oliver/StaySense
1
0
Fork 0
Code Issues 11 Pull requests Projects Releases Packages Wiki Activity Actions

docs: add cloudpanel hardening and fail2ban operations notes

Browse source
This commit is contained in:
Oliver 2026-02-15 13:41:32 +01:00
parent 299647e9e8
commit 703230fb86
No known key found for this signature in database
2 changed files with 27 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

16
docs/OPERATIONS.md
View file

@ -21,6 +21,13 @@ sudo journalctl -u staysense-api.service -f
sudo journalctl -u staysense-import.service -f
```
Fail2ban Status:
```bash
sudo fail2ban-client status
sudo fail2ban-client status nginx-staysense-limitreq
```
Health check:
```bash
@ -39,3 +46,12 @@ cp /opt/staysense/data/staysense.db /opt/staysense/data/staysense.db.bak
cp /opt/staysense/data/staysense.db.bak /opt/staysense/data/staysense.db
sudo systemctl restart staysense-api.service
```
## Hardening Snapshot
- API-Rate-Limit aktiv auf `/api/` (`limit_req zone=limit burst=20 nodelay`)
- Security Header aktiv im vHost (`CSP`, `X-Frame-Options`, `X-Content-Type-Options`, `Referrer-Policy`, `Permissions-Policy`)
- Fail2ban Jail aktiv:
- Name: `nginx-staysense-limitreq`
- Log: `/home/staysense-site/logs/nginx/error.log`
- Ban bei wiederholten Rate-Limit-Verstoessen