feat(security): deploy OpenCanary honeypot on VLAN 50 with Gotify and Discord alerting

scripts/update_discord_bridge.py

@@ -0,0 +1,31 @@
+import paramiko
+import sys
+
+sys.stdout.reconfigure(encoding='utf-8')
+key_path = r'C:\Users\Snarf\.ssh\id_ed25519_snarfnet'
+
+c = paramiko.SSHClient()
+c.set_missing_host_key_policy(paramiko.AutoAddPolicy())
+c.connect("140.44.4.71", username="root", key_filename=key_path, timeout=10)
+
+py_patch = """
+path = '/var/lib/docker/volumes/gotify_gotify_data/_data/discord_bridge.py'
+with open(path, 'r') as f:
+    text = f.read()
+
+if '6: ("infra-alerts", WEBHOOK_INFRA)' not in text:
+    text = text.replace('5: ("infra-alerts", WEBHOOK_INFRA),', '5: ("infra-alerts", WEBHOOK_INFRA),\\n    6: ("infra-alerts", WEBHOOK_INFRA),')
+    text = text.replace('5: "Backups & Storage Health",', '5: "Backups & Storage Health",\\n    6: "OpenCanary Decoy Honeypot",')
+    with open(path, 'w') as f:
+        f.write(text)
+    print("Patched discord_bridge.py successfully")
+else:
+    print("Already patched")
+"""
+c.exec_command(f'python3 -c "{py_patch}"')
+# Restart the bridge container
+c.exec_command("docker service update --force gotify_gotify-discord-bridge")
+print("Restarted gotify_gotify-discord-bridge")
+
+c.close()
+