From b7c27ee3a12588b2ec1a36bc221761ba8ab17df0 Mon Sep 17 00:00:00 2001 From: max Date: Wed, 30 Sep 2026 17:28:53 +0200 Subject: [PATCH] feat(ui): reorder DB Engine tab (cache mode on top, encryption in middle, DB engine switcher below) --- src/Server.py | 193 ++++++++++++++++++++++++++++---------------------- 1 file changed, 108 insertions(+), 85 deletions(-) diff --git a/src/Server.py b/src/Server.py index 32e9ada..4f0a2ba 100644 --- a/src/Server.py +++ b/src/Server.py @@ -808,6 +808,26 @@ def load_or_init_config(config_path: str = CONFIG_FILE_NAME) -> Dict[str, Any]: config["session_secret"] = secrets.token_hex(32) if "db_path" not in config: config["db_path"] = DEFAULT_DB_FILE + if "server_name" not in config: + config["server_name"] = "LOGAR Enterprise Hub" + if "tcp_host" not in config: + config["tcp_host"] = "0.0.0.0" + if "tcp_port" not in config: + config["tcp_port"] = 9443 + if "hermes_host" not in config: + config["hermes_host"] = "0.0.0.0" + if "hermes_port" not in config: + config["hermes_port"] = 8443 + if "evaluation_window_hours" not in config: + config["evaluation_window_hours"] = 12 + if "min_persistence_runs" not in config: + config["min_persistence_runs"] = 2 + if "storage_engine" not in config: + config["storage_engine"] = config.get("db_type", "sqlite") + if "cache_mode" not in config: + config["cache_mode"] = "direct" + if "encrypt_at_rest" not in config: + config["encrypt_at_rest"] = False # Resolve relative db_path and cert_dir to writable paths config["db_path"] = resolve_writable_path(config["db_path"], "LOGAR-Server", DEFAULT_DB_FILE) @@ -3388,91 +3408,10 @@ def serve_webui(request: Request = None):
Database Storage Engine Configuration - STORAGE SELECTION + CONFIG & TUNING
-
- -
- - -
-
- - -
-
- 🐘 External PostgreSQL Connection Parameters - ENTERPRISE POOL -
-
-
- - -
-
- - -
-
- - -
-
- - -
-
- - -
-
- - -
-
- - -
-
- - -
-
-
- - -
-
- - -
-
- 🔐 Zero-Knowledge Data Encryption at Rest -
- -

- When enabled, anomaly message payloads stored in the external database are encrypted with the server's OpenPGP public key before writing. Only this hub instance can decrypt records for authorized WebUI and Hermes AI usage, ensuring zero-knowledge privacy on remote database servers. -

-
- - +
⚡ Ingestion Cache & Buffer Mode @@ -3508,6 +3447,90 @@ def serve_webui(request: Request = None):
+ +
+
+ 🔐 Zero-Knowledge Data Encryption at Rest +
+ +

+ When enabled, anomaly message payloads stored in the external database are encrypted with the server's OpenPGP public key before writing. Only this hub instance can decrypt records for authorized WebUI and Hermes AI usage, ensuring zero-knowledge privacy on remote database servers. +

+
+ + +
+
+ 🗄️ Select Storage Engine Backend +
+
+ + +
+ + +
+
+ 🐘 External PostgreSQL Connection Parameters + ENTERPRISE POOL +
+
+
+ + +
+
+ + +
+
+ + +
+
+ + +
+
+ + +
+
+ + +
+
+ + +
+
+ + +
+
+
+ + +
+
+
+