guard

6 Commits

Author	SHA1	Message	Date
abrown38andClaude Opus 5.5	96f551be80	Release 0.1.0-rc.1+git5-73ab640 release / release (push) Successful in 23s Details Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> v0.1.0-rc.1+git5-73ab640	2026-10-23 12:47:17 +01:00
abrown38andClaude Opus 5.5	73ab6405aa	Release script: encode + in the tag and asset names A build of a candidate (0.1.0-rc.1+git4-8fa62f9) put a raw + in the release lookup and the upload's ?name=, where it reads as a space. Housecarl's script has the same fix. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-23 12:47:17 +01:00
abrown38andClaude Opus 5.5	8fa62f9b91	Package: put the guard user in adm and systemd-journal Only the unit's SupplementaryGroups gave them, so 'sudo -u guard guard test' and 'guard check' could read neither /var/log's files nor the journal. systemd-sysusers (run on every install and upgrade) adds them. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-23 12:46:53 +01:00
abrown38andClaude Opus 5.5	c4e513f99c	Release 0.1.0-rc.1 release / release (push) Successful in 1m49s Details Guard 0.1.0's first release candidate. It needs Housecarl 0.2's ban lists. make test and make e2e (47 checks) pass. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> v0.1.0-rc.1	2026-10-22 16:45:55 +01:00
abrown38andClaude Opus 5.5	941d4fb10d	Release setup: tarballs, Gitea workflow, apt registry make dist builds tarballs for linux/amd64 and linux/arm64. A pushed v* tag runs .gitea/workflows/release.yml, which checks the tag against VERSION and the CHANGELOG, tests, builds the tarballs and the .debs (amd64, arm64) and publishes them with scripts/gitea-release.sh: a Gitea release, and the .debs in the Debian registry (stable, or testing for a release candidate). As in Housecarl and Steward; no cli-dist, Guard is Linux only. docs/development.md has the steps, docs/install.md the apt source. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-22 16:44:58 +01:00
abrown38andClaude Opus 5.5	d06bf8d531	Guard: watch logs, ban misbehaving addresses in Housecarl Files and the journal, patterns with one <IP>, bounties within a window, bans in a Housecarl ban list with repeat offenders' bans growing; presets for sshd, jarl, housecarl, steward, bind-xfr, postfix-sasl, dovecot, nginx-auth and housecarl-drops; guard run/check/test/status/bans/ban/unban; a Debian package with a sandboxed unit; an end-to-end test with Housecarl. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-22 16:29:37 +01:00