bigtux a94809c812 🔐 Security hardening: auth, rate limiting, brute force protection
- Add comprehensive security package with:
  - API Key generation and validation (SHA256 hash)
  - Password policy enforcement (min 12 chars, complexity)
  - Rate limiting with presets (auth, api, ingest, export)
  - Brute force protection (5 attempts, 15min lockout)
  - Security headers middleware
  - IP whitelisting
  - Audit logging structure
  - Secure token generation

- Enhanced auth middleware:
  - JWT + API Key dual authentication
  - Token revocation via Redis
  - Scope-based authorization
  - Role-based access control

- Updated installer with:
  - Interactive setup for client customization
  - Auto-generated secure credentials
  - Docker all-in-one image
  - Agent installer script

- Added documentation:
  - SECURITY.md - Complete security guide
  - INSTALL.md - Installation guide
  - .env.example - Configuration reference
2026-02-05 23:02:06 -03:00
2026-02-05 21:35:47 -03:00

🐍 OPHION

Open Source Observability Platform

Metrics, Logs, Traces & Alerts - Made in Brazil

Features

  • 📊 Infrastructure Monitoring - CPU, RAM, Disk, Network
  • 📝 Log Management - Centralized logs with search
  • 🔍 Distributed Tracing - Track requests across services
  • 📈 Custom Dashboards - Drag-and-drop widgets
  • 🚨 Smart Alerts - Telegram, Slack, Email, Webhooks
  • 🔐 Enterprise Security - SSO, RBAC, Audit logs

Stack

  • Backend: Go (Fiber)
  • Frontend: Next.js 14 + TypeScript
  • Database: ClickHouse + PostgreSQL + Redis
  • Protocol: OpenTelemetry

Quick Start

# Docker (recommended)
curl -fsSL https://get.ophion.io | bash

# Or manually
docker compose up -d

Documentation

See docs/ for full documentation.

License

AGPL-3.0 (Community) / Commercial (Enterprise)


Made with 🖤 in Brazil

Description
🐍 OPHION - Open Source Observability Platform with AI-Powered Monitoring
https://ophion.com.br
Readme 12 MiB
Languages
Go 46.9%
TypeScript 26.6%
Shell 15.4%
HTML 6.9%
Dockerfile 2.9%
Other 1.3%