Initial commit: Watchdog Docker v0.1
Complete OPNsense monitoring system with: - DHCP lease monitoring - New device detection (ARP) - Interface and gateway status monitoring - Web dashboard with real-time updates - Email notifications via SMTP - SQLite database for event logging - Docker deployment ready Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
This commit is contained in:
commit
a4b71f3631
|
|
@ -0,0 +1,31 @@
|
||||||
|
# Python
|
||||||
|
__pycache__/
|
||||||
|
*.py[cod]
|
||||||
|
*$py.class
|
||||||
|
*.so
|
||||||
|
.Python
|
||||||
|
venv/
|
||||||
|
env/
|
||||||
|
ENV/
|
||||||
|
*.egg-info/
|
||||||
|
|
||||||
|
# IDE
|
||||||
|
.vscode/
|
||||||
|
.idea/
|
||||||
|
*.swp
|
||||||
|
*.swo
|
||||||
|
|
||||||
|
# Data & Logs
|
||||||
|
data/*.db
|
||||||
|
data/*.log
|
||||||
|
data/backup.db
|
||||||
|
|
||||||
|
# Sensitive Config (optional - keep structure but remove secrets)
|
||||||
|
# config/config.yaml
|
||||||
|
|
||||||
|
# Docker
|
||||||
|
*.log
|
||||||
|
|
||||||
|
# OS
|
||||||
|
.DS_Store
|
||||||
|
Thumbs.db
|
||||||
|
|
@ -0,0 +1,134 @@
|
||||||
|
# CLAUDE.md
|
||||||
|
|
||||||
|
This file provides guidance to Claude Code (claude.ai/code) when working with code in this repository.
|
||||||
|
|
||||||
|
## Project Overview
|
||||||
|
|
||||||
|
Watchdog Docker v0.1 - OPNsense monitoring system with web dashboard and email notifications. Monitors DHCP leases, new devices (ARP), interface status changes, and gateway status changes.
|
||||||
|
|
||||||
|
## Tech Stack
|
||||||
|
|
||||||
|
- **Backend:** Python 3.11, Flask, Flask-Login
|
||||||
|
- **Scheduling:** APScheduler (background polling)
|
||||||
|
- **Database:** SQLite
|
||||||
|
- **Frontend:** Bootstrap 5, Vanilla JavaScript
|
||||||
|
- **API:** OPNsense REST API
|
||||||
|
- **Email:** SMTP with TLS
|
||||||
|
- **Deployment:** Docker + Docker Compose
|
||||||
|
|
||||||
|
## Commands
|
||||||
|
|
||||||
|
### Docker
|
||||||
|
```bash
|
||||||
|
# Build and start
|
||||||
|
docker-compose up -d --build
|
||||||
|
|
||||||
|
# View logs
|
||||||
|
docker-compose logs -f
|
||||||
|
|
||||||
|
# Stop
|
||||||
|
docker-compose down
|
||||||
|
|
||||||
|
# Restart
|
||||||
|
docker-compose restart
|
||||||
|
```
|
||||||
|
|
||||||
|
### Local Development
|
||||||
|
```bash
|
||||||
|
# Create virtual environment
|
||||||
|
python3 -m venv venv
|
||||||
|
source venv/bin/activate # Windows: venv\Scripts\activate
|
||||||
|
|
||||||
|
# Install dependencies
|
||||||
|
pip install -r requirements.txt
|
||||||
|
|
||||||
|
# Run app
|
||||||
|
python app/main.py
|
||||||
|
```
|
||||||
|
|
||||||
|
### Testing
|
||||||
|
```bash
|
||||||
|
# Test OPNsense API connection
|
||||||
|
python -c "from app.opnsense_api import OPNsenseAPI; import yaml; config = yaml.safe_load(open('config/config.yaml')); api = OPNsenseAPI(**config['opnsense']); print(api.test_connection())"
|
||||||
|
|
||||||
|
# Generate password hash
|
||||||
|
python -c "from werkzeug.security import generate_password_hash; print(generate_password_hash('your_password'))"
|
||||||
|
```
|
||||||
|
|
||||||
|
## Architecture
|
||||||
|
|
||||||
|
### Application Flow
|
||||||
|
1. **main.py** - Flask app initialization, routes, APScheduler setup
|
||||||
|
2. **monitor.py** - OPNsenseMonitor class runs periodic checks (check_all)
|
||||||
|
3. **opnsense_api.py** - OPNsenseAPI client handles all API communication
|
||||||
|
4. **database.py** - Database class manages SQLite operations
|
||||||
|
5. **email_handler.py** - EmailHandler sends SMTP notifications
|
||||||
|
|
||||||
|
### Monitoring Cycle
|
||||||
|
- APScheduler triggers `monitor.check_all()` every N seconds (configurable)
|
||||||
|
- Each check method compares current state vs previous state
|
||||||
|
- On changes: log to database + send email (if enabled)
|
||||||
|
- State stored in memory (resets on restart)
|
||||||
|
|
||||||
|
### Database Schema
|
||||||
|
- **events** - All monitored events (id, timestamp, type, interface, details, data JSON)
|
||||||
|
- **known_devices** - MAC addresses of known devices (auto-populated on first detection)
|
||||||
|
|
||||||
|
### Web Interface
|
||||||
|
- Login required (Flask-Login)
|
||||||
|
- Dashboard shows stats + filterable event table
|
||||||
|
- AJAX auto-refresh every 10s via /api/events endpoint
|
||||||
|
|
||||||
|
## Key Files
|
||||||
|
|
||||||
|
- **config/config.yaml** - ALL settings (OPNsense, monitoring, web, email, database)
|
||||||
|
- **app/main.py** - Flask app entry point
|
||||||
|
- **app/monitor.py** - Core monitoring logic with state tracking
|
||||||
|
- **app/database.py** - SQLite operations
|
||||||
|
- **app/email_handler.py** - Email notifications with HTML templates
|
||||||
|
- **app/opnsense_api.py** - OPNsense API wrapper
|
||||||
|
- **app/templates/** - Jinja2 templates (login.html, dashboard.html)
|
||||||
|
|
||||||
|
## Configuration
|
||||||
|
|
||||||
|
All settings in `config/config.yaml`:
|
||||||
|
- OPNsense host, API credentials, SSL verification
|
||||||
|
- Monitoring interval, monitored interfaces, event toggles
|
||||||
|
- Web port, secret key, admin password hash
|
||||||
|
- SMTP settings, recipients
|
||||||
|
- Database path, retention days
|
||||||
|
- Logging level
|
||||||
|
|
||||||
|
## Important Notes
|
||||||
|
|
||||||
|
- **State Tracking:** Monitor uses previous_* dicts to detect changes (DHCP leases, devices, interfaces, gateways)
|
||||||
|
- **Interface Filtering:** If `monitored_interfaces` is empty, monitor ALL interfaces
|
||||||
|
- **Known Devices:** New devices are auto-added to known_devices table on first detection
|
||||||
|
- **Email Logic:** Only send emails for unknown devices (new_device event with known=False)
|
||||||
|
- **Retention:** Old events auto-cleanup based on retention_days (default 90)
|
||||||
|
- **Password:** Admin password must be werkzeug scrypt hash in config.yaml
|
||||||
|
|
||||||
|
## Code Style
|
||||||
|
|
||||||
|
- German language in UI/emails (Deutsch)
|
||||||
|
- Docstrings in English
|
||||||
|
- Logging: logger.info for important events, logger.debug for routine operations
|
||||||
|
- Error handling: try/except with logger.error(..., exc_info=True)
|
||||||
|
- Type hints where applicable (Dict, List, Optional)
|
||||||
|
|
||||||
|
## Common Tasks
|
||||||
|
|
||||||
|
### Add new event type
|
||||||
|
1. Add check method to `monitor.py` (check_xyz)
|
||||||
|
2. Add toggle to config.yaml under events
|
||||||
|
3. Call from check_all() if enabled
|
||||||
|
4. Update email_handler colors/formatting if needed
|
||||||
|
|
||||||
|
### Modify OPNsense API calls
|
||||||
|
- All API methods in `opnsense_api.py`
|
||||||
|
- Use requests with basic auth (key:secret)
|
||||||
|
- SSL warnings suppressed if verify_ssl=false
|
||||||
|
|
||||||
|
### Change database schema
|
||||||
|
- Update initialize() in database.py
|
||||||
|
- Add migration logic if needed (or recreate DB)
|
||||||
|
|
@ -0,0 +1,30 @@
|
||||||
|
FROM python:3.11-slim
|
||||||
|
|
||||||
|
LABEL maintainer="Watchdog Docker"
|
||||||
|
LABEL version="0.1"
|
||||||
|
LABEL description="OPNsense Monitoring Container"
|
||||||
|
|
||||||
|
WORKDIR /app
|
||||||
|
|
||||||
|
# Install system dependencies
|
||||||
|
RUN apt-get update && apt-get install -y \
|
||||||
|
gcc \
|
||||||
|
&& rm -rf /var/lib/apt/lists/*
|
||||||
|
|
||||||
|
# Copy requirements
|
||||||
|
COPY requirements.txt .
|
||||||
|
RUN pip install --no-cache-dir -r requirements.txt
|
||||||
|
|
||||||
|
# Copy application
|
||||||
|
COPY app/ ./app/
|
||||||
|
COPY config/ ./config/
|
||||||
|
|
||||||
|
# Create data directory
|
||||||
|
RUN mkdir -p /app/data
|
||||||
|
|
||||||
|
EXPOSE 5000
|
||||||
|
|
||||||
|
HEALTHCHECK --interval=30s --timeout=10s --start-period=5s --retries=3 \
|
||||||
|
CMD python -c "import requests; requests.get('http://localhost:5000/health', timeout=5)" || exit 1
|
||||||
|
|
||||||
|
CMD ["python", "app/main.py"]
|
||||||
|
|
@ -0,0 +1,382 @@
|
||||||
|
# Watchdog Docker v0.1
|
||||||
|
|
||||||
|
Docker Container für OPNsense Monitoring mit Web-Interface und E-Mail-Benachrichtigungen.
|
||||||
|
|
||||||
|
## Features
|
||||||
|
|
||||||
|
- 🔍 **DHCP Lease Monitoring** - Überwachung neuer IP-Vergaben
|
||||||
|
- 📱 **Device Detection** - Erkennung neuer Geräte via ARP (mit Abgleich bekannter Geräte)
|
||||||
|
- 🔌 **Interface Monitoring** - Status-Änderungen von Netzwerk-Interfaces
|
||||||
|
- 🌐 **Gateway Monitoring** - Überwachung von Gateway-Status
|
||||||
|
- 📧 **E-Mail Benachrichtigungen** - Automatische Alerts bei Events
|
||||||
|
- 🖥️ **Web Dashboard** - Übersichtliches Interface mit Echtzeit-Updates
|
||||||
|
- 🔐 **Passwort-Schutz** - Gesicherter Zugang zum Dashboard
|
||||||
|
|
||||||
|
## Überwachte Events
|
||||||
|
|
||||||
|
| Event-Typ | Beschreibung | Interface-Filter |
|
||||||
|
|-----------|--------------|------------------|
|
||||||
|
| DHCP Lease | Neue IP-Adresse vergeben | ✓ |
|
||||||
|
| New Device | Neues Gerät im Netzwerk erkannt | ✓ |
|
||||||
|
| Interface Status | Interface up/down Änderungen | ✓ |
|
||||||
|
| Gateway Status | Gateway Status-Änderungen | - |
|
||||||
|
|
||||||
|
## Voraussetzungen
|
||||||
|
|
||||||
|
- Docker & Docker Compose
|
||||||
|
- OPNsense Firewall mit aktivierter API
|
||||||
|
- SMTP Server für E-Mail-Benachrichtigungen (optional)
|
||||||
|
|
||||||
|
## OPNsense API Setup
|
||||||
|
|
||||||
|
### 1. API Key & Secret generieren
|
||||||
|
|
||||||
|
1. In OPNsense: **System → Access → Users**
|
||||||
|
2. Wähle deinen Admin-User oder erstelle einen neuen
|
||||||
|
3. Scrolle zu **API keys** und klicke auf **+** (Add)
|
||||||
|
4. Notiere dir **Key** und **Secret** - sie werden nur einmal angezeigt!
|
||||||
|
|
||||||
|
### 2. API Zugriff testen
|
||||||
|
|
||||||
|
```bash
|
||||||
|
curl -k -u "YOUR_KEY:YOUR_SECRET" https://192.168.1.1/api/core/menu/search/
|
||||||
|
```
|
||||||
|
|
||||||
|
Falls erfolgreich, erhältst du JSON-Daten zurück.
|
||||||
|
|
||||||
|
## Installation
|
||||||
|
|
||||||
|
### 1. Repository klonen
|
||||||
|
|
||||||
|
```bash
|
||||||
|
git clone <repository-url>
|
||||||
|
cd watchdog-docker
|
||||||
|
```
|
||||||
|
|
||||||
|
### 2. Konfiguration anpassen
|
||||||
|
|
||||||
|
Bearbeite `config/config.yaml`:
|
||||||
|
|
||||||
|
#### OPNsense Einstellungen
|
||||||
|
|
||||||
|
```yaml
|
||||||
|
opnsense:
|
||||||
|
host: "https://192.168.1.1" # Deine OPNsense IP
|
||||||
|
api_key: "YOUR_API_KEY_HERE"
|
||||||
|
api_secret: "YOUR_API_SECRET_HERE"
|
||||||
|
verify_ssl: false # Auf true setzen bei gültigem Zertifikat
|
||||||
|
```
|
||||||
|
|
||||||
|
#### Admin-Passwort generieren
|
||||||
|
|
||||||
|
Passwort-Hash für das Web-Interface generieren:
|
||||||
|
|
||||||
|
```python
|
||||||
|
from werkzeug.security import generate_password_hash
|
||||||
|
|
||||||
|
# Ersetze 'dein_passwort' mit deinem gewünschten Passwort
|
||||||
|
password = "dein_passwort"
|
||||||
|
hash = generate_password_hash(password)
|
||||||
|
print(hash)
|
||||||
|
```
|
||||||
|
|
||||||
|
Kopiere den generierten Hash in die `config.yaml`:
|
||||||
|
|
||||||
|
```yaml
|
||||||
|
web:
|
||||||
|
admin_password_hash: "scrypt:32768:8:1$..." # Dein generierter Hash
|
||||||
|
```
|
||||||
|
|
||||||
|
#### E-Mail Konfiguration (optional)
|
||||||
|
|
||||||
|
```yaml
|
||||||
|
email:
|
||||||
|
enabled: true
|
||||||
|
smtp_server: "mail.yourdomain.com"
|
||||||
|
smtp_port: 587
|
||||||
|
smtp_use_tls: true
|
||||||
|
smtp_username: "watchdog@yourdomain.com"
|
||||||
|
smtp_password: "YOUR_PASSWORD"
|
||||||
|
from_address: "watchdog@yourdomain.com"
|
||||||
|
to_addresses:
|
||||||
|
- "admin@yourdomain.com"
|
||||||
|
```
|
||||||
|
|
||||||
|
Falls du keine E-Mails versenden möchtest, setze `enabled: false`.
|
||||||
|
|
||||||
|
#### Monitoring-Einstellungen
|
||||||
|
|
||||||
|
```yaml
|
||||||
|
monitoring:
|
||||||
|
polling_interval: 60 # Sekunden zwischen Checks
|
||||||
|
|
||||||
|
# Nur bestimmte Interfaces überwachen (leer = alle)
|
||||||
|
monitored_interfaces:
|
||||||
|
- lan
|
||||||
|
- wan
|
||||||
|
|
||||||
|
# Events ein/ausschalten
|
||||||
|
events:
|
||||||
|
dhcp_leases: true
|
||||||
|
new_devices: true
|
||||||
|
interface_status: true
|
||||||
|
gateway_status: true
|
||||||
|
```
|
||||||
|
|
||||||
|
### 3. Docker Container starten
|
||||||
|
|
||||||
|
```bash
|
||||||
|
# Container bauen und starten
|
||||||
|
docker-compose up -d
|
||||||
|
|
||||||
|
# Logs anzeigen
|
||||||
|
docker-compose logs -f
|
||||||
|
|
||||||
|
# Status prüfen
|
||||||
|
docker-compose ps
|
||||||
|
```
|
||||||
|
|
||||||
|
### 4. Web-Interface öffnen
|
||||||
|
|
||||||
|
Öffne im Browser: `http://localhost:5000`
|
||||||
|
|
||||||
|
- **Benutzername:** `admin`
|
||||||
|
- **Passwort:** Dein konfiguriertes Passwort
|
||||||
|
|
||||||
|
## Verzeichnisstruktur
|
||||||
|
|
||||||
|
```
|
||||||
|
watchdog-docker/
|
||||||
|
├── Dockerfile # Docker Image Definition
|
||||||
|
├── docker-compose.yml # Docker Compose Konfiguration
|
||||||
|
├── requirements.txt # Python Dependencies
|
||||||
|
├── README.md # Diese Datei
|
||||||
|
├── config/
|
||||||
|
│ └── config.yaml # Hauptkonfiguration
|
||||||
|
├── app/
|
||||||
|
│ ├── main.py # Flask App & Routes
|
||||||
|
│ ├── opnsense_api.py # OPNsense API Client
|
||||||
|
│ ├── monitor.py # Event Monitoring Logik
|
||||||
|
│ ├── database.py # SQLite Datenbank Handler
|
||||||
|
│ ├── email_handler.py # E-Mail Versand
|
||||||
|
│ └── templates/
|
||||||
|
│ ├── login.html # Login-Seite
|
||||||
|
│ └── dashboard.html # Dashboard
|
||||||
|
└── data/ # Auto-generiert beim ersten Start
|
||||||
|
├── watchdog.db # SQLite Datenbank
|
||||||
|
└── watchdog.log # Log-Datei
|
||||||
|
```
|
||||||
|
|
||||||
|
## API Endpoints
|
||||||
|
|
||||||
|
Das Dashboard verwendet folgende REST-API Endpoints:
|
||||||
|
|
||||||
|
- `GET /api/events` - Events abrufen
|
||||||
|
- Parameter: `limit`, `type`, `interface`
|
||||||
|
- `GET /api/stats` - Statistiken abrufen
|
||||||
|
- `GET /health` - Health Check
|
||||||
|
|
||||||
|
Beispiel:
|
||||||
|
```bash
|
||||||
|
curl http://localhost:5000/api/events?type=dhcp_lease&limit=10
|
||||||
|
```
|
||||||
|
|
||||||
|
## Datenbank
|
||||||
|
|
||||||
|
Die SQLite-Datenbank wird automatisch beim ersten Start erstellt.
|
||||||
|
|
||||||
|
### Tabellen
|
||||||
|
|
||||||
|
#### events
|
||||||
|
| Spalte | Typ | Beschreibung |
|
||||||
|
|--------|-----|--------------|
|
||||||
|
| id | INTEGER | Primary Key |
|
||||||
|
| timestamp | DATETIME | Event-Zeitpunkt |
|
||||||
|
| type | TEXT | Event-Typ |
|
||||||
|
| interface | TEXT | Interface-Name |
|
||||||
|
| details | TEXT | Event-Details |
|
||||||
|
| data | JSON | Vollständige Event-Daten |
|
||||||
|
|
||||||
|
#### known_devices
|
||||||
|
| Spalte | Typ | Beschreibung |
|
||||||
|
|--------|-----|--------------|
|
||||||
|
| mac | TEXT | MAC-Adresse (Primary Key) |
|
||||||
|
| name | TEXT | Geräte-Name |
|
||||||
|
| first_seen | DATETIME | Erstmals gesehen |
|
||||||
|
| last_seen | DATETIME | Zuletzt gesehen |
|
||||||
|
|
||||||
|
### Datenbank-Wartung
|
||||||
|
|
||||||
|
Alte Events werden automatisch nach der konfigurierten Retention-Zeit gelöscht (Standard: 90 Tage).
|
||||||
|
|
||||||
|
## E-Mail Benachrichtigungen
|
||||||
|
|
||||||
|
### Event-Typen
|
||||||
|
|
||||||
|
- **DHCP Lease** 🔵 - Neue IP-Vergabe
|
||||||
|
- **New Device** 🔴 - Unbekanntes Gerät (nur bei unbekannten Geräten)
|
||||||
|
- **Interface Status** ⚠️ - Interface up/down
|
||||||
|
- **Gateway Status** ⚠️ - Gateway-Änderungen
|
||||||
|
|
||||||
|
### E-Mail Beispiel
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
Jede E-Mail enthält:
|
||||||
|
- Event-Typ mit Icon
|
||||||
|
- Zeitpunkt
|
||||||
|
- Interface/Gateway
|
||||||
|
- IP, MAC, Hostname (bei Geräten)
|
||||||
|
- Detaillierte Beschreibung
|
||||||
|
|
||||||
|
## Troubleshooting
|
||||||
|
|
||||||
|
### Container startet nicht
|
||||||
|
|
||||||
|
```bash
|
||||||
|
# Logs prüfen
|
||||||
|
docker-compose logs
|
||||||
|
|
||||||
|
# Container Status
|
||||||
|
docker-compose ps
|
||||||
|
```
|
||||||
|
|
||||||
|
### OPNsense API-Verbindung schlägt fehl
|
||||||
|
|
||||||
|
1. Prüfe ob OPNsense erreichbar ist:
|
||||||
|
```bash
|
||||||
|
ping 192.168.1.1
|
||||||
|
```
|
||||||
|
|
||||||
|
2. Teste API manuell:
|
||||||
|
```bash
|
||||||
|
curl -k -u "KEY:SECRET" https://192.168.1.1/api/core/menu/search/
|
||||||
|
```
|
||||||
|
|
||||||
|
3. Prüfe Firewall-Regeln auf OPNsense
|
||||||
|
|
||||||
|
### Keine E-Mails werden versendet
|
||||||
|
|
||||||
|
1. Prüfe SMTP-Einstellungen in `config.yaml`
|
||||||
|
2. Teste SMTP-Verbindung:
|
||||||
|
```bash
|
||||||
|
telnet mail.yourdomain.com 587
|
||||||
|
```
|
||||||
|
3. Prüfe Container-Logs auf SMTP-Fehler
|
||||||
|
|
||||||
|
### Login funktioniert nicht
|
||||||
|
|
||||||
|
1. Prüfe ob Passwort-Hash korrekt generiert wurde
|
||||||
|
2. Versuche neuen Hash zu generieren:
|
||||||
|
```python
|
||||||
|
from werkzeug.security import generate_password_hash
|
||||||
|
print(generate_password_hash("dein_passwort"))
|
||||||
|
```
|
||||||
|
3. Hash in `config.yaml` ersetzen und Container neu starten
|
||||||
|
|
||||||
|
### Dashboard zeigt keine Events
|
||||||
|
|
||||||
|
1. Prüfe ob Monitoring läuft:
|
||||||
|
```bash
|
||||||
|
docker-compose logs | grep "Monitoring started"
|
||||||
|
```
|
||||||
|
|
||||||
|
2. Prüfe ob OPNsense API antwortet:
|
||||||
|
```bash
|
||||||
|
docker-compose logs | grep "OPNsense"
|
||||||
|
```
|
||||||
|
|
||||||
|
3. Erhöhe Log-Level auf DEBUG in `config.yaml`:
|
||||||
|
```yaml
|
||||||
|
logging:
|
||||||
|
level: "DEBUG"
|
||||||
|
```
|
||||||
|
|
||||||
|
## Update
|
||||||
|
|
||||||
|
```bash
|
||||||
|
# Container stoppen
|
||||||
|
docker-compose down
|
||||||
|
|
||||||
|
# Neueste Version pullen
|
||||||
|
git pull
|
||||||
|
|
||||||
|
# Container neu bauen und starten
|
||||||
|
docker-compose up -d --build
|
||||||
|
```
|
||||||
|
|
||||||
|
**Hinweis:** Die Datenbank (`data/watchdog.db`) bleibt bei Updates erhalten.
|
||||||
|
|
||||||
|
## Backup
|
||||||
|
|
||||||
|
### Datenbank sichern
|
||||||
|
|
||||||
|
```bash
|
||||||
|
# Backup erstellen
|
||||||
|
docker-compose exec watchdog sqlite3 /app/data/watchdog.db ".backup /app/data/backup.db"
|
||||||
|
|
||||||
|
# Backup aus Container kopieren
|
||||||
|
docker cp watchdog:/app/data/backup.db ./backup.db
|
||||||
|
```
|
||||||
|
|
||||||
|
### Konfiguration sichern
|
||||||
|
|
||||||
|
```bash
|
||||||
|
# Config sichern
|
||||||
|
cp config/config.yaml config/config.yaml.backup
|
||||||
|
```
|
||||||
|
|
||||||
|
## Sicherheitshinweise
|
||||||
|
|
||||||
|
- ⚠️ Ändere das `secret_key` in der `config.yaml`
|
||||||
|
- ⚠️ Verwende ein sicheres Admin-Passwort
|
||||||
|
- ⚠️ Aktiviere SSL-Verifizierung (`verify_ssl: true`) in Produktion
|
||||||
|
- ⚠️ Verwende HTTPS für das Web-Interface (z.B. mit Reverse Proxy)
|
||||||
|
- ⚠️ Speichere keine API-Secrets in Git (nutze `.env` Dateien)
|
||||||
|
|
||||||
|
## Entwicklung
|
||||||
|
|
||||||
|
### Lokale Entwicklung ohne Docker
|
||||||
|
|
||||||
|
```bash
|
||||||
|
# Virtual Environment erstellen
|
||||||
|
python3 -m venv venv
|
||||||
|
source venv/bin/activate # Windows: venv\Scripts\activate
|
||||||
|
|
||||||
|
# Dependencies installieren
|
||||||
|
pip install -r requirements.txt
|
||||||
|
|
||||||
|
# App starten
|
||||||
|
python app/main.py
|
||||||
|
```
|
||||||
|
|
||||||
|
### Tests
|
||||||
|
|
||||||
|
```bash
|
||||||
|
# OPNsense API Connection testen
|
||||||
|
python -c "from app.opnsense_api import OPNsenseAPI; import yaml; config = yaml.safe_load(open('config/config.yaml')); api = OPNsenseAPI(**config['opnsense']); print(api.test_connection())"
|
||||||
|
```
|
||||||
|
|
||||||
|
## Support
|
||||||
|
|
||||||
|
Bei Problemen oder Fragen:
|
||||||
|
|
||||||
|
1. Prüfe die [Troubleshooting](#troubleshooting) Sektion
|
||||||
|
2. Aktiviere DEBUG-Logging und prüfe die Logs
|
||||||
|
3. Erstelle ein Issue mit:
|
||||||
|
- Container-Logs (`docker-compose logs`)
|
||||||
|
- Konfiguration (ohne Secrets!)
|
||||||
|
- Fehlerbeschreibung
|
||||||
|
|
||||||
|
## Lizenz
|
||||||
|
|
||||||
|
MIT License
|
||||||
|
|
||||||
|
## Changelog
|
||||||
|
|
||||||
|
### v0.1 (Initial Release)
|
||||||
|
- OPNsense Monitoring (DHCP, Devices, Interfaces, Gateways)
|
||||||
|
- Web Dashboard mit Echtzeit-Updates
|
||||||
|
- E-Mail Benachrichtigungen
|
||||||
|
- SQLite Datenbank
|
||||||
|
- Docker Support
|
||||||
|
|
@ -0,0 +1,253 @@
|
||||||
|
import sqlite3
|
||||||
|
import logging
|
||||||
|
import json
|
||||||
|
from datetime import datetime, timedelta
|
||||||
|
from typing import Dict, List, Optional
|
||||||
|
|
||||||
|
logger = logging.getLogger(__name__)
|
||||||
|
|
||||||
|
class Database:
|
||||||
|
"""SQLite database handler for Watchdog Docker"""
|
||||||
|
|
||||||
|
def __init__(self, db_path: str):
|
||||||
|
self.db_path = db_path
|
||||||
|
logger.info(f"Database initialized at {db_path}")
|
||||||
|
|
||||||
|
def _get_connection(self):
|
||||||
|
"""Get database connection"""
|
||||||
|
conn = sqlite3.connect(self.db_path)
|
||||||
|
conn.row_factory = sqlite3.Row
|
||||||
|
return conn
|
||||||
|
|
||||||
|
def initialize(self):
|
||||||
|
"""Create database tables if they don't exist"""
|
||||||
|
logger.info("Initializing database tables")
|
||||||
|
|
||||||
|
conn = self._get_connection()
|
||||||
|
cursor = conn.cursor()
|
||||||
|
|
||||||
|
# Events table
|
||||||
|
cursor.execute('''
|
||||||
|
CREATE TABLE IF NOT EXISTS events (
|
||||||
|
id INTEGER PRIMARY KEY AUTOINCREMENT,
|
||||||
|
timestamp DATETIME DEFAULT CURRENT_TIMESTAMP,
|
||||||
|
type TEXT NOT NULL,
|
||||||
|
interface TEXT,
|
||||||
|
details TEXT NOT NULL,
|
||||||
|
data JSON
|
||||||
|
)
|
||||||
|
''')
|
||||||
|
|
||||||
|
# Create index on timestamp for faster queries
|
||||||
|
cursor.execute('''
|
||||||
|
CREATE INDEX IF NOT EXISTS idx_events_timestamp
|
||||||
|
ON events(timestamp DESC)
|
||||||
|
''')
|
||||||
|
|
||||||
|
# Create index on type for filtering
|
||||||
|
cursor.execute('''
|
||||||
|
CREATE INDEX IF NOT EXISTS idx_events_type
|
||||||
|
ON events(type)
|
||||||
|
''')
|
||||||
|
|
||||||
|
# Known devices table
|
||||||
|
cursor.execute('''
|
||||||
|
CREATE TABLE IF NOT EXISTS known_devices (
|
||||||
|
mac TEXT PRIMARY KEY,
|
||||||
|
name TEXT,
|
||||||
|
first_seen DATETIME DEFAULT CURRENT_TIMESTAMP,
|
||||||
|
last_seen DATETIME DEFAULT CURRENT_TIMESTAMP
|
||||||
|
)
|
||||||
|
''')
|
||||||
|
|
||||||
|
conn.commit()
|
||||||
|
conn.close()
|
||||||
|
logger.info("Database tables initialized successfully")
|
||||||
|
|
||||||
|
def add_event(self, event: Dict):
|
||||||
|
"""Add an event to the database"""
|
||||||
|
conn = self._get_connection()
|
||||||
|
cursor = conn.cursor()
|
||||||
|
|
||||||
|
try:
|
||||||
|
cursor.execute('''
|
||||||
|
INSERT INTO events (type, interface, details, data)
|
||||||
|
VALUES (?, ?, ?, ?)
|
||||||
|
''', (
|
||||||
|
event.get('type'),
|
||||||
|
event.get('interface'),
|
||||||
|
event.get('details'),
|
||||||
|
json.dumps(event)
|
||||||
|
))
|
||||||
|
|
||||||
|
conn.commit()
|
||||||
|
logger.debug(f"Event added: {event.get('type')} - {event.get('details')}")
|
||||||
|
|
||||||
|
# Auto-add new devices to known_devices if applicable
|
||||||
|
if event.get('type') == 'new_device' and not event.get('known'):
|
||||||
|
mac = event.get('mac')
|
||||||
|
hostname = event.get('hostname', 'Unknown')
|
||||||
|
if mac:
|
||||||
|
self.add_known_device(mac, hostname)
|
||||||
|
|
||||||
|
except Exception as e:
|
||||||
|
logger.error(f"Error adding event: {e}", exc_info=True)
|
||||||
|
conn.rollback()
|
||||||
|
finally:
|
||||||
|
conn.close()
|
||||||
|
|
||||||
|
def get_recent_events(self, limit: int = 100, event_type: Optional[str] = None,
|
||||||
|
interface: Optional[str] = None) -> List[Dict]:
|
||||||
|
"""Get recent events with optional filtering"""
|
||||||
|
conn = self._get_connection()
|
||||||
|
cursor = conn.cursor()
|
||||||
|
|
||||||
|
query = 'SELECT * FROM events WHERE 1=1'
|
||||||
|
params = []
|
||||||
|
|
||||||
|
if event_type:
|
||||||
|
query += ' AND type = ?'
|
||||||
|
params.append(event_type)
|
||||||
|
|
||||||
|
if interface:
|
||||||
|
query += ' AND interface = ?'
|
||||||
|
params.append(interface)
|
||||||
|
|
||||||
|
query += ' ORDER BY timestamp DESC LIMIT ?'
|
||||||
|
params.append(limit)
|
||||||
|
|
||||||
|
try:
|
||||||
|
cursor.execute(query, params)
|
||||||
|
rows = cursor.fetchall()
|
||||||
|
|
||||||
|
events = []
|
||||||
|
for row in rows:
|
||||||
|
event = {
|
||||||
|
'id': row['id'],
|
||||||
|
'timestamp': row['timestamp'],
|
||||||
|
'type': row['type'],
|
||||||
|
'interface': row['interface'],
|
||||||
|
'details': row['details'],
|
||||||
|
'data': json.loads(row['data']) if row['data'] else {}
|
||||||
|
}
|
||||||
|
events.append(event)
|
||||||
|
|
||||||
|
return events
|
||||||
|
|
||||||
|
except Exception as e:
|
||||||
|
logger.error(f"Error getting events: {e}", exc_info=True)
|
||||||
|
return []
|
||||||
|
finally:
|
||||||
|
conn.close()
|
||||||
|
|
||||||
|
def get_statistics(self) -> Dict:
|
||||||
|
"""Get event statistics"""
|
||||||
|
conn = self._get_connection()
|
||||||
|
cursor = conn.cursor()
|
||||||
|
|
||||||
|
try:
|
||||||
|
# Total events
|
||||||
|
cursor.execute('SELECT COUNT(*) as count FROM events')
|
||||||
|
total = cursor.fetchone()['count']
|
||||||
|
|
||||||
|
# Events today
|
||||||
|
today = datetime.now().strftime('%Y-%m-%d')
|
||||||
|
cursor.execute(
|
||||||
|
'SELECT COUNT(*) as count FROM events WHERE DATE(timestamp) = ?',
|
||||||
|
(today,)
|
||||||
|
)
|
||||||
|
today_count = cursor.fetchone()['count']
|
||||||
|
|
||||||
|
# Events last hour
|
||||||
|
one_hour_ago = (datetime.now() - timedelta(hours=1)).strftime('%Y-%m-%d %H:%M:%S')
|
||||||
|
cursor.execute(
|
||||||
|
'SELECT COUNT(*) as count FROM events WHERE timestamp >= ?',
|
||||||
|
(one_hour_ago,)
|
||||||
|
)
|
||||||
|
hour_count = cursor.fetchone()['count']
|
||||||
|
|
||||||
|
# Events by type
|
||||||
|
cursor.execute('''
|
||||||
|
SELECT type, COUNT(*) as count
|
||||||
|
FROM events
|
||||||
|
GROUP BY type
|
||||||
|
''')
|
||||||
|
by_type = {row['type']: row['count'] for row in cursor.fetchall()}
|
||||||
|
|
||||||
|
# Known devices count
|
||||||
|
cursor.execute('SELECT COUNT(*) as count FROM known_devices')
|
||||||
|
known_devices = cursor.fetchone()['count']
|
||||||
|
|
||||||
|
return {
|
||||||
|
'total_events': total,
|
||||||
|
'events_today': today_count,
|
||||||
|
'events_last_hour': hour_count,
|
||||||
|
'events_by_type': by_type,
|
||||||
|
'known_devices': known_devices
|
||||||
|
}
|
||||||
|
|
||||||
|
except Exception as e:
|
||||||
|
logger.error(f"Error getting statistics: {e}", exc_info=True)
|
||||||
|
return {
|
||||||
|
'total_events': 0,
|
||||||
|
'events_today': 0,
|
||||||
|
'events_last_hour': 0,
|
||||||
|
'events_by_type': {},
|
||||||
|
'known_devices': 0
|
||||||
|
}
|
||||||
|
finally:
|
||||||
|
conn.close()
|
||||||
|
|
||||||
|
def is_known_device(self, mac: str) -> bool:
|
||||||
|
"""Check if a device is known"""
|
||||||
|
conn = self._get_connection()
|
||||||
|
cursor = conn.cursor()
|
||||||
|
|
||||||
|
try:
|
||||||
|
cursor.execute('SELECT mac FROM known_devices WHERE mac = ?', (mac,))
|
||||||
|
result = cursor.fetchone()
|
||||||
|
return result is not None
|
||||||
|
except Exception as e:
|
||||||
|
logger.error(f"Error checking known device: {e}", exc_info=True)
|
||||||
|
return False
|
||||||
|
finally:
|
||||||
|
conn.close()
|
||||||
|
|
||||||
|
def add_known_device(self, mac: str, name: str = 'Unknown'):
|
||||||
|
"""Add a device to known devices"""
|
||||||
|
conn = self._get_connection()
|
||||||
|
cursor = conn.cursor()
|
||||||
|
|
||||||
|
try:
|
||||||
|
cursor.execute('''
|
||||||
|
INSERT OR REPLACE INTO known_devices (mac, name, last_seen)
|
||||||
|
VALUES (?, ?, CURRENT_TIMESTAMP)
|
||||||
|
''', (mac, name))
|
||||||
|
|
||||||
|
conn.commit()
|
||||||
|
logger.info(f"Device added to known devices: {mac} ({name})")
|
||||||
|
except Exception as e:
|
||||||
|
logger.error(f"Error adding known device: {e}", exc_info=True)
|
||||||
|
conn.rollback()
|
||||||
|
finally:
|
||||||
|
conn.close()
|
||||||
|
|
||||||
|
def cleanup_old_events(self, retention_days: int):
|
||||||
|
"""Delete events older than retention period"""
|
||||||
|
conn = self._get_connection()
|
||||||
|
cursor = conn.cursor()
|
||||||
|
|
||||||
|
try:
|
||||||
|
cutoff_date = (datetime.now() - timedelta(days=retention_days)).strftime('%Y-%m-%d %H:%M:%S')
|
||||||
|
|
||||||
|
cursor.execute('DELETE FROM events WHERE timestamp < ?', (cutoff_date,))
|
||||||
|
deleted = cursor.rowcount
|
||||||
|
|
||||||
|
conn.commit()
|
||||||
|
logger.info(f"Cleaned up {deleted} events older than {retention_days} days")
|
||||||
|
|
||||||
|
except Exception as e:
|
||||||
|
logger.error(f"Error cleaning up old events: {e}", exc_info=True)
|
||||||
|
conn.rollback()
|
||||||
|
finally:
|
||||||
|
conn.close()
|
||||||
|
|
@ -0,0 +1,308 @@
|
||||||
|
import smtplib
|
||||||
|
import logging
|
||||||
|
from email.mime.text import MIMEText
|
||||||
|
from email.mime.multipart import MIMEMultipart
|
||||||
|
from datetime import datetime
|
||||||
|
from typing import Dict, List
|
||||||
|
|
||||||
|
logger = logging.getLogger(__name__)
|
||||||
|
|
||||||
|
class EmailHandler:
|
||||||
|
"""Handle email notifications for Watchdog events"""
|
||||||
|
|
||||||
|
def __init__(self, config: Dict):
|
||||||
|
self.config = config
|
||||||
|
self.smtp_server = config['smtp_server']
|
||||||
|
self.smtp_port = config['smtp_port']
|
||||||
|
self.smtp_use_tls = config['smtp_use_tls']
|
||||||
|
self.smtp_username = config['smtp_username']
|
||||||
|
self.smtp_password = config['smtp_password']
|
||||||
|
self.from_address = config['from_address']
|
||||||
|
self.to_addresses = config['to_addresses']
|
||||||
|
|
||||||
|
logger.info(f"EmailHandler initialized for {self.smtp_server}:{self.smtp_port}")
|
||||||
|
|
||||||
|
def _send_email(self, subject: str, html_content: str):
|
||||||
|
"""Send an email"""
|
||||||
|
try:
|
||||||
|
# Create message
|
||||||
|
msg = MIMEMultipart('alternative')
|
||||||
|
msg['Subject'] = subject
|
||||||
|
msg['From'] = self.from_address
|
||||||
|
msg['To'] = ', '.join(self.to_addresses)
|
||||||
|
|
||||||
|
# Add HTML content
|
||||||
|
html_part = MIMEText(html_content, 'html')
|
||||||
|
msg.attach(html_part)
|
||||||
|
|
||||||
|
# Send email
|
||||||
|
with smtplib.SMTP(self.smtp_server, self.smtp_port) as server:
|
||||||
|
if self.smtp_use_tls:
|
||||||
|
server.starttls()
|
||||||
|
|
||||||
|
server.login(self.smtp_username, self.smtp_password)
|
||||||
|
server.send_message(msg)
|
||||||
|
|
||||||
|
logger.info(f"Email sent: {subject}")
|
||||||
|
return True
|
||||||
|
|
||||||
|
except Exception as e:
|
||||||
|
logger.error(f"Failed to send email: {e}", exc_info=True)
|
||||||
|
return False
|
||||||
|
|
||||||
|
def send_event_notification(self, event: Dict):
|
||||||
|
"""Send notification for a single event"""
|
||||||
|
subject = self._format_subject(event)
|
||||||
|
html_content = self._format_event_email(event)
|
||||||
|
|
||||||
|
self._send_email(subject, html_content)
|
||||||
|
|
||||||
|
def send_startup_notification(self):
|
||||||
|
"""Send notification when Watchdog starts"""
|
||||||
|
subject = "🟢 Watchdog Docker gestartet"
|
||||||
|
|
||||||
|
html_content = f"""
|
||||||
|
<html>
|
||||||
|
<head>
|
||||||
|
<style>
|
||||||
|
body {{
|
||||||
|
font-family: Arial, sans-serif;
|
||||||
|
line-height: 1.6;
|
||||||
|
color: #333;
|
||||||
|
}}
|
||||||
|
.container {{
|
||||||
|
max-width: 600px;
|
||||||
|
margin: 0 auto;
|
||||||
|
padding: 20px;
|
||||||
|
}}
|
||||||
|
.header {{
|
||||||
|
background-color: #28a745;
|
||||||
|
color: white;
|
||||||
|
padding: 20px;
|
||||||
|
border-radius: 5px;
|
||||||
|
text-align: center;
|
||||||
|
}}
|
||||||
|
.content {{
|
||||||
|
background-color: #f8f9fa;
|
||||||
|
padding: 20px;
|
||||||
|
margin-top: 20px;
|
||||||
|
border-radius: 5px;
|
||||||
|
}}
|
||||||
|
.footer {{
|
||||||
|
text-align: center;
|
||||||
|
margin-top: 20px;
|
||||||
|
color: #666;
|
||||||
|
font-size: 12px;
|
||||||
|
}}
|
||||||
|
</style>
|
||||||
|
</head>
|
||||||
|
<body>
|
||||||
|
<div class="container">
|
||||||
|
<div class="header">
|
||||||
|
<h1>🟢 Watchdog Docker</h1>
|
||||||
|
<p>Monitoring gestartet</p>
|
||||||
|
</div>
|
||||||
|
<div class="content">
|
||||||
|
<p><strong>Status:</strong> Aktiv</p>
|
||||||
|
<p><strong>Zeitpunkt:</strong> {datetime.now().strftime('%d.%m.%Y %H:%M:%S')}</p>
|
||||||
|
<p><strong>Version:</strong> 0.1</p>
|
||||||
|
<hr>
|
||||||
|
<p>OPNsense Monitoring ist aktiv und überwacht folgende Events:</p>
|
||||||
|
<ul>
|
||||||
|
<li>DHCP Leases</li>
|
||||||
|
<li>Neue Geräte (ARP)</li>
|
||||||
|
<li>Interface Status</li>
|
||||||
|
<li>Gateway Status</li>
|
||||||
|
</ul>
|
||||||
|
</div>
|
||||||
|
<div class="footer">
|
||||||
|
<p>Watchdog Docker v0.1 - Automatische Benachrichtigung</p>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
</body>
|
||||||
|
</html>
|
||||||
|
"""
|
||||||
|
|
||||||
|
self._send_email(subject, html_content)
|
||||||
|
|
||||||
|
def _format_subject(self, event: Dict) -> str:
|
||||||
|
"""Format email subject based on event type"""
|
||||||
|
event_type = event.get('type', 'unknown')
|
||||||
|
|
||||||
|
prefixes = {
|
||||||
|
'dhcp_lease': '🔵 Neue DHCP Lease',
|
||||||
|
'new_device': '🔴 Neues Gerät erkannt' if not event.get('known') else '🟡 Bekanntes Gerät',
|
||||||
|
'interface_status': '⚠️ Interface Status',
|
||||||
|
'gateway_status': '⚠️ Gateway Status'
|
||||||
|
}
|
||||||
|
|
||||||
|
prefix = prefixes.get(event_type, '📢 Event')
|
||||||
|
interface = event.get('interface', '')
|
||||||
|
|
||||||
|
if interface:
|
||||||
|
return f"{prefix} - {interface}"
|
||||||
|
else:
|
||||||
|
return prefix
|
||||||
|
|
||||||
|
def _format_event_email(self, event: Dict) -> str:
|
||||||
|
"""Format event as HTML email"""
|
||||||
|
event_type = event.get('type', 'unknown')
|
||||||
|
timestamp = datetime.now().strftime('%d.%m.%Y %H:%M:%S')
|
||||||
|
|
||||||
|
# Event type specific colors
|
||||||
|
colors = {
|
||||||
|
'dhcp_lease': '#0d6efd',
|
||||||
|
'new_device': '#dc3545',
|
||||||
|
'interface_status': '#ffc107',
|
||||||
|
'gateway_status': '#fd7e14'
|
||||||
|
}
|
||||||
|
color = colors.get(event_type, '#6c757d')
|
||||||
|
|
||||||
|
# Build event details HTML
|
||||||
|
details_html = self._build_event_details_html(event)
|
||||||
|
|
||||||
|
html_content = f"""
|
||||||
|
<html>
|
||||||
|
<head>
|
||||||
|
<style>
|
||||||
|
body {{
|
||||||
|
font-family: Arial, sans-serif;
|
||||||
|
line-height: 1.6;
|
||||||
|
color: #333;
|
||||||
|
}}
|
||||||
|
.container {{
|
||||||
|
max-width: 600px;
|
||||||
|
margin: 0 auto;
|
||||||
|
padding: 20px;
|
||||||
|
}}
|
||||||
|
.header {{
|
||||||
|
background-color: {color};
|
||||||
|
color: white;
|
||||||
|
padding: 20px;
|
||||||
|
border-radius: 5px;
|
||||||
|
text-align: center;
|
||||||
|
}}
|
||||||
|
.content {{
|
||||||
|
background-color: #f8f9fa;
|
||||||
|
padding: 20px;
|
||||||
|
margin-top: 20px;
|
||||||
|
border-radius: 5px;
|
||||||
|
}}
|
||||||
|
.detail-row {{
|
||||||
|
padding: 8px 0;
|
||||||
|
border-bottom: 1px solid #dee2e6;
|
||||||
|
}}
|
||||||
|
.detail-label {{
|
||||||
|
font-weight: bold;
|
||||||
|
display: inline-block;
|
||||||
|
width: 150px;
|
||||||
|
}}
|
||||||
|
.footer {{
|
||||||
|
text-align: center;
|
||||||
|
margin-top: 20px;
|
||||||
|
color: #666;
|
||||||
|
font-size: 12px;
|
||||||
|
}}
|
||||||
|
</style>
|
||||||
|
</head>
|
||||||
|
<body>
|
||||||
|
<div class="container">
|
||||||
|
<div class="header">
|
||||||
|
<h1>{self._format_subject(event)}</h1>
|
||||||
|
<p>{event.get('details', 'Event detected')}</p>
|
||||||
|
</div>
|
||||||
|
<div class="content">
|
||||||
|
<div class="detail-row">
|
||||||
|
<span class="detail-label">Zeitpunkt:</span>
|
||||||
|
<span>{timestamp}</span>
|
||||||
|
</div>
|
||||||
|
<div class="detail-row">
|
||||||
|
<span class="detail-label">Event-Typ:</span>
|
||||||
|
<span>{event_type.upper()}</span>
|
||||||
|
</div>
|
||||||
|
{details_html}
|
||||||
|
</div>
|
||||||
|
<div class="footer">
|
||||||
|
<p>Watchdog Docker v0.1 - Automatische Benachrichtigung</p>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
</body>
|
||||||
|
</html>
|
||||||
|
"""
|
||||||
|
|
||||||
|
return html_content
|
||||||
|
|
||||||
|
def _build_event_details_html(self, event: Dict) -> str:
|
||||||
|
"""Build event-specific details HTML"""
|
||||||
|
event_type = event.get('type', 'unknown')
|
||||||
|
html = ""
|
||||||
|
|
||||||
|
# Common fields
|
||||||
|
if event.get('interface'):
|
||||||
|
html += f"""
|
||||||
|
<div class="detail-row">
|
||||||
|
<span class="detail-label">Interface:</span>
|
||||||
|
<span>{event['interface']}</span>
|
||||||
|
</div>
|
||||||
|
"""
|
||||||
|
|
||||||
|
# Type-specific fields
|
||||||
|
if event_type in ['dhcp_lease', 'new_device']:
|
||||||
|
if event.get('ip'):
|
||||||
|
html += f"""
|
||||||
|
<div class="detail-row">
|
||||||
|
<span class="detail-label">IP-Adresse:</span>
|
||||||
|
<span>{event['ip']}</span>
|
||||||
|
</div>
|
||||||
|
"""
|
||||||
|
if event.get('mac'):
|
||||||
|
html += f"""
|
||||||
|
<div class="detail-row">
|
||||||
|
<span class="detail-label">MAC-Adresse:</span>
|
||||||
|
<span>{event['mac']}</span>
|
||||||
|
</div>
|
||||||
|
"""
|
||||||
|
if event.get('hostname'):
|
||||||
|
html += f"""
|
||||||
|
<div class="detail-row">
|
||||||
|
<span class="detail-label">Hostname:</span>
|
||||||
|
<span>{event['hostname']}</span>
|
||||||
|
</div>
|
||||||
|
"""
|
||||||
|
|
||||||
|
if event_type == 'new_device':
|
||||||
|
known = event.get('known', False)
|
||||||
|
html += f"""
|
||||||
|
<div class="detail-row">
|
||||||
|
<span class="detail-label">Bekannt:</span>
|
||||||
|
<span style="color: {'green' if known else 'red'};">
|
||||||
|
{'✓ Ja' if known else '✗ Nein (Erstes Mal gesehen!)'}
|
||||||
|
</span>
|
||||||
|
</div>
|
||||||
|
"""
|
||||||
|
|
||||||
|
if event_type in ['interface_status', 'gateway_status']:
|
||||||
|
if event.get('old_status'):
|
||||||
|
html += f"""
|
||||||
|
<div class="detail-row">
|
||||||
|
<span class="detail-label">Vorheriger Status:</span>
|
||||||
|
<span>{event['old_status']}</span>
|
||||||
|
</div>
|
||||||
|
"""
|
||||||
|
if event.get('new_status'):
|
||||||
|
html += f"""
|
||||||
|
<div class="detail-row">
|
||||||
|
<span class="detail-label">Neuer Status:</span>
|
||||||
|
<span>{event['new_status']}</span>
|
||||||
|
</div>
|
||||||
|
"""
|
||||||
|
|
||||||
|
if event_type == 'gateway_status' and event.get('gateway'):
|
||||||
|
html += f"""
|
||||||
|
<div class="detail-row">
|
||||||
|
<span class="detail-label">Gateway:</span>
|
||||||
|
<span>{event['gateway']}</span>
|
||||||
|
</div>
|
||||||
|
"""
|
||||||
|
|
||||||
|
return html
|
||||||
|
|
@ -0,0 +1,161 @@
|
||||||
|
from flask import Flask, render_template, redirect, url_for, request, flash, jsonify
|
||||||
|
from flask_login import LoginManager, UserMixin, login_user, logout_user, login_required, current_user
|
||||||
|
from werkzeug.security import check_password_hash
|
||||||
|
import yaml
|
||||||
|
import logging
|
||||||
|
from apscheduler.schedulers.background import BackgroundScheduler
|
||||||
|
from datetime import datetime
|
||||||
|
import os
|
||||||
|
|
||||||
|
from database import Database
|
||||||
|
from monitor import OPNsenseMonitor
|
||||||
|
from email_handler import EmailHandler
|
||||||
|
|
||||||
|
# Load configuration
|
||||||
|
with open('config/config.yaml', 'r') as f:
|
||||||
|
config = yaml.safe_load(f)
|
||||||
|
|
||||||
|
# Setup logging
|
||||||
|
logging.basicConfig(
|
||||||
|
level=getattr(logging, config['logging']['level']),
|
||||||
|
format='%(asctime)s - %(name)s - %(levelname)s - %(message)s',
|
||||||
|
handlers=[
|
||||||
|
logging.FileHandler(config['logging']['file']),
|
||||||
|
logging.StreamHandler()
|
||||||
|
]
|
||||||
|
)
|
||||||
|
logger = logging.getLogger(__name__)
|
||||||
|
|
||||||
|
# Initialize Flask
|
||||||
|
app = Flask(__name__)
|
||||||
|
app.config['SECRET_KEY'] = config['web']['secret_key']
|
||||||
|
|
||||||
|
# Initialize Flask-Login
|
||||||
|
login_manager = LoginManager()
|
||||||
|
login_manager.init_app(app)
|
||||||
|
login_manager.login_view = 'login'
|
||||||
|
|
||||||
|
# Initialize components
|
||||||
|
db = Database(config['database']['path'])
|
||||||
|
email_handler = EmailHandler(config['email']) if config['email']['enabled'] else None
|
||||||
|
monitor = OPNsenseMonitor(config, db, email_handler)
|
||||||
|
|
||||||
|
# Simple User class
|
||||||
|
class User(UserMixin):
|
||||||
|
def __init__(self, id):
|
||||||
|
self.id = id
|
||||||
|
|
||||||
|
@login_manager.user_loader
|
||||||
|
def load_user(user_id):
|
||||||
|
return User(user_id)
|
||||||
|
|
||||||
|
# Routes
|
||||||
|
@app.route('/')
|
||||||
|
@login_required
|
||||||
|
def index():
|
||||||
|
return redirect(url_for('dashboard'))
|
||||||
|
|
||||||
|
@app.route('/login', methods=['GET', 'POST'])
|
||||||
|
def login():
|
||||||
|
if current_user.is_authenticated:
|
||||||
|
return redirect(url_for('dashboard'))
|
||||||
|
|
||||||
|
if request.method == 'POST':
|
||||||
|
username = request.form.get('username')
|
||||||
|
password = request.form.get('password')
|
||||||
|
|
||||||
|
# Simple authentication (username: admin)
|
||||||
|
if username == 'admin' and check_password_hash(
|
||||||
|
config['web']['admin_password_hash'], password
|
||||||
|
):
|
||||||
|
user = User('admin')
|
||||||
|
login_user(user)
|
||||||
|
logger.info(f"User {username} logged in successfully")
|
||||||
|
return redirect(url_for('dashboard'))
|
||||||
|
else:
|
||||||
|
logger.warning(f"Failed login attempt for user: {username}")
|
||||||
|
flash('Invalid username or password', 'danger')
|
||||||
|
|
||||||
|
return render_template('login.html')
|
||||||
|
|
||||||
|
@app.route('/logout')
|
||||||
|
@login_required
|
||||||
|
def logout():
|
||||||
|
logger.info(f"User {current_user.id} logged out")
|
||||||
|
logout_user()
|
||||||
|
return redirect(url_for('login'))
|
||||||
|
|
||||||
|
@app.route('/dashboard')
|
||||||
|
@login_required
|
||||||
|
def dashboard():
|
||||||
|
# Get recent events
|
||||||
|
events = db.get_recent_events(limit=100)
|
||||||
|
stats = db.get_statistics()
|
||||||
|
|
||||||
|
return render_template('dashboard.html',
|
||||||
|
events=events,
|
||||||
|
stats=stats,
|
||||||
|
config=config)
|
||||||
|
|
||||||
|
@app.route('/api/events')
|
||||||
|
@login_required
|
||||||
|
def api_events():
|
||||||
|
"""API endpoint for real-time event updates"""
|
||||||
|
limit = request.args.get('limit', 50, type=int)
|
||||||
|
event_type = request.args.get('type', None)
|
||||||
|
interface = request.args.get('interface', None)
|
||||||
|
|
||||||
|
events = db.get_recent_events(limit=limit, event_type=event_type, interface=interface)
|
||||||
|
return jsonify(events)
|
||||||
|
|
||||||
|
@app.route('/api/stats')
|
||||||
|
@login_required
|
||||||
|
def api_stats():
|
||||||
|
"""API endpoint for statistics"""
|
||||||
|
return jsonify(db.get_statistics())
|
||||||
|
|
||||||
|
@app.route('/health')
|
||||||
|
def health():
|
||||||
|
"""Health check endpoint"""
|
||||||
|
return jsonify({
|
||||||
|
'status': 'healthy',
|
||||||
|
'timestamp': datetime.now().isoformat(),
|
||||||
|
'version': '0.1'
|
||||||
|
})
|
||||||
|
|
||||||
|
# Initialize scheduler
|
||||||
|
def start_monitoring():
|
||||||
|
scheduler = BackgroundScheduler()
|
||||||
|
interval = config['monitoring']['polling_interval']
|
||||||
|
|
||||||
|
scheduler.add_job(
|
||||||
|
func=monitor.check_all,
|
||||||
|
trigger="interval",
|
||||||
|
seconds=interval,
|
||||||
|
id='opnsense_monitor',
|
||||||
|
name='OPNsense Monitor',
|
||||||
|
replace_existing=True
|
||||||
|
)
|
||||||
|
|
||||||
|
scheduler.start()
|
||||||
|
logger.info(f"Monitoring started with {interval}s interval")
|
||||||
|
|
||||||
|
# Send startup notification
|
||||||
|
if email_handler and config['email']['send_on_startup']:
|
||||||
|
email_handler.send_startup_notification()
|
||||||
|
|
||||||
|
if __name__ == '__main__':
|
||||||
|
logger.info("Starting Watchdog Docker v0.1")
|
||||||
|
|
||||||
|
# Initialize database
|
||||||
|
db.initialize()
|
||||||
|
|
||||||
|
# Start monitoring
|
||||||
|
start_monitoring()
|
||||||
|
|
||||||
|
# Run Flask
|
||||||
|
app.run(
|
||||||
|
host=config['web']['host'],
|
||||||
|
port=config['web']['port'],
|
||||||
|
debug=False
|
||||||
|
)
|
||||||
|
|
@ -0,0 +1,197 @@
|
||||||
|
import logging
|
||||||
|
from datetime import datetime
|
||||||
|
from typing import Dict, List, Optional
|
||||||
|
from opnsense_api import OPNsenseAPI
|
||||||
|
from database import Database
|
||||||
|
from email_handler import EmailHandler
|
||||||
|
|
||||||
|
logger = logging.getLogger(__name__)
|
||||||
|
|
||||||
|
class OPNsenseMonitor:
|
||||||
|
"""Monitor OPNsense events"""
|
||||||
|
|
||||||
|
def __init__(self, config: Dict, db: Database, email_handler: Optional[EmailHandler]):
|
||||||
|
self.config = config
|
||||||
|
self.db = db
|
||||||
|
self.email_handler = email_handler
|
||||||
|
|
||||||
|
# Initialize API client
|
||||||
|
opn_config = config['opnsense']
|
||||||
|
self.api = OPNsenseAPI(
|
||||||
|
host=opn_config['host'],
|
||||||
|
api_key=opn_config['api_key'],
|
||||||
|
api_secret=opn_config['api_secret'],
|
||||||
|
verify_ssl=opn_config['verify_ssl']
|
||||||
|
)
|
||||||
|
|
||||||
|
# Previous states
|
||||||
|
self.previous_leases = {}
|
||||||
|
self.previous_devices = {}
|
||||||
|
self.previous_interfaces = {}
|
||||||
|
self.previous_gateways = {}
|
||||||
|
|
||||||
|
logger.info("OPNsense Monitor initialized")
|
||||||
|
|
||||||
|
def check_all(self):
|
||||||
|
"""Check all monitored events"""
|
||||||
|
logger.debug("Starting monitoring cycle")
|
||||||
|
|
||||||
|
events_config = self.config['monitoring']['events']
|
||||||
|
|
||||||
|
try:
|
||||||
|
if events_config.get('dhcp_leases'):
|
||||||
|
self.check_dhcp_leases()
|
||||||
|
|
||||||
|
if events_config.get('new_devices'):
|
||||||
|
self.check_new_devices()
|
||||||
|
|
||||||
|
if events_config.get('interface_status'):
|
||||||
|
self.check_interface_status()
|
||||||
|
|
||||||
|
if events_config.get('gateway_status'):
|
||||||
|
self.check_gateway_status()
|
||||||
|
|
||||||
|
except Exception as e:
|
||||||
|
logger.error(f"Error in monitoring cycle: {e}", exc_info=True)
|
||||||
|
|
||||||
|
def check_dhcp_leases(self):
|
||||||
|
"""Check for new DHCP leases"""
|
||||||
|
leases = self.api.get_dhcp_leases()
|
||||||
|
if not leases:
|
||||||
|
return
|
||||||
|
|
||||||
|
monitored_interfaces = self.config['monitoring'].get('monitored_interfaces', [])
|
||||||
|
|
||||||
|
for lease in leases:
|
||||||
|
lease_id = lease.get('address', '') + lease.get('mac', '')
|
||||||
|
interface = lease.get('if', '')
|
||||||
|
|
||||||
|
# Filter by interface if specified
|
||||||
|
if monitored_interfaces and interface not in monitored_interfaces:
|
||||||
|
continue
|
||||||
|
|
||||||
|
if lease_id not in self.previous_leases:
|
||||||
|
# New lease detected
|
||||||
|
event = {
|
||||||
|
'type': 'dhcp_lease',
|
||||||
|
'interface': interface,
|
||||||
|
'ip': lease.get('address'),
|
||||||
|
'mac': lease.get('mac'),
|
||||||
|
'hostname': lease.get('hostname', 'Unknown'),
|
||||||
|
'details': f"New DHCP lease: {lease.get('address')} ({lease.get('hostname', 'Unknown')})"
|
||||||
|
}
|
||||||
|
|
||||||
|
self.db.add_event(event)
|
||||||
|
logger.info(f"New DHCP lease: {event['details']}")
|
||||||
|
|
||||||
|
if self.email_handler:
|
||||||
|
self.email_handler.send_event_notification(event)
|
||||||
|
|
||||||
|
# Update previous state
|
||||||
|
self.previous_leases = {lease.get('address', '') + lease.get('mac', ''): lease for lease in leases}
|
||||||
|
|
||||||
|
def check_new_devices(self):
|
||||||
|
"""Check for new devices via ARP table"""
|
||||||
|
arp_entries = self.api.get_arp_table()
|
||||||
|
if not arp_entries:
|
||||||
|
return
|
||||||
|
|
||||||
|
monitored_interfaces = self.config['monitoring'].get('monitored_interfaces', [])
|
||||||
|
|
||||||
|
for entry in arp_entries:
|
||||||
|
mac = entry.get('mac', '')
|
||||||
|
interface = entry.get('intf', '')
|
||||||
|
|
||||||
|
# Filter by interface
|
||||||
|
if monitored_interfaces and interface not in monitored_interfaces:
|
||||||
|
continue
|
||||||
|
|
||||||
|
if mac and mac not in self.previous_devices:
|
||||||
|
# Check if device is in known devices DB
|
||||||
|
is_known = self.db.is_known_device(mac)
|
||||||
|
|
||||||
|
event = {
|
||||||
|
'type': 'new_device',
|
||||||
|
'interface': interface,
|
||||||
|
'ip': entry.get('ip'),
|
||||||
|
'mac': mac,
|
||||||
|
'hostname': entry.get('hostname', 'Unknown'),
|
||||||
|
'known': is_known,
|
||||||
|
'details': f"{'Known' if is_known else 'Unknown'} device detected: {mac} ({entry.get('hostname', 'Unknown')})"
|
||||||
|
}
|
||||||
|
|
||||||
|
self.db.add_event(event)
|
||||||
|
logger.info(f"New device: {event['details']}")
|
||||||
|
|
||||||
|
if self.email_handler and not is_known:
|
||||||
|
# Only send email for unknown devices
|
||||||
|
self.email_handler.send_event_notification(event)
|
||||||
|
|
||||||
|
# Update previous state
|
||||||
|
self.previous_devices = {entry.get('mac', ''): entry for entry in arp_entries}
|
||||||
|
|
||||||
|
def check_interface_status(self):
|
||||||
|
"""Check interface status changes"""
|
||||||
|
interfaces = self.api.get_interfaces()
|
||||||
|
if not interfaces:
|
||||||
|
return
|
||||||
|
|
||||||
|
monitored_interfaces = self.config['monitoring'].get('monitored_interfaces', [])
|
||||||
|
|
||||||
|
for if_name, if_data in interfaces.items():
|
||||||
|
# Filter by interface
|
||||||
|
if monitored_interfaces and if_name not in monitored_interfaces:
|
||||||
|
continue
|
||||||
|
|
||||||
|
current_status = if_data.get('status', 'unknown')
|
||||||
|
|
||||||
|
if if_name in self.previous_interfaces:
|
||||||
|
previous_status = self.previous_interfaces[if_name].get('status', 'unknown')
|
||||||
|
|
||||||
|
if current_status != previous_status:
|
||||||
|
event = {
|
||||||
|
'type': 'interface_status',
|
||||||
|
'interface': if_name,
|
||||||
|
'old_status': previous_status,
|
||||||
|
'new_status': current_status,
|
||||||
|
'details': f"Interface {if_name} changed: {previous_status} → {current_status}"
|
||||||
|
}
|
||||||
|
|
||||||
|
self.db.add_event(event)
|
||||||
|
logger.warning(f"Interface status change: {event['details']}")
|
||||||
|
|
||||||
|
if self.email_handler:
|
||||||
|
self.email_handler.send_event_notification(event)
|
||||||
|
|
||||||
|
# Update previous state
|
||||||
|
self.previous_interfaces = interfaces
|
||||||
|
|
||||||
|
def check_gateway_status(self):
|
||||||
|
"""Check gateway status changes"""
|
||||||
|
gateways = self.api.get_gateways()
|
||||||
|
if not gateways:
|
||||||
|
return
|
||||||
|
|
||||||
|
for gw_name, gw_data in gateways.items():
|
||||||
|
current_status = gw_data.get('status', 'unknown')
|
||||||
|
|
||||||
|
if gw_name in self.previous_gateways:
|
||||||
|
previous_status = self.previous_gateways[gw_name].get('status', 'unknown')
|
||||||
|
|
||||||
|
if current_status != previous_status:
|
||||||
|
event = {
|
||||||
|
'type': 'gateway_status',
|
||||||
|
'gateway': gw_name,
|
||||||
|
'old_status': previous_status,
|
||||||
|
'new_status': current_status,
|
||||||
|
'details': f"Gateway {gw_name} changed: {previous_status} → {current_status}"
|
||||||
|
}
|
||||||
|
|
||||||
|
self.db.add_event(event)
|
||||||
|
logger.warning(f"Gateway status change: {event['details']}")
|
||||||
|
|
||||||
|
if self.email_handler:
|
||||||
|
self.email_handler.send_event_notification(event)
|
||||||
|
|
||||||
|
# Update previous state
|
||||||
|
self.previous_gateways = gateways
|
||||||
|
|
@ -0,0 +1,70 @@
|
||||||
|
import requests
|
||||||
|
import logging
|
||||||
|
from typing import Dict, List, Optional
|
||||||
|
import urllib3
|
||||||
|
|
||||||
|
# Disable SSL warnings (only if verify_ssl is false)
|
||||||
|
urllib3.disable_warnings(urllib3.exceptions.InsecureRequestWarning)
|
||||||
|
|
||||||
|
logger = logging.getLogger(__name__)
|
||||||
|
|
||||||
|
class OPNsenseAPI:
|
||||||
|
"""Client for OPNsense API"""
|
||||||
|
|
||||||
|
def __init__(self, host: str, api_key: str, api_secret: str, verify_ssl: bool = True):
|
||||||
|
self.host = host.rstrip('/')
|
||||||
|
self.api_key = api_key
|
||||||
|
self.api_secret = api_secret
|
||||||
|
self.verify_ssl = verify_ssl
|
||||||
|
self.session = requests.Session()
|
||||||
|
self.session.auth = (api_key, api_secret)
|
||||||
|
self.session.verify = verify_ssl
|
||||||
|
|
||||||
|
logger.info(f"OPNsense API client initialized for {self.host}")
|
||||||
|
|
||||||
|
def _request(self, method: str, endpoint: str, **kwargs) -> Optional[Dict]:
|
||||||
|
"""Make API request"""
|
||||||
|
url = f"{self.host}/api/{endpoint}"
|
||||||
|
|
||||||
|
try:
|
||||||
|
response = self.session.request(method, url, **kwargs)
|
||||||
|
response.raise_for_status()
|
||||||
|
return response.json()
|
||||||
|
except requests.exceptions.RequestException as e:
|
||||||
|
logger.error(f"API request failed: {e}")
|
||||||
|
return None
|
||||||
|
|
||||||
|
def get_dhcp_leases(self) -> Optional[List[Dict]]:
|
||||||
|
"""Get current DHCP leases"""
|
||||||
|
data = self._request('GET', 'dhcpv4/leases/searchLease')
|
||||||
|
if data and 'rows' in data:
|
||||||
|
return data['rows']
|
||||||
|
return []
|
||||||
|
|
||||||
|
def get_interfaces(self) -> Optional[Dict]:
|
||||||
|
"""Get interface status"""
|
||||||
|
return self._request('GET', 'diagnostics/interface/getInterfaceConfig')
|
||||||
|
|
||||||
|
def get_interface_statistics(self) -> Optional[Dict]:
|
||||||
|
"""Get interface statistics"""
|
||||||
|
return self._request('GET', 'diagnostics/traffic/interface')
|
||||||
|
|
||||||
|
def get_gateways(self) -> Optional[Dict]:
|
||||||
|
"""Get gateway status"""
|
||||||
|
return self._request('GET', 'routes/gateway/status')
|
||||||
|
|
||||||
|
def get_arp_table(self) -> Optional[List[Dict]]:
|
||||||
|
"""Get ARP table for device detection"""
|
||||||
|
data = self._request('GET', 'diagnostics/interface/search_arp')
|
||||||
|
if data and 'rows' in data:
|
||||||
|
return data['rows']
|
||||||
|
return []
|
||||||
|
|
||||||
|
def test_connection(self) -> bool:
|
||||||
|
"""Test API connection"""
|
||||||
|
try:
|
||||||
|
result = self._request('GET', 'core/firmware/status')
|
||||||
|
return result is not None
|
||||||
|
except Exception as e:
|
||||||
|
logger.error(f"Connection test failed: {e}")
|
||||||
|
return False
|
||||||
|
|
@ -0,0 +1,363 @@
|
||||||
|
<!DOCTYPE html>
|
||||||
|
<html lang="de">
|
||||||
|
<head>
|
||||||
|
<meta charset="UTF-8">
|
||||||
|
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
||||||
|
<title>Dashboard - Watchdog Docker</title>
|
||||||
|
<link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/css/bootstrap.min.css" rel="stylesheet">
|
||||||
|
<link href="https://cdn.jsdelivr.net/npm/bootstrap-icons@1.10.0/font/bootstrap-icons.css" rel="stylesheet">
|
||||||
|
<style>
|
||||||
|
body {
|
||||||
|
background-color: #f5f6fa;
|
||||||
|
}
|
||||||
|
.navbar {
|
||||||
|
background: linear-gradient(135deg, #667eea 0%, #764ba2 100%);
|
||||||
|
box-shadow: 0 2px 10px rgba(0, 0, 0, 0.1);
|
||||||
|
}
|
||||||
|
.navbar-brand {
|
||||||
|
font-weight: 600;
|
||||||
|
font-size: 24px;
|
||||||
|
}
|
||||||
|
.stats-card {
|
||||||
|
border: none;
|
||||||
|
border-radius: 10px;
|
||||||
|
box-shadow: 0 2px 10px rgba(0, 0, 0, 0.05);
|
||||||
|
transition: transform 0.2s;
|
||||||
|
}
|
||||||
|
.stats-card:hover {
|
||||||
|
transform: translateY(-5px);
|
||||||
|
box-shadow: 0 5px 20px rgba(0, 0, 0, 0.1);
|
||||||
|
}
|
||||||
|
.stats-icon {
|
||||||
|
font-size: 48px;
|
||||||
|
opacity: 0.8;
|
||||||
|
}
|
||||||
|
.events-table-card {
|
||||||
|
border: none;
|
||||||
|
border-radius: 10px;
|
||||||
|
box-shadow: 0 2px 10px rgba(0, 0, 0, 0.05);
|
||||||
|
}
|
||||||
|
.badge-dhcp_lease {
|
||||||
|
background-color: #0d6efd;
|
||||||
|
}
|
||||||
|
.badge-new_device {
|
||||||
|
background-color: #dc3545;
|
||||||
|
}
|
||||||
|
.badge-interface_status {
|
||||||
|
background-color: #ffc107;
|
||||||
|
color: #000;
|
||||||
|
}
|
||||||
|
.badge-gateway_status {
|
||||||
|
background-color: #fd7e14;
|
||||||
|
}
|
||||||
|
.table-hover tbody tr:hover {
|
||||||
|
background-color: #f8f9fa;
|
||||||
|
}
|
||||||
|
.filter-section {
|
||||||
|
background-color: white;
|
||||||
|
padding: 15px;
|
||||||
|
border-radius: 10px;
|
||||||
|
box-shadow: 0 2px 10px rgba(0, 0, 0, 0.05);
|
||||||
|
margin-bottom: 20px;
|
||||||
|
}
|
||||||
|
.last-updated {
|
||||||
|
font-size: 12px;
|
||||||
|
color: #6c757d;
|
||||||
|
}
|
||||||
|
</style>
|
||||||
|
</head>
|
||||||
|
<body>
|
||||||
|
<!-- Navbar -->
|
||||||
|
<nav class="navbar navbar-dark mb-4">
|
||||||
|
<div class="container-fluid">
|
||||||
|
<span class="navbar-brand mb-0 h1">
|
||||||
|
<i class="bi bi-shield-check"></i> Watchdog Docker
|
||||||
|
</span>
|
||||||
|
<div class="d-flex align-items-center">
|
||||||
|
<span class="text-white me-3">
|
||||||
|
<i class="bi bi-person-circle"></i> {{ current_user.id }}
|
||||||
|
</span>
|
||||||
|
<a href="{{ url_for('logout') }}" class="btn btn-outline-light btn-sm">
|
||||||
|
<i class="bi bi-box-arrow-right"></i> Logout
|
||||||
|
</a>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
</nav>
|
||||||
|
|
||||||
|
<div class="container-fluid">
|
||||||
|
<!-- Statistics Cards -->
|
||||||
|
<div class="row mb-4">
|
||||||
|
<div class="col-md-3 mb-3">
|
||||||
|
<div class="card stats-card">
|
||||||
|
<div class="card-body">
|
||||||
|
<div class="d-flex justify-content-between align-items-center">
|
||||||
|
<div>
|
||||||
|
<h6 class="text-muted mb-1">Gesamt Events</h6>
|
||||||
|
<h2 class="mb-0">{{ stats.total_events }}</h2>
|
||||||
|
</div>
|
||||||
|
<div class="stats-icon text-primary">
|
||||||
|
<i class="bi bi-database"></i>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
<div class="col-md-3 mb-3">
|
||||||
|
<div class="card stats-card">
|
||||||
|
<div class="card-body">
|
||||||
|
<div class="d-flex justify-content-between align-items-center">
|
||||||
|
<div>
|
||||||
|
<h6 class="text-muted mb-1">Heute</h6>
|
||||||
|
<h2 class="mb-0">{{ stats.events_today }}</h2>
|
||||||
|
</div>
|
||||||
|
<div class="stats-icon text-success">
|
||||||
|
<i class="bi bi-calendar-check"></i>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
<div class="col-md-3 mb-3">
|
||||||
|
<div class="card stats-card">
|
||||||
|
<div class="card-body">
|
||||||
|
<div class="d-flex justify-content-between align-items-center">
|
||||||
|
<div>
|
||||||
|
<h6 class="text-muted mb-1">Letzte Stunde</h6>
|
||||||
|
<h2 class="mb-0">{{ stats.events_last_hour }}</h2>
|
||||||
|
</div>
|
||||||
|
<div class="stats-icon text-warning">
|
||||||
|
<i class="bi bi-clock-history"></i>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
<div class="col-md-3 mb-3">
|
||||||
|
<div class="card stats-card">
|
||||||
|
<div class="card-body">
|
||||||
|
<div class="d-flex justify-content-between align-items-center">
|
||||||
|
<div>
|
||||||
|
<h6 class="text-muted mb-1">Bekannte Geräte</h6>
|
||||||
|
<h2 class="mb-0">{{ stats.known_devices }}</h2>
|
||||||
|
</div>
|
||||||
|
<div class="stats-icon text-info">
|
||||||
|
<i class="bi bi-router"></i>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
|
||||||
|
<!-- Filter Section -->
|
||||||
|
<div class="filter-section">
|
||||||
|
<div class="row align-items-center">
|
||||||
|
<div class="col-md-3">
|
||||||
|
<label for="filterType" class="form-label mb-1">Event-Typ</label>
|
||||||
|
<select class="form-select form-select-sm" id="filterType">
|
||||||
|
<option value="">Alle Typen</option>
|
||||||
|
<option value="dhcp_lease">DHCP Lease</option>
|
||||||
|
<option value="new_device">Neues Gerät</option>
|
||||||
|
<option value="interface_status">Interface Status</option>
|
||||||
|
<option value="gateway_status">Gateway Status</option>
|
||||||
|
</select>
|
||||||
|
</div>
|
||||||
|
<div class="col-md-3">
|
||||||
|
<label for="filterInterface" class="form-label mb-1">Interface</label>
|
||||||
|
<select class="form-select form-select-sm" id="filterInterface">
|
||||||
|
<option value="">Alle Interfaces</option>
|
||||||
|
{% for interface in config.monitoring.monitored_interfaces %}
|
||||||
|
<option value="{{ interface }}">{{ interface }}</option>
|
||||||
|
{% endfor %}
|
||||||
|
</select>
|
||||||
|
</div>
|
||||||
|
<div class="col-md-3">
|
||||||
|
<label class="form-label mb-1">Auto-Refresh</label>
|
||||||
|
<div class="form-check form-switch">
|
||||||
|
<input class="form-check-input" type="checkbox" id="autoRefresh" checked>
|
||||||
|
<label class="form-check-label" for="autoRefresh">
|
||||||
|
Alle 10 Sekunden
|
||||||
|
</label>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
<div class="col-md-3 text-end">
|
||||||
|
<label class="form-label mb-1 d-block">Aktualisierung</label>
|
||||||
|
<button class="btn btn-primary btn-sm" onclick="refreshEvents()">
|
||||||
|
<i class="bi bi-arrow-clockwise"></i> Jetzt aktualisieren
|
||||||
|
</button>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
|
||||||
|
<!-- Events Table -->
|
||||||
|
<div class="card events-table-card">
|
||||||
|
<div class="card-header bg-white">
|
||||||
|
<div class="d-flex justify-content-between align-items-center">
|
||||||
|
<h5 class="mb-0">
|
||||||
|
<i class="bi bi-list-ul"></i> Aktuelle Events
|
||||||
|
</h5>
|
||||||
|
<span class="last-updated" id="lastUpdated">
|
||||||
|
Zuletzt aktualisiert: {{ stats.last_updated if stats.last_updated else 'Nie' }}
|
||||||
|
</span>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
<div class="card-body p-0">
|
||||||
|
<div class="table-responsive">
|
||||||
|
<table class="table table-hover mb-0" id="eventsTable">
|
||||||
|
<thead class="table-light">
|
||||||
|
<tr>
|
||||||
|
<th style="width: 180px;">Zeitpunkt</th>
|
||||||
|
<th style="width: 150px;">Typ</th>
|
||||||
|
<th style="width: 100px;">Interface</th>
|
||||||
|
<th>Details</th>
|
||||||
|
</tr>
|
||||||
|
</thead>
|
||||||
|
<tbody id="eventsTableBody">
|
||||||
|
{% for event in events %}
|
||||||
|
<tr data-type="{{ event.type }}" data-interface="{{ event.interface }}">
|
||||||
|
<td>
|
||||||
|
<small>{{ event.timestamp }}</small>
|
||||||
|
</td>
|
||||||
|
<td>
|
||||||
|
<span class="badge badge-{{ event.type }}">
|
||||||
|
{{ event.type.replace('_', ' ').upper() }}
|
||||||
|
</span>
|
||||||
|
</td>
|
||||||
|
<td>
|
||||||
|
<span class="badge bg-secondary">{{ event.interface or 'N/A' }}</span>
|
||||||
|
</td>
|
||||||
|
<td>
|
||||||
|
{{ event.details }}
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
{% else %}
|
||||||
|
<tr>
|
||||||
|
<td colspan="4" class="text-center text-muted py-4">
|
||||||
|
<i class="bi bi-inbox"></i> Keine Events vorhanden
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
{% endfor %}
|
||||||
|
</tbody>
|
||||||
|
</table>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
|
||||||
|
<script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/js/bootstrap.bundle.min.js"></script>
|
||||||
|
<script>
|
||||||
|
let autoRefreshInterval;
|
||||||
|
|
||||||
|
// Filter events
|
||||||
|
function filterEvents() {
|
||||||
|
const typeFilter = document.getElementById('filterType').value;
|
||||||
|
const interfaceFilter = document.getElementById('filterInterface').value;
|
||||||
|
const rows = document.querySelectorAll('#eventsTableBody tr');
|
||||||
|
|
||||||
|
rows.forEach(row => {
|
||||||
|
const type = row.getAttribute('data-type');
|
||||||
|
const iface = row.getAttribute('data-interface');
|
||||||
|
|
||||||
|
const typeMatch = !typeFilter || type === typeFilter;
|
||||||
|
const interfaceMatch = !interfaceFilter || iface === interfaceFilter;
|
||||||
|
|
||||||
|
if (typeMatch && interfaceMatch) {
|
||||||
|
row.style.display = '';
|
||||||
|
} else {
|
||||||
|
row.style.display = 'none';
|
||||||
|
}
|
||||||
|
});
|
||||||
|
}
|
||||||
|
|
||||||
|
// Refresh events via AJAX
|
||||||
|
async function refreshEvents() {
|
||||||
|
try {
|
||||||
|
const typeFilter = document.getElementById('filterType').value;
|
||||||
|
const interfaceFilter = document.getElementById('filterInterface').value;
|
||||||
|
|
||||||
|
let url = '/api/events?limit=100';
|
||||||
|
if (typeFilter) url += `&type=${typeFilter}`;
|
||||||
|
if (interfaceFilter) url += `&interface=${interfaceFilter}`;
|
||||||
|
|
||||||
|
const response = await fetch(url);
|
||||||
|
const events = await response.json();
|
||||||
|
|
||||||
|
// Update table
|
||||||
|
const tbody = document.getElementById('eventsTableBody');
|
||||||
|
|
||||||
|
if (events.length === 0) {
|
||||||
|
tbody.innerHTML = `
|
||||||
|
<tr>
|
||||||
|
<td colspan="4" class="text-center text-muted py-4">
|
||||||
|
<i class="bi bi-inbox"></i> Keine Events vorhanden
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
`;
|
||||||
|
} else {
|
||||||
|
tbody.innerHTML = events.map(event => `
|
||||||
|
<tr data-type="${event.type}" data-interface="${event.interface || ''}">
|
||||||
|
<td><small>${event.timestamp}</small></td>
|
||||||
|
<td>
|
||||||
|
<span class="badge badge-${event.type}">
|
||||||
|
${event.type.replace('_', ' ').toUpperCase()}
|
||||||
|
</span>
|
||||||
|
</td>
|
||||||
|
<td>
|
||||||
|
<span class="badge bg-secondary">${event.interface || 'N/A'}</span>
|
||||||
|
</td>
|
||||||
|
<td>${event.details}</td>
|
||||||
|
</tr>
|
||||||
|
`).join('');
|
||||||
|
}
|
||||||
|
|
||||||
|
// Update timestamp
|
||||||
|
const now = new Date();
|
||||||
|
document.getElementById('lastUpdated').textContent =
|
||||||
|
`Zuletzt aktualisiert: ${now.toLocaleString('de-DE')}`;
|
||||||
|
|
||||||
|
// Refresh stats
|
||||||
|
const statsResponse = await fetch('/api/stats');
|
||||||
|
const stats = await statsResponse.json();
|
||||||
|
updateStats(stats);
|
||||||
|
|
||||||
|
} catch (error) {
|
||||||
|
console.error('Error refreshing events:', error);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
// Update statistics
|
||||||
|
function updateStats(stats) {
|
||||||
|
const statsElements = document.querySelectorAll('.stats-card h2');
|
||||||
|
if (statsElements.length >= 4) {
|
||||||
|
statsElements[0].textContent = stats.total_events || 0;
|
||||||
|
statsElements[1].textContent = stats.events_today || 0;
|
||||||
|
statsElements[2].textContent = stats.events_last_hour || 0;
|
||||||
|
statsElements[3].textContent = stats.known_devices || 0;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
// Auto-refresh toggle
|
||||||
|
function toggleAutoRefresh() {
|
||||||
|
const checkbox = document.getElementById('autoRefresh');
|
||||||
|
|
||||||
|
if (checkbox.checked) {
|
||||||
|
// Start auto-refresh every 10 seconds
|
||||||
|
autoRefreshInterval = setInterval(refreshEvents, 10000);
|
||||||
|
} else {
|
||||||
|
// Stop auto-refresh
|
||||||
|
if (autoRefreshInterval) {
|
||||||
|
clearInterval(autoRefreshInterval);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
// Event listeners
|
||||||
|
document.getElementById('filterType').addEventListener('change', filterEvents);
|
||||||
|
document.getElementById('filterInterface').addEventListener('change', filterEvents);
|
||||||
|
document.getElementById('autoRefresh').addEventListener('change', toggleAutoRefresh);
|
||||||
|
|
||||||
|
// Start auto-refresh on page load
|
||||||
|
toggleAutoRefresh();
|
||||||
|
</script>
|
||||||
|
</body>
|
||||||
|
</html>
|
||||||
|
|
@ -0,0 +1,116 @@
|
||||||
|
<!DOCTYPE html>
|
||||||
|
<html lang="de">
|
||||||
|
<head>
|
||||||
|
<meta charset="UTF-8">
|
||||||
|
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
||||||
|
<title>Login - Watchdog Docker</title>
|
||||||
|
<link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/css/bootstrap.min.css" rel="stylesheet">
|
||||||
|
<style>
|
||||||
|
body {
|
||||||
|
background: linear-gradient(135deg, #667eea 0%, #764ba2 100%);
|
||||||
|
height: 100vh;
|
||||||
|
display: flex;
|
||||||
|
align-items: center;
|
||||||
|
justify-content: center;
|
||||||
|
}
|
||||||
|
.login-container {
|
||||||
|
max-width: 400px;
|
||||||
|
width: 100%;
|
||||||
|
padding: 20px;
|
||||||
|
}
|
||||||
|
.login-card {
|
||||||
|
background: white;
|
||||||
|
border-radius: 10px;
|
||||||
|
box-shadow: 0 10px 40px rgba(0, 0, 0, 0.2);
|
||||||
|
padding: 40px;
|
||||||
|
}
|
||||||
|
.login-header {
|
||||||
|
text-align: center;
|
||||||
|
margin-bottom: 30px;
|
||||||
|
}
|
||||||
|
.login-header h1 {
|
||||||
|
color: #333;
|
||||||
|
font-size: 28px;
|
||||||
|
margin-bottom: 10px;
|
||||||
|
}
|
||||||
|
.login-header p {
|
||||||
|
color: #666;
|
||||||
|
font-size: 14px;
|
||||||
|
}
|
||||||
|
.logo {
|
||||||
|
font-size: 64px;
|
||||||
|
margin-bottom: 20px;
|
||||||
|
}
|
||||||
|
.btn-login {
|
||||||
|
width: 100%;
|
||||||
|
padding: 12px;
|
||||||
|
font-size: 16px;
|
||||||
|
font-weight: 600;
|
||||||
|
background: linear-gradient(135deg, #667eea 0%, #764ba2 100%);
|
||||||
|
border: none;
|
||||||
|
transition: transform 0.2s;
|
||||||
|
}
|
||||||
|
.btn-login:hover {
|
||||||
|
transform: translateY(-2px);
|
||||||
|
box-shadow: 0 5px 15px rgba(0, 0, 0, 0.2);
|
||||||
|
}
|
||||||
|
.form-control:focus {
|
||||||
|
border-color: #667eea;
|
||||||
|
box-shadow: 0 0 0 0.2rem rgba(102, 126, 234, 0.25);
|
||||||
|
}
|
||||||
|
</style>
|
||||||
|
</head>
|
||||||
|
<body>
|
||||||
|
<div class="login-container">
|
||||||
|
<div class="login-card">
|
||||||
|
<div class="login-header">
|
||||||
|
<div class="logo">🔐</div>
|
||||||
|
<h1>Watchdog Docker</h1>
|
||||||
|
<p>OPNsense Monitoring System</p>
|
||||||
|
</div>
|
||||||
|
|
||||||
|
{% with messages = get_flashed_messages(with_categories=true) %}
|
||||||
|
{% if messages %}
|
||||||
|
{% for category, message in messages %}
|
||||||
|
<div class="alert alert-{{ category }} alert-dismissible fade show" role="alert">
|
||||||
|
{{ message }}
|
||||||
|
<button type="button" class="btn-close" data-bs-dismiss="alert" aria-label="Close"></button>
|
||||||
|
</div>
|
||||||
|
{% endfor %}
|
||||||
|
{% endif %}
|
||||||
|
{% endwith %}
|
||||||
|
|
||||||
|
<form method="POST" action="{{ url_for('login') }}">
|
||||||
|
<div class="mb-3">
|
||||||
|
<label for="username" class="form-label">Benutzername</label>
|
||||||
|
<input type="text"
|
||||||
|
class="form-control"
|
||||||
|
id="username"
|
||||||
|
name="username"
|
||||||
|
placeholder="admin"
|
||||||
|
required
|
||||||
|
autofocus>
|
||||||
|
</div>
|
||||||
|
<div class="mb-4">
|
||||||
|
<label for="password" class="form-label">Passwort</label>
|
||||||
|
<input type="password"
|
||||||
|
class="form-control"
|
||||||
|
id="password"
|
||||||
|
name="password"
|
||||||
|
placeholder="••••••••"
|
||||||
|
required>
|
||||||
|
</div>
|
||||||
|
<button type="submit" class="btn btn-primary btn-login">
|
||||||
|
Anmelden
|
||||||
|
</button>
|
||||||
|
</form>
|
||||||
|
|
||||||
|
<div class="text-center mt-4">
|
||||||
|
<small class="text-muted">Version 0.1</small>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
|
||||||
|
<script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/js/bootstrap.bundle.min.js"></script>
|
||||||
|
</body>
|
||||||
|
</html>
|
||||||
|
|
@ -0,0 +1,62 @@
|
||||||
|
# OPNsense Configuration
|
||||||
|
opnsense:
|
||||||
|
host: "https://192.168.1.1" # Your OPNsense IP/Hostname
|
||||||
|
api_key: "YOUR_API_KEY_HERE"
|
||||||
|
api_secret: "YOUR_API_SECRET_HERE"
|
||||||
|
verify_ssl: false # Set to true in production with valid cert
|
||||||
|
|
||||||
|
# Monitoring Configuration
|
||||||
|
monitoring:
|
||||||
|
polling_interval: 60 # Seconds between checks
|
||||||
|
|
||||||
|
# Interfaces to monitor (leave empty to monitor all)
|
||||||
|
monitored_interfaces:
|
||||||
|
- lan
|
||||||
|
- wan
|
||||||
|
# - opt1
|
||||||
|
# - opt2
|
||||||
|
|
||||||
|
# Events to monitor
|
||||||
|
events:
|
||||||
|
dhcp_leases: true # New IP assigned
|
||||||
|
new_devices: true # New device detected
|
||||||
|
interface_status: true # Interface up/down
|
||||||
|
gateway_status: true # Gateway status changes
|
||||||
|
|
||||||
|
# Web Interface Configuration
|
||||||
|
web:
|
||||||
|
host: "0.0.0.0"
|
||||||
|
port: 5000
|
||||||
|
secret_key: "CHANGE_THIS_SECRET_KEY_IN_PRODUCTION" # Change this!
|
||||||
|
|
||||||
|
# Login credentials (username: admin)
|
||||||
|
admin_password_hash: "scrypt:32768:8:1$CHANGEME$hash" # See README for generation
|
||||||
|
|
||||||
|
# Email Notification Configuration
|
||||||
|
email:
|
||||||
|
enabled: true
|
||||||
|
smtp_server: "mail.yourdomain.com"
|
||||||
|
smtp_port: 587
|
||||||
|
smtp_use_tls: true
|
||||||
|
smtp_username: "watchdog@yourdomain.com"
|
||||||
|
smtp_password: "YOUR_SMTP_PASSWORD"
|
||||||
|
|
||||||
|
from_address: "watchdog@yourdomain.com"
|
||||||
|
to_addresses:
|
||||||
|
- "admin@yourdomain.com"
|
||||||
|
- "security@yourdomain.com"
|
||||||
|
|
||||||
|
# Email settings
|
||||||
|
send_on_startup: true
|
||||||
|
batch_notifications: false # Group multiple events in one email
|
||||||
|
batch_interval: 300 # Seconds to wait before sending batch
|
||||||
|
|
||||||
|
# Database Configuration
|
||||||
|
database:
|
||||||
|
path: "/app/data/watchdog.db"
|
||||||
|
retention_days: 90 # Keep events for 90 days
|
||||||
|
|
||||||
|
# Logging
|
||||||
|
logging:
|
||||||
|
level: "INFO" # DEBUG, INFO, WARNING, ERROR
|
||||||
|
file: "/app/data/watchdog.log"
|
||||||
|
|
@ -0,0 +1,27 @@
|
||||||
|
version: '3.8'
|
||||||
|
|
||||||
|
services:
|
||||||
|
watchdog:
|
||||||
|
build: .
|
||||||
|
container_name: watchdog-docker
|
||||||
|
restart: unless-stopped
|
||||||
|
ports:
|
||||||
|
- "5000:5000"
|
||||||
|
volumes:
|
||||||
|
- ./config/config.yaml:/app/config/config.yaml:ro
|
||||||
|
- ./data:/app/data
|
||||||
|
environment:
|
||||||
|
- TZ=Europe/Berlin
|
||||||
|
- PYTHONUNBUFFERED=1
|
||||||
|
healthcheck:
|
||||||
|
test: ["CMD", "python", "-c", "import requests; requests.get('http://localhost:5000/health')"]
|
||||||
|
interval: 30s
|
||||||
|
timeout: 10s
|
||||||
|
retries: 3
|
||||||
|
start_period: 10s
|
||||||
|
networks:
|
||||||
|
- watchdog-net
|
||||||
|
|
||||||
|
networks:
|
||||||
|
watchdog-net:
|
||||||
|
driver: bridge
|
||||||
|
|
@ -0,0 +1,7 @@
|
||||||
|
Flask==3.0.0
|
||||||
|
Flask-Login==0.6.3
|
||||||
|
APScheduler==3.10.4
|
||||||
|
requests==2.31.0
|
||||||
|
PyYAML==6.0.1
|
||||||
|
Werkzeug==3.0.1
|
||||||
|
python-dotenv==1.0.0
|
||||||
Loading…
Reference in New Issue