towerops

graham/towerops

Fork 0

Commit graph

Author	SHA1	Message	Date
Graham McIntire	0388637b65	Update infrastructure documentation with Valkey restart fix Documents the root cause analysis and solution for the Valkey pod restart issue. The problem was a race condition during node restarts, not a Flannel failure. Resolution: - Added system-cluster-critical priority class to Valkey - Application-level Redis health checks provide additional resilience - Monitoring ongoing to verify stability over 24-48 hours 🤖 Generated with Claude Code	2026-01-19 15:41:11 -06:00
Graham McIntire	5e9032314b	Add comprehensive Pangolin security rules Created 30+ security rules to protect against common web attacks: Protection categories: - SQL injection (UNION, OR/AND, comments) - XSS (script tags, event handlers) - Path traversal (directory traversal, absolute paths) - Common exploits (WordPress, PHPMyAdmin, admin panels) - Malicious bots (scanners, scrapers, empty user agents) - Shell injection (commands, ShellShock) - File upload exploits (PHP, double extensions) - Information disclosure (.git, .env, backups, configs) - Protocol attacks (HTTP/0.9, TRACE, TRACK) - Known CVEs (Log4Shell, SSRF, XXE) Features: - Allowlist for legitimate traffic (health checks, agents, monitoring) - Detailed documentation with examples - Testing and troubleshooting guides - Performance impact analysis - Compliance mapping (OWASP, PCI DSS, SOC 2) Documentation: docs/PANGOLIN_SECURITY.md Configuration: pangolin-security-rules.toml	2026-01-15 12:25:21 -06:00

Author

SHA1

Message

Date

Graham McIntire

0388637b65

Update infrastructure documentation with Valkey restart fix

Documents the root cause analysis and solution for the Valkey pod
restart issue. The problem was a race condition during node restarts,
not a Flannel failure.

Resolution:
- Added system-cluster-critical priority class to Valkey
- Application-level Redis health checks provide additional resilience
- Monitoring ongoing to verify stability over 24-48 hours

🤖 Generated with Claude Code

2026-01-19 15:41:11 -06:00

Graham McIntire

5e9032314b

Add comprehensive Pangolin security rules

Created 30+ security rules to protect against common web attacks:

Protection categories:
- SQL injection (UNION, OR/AND, comments)
- XSS (script tags, event handlers)
- Path traversal (directory traversal, absolute paths)
- Common exploits (WordPress, PHPMyAdmin, admin panels)
- Malicious bots (scanners, scrapers, empty user agents)
- Shell injection (commands, ShellShock)
- File upload exploits (PHP, double extensions)
- Information disclosure (.git, .env, backups, configs)
- Protocol attacks (HTTP/0.9, TRACE, TRACK)
- Known CVEs (Log4Shell, SSRF, XXE)

Features:
- Allowlist for legitimate traffic (health checks, agents, monitoring)
- Detailed documentation with examples
- Testing and troubleshooting guides
- Performance impact analysis
- Compliance mapping (OWASP, PCI DSS, SOC 2)

Documentation: docs/PANGOLIN_SECURITY.md
Configuration: pangolin-security-rules.toml

2026-01-15 12:25:21 -06:00

2 commits