wmantly
dfafffe154
- app_super_admin (cross-app, also recognized by sso-manager-node/proxy) and a new app_jump_admin group are added to conf.auth: super admins are full admins here same as app_sso_admin; jump admins get audit page/data access without other admin rights (isJumpAdmin/requireJumpAdmin in middleware/auth.js, wired into routes/api.js's audit-data gate and the /audit page's client-side forceLogin -- previously the page shell rendered for any logged-in user, only the data was gated). - Dashboard: moved the stat boxes and Top hosts/Top users cards to the Audit page (audit is now the admin-facing metrics home; dashboard stays focused on "hosts I can reach"). Renamed "All hosts" to "My hosts". - Host list now shows Last connection/Last failed connection columns and highlights rows green (live session, from session_registry) or yellow (most recent attempt failed) -- backed by new per-host last-success/ last-fail timestamps in models/metrics.js, populated by ssh_server.js (which now attributes grammar/TUI connect failures to the resolved host when one was found, not just aggregate counters) and surfaced through GET /api/user/hosts (routes/user.js).
124 lines
4.2 KiB
JavaScript
124 lines
4.2 KiB
JavaScript
'use strict';
|
|
|
|
// Base configuration. Deep-merged (by @simpleworkjs/conf) with
|
|
// conf/<NODE_ENV>.js, then the CONF_SECRETS file, then app_* env vars —
|
|
// later sources win. Everything here is a safe default; deployment-specific
|
|
// values (LDAP creds, SSO API token) belong in the secrets file.
|
|
|
|
module.exports = {
|
|
name: 'Jump Host',
|
|
logo: '/static/img/theta42.svg',
|
|
|
|
// LDAP directory the users live in (same directory the SSO manages).
|
|
// bindDN needs: read on ou=people (users + sshPublicKey) and ou=groups,
|
|
// and WRITE on the sshPublicKey attribute (for upstream key injection —
|
|
// see utils/key_inject.js and the README's ACL section).
|
|
ldap: {
|
|
url: 'ldap://localhost:389',
|
|
bindDN: '__in secrets file__',
|
|
bindPassword: '__in secrets file__',
|
|
userBase: 'ou=people,dc=example,dc=com',
|
|
groupBase: 'ou=groups,dc=example,dc=com',
|
|
userNameAttribute: 'uid',
|
|
tlsOptions: { rejectUnauthorized: false },
|
|
},
|
|
|
|
// SSO Manager — the directory (inventory) API. apiToken is a personal
|
|
// access token (sso_<id>_<secret>) of a user that can read
|
|
// /api/discovery/* (any authenticated user can).
|
|
sso: {
|
|
url: 'http://localhost:3001',
|
|
apiToken: '__in secrets file__',
|
|
},
|
|
|
|
ssh: {
|
|
listenHost: '0.0.0.0',
|
|
listenPort: 2222,
|
|
// Directory the generated host keys live in (created on first boot).
|
|
hostKeyPath: '/var/lib/jump-host/keys',
|
|
banner: '',
|
|
// Password auth policy: 'off' (keys only), 'local' (passwords allowed
|
|
// only from loopback/RFC1918 client addresses — keys-only from the
|
|
// public internet), or 'all'. Default 'local'.
|
|
passwordAuth: 'local',
|
|
// Allow bridging to a raw IP that is NOT a directory host the user
|
|
// has access to. Off by default: the directory is the authority.
|
|
allowRawIPs: false,
|
|
connectTimeoutMs: 10000,
|
|
// 0 disables the idle timeout.
|
|
idleTimeoutMs: 0,
|
|
maxSessions: 100,
|
|
// Comment appended to the injected public key in LDAP. Also used to
|
|
// EXCLUDE that key from inbound auth (only the jump host may hold
|
|
// that private key). theta-env sets this to jump-host@<siteName>.
|
|
keyComment: 'jump-host@local',
|
|
// metadata key on directory hosts for a nonstandard sshd port.
|
|
defaultPort: 22,
|
|
},
|
|
|
|
web: {
|
|
port: 3002,
|
|
},
|
|
|
|
// Web UI/API login. Same model as the proxy: OIDC against the SSO for
|
|
// normal users, plus a local anti-lockout admin that works even if the SSO
|
|
// is unreachable. OIDC endpoints + clientId/clientSecret live in the
|
|
// secrets file; enabled:false hides the "Log in with SSO" button.
|
|
oidc: {
|
|
enabled: false,
|
|
issuer: '',
|
|
authorizationEndpoint: '',
|
|
tokenEndpoint: '',
|
|
userinfoEndpoint: '',
|
|
clientId: '',
|
|
clientSecret: '',
|
|
redirectUri: '',
|
|
scopes: ['openid', 'profile', 'email', 'groups'],
|
|
groupsClaim: 'groups',
|
|
usernameClaim: 'preferred_username',
|
|
},
|
|
|
|
auth: {
|
|
// OIDC group memberships that grant web UI/API admin access.
|
|
// app_super_admin is the cross-app super admin group (sso, proxy, jump-host).
|
|
adminGroups: ['app_sso_admin', 'app_super_admin'],
|
|
// OIDC group memberships that grant jump admin access (the audit page
|
|
// and its data), without granting other admin-only rights. Full admins
|
|
// (adminGroups/adminUsers) always have jump admin access too.
|
|
jumpAdminGroups: ['app_jump_admin'],
|
|
// Local anti-lockout admin: the first name here is bootstrapped as a
|
|
// redis-backed user on first boot (password from localAdminPass, or a
|
|
// random one printed to the log once). Lets you in even with OIDC down.
|
|
adminUsers: ['jumpadmin'],
|
|
localAdminPass: '',
|
|
},
|
|
|
|
redis: {
|
|
prefix: 'jump_host_',
|
|
redisConf: {},
|
|
},
|
|
|
|
audit: {
|
|
// Keep at most this many audit events (oldest trimmed).
|
|
maxEvents: 50000,
|
|
},
|
|
|
|
// Standalone mode: run without LDAP or SSO Manager. When enabled, user
|
|
// authentication and host discovery use @simpleworkjs/orm-backed stores
|
|
// (Sequelize, defaulting to SQLite) instead of the directory services.
|
|
standalone: {
|
|
enabled: false,
|
|
},
|
|
|
|
// ORM config for standalone mode. Passed through to Sequelize — any dialect
|
|
// works. Defaults to SQLite for zero-dependency local dev.
|
|
orm: {
|
|
dialect: 'sqlite',
|
|
storage: './data/standalone.sqlite',
|
|
logging: false,
|
|
},
|
|
|
|
// Orchestrator-only keys (ignored by the app, read by theta-env).
|
|
stack: {},
|
|
};
|