744c149300
Some checks failed
Build and Deploy Docs / build-and-deploy (push) Has been cancelled
- Created logs/ structure (sessions, operations, incidents) - Added session-start/log/end scripts - Installed Git hooks for auto-logging commits/pushes - Added shell integration for zsh - Created CHANGELOG.md - Documented today's session (2026-01-10)
🔐 Security — DAARION Infrastructure
Версія: 1.0.0
Останнє оновлення: 2026-01-09
Статус: Production Active
📋 Зміст
| Документ | Призначення |
|---|---|
| forensics-checklist.md | Чекліст розслідування інцидентів |
| persistence-scan.sh | Скрипт виявлення persistence |
| runtime-detector.sh | Детектор підозрілих процесів |
| hardening/docker.md | Docker security baseline |
| hardening/kubernetes.md | Kubernetes security policies |
| hardening/cloud.md | Cloud security (Hetzner) |
🎯 Принципи безпеки DAARION
1. Defense in Depth
[Network] → [Container] → [Process] → [Data]
↓ ↓ ↓ ↓
Firewall read-only runtime encrypt
egress cap_drop detection at rest
2. Zero Trust
- Кожен сервіс має мінімальні привілеї
- Мережевий доступ deny-by-default
- Аутентифікація для всіх internal API
3. Detect → Respond → Prevent
[Incident] → [Forensics] → [Root Cause] → [Hardening] → [Monitoring]
🚨 Incident Response Flow
При виявленні підозрілої активності:
# 1. Detect
./security/persistence-scan.sh
./security/runtime-detector.sh
# 2. Contain
docker stop <container>
iptables -I OUTPUT -d 0.0.0.0/0 -j DROP # emergency
# 3. Investigate
./security/forensics-checklist.md # follow checklist
# 4. Remediate
# Based on findings
# 5. Document
# Update INFRASTRUCTURE.md with incident details
📊 Security Metrics
| Metric | Target | Current |
|---|---|---|
Containers with read_only |
100% | 🔄 In progress |
Services with cap_drop: ALL |
100% | 🔄 In progress |
| Egress firewall rules | Active | ✅ Active |
| Runtime detection | Active | 🔄 Planned |
| Vulnerability scan frequency | Weekly | 🔄 Planned |
📞 Security Contacts
- Security Lead: admin@daarion.city
- Hetzner Abuse: abuse@hetzner.com
- Emergency: Submit statement via Hetzner Robot
📚 Related Documents
- INFRASTRUCTURE.md — Infrastructure overview + Incident history
- SECURITY-REBUILD-REPORT.md — daarion-web incident analysis
- TASK_REBUILD_DAARION_WEB.md — Rebuild task details