• Joined on 2025-07-13
michael commented on issue DAW/furt#110 2025-09-07 19:13:07 +02:00
systemd Service Hardening: Security-Optionen für Production

Issue Complete - Ready for Merge

Implementation: 6 security lines in furt.service Testing: Debian + Arch successful
Documentation: Included in issue description **Performance…

michael closed issue DAW/furt#110 2025-09-07 19:13:07 +02:00
systemd Service Hardening: Security-Optionen für Production
michael commented on issue DAW/furt#110 2025-09-07 19:12:31 +02:00
systemd Service Hardening: Security-Optionen für Production

Issue #110: systemd Service Hardening - Pragmatische Security-Optionen

State: open
Labels: effort/small, priority/medium, status/to-go, type/security
Milestone: v0.1.2 -…

michael commented on issue DAW/furt#110 2025-09-07 19:11:15 +02:00
systemd Service Hardening: Security-Optionen für Production

Multi-Distro Testing: COMPLETE

Testing Results:

johann (Debian 12, systemd 247): All features working klaus (Arch Linux, systemd ~256): All features working

**S…

michael commented on issue DAW/furt#110 2025-09-07 19:10:36 +02:00
systemd Service Hardening: Security-Optionen für Production

Debian Testing: SUCCESS

johann (Debian 12, systemd 247):

  • Service starts normally with all security options
  • API responds on localhost:7811
  • Memory usage: 812K (no performance…
michael commented on issue DAW/furt#110 2025-09-07 18:45:59 +02:00
systemd Service Hardening: Security-Optionen für Production

Issue-Scope Reduction

Nach Review reduziert auf pragmatische Security-Optionen:

Entfernt: SystemCallFilter, Capabilities, IPv6, Memory-Protection Grund: Security-Theater vs.…

michael pushed to feature/systemd-hardening at DAW/furt 2025-09-07 18:43:39 +02:00
32c51e326e chore: merkwerk auto-update
24bd94dec4 feat(deployment): add systemd security hardening
Compare 2 commits »
michael created branch feature/systemd-hardening in DAW/furt 2025-09-07 18:43:38 +02:00
michael commented on issue DAW/furt#111 2025-09-07 18:11:26 +02:00
validate-config.sh: False-positive 'server port not configured' error

Fix confirmed working on werner:

  • validate-config.sh now works correctly with POSIX regex
  • Configuration validation passes successfully
  • Service health check confirms functionality -…
michael closed issue DAW/furt#111 2025-09-07 18:11:26 +02:00
validate-config.sh: False-positive 'server port not configured' error
michael deleted branch fix/validate-config-posix-regex from DAW/furt 2025-09-07 18:10:03 +02:00
michael pushed to main at DAW/furt 2025-09-07 18:08:21 +02:00
77b9685231 Merge branch 'fix/validate-config-posix-regex'
b4bc104750 chore: merkwerk auto-update
683d6e5e5d fix(scripts): resolve POSIX regex compatibility in validate-config.sh
Compare 3 commits »
michael created branch fix/validate-config-posix-regex in DAW/furt 2025-09-07 18:03:40 +02:00
michael pushed to fix/validate-config-posix-regex at DAW/furt 2025-09-07 18:03:40 +02:00
b4bc104750 chore: merkwerk auto-update
683d6e5e5d fix(scripts): resolve POSIX regex compatibility in validate-config.sh
Compare 2 commits »
michael commented on issue DAW/furt#100 2025-09-07 17:53:56 +02:00
Service-Management: pexp-Pattern durch PID-File ersetzen

Issue #100 Successfully Completed

Implementation completed and tested on werner (OpenBSD):

Changes Made

  • PID-directory creation in setup-directories.sh (/var/run/furt/…
michael closed issue DAW/furt#100 2025-09-07 17:51:15 +02:00
Service-Management: pexp-Pattern durch PID-File ersetzen
michael pushed to main at DAW/furt 2025-09-07 17:51:15 +02:00
df1edf3dc5 feat(service): merge PID-file based service management (#100)
bbbbeef072 chore: merkwerk auto-update
59f372f2b0 feat(service): implement PID-file based service management
7ee990b052 chore: merkwerk auto-update
25a709ebbe feat(service): implement PID-file based service management (DAW/furt#100)
Compare 5 commits »
michael pushed to feature/pid-file-service-management at DAW/furt 2025-09-07 17:00:50 +02:00
bbbbeef072 chore: merkwerk auto-update
59f372f2b0 feat(service): implement PID-file based service management
Compare 2 commits »
michael opened issue DAW/furt#112 2025-09-07 13:42:00 +02:00
install.sh: Add --update-services parameter for service script updates
michael opened issue DAW/furt#111 2025-09-07 13:41:57 +02:00
validate-config.sh: False-positive 'server port not configured' error