This program notifies you of successful SSH login attempts. It parses the /var/log/auth.log file and sends you an alert via the supported platforms containing the user and source IP address.
You can use the packages (deb/rpm) or the precompiled binary from the releases section.
The configuration file is by default located in /etc/loginnotifier/config.json. To specify a different location use the --config parameter.
In case the file doesn't exist it will be created during startup.
Currently supported platforms:
- Slack
- Discord
To enable alerts for a specific platform set the config option alerts.<platform>.enabled to true.
To use Slack alerts you have to specify the Webhook URL, the channel name, the username for the alerts and an icon emoji. You can find more information about Slack Webhooks here.
To use Discord alerts you have to specify the Webhook URL, the username for the alerts and an avatar url. You can find more information about Discord Webhooks here.
By default this program uses the /var/log/auth.log file to detect new sessions. You can specify a different file with the config option source_log.