Ukuphepha kwe-Lendbox
I-Lendbox iyisistimu yamarekhodi yezikhungo ezibolekisayo. Leli khasi lichaza indlela esivikela ngayo idatha yabatshelekwa neyephothifoliyo amakhasimende ethu asithemba ngayo, izilawuli ezitholakala ngaphakathi kwemikhiqizo, kanye nabantu besithathu ababandakanyekayo ekulethweni kwesevisi.
Ukuvikelwa kwedatha
- I-Lendbox isebenza ku-Amazon Web Services esifundeni se-us-east-1, e-United States. Uhlelo lokusebenza, isizindalwazi, kanye namadokhumenti alayishiwe aku-Amazon S3 konke kukuleso sifunda.
- Idatha ibethelwa ngesikhathi ithunyelwa kusetshenziswa i-TLS 1.3.
- Idatha ibethelwa lapho igciniwe kusetshenziswa i-AES-256. Amavolumu okugcina esizindalwazi nawohlelo lokusebenza abethelwa nge-AWS EBS encryption. Amadokhumenti alayishiwe nama-backup abethelwa ohlangothini lweseva ku-Amazon S3. Okhiye bokubethela balawulwa nge-AWS Key Management Service.
- Amakhasimende angathumela ngaphandle yonke idatha yawo noma nini ngaphakathi kohlelo. Akudingeki isicelo kithi.
Lapho i-akhawunti ivalwa, idatha yekhasimende igcinwa izinsuku ezingu-60 bese isuswa unomphela. Phakathi kwaleso sikhathi i-akhawunti ingabuyiselwa uma kuceliwe.
Ingqalasizinda
- Uhlelo lokusebenza nesizindalwazi kusebenza kungqalasizinda ye-AWS ehlukanisiwe. Izizindalwazi azifinyeleleki emphakathini futhi azamukeli ukuxhumana okuvela ku-inthanethi. Ungqimba lwewebhu luhlinzekwa yi-Vercel.
- Lonke ithrafikhi engenayo idlula ku-Cloudflare, ehlinzeka ngokunciphisa i-DDoS kanye ne-web application firewall.
- Izimo zokusebenza zihlukanisiwe: ukukhiqiza, ukuhlola, nokuthuthukisa kusebenza kungqalasizinda ehlukene ngaphandle kokwabelana ngeziqinisekiso. Ukuthuthukisa nokuhlola akunayo idatha yokukhiqiza.
Ukulawulwa kokufinyelela ngaphakathi kohlelo
Izilawuli kulesi sigaba zisetshenziswa ikhasimende, hhayi thina. Isikhungo sizilungiselela sona, futhi singaqinisekisa noma nini ukuthi ilungu ngalinye labasebenzi lingenzani.
- Izimvume ezinamazinga ngamodyuli ngayinye. Imodyuli ngayinye ingasethwa kulungu ngalinye labasebenzi kwelinye lamazinga ayisithupha aboniswe ngezansi.
- Ukwabiwa kwezindima emagatsheni amaningi. I-akhawunti eyodwa yesisebenzi ingakwazi ukunikwa ukufinyelela emagatsheni amaningi futhi ibe nendima ehlukile kulelo nalelo, ngakho umphathi wegatsha kwenye indawo abe umsebenzisi obuka kuphela kwenye.
- Ukwehlukaniswa kwalowo ocelayo nalowo ogunyazayo. Izenzo ezibucayi zahlukaniswa phakathi kwesisebenzi esizicelayo nesisebenzi esizigunyazayo. Izinqubo zokugunyaza zingalungiselelwa isikhungo ngasinye, kufaka phakathi inani lezinyathelo nokuthi yiziphi izindima ezingasebenza esinyathelweni ngasinye.
- Ukuqinisekisa okunezici eziningi. Kuyatholakala kukho konke ukungena, futhi kungavulwa ngokuzimela umsebenzisi ngamunye nesisebenzi ngasinye.
- Amaseshini aphelelwa yisikhathi ngemuva kwezinsuku ezingu-5 futhi adinga ukuqinisekiswa kabusha.
Amazinga ezimvume
Imodyuli ngayinye isethwa ngokuzimela, kulungu ngalinye labasebenzi.
Lutho — Izinga 1 kwangu-6
Imodyuli ayitholakali futhi ayiveli kukhombisi lelungu labasebenzi.
Ukubuka kuphela — Izinga 2 kwangu-6
Ingavula futhi ifunde amarekhodi. Ayikwazi ukushintsha lutho.
Ingacela — Izinga 3 kwangu-6
Ingathumela isenzo ukuze sigunyazwe. Ayikwazi ukusigunyaza.
Ingagunyaza — Izinga 4 kwangu-6
Ingagunyaza izenzo ezithunyelwe ngamanye amalungu abasebenzi.
Ingahlela — Izinga 5 kwangu-6
Ingadala futhi ishintshe amarekhodi ngqo.
Inokufinyelela okugcwele — Izinga 6 kwangu-6
Ukufinyelela okugcwele, kumamodyuli angahlukaniswanga ngezinyathelo zokucela nezokugunyaza.
Umlando wokucwaninga
- Sonke isenzo esenziwa ngaphakathi kohlelo siqoshwa kanye nomsebenzisi osenzile, irekhodi elithintekile, kanye nesitembu sesikhathi.
- Amarekhodi okucwaninga angawokwengeza kuphela. Awakwazi ukuhlelwa noma ukususwa kusukela ohlelweni, ngisho nangabalawuli besikhungo.
- Izikhathi zokubalwa kwezimali ezivaliwe zikhiyiwe ekushintshweni ngemuva.
- Abalawuli besikhungo bangathumela ngaphandle umlando wokucwaninga noma nini.
Umlando wokucwaninga ugcinwa impilo yonke ye-akhawunti, kusukela osukwini eyadalwa ngalo. Alikho iwindi elihambayo futhi akukho ukunqunywa.
Ama-backup nokubuyisela
- Izizindalwazi zenzelwa i-backup njalo ngehora.
- Ama-backup abethelwa futhi agcinwa izinyanga ezingu-6.
- Umgomo wephuzu lokubuyisela (RPO): ihora eli-1.
Ukubuyiselwa kuhlolwa masonto onke esimweni esingesona esokukhiqiza. I-backup engakaze ibuyiselwe akuyona i-backup.
Ukufinyelela kwangaphakathi nezimfihlo
- Ukufinyelela kudatha yokukhiqiza kukhawulelwe kumuntu oyedwa oqanjiwe, umsunguli. Akekho omunye umsebenzi, umqashi, noma umuntu wesithathu ophethe iziqinisekiso zokukhiqiza. Lesi yisinqumo esenziwe ngamabomu: kuyinani elincane kakhulu labantu abangafinyelela kudatha yamakhasimende.
- Ukufinyelela kokukhiqiza kunikezwa umuntu ngamunye futhi kuvikelwa ngokuqinisekisa okunezici eziningi. Azikho ama-akhawunti noma iziqinisekiso ezabelwanwayo ezisetshenziswa noma kuphi enhlanganweni.
- Izimfihlo neziqinisekiso zohlelo zilawulwa ku-Doppler. Azigcinwa ekulawuleni kwezinguqulo noma emishinini yabathuthukisi.
- Ukuqhubeka: kunenqubo ebhaliwe yesimo esiphuthumayo ehlanganisa isimo lapho umuntu ophethe iziqinisekiso zokukhiqiza engatholakali. Iziqinisekiso zokubuyisela zigcinwa zivalelwe kumuntu wesibili oqanjiwe, zikhululwe ngesizathu esichaziwe, futhi konke ukusetshenziswa kuqoshwa. Le nqubo ibuyisela ukufinyelela kwamakhasimende kudatha yawo; ayinikezi muntu ukufinyelela okuhlala njalo.
Ukuphathwa kobuthakathaka nezichibi
Ubuthakathaka bokuphepha bulungiswa ngokwezinsuku ezimisiwe ezisekelwe ebukhulwini bengozi, kubalwa kusukela lapho ubuthakathaka buqinisekiswa ukuthi buthinta i-Lendbox.
- Okuncikile kohlelo kuqashwa njalo nge-Renovate, evula ngokuzenzakalelayo ama-pull request ezichibi njengoba izinguqulo ezintsha zishicilelwa.
- Izibuyekezo zokuncikile zibuyekezwa futhi zihlanganiswe ngomjikelezo wamasonto onke. Izexwayiso ezinendlela eyaziwayo yokuxhashazwa zeqa lowo mjikelezo futhi zisheshe zilungiswe.
- Izithombe eziyisisekelo zesistimu yokusebenza nezokuqukatha zakhiwa kabusha futhi zisetshenziswe kabusha inyanga ngayinye, futhi ngokushesha uma kudalulwa ubuthakathaka obubucayi.
| Ubukhulu bengozi | Isikhathi sokulungisa |
|---|---|
| Obubucayi | Amahora angu-48 |
| Obuphezulu | Izinsuku ezingu-7 |
| Obumaphakathi | Izinsuku ezingu-30 |
| Obuphansi | Umjikelezo olandelayo wokukhishwa |
Abacubunguli abangaphansi
Izinsizakalo ezibalwe lapha zicubungula idatha egameni lethu ngaphansi kwenkontileka.
| Umcubunguli ongaphansi | Injongo | Idatha efinyelelwayo | Indawo |
|---|---|---|---|
| Amazon Web Services | Ukusingathwa kohlelo nesizindalwazi | Yonke idatha yamakhasimende neyabatshelekwa | United States (us-east-1) |
| Amazon Web Services (S3) | Ukugcinwa kwamadokhumenti nama-backup | Amadokhumenti alayishiwe, ama-backup esizindalwazi | United States (us-east-1) |
| Vercel | Ukusingathwa nokulethwa kohlelo lwewebhu | Imethadatha yesicelo, ikheli le-IP | United States, global edge |
| Cloudflare | I-DNS, i-CDN, ukunciphisa i-DDoS, i-web application firewall | Imethadatha yesicelo, ikheli le-IP | Global edge |
| Google Firebase | Ukuqinisekiswa kwabasebenzi, kufaka phakathi okunezici eziningi | Igama lesisebenzi, ikheli le-imeyili, namathokheni okuqinisekisa | United States |
| Doppler | Ukuphathwa kwezimfihlo neziqinisekiso zohlelo | Ayikho idatha yamakhasimende. Iziqinisekiso zesevisi kuphela. | United States |
| Paddle | Ukukhokhiswa kokubhaliswa ngekhadi, umthengisi orekhodiwe | Umuntu oxhunyanwa naye ngezikweletu esikhungweni nemininingwane yenkokhelo | United Kingdom |
| Lenco | Izinkokhelo zokubhalisa nge-mobile money | Umuntu oxhunyanwa naye ngezikweletu esikhungweni, inkomba yokuthengiselana | Zambia |
| PostHog | Ukuhlaziywa komkhiqizo namafulege ezici | Isikhombi somsebenzisi, ikheli le-imeyili, imicimbi ngaphakathi kohlelo | United States |
| Bugsnag (SmartBear) | Ukubika amaphutha ohlelo | Isikhombi somsebenzisi, ukuhlaziywa kwamaphutha | United States |
| OneSignal | Izaziso zewebhu nezeselula | Ithokheni yedivayisi, isikhombi somsebenzisi | United States |
| Typesense | Inkomba yosesho ngaphakathi kohlelo | Okuqukethwe kokuzulazula nosizo. Ayikho idatha yabatshelekwa. | United States |
| OpenRouter | Ukuqondiswa kwamamodeli kwizici ze-AI ngaphakathi kohlelo | Umbhalo wombuzo othunyelwe yisisebenzi | United States |
| Google reCAPTCHA | Ukuvikelwa kumabhothi kumafomu okuqinisekisa | Ikheli le-IP, izimpawu zesiphequluli | United States |
| Google Tag Manager | Ukuphathwa kwamathegi okumaketha kuwebhusayithi yomphakathi | Ukuhlaziywa kwezivakashi zewebhusayithi. Ayikho idatha yomkhiqizo. | United States |
Amakhasimende aziswa nge-imeyili okungenani izinsuku ezingu-30 ngaphambi kokwengezwa komcubunguli ongaphansi omusha noma ukushintshwa kokhona, kusetshenziswa ikheli lokuxhumana kwezokuphatha ku-akhawunti.
Izingxenye esizisingathayo ngokwethu
Lokhu okulandelayo kusebenza kungqalasizinda esiyilawulayo. Kuqanjiwe ngoba kubonakala kunoma ubani ohlola uhlelo, kodwa akubona abacubunguli abangaphansi: akukho muntu wesithathu othola idatha ngakho.
| Ingxenye | Injongo | Umsingathi |
|---|---|---|
| Chatwoot | Ingxoxo yosizo | support.lendbox.io |
| Seq | Ukuqoshwa kwemisebenzi yohlelo | logs.lendbox.io |
| Shlink | Izixhumanisi ezimfushane zokusayina amadokhumenti | s.lendbox.io |
| Squidex | Ukuphathwa kokuqukethwe kokumaketha. Ayikho idatha yomkhiqizo. | cms.popsicleai.com |
Ukuqapha nokusabela ezigamekweni
- Impilo yengqalasizinda neyohlelo lokusebenza iqashwa njalo kusetshenziswa i-Prometheus, i-Alertmanager, ne-cAdvisor, izexwayiso zithunyelwa kunjiniyela osebenzayo.
- Uma kwenzeka isigameko sokuphepha esithinta idatha yamakhasimende, amakhasimende athintekile aziswa phakathi kwamahora angu-72 ngemuva kokuqinisekiswa. Izaziso zichaza okwenzekile, ukuthi iyiphi idatha ethintekile, ukuthi senzeni ukukuvimba, nokuthi yisiphi isinyathelo, uma sikhona, ikhasimende okumele lisithathe.
- Izigameko zokutholakala zishicilelwa ekhasini lesimo ngenkathi zisasetshenzwa, hhayi ngemuva kokuxazululwa.
Ukutholakala nomlando wezigameko kusobala emphakathini
Isevisi ngayinye inezinsuku ezingu-90 zesimo sansuku zonke kanye nesikhathi sokuma kwesevisi ngayinye, kushicilelwe ku-status.lendbox.io. Sishicilela ukuma kwezinsizakalo kunokukufihla.
Ukubika ubuthakathaka
- Thumela i-imeyili [email protected]. Faka izinyathelo zokukuphinda.
- Siyakuqinisekisa ukwamukelwa kombiko ngamunye phakathi kwezinsuku zomsebenzi ezingu-3, futhi sinikeze ukuhlolwa kobukhulu bengozi nesikhathi esilindelekile sokulungisa phakathi kwezinsuku zomsebenzi ezingu-10.
- Asithathi izinyathelo zomthetho ngokumelene nabacwaningi ababika ngenhloso enhle, abagwema ukwephulwa kwemfihlo nokwehliswa kwesevisi, futhi abasinika isikhathi esifanele sokulungisa ngaphambi kokudalula.
- Imininingwane yethu yokuxhumana efundekayo ngomshini ishicilelwe ku-/.well-known/security.txt.