Security

Authelia: Access protection 🔒 Single sign-on to all Potato Energy services with enterprise-level protection. What does: 🔐 A single account for all services - no need to remember passwords anymore 📱 Two-factor authentication (TOTP, WebAuthn, push notifications) 🎯 Flexible access policies: by user, IP, device 🛡️ Protection against brute force and suspicious inputs 📋 Detailed logs of authorizations for administrators How to use: When logging into any service for the first time, create an Authelia account Set up 2FA in your personal account (recommended) Log in to the services with one click - general authorization For administrators: Rights management, forced 2FA, session auditing - all in a single dashboard. ...

Diun: Guardian of the relevance of containers 🔄 Personal assistant for updating Docker images. What does: 🔍 Monitors image tags in Docker Hub, GitHub, and private registries 📩 Sends notifications to Telegram, Discord when new versions are released 📋 Detailed log of changes with links to releases How to use: Diun works in the background - no configuration required You will receive a notification when an update is available for the service. The administrator applies the update or sets up an auto-update For administrators: Flexible rules, filtering, and notifications are all in the config.

Prometheus: Infrastructure monitoring 📊 Warning system about problems before they occur. What controls: 🖥️ Server metrics: CPU, RAM, disk, network via node_exporter 🌐 Service availability: blackbox-HTTP/TCP/ICMP checks 📈 Collecting metrics from applications: Nextcloud, Home Assistant, and others 🚨 Alertmanager: notifications in Telegram/Discord when thresholds are exceeded 🔍 Powerful queries via PromQL for deep analysis How it works: Prometheus collects metrics on a schedule (scrap) Do you see graphs in Grafana or set up your dashboards In case of an anomaly, an alert is triggered and the administrator receives a notification. For administrators: Flexible alert rules, recording rules, federation of metrics, long-term storage via Thanos. ...