Initial commit

Author: tomnekic

.env.example

@@ -0,0 +1,33 @@
+# Copy this file to .env and fill in the two required values, then run:
+#
+#   docker compose up -d
+#   docker compose logs init          # prints admin credentials on first run
+#
+# Open http://localhost:8080 and log in.
+
+# ── Required ──────────────────────────────────────────────────────────────────
+
+# PostgreSQL password — choose something strong for production.
+POSTGRES_PASSWORD=change_me
+
+# AES-256 key used to encrypt stored webhook secrets.
+# Must be exactly 64 lowercase hex characters (32 bytes).
+# Generate with: openssl rand -hex 32
+WEBHOOK_SECRET_ENCRYPTION_KEY=replace_with_64_lowercase_hex_chars
+
+# ── Optional: first-run admin account ────────────────────────────────────────
+# These are only used the first time the stack starts (if no admin user exists).
+# Defaults: admin@localhost / change-me-now
+# Uncomment and set to use custom credentials from the start.
+
+# SEED_ADMIN_EMAIL=admin@example.com
+# SEED_ADMIN_PASSWORD=a-strong-password
+
+# ── Optional: HTTPS / reverse proxy ──────────────────────────────────────────
+# Set to true when terminating TLS in front of this stack (nginx, Caddy, etc.).
+# COOKIE_SECURE=true
+
+# ── Optional: demo mode ───────────────────────────────────────────────────────
+# Show demo credentials on the login screen. Requires a rebuild of the admin
+# image (docker compose up --build) to take effect.
+# VITE_SHOW_DEMO_ACCOUNT=false

.gitattributes

@@ -0,0 +1,7 @@
+# Normalize all text files to LF in the repository.
+# This project targets Linux (Docker, CI) so LF is the canonical line ending.
+* text=auto eol=lf
+
+# Windows batch/cmd files must keep CRLF or they break on Windows.
+*.bat text eol=crlf
+*.cmd text eol=crlf

.github/pull_request_template.md

@@ -0,0 +1,19 @@
+## Summary
+
+
+## Type of change
+
+- [ ] Bug fix
+- [ ] New feature
+- [ ] Breaking change (existing behaviour changes)
+- [ ] Documentation / tooling
+
+## Test plan
+
+- [ ] Existing tests pass (`cargo test`, `npm test`)
+- [ ] New tests added where appropriate
+- [ ] Tested manually against a running stack
+
+## API changes
+
+If this PR modifies the HTTP API, update `alon_sentinel/docs/api/openapi-v1.yaml` and note the changes here.

.github/workflows/ci.yml

@@ -0,0 +1,98 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
+jobs:
+  rust:
+    name: Rust
+    runs-on: ubuntu-latest
+
+    services:
+      postgres:
+        image: postgres:17
+        env:
+          POSTGRES_USER: postgres
+          POSTGRES_PASSWORD: postgres
+          POSTGRES_DB: alon_sentinel_test
+        ports:
+          - 5432:5432
+        options: >-
+          --health-cmd pg_isready
+          --health-interval 10s
+          --health-timeout 5s
+          --health-retries 5
+
+    env:
+      DATABASE_URL: postgresql://postgres:postgres@localhost:5432/alon_sentinel_test
+      TEST_DATABASE_URL: postgresql://postgres:postgres@localhost:5432/alon_sentinel_test
+
+    defaults:
+      run:
+        working-directory: alon_sentinel
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: dtolnay/rust-toolchain@stable
+        with:
+          toolchain: "1.95"
+          components: rustfmt, clippy
+
+      - uses: Swatinem/rust-cache@v2
+        with:
+          workspaces: alon_sentinel
+
+      - name: Check formatting
+        run: cargo fmt --check
+
+      - name: Install sqlx-cli
+        run: cargo install sqlx-cli --version 0.8.6 --no-default-features --features postgres,rustls
+
+      - name: Run migrations
+        run: sqlx migrate run --source migrations
+
+      - name: Clippy
+        run: cargo clippy -- -D warnings
+
+      - name: Check SQLx query metadata
+        run: cargo sqlx prepare --workspace --check -- --all-targets --all-features
+
+      - name: Test
+        run: cargo test
+
+  frontend:
+    name: Frontend
+    runs-on: ubuntu-latest
+
+    defaults:
+      run:
+        working-directory: alon_sentinel_admin
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 22
+          cache: npm
+          cache-dependency-path: alon_sentinel_admin/package-lock.json
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Build
+        run: npm run build
+
+      - name: Test
+        run: npm test

.gitignore

@@ -0,0 +1,41 @@
+# Environment
+.env
+
+# Rust build artifacts
+target/
+target_*/
+target-*/
+!**/target-service/
+
+# Frontend build output
+dist/
+
+# Node dependencies
+node_modules/
+
+# Log files written by the API/worker (LOG_DIR default: ./logs)
+logs/
+*.log
+
+# Benchmark run outputs — keep the directory stub, ignore result files
+benchmark/results/*
+!benchmark/results/.gitkeep
+!benchmark/results/scale_5000-monitors-ok_20260530_102907.txt
+!benchmark/results/scale_5000-monitors-ok_20260530_102907.samples.csv
+!benchmark/results/scale_10000-monitors-ok_20260530_132819.txt
+!benchmark/results/scale_10000-monitors-ok_20260530_132819.samples.csv
+!benchmark/results/scale_10000-monitors-fail-storm_20260530_141940.txt
+!benchmark/results/scale_10000-monitors-fail-storm_20260530_141940.samples.csv
+!benchmark/results/compare_1000m_20260529_133334.txt
+!benchmark/results/compare_4000m_20260530_075023.txt
+
+# OS artifacts
+.DS_Store
+Thumbs.db
+
+# Editor directories
+.vscode/
+.idea/
+*.swp
+*.swo
+

CHANGELOG.md

@@ -0,0 +1,56 @@
+# Changelog
+
+All notable changes to Alon Sentinel are documented here.
+
+The format follows [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
+Alon Sentinel follows [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+The `/v1` API surface carries documented stability guarantees: additive changes
+ship within `v1`; breaking changes require a new major version (`/v2`).
+
+---
+
+## [1.0.0] — 2026-05-23
+
+Initial public release.
+
+### Added
+
+**Monitor types**
+- HTTP — status code, response body, JSON path assertions, header assertions, response time threshold, and SSL expiry checks
+- SSL — certificate validity and days-until-expiry threshold
+- DNS — record resolution and expected-value matching
+- TCP — port reachability
+- Heartbeat — passive ping endpoint for cron jobs and background services
+
+**Site-centric model**
+- Sites group monitors around the service they protect
+- Per-site operational timeline across 24 h, 7 d, 30 d, and 90 d windows
+- Shared incident history, notifications, and public status output per site
+
+**Incident lifecycle**
+- Failures open incidents automatically; recoveries resolve them
+- Configurable check history retention
+
+**Public status pages**
+- Per-site public pages reflecting current health and open incidents
+- Degraded and outage states surfaced to end users or customers
+
+**Notifications**
+- Slack, Discord, webhook, and email channels
+- Per-site channel overrides for routing alerts independently
+
+**API and authentication**
+- Versioned REST API under `/v1` with OpenAPI specification
+- Machine-to-machine API clients with scoped bearer tokens (`sites:read`, `sites:write`)
+- Role-based admin users: viewer, operator, admin
+- In-process per-IP rate limiting on authentication endpoints
+
+**Deployment**
+- Docker Compose stack: PostgreSQL, API server, background worker, React admin UI behind nginx
+- Trusted-proxy mode for `X-Forwarded-For` support behind a reverse proxy
+- Lease-based worker coordination — no external queue required
+
+---
+
+[1.0.0]: https://github.com/Nekic9/alon_systems/releases/tag/v1.0.0

COMMERCIAL.md

@@ -0,0 +1,31 @@
+# Licensing
+
+Alon Sentinel is licensed under the GNU Affero General Public License v3.0 or
+later.
+
+This page is a plain-language summary. The controlling terms are in
+[`LICENSE`](LICENSE).
+
+## What the AGPL Allows
+
+- Use Alon Sentinel for personal, internal, commercial, and hosted deployments.
+- Copy, modify, and redistribute the software under the AGPL.
+- Charge for hosting, support, or distribution if you comply with the AGPL.
+
+## Source Availability
+
+If you modify Alon Sentinel and let users interact with it over a network, the
+AGPL requires you to offer those users access to the Corresponding Source for
+your modified version.
+
+## Separate Terms
+
+No separate commercial license is required for AGPL-compliant use.
+
+If you need different licensing terms, contact the maintainer.
+
+## Contact
+
+For licensing questions:
+
+**Email:** tomislav.nekic12@gmail.com

CONTRIBUTING.md

@@ -0,0 +1,51 @@
+# Contributing
+
+Thank you for your interest in contributing to Alon Sentinel.
+
+## Contributor License Grant
+
+By submitting a pull request, issue, patch, documentation change, suggestion,
+or any other contribution to this repository, you agree that:
+
+1. Your contribution is your original work, or you otherwise have the right to
+   submit it under these terms.
+2. You grant Tomislav Nekic and the Alon Sentinel project a perpetual,
+   worldwide, non-exclusive, royalty-free, irrevocable license to use,
+   reproduce, modify, prepare derivative works of, publicly display,
+   publicly perform, and distribute your contribution as part of Alon Sentinel
+   under the GNU Affero General Public License v3.0 or later.
+3. This grant allows the contribution to be used under the same AGPL terms as
+   the rest of the project.
+4. This grant does not transfer copyright ownership. You keep your own rights
+   to use your contribution for any purpose.
+
+This lightweight contributor license grant keeps contributions usable under the
+project license.
+If you cannot agree to this, please do not submit a contribution. Open an issue
+to discuss the idea instead.
+
+## How to contribute
+
+- **Bug reports:** open a GitHub issue with steps to reproduce and expected vs.
+  actual behavior.
+- **Feature requests:** open an issue describing the use case, not just the
+  requested feature.
+- **Pull requests:** open an issue first for anything non-trivial so we can
+  align before you invest time.
+
+## Code style
+
+- Rust: `cargo fmt` and `cargo clippy` must pass before submitting.
+- TypeScript: `npm run lint` must pass.
+- Keep changes focused: one concern per PR.
+
+## What gets accepted
+
+Priority is given to:
+
+- Bug fixes with a clear reproduction case
+- Performance improvements with measurements
+- Documentation improvements
+
+Features may be declined if they conflict with the product direction or belong
+outside the project's scope. When in doubt, ask first.