Bernt
6de2455917
- Added GLOBAL_MARKETS_TITLE to all translation files - Updated footer with 12 markets (4 active + 8 upcoming) - Translated market section to: zh-cn, zh-tw, ja, ko, th, vi, id, ms, hi - Built and deployed to production - CloudFront invalidation: I3RTMXVFDJXWLG3SYX208OP1CC
132 lines
4.0 KiB
Markdown
132 lines
4.0 KiB
Markdown
# LandveX Full Audit — 2026-07-07 20:05 UTC
|
|
|
|
## Sammanfattning
|
|
|
|
| Kategori | Status |
|
|
|----------|--------|
|
|
| **Tjänster** | 🟢 Alla uppe |
|
|
| **Säkerhet** | 🟡 Self-signed SSL, API-auth OK |
|
|
| **Resurser** | 🟢 Disk 28%, RAM 7%, CPU load 1.0 |
|
|
| **Uppdateringar** | 🟡 4 säkerhetsuppdateringar väntar |
|
|
|
|
---
|
|
|
|
## Tjänster
|
|
|
|
### Systemd (AAMOS)
|
|
| Tjänst | Status | Port |
|
|
|--------|--------|------|
|
|
| aamos-ledger | 🟢 active | 3250 |
|
|
| aamos-analytics-engine | 🟢 active | — |
|
|
| aamos-api-gateway | 🟢 active | — |
|
|
| aamos-audit-engine | 🟢 active | — |
|
|
| aamos-bank-import | 🟢 active | — |
|
|
| aamos-billing-engine | 🟢 active | — |
|
|
| aamos-health-aggregator | 🟢 active | — |
|
|
| aamos-hermes | 🟢 active | — |
|
|
| aamos-quixzoom-engine | 🟢 active | — |
|
|
| aamos-sie-import | 🟢 active | — |
|
|
| nginx | 🟢 active | 80, 443 |
|
|
| postgresql | 🟢 active | 5432 |
|
|
| redis | 🟢 active | 6379 |
|
|
|
|
### Docker
|
|
| Container | Status | Port |
|
|
|-----------|--------|------|
|
|
| quixzoom-passwordless | 🟢 healthy | 8082 |
|
|
| cursor-grafana | 🟢 Up | 3050 |
|
|
| cursor-n8n | 🟢 healthy | 5678 |
|
|
| cursor-postgres | 🟢 healthy | 5433 |
|
|
| cursor-kong | 🟢 healthy | 8001-8002, 8080 |
|
|
| cursor-prometheus | 🟢 Up | 9090 |
|
|
| cursor-frontend | 🟢 Up | 3010 |
|
|
| cursor-redis | 🟢 healthy | 6380 |
|
|
| cursor-kong-db | 🟢 healthy | — |
|
|
| gitea-act-runner | 🟢 Up | — |
|
|
| quixzoom-auth-redis | 🟢 Up | — |
|
|
| cursor-plane-web | 🟢 healthy | 3001 |
|
|
| cursor-plane-worker | 🟢 Up | — |
|
|
| cursor-plane-db | 🟢 healthy | — |
|
|
| cursor-plane-redis | 🟢 healthy | — |
|
|
| kyc-service-v3 | 🟢 Up | 8765 |
|
|
| pgbouncer | 🟢 Up | 6432 |
|
|
| clickhouse | 🟢 Up | 8123, 9000 |
|
|
| landvex-api-1 | 🟢 Up | 8081 |
|
|
| mailu-front-1 | 🟢 healthy | 25, 465, 587, 993 |
|
|
| mailu-webmail-1 | 🟢 healthy | — |
|
|
| mailu-imap-1 | 🟢 healthy | — |
|
|
| mailu-antispam-1 | 🟢 healthy | — |
|
|
| mailu-admin-1 | 🟢 healthy | — |
|
|
| mailu-smtp-1 | 🟢 healthy | 10025 |
|
|
| plane-api | 🟢 Up | 8091 |
|
|
| plane-web | 🟢 healthy | 8092 |
|
|
| plane-beat-worker | 🟢 Up | — |
|
|
| plane-worker | 🟢 Up | — |
|
|
| plane-minio | 🟢 healthy | 9000 |
|
|
| plane-rabbitmq | 🟢 healthy | 4369, 5671-5672 |
|
|
| plane-redis | 🟢 healthy | — |
|
|
| plane-db | 🟢 healthy | — |
|
|
| mailu-redis-1 | 🟢 healthy | — |
|
|
| gitea-postgres | 🟢 Up | — |
|
|
| gitea | 🟢 Up | 3000, 222 |
|
|
| wstunnel | 🟢 Up | — |
|
|
|
|
### LandveX (nya)
|
|
| Tjänst | Status | Port |
|
|
|--------|--------|------|
|
|
| landvex-api | 🟢 active | 8083 |
|
|
| landvex-bounties | 🟢 active | 8084 |
|
|
| landvex-claims | 🟢 active | 8085 |
|
|
| landvex-demo | 🟢 active | 8086 |
|
|
|
|
---
|
|
|
|
## Resurser
|
|
|
|
| Resurs | Använt | Totalt | % |
|
|
|--------|--------|--------|---|
|
|
| Disk | 272G | 1000G | 28% |
|
|
| RAM | 18G | 247G | 7% |
|
|
| CPU load | 1.68 | — | — |
|
|
|
|
---
|
|
|
|
## Säkerhet
|
|
|
|
| Kontroll | Status |
|
|
|----------|--------|
|
|
| API-autentisering | ✅ X-API-Key header |
|
|
| Rate limiting | ✅ 1000-10000 req/timme |
|
|
| SSL/TLS | ⚠️ Self-signed (365 dagar) |
|
|
| Firewall | ❌ Ej aktiv (firewalld) |
|
|
| Uppdateringar | ⚠️ 4 säkerhetsuppdateringar |
|
|
|
|
---
|
|
|
|
## Rekommendationer
|
|
|
|
1. **HTTPS** — Ersätt self-signed med Let's Encrypt när certbot fungerar
|
|
2. **Firewall** — Aktivera firewalld eller konfigurera security groups
|
|
3. **Uppdateringar** — Kör `dnf update --security` vid lämplig tid
|
|
4. **Loggar** — Centralisera loggning (ELK/Loki)
|
|
5. **Backup** — Automatisera dagliga backups till S3
|
|
6. **Monitorering** — Grafana dashboard för LandveX metrics
|
|
|
|
---
|
|
|
|
## Åtgärder tagna idag
|
|
|
|
- [x] aamos-ledger fixad (migrationer, views, service-env)
|
|
- [x] quixzoom-passwordless fixad (healthcheck)
|
|
- [x] LandveX Fas 0-3 implementerade
|
|
- [x] 10 API-endpoints byggda
|
|
- [x] 64 objekt laddade till SQLite
|
|
- [x] Nginx routing konfigurerad
|
|
- [x] HTTPS (self-signed) aktiverat
|
|
- [x] API-autentisering + rate limiting
|
|
- [x] Demo-UI byggd
|
|
- [x] Monitor + cron-jobb
|
|
- [x] Backup skapad
|
|
- [x] Systemd-services för LandveX
|
|
- [x] Dokumentation (README, API-docs, STATUS, AUDIT)
|