Initial commit: RMM Agent + Backend

- Go Agent (FreeBSD/amd64) fuer OPNsense
- Go Backend (Linux/amd64) mit REST API + SQLite
- Collector: Hardware, CPU, Memory, Disks, Network, Services,
  WireGuard, DHCP (KEA/ISC/dnsmasq), Routes, Gateways,
  Certificates, Plugins, Updates
- Persistente Agent-ID
- TLS + API-Key Auth
- WebSocket-Infrastruktur (WIP): bidirektionaler Command-Kanal,
  TCP-Tunnel fuer Remote-Zugriff auf Firewall-WebUI
- Lastenheft und README

Makefile

@@ -0,0 +1,85 @@
+.PHONY: all backend agent clean certs deploy-backend deploy-agent
+
+BACKEND_BIN = build/rmm-backend
+AGENT_BIN = build/rmm-agent
+
+BACKEND_HOST = 192.168.85.13
+AGENT_HOST = 192.168.85.33
+SSH_USER = root
+
+all: backend agent
+
+backend:
+	@echo "==> Building Backend (linux/amd64)..."
+	cd backend && GOOS=linux GOARCH=amd64 CGO_ENABLED=0 go build -o ../$(BACKEND_BIN) .
+	@echo "==> $(BACKEND_BIN) erstellt"
+
+agent:
+	@echo "==> Building Agent (freebsd/amd64)..."
+	cd agent && GOOS=freebsd GOARCH=amd64 CGO_ENABLED=0 go build -o ../$(AGENT_BIN) .
+	@echo "==> $(AGENT_BIN) erstellt"
+
+clean:
+	rm -rf build/
+
+certs:
+	@echo "==> Generiere self-signed TLS-Zertifikate..."
+	mkdir -p certs
+	openssl req -x509 -newkey ec -pkeyopt ec_paramgen_curve:P-256 \
+		-keyout certs/server.key -out certs/server.crt \
+		-days 3650 -nodes \
+		-subj "/CN=rmm-backend/O=RMM" \
+		-addext "subjectAltName=IP:192.168.85.13,IP:127.0.0.1,DNS:localhost"
+	@echo "==> Zertifikate in certs/ erstellt"
+
+deploy-backend: backend
+	@echo "==> Deploying Backend to $(BACKEND_HOST)..."
+	ssh $(SSH_USER)@$(BACKEND_HOST) "mkdir -p /opt/rmm/certs"
+	scp $(BACKEND_BIN) $(SSH_USER)@$(BACKEND_HOST):/opt/rmm/rmm-backend
+	scp backend/config.yaml $(SSH_USER)@$(BACKEND_HOST):/opt/rmm/config.yaml
+	@echo "==> Erstelle systemd Service..."
+	ssh $(SSH_USER)@$(BACKEND_HOST) 'cat > /etc/systemd/system/rmm-backend.service << EOF\n\
+[Unit]\n\
+Description=RMM Backend\n\
+After=network.target\n\
+\n\
+[Service]\n\
+Type=simple\n\
+WorkingDirectory=/opt/rmm\n\
+ExecStart=/opt/rmm/rmm-backend /opt/rmm/config.yaml\n\
+Restart=always\n\
+RestartSec=5\n\
+\n\
+[Install]\n\
+WantedBy=multi-user.target\n\
+EOF'
+	ssh $(SSH_USER)@$(BACKEND_HOST) "systemctl daemon-reload && systemctl enable rmm-backend && systemctl restart rmm-backend"
+	@echo "==> Backend deployed und gestartet"
+
+deploy-agent: agent
+	@echo "==> Deploying Agent to $(AGENT_HOST)..."
+	ssh $(SSH_USER)@$(AGENT_HOST) "mkdir -p /opt/rmm"
+	scp $(AGENT_BIN) $(SSH_USER)@$(AGENT_HOST):/opt/rmm/rmm-agent
+	scp agent/config.yaml $(SSH_USER)@$(AGENT_HOST):/opt/rmm/config.yaml
+	@echo "==> Erstelle rc.d Script..."
+	ssh $(SSH_USER)@$(AGENT_HOST) 'cat > /usr/local/etc/rc.d/rmm_agent << RCEOF\n\
+#!/bin/sh\n\
+#\n\
+# PROVIDE: rmm_agent\n\
+# REQUIRE: NETWORKING\n\
+# KEYWORD: shutdown\n\
+\n\
+. /etc/rc.subr\n\
+\n\
+name="rmm_agent"\n\
+rcvar="rmm_agent_enable"\n\
+pidfile="/var/run/$${name}.pid"\n\
+command="/opt/rmm/rmm-agent"\n\
+command_args="--config /opt/rmm/config.yaml --insecure &"\n\
+\n\
+load_rc_config $$name\n\
+run_rc_command "$$1"\n\
+RCEOF\n\
+chmod +x /usr/local/etc/rc.d/rmm_agent'
+	ssh $(SSH_USER)@$(AGENT_HOST) 'sysrc rmm_agent_enable="YES" && service rmm_agent restart'
+	@echo "==> Agent deployed und gestartet"