v9.4.0

cmd/dockwatch/main.go

@@ -9,6 +9,7 @@ import (
 	"git.send.nrw/sendnrw/dockwatch/internal/config"
 	database "git.send.nrw/sendnrw/dockwatch/internal/db"
 	"git.send.nrw/sendnrw/dockwatch/internal/gitops"
+	"git.send.nrw/sendnrw/dockwatch/internal/hostsecurity"
 	"git.send.nrw/sendnrw/dockwatch/internal/httpapi"
 	"git.send.nrw/sendnrw/dockwatch/internal/monitor"
 	"git.send.nrw/sendnrw/dockwatch/internal/nodes"
@@ -48,6 +49,14 @@ func main() {
 	au := audit.New(db)
 	nt := notify.New(db, cfg.EncryptionKey())
 	gs := gitops.New(db, cfg.EncryptionKey(), ss, nm)
+	hs := hostsecurity.New(hostsecurity.Config{
+		Enabled:                cfg.HostSecurityEnabled,
+		AllowChanges:           cfg.AllowHostSecurityChanges,
+		AllowPackageManagement: cfg.AllowHostPackageManagement,
+		HostRoot:               cfg.HostRoot,
+		DataDir:                cfg.DataDir,
+		HostPID:                cfg.HostSecurityPID,
+	})
 	ms.SetEventSink(func(ctx context.Context, ev monitor.Event) {
 		nt.Broadcast(ctx, notify.Message{Title: "Monitor " + ev.To + ": " + ev.Name, Body: ev.Target + " changed from " + ev.From + " to " + ev.To + ". " + ev.Check.Message, Status: ev.To, MonitorID: ev.MonitorID})
 		_ = au.Log(ctx, audit.Entry{Actor: "monitor", Action: "monitor.transition", Resource: ev.Name, Detail: map[string]any{"monitor_id": ev.MonitorID, "from": ev.From, "to": ev.To, "latency_ms": ev.Check.LatencyMS}, Status: 200})
@@ -63,7 +72,7 @@ func main() {
 	}
 	srv := &http.Server{
 		Addr:              cfg.ListenAddr,
-		Handler:           httpapi.New(cfg, as, ss, nm, ms, au, nt, gs),
+		Handler:           httpapi.New(cfg, as, ss, nm, ms, au, nt, gs, hs),
 		ReadHeaderTimeout: 10 * time.Second,
 		ReadTimeout:       30 * time.Second,
 		IdleTimeout:       2 * time.Minute,