Skip to content

Releases: alytaphoenix/argus

v0.3.0

Choose a tag to compare

@github-actions github-actions released this 19 Oct 15:27

Changelog

  • ba3e324 Add automatic service DNS, Traefik, and ACME certificates

argus v0.2.0

Choose a tag to compare

@github-actions github-actions released this 19 Oct 14:56

argus v0.2.0 — platform bootstrap + Salt formula registry

argus bootstrap now takes a Proxmox host from a bare hypervisor to a managed platform, and argus keeps an opinionated registry of the Salt formulas it applies.

New

  • argus bootstrap plan|apply|status|formulas — state-aware, idempotent bootstrap with --dry-run, --yes, --formulas, and JSON output.
  • Isolated Salt 3008.x runtime on the Proxmox host (/opt/argus-salt/venv) with systemd units for master, API, and local minion.
  • salt-api over HTTPS with a Proxmox-CA certificate, a dedicated saltapi PAM user, and a minimal netapi_enable_clients set.
  • Opinionated formula registry: base, salt-minion, docker, node-exporter, technitium, traefik, uptime-kuma, plus TrueNAS/Plex/Servarr/Hermes integration entries.
  • Top-level Bootstrap TUI screen: readiness checks, registry status, formula select/apply, baseline apply, filter, confirmation.
  • SQLite tracking: platform_profiles, formula_installations, bootstrap_runs.
  • [bootstrap] config section and environment overrides.

Safety

  • Apply is additive: no VM, container, storage, or Proxmox configuration is deleted.
  • Existing Salt runtime, keys, TLS material, and API password are preserved and reused.
  • Formula application is recorded; no automatic rollback is attempted.

Verified

  • make check, go test -race ./..., govulncheck (no vulnerabilities), goreleaser check.
  • Released linux/amd64 and darwin/arm64 artifacts checksum-verified.
  • The published v0.2.0 binary bootstrapped and re-applied the baseline on a live Proxmox VE host; Salt master/API/minion and node-exporter are active.

Install: go install github.com/alytaphoenix/argus@latest or download an archive below.

argus v0.1.1

Choose a tag to compare

@github-actions github-actions released this 19 Oct 14:19

argus v0.1.1 — first public release

A keyboard-first Bubble Tea TUI for Proxmox VE homelabs, with a Prometheus metrics exporter and an MCP stdio server.

Highlights

  • Proxmox nodes, guests, snapshots, cloud-init provisioning, right-sizing, migration, and HA-aware maintenance.
  • Salt orchestration, key management, cluster pillar, and guided Bootstrap (discovers existing guests before proposing changes).
  • Services, storage, DNS, certificates, Plex/Servarr, CrowdSec, Wazuh, Home Assistant, Loki, Nomad, and more.
  • Optional Claude assistance and a full MCP tool server.
  • Idempotent bootstrap-pve.sh installer for Proxmox hosts.

Security hardening

  • SSH passwords no longer appear in argv; host-key checking uses accept-new.
  • step-ca fingerprints are verified and pinned as the TLS trust anchor.
  • Database, WAL/SHM, log, and config files are owner-only.
  • Metrics exporter binds to loopback by default with no unauthenticated LAN exposure.
  • Wazuh TLS verification is on by default; Plex tokens use headers.
  • Remote terminal output is sanitized against ANSI/control injection.
  • Built with Go 1.26.9; govulncheck reports no known vulnerabilities.

Install

go install github.com/alytaphoenix/argus@latest
argus

Or download the archive for your OS/architecture below. See the README, deployment guide, and security guide.

License: MIT