lijiahangmax / orion-visor Goto Github PK

View Code? Open in Web Editor NEW

357.0 12.0 59.0 18.51 MB

一款高颜值、现代化的自动化运维&轻量堡垒机平台。

Home Page: https://visor.orionsec.cn

License: Apache License 2.0

Java 56.79% JavaScript 0.09% TypeScript 10.98% HTML 0.01% Vue 31.08% Less 0.93% Dockerfile 0.06% Shell 0.06%

devops ops sftp shell ssh docker tty xterm java jsch vue ansible tunnel webshell batch batch-script terminal linux

orion-visor's Introduction

一款高颜值、现代化的智能运维&轻量堡垒机平台。

orion-visor 提供一站式系统自动化运维解决方案。

资产管理：支持对资产进行分组，实现对主机、密钥和身份的统一管理和授权。
在线终端：提供在线终端 SSH 服务，支持快捷命令、自定义快捷键和主题风格。
文件管理：支持远程主机 SFTP 大文件的批量上传、下载和在线编辑等操作。
批量操作：支持批量执行主机命令、多主机文件分发等功能。
计划任务：支持配置 cron 表达式，定时执行主机命令。
安全可靠：动态配置权限，记录用户操作日志，提供简单的审计功能。

演示环境

🔗 演示地址: https://dv.orionsec.cn/
🔏 演示账号: admin/admin
⭐ 体验后可以点一下 star 这对我很重要! github gitee gitcode
🌈 如果本项目对你有帮助请帮忙推广一下让更多的人知道此项目!
🎭 演示环境部分功能不可用, 完整功能请本地部署!
📛 演示环境请不要随便删除数据!
📧 如果演示环境不可用请联系我!

快速开始

# clone
git clone --depth=1 https://github.com/dromara/orion-visor
cd orion-visor
# 启动
docker compose up -d
# 等待后端服务启动后 (2min±) 访问 http://localhost:1081/

项目文档

技术栈

SpringBoot 2.7.17
Mysql 8.0.+
Redis 6.0.+
Vue3 3.2.+
Arco Design 2.55.+

主要功能预览

主机终端

批量执行

批量上传

计划任务

Star History

关于我

本人专注于使用 Java 和 Vue 进行全栈开发, 并在系统自动化运维方面拥有丰富开发的经验。如果您在这些领域有需求或遇到痛点, 请随时联系我, 并备注“合作”。

联系我

微信: ljh1553488
QQ群: 755242157

📧 咨询问题微信备注: vis
📧 合作/功能定制备注: 合作

支持一下

🎁 为了项目能健康持续的发展, 我期望获得相应的资金支持, 你们的支持是我不断更新前进的动力!

免责声明

在使用本项目之前, 请确保您已经了解并同意相关的使用协议和隐私政策。免责声明

License

本项目遵循 Apache-2.0 开源许可证。

orion-visor's People

Contributors

Stargazers

Watchers

Forkers

mrpingan imgolye wuzhuhe38 asframe dream-ym cslgo dawei7405 571881145 chimingdd joebridge1988 tendata2020 i4late opsonline yizhitangtongxue jieyang1996 notetoday supershl hmtiannan lixy-join liushaoshuaii mseaspring cajr8023 fsinbad ixleo wgzhxy corner4world itsharex clownsw 1008610010 zhangjian420 yunshitiger hombre9 linuxsuren orangejz 543069760 zeguanshu leominggit luocheny mu-l mkdir-dupeng kylinvnne pengbw fajdak curryhcy services-online bluepeople1 ai2hub liujunzheng cream-sec st2ne supair zzdx713 meko95 qingyunwhu memoryshadow andyoulovexy leonzoo dongchenxuan zonewancheng

orion-visor's Issues

建议支持jumpserver到orion-visor的机器同步

能不能加一下对各服务器的监控和警告

能不能加一下对各服务器的监控和警告
比如CPU内存磁盘连通性等等的监控，运行某些命令脚本，失败了之后发告警到一些通讯平台

[Feature] Expected to support Multi-factor authentication

Is your feature request related to a problem?

I think a relatively secure operation and maintenance tool should support at least one MFA verification method. This tool interface looks logical, but the lack of MFA makes it easier for accounts to be stolen.

Describe the solution you'd like

At least one two-step verification method, here we take virtual MFA as an example.
When creating a user, allow the user to bind a virtual MFA device, such as Microsoft Authenticator. When the user logs in, require the user to use the bound MFA method for identity authentication at the same time. When the user performs high-risk operations such as data changes, require the use of MFA for further verification

Is there some similar software?

You can refer to this project, which is also open source and focuses on security, but the information presented in the interface is not as elegant as this project.

Additional context

Here are some documents that may help.

RFC 6238

SQL: INSERT INTO host ( type, name, code, address, port, status, config, create_time, update_time, creator, updater, deleted ) VALUES ( ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ? )

Cause: java.sql.SQLSyntaxErrorException: Unknown column 'type' in 'field list'

; bad SQL grammar []; nested exception is java.sql.SQLSyntaxErrorException: Unknown column 'type' in 'field list'

目前是没有支持RDP协议吗？

win RDP主机全部失败

另外建议增加代理功能（可以通过代理缓解墙外机器卡顿、断联、联结失败的情况，可以参考：Next Terminal）

请问，是否需要帮忙实现接口 e2e 测试

我已经帮助如下的一些项目实现了 e2e 接口测试，如果您希望能 e2e 的话，我愿意帮忙实现。期待收到回复。

LinuxSuRen/api-testing#284

[BUG] The proxy request header cannot be correctly identified

Describe the bug
If a request is made to the orion-visor using either of the reverse proxy technologies, even with the X-Real-IP and X-Forward-for request headers set, the retained address is the address of the jumper and not the initiator's real address.

To Reproduce

Install orion-visor and nginx on the test machine
Create the following configuration for nginx:

location / {
    proxy_pass  http://127.0.0.1:1081;
    proxy_http_version 1.1;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection "upgrade";
    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}

Check the IP address left in the "留痕地址" after logging into the service using the nginx address

Expected behavior
The program correctly recognizes the X-Real-IP and X-Forwarded-For headers, presenting the visitor's real IP address in the background "留痕地址"

字段	内容
公司\个人昵称
项目名称
项目介绍
官网地址	http://xxx.com （内部系统可以不提供，或只留下前台官网链接）
仓库地址	https://gitee.com/xxx/xxx.git （如果开源可填写）
展示Logo图片地址	（如果未提供Logo，我们将从官网截图展示）