mirror of
https://github.com/hansjone/netx.git
synced 2026-10-09 02:00:46 +08:00
oliver
f49c0b5bad
Set up netx as a standalone git-managed project with isolated Python dependencies, alarm ingestion/query APIs, oclaw bridge integration, and ops-focused UI enhancements including history and raw field access. Co-authored-by: Cursor <cursoragent@cursor.com>
28 lines
1 KiB
Markdown
28 lines
1 KiB
Markdown
# netx Production Minimum Checklist
|
|
|
|
## Security
|
|
- Replace local shared token with a strong secret and rotate it regularly.
|
|
- Keep `.env` and `oclaw/_local/system.env` out of Git (already ignored).
|
|
- Restrict access to `127.0.0.1` or internal network only.
|
|
|
|
## Runtime
|
|
- Ensure PostgreSQL backup policy exists (daily logical backup + retention).
|
|
- Run `oclaw` and `netx` under process managers (systemd/Windows service/pm2 equivalent).
|
|
- Enable auto-restart and startup-at-boot for both services.
|
|
|
|
## Observability
|
|
- Health checks:
|
|
- `oclaw`: `/admin/api/ops-ai/health` (with Bearer token)
|
|
- `netx`: `/v1/integrations/status`
|
|
- Alert when `oclaw_bridge.status != up` for more than 2 polling cycles.
|
|
- Alert when `db.status != up` or `latency_ms` exceeds threshold.
|
|
|
|
## Operations
|
|
- Keep one documented restart order:
|
|
1) PostgreSQL
|
|
2) `oclaw`
|
|
3) `netx`
|
|
- Validate after restart:
|
|
- `GET /v1/integrations/status` returns all major components as `up`.
|
|
- Keep parser config and importer changes versioned and reviewed before release.
|
|
|