Commit Graph

21 Commits

Author SHA1 Message Date
97ca887649 fix: npm ci -> npm install (no lock file) 2026-02-07 10:56:08 -03:00
262073acb4 fix: simplify Java agent download in instrumentation Dockerfile 2026-02-07 10:54:28 -03:00
a1ca397c43 docs: add complete OPHION manual with logo 2026-02-06 22:27:27 -03:00
6f9657a3a8 feat: Universal auto-instrumentation for all languages
## New Features

### Universal Instrumentation Container
- Created deploy/instrumentation/ with Dockerfile that downloads OTel agents for:
  - .NET (glibc and musl/Alpine versions)
  - Node.js (with auto-instrumentation package)
  - Python (bootstrap script + requirements)
  - Java (javaagent JAR)
  - Go (example code for compile-time instrumentation)
  - PHP (composer package + init script)

### Universal instrument.sh Script
- Auto-detects application language from running processes
- Generates docker-compose snippets for each language
- Supports: dotnet, nodejs, python, java, go, php
- Usage: ./instrument.sh <container> [language] [otlp_endpoint]

### Improved docker-compose.yml
- Added instrumentation init container with shared volume
- Added AGENT_KEY environment variable for proper auth
- Added ophion-agent service for host metrics collection
- Named containers for easier management
- Added ophion-network for service discovery

### Documentation
- Created docs/QUICK_START.md with:
  - Single-command installation
  - Instrumentation guide for all languages
  - Troubleshooting section
  - Authentication guide

### Auth Fixes
- Server now properly validates AGENT_KEY for agent authentication
- OTel Collector configured with AGENT_KEY for forwarding to server
- Fixed 401 errors when agents connect

## Files Changed
- docker-compose.yml: Complete stack with all services
- deploy/instrumentation/*: Universal OTel agent container
- deploy/docker/otel-collector-config.yaml: Fixed auth headers
- instrument.sh: Universal instrumentation script
- docs/QUICK_START.md: Complete quick start guide
- README.md: Updated with new features
- .env.example: Added AGENT_KEY

## Testing
- Go code compiles successfully
- Docker images build correctly
- All changes are backwards compatible
2026-02-06 19:28:43 -03:00
0cd8b96cd0 feat: add .NET auto-instrumentation script 2026-02-06 19:18:49 -03:00
6038e82b22 fix: add agent key auth for ingest endpoints 2026-02-06 19:13:30 -03:00
615a8b5404 fix: database sslmode and ports 2026-02-06 15:10:50 -03:00
771cf6cf50 feat: Add OpenTelemetry OTLP HTTP receiver
- Add POST /v1/traces endpoint for OTLP JSON trace ingestion
- Convert OTLP spans to internal format and save to PostgreSQL
- Manual JSON parsing (no Go 1.24 dependencies)
- Add Node.js instrumentation example with Express
- Add Python instrumentation example with Flask
- Auto-instrumentation support for both languages
2026-02-06 14:59:29 -03:00
8b6e59d346 feat: add login page and auth guard 2026-02-06 14:45:59 -03:00
547619a1a7 feat: Add JWT authentication and API key security
- Add users table for dashboard authentication (email, password_hash, role)
- Add api_keys table for agent authentication (key_hash, prefix, name)
- Implement JWT auth with 24h expiration
- Implement API key auth with SHA256 hashing
- Add auth endpoints: POST /api/v1/auth/login, POST /api/v1/auth/register
- Add API key endpoints: GET/POST/DELETE /api/v1/api-keys
- Protect all /api/v1/* routes (except /health and /auth/*)
- Create default admin user (admin@ophion.local)
- First registered user automatically becomes admin
- Use bcrypt for password hashing (cost 12)
- Use SHA256 for API key hashing
- Add security headers middleware
2026-02-06 14:37:04 -03:00
d6b08cb586 fix: add go.sum and fixes 2026-02-06 14:26:15 -03:00
cf2b4f7b91 🔧 Fix: usar domínio correto get.ophion.com.br 2026-02-06 08:33:41 -03:00
fc4f98c359 📚 Update README for public release + installation docs 2026-02-06 07:49:34 -03:00
a94809c812 🔐 Security hardening: auth, rate limiting, brute force protection
- Add comprehensive security package with:
  - API Key generation and validation (SHA256 hash)
  - Password policy enforcement (min 12 chars, complexity)
  - Rate limiting with presets (auth, api, ingest, export)
  - Brute force protection (5 attempts, 15min lockout)
  - Security headers middleware
  - IP whitelisting
  - Audit logging structure
  - Secure token generation

- Enhanced auth middleware:
  - JWT + API Key dual authentication
  - Token revocation via Redis
  - Scope-based authorization
  - Role-based access control

- Updated installer with:
  - Interactive setup for client customization
  - Auto-generated secure credentials
  - Docker all-in-one image
  - Agent installer script

- Added documentation:
  - SECURITY.md - Complete security guide
  - INSTALL.md - Installation guide
  - .env.example - Configuration reference
2026-02-05 23:02:06 -03:00
dbf9f0497f feat: Add complete dashboard for customers
🎨 Dashboard UI (Next.js 14)
- Modern dark theme with purple/green accents
- Responsive layout with sidebar navigation
- Real-time metrics cards with alerts
- Interactive charts (CPU, Memory) with Recharts
- Hosts table with status indicators
- Alerts list with AI suggestions

🤖 AI Copilot Chat
- Slide-in panel with chat interface
- Quick action buttons
- Command suggestions with execute option
- Real-time loading indicators

📊 Components
- MetricCard with trend indicators
- HostsTable with colored metrics
- AlertsList with severity levels
- AIInsights panel with predictions
- CpuChart and MemoryChart

🛠️ Tech Stack
- Next.js 14 with App Router
- TypeScript
- Tailwind CSS
- Recharts for visualization
- Zustand for state management
2026-02-05 22:52:55 -03:00
0f7ac29f6e feat: Update landing page with AI differentiators 2026-02-05 22:49:37 -03:00
369373b387 feat: Add AI differentiators
🤖 OPHION Copilot
- Interactive AI assistant for troubleshooting
- Context-aware conversations
- Actionable suggestions with commands

🔧 Auto-Healing
- AI-powered incident analysis
- Automatic remediation plans
- Safe execution with dry-run mode

🚨 Smart Alerts
- Noise reduction
- Alert correlation
- Root cause analysis
- Impact assessment

📊 AI Insights
- Daily insights generation
- Security anomaly detection
- Cost optimization suggestions
- Capacity predictions
- Executive reports

🛡️ Security
- Behavioral anomaly detection
- Intrusion attempt identification
- Compliance monitoring
2026-02-05 22:48:10 -03:00
d58ac37e39 feat: Add AI engine and complete documentation
- Add AI engine with OpenAI integration
- Anomaly detection
- Log analysis with pattern clustering
- Capacity prediction
- Complete installation manual (Portuguese)
- Docker monitoring guide
- APM integration guide (Node.js, Python, Go)
- Alert configuration guide
2026-02-05 22:45:05 -03:00
b64cb8e133 docs: Add installation and configuration manual 2026-02-05 22:12:58 -03:00
5b662cf12f feat: Initial OPHION structure
- Go backend with Fiber framework
- Agent for metrics collection
- Docker Compose for self-hosted
- Auth middleware (JWT + API Keys)
- Rate limiting
- Install script
2026-02-05 21:35:47 -03:00
268ff690df Initial commit: OPHION observability platform 2026-02-05 21:02:44 -03:00