projekte/edgeguard-native
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: umfangreiches UI+API-Polish (v1.1.36–1.1.42)

Browse Source 
Backend:
- Audit-Log: Search-Endpoint mit ILIKE-Filter (actor/action/subject/date)
- NTP: /ntp/status via chronyc tracking (Stratum, Offset, Quelle)
- System: /service-restart mit Allowlist (haproxy/squid/unbound/chrony/scheduler)
- Domain-Response-Headers + Rate-Limit (Migration 0024)
- Join-Tokens (Migration 0025), Cluster-mTLS, Aggregator-Fan-Out
- apt-Service für Update-Banner (apt-get update + Versionsprüfung)
- Backup-Retry mit exponential backoff (retry_apt 3×)
- publish.sh fail-fast + cleanup-old.sh (max 10 Versionen)

Frontend:
- Audit-Log-Page (/audit) mit Filter + Pagination
- ErrorBoundary an React-Root + Vite build-target festgenagelt (iOS 15+)
- Storage-Schema-Stamp: auto-wipe bei Versions-Mismatch (blank-page-Fix)
- EmptyState-Komponente überall ausgerollt
- SSL: Aggregate-Karte (total/expiring/expired/errors)
- Backups: Aggregate-Karte (letzter Backup/Größe/Fehlschläge 24h) + Backup-Now
- NTP: Sync-Status-Karte (chronyc tracking live)
- Domains: Backend-UP/DOWN-Chip aus HAProxy-Stats
- Backends: HAProxy-Status-Spalte (UP/DEGRADED/DOWN)
- Settings: Service-Neustart-Karte (haproxy/squid/unbound/chrony/scheduler)
- Settings: Upgrade-Status-Card, Wartungsmodus, Auto-Update, Retention
- Dashboard: Recent-Alerts, Cluster-Health, License-Chip, Onboarding-Hint
- System-Regeln im Firewall als eigener Tab

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
Debian
2026-05-19 16:18:41 +02:00
parent 3178e25e78
commit 35b7308ce2
82 changed files with 8408 additions and 392 deletions
Download Patch File Download Diff File Expand all files Collapse all files

61
internal/services/domains/domains.go
View File

@@ -20,7 +20,10 @@ type Repo struct {
func New(pool *pgxpool.Pool) *Repo { return &Repo{Pool: pool} }
const baseSelect = `
SELECT id, name, active, primary_backend_id, http_to_https, hsts_enabled,
SELECT id, name, active, primary_backend_id, http_to_https,
hsts_enabled, hsts_max_age, hsts_subdomains, hsts_preload,
maintenance_mode, maintenance_message, www_redirect,
rate_limit_rps, max_body_kb,
notes, created_at, updated_at
FROM domains
`
@@ -55,16 +58,31 @@ func (r *Repo) Get(ctx context.Context, id int64) (*models.Domain, error) {
}
func (r *Repo) Create(ctx context.Context, d models.Domain) (*models.Domain, error) {
if d.HSTSMaxAge == 0 {
d.HSTSMaxAge = 31536000
}
row := r.Pool.QueryRow(ctx, `
INSERT INTO domains (name, active, primary_backend_id, http_to_https, hsts_enabled, notes)
VALUES ($1, $2, $3, $4, $5, $6)
RETURNING id, name, active, primary_backend_id, http_to_https, hsts_enabled,
INSERT INTO domains (name, active, primary_backend_id, http_to_https,
hsts_enabled, hsts_max_age, hsts_subdomains, hsts_preload,
maintenance_mode, maintenance_message, www_redirect,
rate_limit_rps, max_body_kb, notes)
VALUES ($1, $2, $3, $4, $5, $6, $7, $8, $9, $10, $11, $12, $13, $14)
RETURNING id, name, active, primary_backend_id, http_to_https,
hsts_enabled, hsts_max_age, hsts_subdomains, hsts_preload,
maintenance_mode, maintenance_message, www_redirect,
rate_limit_rps, max_body_kb,
notes, created_at, updated_at`,
d.Name, d.Active, d.PrimaryBackendID, d.HTTPToHTTPS, d.HSTSEnabled, d.Notes)
d.Name, d.Active, d.PrimaryBackendID, d.HTTPToHTTPS,
d.HSTSEnabled, d.HSTSMaxAge, d.HSTSSubdomains, d.HSTSPreload,
d.MaintenanceMode, d.MaintenanceMessage, d.WWWRedirect,
d.RateLimitRPS, d.MaxBodyKB, d.Notes)
return scanDomain(row)
}
func (r *Repo) Update(ctx context.Context, id int64, d models.Domain) (*models.Domain, error) {
if d.HSTSMaxAge == 0 {
d.HSTSMaxAge = 31536000
}
row := r.Pool.QueryRow(ctx, `
UPDATE domains SET
name = $1,
@@ -72,12 +90,26 @@ UPDATE domains SET
primary_backend_id = $3,
http_to_https = $4,
hsts_enabled = $5,
notes = $6,
hsts_max_age = $6,
hsts_subdomains = $7,
hsts_preload = $8,
maintenance_mode = $9,
maintenance_message = $10,
www_redirect = $11,
rate_limit_rps = $12,
max_body_kb = $13,
notes = $14,
updated_at = NOW()
WHERE id = $7
RETURNING id, name, active, primary_backend_id, http_to_https, hsts_enabled,
WHERE id = $15
RETURNING id, name, active, primary_backend_id, http_to_https,
hsts_enabled, hsts_max_age, hsts_subdomains, hsts_preload,
maintenance_mode, maintenance_message, www_redirect,
rate_limit_rps, max_body_kb,
notes, created_at, updated_at`,
d.Name, d.Active, d.PrimaryBackendID, d.HTTPToHTTPS, d.HSTSEnabled, d.Notes, id)
d.Name, d.Active, d.PrimaryBackendID, d.HTTPToHTTPS,
d.HSTSEnabled, d.HSTSMaxAge, d.HSTSSubdomains, d.HSTSPreload,
d.MaintenanceMode, d.MaintenanceMessage, d.WWWRedirect,
d.RateLimitRPS, d.MaxBodyKB, d.Notes, id)
out, err := scanDomain(row)
if err != nil {
if errors.Is(err, pgx.ErrNoRows) {
@@ -99,15 +131,14 @@ func (r *Repo) Delete(ctx context.Context, id int64) error {
return nil
}
// scanDomain accepts both pgx.Row (Get/Create/Update) and pgx.Rows
// (List, via the Scanner shape). pgx exposes both as a single
// Scan(...any) error method.
func scanDomain(row interface{ Scan(...any) error }) (*models.Domain, error) {
var d models.Domain
if err := row.Scan(
&d.ID, &d.Name, &d.Active, &d.PrimaryBackendID,
&d.HTTPToHTTPS, &d.HSTSEnabled, &d.Notes,
&d.CreatedAt, &d.UpdatedAt,
&d.ID, &d.Name, &d.Active, &d.PrimaryBackendID, &d.HTTPToHTTPS,
&d.HSTSEnabled, &d.HSTSMaxAge, &d.HSTSSubdomains, &d.HSTSPreload,
&d.MaintenanceMode, &d.MaintenanceMessage, &d.WWWRedirect,
&d.RateLimitRPS, &d.MaxBodyKB,
&d.Notes, &d.CreatedAt, &d.UpdatedAt,
); err != nil {
return nil, err
}