History

CarterPerez-dev e1d021a99a feat(monitor/collectors/wikipedia): 5m ITN collector with revid-based dedup and per-entry id hash		2026-05-02 04:30:14 -04:00
..
backend	feat(monitor/collectors/wikipedia): 5m ITN collector with revid-based dedup and per-entry id hash	2026-05-02 04:30:14 -04:00
conf	fix(monitor/nginx): strip /api prefix on WS proxy_pass so backend route /v1/ws is reached	2026-05-01 21:38:04 -04:00
frontend	feat(monitor): infra scaffold — Dockerfiles, conf/ tree, .gitignore	2026-05-01 06:12:25 -04:00
.env.example	fix(monitor): pick conflict-free host ports (8432/5432/4432/6432/3432); JWT keygen-on-boot, healthcheck path, baseline migration; ignore frontend/.pnpm-store; pre-commit excludes	2026-05-01 20:13:00 -04:00
.gitignore	fix(monitor): pick conflict-free host ports (8432/5432/4432/6432/3432); JWT keygen-on-boot, healthcheck path, baseline migration; ignore frontend/.pnpm-store; pre-commit excludes	2026-05-01 20:13:00 -04:00
Justfile	chore(monitor): replace Makefile with Justfile (project convention)	2026-05-01 14:53:28 -04:00
README.md	docs(monitor): add coinbase row to cyber data source matrix	2026-05-02 03:37:56 -04:00
cloudflared.compose.yml	feat(monitor/infra): three compose files, Makefile, .env.example	2026-05-01 06:17:28 -04:00
compose.yml	fix(monitor): pick conflict-free host ports (8432/5432/4432/6432/3432); JWT keygen-on-boot, healthcheck path, baseline migration; ignore frontend/.pnpm-store; pre-commit excludes	2026-05-01 20:13:00 -04:00
dev.compose.yml	fix(monitor): pick conflict-free host ports (8432/5432/4432/6432/3432); JWT keygen-on-boot, healthcheck path, baseline migration; ignore frontend/.pnpm-store; pre-commit excludes	2026-05-01 20:13:00 -04:00

README.md

Monitor the Situation

Operator-grade real-time situational awareness dashboard. Single-binary Go backend, React 19 frontend, Postgres + Redis, fronted by nginx and (optionally) a Cloudflare Tunnel.

The phrase "Monitoring the situation" is a Twitter/X meme from June 2025. This is the version that actually monitors the situation.

Stack

Layer	Tech
Backend	Go 1.22, chi router, `coder/websocket`, `goose` migrations
Frontend	React 19, Vite, TanStack Query, Zustand, MapLibre, D3
Storage	Postgres 16 (BRIN-indexed time-series), Redis 7
Ingress	nginx (dev + prod), Cloudflare Tunnel (prod)
Build / run	`just` recipes, multi-stage Docker, air for live reload

Cyber data sources

Panel	Source	Cadence	Auth
Mass-scan firehose	DShield (SANS ISC)	1h	none
Internet outages + BGP hijacks	Cloudflare Radar	5m	`CF_RADAR_TOKEN` (Radar:Read scope)
CVE velocity + EPSS	NVD CVE 2.0 + FIRST EPSS	2h	`NVD_API_KEY` (optional, raises rate limit)
CISA KEV	CISA KEV catalog	1h	none
Ransomware victims	ransomware.live	15m	none
Live BTC + ETH ticks	Coinbase Advanced Trade WS	persistent	none
IP enrichment	GreyNoise Community	on-demand	`GREYNOISE_API_KEY` (optional, free tier)

Quickstart (development)

cp .env.example .env
# fill .env: POSTGRES_PASSWORD, JWT_SECRET, NOTIFICATION_ENCRYPTION_KEY
just dev-start
just migrate-dev
open http://localhost:8432

JWT signing keys auto-generate at backend/keys/private.pem on first boot. The dev stack binds host ports 8432 (nginx) / 5432 (backend) / 4432 (postgres) / 6432 (redis) / 3432 (vite).

Smoke checks

curl -s http://localhost:8432/api/v1/healthz
curl -s http://localhost:8432/api/v1/snapshot | jq .
docker run --rm -i --network host ghcr.io/vi/websocat:latest \
    "ws://localhost:8432/api/v1/ws?topics=heartbeat"

Production (Cloudflare Tunnel)

cp .env.example .env
# fill production secrets including CLOUDFLARE_TUNNEL_TOKEN
just tunnel-start
just migrate

Tests

cd backend && go test -race ./...

Layout

backend/    Go services (cmd/api, internal/{events,bus,ws,snapshot,collectors,...})
frontend/   React 19 dashboard
conf/       nginx and per-environment Docker configs
migrations/ goose SQL migrations (mounted into the backend container)