SentinelOps v1.0.0 — ASIR Final Project Lab

SentinelOps v1.0.0 - ASIR Final Project Lab

ES

Primera publicacion publica de SentinelOps, laboratorio academico/profesional desarrollado como Proyecto Intermodular del Grado Superior en Administracion de Sistemas Informaticos en Red (ASIR).

Esta version representa el cierre del MVP final, integrando publicacion de servicios, identidad, servicios corporativos, observabilidad, seguridad operativa, zona DMZ de laboratorio y estrategia de copias de seguridad y restauracion.

Componentes principales:

• Traefik para publicacion de servicios mediante FQDN internos.
• Authentik para identidad, acceso y portal de aplicaciones.
• Nextcloud y GLPI como servicios corporativos del laboratorio.
• Prometheus, Grafana, Blackbox Exporter, cAdvisor y Node Exporter para observabilidad.
• Wazuh para seguridad operativa y visibilidad defensiva.
• Backrest y Restic para continuidad, copias, checks y restauracion no destructiva.
• Mailpit, SFTPGo y portal DMZ para servicios controlados de laboratorio.
• Documentacion publica bilingue en espanol e ingles.

Estado MVP: implementado y documentado como laboratorio academico/profesional, con limitaciones de produccion reconocidas.

Aviso obligatorio: este proyecto no esta destinado a uso directo en produccion sin adaptacion, revision de secretos, hardening, configuracion TLS real, controles de red y politica de copias de seguridad adecuada.

EN

First public release of SentinelOps, an academic/professional lab developed as a final intermodular project for the Higher Vocational Training degree in Networked Computer Systems Administration (ASIR).

This release represents the final MVP, integrating service publishing, identity, business services, observability, operational security, a lab DMZ and a backup and restore strategy.

Main components:

• Traefik for service publishing through internal FQDNs.
• Authentik for identity, access and the application portal.
• Nextcloud and GLPI as lab business services.
• Prometheus, Grafana, Blackbox Exporter, cAdvisor and Node Exporter for observability.
• Wazuh for operational security and defensive visibility.
• Backrest and Restic for continuity, backups, checks and non-destructive restore validation.
• Mailpit, SFTPGo and a DMZ portal for controlled lab services.
• Public bilingual documentation in Spanish and English.

MVP status: implemented and documented as an academic/professional lab, with production limitations explicitly acknowledged.

Mandatory notice: this project is not intended for direct production use without adaptation, secret review, hardening, proper TLS configuration, network controls and an appropriate backup policy.

English README: README.en.md