PapaTramp/ssh-monitor
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
86 Commits 1 Branch 7 Tags
2956d14d9434542c709cad36002a8a0630c21b33
Commit Graph

86 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
PTah 2956d14d94 chore(docs): GitHub repo URLs, remove .cursor from git, mirror scripts 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-16 11:36:51 +10:00
PTah 9a3855bf0a feat: deploy дописывает HEARTBEAT_INTERVAL при отсутствии в конфиге (2.0.6-SAC) 
Явная проверка ключей в /etc/ssh-monitor.conf, блок 240 мин + watchdog; исправлен текст startup heartbeat.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-12 16:46:41 +10:00
PTah 4cd1a85b3e feat: send agent.heartbeat on service startup (2.0.5-SAC) 
After agent.lifecycle on boot, send heartbeat so SAC marks host online until next interval.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-12 11:51:16 +10:00
PTah 42af3b1ae6 fix: sync heartbeat interval on every deploy run 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-11 09:26:03 +10:00
PTah 7e5cad0231 feat: install ssh-monitor-watchdog on agent update (2.0.4-SAC) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-10 17:41:47 +10:00
PTah e576671580 chore: bump release to 2.0.3-SAC 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-10 17:38:56 +10:00
PTah 908f8958a4 feat: heartbeat 4h via HEARTBEAT_INTERVAL_MINUTES (2.0.2-SAC) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-10 17:25:19 +10:00
PTah 59ba8cf811 chore: sync Cursor rules from CursorRules (version bump RDP/SSH split) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-03 09:31:56 +10:00
PTah 84b8dab561 chore: add Cursor rule to bump SSH_MONITOR_VERSION and version.txt on script changes 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-03 09:29:23 +10:00
PTah 2bed9516ec chore: bump release to 2.0.1-SAC 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-03 09:17:28 +10:00
PTah 3d0876bb0b feat: deploy UseSAC fallback by default on install and script upgrade 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-03 09:15:22 +10:00
PTah df77d8763f chore: bump release to 2.0.0-SAC 
Major version line for NETLOGON deploy upgrades from 1.x agents.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-01 09:05:52 +10:00
PTah 79f5b664b2 feat: lifecycle notification_body and aligned host label 1.2.13-SAC 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-05-31 18:11:28 +10:00
PTah cf4e3b2e90 feat: lifecycle telegram_via routing and lifecycle details 1.2.12-SAC 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-05-31 12:26:14 +10:00
PTah e1a37b8f89 feat: notification source line in agent alerts (1.2.11-SAC) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-05-31 11:52:42 +10:00
PTah 70652bc6cb feat: Agent version line in daily SSH report (1.2.10-SAC) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-05-31 11:28:30 +10:00
PTah 192713d2da chore: release 1.2.9-SAC (align version.txt and SSH_MONITOR_VERSION) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-05-31 11:18:58 +10:00
PTah 454a220890 fix: daily report HTML line breaks without double spacing 
Use single <br> in report_html and document DAILY_REPORT_ENABLED toggle.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-05-30 09:52:09 +10:00
PTah 3820687310 feat: unify daily SSH report format with SAC; DAILY_REPORT_ENABLED toggle 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-05-29 17:17:59 +10:00
PTah eceac58a60 feat: include host.ipv4 in SAC payload and release 1.2.7-SAC 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-05-28 13:33:40 +10:00
PTah 3e1199e2ec chore: align ssh monitor and SAC module version 1.2.6-SAC 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-05-28 13:01:51 +10:00
PTah 8c542624eb feat: SERVER_DISPLAY_NAME в SAC host.display_name (sac-client 1.2.6-SAC) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-05-28 11:49:23 +10:00
PTah f06fbae8ee fix: update_ssh_monitor fetch+reset after kalinamall force-push 
Release 1.2.5-SAC; prefer kalinamall remote; ff-only or hard reset.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-05-28 09:40:13 +10:00
PTah fe2a38857b chore: release 1.2.4-SAC — SAC ingest HTTP 201/409/202 
Bump SSH_MONITOR_VERSION; sac-client release tag; updater logs sac-client ver.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-05-28 09:34:19 +10:00
PTah 0e83d8825d fix: accept SAC ingest HTTP 201, 409, and legacy 202 2026-05-28 09:13:13 +10:00
PTah 31c4265716 fix: log_action to stderr so captured paths stay valid 
find_remote_ssh_monitor_path output was polluted by log_action on stdout,
breaking -f checks; mirror user messages to stderr instead.
 2026-05-28 08:24:09 +10:00
PTah 731c50b0bc fix: find ssh-monitor in clone via git checkout and broader search 
Restore ssh-monitor from HEAD when missing on disk; try git ls-files and
find fallback; log clone root listing on failure.
 2026-05-28 08:20:37 +10:00
PTah 7f4d25b91c fix: sync /opt/scripts/update_ssh_monitor.sh from git clone each run 
After git pull, copy updater from clone to DEPLOY_INSTALL_PATH and re-exec
once so cron always picks up new logging without manual cp.
 2026-05-28 08:15:51 +10:00
PTah f3b7c9d41c feat: verbose update_ssh_monitor action log and run summary 
Log each step to /var/log/update_script.log and stdout (unless --quiet).
End-of-run summary explains skip reasons: checksum match, git pull fail,
missing clone path, versions and sha256 prefixes.
 2026-05-28 08:13:24 +10:00
PTah d179b360f2 fix: heartbeat only to SAC, never Telegram/email 
agent.heartbeat bypasses NOTIFY_CHAIN in all UseSAC modes; SAC ingest only.
Bump to 1.2.3-SAC.
 2026-05-28 07:56:18 +10:00
PTah dd980f0ba6 chore: bump release to 1.2.2-SAC 
Increase SSH monitor release version used by sac-client payloads and refresh
RU/EN README references to the new version.
 2026-05-27 15:53:29 +10:00
PTah 746a8f8f76 feat: bootstrap SAC config on update from pre-SAC installs 
ssh-monitor.conf.example ships dual SAC + Telegram defaults; updater
overwrites /etc/ssh-monitor.conf when UseSAC is off or SAC_API_KEY empty
or sac-client.sh is missing, with backup. Leaves configured hosts untouched.
 2026-05-27 15:23:35 +10:00
PTah 49ea1d2a7d chore: bump version to 1.2.1-SAC 2026-05-27 14:44:03 +10:00
PTah 29c91ee0db feat: send full daily report body and stats in SAC details 2026-05-27 14:15:13 +10:00
PTah 8627fdbcec chore: bump agent version to 1.2.0-SAC 2026-05-27 14:09:35 +10:00
PTah a4ea24c3f1 feat: SAC fallback failure counter (2.3) 
After SAC_FALLBACK_FAILURES consecutive POST errors, skip SAC until
/health recovers; persist count in SAC_FAIL_COUNT_FILE.
 2026-05-27 13:36:19 +10:00
PTah 3a1c9655ca feat: exclusive pilot — spool flush and verify script 
Replay spool on each monitor loop; sac_post_payload refactor;
pilot-verify-exclusive.sh and --check-sac hints for exclusive mode.
 2026-05-27 13:25:47 +10:00
PTah f1c4adcc13 feat: first deploy via update_ssh_monitor.sh --deploy 
Add first_deploy.sh wrapper and --deploy mode: git clone, install
ssh-monitor and sac-client, optional config/systemd/updater copy,
console summary and config variable checklist.
 2026-05-27 12:36:02 +10:00
PTah 1928e68088 fix: POST ingest to /api/v1/events when SAC_URL is host root 
Health already used sac_base_url(); ingest used raw SAC_URL and got
HTTP 405 when config had only https://host without /api/v1/events.
 2026-05-27 12:22:10 +10:00
PTah 4cb158f30a fix: always sync sac-client.sh in update_ssh_monitor 
Copy sac-client.sh on every git pull by checksum, not only when
ssh-monitor binary changes. Restart service when either file updates.
 2026-05-27 12:20:14 +10:00
PTah 18562af07a feat: map security events to SAC typed payloads 2026-05-27 11:24:19 +10:00
PTah 52654e2735 feat: sudo и notify_send шлют события в SAC (dual) 2026-05-27 11:01:47 +10:00
PTah a58027ed9b fix: update_ssh_monitor копирует sac-client.sh, REPO kalinamall 2026-05-27 10:47:38 +10:00
PTah ce48008738 merge: kalinamall main + UseSAC sac-client 2026-05-27 10:40:03 +10:00
PTah dd971d80bc feat: UseSAC sac-client.sh and --check-sac 2026-05-26 21:46:35 +10:00
PTah 2c65edf7db sync: align internal repo with 1.1.3-server-label 
- REPO_URL points to git.kalinamall.ru

- ssh-monitor.conf may be committed here (secrets); .env still ignored

- Docs note for closed vs public GitHub
 2026-05-26 19:34:01 +10:00
PTah 44f8eb6103 chore: ignore production config files with secrets 
ssh-monitor.conf and local overrides must not be committed to public GitHub.
 2026-05-26 19:33:39 +10:00
PTah b801cf2385 feat: подпись сервера во всех уведомлениях и документация 
Добавлены message_ensure_server_line и SERVER_DISPLAY_NAME; версия 1.1.3-server-label.
Гайды по уведомлениям и автообновлению.
 2026-05-25 09:23:32 +10:00
PapaTramp e2c0d5cbc7 Update update_ssh_monitor.sh 2026-05-14 12:59:12 +10:00
PapaTramp 3d20498515 Create update_ssh_monitor.sh 
Скрипт проверки наличия обновлений основного скрипта
 2026-05-14 12:57:55 +10:00