5f92851a96
Files-basierter RADIUS-Server (Clients + Users), managed analog DHCP/WireGuard.
- Migration 0042: radius_settings (singleton, node-lokal), radius_clients (secret_enc), radius_users (password_enc) — Secrets via secrets.Box verschlüsselt.
- internal/freeradius: Multi-File-Renderer (clients.conf + authorize) via Box.Open, Secret-Escaping (" \), Service default-off/an enabled gekoppelt. internal/services/radius + internal/handlers/radius.go: Settings + Client/User-CRUD, write-only Secret-Semantik, Validierung (IP/CIDR, name-charset), GET liefert secret_configured statt Secret.
- Firewall: udp 1812/1813 Auto-Rule bei enabled. Cluster: clients/users repliziert (hashSpec), radius_settings node-lokal.
- main.go + render.go + WithAllReloaders. Packaging: freeradius Dependency, setgid-Dir /etc/edgeguard/freeradius (Gruppe freeradius), Symlinks clients.conf+authorize, disable-on-install, sudoers.
- UI: RADIUS-Seite (Einstellungen + Clients + Benutzer) unter Sicherheit, Route/Nav/i18n de/en.
- Tests (guarded): Renderer-Inhalt + Secret-Escaping/Roundtrip + Masking. Scope v1: PAP/CHAP files-based (kein EAP/802.1X).
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
73 lines
2.3 KiB
TypeScript
73 lines
2.3 KiB
TypeScript
import { useState } from 'react'
|
|
import { Outlet, useLocation } from 'react-router-dom'
|
|
import { useTranslation } from 'react-i18next'
|
|
|
|
import Sidebar from './Sidebar'
|
|
import Header from './Header'
|
|
import UpdateBanner from '../UpdateBanner'
|
|
import LicenseBanner from '../LicenseBanner'
|
|
import MaintenanceBanner from '../MaintenanceBanner'
|
|
|
|
// PAGE_TITLES maps the pathname to an i18n nav key. Header reads
|
|
// this to render "where you are". Empty fallback = app.title.
|
|
const PAGE_TITLES: Record<string, string> = {
|
|
'/dashboard': 'nav.dashboard',
|
|
'/domains': 'nav.domains',
|
|
'/backends': 'nav.backends',
|
|
'/routing-rules': 'nav.routing',
|
|
'/networks': 'nav.networks',
|
|
'/ip-addresses': 'nav.ipAddresses',
|
|
'/ssl': 'nav.ssl',
|
|
'/dns': 'nav.dns',
|
|
'/dhcp': 'nav.dhcp',
|
|
'/ntp': 'nav.ntp',
|
|
'/vpn/wireguard': 'nav.wireguard',
|
|
'/forward-proxy': 'nav.forwardProxy',
|
|
'/radius': 'nav.radius',
|
|
'/firewall/live': 'nav.firewallLive',
|
|
'/firewall': 'nav.firewall',
|
|
'/cluster': 'nav.cluster',
|
|
'/logs': 'nav.logs',
|
|
'/audit': 'nav.audit',
|
|
'/backups': 'nav.backups',
|
|
'/diagnostics': 'nav.diagnostics',
|
|
'/alerts': 'nav.alerts',
|
|
'/license': 'nav.license',
|
|
'/users': 'nav.users',
|
|
'/settings': 'nav.settings',
|
|
}
|
|
|
|
export default function AppLayout() {
|
|
const [sidebarOpen, setSidebarOpen] = useState(false)
|
|
const location = useLocation()
|
|
const { t } = useTranslation()
|
|
|
|
const titleKey = Object.entries(PAGE_TITLES)
|
|
.find(([p]) => location.pathname === p || location.pathname.startsWith(p + '/'))?.[1]
|
|
const title = titleKey ? t(titleKey) : t('app.title')
|
|
|
|
return (
|
|
<div className="app-layout">
|
|
{sidebarOpen && (
|
|
<div
|
|
className="sidebar-overlay"
|
|
onClick={() => setSidebarOpen(false)}
|
|
aria-hidden="true"
|
|
/>
|
|
)}
|
|
|
|
<Sidebar isOpen={sidebarOpen} onClose={() => setSidebarOpen(false)} />
|
|
|
|
<main className="main-content">
|
|
<Header pageTitle={title} onMenuToggle={() => setSidebarOpen(true)} />
|
|
<MaintenanceBanner />
|
|
<LicenseBanner />
|
|
<UpdateBanner />
|
|
<div className="content-area">
|
|
<Outlet />
|
|
</div>
|
|
</main>
|
|
</div>
|
|
)
|
|
}
|