botserver/src/security/protection/mod.rs

pub mod api;
pub mod caddy_hardener;
pub mod chkrootkit;
pub mod dns_hardener;
pub mod fail2ban;
pub mod firewall;
pub mod installer;
pub mod lmd;
pub mod lynis;
pub mod manager;
pub mod rkhunter;
pub mod security_fix;
pub mod sudoers;
pub mod suricata;

pub use api::configure_protection_routes;
pub use installer::{InstallResult, ProtectionInstaller, UninstallResult, VerifyResult};
pub use manager::{ProtectionManager, ProtectionTool, ToolStatus};
pub use security_fix::{run_security_fix, run_security_status, SecurityFixReport};
pub use sudoers::print_bootstrap_instructions;
Add security protection module with sudo-based privilege escalation - Create installer.rs for 'botserver install protection' command - Requires root to install packages and create sudoers config - Sudoers uses exact commands (no wildcards) for security - Update all tool files (lynis, rkhunter, chkrootkit, suricata, lmd) to use sudo - Update manager.rs service management to use sudo - Add 'sudo' and 'visudo' to command_guard.rs whitelist - Update CLI with install/remove/status protection commands Security model: - Installation requires root (sudo botserver install protection) - Runtime uses sudoers NOPASSWD for specific commands only - No wildcards in sudoers - exact command specifications - Tools run on host system, not in containers 2026-01-10 09:41:12 -03:00			`pub mod api;`
Fix clippy type complexity warnings 2026-03-17 01:12:05 -03:00			`pub mod caddy_hardener;`
Add security protection module with sudo-based privilege escalation - Create installer.rs for 'botserver install protection' command - Requires root to install packages and create sudoers config - Sudoers uses exact commands (no wildcards) for security - Update all tool files (lynis, rkhunter, chkrootkit, suricata, lmd) to use sudo - Update manager.rs service management to use sudo - Add 'sudo' and 'visudo' to command_guard.rs whitelist - Update CLI with install/remove/status protection commands Security model: - Installation requires root (sudo botserver install protection) - Runtime uses sudoers NOPASSWD for specific commands only - No wildcards in sudoers - exact command specifications - Tools run on host system, not in containers 2026-01-10 09:41:12 -03:00			`pub mod chkrootkit;`
security: add CoreDNS ACL hardening and fail2ban proxy jail - dns_hardener.rs: apply ACL (anti-amplification) + errors plugin to Corefile via lxc - fail2ban.rs: add apply_proxy() for caddy-http-flood jail in pragmatismo-proxy container - security_fix.rs: integrate dns and fail2ban_proxy steps into run_security_fix/status - mod.rs: export dns_hardener module 2026-03-17 11:18:19 -03:00			`pub mod dns_hardener;`
Fix clippy type complexity warnings 2026-03-17 01:12:05 -03:00			`pub mod fail2ban;`
			`pub mod firewall;`
Add security protection module with sudo-based privilege escalation - Create installer.rs for 'botserver install protection' command - Requires root to install packages and create sudoers config - Sudoers uses exact commands (no wildcards) for security - Update all tool files (lynis, rkhunter, chkrootkit, suricata, lmd) to use sudo - Update manager.rs service management to use sudo - Add 'sudo' and 'visudo' to command_guard.rs whitelist - Update CLI with install/remove/status protection commands Security model: - Installation requires root (sudo botserver install protection) - Runtime uses sudoers NOPASSWD for specific commands only - No wildcards in sudoers - exact command specifications - Tools run on host system, not in containers 2026-01-10 09:41:12 -03:00			`pub mod installer;`
			`pub mod lmd;`
			`pub mod lynis;`
			`pub mod manager;`
			`pub mod rkhunter;`
Fix clippy type complexity warnings 2026-03-17 01:12:05 -03:00			`pub mod security_fix;`
			`pub mod sudoers;`
Add security protection module with sudo-based privilege escalation - Create installer.rs for 'botserver install protection' command - Requires root to install packages and create sudoers config - Sudoers uses exact commands (no wildcards) for security - Update all tool files (lynis, rkhunter, chkrootkit, suricata, lmd) to use sudo - Update manager.rs service management to use sudo - Add 'sudo' and 'visudo' to command_guard.rs whitelist - Update CLI with install/remove/status protection commands Security model: - Installation requires root (sudo botserver install protection) - Runtime uses sudoers NOPASSWD for specific commands only - No wildcards in sudoers - exact command specifications - Tools run on host system, not in containers 2026-01-10 09:41:12 -03:00			`pub mod suricata;`

			`pub use api::configure_protection_routes;`
			`pub use installer::{InstallResult, ProtectionInstaller, UninstallResult, VerifyResult};`
			`pub use manager::{ProtectionManager, ProtectionTool, ToolStatus};`
Fix clippy type complexity warnings 2026-03-17 01:12:05 -03:00			`pub use security_fix::{run_security_fix, run_security_status, SecurityFixReport};`
			`pub use sudoers::print_bootstrap_instructions;`