Release/1.4.0

.dockerignore

@@ -0,0 +1,25 @@
+**
+!Dockerfile
+!requirements.txt
+!app.wsgi
+!gunicorn.conf.py
+!scheduler_runner.py
+!operations_runner.py
+!runtime_health.py
+!rotate_credential_secret.py
+!favicon.ico
+!LICENSE
+!NOTICE
+!LICENSING.md
+!app/
+!app/**
+!config_other/
+!config_other/**
+!container/
+!container/**
+**/__pycache__
+**/*.pyc
+app/tools/
+app/scripts/ansible/inventory/
+app/scripts/ansible/artifacts/
+app/scripts/ansible/env/

.env.example

@@ -0,0 +1,49 @@
+# Copy to .env in your deployment directory and restrict access to that file.
+# Use image references available for your installation; a digest pins a version.
+RMON_WEB_IMAGE=ghcr.io/roxy-wi/rmon/rmon-web:1.4.0
+RMON_PROXY_IMAGE=rmon-proxy:local
+RMON_SERVER_IMAGE=ghcr.io/roxy-wi/rmon/rmon-server:7.0
+RMON_AGENT_IMAGE=ghcr.io/roxy-wi/rmon/rmon-agent:2.0
+
+# Replace with the address users and agents can reach.
+RMON_PUBLIC_URL=https://192.0.2.10
+RMON_TLS_NAME=192.0.2.10
+RMON_WEB_PORT=443
+RMON_BIND_IP=0.0.0.0
+RMON_PROXY_SCHEME=https
+RMON_SELF_SIGNED=1
+
+# Keep these defaults for a new installation. For existing data, use absolute
+# host directory paths. Both web and server use the same config/data sources.
+RMON_CONFIG_SOURCE=rmon-config
+RMON_DATA_SOURCE=rmon-data
+RMON_LOG_SOURCE=rmon-logs
+RMON_TLS_SOURCE=rmon-tls
+# RMON_CONFIG_SOURCE=/etc/rmon
+# RMON_DATA_SOURCE=/var/lib/rmon
+# RMON_LOG_SOURCE=/var/log/rmon
+# RMON_TLS_SOURCE=/srv/rmon/tls
+
+# Used only with compose.server.yaml. The port is local-only by default.
+# COMPOSE_FILE=compose.yaml:compose.server.yaml
+RMON_SERVER_TOKEN_FILE=./secrets/server-token
+RMON_SERVER_BIND_IP=127.0.0.1
+RMON_SERVER_PORT=5100
+
+# Existing application secrets: preserve their exact values or mounted paths.
+# Single-quote literal values containing $ or #. Do not replace existing keys.
+# RMON_SECRET_PHRASE='existing-credential-key'
+# RMON_SECRET_KEY_FILE=/var/lib/rmon/keys/flask-secret
+# RMON_JWT_PRIVATE_KEY_FILE=/var/lib/rmon/keys/rmon-key
+# RMON_JWT_PUBLIC_KEY_FILE=/var/lib/rmon/keys/rmon-key.pub
+
+# External server diagnostics, used with compose.yaml alone. Files must be
+# mounted in web; paths below /etc/rmon are included by the config mount.
+# RMON_SERVER_INTERNAL_URL=https://receiver.example.net:5100
+# RMON_SERVER_INTERNAL_TOKEN_FILE=/etc/rmon/secrets/server-token
+# RMON_SERVER_CA_FILE=/etc/rmon/tls/ca.crt
+# RMON_SERVER_CLIENT_CERT_FILE=/etc/rmon/tls/web.crt
+# RMON_SERVER_CLIENT_KEY_FILE=/etc/rmon/tls/web.key
+
+# Override only when agents cannot reach RMON_PUBLIC_URL.
+# RMON_AGENT_CONTROL_URL=https://rmon-agent-access.example.net

.github/pull_request_template.md

@@ -0,0 +1,15 @@
+## Summary
+
+Describe the change and why it is needed.
+
+## Testing
+
+Describe the tests or checks you ran.
+
+## Contributor License Agreement
+
+After opening this pull request, comment exactly:
+
+`/sign-cla`
+
+You only need to sign once per CLA version. If you already accepted the current `CLA.md`, the `CLA` status check will pass automatically.