Remove deprecated version field from docker-compose files

.env copy

@@ -0,0 +1,33 @@
+# Runtime
+HOST=0.0.0.0
+PORT=8000
+LOG_LEVEL=info
+
+# Auth (disable for local dev)
+DISABLE_AUTH=true
+SECRET_KEY=change-me-in-development
+
+# API keys (only used if DISABLE_AUTH=false)
+API_KEYS_ADMIN=
+API_KEYS_READ_ONLY=
+API_KEYS_WRITE=
+
+# Integrations
+S1_SDL_API_TOKEN=
+
+# Frontend -> Backend API key (not needed when DISABLE_AUTH=true)
+BACKEND_API_KEY=
+
+# HEC batching (used by Frontend -> hec_sender.py)
+S1_HEC_BATCH=true
+S1_HEC_BATCH_MAX_BYTES=1048576
+S1_HEC_BATCH_FLUSH_MS=500
+# Optional debug for HEC sender
+S1_HEC_DEBUG=0
+# Optional TLS/auth tweaks
+# S1_HEC_VERIFY=true
+# S1_HEC_AUTH_SCHEME=Splunk
+
+# Keyring (frontend) - encrypted file backend
+KEYRING_CRYPTFILE_PASSWORD=change-this-strong-password
+KEYRING_CRYPTFILE_PATH=/app/Frontend/.keyring.cfg

.gitattributes

@@ -0,0 +1,35 @@
+# Ensure shell scripts always use LF line endings
+*.sh text eol=lf
+entrypoint.sh text eol=lf
+
+# Python files should use LF
+*.py text eol=lf
+
+# Docker files should use LF
+Dockerfile text eol=lf
+docker-compose.yml text eol=lf
+docker-compose.yaml text eol=lf
+
+# Config files should use LF
+*.conf text eol=lf
+*.cfg text eol=lf
+*.ini text eol=lf
+*.json text eol=lf
+*.yaml text eol=lf
+*.yml text eol=lf
+
+# Documentation files
+*.md text eol=lf
+*.txt text eol=lf
+
+# Windows batch files should use CRLF
+*.bat text eol=crlf
+*.cmd text eol=crlf
+
+# Binary files
+*.png binary
+*.jpg binary
+*.jpeg binary
+*.gif binary
+*.ico binary
+*.pdf binary

.gitignore

@@ -2,6 +2,7 @@
 # =============================
 # IMPORTANT: Keep all documentation local only
 !README.md
+!AGENTS.md
 *.md
 !README.md.example
 *.markdown
@@ -29,6 +30,10 @@ phase*_*.py
 api_validation_report.py
 comprehensive_*.py
 comprehensive_*.json
+*.log
+api/*.log
+api/*.html
+testing/results/
 
 # Security and Sensitive Data
 # ==========================
@@ -62,6 +67,10 @@ attack_scenario_*.json
 scenario_*.json
 !scenario_example.json
 
+# Generated Scenario Configs (timestamped outputs)
+Backend/scenarios/configs/*.json
+!Backend/scenarios/configs/*_example.json
+
 # Generated Event Files
 # ====================
 events_*.json
@@ -229,6 +238,15 @@ tmp/
 *.sqlite3
 *.db-journal
 
+# API Data Directory
+# ==================
+# Ignore uploaded files and database files in data directory
+Backend/api/data/
+api/data/
+data/uploads/
+data/*.db
+data/*.sqlite
+
 # Archive Files
 # =============
 *.zip
@@ -245,6 +263,8 @@ tmp/
 !sample.csv
 large_datasets/
 bulk_events/
+uploads/
+uploaded_files/
 
 # API Documentation Files
 # =======================
@@ -332,10 +352,11 @@ coral_*
 
 # Keep important example files
 !README.md
+!AGENTS.md
 !requirements.txt
 !detections.conf
 
 # Ignore specific vendor test files that might contain sensitive data
 *_test_output.json
 *_validation_results.json
-vendor_config_*.json
+vendor_config_*.json