Commit 487dbeb#
| |
|---|
| Repository | bojemoi |
| Branch | main |
| Author | Betty |
| Hash | 487dbeb8e3c3b20fbe5aef6bb0a7ee9dd7db82ea |
Description#
sentinel:
- mosquitto config renamed to mosquitto_passwd_v2 (external)
- collector: Docker secrets support for MQTT/PG passwords
- SQL: fix timezone-aware index (DATE(first_seen AT TIME ZONE ‘UTC’))
- alertmanager: Telegram receiver for perimeter alerts (immediate routing)
- prometheus: add sentinel-collector scrape config + alert rules
- grafana: sentinel dashboard + postgres datasource
- startover: add sentinel (stack 55) to boot sequence
trivy:
- CI: split into security:trivy:dockerfile (config scan) + security:trivy:images (registry scan)
- images job: pulls localhost:5000 images, CRITICAL blocks, HIGH logged
- SARIF artifacts for both jobs
- new stack/50-service-trivy.yml + trivy-scanner/
- startover: add trivy (stack 50) to boot sequence
mcp-server:
- new mcp-server/ (server.py, tools/nmap.py, tools/osint.py)
- .mcp.json: Claude Code MCP config → http://localhost:8001/sse
provisioning:
- Dockerfile: multi-stage build, non-root user, no curl (urllib healthcheck)
- runtime: libpq5 only (no -dev), compiled .pyc, no source files
borodino:
- uzi: DEBUG_MODE=1 (test against Metasploitable 192.168.1.2)
grafana:
- stack 01: add SENTINEL_PG_PASS env var
blog: 10 new posts (MCP, Trivy, architecture, DockerHub, Alpine)
archi.md: architecture overview doc
Co-Authored-By: Claude Sonnet 4.6 noreply@anthropic.com
Files Changed#
Diff Summary#