TIR

Description

TIR is a web application to dynamically manage compliance data for a system.

Tir is a Armenian god of wisdom and the namesake of the TIR (Test Ingest Respository). TIR will help manage a system's STIG/SRG/SCTM content from a myriad of test tool formats.

Features

• Group system compliance data
• Store STIG results files and their hsitory for a system .
• Store Quarterly DISA STIG libraries.
• Streamline Quarterly STIG Update Process
• Import automated test tool results
• Export compliance data

Dev Setup

Prerequisites:

• node v18+

Clone repo

git clone <cloneurl>
cd tir

Install dependencies:

npm install

.env for TIR server

SECRET_KEY= # Required: Secret key used password hashing
INIT_PASSWORD= # Required: Initial Password for initial TIR admin Account
PORT= # Optional: Dev Web Server Port Defaults to 3000

.env for SQLite config

SQLITE=true

.env for Postgres config

DATABASE_HOST= # Required: Postgres Database IP/FQDN
DATABASE_PORT= # Optional: Defaults to 5432
DATABASE_USER= # Required: Postgres User
DATABASE_PASSWORD= # Required: Postgres User Password
DATABASE_NAME= # Required: Database Name for TIR

Note: If passwords (INIT_PASSWORD, DATABASE_PASSWORD) or keys contain special characters like $ or #, enclose the value in single quotes (e.g., INIT_PASSWORD='my$ecurePassword'). This prevents Docker Compose and most environment loaders from misinterpreting $ as a variable substitution. The Nuxt dev server still evaluates $ within quotes, so avoid $ and ${ followed by a letter or _ in these values.

Initialize Database

npm run dbinit

Start local server

Start development server

npm run dev

Start production build server (HTTP)

npm run build;
node .output/server/index.mjs

Nuxt Modules included:

• eslint
• pinia
• tailwindcss
• devtools