From a6ef320c572a17fa1bf0f69ac969333913ae946f Mon Sep 17 00:00:00 2001
From: Debian <linux@myhorse.netcell-it.de>
Date: Thu, 28 May 2026 14:57:35 +0200
Subject: [PATCH] =?UTF-8?q?fix(audit):=20fehlende=20Audit-Logs=20f=C3=BCr?=
 =?UTF-8?q?=20DNS-Zone/Record-Delete=20+=20NTP-Pool-Delete?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

DeleteZone, DeleteRecord und NTPPool.DeletePool hatten keine Audit-
Einträge. Alle anderen Mutations derselben Handler loggen korrekt —
nur Delete war vergessen worden. Jetzt konsistent:
  dns.zone.delete, dns.record.delete, ntp.pool.delete

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 VERSION                         | 2 +-
 cmd/edgeguard-api/main.go       | 2 +-
 cmd/edgeguard-ctl/main.go       | 2 +-
 cmd/edgeguard-scheduler/main.go | 2 +-
 internal/handlers/dns.go        | 4 ++++
 internal/handlers/ntp.go        | 3 +++
 6 files changed, 11 insertions(+), 4 deletions(-)

diff --git a/VERSION b/VERSION
index c3c6aef..48cd0cc 100644
--- a/VERSION
+++ b/VERSION
@@ -1 +1 @@
-1.1.127
+1.1.128
diff --git a/cmd/edgeguard-api/main.go b/cmd/edgeguard-api/main.go
index 4f3c19b..a9ae67e 100644
--- a/cmd/edgeguard-api/main.go
+++ b/cmd/edgeguard-api/main.go
@@ -60,7 +60,7 @@ import (
 	usersvc "git.netcell-it.de/projekte/edgeguard-native/internal/services/users"
 )
 
-var version = "1.1.127"
+var version = "1.1.128"
 
 func main() {
 	addr := os.Getenv("EDGEGUARD_API_ADDR")
diff --git a/cmd/edgeguard-ctl/main.go b/cmd/edgeguard-ctl/main.go
index 8bda143..2db6c30 100644
--- a/cmd/edgeguard-ctl/main.go
+++ b/cmd/edgeguard-ctl/main.go
@@ -11,7 +11,7 @@ import (
 	"git.netcell-it.de/projekte/edgeguard-native/internal/services/setup"
 )
 
-var version = "1.1.127"
+var version = "1.1.128"
 
 const usage = `edgeguard-ctl — EdgeGuard CLI
 
diff --git a/cmd/edgeguard-scheduler/main.go b/cmd/edgeguard-scheduler/main.go
index 2615648..4e830d9 100644
--- a/cmd/edgeguard-scheduler/main.go
+++ b/cmd/edgeguard-scheduler/main.go
@@ -41,7 +41,7 @@ import (
 	"git.netcell-it.de/projekte/edgeguard-native/internal/services/tlscerts"
 )
 
-var version = "1.1.127"
+var version = "1.1.128"
 
 const (
 	// renewTickInterval — how often we re-evaluate expiring certs.
diff --git a/internal/handlers/dns.go b/internal/handlers/dns.go
index e787f77..c2e2e62 100644
--- a/internal/handlers/dns.go
+++ b/internal/handlers/dns.go
@@ -150,6 +150,8 @@ func (h *DNSHandler) DeleteZone(c *gin.Context) {
 		response.Internal(c, err)
 		return
 	}
+	_ = h.Audit.Log(c.Request.Context(), actorOf(c), "dns.zone.delete",
+		strconv.FormatInt(id, 10), gin.H{"id": id}, h.NodeID)
 	response.NoContent(c)
 	h.reload(c.Request.Context(), "zone.delete")
 }
@@ -261,6 +263,8 @@ func (h *DNSHandler) DeleteRecord(c *gin.Context) {
 		response.Internal(c, err)
 		return
 	}
+	_ = h.Audit.Log(c.Request.Context(), actorOf(c), "dns.record.delete",
+		strconv.FormatInt(id, 10), gin.H{"id": id}, h.NodeID)
 	response.NoContent(c)
 	h.reload(c.Request.Context(), "record.delete")
 }
diff --git a/internal/handlers/ntp.go b/internal/handlers/ntp.go
index 8641c98..1bb3eb1 100644
--- a/internal/handlers/ntp.go
+++ b/internal/handlers/ntp.go
@@ -6,6 +6,7 @@ import (
 	"fmt"
 	"log/slog"
 	"os/exec"
+	"strconv"
 	"strings"
 
 	"github.com/gin-gonic/gin"
@@ -232,6 +233,8 @@ func (h *NTPHandler) DeletePool(c *gin.Context) {
 		response.Internal(c, err)
 		return
 	}
+	_ = h.Audit.Log(c.Request.Context(), actorOf(c), "ntp.pool.delete",
+		strconv.FormatInt(id, 10), gin.H{"id": id}, h.NodeID)
 	response.NoContent(c)
 	h.reload(c.Request.Context(), "pool.delete")
 }