Read-only server telemetry and anomaly review. This window cannot restart services, install updates, alter mail queues, change configuration or perform remediation.
STORAGE & BACKUP CAPACITY // Shows where server space is being used, which ROM/media sets are driving capacity, whether Hestia can stage a conventional backup, the discovered Hestia rclone/SFTP topology, ZeroTier/Tailscale state, rsync usage, and the planned QNAP backup path. No backup credentials or remote hostnames are exposed.
SSH SECURITY AUDIT // Successful SSH authentications are copied from the system journal into a private persistent audit log by the root collector. No passwords or private keys are captured. Explicitly approved automation is matched by account + source IP + authentication method + key fingerprint. First-seen or changed identities are highlighted for review. Top failed sources are enriched with best-effort IP geolocation.
SCHEDULED TASK AUDIT // Root/user crontabs, system cron files, periodic jobs and systemd timers are inventoried by the root collector. Commands are sanitised to redact likely passwords/tokens. Changes between snapshots are flagged for review.
READ-ONLY WINDOW // NO REMEDIATION CONTROLS // STORAGE + BACKUP STATUS ONLY // NO LOG CONTENT OR EMAIL CONTENT DISPLAYED // SSH SUCCESS AUDIT IS PRIVATE // SCHEDULED TASKS ARE READ-ONLY + SANITISED // PDF REPORT CAN ONLY BE SENT TO alerts@barefootsoft.com