Sovereign Git & DevOps Platform for OMC
A high-performance, air-gapped, on-premise Git collaboration platform designed to safeguard OMC's core intellectual property, vendor code deliverables, and digitalization initiatives.
Why a Sovereign Git Platform is Essential for OMC
Addressing compliance, external vendor software risk, operational continuity, and intellectual property defense.
Engineered for Sovereign Datacenter Infrastructure
Ultra-lightweight, memory-efficient, single-binary architecture with zero bloat and uncompromising cryptographic security.
- Sub-second container startup
- Minimal attack surface
- Zero data leakage to public web
- 100% offline license validation
- Automated scheduled backups
- Zero corruption on sudden reboot
Enterprise Git Collaboration & Code Review
A modern, responsive React interface delivering familiar developer workflows without a steep learning curve.
git clone, git push, git pull, git rebase) over HTTPS and SSH.main branches. Prevent accidental direct pushes, enforce mandatory pull request reviews, and block force pushes.#L45), commit history logs, and line-by-line Git Blame author attribution.Because ProGit implements standard Git wire protocols and provides GitHub-style clone snippets, OMC developers, data scientists, and external software vendors require zero workflow retraining. They continue using their preferred IDEs (VS Code, IntelliJ, PyCharm, Eclipse).
Integrated Issue Tracking & Agile Kanban Boards
Manage OMC's software initiatives, bug reports, and vendor sprint deliverables in one unified interface without third-party SaaS tools.
- Sprint & backlog planning
- Visual bottleneck detection
- Custom priority & status labels
- Milestone completion tracking
Fixes #104).- Full audit traceability
- Automated ticket resolution
Version-Controlled Technical Wikis & SOPs
Centralize standard operating procedures, architectural documentation, and API guides in versioned repositories.
- Complete line-by-line revision history
- Side-by-side documentation diffs
- Centralized engineering knowledge base
- Full contributor accountability
Releases, Binary Artifacts & Vendor Software Escrow
Ensure cryptographic traceability of deployed software binaries and enforce code handover from external vendors.
v2.4.0-omc-prod). Ensure zero drift between source code and production binaries.Enterprise Identity, Access Control & Audit Compliance
Role-based permissions, centralized directory integration, and tamper-evident audit logging for CERT-In alignment.
Enforce strict separation of duties across departments, mines, and administrative zones:
- Organization & Team Hierarchies: Group repos by department (Mining IT, Finance & ERP, GIS & Survey, Admin).
- Permission Levels: Owner, Admin, Write, Read, and Guest visibility controls.
- Deploy Keys & Service Accounts: Read-only SSH keys for CI/CD runners and deployment servers.
Ready for enterprise directory authentication and regulatory compliance audits:
- Active Directory & LDAP: Authenticate users against OMC's corporate Microsoft Active Directory / LDAP servers.
- Immutable Security Logs: Comprehensive records of user logins, SSH access, branch pushes, and permission changes.
- Personal Access Tokens (PATs): Fine-grained API and CLI tokens with individual expirations and revokability.
High-Impact Use Cases Tailored for OMC
Purpose-built to streamline internal IT systems, mining automation, and vendor management across OMC.
Turnkey Deployment Inside OMC Infrastructure
Flexible, containerized or bare-metal deployment matching OMC's enterprise IT standards and security policies.
NGINX or HAProxy terminates internal HTTPS with OMC wildcard SSL certificates. Dedicated SSH routing on Port 2222.
Pure-Go container (Podman / Docker) or native binary running under systemd. Houses Git HTTP/SSH daemons and React 19 UI.
Isolated storage volumes for SQLite WAL database, Git bare repositories, wikis, and cryptographic release attachments.
Automated cron backups producing consistent SQLite snapshots and git repository mirrors to OMC's internal NAS / DR storage.
podman run -d --name omc-progit --restart=unless-stopped \ -p 3443:3443 -p 3000:3000 -p 2222:2222 \ -v /omc/data/db:/data/db:Z \ -v /omc/data/repositories:/data/repositories:Z \ -v /omc/data/config:/data/config:Z \ ghcr.io/sanjeevsenapati/progit:latest
OMC Enterprise Security & Compliance Assurance
How ProGit meets each requirement mandated by state public sector undertakings and IT security audit bodies.
| Security / Compliance Mandate | ProGit On-Premise Platform | Foreign Cloud SaaS (GitHub / GitLab) |
|---|---|---|
| Data Sovereignty & Residency | 100% Inside OMC Datacenter (India) | Stored on foreign US/EU multi-tenant cloud servers |
| Air-Gapped Network Support | Native — Zero outbound connectivity required | Incompatible; requires continuous internet connectivity |
| Telemetry & Data Leaks | Zero telemetry — No tracking beacons | Extensive product analytics, telemetry, and tracking |
| Transport Cryptography | TLS 1.3 HTTPS & OpenSSH ED25519 Keys | Standard cloud TLS |
| User Authentication | OMC Active Directory / LDAP Integration | Cloud-dependent SSO or third-party SAML |
| Disaster Recovery RPO / RTO | Sub-minute RPO with hot SQLite WAL mirrors | Dependent on vendor SLA and internet link health |
| Audit Readiness | Tamper-evident audit logs for CERT-In inspection | Vendor blackbox log exports |
Next Steps for OMC IT & Engineering Leadership
Fast-track an internal technical evaluation sandbox inside OMC's private network.
Empower OMC with Sovereign Digital Infrastructure
Join modern public sector undertakings protecting their source code, operational algorithms, and vendor deliverables with sovereign on-premise technology.