RugMunchMedia/rmi-backend
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
rmi-backend/DARKROOM_ADMIN_V2.md

17 KiB
Raw Blame History

RMI Darkroom — Complete Backend Documentation

RugMunch Intelligence Platform — Admin Backend v2

Overview

The RMI Darkroom is a comprehensive, enterprise-grade admin backend for the RugMunch Intelligence crypto security platform. It provides full control over users, content, wallets, payments, security, analytics, and token deployment across multiple blockchains.

Status: Production-ready | Version: 2.0 | Date: May 31, 2026

Architecture

┌─────────────────────────────────────────────────────────────┐
│                    RMI Darkroom Backend                     │
├─────────────────────────────────────────────────────────────┤
│  Admin SPA (/admin)    │    Darkroom UI (/darkroom)         │
│  ├─ Dashboard          │    ├─ Token Deployer                │
│  ├─ User Management    │    ├─ Airdrop Manager              │
│  ├─ Security Center    │    ├─ Multi-chain Launch            │
│  ├─ Wallet Manager     │    └─ Custom Snapshots              │
│  ├─ Analytics          │                                    │
│  ├─ Bulletin Board     │                                    │
│  ├─ Financial          │                                    │
│  └─ Configuration      │                                    │
├─────────────────────────────────────────────────────────────┤
│  API Layer (757+ endpoints)                                 │
│  ├─ /api/v1/admin/backend/*  — Admin operations             │
│  ├─ /api/v1/wallets/v2/*     — Wallet management            │
│  ├─ /api/v1/analytics/*      — Real-time analytics          │
│  ├─ /api/v1/admin/bulletin/* — Content management            │
│  ├─ /api/v1/admin/tokens/*   — Token deployment             │
│  └─ /api/v1/bulletin/*       — Public content               │
├─────────────────────────────────────────────────────────────┤
│  Core Engines                                               │
│  ├─ Admin Backend (RBAC, Audit, Sessions)                  │
│  ├─ Wallet Manager v2 (25+ chains, HD, Rotation)           │
│  ├─ Security Defense (Bot Detection, WAF, DDoS)            │
│  ├─ Analytics Engine (Real-time, Prometheus, Grafana)        │
│  ├─ Bulletin Board (CMS, Moderation, SEO)                  │
│  ├─ Token Deployer (5 chains, Blacklist, Anti-bot)         │
│  └─ Plugin System (Extensible architecture)                 │
├─────────────────────────────────────────────────────────────┤
│  Data Layer                                                 │
│  ├─ Redis — Sessions, rate limits, caching                  │
│  ├─ Supabase — Users, audit logs, wallet data               │
│  ├─ File System — Vault, configs, backups                  │
│  └─ ClickHouse — Analytics time-series (optional)           │
└─────────────────────────────────────────────────────────────┘

Key Features

1. Role-Based Access Control (RBAC)

  • 5 roles: superadmin, admin, moderator, viewer, support
  • Permission matrix with 30+ granular permissions
  • IP allowlists for admin access
  • Session management with 8-hour timeout, max 3 concurrent
  • 2FA support (TOTP-ready)

2. Wallet Manager v2

  • 25+ chains: Bitcoin, Ethereum, Solana, TRON, Base, BSC, Polygon, Arbitrum, Optimism, Avalanche, Fantom, Gnosis, Dogecoin, Litecoin, and more
  • HD Wallets: BIP39/BIP44/BIP49/BIP84 mnemonic support
  • Key Rotation: Scheduled automatic rotation with notifications
  • Payment Integration: x402 micropayments, subscription tiers
  • Balance Monitoring: Real-time tracking across all chains
  • AES-256-GCM encryption with Argon2id key derivation
  • Multi-signature ready architecture

3. Security Defense System

  • Bot Detection: Behavioral analysis, fingerprinting, heuristics
  • Anomaly Detection: Statistical analysis on request patterns
  • Honeypot Endpoints: 10 trap endpoints that auto-ban attackers
  • DDoS Protection: Circuit breaker pattern, rate limiting
  • IP Reputation: Integration-ready for AbuseIPDB
  • Geo-blocking: Country-based access control
  • Request Fingerprinting: Canvas, WebGL, font analysis

4. Analytics Engine

  • Real-time Metrics: CPU, memory, requests, errors, latency
  • 4 Default Dashboards: System Health, Financial, Security, Users
  • Trend Detection: Automatic anomaly detection with 3-sigma analysis
  • Prometheus Export: Compatible with Prometheus/Grafana stack
  • WebSocket-ready: Real-time streaming data
  • Custom Dashboards: Configurable widget layouts

5. Bulletin Board / CMS

  • Post Management: CRUD with versioning, scheduling, expiry
  • Categories: news, alert, update, promo, system, community, announcement, tutorial
  • Targeting: Audience segmentation (free, premium, pro, admins)
  • Moderation: Draft/review/published/archived workflow
  • SEO: Meta tags, OpenGraph, slug generation
  • Comments: Threaded discussions with moderation

6. Token Deployer (Darkroom)

  • 5 Chains: Ethereum, Base, BSC, Solana, TRON
  • Features: Blacklist, anti-bot, anti-sniper, team allocation, vesting
  • Airdrop System: 1:1 exact-match airdrop, multi-chain snapshots
  • Custom Snapshots: JSON, CSV, manual upload
  • Anti-gaming: Sybil detection, multi-account filtering

API Endpoints Summary

Category Endpoints Auth
Admin Auth 5 Public/Session
Dashboard 2 dashboard.read
Users 5 users.read/write
Security 8 security.read/write
System 5 system.read/write
Content 3 content.read/write
Financial 3 financial.read
API Keys 3 api_keys.read/write
Admin Mgmt 4 superadmin only
Backups 2 superadmin only
Webhooks 2 webhooks.read/write
Wallet Manager v2 19 token_deploy.read/write
Analytics 11 analytics.read
Bulletin Board 18 content.read/write
Token Deployer 24 X-Admin-Key
Public Bulletin 5 None
Total 757+ Mixed

File Structure

/root/backend/
├── app/
│   ├── admin_backend.py          # Core admin engine (RBAC, audit, sessions)
│   ├── wallet_manager_v2.py      # Wallet management engine
│   ├── security_defense.py        # Bot detection, WAF, DDoS protection
│   ├── analytics_engine.py        # Real-time metrics and dashboards
│   ├── bulletin_board.py          # CMS engine
│   ├── plugin_system.py          # Plugin architecture
│   ├── token_deployer.py         # Multi-chain token deployer
│   ├── multichain_airdrop.py     # Airdrop engine
│   └── routers/
│       ├── admin_backend.py      # Admin API (36 endpoints)
│       ├── wallet_manager_v2.py  # Wallet API (19 endpoints)
│       ├── analytics.py          # Analytics API (11 endpoints)
│       ├── bulletin_board.py     # Bulletin API (18 endpoints)
│       ├── darkroom_tokens.py    # Token deployer API
│       ├── darkroom_airdrop.py   # Airdrop API
│       └── darkroom_multichain.py # Multi-chain API
├── static/
│   ├── admin.html                # Admin SPA (52KB)
│   └── darkroom.html             # Token deployer UI (43KB)
└── main.py                       # FastAPI app (757+ routes)

Security Features

Authentication

  • bcrypt password hashing
  • JWT session tokens with expiry
  • Rate limiting on all endpoints
  • IP blocking with auto-ban
  • Failed login tracking (auto-ban after 5 attempts)
  • Session invalidation on logout
  • Concurrent session limits

Authorization

  • Role-based access control
  • Permission matrix per endpoint
  • Admin-only endpoints for sensitive operations
  • Audit logging of all actions
  • Before/after state tracking

Data Protection

  • AES-256-GCM encryption for wallet keys
  • Argon2id key derivation
  • File permissions (chmod 600) on vault files
  • No private keys in memory longer than necessary
  • Secure session storage in Redis

Network Security

  • Bot detection with behavioral analysis
  • Honeypot endpoints (auto-ban on trigger)
  • DDoS circuit breaker
  • Request fingerprinting
  • Anomaly detection on traffic patterns
  • Geo-blocking capability

Wallet Manager v2

Supported Chains

Chain Family Address Pattern HD Path
Bitcoin Bitcoin 1/3/bc1... m/44'/0'/0'/0/0
Bitcoin SegWit Bitcoin 3/bc1... m/49'/0'/0'/0/0
Bitcoin Native SegWit Bitcoin bc1... m/84'/0'/0'/0/0
Ethereum EVM 0x... m/44'/60'/0'/0/0
Base EVM 0x... m/44'/60'/0'/0/0
Polygon EVM 0x... m/44'/60'/0'/0/0
Arbitrum EVM 0x... m/44'/60'/0'/0/0
Optimism EVM 0x... m/44'/60'/0'/0/0
Avalanche EVM 0x... m/44'/60'/0'/0/0
BSC EVM 0x... m/44'/60'/0'/0/0
Fantom EVM 0x... m/44'/60'/0'/0/0
Gnosis EVM 0x... m/44'/60'/0'/0/0
Solana Solana Base58 m/44'/501'/0'/0'
TRON TRON T... m/44'/195'/0'/0/0
Dogecoin Secp256k1 D... m/44'/3'/0'/0/0
Litecoin Secp256k1 L/M/ltc1... m/44'/2'/0'/0/0

Wallet Tiers

Tier Use Case Security
hot Active trading Standard
warm Regular operations Enhanced
cold Long-term storage High
vault Maximum security Multi-sig ready

Payment Integration

  • x402: Enable per-wallet with price in USD
  • Subscriptions: Tier-based (free, basic, pro, enterprise)
  • Payment Types: x402, subscription, one-time, marketplace, refund, withdrawal, deposit, fee, reward

Analytics Dashboards

System Health Dashboard

  • CPU Usage (gauge + line chart)
  • Memory Usage (gauge + line chart)
  • Disk Usage (gauge)
  • Requests/minute (counter)
  • Response Latency (line chart)
  • Error Rate (line chart)

Financial Dashboard

  • Total Revenue (counter)
  • MRR (counter)
  • ARPU (counter)
  • Churn Rate (gauge)
  • Revenue Trend (line chart)
  • Payment Count (line chart)

Security Dashboard

  • Threats Blocked (counter)
  • Bot Requests (counter)
  • Attacks Detected (counter)
  • Blocked IPs (counter)
  • Threat Types (pie chart)
  • Attack Timeline (line chart)

User Analytics Dashboard

  • DAU (counter)
  • MAU (counter)
  • New Users (counter)
  • Retention Rate (gauge)
  • User Growth (line chart)
  • User Tiers (pie chart)

Plugin System

Plugin Types

  • connector — Data sources (exchanges, APIs, oracles)
  • scanner — Security scanners (contract, wallet, token)
  • analyzer — Analysis engines (risk, sentiment, on-chain)
  • notifier — Alert channels (email, telegram, webhook)
  • exporter — Data export (CSV, PDF, API, webhook)
  • wallet — Wallet integrations (hardware, custodial)
  • payment — Payment processors (x402, stripe, crypto)
  • ml — ML models (fraud detection, prediction)
  • security — Security tools (WAF, firewall)
  • analytics — Analytics integrations (Grafana, Prometheus)

Built-in Plugins

  • PrometheusExporter — Export metrics to Prometheus format
  • WebhookNotifier — Send notifications to webhooks
  • RedisCache — Redis caching and pub/sub connector

Plugin Directory

/root/backend/plugins/
├── connector/
├── scanner/
├── analyzer/
├── notifier/
├── exporter/
├── wallet/
├── payment/
├── ml/
├── security/
└── analytics/

Deployment

Requirements

  • Python 3.10+
  • Redis 6.0+
  • FastAPI + Uvicorn
  • Optional: Supabase, ClickHouse, Prometheus, Grafana

Environment Variables

# Core
JWT_SECRET=your-jwt-secret
REDIS_HOST=localhost
REDIS_PORT=6379
REDIS_PASSWORD=your-redis-password
SUPABASE_URL=https://your-project.supabase.co
SUPABASE_SERVICE_KEY=your-service-key

# Wallet Vault
WALLET_VAULT_PASSWORD=your-vault-password

# Admin
ADMIN_API_KEY=your-admin-key

# x402
X402_EVM_PAY_TO=your-wallet-address

# Security
ABUSEIPDB_API_KEY=your-abuseipdb-key  # optional

Startup

cd /root/backend
uvicorn main:app --host 0.0.0.0 --port 8000 --workers 4

Health Check

curl http://localhost:8000/health

Admin Access

Default Admin

Admin UI

Darkroom (Token Deployer)

API Usage Examples

Generate Wallet

curl -X POST https://api.rugmunch.io/api/v1/wallets/v2/generate \
  -H "X-Admin-Session: sess_xxx" \
  -H "Content-Type: application/json" \
  -d '{"chain": "eth", "purpose": "payments", "tier": "hot"}'

Record Payment

curl -X POST https://api.rugmunch.io/api/v1/wallets/v2/payments \
  -H "X-Admin-Session: sess_xxx" \
  -H "Content-Type: application/json" \
  -d '{
    "wallet_id": "wal_eth_123",
    "wallet_address": "0x...",
    "chain": "eth",
    "payment_type": "x402",
    "amount": 0.01,
    "amount_usd": 25.00,
    "user_id": "user_123"
  }'

Get Analytics

curl https://api.rugmunch.io/api/v1/analytics/dashboards/system \
  -H "X-Admin-Session: sess_xxx"

Prometheus Metrics

curl https://api.rugmunch.io/api/v1/analytics/prometheus

Monitoring & Alerting

Prometheus Metrics

All system metrics are exportable in Prometheus format at /api/v1/analytics/prometheus.

Key Metrics

  • rmi_cpu_percent — CPU usage
  • rmi_memory_percent — Memory usage
  • rmi_requests_per_minute — Request rate
  • rmi_response_time_ms — Response latency
  • rmi_error_rate — Error percentage
  • rmi_revenue_usd — Total revenue
  • rmi_threats_blocked — Threats blocked
  • rmi_active_users — Active users

Grafana Integration

Import the Prometheus endpoint into Grafana for visualization.

Backup & Recovery

Wallet Vault

  • Encrypted JSON file at /root/.rmi/wallets/vault_v2.json
  • Keystore at /root/.rmi/wallets/keystore.enc
  • Payment log at /root/.rmi/wallets/payments.jsonl

Backup Strategy

  1. Daily encrypted backups to secure storage
  2. Seed phrase recovery for HD wallets
  3. Multi-signature backup for vault wallets
  4. Audit log retention: 90 days

Development

Adding a New Plugin

from app.plugin_system import Plugin, PluginType

class MyPlugin(Plugin):
    @property
    def name(self): return "my_plugin"
    @property
    def version(self): return "1.0.0"
    @property
    def plugin_type(self): return PluginType.ANALYZER
    @property
    def description(self): return "My custom analyzer"

    def _setup(self):
        # Initialize your plugin
        pass

Adding a Dashboard Widget

from app.analytics_engine import DashboardWidget

widget = DashboardWidget(
    widget_id="my_widget",
    widget_type="line",
    title="My Metric",
    metric_name="my_metric",
    width=6,
    height=4,
)
engine.add_widget("system", widget)

Security Checklist

  • Change default admin password
  • Set strong WALLET_VAULT_PASSWORD
  • Enable Redis AUTH
  • Configure IP allowlists for admin access
  • Set up AbuseIPDB API key
  • Enable 2FA for superadmin accounts
  • Configure backup schedule
  • Set up Prometheus/Grafana monitoring
  • Enable HTTPS only
  • Review audit logs weekly
  • Rotate wallet keys quarterly
  • Test disaster recovery plan

Support

License

Proprietary and confidential. Unauthorized use, distribution, or reproduction is strictly prohibited.

Copyright (c) 2026 RugMunch Intelligence. All rights reserved.

Built with: FastAPI, Redis, Supabase, Python 3.12, love for crypto security.

The Bloomberg Terminal of Shitcoins.