Hub-and-Spoke Umbau: Multi-Tenant Zentrale + Satellite-Agent

- Backend: Customer/Satellite Models, customer_id auf Server/Job/Audit
- Satellite-API: heartbeat, poll (atomares Claiming), logs, result,
  scan-result, health-report - Auth via X-Api-Key (SHA-256 gehasht)
- Job-Queue: pending/claimed/running/success/failed + Stale-Janitor
- Batch-Trigger: ein Job pro Server, Satellite arbeitet sequenziell ab
- Credentials bleiben lokal: nur symbolische credential_ref zentral
- Neues Paket satellite/: Pull-Loop, WinRM/SSH/CAU/Scanner, PyInstaller-tauglich
- Frontend: Kunden-Switcher, Satelliten-View, Polling statt WebSocket
- Entfernt: WebSocket/Socket.io, Redis, zentrale Credentials, JobRunner
- Docs: README/AGENTS/PROMPT auf neue Architektur aktualisiert

This commit is contained in:

B0rbor4d

2026-08-07 03:42:06 +00:00

parent b91dd66fee

commit cc4c3fcecb

72 changed files with 2759 additions and 1642 deletions

									
										docker-compose.internal.yml
									
		+8
		
												View File
												
				@@ -0,0 +1,8 @@

				version: '3.8'

				# Internal-only override: publish the frontend directly on the host.

				# No Traefik server required; API/WS stay behind the frontend nginx proxy.

				services:

				  frontend:

				    ports:

				      - "8080:80"