Red Alert Monitoring Stack: A Self-Hosted Microservices System For Rocket Alert Awareness

A Docker-based microservices stack for monitoring Israel's Home Front Command alerts with real-time map visualization, AI situation reports, push notifications, and home automation integration.

Daniel Rosehill AI (18 Nisan 5786) 2 min read

Red Alert Monitoring Stack: A Self-Hosted Microservices System For Rocket Alert Awareness

I built a self-hosted microservices stack for monitoring Israel's Home Front Command (Pikud HaOref) rocket alerts. It provides real-time map visualization, AI-generated intelligence reports, push notifications, and home automation integration — all running as Docker containers on your local network.

Architecture

Each component is a standalone service communicating over HTTP and MQTT, sharing a single data source:

  • Oref Alert Proxy — Lightweight FastAPI relay that polls Pikud HaOref every 3 seconds. Single source of truth for the entire stack.

  • Geodash — Real-time multi-map dashboard with 1,450 polygon overlays, InfluxDB time-series storage, historical playback, and a TV-optimized view.

  • OSINT Notifier — Unified intelligence and notification module. Monitors Telegram channels (EN/HE) for missile launches, triggers on Oref volumetric thresholds, generates Groq-powered intel reports and dual-model OpenRouter sitreps (Gemini + Grok), all delivered via Pushover with RSS news context.

  • Actuator — Home Assistant bridge: sets input_select state via REST API. HA automations handle lights, sirens, and TTS announcements.

  • RSS Cache — Polls news feeds on schedule, serves cached articles for dashboard context.

  • MCP Server — Streamable HTTP MCP server exposing alert tools for AI agents: current alerts, area alerts, alert history, news, stack health checks, and sample payload storage.

  • InfluxDB + Mosquitto — Time-series database for alert history and MQTT broker for device communication.

GitHub Repository danielrosehill/Oref-Alert-Proxy View on GitHub GitHub Repository danielrosehill/Red-Alert-Geodash View on GitHub GitHub Repository danielrosehill/Red-Alert-OSINT-Notifier View on GitHub

Actuation pathways

Multiple independent pathways for physical alerting:

  • Home Assistant via Actuator — REST API state changes triggering HA automations

  • Home Assistant via oref_alert — use the HACS integration for HA alerting

  • Snapcast TTS — direct PCM audio to whole-house speaker groups

  • Direct MQTT — Zigbee2MQTT lights, ESP32 controllers, Node-RED

  • Custom consumers — poll the proxy's HTTP API from anything

Alert flow example

When your local area is targeted by a ballistic missile:

  1. OSINT Notifier detects the launch via Telegram channel monitors

  2. High-priority Pushover alert fires (bypasses quiet hours)

  3. Groq intel report follows within ~5 seconds

  4. Dual-model sitrep (Gemini + Grok) follows within ~15–30 seconds with live news context

  5. Actuator sets HA state to active — lights flash red, sirens sound, TTS announces "Seek shelter"

  6. Geodash shows your area flashing red with siren audio

  7. On all-clear: lights go green, sirens silence, TTS announces "All clear"

Prerequisites

  • Docker and Docker Compose v2+

  • Israeli IP address (the Oref API is geo-restricted)

  • Optional: Home Assistant, Pushover account, OpenRouter/Groq API keys

All services build from source in the monorepo — no external Docker Hub images required.

View the project on GitHub

GitHub Repository danielrosehill/Red-Alert-Monitoring-Stack-Public View on GitHub
Daniel Rosehill

Daniel Rosehill

Agentic AI systems architect in Jerusalem. I design and build multi-agent systems, MCP tooling and speech-to-text pipelines, and write up what I learn along the way.

More about me at danielrosehill.com