sac.conf.example, env.native.example
- deployment, README, INDEX, work-plan, TZ updated
2026-05-26 20:28:05 +10:00
PTah