Security & Audit Logs
Kisne kab kya kiya - login, PC join, commands
Audit log
0 entries · page 1 / 1
| Time | Kaun | Kya | Detail |
|---|
Security niyam (abhi lage hue)
- Sirf HTTPS (Caddy) - hub ka port internet par khula nahi
- Apps: API key · GPU PCs: har PC ki alag key (hub par sirf hash) · owner: password + cookie (HttpOnly, Secure, SameSite=Strict)
- Galat password: 5 min mein 8 try ke baad block
- PCs ko sirf fixed commands - shell kabhi nahi
- Customer data sirf 'trusted' PC par (X-Data-Class: customer)
- Dashboard par sirf numbers - prompts / jawab kabhi nahi
- Ek PC = ek identity (GPU UUID) - copy ki hui identity nahi chalti
Agla batch (aapke OK ke baad): owner login par 2FA (Authenticator app code), naye IP se login par WhatsApp alert, cookie 30 din se kam. Phase 2: Tailscale, PCs ke liye mTLS, alag users + roles.