- New: auth.py – Role-based access (operator/approver/viewer) - New: llm_router.py – Configurable primary/fallback provider chain - New: audit_log.py + audit_query.py – DSGVO-compliant audit trail - New: sanitize_output() – masks secrets in bot responses - Updated: bot.py – Integrated auth guards, router, audit logging - Updated: ollama_client.py – Router-compatible interface - Updated: CLOWNFISCHSERVER.md – Documentation updated - Updated: README.md – Documentation updated
19 lines
529 B
Plaintext
19 lines
529 B
Plaintext
[options]
|
|
UseSyslog
|
|
# Uncomment to specify interface:
|
|
# Interface = eth0
|
|
|
|
# Knock sequence: 7000 → 8000 → 9000 to OPEN SSH
|
|
[openSSH]
|
|
sequence = 7000,8000,9000
|
|
seq_timeout = 10
|
|
command = /sbin/iptables -I INPUT -s %IP% -p tcp --dport 22 -j ACCEPT
|
|
tcpflags = syn
|
|
|
|
# Knock sequence: 9000 → 8000 → 7000 to CLOSE SSH again
|
|
[closeSSH]
|
|
sequence = 9000,8000,7000
|
|
seq_timeout = 10
|
|
command = /sbin/iptables -D INPUT -s %IP% -p tcp --dport 22 -j ACCEPT
|
|
tcpflags = syn
|