nexus-fleet 1.0.4

Nexus Fleet — agent/manager/cli/dashboard keamanan endpoint (ala-Wazuh, ringan, stdlib-only)

Nexus Fleet — Security Platform (agent · manager · cli · dashboard)

1 platform, 4 komponen ala-Wazuh, stdlib-only (Python 3.8+). Amankan jaringan, server, dan website dari satu titik: agent ringan mengirim telemetri keamanan ke manager pusat yang menjalankan rule engine → alert (level 0–15 + MITRE ATT&CK), lalu ditampilkan di dashboard/CLI.

 endpoint ──(HMAC/HTTP)──►  nexus-manager  ──► SQLite (events, alerts, audit)
 nexus-agent  FIM·SCA·       rule+alert engine        ▲          ▲
 inventory·webaudit·ports    policy·retention         │          │
                             ◄── policy/perintah ──    nexus-dashboard   nexus-cli

Install

pip (disarankan):

pip install .            # dari folder ini; memasang 4 perintah:
                         # nexus-manager · nexus-agent · nexus-cli · nexus-dashboard

npm (wrapper Node → Python):

npm install -g .         # perintah sama; butuh Python 3.8+ di PATH

tanpa install: cd python/fleet && python -m nexus_manager run (dst.).

Pakai

# 1) Manager (server pusat + dashboard di http://host:8765/)
nexus-manager run --host 0.0.0.0 --port 8765
nexus-manager info                       # enrollment key + admin token

# 2) Agent di tiap endpoint
nexus-agent enroll --host <manager> --port 8765 --key <ENROLL_KEY> --labels prod,web
nexus-agent start                        # daemon: FIM/SCA/inventory/webaudit/ports/...

# 3) Admin / SOC
nexus-cli                                # console interaktif: menu Network & Website security
nexus-cli --token <ADMIN_TOKEN> alerts   # alert (rule engine + MITRE + rekomendasi)
nexus-cli --token <ADMIN_TOKEN> ack --id <ALERT_ID> --status resolved
nexus-cli --token <ADMIN_TOKEN> report   # report konsisten (schema nexus.report/v1)
nexus-dashboard --port 8080              # (opsional) host dashboard di port terpisah

Service (jalan saat boot)

• Linux: deploy/systemd/nexus-{manager,agent}.service → systemctl enable --now.
• Windows: deploy/windows/install-agent-service.ps1 (Scheduled Task, SYSTEM, AtStartup).

Konsep kunci

• Skema baku (nexus_common/schema.py): event/alert/report seragam, condong OCSF, origin: real|demo.
• Real findings only: manager menolak event demo secara default (accept_demo=0).
• Rule engine (nexus_manager/rules.py): rule native + MITRE + rekomendasi + response; bisa di-push.
• Alert engine: dedup anti-fatigue, ack/resolve, retensi, audit log.
• Keamanan: HMAC per-agent, enrollment key, admin token; HTTP LAN (offline-first).

Uji end-to-end: python ../tests/test_fleet.py (28 seksi).

Lisensi & monetisasi (freemium / open-core)

Manager memberlakukan tier berdasarkan token lisensi yang ditandatangani vendor (Anda):

	FREE (tanpa lisensi)	PRO	ENTERPRISE
Jumlah agent	2	seat (mis. 50)	unlimited
Rule	dasar (firewall/port/disk/login)	semua (FIM .env, web-audit, SCA, vuln)	semua
Sigma import	❌	✅	✅
Active Response	❌	✅	✅
Web/app audit, report, posture	terbatas	✅	✅

Cara Anda (vendor) berjualan:

nexus-license keygen --out vendor_private.key          # SEKALI — simpan private key RAHASIA;
                                                        # public key ditanam ke paket (verifikasi)
nexus-license issue --key vendor_private.key \          # terbitkan utk pelanggan yg sudah bayar
    --licensee "PT Contoh" --tier pro --days 365 --max-agents 50 --out pt-contoh.license

Pelanggan memasang lisensi: NEXUS_LICENSE=/path/pt-contoh.license lalu jalankan manager. Tanpa lisensi valid → otomatis tier FREE. Lisensi ditandatangani Ed25519 — pelanggan tak bisa memalsukan tanpa private key Anda. (Kejujuran open-core: pada kode publik, gerbang ini menahan penyalahgunaan kasual; perlindungan kuat = simpan modul premium privat / jalankan sisi-server.)

Roadmap menuju standar industri penuh: agent Go/Rust, OpenSearch/Postgres, mTLS/gRPC, YARA, OCSF penuh, AI remediation, RBAC multi-tenant, server lisensi + pembayaran (Midtrans/Stripe). Pembeda: developer-first (audit Laravel/React/Next, parser log app, security posture score).

For Personal / Ethical Hacking Study Only.