Major improvements: multi-stage Docker, security hardening, host metrics, tests

- Multi-stage Docker build: Dockerfile compiles frontend (Node.js) and
  backend (Gradle) inside Docker; no local Java/Node.js required
- Security hardening: replaced full host root mount with specific
  directory mounts (/proc, /sys, /etc, /var, /home, /opt, /tmp, /srv, /usr)
- Host metrics consistency: LinuxMemoryService and CpuDetailsService now
  read from /host/proc instead of container OSHI
- Concurrency: replaced synchronized with AtomicReference in 3 services
- Global error handling: added @RestControllerAdvice for JSON error responses
- Unit tests: added 32 tests for /proc parsers, CPU usage, process uptime
- Docker security: non-root user, read-only FS, no-new-privileges, healthcheck
- Debug logging: added log.debug() in silent catch blocks
- Documentation: updated README, INSTALLATION, DEVELOPMENT, CONFIGURATION,
  ARCHITECTURE, CHANGELOG

Co-authored-by: Junie <junie@jetbrains.com>

This commit is contained in:

Liosha84

2026-10-28 23:18:01 +01:00

co-authored by

Junie

parent 539175654c

commit 597d8f380a

23 changed files with 1122 additions and 137 deletions

									
										backend/src/main/resources/static/index.html
									
		+1
		-1
	
												View File
												
				@@ -9,5 +9,5 @@

				<link rel="stylesheet" href="styles-5INURTSO.css"></head>

				<body>

				  <app-root></app-root>

				<script src="main-WRDGP7C5.js" type="module"></script></body>

				<script src="main-KCY2LTAZ.js" type="module"></script></body>

				</html>