440577ac5a
chore: install-git-hooks.ps1 for Windows
2026-07-08 12:14:11 +10:00
5ac4792c3c
chore: auto manifest on version bump; local manual script only
...
contrib/manifest/generate.py + pre-commit hook; install-git-hooks.sh creates
.local/build-release-manifest.sh (gitignored). Remove scripts/ from remote.
2026-07-08 12:05:21 +10:00
0399a6d384
fix: manifest SHA256 from git blobs (CRLF/LF) — release 2.2.2-SAC
...
Manifest was hashed from Windows working tree while Linux checkout uses
git blobs; verify failed with sha256 mismatch. build-release-manifest.sh
now hashes :index/HEAD; .gitattributes enforces LF for agent scripts.
2026-07-08 12:00:51 +10:00
6df83f1838
feat: release 2.2.1-SAC — phase 2 manifest verify and quiet SAC updates
...
Pinned GIT_REF/verify, release manifest, no blind reset --hard; suppress
lifecycle and watchdog Telegram during updater; healthcheck via json.dumps.
2026-07-08 11:48:34 +10:00
275d305d62
feat: watchdog Telegram shows server name (2.1.9-SAC)
...
Add shared server label helpers in ssh-monitor-perms.sh; roadmap marks
phase 1 done and phase 2.2.0 as next release.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-07-08 11:28:57 +10:00
2048162057
feat: release 2.1.8-SAC — security phase 1 and SAC-first update hardening
...
Updater applies chmod/chown on config, spool and state paths on every run.
SAC is the primary update path; optional cron uses the same behavior.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-07-08 09:44:24 +10:00
ec0857b8f2
docs: security roadmap по аудиту (фазы 1–4, чек-лист)
2026-07-07 20:57:45 +10:00
1361fd264c
feat: merge missing SAC keys into config on deploy (2.1.2-SAC)
...
Append absent SAC variables from example instead of overwriting ssh-monitor.conf; set UseSAC=fallback on install and update.
2026-06-21 12:20:33 +10:00
577db1da47
chore(docs): sync repository URLs for kalinamall mirror
2026-06-16 11:37:52 +10:00
2956d14d94
chore(docs): GitHub repo URLs, remove .cursor from git, mirror scripts
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-06-16 11:36:51 +10:00
7f4d25b91c
fix: sync /opt/scripts/update_ssh_monitor.sh from git clone each run
...
After git pull, copy updater from clone to DEPLOY_INSTALL_PATH and re-exec
once so cron always picks up new logging without manual cp.
2026-05-28 08:15:51 +10:00
f3b7c9d41c
feat: verbose update_ssh_monitor action log and run summary
...
Log each step to /var/log/update_script.log and stdout (unless --quiet).
End-of-run summary explains skip reasons: checksum match, git pull fail,
missing clone path, versions and sha256 prefixes.
2026-05-28 08:13:24 +10:00
f1c4adcc13
feat: first deploy via update_ssh_monitor.sh --deploy
...
Add first_deploy.sh wrapper and --deploy mode: git clone, install
ssh-monitor and sac-client, optional config/systemd/updater copy,
console summary and config variable checklist.
2026-05-27 12:36:02 +10:00
4cb158f30a
fix: always sync sac-client.sh in update_ssh_monitor
...
Copy sac-client.sh on every git pull by checksum, not only when
ssh-monitor binary changes. Restart service when either file updates.
2026-05-27 12:20:14 +10:00
2c65edf7db
sync: align internal repo with 1.1.3-server-label
...
- REPO_URL points to git.kalinamall.ru
- ssh-monitor.conf may be committed here (secrets); .env still ignored
- Docs note for closed vs public GitHub
2026-05-26 19:34:01 +10:00
b801cf2385
feat: подпись сервера во всех уведомлениях и документация
...
Добавлены message_ensure_server_line и SERVER_DISPLAY_NAME; версия 1.1.3-server-label.
Гайды по уведомлениям и автообновлению.
2026-05-25 09:23:32 +10:00
b5b37b7e84
Переход автобана на ipset, документация и правки README
...
- ssh-monitor: баны через ipset (hash:ip timeout), одно правило iptables/ip6tables;
нормализация бан-листа (один IP — одна строка), версия 1.1.1-ipset.
- docs/install-prerequisites.ru.md: зависимости и установка пакетов (в т.ч. ipset).
- README: ссылка на docs, установка скрипта/systemd без дублирования apt; пометка про ipset.
- IPSET-NOTES.txt: заметки по развёртыванию ipset.
- ssh-monitor.conf.example: закомментированные переменные IPSET_*.
2026-04-16 11:30:04 +10:00
PTah