6 Commits

Author	SHA1	Message	Date
Gan, Jimmy	35a3019e0d	fix: add security log investigation filters ... Add server-side IP and date range filtering for security logs so investigations can narrow events without relying on client-side filtering alone. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-07 09:59:59 +08:00
Gan, Jimmy	533672c8ae	fix: disable Caddy log fetching - causes Docker API timeouts	2026-03-01 12:54:00 +08:00
Gan, Jimmy	53481f16f8	fix: reduce log tail defaults and add Docker client timeout to prevent security page hanging	2026-03-01 11:43:02 +08:00
Gan, Jimmy	26f458acee	fix: parse Authelia logfmt format in security logs	2026-03-01 11:06:48 +08:00
Gan, Jimmy	cb1028ebb6	fix: reduce false positives in security log detection ... - Skip internal API paths (/api/, /rest/, /backend/) from suspicious flagging - Remove broad .php match that caught Speedtest's garbage.php - Only flag 4xx on non-internal paths, ignore 5xx (service errors)	2026-03-01 10:31:38 +08:00
Gan, Jimmy	4b32929dcc	feat: watchtower tracking, dev environment, security logs page ... - watchtower: docker-compose with label filtering, email notifications - watchtower labels on navidrome, openclaw, immich services - dev env: docker-compose.dev.yml (port 4001), deploy-dev.yml CI workflow - dev.nas.jimmygan.com Caddy site block with Authelia forward_auth - security page: backend router parsing Authelia/Caddy container logs - security page: frontend with stats cards, timeline, top IPs, event log - wired security route into App.svelte and Sidebar	2026-03-01 00:40:14 +08:00