Security

Authelia: Authentication and Authorization 🔒 Single sign-on to all Potato Energy services with enterprise-level protection. Functions: 🔐 A single account for all services 📱 Two-factor authentication (TOTP, WebAuthn, push notifications) 🎯 Flexible access policies: by user, IP, device 🛡️ Protection against brute force and suspicious inputs 📋 Detailed logs of authorizations for administrators Usage: When logging into any service for the first time, create an Authelia account Set up 2FA in your personal account (recommended) Log in to services with one click - general authorization For administrators: Rights management, forced 2FA, session auditing - in a single panel. ...

Diun: Docker Image Update Monitoring 🔄 Notification service for Docker image updates. Functions: 🔍 Monitors image tags in Docker Hub, GitHub, and private registries 📩 Sends notifications to Telegram, Discord when new versions are released 📋 Maintains a detailed log of changes with links to releases Usage: Diun works in the background - no configuration required A notification arrives when an update is available for the service The administrator applies the update or sets up auto-update For administrators: Rules, filtering, notifications - in the config.

Prometheus: Metrics Collection 📊 Metrics collection system for early warning about problems. Functions: 🖥️ Server metrics: CPU, RAM, disk, network via node_exporter 🌐 Service availability: blackbox HTTP/TCP/ICMP checks 📈 Collecting metrics from applications: Nextcloud, Home Assistant, and others 🚨 Alertmanager: notifications in Telegram/Discord when thresholds are exceeded 🔍 Queries via PromQL for deep analysis How it works: Prometheus collects metrics on a schedule (scrape) Charts are displayed in Grafana On anomaly, an alert is triggered - the administrator receives a notification For administrators: Alert rules, recording rules, federation of metrics, long-term storage via Thanos. ...