72hr audit: 4 new docs, port fixes, project-log updated

2026-08-08 12:55:30 -04:00
parent a269a17b1f
commit 11a1110b81
6 changed files with 438 additions and 3 deletions
@@ -67,6 +67,66 @@
 ### Skills Updated
 - 10 skills patched: docker-service-deployment, home-lab-*, server-architecture-plan, twilio-10dlc, vaultwarden-management, voip-portal, hudu, syncromsp, recurring-information-scout

+## 2026-08-05 through 2026-08-08
+
+### Super Search v2.4.0 -- Client-ID Metrics Tracking
+- Added Starlette middleware to intercept `X-Client-Id` header on every MCP call
+- Prometheus counters per client (`hermes`, `intelsight`, `dre-osint`, `verdicttank`) and per tool
+- Metrics exposed at `:8899/metrics`, scraped by Prometheus every 30s
+- Grafana dashboard "Super Search - Client Tracking" at `/d/ffuktvmgcpkhse` on core:3002
+- Super Search binding changed from 127.0.0.1:8899 to 0.0.0.0:8899 for Docker access
+- UFW rule added: allow 172.17.0.0/16 to port 8899
+- Prometheus scrape config added for super-search job at 172.17.0.1:8899/metrics
+- Docs: `/root/projects/itpp-infrastructure/docs/super-search-v2.4.0-client-tracking.md`
+
+### OSINT Person MCP -- Super Search Integration
+- Created `/root/docker/osint-person-mcp/super_search.py` MCP client module
+- Calls Super Search tools via `http://127.0.0.1:8899/mcp`
+- Mirrors IntelSight pattern for MCP-to-MCP tool delegation
+- Docs: `/root/projects/itpp-infrastructure/docs/osint-person-super-search-integration.md`
+
+### Ops v1 Retirement
+- Removed all orphaned `/var/www/ops/*.html`, `css/`, `js/`
+- Migrated `/var/www/ops/data/` to `/var/www/ops-v2/data/`
+- Updated Caddy: root redirect `ops.itpropartner.com` to `/v2/` (301)
+- Updated 8 Python scripts referencing old ops paths
+- Docs: `/root/projects/itpp-infrastructure/docs/ops-v1-retirement.md`
+
+### Grafana Admin Password Reset
+- Reset admin password to standard credentials via `grafana-cli admin reset-admin-password`
+- Grafana running on Core port 3002 (not 3000 as previously documented)
+
+### Moore Sunny Daze / Beach Direct
+- Built internal product backend (FastAPI on port 8911, Core) for Moore Sunny Daze
+- Fully documented Beach Direct as a standalone public product
+- Project docs: `/root/projects/itpp-infrastructure/projects/beachdirect.md`
+- Internal docs: `/root/projects/mooresunnydaze/docs/beach-direct-project.md`
+
+### Buzz Nostr Relay
+- Deployed Buzz self-hosted relay on app3 (152.53.241.111) via CloudPanel Docker/Nginx
+- Live at `https://buzz.iamgmb.com`
+- Closed-relay membership, Postgres + Redis + MinIO backend
+- Project spec: `/root/projects/itpp-infrastructure/projects/buzz-agent-integration-spec.md`
+
+### Hermes Mission Control (Planning)
+- Investigated Sharbel's Hermes Mission Control template (Next.js dashboard + Postgres + Bridge)
+- Architecture scoped: Dashboard host, Postgres setup, domain selection
+- Pending user decision on host and domain before build
+
+### Git Structure Audit
+- Full audit of all 40 Gitea repos + local repos under /root/projects/
+- Critical findings: hardcoded credentials in scripts repo, 13.6 MB blob in hermes-skills, missing .gitignore on 33/35 repos
+- Docs: `/root/projects/itpp-infrastructure/docs/git-audit-2026-08-07.md`
+
+### Grafana Dashboard Auth
+- Investigated Grafana basic auth plugin for external dashboard access
+- Generated password hash for Hermes Conduit iOS app dashboard integration
+
+### Infrastructure Gap Assessment
+- Subagent audit: 65+ services across 5 hosts, identified 12 services with no backup, 14 missing from API list
+- Duplicate services found: Twenty CRM (Core + App1), SearXNG (Core + App1)
+- Docs: `/root/projects/itpp-infrastructure/docs/infrastructure-gap-assessment-2026-08-04.md`
+
 ## 2026-07-29

 ### Village Express — Client Project