feat: add Fail2ban security detection console

2026-08-14 10:58:18 +08:00
parent b78faa1aa2
commit d30d9ea4d0
45 changed files with 1967 additions and 18 deletions
@@ -52,6 +52,7 @@ rm -rf api/dist api/tsconfig.build.tsbuildinfo "$APP_DIR/dist/cmpp-gateway"
 npm run build
 npm --prefix api run build
 (cd gateway && GOPROXY="${GOPROXY:-https://goproxy.cn,direct}" /usr/local/bin/go build -o "$APP_DIR/dist/cmpp-gateway" ./cmd/gateway)
+(cd gateway && GOPROXY="${GOPROXY:-https://goproxy.cn,direct}" /usr/local/bin/go build -o "$APP_DIR/dist/cmpp-security-agent" ./cmd/security-agent)
 chmod 755 "$APP_DIR/dist" "$APP_DIR/dist/assets"
 find "$APP_DIR/dist/assets" -type d -exec chmod 755 {} +
 find "$APP_DIR/dist/assets" -type f -exec chmod 644 {} +
@@ -64,6 +65,9 @@ chmod 600 "$ADMIN_CREDENTIAL_FILE" || true
 echo "[deploy] Ensuring runtime log directories"
 install -d -m 0755 "$APP_DIR/logs/api" "$APP_DIR/logs/gateway"

+echo "[deploy] Installing restricted security boundary"
+bash "$APP_DIR/tools/security/install-security-agent.sh"
+
 echo "[deploy] Ensuring HTTP response compression"
 cat >/etc/nginx/conf.d/cmpp-compression.conf <<'EOF'
 gzip on;
@@ -85,6 +89,7 @@ else
  systemctl enable --now cmpp-api cmpp-gateway nginx
 fi
 systemctl restart cmpp-gateway
+systemctl restart cmpp-security-agent
 systemctl restart cmpp-api
 systemctl restart nginx