Metadata-Version: 2.4
Name: monsterops
Version: 1.12.2
Summary: A self-hosted network operations platform built around FreeRADIUS
Project-URL: Homepage, https://monsterops.org
Project-URL: Documentation, https://monsterops.org/docs/
Project-URL: Repository, https://github.com/NLRI65000/MonsterOps
Project-URL: Issues, https://github.com/NLRI65000/MonsterOps/issues
Project-URL: Changelog, https://github.com/NLRI65000/MonsterOps/blob/main/CHANGELOG.md
Author-email: NLRI65000 <nlrigithub@hotmail.com>
License: MIT License
        
        Copyright (c) 2026 NLRI65000
        
        Permission is hereby granted, free of charge, to any person obtaining a copy
        of this software and associated documentation files (the "Software"), to deal
        in the Software without restriction, including without limitation the rights
        to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
        copies of the Software, and to permit persons to whom the Software is
        furnished to do so, subject to the following conditions:
        
        The above copyright notice and this permission notice shall be included in all
        copies or substantial portions of the Software.
        
        THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
        IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
        FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
        AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
        LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
        OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
        SOFTWARE.
License-File: LICENSE
Keywords: aaa,authentication,daloradius,fastapi,freeradius,network,radius
Classifier: Development Status :: 4 - Beta
Classifier: Environment :: Web Environment
Classifier: Framework :: FastAPI
Classifier: Intended Audience :: System Administrators
Classifier: License :: OSI Approved :: MIT License
Classifier: Operating System :: POSIX :: Linux
Classifier: Programming Language :: Python :: 3
Classifier: Programming Language :: Python :: 3.11
Classifier: Programming Language :: Python :: 3.12
Classifier: Programming Language :: Python :: 3.13
Classifier: Topic :: Internet
Classifier: Topic :: System :: Systems Administration :: Authentication/Directory
Requires-Python: >=3.11
Requires-Dist: alembic>=1.13.0
Requires-Dist: apscheduler<4,>=3.10
Requires-Dist: argon2-cffi>=23.1.0
Requires-Dist: asyncpg>=0.29.0
Requires-Dist: bcrypt>=4.0.0
Requires-Dist: cryptography>=42.0.0
Requires-Dist: fastapi>=0.111.0
Requires-Dist: geoip2>=4.8.0
Requires-Dist: httpx>=0.27.0
Requires-Dist: ldap3>=2.9.1
Requires-Dist: netmiko>=4.0.0
Requires-Dist: pydantic-settings>=2.3.0
Requires-Dist: pyjwt>=2.8.0
Requires-Dist: pyrad>=2.4
Requires-Dist: python-multipart>=0.0.9
Requires-Dist: slowapi>=0.1.9
Requires-Dist: sqlalchemy[asyncio]>=2.0.0
Requires-Dist: uvicorn[standard]>=0.30.0
Description-Content-Type: text/markdown

<p align="center">
  <img src="https://raw.githubusercontent.com/NLRI65000/MonsterOps/main/assets/MonsterOpsDO.png" alt="MonsterOps — Monitor. Manage. Automate." width="460" />
</p>

# MonsterOps

**MonsterOps** is a self-hosted network operations platform for ISPs, enterprise networks, and anyone running a FreeRADIUS environment — RADIUS users & groups, NAS devices, IP pools, sessions & accounting, auth analytics, RADIUS proxy/realms, VPN tunnels, a safe nftables firewall manager, automation, and a REST API, all in one dashboard.

Built with **FastAPI + PostgreSQL** and a **vanilla-JS Web Components** frontend — a single Python package, no Node.js, no build step.

## Highlights

- **RADIUS users & groups** — full `radcheck`/`radreply`/`radusergroup` CRUD, bulk CSV, per-user session & auth history
- **NAS management** — vendor presets and NAS groups, ICMP reachability monitoring, plus an SSH/Telnet **NAS Manager** (pull, version, diff, and push config; one-click "point a NAS at RADIUS" deploy; encrypted credentials)
- **Firewall manager** — a dedicated nftables table with staged apply, snapshot + auto-rollback, and adaptive access control (brute-force / country blocking) built to keep you from locking yourself out
- **Sessions & analytics** — live sessions with CoA disconnect, accounting history, and auth logs with geo-location + anomaly detection
- **And more** — RADIUS proxy & realms, WireGuard / L2TP-IPsec VPN tunnels, automation & scheduling, webhooks, a scoped REST API, and integrations (Zabbix, Graylog, GeoIP2)

See the full capability list in the **[Reference](docs/reference.md)**.

## Get Started

Requires **Python 3.11+** and a reachable **PostgreSQL 15+** database (the same one FreeRADIUS uses).

### Production (recommended)

```bash
git clone https://github.com/NLRI65000/MonsterOps.git
cd MonsterOps
sudo bash deploy/install.sh
```

The installer sets up the service user, database, FreeRADIUS SQL integration, a systemd unit, and optional tooling (VPN backends, nftables, sudoers rules). Re-run `deploy/upgrade.sh` to update an existing install in place.

### From PyPI

```bash
pip install monsterops
export MONSTEROPS_DATABASE_URL=postgresql+asyncpg://user:pass@localhost/radius
export MONSTEROPS_SECRET_KEY=$(python -c "import secrets; print(secrets.token_urlsafe(32))")
monsterops migrate            # create/upgrade the database schema
monsterops serve --host 0.0.0.0 --port 8000
```

The migrations ship inside the package, so `monsterops migrate` works without a source checkout. (You can also put the settings in a `.env` file in the working directory instead of exporting them.)

### From source (manual)

```bash
git clone https://github.com/NLRI65000/MonsterOps.git
cd MonsterOps
pip install -e .
cp .env.example .env          # set MONSTEROPS_DATABASE_URL and MONSTEROPS_SECRET_KEY
monsterops migrate            # or, from a checkout: alembic upgrade head
monsterops serve --host 0.0.0.0 --port 8000
```

Then open `http://localhost:8000` and complete the first-run wizard to create your superadmin account.

> **Before production:** change `MONSTEROPS_SECRET_KEY` from its default (the app warns until you do) and serve over HTTPS. See the [User Guide](docs/user-guide.md).

## Documentation

- **[User Guide](docs/user-guide.md)** — install, configure, navigate the UI, core features (including firewall safety), and finding logs
- **[Reference](docs/reference.md)** — full feature list, configuration variables, roles, CLI, architecture, plugins, tech stack, and roadmap

## Security

Found a security vulnerability? **Please don't open a public issue.** Report it privately by email to **nlrigithub@hotmail.com** — see [SECURITY.md](SECURITY.md).

## License

MIT — see [LICENSE](LICENSE).
