Repository navigation
Releases: alytaphoenix/argus
Releases · alytaphoenix/argus
Release list
v0.3.0
argus v0.2.0
argus v0.2.0 — platform bootstrap + Salt formula registry
argus bootstrap now takes a Proxmox host from a bare hypervisor to a managed platform, and argus keeps an opinionated registry of the Salt formulas it applies.
New
argus bootstrap plan|apply|status|formulas— state-aware, idempotent bootstrap with--dry-run,--yes,--formulas, and JSON output.- Isolated Salt 3008.x runtime on the Proxmox host (
/opt/argus-salt/venv) with systemd units for master, API, and local minion. salt-apiover HTTPS with a Proxmox-CA certificate, a dedicatedsaltapiPAM user, and a minimalnetapi_enable_clientsset.- Opinionated formula registry:
base,salt-minion,docker,node-exporter,technitium,traefik,uptime-kuma, plus TrueNAS/Plex/Servarr/Hermes integration entries. - Top-level Bootstrap TUI screen: readiness checks, registry status, formula select/apply, baseline apply, filter, confirmation.
- SQLite tracking:
platform_profiles,formula_installations,bootstrap_runs. [bootstrap]config section and environment overrides.
Safety
- Apply is additive: no VM, container, storage, or Proxmox configuration is deleted.
- Existing Salt runtime, keys, TLS material, and API password are preserved and reused.
- Formula application is recorded; no automatic rollback is attempted.
Verified
make check,go test -race ./...,govulncheck(no vulnerabilities),goreleaser check.- Released linux/amd64 and darwin/arm64 artifacts checksum-verified.
- The published v0.2.0 binary bootstrapped and re-applied the baseline on a live Proxmox VE host; Salt master/API/minion and node-exporter are active.
Install: go install github.com/alytaphoenix/argus@latest or download an archive below.
argus v0.1.1
argus v0.1.1 — first public release
A keyboard-first Bubble Tea TUI for Proxmox VE homelabs, with a Prometheus metrics exporter and an MCP stdio server.
Highlights
- Proxmox nodes, guests, snapshots, cloud-init provisioning, right-sizing, migration, and HA-aware maintenance.
- Salt orchestration, key management, cluster pillar, and guided Bootstrap (discovers existing guests before proposing changes).
- Services, storage, DNS, certificates, Plex/Servarr, CrowdSec, Wazuh, Home Assistant, Loki, Nomad, and more.
- Optional Claude assistance and a full MCP tool server.
- Idempotent
bootstrap-pve.shinstaller for Proxmox hosts.
Security hardening
- SSH passwords no longer appear in argv; host-key checking uses
accept-new. - step-ca fingerprints are verified and pinned as the TLS trust anchor.
- Database, WAL/SHM, log, and config files are owner-only.
- Metrics exporter binds to loopback by default with no unauthenticated LAN exposure.
- Wazuh TLS verification is on by default; Plex tokens use headers.
- Remote terminal output is sanitized against ANSI/control injection.
- Built with Go 1.26.9;
govulncheckreports no known vulnerabilities.
Install
go install github.com/alytaphoenix/argus@latest
argusOr download the archive for your OS/architecture below. See the README, deployment guide, and security guide.
License: MIT