Safe Management System (SMS)

This is a web based application to manage safes and their contents to satisfy PCI DSS and PCI PIN Security requirements

I have now split out the php code and the docker-compose / k8s deployment parts into separated repo's This is primarily to allow for easier deployment to Kubernetes using an init container to git clone the php code

This will need subsequent changes to the docker-compose deployment as well

To start containers

cd ~/docker/safe_mgmt
sudo docker-compose up -d –build

To stop containers

cd ~/docker/safe_mgmt
sudo docker-compose stop 

Accessing appllications

SMS main application

phpMyAdmin

Container manifest

safe_mgmt_fedora_1

Is a container instantiation of my safe_mgmt_fedora image (the same image that is used as a base for php_httpd and db_seeder), this is based on an official Fedora 37 image with a known checksum This is the Dockerfile

# Fedora 37 container image using known good digest
FROM registry.fedoraproject.org/fedora@sha256:50e70b6e9baa89323352cc4caf5a072dd2f613af35390c95308a315c2075b6cf
RUN dnf install -y iproute procps iputils nmap-ncat lsof less
RUN dnf update -y 
ENTRYPOINT [ "tail", "-f", "/dev/null" ]

safe_mgmt_mariadb_1

This container is the main database server running mariadb. It is running a standard docker official image for MariaDB version 10

safe_mgmt_phpmyadmin_1

This container is running phpMyAdmin to help manage the database. It is running a standard official docker image for phpMyAdmin version 5 using apache

safe_mgmt_php_httpd_1

Is based on my safe_mgmt_fedora image and is using php-fpm on apache to run the application

safe_mgmt_db_seeder_1

Is based on my safe_mgmt_fedora image, it's purpose is to connect to the main database and check if it is empty, and if so populate it with the base / test data using the db_seeder.sh script

This is currently in development

Basic login system working with password exiry and change

• Also trying to work out how to call logout.php from index.html (maybe change to index.php?), to ensure logged out if some start playing with URL.
• Also need to ensure that if user logs in but password is expired, that loggedin is set to FALSE so that if someone changes password_change.php to main_menu.php they are not logged in .. instead get dumped back to inde.html
• Currently having an issue where password change does not seem to be calling password_change_script.php after submit.
• Need to add new user creation with password generation and email
• Need password change screen to generate / suggest password using pwqgen
• Need to sort out proper error handling instead of just exit with a message !!
• Need to implement logout if idle for 10 mins (configure in profile?)