feat: move acme certificate automation into a plugin (C7)

src/ui/api/acme-ssl-api.ts

@@ -1,59 +0,0 @@
-import { authApi, handleApiError } from "@/main-axios";
-
-export type AcmeChallengeType = "http-webroot" | "dns-cloudflare" | "manual";
-
-export type AcmeSettings = {
-  enabled: boolean;
-  domain: string;
-  email: string;
-  challengeType: AcmeChallengeType;
-  cloudflareToken: string;
-  lastIssuedAt: string | null;
-  certStatus: "none" | "valid" | "expiring" | "expired";
-  certExpiresAt: string | null;
-};
-
-export async function getAcmeSslSettings(): Promise<AcmeSettings> {
-  try {
-    const response = await authApi.get("/users/acme-ssl-settings");
-    return response.data;
-  } catch (error) {
-    handleApiError(error, "fetch ACME SSL settings");
-  }
-}
-
-export async function updateAcmeSslSettings(
-  settings: Partial<
-    Omit<AcmeSettings, "certStatus" | "certExpiresAt" | "lastIssuedAt">
-  >,
-): Promise<AcmeSettings> {
-  try {
-    const response = await authApi.patch("/users/acme-ssl-settings", settings);
-    return response.data;
-  } catch (error) {
-    handleApiError(error, "update ACME SSL settings");
-  }
-}
-
-export async function requestAcmeCertificate(): Promise<
-  AcmeSettings & { success: boolean; reloadMessage?: string }
-> {
-  try {
-    const response = await authApi.post("/users/acme-ssl-request", {});
-    return response.data;
-  } catch (error) {
-    handleApiError(error, "request ACME certificate");
-  }
-}
-
-export async function uploadManualSslCertificate(payload: {
-  certificate: string;
-  privateKey: string;
-}): Promise<AcmeSettings & { success: boolean; reloadMessage?: string }> {
-  try {
-    const response = await authApi.post("/users/manual-ssl-upload", payload);
-    return response.data;
-  } catch (error) {
-    handleApiError(error, "upload manual SSL certificate");
-  }
-}

src/ui/api/tls-api.ts

@@ -0,0 +1,38 @@
+import { authApi, handleApiError } from "@/main-axios";
+
+export type TlsCertificateInfo = {
+  subject: string;
+  issuer: string;
+  names: string[];
+  notBefore: string;
+  notAfter: string;
+  selfSigned: boolean;
+  fingerprint: string;
+};
+
+export type TlsStatus = {
+  enabled: boolean;
+  certificate: TlsCertificateInfo | null;
+  renewal: { pluginId: string; pluginName: string } | null;
+};
+
+export async function getTlsStatus(): Promise<TlsStatus> {
+  try {
+    const response = await authApi.get("/users/tls-certificate");
+    return response.data;
+  } catch (error) {
+    handleApiError(error, "fetch TLS certificate status");
+  }
+}
+
+export async function uploadTlsCertificate(payload: {
+  certificate: string;
+  privateKey: string;
+}): Promise<TlsStatus & { success: boolean; reloadMessage?: string }> {
+  try {
+    const response = await authApi.post("/users/tls-certificate", payload);
+    return response.data;
+  } catch (error) {
+    handleApiError(error, "upload TLS certificate");
+  }
+}