RugMunchMedia/rmi-backend
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

merge: chore/cleanup-remove-bloat-and-secrets into main

Browse source
This commit is contained in:
Crypto Rug Munch 2026-07-02 01:24:22 +07:00
commit bde2f3a97d
1173 changed files with 437609 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

519
DARKROOM_ADMIN_V2.md Normal file
View file

@ -0,0 +1,519 @@
# RMI Darkroom — Complete Backend Documentation
## RugMunch Intelligence Platform — Admin Backend v2
---
## Overview
The RMI Darkroom is a comprehensive, enterprise-grade admin backend for the RugMunch Intelligence crypto security platform. It provides full control over users, content, wallets, payments, security, analytics, and token deployment across multiple blockchains.
**Status:** Production-ready | **Version:** 2.0 | **Date:** May 31, 2026
---
## Architecture
```
┌─────────────────────────────────────────────────────────────┐
│ RMI Darkroom Backend │
├─────────────────────────────────────────────────────────────┤
│ Admin SPA (/admin) │ Darkroom UI (/darkroom) │
│ ├─ Dashboard │ ├─ Token Deployer │
│ ├─ User Management │ ├─ Airdrop Manager │
│ ├─ Security Center │ ├─ Multi-chain Launch │
│ ├─ Wallet Manager │ └─ Custom Snapshots │
│ ├─ Analytics │ │
│ ├─ Bulletin Board │ │
│ ├─ Financial │ │
│ └─ Configuration │ │
├─────────────────────────────────────────────────────────────┤
│ API Layer (757+ endpoints) │
│ ├─ /api/v1/admin/backend/* — Admin operations │
│ ├─ /api/v1/wallets/v2/* — Wallet management │
│ ├─ /api/v1/analytics/* — Real-time analytics │
│ ├─ /api/v1/admin/bulletin/* — Content management │
│ ├─ /api/v1/admin/tokens/* — Token deployment │
│ └─ /api/v1/bulletin/* — Public content │
├─────────────────────────────────────────────────────────────┤
│ Core Engines │
│ ├─ Admin Backend (RBAC, Audit, Sessions) │
│ ├─ Wallet Manager v2 (25+ chains, HD, Rotation) │
│ ├─ Security Defense (Bot Detection, WAF, DDoS) │
│ ├─ Analytics Engine (Real-time, Prometheus, Grafana) │
│ ├─ Bulletin Board (CMS, Moderation, SEO) │
│ ├─ Token Deployer (5 chains, Blacklist, Anti-bot) │
│ └─ Plugin System (Extensible architecture) │
├─────────────────────────────────────────────────────────────┤
│ Data Layer │
│ ├─ Redis — Sessions, rate limits, caching │
│ ├─ Supabase — Users, audit logs, wallet data │
│ ├─ File System — Vault, configs, backups │
│ └─ ClickHouse — Analytics time-series (optional) │
└─────────────────────────────────────────────────────────────┘
```
---
## Key Features
### 1. Role-Based Access Control (RBAC)
- **5 roles:** superadmin, admin, moderator, viewer, support
- **Permission matrix** with 30+ granular permissions
- **IP allowlists** for admin access
- **Session management** with 8-hour timeout, max 3 concurrent
- **2FA support** (TOTP-ready)
### 2. Wallet Manager v2
- **25+ chains:** Bitcoin, Ethereum, Solana, TRON, Base, BSC, Polygon, Arbitrum, Optimism, Avalanche, Fantom, Gnosis, Dogecoin, Litecoin, and more
- **HD Wallets:** BIP39/BIP44/BIP49/BIP84 mnemonic support
- **Key Rotation:** Scheduled automatic rotation with notifications
- **Payment Integration:** x402 micropayments, subscription tiers
- **Balance Monitoring:** Real-time tracking across all chains
- **AES-256-GCM encryption** with Argon2id key derivation
- **Multi-signature ready** architecture
### 3. Security Defense System
- **Bot Detection:** Behavioral analysis, fingerprinting, heuristics
- **Anomaly Detection:** Statistical analysis on request patterns
- **Honeypot Endpoints:** 10 trap endpoints that auto-ban attackers
- **DDoS Protection:** Circuit breaker pattern, rate limiting
- **IP Reputation:** Integration-ready for AbuseIPDB
- **Geo-blocking:** Country-based access control
- **Request Fingerprinting:** Canvas, WebGL, font analysis
### 4. Analytics Engine
- **Real-time Metrics:** CPU, memory, requests, errors, latency
- **4 Default Dashboards:** System Health, Financial, Security, Users
- **Trend Detection:** Automatic anomaly detection with 3-sigma analysis
- **Prometheus Export:** Compatible with Prometheus/Grafana stack
- **WebSocket-ready:** Real-time streaming data
- **Custom Dashboards:** Configurable widget layouts
### 5. Bulletin Board / CMS
- **Post Management:** CRUD with versioning, scheduling, expiry
- **Categories:** news, alert, update, promo, system, community, announcement, tutorial
- **Targeting:** Audience segmentation (free, premium, pro, admins)
- **Moderation:** Draft/review/published/archived workflow
- **SEO:** Meta tags, OpenGraph, slug generation
- **Comments:** Threaded discussions with moderation
### 6. Token Deployer (Darkroom)
- **5 Chains:** Ethereum, Base, BSC, Solana, TRON
- **Features:** Blacklist, anti-bot, anti-sniper, team allocation, vesting
- **Airdrop System:** 1:1 exact-match airdrop, multi-chain snapshots
- **Custom Snapshots:** JSON, CSV, manual upload
- **Anti-gaming:** Sybil detection, multi-account filtering
---
## API Endpoints Summary
| Category | Endpoints | Auth |
|----------|-----------|------|
| Admin Auth | 5 | Public/Session |
| Dashboard | 2 | dashboard.read |
| Users | 5 | users.read/write |
| Security | 8 | security.read/write |
| System | 5 | system.read/write |
| Content | 3 | content.read/write |
| Financial | 3 | financial.read |
| API Keys | 3 | api_keys.read/write |
| Admin Mgmt | 4 | superadmin only |
| Backups | 2 | superadmin only |
| Webhooks | 2 | webhooks.read/write |
| **Wallet Manager v2** | **19** | token_deploy.read/write |
| **Analytics** | **11** | analytics.read |
| **Bulletin Board** | **18** | content.read/write |
| **Token Deployer** | **24** | X-Admin-Key |
| **Public Bulletin** | **5** | None |
| **Total** | **757+** | Mixed |
---
## File Structure
```
/root/backend/
├── app/
│ ├── admin_backend.py # Core admin engine (RBAC, audit, sessions)
│ ├── wallet_manager_v2.py # Wallet management engine
│ ├── security_defense.py # Bot detection, WAF, DDoS protection
│ ├── analytics_engine.py # Real-time metrics and dashboards
│ ├── bulletin_board.py # CMS engine
│ ├── plugin_system.py # Plugin architecture
│ ├── token_deployer.py # Multi-chain token deployer
│ ├── multichain_airdrop.py # Airdrop engine
│ └── routers/
│ ├── admin_backend.py # Admin API (36 endpoints)
│ ├── wallet_manager_v2.py # Wallet API (19 endpoints)
│ ├── analytics.py # Analytics API (11 endpoints)
│ ├── bulletin_board.py # Bulletin API (18 endpoints)
│ ├── darkroom_tokens.py # Token deployer API
│ ├── darkroom_airdrop.py # Airdrop API
│ └── darkroom_multichain.py # Multi-chain API
├── static/
│ ├── admin.html # Admin SPA (52KB)
│ └── darkroom.html # Token deployer UI (43KB)
└── main.py # FastAPI app (757+ routes)
```
---
## Security Features
### Authentication
- bcrypt password hashing
- JWT session tokens with expiry
- Rate limiting on all endpoints
- IP blocking with auto-ban
- Failed login tracking (auto-ban after 5 attempts)
- Session invalidation on logout
- Concurrent session limits
### Authorization
- Role-based access control
- Permission matrix per endpoint
- Admin-only endpoints for sensitive operations
- Audit logging of all actions
- Before/after state tracking
### Data Protection
- AES-256-GCM encryption for wallet keys
- Argon2id key derivation
- File permissions (chmod 600) on vault files
- No private keys in memory longer than necessary
- Secure session storage in Redis
### Network Security
- Bot detection with behavioral analysis
- Honeypot endpoints (auto-ban on trigger)
- DDoS circuit breaker
- Request fingerprinting
- Anomaly detection on traffic patterns
- Geo-blocking capability
---
## Wallet Manager v2
### Supported Chains
| Chain | Family | Address Pattern | HD Path |
|-------|--------|----------------|---------|
| Bitcoin | Bitcoin | 1/3/bc1... | m/44'/0'/0'/0/0 |
| Bitcoin SegWit | Bitcoin | 3/bc1... | m/49'/0'/0'/0/0 |
| Bitcoin Native SegWit | Bitcoin | bc1... | m/84'/0'/0'/0/0 |
| Ethereum | EVM | 0x... | m/44'/60'/0'/0/0 |
| Base | EVM | 0x... | m/44'/60'/0'/0/0 |
| Polygon | EVM | 0x... | m/44'/60'/0'/0/0 |
| Arbitrum | EVM | 0x... | m/44'/60'/0'/0/0 |
| Optimism | EVM | 0x... | m/44'/60'/0'/0/0 |
| Avalanche | EVM | 0x... | m/44'/60'/0'/0/0 |
| BSC | EVM | 0x... | m/44'/60'/0'/0/0 |
| Fantom | EVM | 0x... | m/44'/60'/0'/0/0 |
| Gnosis | EVM | 0x... | m/44'/60'/0'/0/0 |
| Solana | Solana | Base58 | m/44'/501'/0'/0' |
| TRON | TRON | T... | m/44'/195'/0'/0/0 |
| Dogecoin | Secp256k1 | D... | m/44'/3'/0'/0/0 |
| Litecoin | Secp256k1 | L/M/ltc1... | m/44'/2'/0'/0/0 |
### Wallet Tiers
| Tier | Use Case | Security |
|------|----------|----------|
| hot | Active trading | Standard |
| warm | Regular operations | Enhanced |
| cold | Long-term storage | High |
| vault | Maximum security | Multi-sig ready |
### Payment Integration
- **x402:** Enable per-wallet with price in USD
- **Subscriptions:** Tier-based (free, basic, pro, enterprise)
- **Payment Types:** x402, subscription, one-time, marketplace, refund, withdrawal, deposit, fee, reward
---
## Analytics Dashboards
### System Health Dashboard
- CPU Usage (gauge + line chart)
- Memory Usage (gauge + line chart)
- Disk Usage (gauge)
- Requests/minute (counter)
- Response Latency (line chart)
- Error Rate (line chart)
### Financial Dashboard
- Total Revenue (counter)
- MRR (counter)
- ARPU (counter)
- Churn Rate (gauge)
- Revenue Trend (line chart)
- Payment Count (line chart)
### Security Dashboard
- Threats Blocked (counter)
- Bot Requests (counter)
- Attacks Detected (counter)
- Blocked IPs (counter)
- Threat Types (pie chart)
- Attack Timeline (line chart)
### User Analytics Dashboard
- DAU (counter)
- MAU (counter)
- New Users (counter)
- Retention Rate (gauge)
- User Growth (line chart)
- User Tiers (pie chart)
---
## Plugin System
### Plugin Types
- **connector** — Data sources (exchanges, APIs, oracles)
- **scanner** — Security scanners (contract, wallet, token)
- **analyzer** — Analysis engines (risk, sentiment, on-chain)
- **notifier** — Alert channels (email, telegram, webhook)
- **exporter** — Data export (CSV, PDF, API, webhook)
- **wallet** — Wallet integrations (hardware, custodial)
- **payment** — Payment processors (x402, stripe, crypto)
- **ml** — ML models (fraud detection, prediction)
- **security** — Security tools (WAF, firewall)
- **analytics** — Analytics integrations (Grafana, Prometheus)
### Built-in Plugins
- PrometheusExporter — Export metrics to Prometheus format
- WebhookNotifier — Send notifications to webhooks
- RedisCache — Redis caching and pub/sub connector
### Plugin Directory
```
/root/backend/plugins/
├── connector/
├── scanner/
├── analyzer/
├── notifier/
├── exporter/
├── wallet/
├── payment/
├── ml/
├── security/
└── analytics/
```
---
## Deployment
### Requirements
- Python 3.10+
- Redis 6.0+
- FastAPI + Uvicorn
- Optional: Supabase, ClickHouse, Prometheus, Grafana
### Environment Variables
```bash
# Core
JWT_SECRET=your-jwt-secret
REDIS_HOST=localhost
REDIS_PORT=6379
REDIS_PASSWORD=your-redis-password
SUPABASE_URL=https://your-project.supabase.co
SUPABASE_SERVICE_KEY=your-service-key
# Wallet Vault
WALLET_VAULT_PASSWORD=your-vault-password
# Admin
ADMIN_API_KEY=your-admin-key
# x402
X402_EVM_PAY_TO=your-wallet-address
# Security
ABUSEIPDB_API_KEY=your-abuseipdb-key # optional
```
### Startup
```bash
cd /root/backend
uvicorn main:app --host 0.0.0.0 --port 8000 --workers 4
```
### Health Check
```bash
curl http://localhost:8000/health
```
---
## Admin Access
### Default Admin
- **Email:** admin@rugmunch.io
- **Password:** Darkroom2025!
- **Role:** superadmin
### Admin UI
- **URL:** https://your-domain.com/admin
- **Login:** Email + Password + optional 2FA
- **Session:** 8-hour expiry, max 3 concurrent
### Darkroom (Token Deployer)
- **URL:** https://your-domain.com/darkroom
- **Auth:** X-Admin-Key header
---
## API Usage Examples
### Generate Wallet
```bash
curl -X POST https://api.rugmunch.io/api/v1/wallets/v2/generate \
-H "X-Admin-Session: sess_xxx" \
-H "Content-Type: application/json" \
-d '{"chain": "eth", "purpose": "payments", "tier": "hot"}'
```
### Record Payment
```bash
curl -X POST https://api.rugmunch.io/api/v1/wallets/v2/payments \
-H "X-Admin-Session: sess_xxx" \
-H "Content-Type: application/json" \
-d '{
"wallet_id": "wal_eth_123",
"wallet_address": "0x...",
"chain": "eth",
"payment_type": "x402",
"amount": 0.01,
"amount_usd": 25.00,
"user_id": "user_123"
}'
```
### Get Analytics
```bash
curl https://api.rugmunch.io/api/v1/analytics/dashboards/system \
-H "X-Admin-Session: sess_xxx"
```
### Prometheus Metrics
```bash
curl https://api.rugmunch.io/api/v1/analytics/prometheus
```
---
## Monitoring & Alerting
### Prometheus Metrics
All system metrics are exportable in Prometheus format at `/api/v1/analytics/prometheus`.
### Key Metrics
- `rmi_cpu_percent` — CPU usage
- `rmi_memory_percent` — Memory usage
- `rmi_requests_per_minute` — Request rate
- `rmi_response_time_ms` — Response latency
- `rmi_error_rate` — Error percentage
- `rmi_revenue_usd` — Total revenue
- `rmi_threats_blocked` — Threats blocked
- `rmi_active_users` — Active users
### Grafana Integration
Import the Prometheus endpoint into Grafana for visualization.
---
## Backup & Recovery
### Wallet Vault
- Encrypted JSON file at `/root/.rmi/wallets/vault_v2.json`
- Keystore at `/root/.rmi/wallets/keystore.enc`
- Payment log at `/root/.rmi/wallets/payments.jsonl`
### Backup Strategy
1. Daily encrypted backups to secure storage
2. Seed phrase recovery for HD wallets
3. Multi-signature backup for vault wallets
4. Audit log retention: 90 days
---
## Development
### Adding a New Plugin
```python
from app.plugin_system import Plugin, PluginType
class MyPlugin(Plugin):
@property
def name(self): return "my_plugin"
@property
def version(self): return "1.0.0"
@property
def plugin_type(self): return PluginType.ANALYZER
@property
def description(self): return "My custom analyzer"
def _setup(self):
# Initialize your plugin
pass
```
### Adding a Dashboard Widget
```python
from app.analytics_engine import DashboardWidget
widget = DashboardWidget(
widget_id="my_widget",
widget_type="line",
title="My Metric",
metric_name="my_metric",
width=6,
height=4,
)
engine.add_widget("system", widget)
```
---
## Security Checklist
- [ ] Change default admin password
- [ ] Set strong WALLET_VAULT_PASSWORD
- [ ] Enable Redis AUTH
- [ ] Configure IP allowlists for admin access
- [ ] Set up AbuseIPDB API key
- [ ] Enable 2FA for superadmin accounts
- [ ] Configure backup schedule
- [ ] Set up Prometheus/Grafana monitoring
- [ ] Enable HTTPS only
- [ ] Review audit logs weekly
- [ ] Rotate wallet keys quarterly
- [ ] Test disaster recovery plan
---
## Support
- **Email:** admin@rugmunch.io
- **Docs:** https://docs.rugmunch.io
- **API:** https://api.rugmunch.io/docs
- **Status:** https://status.rugmunch.io
---
## License
Proprietary and confidential. Unauthorized use, distribution, or reproduction is strictly prohibited.
Copyright (c) 2026 RugMunch Intelligence. All rights reserved.
---
**Built with:** FastAPI, Redis, Supabase, Python 3.12, love for crypto security.
**The Bloomberg Terminal of Shitcoins.**