# LandveX Full Audit — 2026-07-07 20:05 UTC

## Sammanfattning

| Kategori | Status |
|----------|--------|
| **Tjänster** | 🟢 Alla uppe |
| **Säkerhet** | 🟡 Self-signed SSL, API-auth OK |
| **Resurser** | 🟢 Disk 28%, RAM 7%, CPU load 1.0 |
| **Uppdateringar** | 🟡 4 säkerhetsuppdateringar väntar |

---

## Tjänster

### Systemd (AAMOS)
| Tjänst | Status | Port |
|--------|--------|------|
| aamos-ledger | 🟢 active | 3250 |
| aamos-analytics-engine | 🟢 active | — |
| aamos-api-gateway | 🟢 active | — |
| aamos-audit-engine | 🟢 active | — |
| aamos-bank-import | 🟢 active | — |
| aamos-billing-engine | 🟢 active | — |
| aamos-health-aggregator | 🟢 active | — |
| aamos-hermes | 🟢 active | — |
| aamos-quixzoom-engine | 🟢 active | — |
| aamos-sie-import | 🟢 active | — |
| nginx | 🟢 active | 80, 443 |
| postgresql | 🟢 active | 5432 |
| redis | 🟢 active | 6379 |

### Docker
| Container | Status | Port |
|-----------|--------|------|
| quixzoom-passwordless | 🟢 healthy | 8082 |
| cursor-grafana | 🟢 Up | 3050 |
| cursor-n8n | 🟢 healthy | 5678 |
| cursor-postgres | 🟢 healthy | 5433 |
| cursor-kong | 🟢 healthy | 8001-8002, 8080 |
| cursor-prometheus | 🟢 Up | 9090 |
| cursor-frontend | 🟢 Up | 3010 |
| cursor-redis | 🟢 healthy | 6380 |
| cursor-kong-db | 🟢 healthy | — |
| gitea-act-runner | 🟢 Up | — |
| quixzoom-auth-redis | 🟢 Up | — |
| cursor-plane-web | 🟢 healthy | 3001 |
| cursor-plane-worker | 🟢 Up | — |
| cursor-plane-db | 🟢 healthy | — |
| cursor-plane-redis | 🟢 healthy | — |
| kyc-service-v3 | 🟢 Up | 8765 |
| pgbouncer | 🟢 Up | 6432 |
| clickhouse | 🟢 Up | 8123, 9000 |
| landvex-api-1 | 🟢 Up | 8081 |
| mailu-front-1 | 🟢 healthy | 25, 465, 587, 993 |
| mailu-webmail-1 | 🟢 healthy | — |
| mailu-imap-1 | 🟢 healthy | — |
| mailu-antispam-1 | 🟢 healthy | — |
| mailu-admin-1 | 🟢 healthy | — |
| mailu-smtp-1 | 🟢 healthy | 10025 |
| plane-api | 🟢 Up | 8091 |
| plane-web | 🟢 healthy | 8092 |
| plane-beat-worker | 🟢 Up | — |
| plane-worker | 🟢 Up | — |
| plane-minio | 🟢 healthy | 9000 |
| plane-rabbitmq | 🟢 healthy | 4369, 5671-5672 |
| plane-redis | 🟢 healthy | — |
| plane-db | 🟢 healthy | — |
| mailu-redis-1 | 🟢 healthy | — |
| gitea-postgres | 🟢 Up | — |
| gitea | 🟢 Up | 3000, 222 |
| wstunnel | 🟢 Up | — |

### LandveX (nya)
| Tjänst | Status | Port |
|--------|--------|------|
| landvex-api | 🟢 active | 8083 |
| landvex-bounties | 🟢 active | 8084 |
| landvex-claims | 🟢 active | 8085 |
| landvex-demo | 🟢 active | 8086 |

---

## Resurser

| Resurs | Använt | Totalt | % |
|--------|--------|--------|---|
| Disk | 272G | 1000G | 28% |
| RAM | 18G | 247G | 7% |
| CPU load | 1.68 | — | — |

---

## Säkerhet

| Kontroll | Status |
|----------|--------|
| API-autentisering | ✅ X-API-Key header |
| Rate limiting | ✅ 1000-10000 req/timme |
| SSL/TLS | ⚠️ Self-signed (365 dagar) |
| Firewall | ❌ Ej aktiv (firewalld) |
| Uppdateringar | ⚠️ 4 säkerhetsuppdateringar |

---

## Rekommendationer

1. **HTTPS** — Ersätt self-signed med Let's Encrypt när certbot fungerar
2. **Firewall** — Aktivera firewalld eller konfigurera security groups
3. **Uppdateringar** — Kör `dnf update --security` vid lämplig tid
4. **Loggar** — Centralisera loggning (ELK/Loki)
5. **Backup** — Automatisera dagliga backups till S3
6. **Monitorering** — Grafana dashboard för LandveX metrics

---

## Åtgärder tagna idag

- [x] aamos-ledger fixad (migrationer, views, service-env)
- [x] quixzoom-passwordless fixad (healthcheck)
- [x] LandveX Fas 0-3 implementerade
- [x] 10 API-endpoints byggda
- [x] 64 objekt laddade till SQLite
- [x] Nginx routing konfigurerad
- [x] HTTPS (self-signed) aktiverat
- [x] API-autentisering + rate limiting
- [x] Demo-UI byggd
- [x] Monitor + cron-jobb
- [x] Backup skapad
- [x] Systemd-services för LandveX
- [x] Dokumentation (README, API-docs, STATUS, AUDIT)