Pared

Pared is a lightweight, secure control plane and real-time administrative web dashboard written in Crystal for Linux host security. It provides centralized management for firewalld DBus/CLI interfaces and NetworkManager connections, featuring mutual TLS (mTLS), PAM/SSSD authentication, and real-time systemd journal streaming over WebSockets.

Key Features

• Centralized Identity & mTLS Auth: PAM fallback, SSSD DBus group authorization, and client certificate mTLS.
• Firewall & Network Management: Dynamic zone mutations, rich rules, and provisioning for Physical, Bond, Bridge, and WireGuard interfaces.
• Telemetry & Hardened Security: Real-time systemd log streaming via C-bindings and kernel-sandboxed systemd service isolation.

Quick Start

# Install dependencies
shards install

# Setup system polkit rules & seed default admin
make setup
make seed

# Run local dev server or test suite
make dev
make spec

Default Demo Credentials

When seeded via make seed, the initial administrator credentials are:

• Email: [email protected]
• Password: password

(Note: Local system PAM user accounts with UID ≥ 1000 can also log in directly).

Documentation & Project Resources

Detailed specifications, roadmaps, and guidelines are available in the repository:

• Architecture & Specifications: Comprehensive reStructuredText specs are in docs/:
  • Technical Specification
  • Functional Specification
  • Project Roadmap
  • Architecture Decision Records
• Contributing: Development workflows, testing standards, and commit guidelines are in CONTRIBUTING.rst.
• Changelog: Release history following Keep a Changelog 1.1.0 is documented in CHANGELOG.rst.
• License: Released under the GNU General Public License v3.0 or later (GPL-3.0-or-later).

Repositories & Mirrors

• Primary Repository: https://gitlab.com/renich/pared
• Official Mirror: https://codeberg.org/nortk/pared

Maintainer

• Rénich Bon Ćirić — Creator and Lead Architect