B0rbor4d
cc4c3fcecb
- Backend: Customer/Satellite Models, customer_id auf Server/Job/Audit - Satellite-API: heartbeat, poll (atomares Claiming), logs, result, scan-result, health-report - Auth via X-Api-Key (SHA-256 gehasht) - Job-Queue: pending/claimed/running/success/failed + Stale-Janitor - Batch-Trigger: ein Job pro Server, Satellite arbeitet sequenziell ab - Credentials bleiben lokal: nur symbolische credential_ref zentral - Neues Paket satellite/: Pull-Loop, WinRM/SSH/CAU/Scanner, PyInstaller-tauglich - Frontend: Kunden-Switcher, Satelliten-View, Polling statt WebSocket - Entfernt: WebSocket/Socket.io, Redis, zentrale Credentials, JobRunner - Docs: README/AGENTS/PROMPT auf neue Architektur aktualisiert
27 lines
1.0 KiB
Python
27 lines
1.0 KiB
Python
"""Immutable audit trail model."""
|
|
|
|
from datetime import UTC, datetime
|
|
|
|
from sqlalchemy import DateTime, ForeignKey, String, Text
|
|
from sqlalchemy.orm import Mapped, mapped_column
|
|
|
|
from app.core.database import Base
|
|
|
|
|
|
class AuditLog(Base):
|
|
__tablename__ = "audit_logs"
|
|
|
|
id: Mapped[int] = mapped_column(primary_key=True)
|
|
timestamp: Mapped[datetime] = mapped_column(
|
|
DateTime(timezone=True), default=lambda: datetime.now(UTC), index=True
|
|
)
|
|
customer_id: Mapped[int | None] = mapped_column(
|
|
ForeignKey("customers.id"), nullable=True, index=True
|
|
)
|
|
username: Mapped[str] = mapped_column(String(255), index=True)
|
|
action: Mapped[str] = mapped_column(String(100), index=True) # e.g. server.create
|
|
target: Mapped[str | None] = mapped_column(String(255), nullable=True)
|
|
result: Mapped[str] = mapped_column(String(50), default="success") # success | failure
|
|
details: Mapped[str | None] = mapped_column(Text, nullable=True) # JSON blob
|
|
ip_address: Mapped[str | None] = mapped_column(String(45), nullable=True)
|