package

gitlab.com/renich/pared

master / published Aug 8, 2026 / repository

Lightweight, secure control plane & real-time web dashboard in Crystal for Linux firewalld and NetworkManager host security.

Pared

Pared is a lightweight, secure control plane and real-time administrative web dashboard written in Crystal for Linux host security. It provides centralized management for firewalld DBus/CLI interfaces and NetworkManager connections, featuring mutual TLS (mTLS), PAM/SSSD authentication, and real-time systemd journal streaming over WebSockets.

Key Features

  • Centralized Identity & mTLS Auth: PAM fallback, SSSD DBus group authorization, and client certificate mTLS.
  • Firewall & Network Management: Dynamic zone mutations, rich rules, and provisioning for Physical, Bond, Bridge, and WireGuard interfaces.
  • Telemetry & Hardened Security: Real-time systemd log streaming via C-bindings and kernel-sandboxed systemd service isolation.

Quick Start

# Install dependencies
shards install

# Setup system polkit rules & seed default admin
make setup
make seed

# Run local dev server or test suite
make dev
make spec

Default Demo Credentials

When seeded via make seed, the initial administrator credentials are:

  • Email: admin@example.com
  • Password: password

(Note: Local system PAM user accounts with UID ≥ 1000 can also log in directly).

Documentation & Project Resources

Detailed specifications, roadmaps, and guidelines are available in the repository:

  • Architecture & Specifications: Comprehensive reStructuredText specs are in docs/:
    • Technical Specification
    • Functional Specification
    • Project Roadmap
    • Architecture Decision Records
  • Contributing: Development workflows, testing standards, and commit guidelines are in CONTRIBUTING.rst.
  • Changelog: Release history following Keep a Changelog 1.1.0 is documented in CHANGELOG.rst.
  • License: Released under the GNU General Public License v3.0 or later (GPL-3.0-or-later).

Repositories & Mirrors

Maintainer

API