PapaTramp/ssh-monitor
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
110 Commits 1 Branch 7 Tags
0399a6d3840404a7374432f4fe702be82492009a
Commit Graph

69 Commits

Author SHA1 Message Date
PTah 0399a6d384 fix: manifest SHA256 from git blobs (CRLF/LF) — release 2.2.2-SAC 
Manifest was hashed from Windows working tree while Linux checkout uses
git blobs; verify failed with sha256 mismatch. build-release-manifest.sh
now hashes :index/HEAD; .gitattributes enforces LF for agent scripts.
 2026-07-08 12:00:51 +10:00
PTah 6df83f1838 feat: release 2.2.1-SAC — phase 2 manifest verify and quiet SAC updates 
Pinned GIT_REF/verify, release manifest, no blind reset --hard; suppress
lifecycle and watchdog Telegram during updater; healthcheck via json.dumps.
 2026-07-08 11:48:34 +10:00
PTah 275d305d62 feat: watchdog Telegram shows server name (2.1.9-SAC) 
Add shared server label helpers in ssh-monitor-perms.sh; roadmap marks
phase 1 done and phase 2.2.0 as next release.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-07-08 11:28:57 +10:00
PTah 2048162057 feat: release 2.1.8-SAC — security phase 1 and SAC-first update hardening 
Updater applies chmod/chown on config, spool and state paths on every run.
SAC is the primary update path; optional cron uses the same behavior.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-07-08 09:44:24 +10:00
PTah 9e756674d0 fix: daily report без локального Telegram при fallback SAC (2.1.6-SAC) 
Суточные report.daily.* уходят только в SAC/spool; SAC_TIMEOUT_SEC=45;
приоритет report.* в sac_flush_spool, до 50 файлов за цикл.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-07-06 12:00:35 +10:00
PTah de61c6c771 fix: daily report active users count matches who sessions (2.1.5-SAC) 
Include local/console who lines; active_count from session list not raw who line count.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-23 14:41:52 +10:00
PTah c96e870542 feat: enrich SAC events with session_id, tty and source_ip (2.1.4-SAC) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-22 10:13:40 +10:00
PTah 489d071208 feat(deploy): sync SERVER_IPV4 hint and DAILY_REPORT_ENABLED on update (2.1.3-SAC) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-22 10:01:16 +10:00
PTah 1361fd264c feat: merge missing SAC keys into config on deploy (2.1.2-SAC) 
Append absent SAC variables from example instead of overwriting ssh-monitor.conf; set UseSAC=fallback on install and update.
 2026-06-21 12:20:33 +10:00
PTah 2ff60280ef fix: default updater git to kalinamall and honor REPO_URL from SAC (2.1.1-SAC) 
Always sync kalinamall remote from REPO_URL; support GIT_BRANCH env for SAC-driven updates.
 2026-06-20 19:28:14 +10:00
PTah b6d9901f05 chore: bump version to 2.1.0-SAC 2026-06-20 19:20:34 +10:00
PTah 9a3855bf0a feat: deploy дописывает HEARTBEAT_INTERVAL при отсутствии в конфиге (2.0.6-SAC) 
Явная проверка ключей в /etc/ssh-monitor.conf, блок 240 мин + watchdog; исправлен текст startup heartbeat.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-12 16:46:41 +10:00
PTah 4cd1a85b3e feat: send agent.heartbeat on service startup (2.0.5-SAC) 
After agent.lifecycle on boot, send heartbeat so SAC marks host online until next interval.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-12 11:51:16 +10:00
PTah 7e5cad0231 feat: install ssh-monitor-watchdog on agent update (2.0.4-SAC) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-10 17:41:47 +10:00
PTah e576671580 chore: bump release to 2.0.3-SAC 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-10 17:38:56 +10:00
PTah 908f8958a4 feat: heartbeat 4h via HEARTBEAT_INTERVAL_MINUTES (2.0.2-SAC) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-10 17:25:19 +10:00
PTah 2bed9516ec chore: bump release to 2.0.1-SAC 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-03 09:17:28 +10:00
PTah df77d8763f chore: bump release to 2.0.0-SAC 
Major version line for NETLOGON deploy upgrades from 1.x agents.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-01 09:05:52 +10:00
PTah 79f5b664b2 feat: lifecycle notification_body and aligned host label 1.2.13-SAC 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-05-31 18:11:28 +10:00
PTah cf4e3b2e90 feat: lifecycle telegram_via routing and lifecycle details 1.2.12-SAC 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-05-31 12:26:14 +10:00
PTah e1a37b8f89 feat: notification source line in agent alerts (1.2.11-SAC) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-05-31 11:52:42 +10:00
PTah 70652bc6cb feat: Agent version line in daily SSH report (1.2.10-SAC) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-05-31 11:28:30 +10:00
PTah 192713d2da chore: release 1.2.9-SAC (align version.txt and SSH_MONITOR_VERSION) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-05-31 11:18:58 +10:00
PTah 454a220890 fix: daily report HTML line breaks without double spacing 
Use single <br> in report_html and document DAILY_REPORT_ENABLED toggle.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-05-30 09:52:09 +10:00
PTah 3820687310 feat: unify daily SSH report format with SAC; DAILY_REPORT_ENABLED toggle 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-05-29 17:17:59 +10:00
PTah eceac58a60 feat: include host.ipv4 in SAC payload and release 1.2.7-SAC 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-05-28 13:33:40 +10:00
PTah 3e1199e2ec chore: align ssh monitor and SAC module version 1.2.6-SAC 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-05-28 13:01:51 +10:00
PTah f06fbae8ee fix: update_ssh_monitor fetch+reset after kalinamall force-push 
Release 1.2.5-SAC; prefer kalinamall remote; ff-only or hard reset.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-05-28 09:40:13 +10:00
PTah fe2a38857b chore: release 1.2.4-SAC — SAC ingest HTTP 201/409/202 
Bump SSH_MONITOR_VERSION; sac-client release tag; updater logs sac-client ver.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-05-28 09:34:19 +10:00
PTah d179b360f2 fix: heartbeat only to SAC, never Telegram/email 
agent.heartbeat bypasses NOTIFY_CHAIN in all UseSAC modes; SAC ingest only.
Bump to 1.2.3-SAC.
 2026-05-28 07:56:18 +10:00
PTah dd980f0ba6 chore: bump release to 1.2.2-SAC 
Increase SSH monitor release version used by sac-client payloads and refresh
RU/EN README references to the new version.
 2026-05-27 15:53:29 +10:00
PTah 49ea1d2a7d chore: bump version to 1.2.1-SAC 2026-05-27 14:44:03 +10:00
PTah 29c91ee0db feat: send full daily report body and stats in SAC details 2026-05-27 14:15:13 +10:00
PTah 8627fdbcec chore: bump agent version to 1.2.0-SAC 2026-05-27 14:09:35 +10:00
PTah 3a1c9655ca feat: exclusive pilot — spool flush and verify script 
Replay spool on each monitor loop; sac_post_payload refactor;
pilot-verify-exclusive.sh and --check-sac hints for exclusive mode.
 2026-05-27 13:25:47 +10:00
PTah 18562af07a feat: map security events to SAC typed payloads 2026-05-27 11:24:19 +10:00
PTah 52654e2735 feat: sudo и notify_send шлют события в SAC (dual) 2026-05-27 11:01:47 +10:00
PTah dd971d80bc feat: UseSAC sac-client.sh and --check-sac 2026-05-26 21:46:35 +10:00
PTah b801cf2385 feat: подпись сервера во всех уведомлениях и документация 
Добавлены message_ensure_server_line и SERVER_DISPLAY_NAME; версия 1.1.3-server-label.
Гайды по уведомлениям и автообновлению.
 2026-05-25 09:23:32 +10:00
ssh-monitor 2cf6c145ab Add ENABLE_IP_BAN mode switch 
Introduce ENABLE_IP_BAN in config and script.
When set to 0, ssh-monitor works in monitor-only mode (alerts without ipset/iptables bans).
 2026-04-16 12:13:27 +10:00
ssh-monitor b5b37b7e84 Переход автобана на ipset, документация и правки README 
- ssh-monitor: баны через ipset (hash:ip timeout), одно правило iptables/ip6tables;
  нормализация бан-листа (один IP — одна строка), версия 1.1.1-ipset.
- docs/install-prerequisites.ru.md: зависимости и установка пакетов (в т.ч. ipset).
- README: ссылка на docs, установка скрипта/systemd без дублирования apt; пометка про ipset.
- IPSET-NOTES.txt: заметки по развёртыванию ipset.
- ssh-monitor.conf.example: закомментированные переменные IPSET_*.
 2026-04-16 11:30:04 +10:00
ssh-monitor 85730bafb0 Версия 1.0.0: релиз, Makefile (make dist), README и .gitignore для архива. 2026-04-14 13:52:26 +10:00
ssh-monitor e273c995a5 Удалена интеграция Zabbix; остались Telegram и email (SMTP). 2026-04-14 12:20:04 +10:00
ssh-monitor 5f9abc5e4c Zabbix: передать ZABBIX_SERVER/HOST_NAME в окружение python3 для trapper 2026-04-14 11:47:25 +10:00
ssh-monitor 6ff93d9552 Zabbix: короткий plain для канала; seq в файле; alert через python3 -o 2026-04-14 11:41:03 +10:00
ssh-monitor 7d8cb00689 Zabbix: усечение UTF-8 для trapper Character (ZABBIX_ALERT_MAX_BYTES) 2026-04-14 11:29:45 +10:00
ssh-monitor c83b4f19d1 Zabbix alert: убрать NUL из текста перед trapper (-i) 2026-04-14 11:15:19 +10:00
ssh-monitor 54e90672c8 Zabbix: успех только по failed:0 в ответе; seq через -k/-o; подсказка при отказе сервера 2026-04-14 11:10:30 +10:00
ssh-monitor 7e83dc6a83 Zabbix: логировать stdout+stderr zabbix_sender; успех при failed: 0 в ответе 2026-04-14 11:06:11 +10:00
ssh-monitor 190add949d Zabbix: два вызова zabbix_sender (alert и seq), лог stderr при ошибке 2026-04-14 10:57:32 +10:00