linux_patch_manager/patch-manager.target at 2a182768841b153bd8e1c0bbbe3374a1ffc28906 - linux_patch_manager - Gitea: Git with a cup of tea

git-echo/linux_patch_manager

Private

Public Access

Files

Echo 297bf1bd83 feat(M11+M12): Email notifications, audit hardening, deployment packaging, backup/DR, integration testing

M11 - Email Notifications + Audit Logging Hardening:
- Email notifier (lettre crate) with templates for patch failure, job completion, maintenance reminders
- Audit log hash chaining (prev_hash + row_hash) for tamper-evident logging
- Periodic + on-demand audit integrity verification
- Audit logging for all config changes and certificate operations
- Frontend: email settings integration, audit integrity verification action

M12 - Deployment Packaging, Backup/DR, Integration Testing:
- scripts/backup.sh: Nightly pg_dump, CA backup (GPG), config backup (secrets excluded unless encrypted)
- scripts/setup.sh: Enhanced with backup dir, seed migration, backup cron, systemd target install
- systemd units: Restart=always, WatchdogSec, ReadWritePaths, security hardening
- systemd/patch-manager.target: Service target for coordinated lifecycle
- docs/runbooks/restore.md: Full DR runbook with RPO 24h / RTO 4h targets
- scripts/integration-test.sh: 9 test suites covering full API lifecycle
- scripts/performance-test.sh: NFR validation (dashboard <5s, CIDR /22 <10s, API <2s)
- docs/security-review.md: Comprehensive security control verification
- docs/compliance-mapping.md: HIPAA (6 sections) + PCI-DSS v4.0 (9 requirements) mapped

2026-04-24 00:45:51 +00:00

8 lines

225 B

SYSTEMD

Raw Blame History

 [Unit]
 Description=Linux Patch Manager — Service Target
 Documentation=https://gitea.moon-dragon.us/echo/linux_patch_manager
 Wants=patch-manager-web.service patch-manager-worker.service
 [Install]
 WantedBy=multi-user.target