mirror of
https://github.com/Termix-SSH/Termix.git
synced 2026-08-29 10:21:34 +00:00
release-2.5.1 (#1067)
* chore(deps): bump node from 24-slim to 26-slim in /docker in the docker-major-updates group (#1021) * chore: fix release workflow to merge docs branch * fix: svg donation generator push fail * fix: svg donation generator push fail * Update termix.rb * fix: svg donation generator push fail * chore: move donation badge to badges branch to avoid ruleset conflicts * chore: remove unneeded token from donation badge workflow * chore: debug donation badge commit step * fix: escape < character in donation SVG * fix: point donation badge to badges branch * chore: remove unused donation badge svg from main * Add Rack Genius logo to README Added Rack Genius logo to the README. * chore: improve donation goal svg generator to include stablecoins * chore: donation goal generator syntax error * chore: donation goal generator incorrect docs url usage * chore(deps): bump node in /docker in the docker-major-updates group Bumps the docker-major-updates group in /docker with 1 update: node. Updates `node` from 24-slim to 26-slim --- updated-dependencies: - dependency-name: node dependency-version: 26-slim dependency-type: direct:production dependency-group: docker-major-updates ... Signed-off-by: dependabot[bot] <support@github.com> --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: LukeGus <bugattiguy527@gmail.com> Co-authored-by: Luke Gustafson <88517757+LukeGus@users.noreply.github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-dev): bump the dev-patch-updates group with 24 updates (#1023) * chore: fix release workflow to merge docs branch * fix: svg donation generator push fail * fix: svg donation generator push fail * Update termix.rb * fix: svg donation generator push fail * chore: move donation badge to badges branch to avoid ruleset conflicts * chore: remove unneeded token from donation badge workflow * chore: debug donation badge commit step * fix: escape < character in donation SVG * fix: point donation badge to badges branch * chore: remove unused donation badge svg from main * Add Rack Genius logo to README Added Rack Genius logo to the README. * chore: improve donation goal svg generator to include stablecoins * chore: donation goal generator syntax error * chore: donation goal generator incorrect docs url usage * chore(deps-dev): bump the dev-patch-updates group with 24 updates Bumps the dev-patch-updates group with 24 updates: | Package | From | To | | --- | --- | --- | | [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.5.1` | `2.5.2` | | [@codemirror/commands](https://github.com/codemirror/commands) | `6.10.3` | `6.10.4` | | [@codemirror/view](https://github.com/codemirror/view) | `6.43.1` | `6.43.5` | | [@radix-ui/react-accordion](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/accordion) | `1.2.14` | `1.2.15` | | [@radix-ui/react-alert-dialog](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/alert-dialog) | `1.1.17` | `1.1.18` | | [@radix-ui/react-checkbox](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/checkbox) | `1.3.5` | `1.3.6` | | [@radix-ui/react-dialog](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/dialog) | `1.1.17` | `1.1.18` | | [@radix-ui/react-dropdown-menu](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/dropdown-menu) | `2.1.18` | `2.1.19` | | [@radix-ui/react-label](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/label) | `2.1.10` | `2.1.11` | | [@radix-ui/react-popover](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/popover) | `1.1.17` | `1.1.18` | | [@radix-ui/react-progress](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/progress) | `1.1.10` | `1.1.11` | | [@radix-ui/react-scroll-area](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/scroll-area) | `1.2.12` | `1.2.13` | | [@radix-ui/react-select](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/select) | `2.3.1` | `2.3.2` | | [@radix-ui/react-separator](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/separator) | `1.1.10` | `1.1.11` | | [@radix-ui/react-slider](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/slider) | `1.4.1` | `1.4.2` | | [@radix-ui/react-switch](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/switch) | `1.3.1` | `1.3.2` | | [@radix-ui/react-tabs](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/tabs) | `1.1.15` | `1.1.16` | | [@radix-ui/react-tooltip](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/tooltip) | `1.2.10` | `1.2.11` | | [@tailwindcss/vite](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-vite) | `4.3.1` | `4.3.2` | | [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `6.0.2` | `6.0.3` | | [i18next](https://github.com/i18next/i18next) | `26.3.1` | `26.3.4` | | [radix-ui](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/radix-ui) | `1.6.0` | `1.6.1` | | [sharp](https://github.com/lovell/sharp) | `0.35.2` | `0.35.3` | | [tailwindcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss) | `4.3.1` | `4.3.2` | Updates `@biomejs/biome` from 2.5.1 to 2.5.2 - [Release notes](https://github.com/biomejs/biome/releases) - [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md) - [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.5.2/packages/@biomejs/biome) Updates `@codemirror/commands` from 6.10.3 to 6.10.4 - [Changelog](https://github.com/codemirror/commands/blob/main/CHANGELOG.md) - [Commits](https://github.com/codemirror/commands/commits) Updates `@codemirror/view` from 6.43.1 to 6.43.5 - [Changelog](https://github.com/codemirror/view/blob/main/CHANGELOG.md) - [Commits](https://github.com/codemirror/view/commits) Updates `@radix-ui/react-accordion` from 1.2.14 to 1.2.15 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/accordion/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/accordion) Updates `@radix-ui/react-alert-dialog` from 1.1.17 to 1.1.18 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/alert-dialog/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/alert-dialog) Updates `@radix-ui/react-checkbox` from 1.3.5 to 1.3.6 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/checkbox/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/checkbox) Updates `@radix-ui/react-dialog` from 1.1.17 to 1.1.18 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/dialog/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/dialog) Updates `@radix-ui/react-dropdown-menu` from 2.1.18 to 2.1.19 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/dropdown-menu/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/dropdown-menu) Updates `@radix-ui/react-label` from 2.1.10 to 2.1.11 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/label/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/label) Updates `@radix-ui/react-popover` from 1.1.17 to 1.1.18 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/popover/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/popover) Updates `@radix-ui/react-progress` from 1.1.10 to 1.1.11 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/progress/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/progress) Updates `@radix-ui/react-scroll-area` from 1.2.12 to 1.2.13 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/scroll-area/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/scroll-area) Updates `@radix-ui/react-select` from 2.3.1 to 2.3.2 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/select/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/select) Updates `@radix-ui/react-separator` from 1.1.10 to 1.1.11 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/separator/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/separator) Updates `@radix-ui/react-slider` from 1.4.1 to 1.4.2 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/slider/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/slider) Updates `@radix-ui/react-switch` from 1.3.1 to 1.3.2 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/switch/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/switch) Updates `@radix-ui/react-tabs` from 1.1.15 to 1.1.16 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/tabs/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/tabs) Updates `@radix-ui/react-tooltip` from 1.2.10 to 1.2.11 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/tooltip/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/tooltip) Updates `@tailwindcss/vite` from 4.3.1 to 4.3.2 - [Release notes](https://github.com/tailwindlabs/tailwindcss/releases) - [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md) - [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.2/packages/@tailwindcss-vite) Updates `@vitejs/plugin-react` from 6.0.2 to 6.0.3 - [Release notes](https://github.com/vitejs/vite-plugin-react/releases) - [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.0.3/packages/plugin-react) Updates `i18next` from 26.3.1 to 26.3.4 - [Release notes](https://github.com/i18next/i18next/releases) - [Changelog](https://github.com/i18next/i18next/blob/master/CHANGELOG.md) - [Commits](https://github.com/i18next/i18next/compare/v26.3.1...v26.3.4) Updates `radix-ui` from 1.6.0 to 1.6.1 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/radix-ui/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/radix-ui) Updates `sharp` from 0.35.2 to 0.35.3 - [Release notes](https://github.com/lovell/sharp/releases) - [Commits](https://github.com/lovell/sharp/compare/v0.35.2...v0.35.3) Updates `tailwindcss` from 4.3.1 to 4.3.2 - [Release notes](https://github.com/tailwindlabs/tailwindcss/releases) - [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md) - [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.2/packages/tailwindcss) --- updated-dependencies: - dependency-name: "@biomejs/biome" dependency-version: 2.5.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: "@codemirror/commands" dependency-version: 6.10.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: "@codemirror/view" dependency-version: 6.43.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: "@radix-ui/react-accordion" dependency-version: 1.2.15 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: "@radix-ui/react-alert-dialog" dependency-version: 1.1.18 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: "@radix-ui/react-checkbox" dependency-version: 1.3.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: "@radix-ui/react-dialog" dependency-version: 1.1.18 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: "@radix-ui/react-dropdown-menu" dependency-version: 2.1.19 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: "@radix-ui/react-label" dependency-version: 2.1.11 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: "@radix-ui/react-popover" dependency-version: 1.1.18 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: "@radix-ui/react-progress" dependency-version: 1.1.11 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: "@radix-ui/react-scroll-area" dependency-version: 1.2.13 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: "@radix-ui/react-select" dependency-version: 2.3.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: "@radix-ui/react-separator" dependency-version: 1.1.11 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: "@radix-ui/react-slider" dependency-version: 1.4.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: "@radix-ui/react-switch" dependency-version: 1.3.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: "@radix-ui/react-tabs" dependency-version: 1.1.16 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: "@radix-ui/react-tooltip" dependency-version: 1.2.11 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: "@tailwindcss/vite" dependency-version: 4.3.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: "@vitejs/plugin-react" dependency-version: 6.0.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: i18next dependency-version: 26.3.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: radix-ui dependency-version: 1.6.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: sharp dependency-version: 0.35.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: tailwindcss dependency-version: 4.3.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates ... Signed-off-by: dependabot[bot] <support@github.com> --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: LukeGus <bugattiguy527@gmail.com> Co-authored-by: Luke Gustafson <88517757+LukeGus@users.noreply.github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps): bump the prod-patch-updates group with 2 updates (#1025) * chore: fix release workflow to merge docs branch * fix: svg donation generator push fail * fix: svg donation generator push fail * Update termix.rb * fix: svg donation generator push fail * chore: move donation badge to badges branch to avoid ruleset conflicts * chore: remove unneeded token from donation badge workflow * chore: debug donation badge commit step * fix: escape < character in donation SVG * fix: point donation badge to badges branch * chore: remove unused donation badge svg from main * Add Rack Genius logo to README Added Rack Genius logo to the README. * chore: improve donation goal svg generator to include stablecoins * chore: donation goal generator syntax error * chore: donation goal generator incorrect docs url usage * chore(deps): bump the prod-patch-updates group with 2 updates Bumps the prod-patch-updates group with 2 updates: [axios](https://github.com/axios/axios) and [nanoid](https://github.com/ai/nanoid). Updates `axios` from 1.18.0 to 1.18.1 - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](https://github.com/axios/axios/compare/v1.18.0...v1.18.1) Updates `nanoid` from 5.1.15 to 5.1.16 - [Release notes](https://github.com/ai/nanoid/releases) - [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md) - [Commits](https://github.com/ai/nanoid/compare/5.1.15...5.1.16) --- updated-dependencies: - dependency-name: axios dependency-version: 1.18.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-patch-updates - dependency-name: nanoid dependency-version: 5.1.16 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-patch-updates ... Signed-off-by: dependabot[bot] <support@github.com> --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: LukeGus <bugattiguy527@gmail.com> Co-authored-by: Luke Gustafson <88517757+LukeGus@users.noreply.github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps): bump the prod-minor-updates group with 3 updates (#1026) * chore: fix release workflow to merge docs branch * fix: svg donation generator push fail * fix: svg donation generator push fail * Update termix.rb * fix: svg donation generator push fail * chore: move donation badge to badges branch to avoid ruleset conflicts * chore: remove unneeded token from donation badge workflow * chore: debug donation badge commit step * fix: escape < character in donation SVG * fix: point donation badge to badges branch * chore: remove unused donation badge svg from main * Add Rack Genius logo to README Added Rack Genius logo to the README. * chore: improve donation goal svg generator to include stablecoins * chore: donation goal generator syntax error * chore: donation goal generator incorrect docs url usage * chore(deps): bump the prod-minor-updates group with 3 updates Bumps the prod-minor-updates group with 3 updates: [js-yaml](https://github.com/nodeca/js-yaml), [motion](https://github.com/motiondivision/motion) and [undici](https://github.com/nodejs/undici). Updates `js-yaml` from 5.0.0 to 5.2.1 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](https://github.com/nodeca/js-yaml/compare/5.0.0...5.2.1) Updates `motion` from 12.40.0 to 12.42.2 - [Changelog](https://github.com/motiondivision/motion/blob/main/CHANGELOG.md) - [Commits](https://github.com/motiondivision/motion/compare/v12.40.0...v12.42.2) Updates `undici` from 8.5.0 to 8.7.0 - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](https://github.com/nodejs/undici/compare/v8.5.0...v8.7.0) --- updated-dependencies: - dependency-name: js-yaml dependency-version: 5.2.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-minor-updates - dependency-name: motion dependency-version: 12.42.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-minor-updates - dependency-name: undici dependency-version: 8.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-minor-updates ... Signed-off-by: dependabot[bot] <support@github.com> --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: LukeGus <bugattiguy527@gmail.com> Co-authored-by: Luke Gustafson <88517757+LukeGus@users.noreply.github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-dev): bump electron from 42.4.1 to 43.0.0 in the major-updates group (#1027) * chore: fix release workflow to merge docs branch * fix: svg donation generator push fail * fix: svg donation generator push fail * Update termix.rb * fix: svg donation generator push fail * chore: move donation badge to badges branch to avoid ruleset conflicts * chore: remove unneeded token from donation badge workflow * chore: debug donation badge commit step * fix: escape < character in donation SVG * fix: point donation badge to badges branch * chore: remove unused donation badge svg from main * Add Rack Genius logo to README Added Rack Genius logo to the README. * chore: improve donation goal svg generator to include stablecoins * chore: donation goal generator syntax error * chore: donation goal generator incorrect docs url usage * chore(deps-dev): bump electron in the major-updates group Bumps the major-updates group with 1 update: [electron](https://github.com/electron/electron). Updates `electron` from 42.4.1 to 43.0.0 - [Release notes](https://github.com/electron/electron/releases) - [Commits](https://github.com/electron/electron/compare/v42.4.1...v43.0.0) --- updated-dependencies: - dependency-name: electron dependency-version: 43.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: major-updates ... Signed-off-by: dependabot[bot] <support@github.com> --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: LukeGus <bugattiguy527@gmail.com> Co-authored-by: Luke Gustafson <88517757+LukeGus@users.noreply.github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Fix MC syntax highlighting artifacts (#996) * Filter dashboard status hosts (#997) * Persist dashboard service link changes (#999) * Fix snippet text overflow (#1000) * Persist remote desktop credential auth (#1001) * Guard language switching failures (#1002) * Resolve tunnel source credentials (#1003) * Support Vault auth for monitors (#1004) * Fix Windows file delete command (#1005) * Fix release artifact checkout ref (#1006) * Fix command palette escape in fullscreen (#1008) * Fix alerts and audit log data normalization (#1010) * Fix macOS VNC protocol negotiation (#1012) * Fix port knocking before SSH connect (#1013) * Allow Escape to close link confirmation (#1014) * Prevent Electron modifier wheel zoom (#1016) * Fix credential auth optional password (#1009) * Retry transient terminal DNS lookups (#1011) * Retry transient terminal DNS lookups * Apply DNS retry to SSH entry points * Fix OIDC redirect forwarded port handling (#1007) * Preserve recent open tabs on startup (#1015) * Fix fish prompt OSC highlighting (#998) * Fix terminal font selection (#1018) * fix: font legibility (#1019) * chore: fix release workflow to merge docs branch * fix: svg donation generator push fail * fix: svg donation generator push fail * Update termix.rb * fix: svg donation generator push fail * chore: move donation badge to badges branch to avoid ruleset conflicts * chore: remove unneeded token from donation badge workflow * chore: debug donation badge commit step * fix: escape < character in donation SVG * fix: point donation badge to badges branch * chore: remove unused donation badge svg from main * Add Rack Genius logo to README Added Rack Genius logo to the README. * chore: improve donation goal svg generator to include stablecoins * chore: donation goal generator syntax error * chore: donation goal generator incorrect docs url usage * fix: font legibility Text was entirely unreadable in places for me. Especially with themes like Catppuccin. The muted-foreground text and the tags too similiar to the background. --------- Co-authored-by: LukeGus <bugattiguy527@gmail.com> Co-authored-by: Luke Gustafson <88517757+LukeGus@users.noreply.github.com> Co-authored-by: russell <git@0896c69e.com> * fix(file-manager): chunked uploads fail with 'Expected multipart/form-data request' (#1020) * chore: fix release workflow to merge docs branch * fix: svg donation generator push fail * fix: svg donation generator push fail * Update termix.rb * fix: svg donation generator push fail * chore: move donation badge to badges branch to avoid ruleset conflicts * chore: remove unneeded token from donation badge workflow * chore: debug donation badge commit step * fix: escape < character in donation SVG * fix: point donation badge to badges branch * chore: remove unused donation badge svg from main * Add Rack Genius logo to README Added Rack Genius logo to the README. * chore: improve donation goal svg generator to include stablecoins * chore: donation goal generator syntax error * chore: donation goal generator incorrect docs url usage * fix(file-manager): use postForm for chunked uploads so multipart content-type is sent The fileManagerApi axios instance defaults to Content-Type: application/json. Axios 1.x's default transformRequest converts a FormData body to JSON whenever the request content type is application/json, so every chunk POSTed to /ssh/uploadFileChunk arrived as a JSON body like {"chunk":{}} and the backend rejected it with 400 'Expected multipart/form-data request'. This breaks all uploads of files larger than the 1.5 GiB chunking threshold. The non-chunked path already uses postForm for /ssh/uploadFileStream; use it for the chunk path too so axios keeps the FormData intact and the browser sets the multipart boundary. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> --------- Co-authored-by: LukeGus <bugattiguy527@gmail.com> Co-authored-by: Luke Gustafson <88517757+LukeGus@users.noreply.github.com> Co-authored-by: Claude Fable 5 <noreply@anthropic.com> * feat: implement OIDC back-channel logout support with session management (#1028) * feat: implement OIDC back-channel logout support with session management * Fix OIDC back-channel logout handling * Require logout token replay identifiers --------- Co-authored-by: ZacharyZcR <zacharyzcr1984@gmail.com> * Add API key host enrollment endpoint (#1029) * Fix tmux detection for non-POSIX shells (#1030) * Fix OPKSSH js-yaml ESM import (#1031) * Fix Android Vietnamese IME input (#1032) * Fix Firefox RDP clipboard paste (#1033) * Fix Proxmox discovery over HTTPS (#1041) * Fix external editor actions in file preview (#1042) * Allow pinned hosts with name sorting (#1043) * Fix Firefox desktop OIDC callback (#1044) * feat(session): add recording and replay (#1049) * Fix status checks through jump hosts (#1045) * Add terminal font size shortcuts (#1047) * feat: add Open File Manager to tab right-click menu (#1051) Co-authored-by: SankeerthNara <sankeerthnara@gmail.com> * perf: frontend request cache, poll pause, and code-split shell (#1052) Host/status caching, shell code-split, SSH pool waits, host-metrics concurrency, background-tab idle, per-host status subscriptions, homepage poll quieting, and virtualized host sidebar + file manager lists. * Merge commit from fork * Merge commit from fork * Merge commit from fork * Merge commit from fork * Merge commit from fork * Merge commit from fork * Merge commit from fork * Merge commit from fork * Merge commit from fork * Merge commit from fork * Merge commit from fork * Merge commit from fork * feat: save quick connect sessions as hosts (#1055) * fix: restore sudo password autofill settings (#1056) * fix: preserve file editor position on save (#1057) * fix: sync cloud preference storage mode (#1058) * fix: render RDP sessions at native pixel density (#1059) * fix: restore database import in embedded desktop mode (#1060) * Update Auto-complete.tsx (#1061) * chore: fix release workflow to merge docs branch * fix: svg donation generator push fail * fix: svg donation generator push fail * Update termix.rb * fix: svg donation generator push fail * chore: move donation badge to badges branch to avoid ruleset conflicts * chore: remove unneeded token from donation badge workflow * chore: debug donation badge commit step * fix: escape < character in donation SVG * fix: point donation badge to badges branch * chore: remove unused donation badge svg from main * Add Rack Genius logo to README Added Rack Genius logo to the README. * chore: improve donation goal svg generator to include stablecoins * chore: donation goal generator syntax error * chore: donation goal generator incorrect docs url usage * chore: donation bar reporting wrong result * feat: add Open File Manager to tab right-click menu (#1046) * Revert "feat: add Open File Manager to tab right-click menu (#1046)" (#1050) This reverts commit0712fdd731. * Remove donation badge from README Removed donation badge from README. * Delete .github/workflows/donation-goal.yml * Update Auto-complete.tsx --------- Co-authored-by: LukeGus <bugattiguy527@gmail.com> Co-authored-by: Luke Gustafson <88517757+LukeGus@users.noreply.github.com> Co-authored-by: ZacharyZcR <zacharyzcr1984@gmail.com> * feat(auth): opt-in OIDC DEK unlock for API-key requests (ALLOW_APIKEY_DATA_UNLOCK) (#1064) * chore: fix release workflow to merge docs branch * fix: svg donation generator push fail * fix: svg donation generator push fail * Update termix.rb * fix: svg donation generator push fail * chore: move donation badge to badges branch to avoid ruleset conflicts * chore: remove unneeded token from donation badge workflow * chore: debug donation badge commit step * fix: escape < character in donation SVG * fix: point donation badge to badges branch * chore: remove unused donation badge svg from main * Add Rack Genius logo to README Added Rack Genius logo to the README. * chore: improve donation goal svg generator to include stablecoins * chore: donation goal generator syntax error * chore: donation goal generator incorrect docs url usage * chore: donation bar reporting wrong result * feat: add Open File Manager to tab right-click menu (#1046) * Revert "feat: add Open File Manager to tab right-click menu (#1046)" (#1050) This reverts commit0712fdd731. * Remove donation badge from README Removed donation badge from README. * Delete .github/workflows/donation-goal.yml * feat(auth): opt-in OIDC DEK unlock for API-key requests API keys authenticate but cannot touch the encrypted credential/host store ('User data not unlocked') unless the user has a live interactive session, making them unusable for headless automation. For OIDC users the DEK is server-derivable (deriveOIDCSystemKey), so handleApiKeyAuth can unlock it without a password. Gated behind ALLOW_APIKEY_DATA_UNLOCK (default off) because enabling it widens the blast radius of a leaked API key. OIDC-only; password users are untouched. Refs #1063 --------- Co-authored-by: LukeGus <bugattiguy527@gmail.com> Co-authored-by: Luke Gustafson <88517757+LukeGus@users.noreply.github.com> Co-authored-by: Sankeerth Nara <sankeerthnara@gmail.com> Co-authored-by: ZacharyZcR <zacharyzcr1984@gmail.com> * chore: package lock sync * Add Proxmox guest auto sync (#1053) * draft: database layer refactor (#1054) * feat(sshid) - sshid.io equivalent for termix (#919) * feat(ssh-id): database schema, migrations and field encryption Adds ssh_identities, ssh_identity_keys and ssh_identity_ca tables (public keys stored plaintext for the unauthenticated resolver; CA private key registered for per-user field encryption), with UNIQUE(user_id), an index on ssh_identity_keys(identity_id), and idempotent CREATE TABLE migrations. * feat(ssh-id): backend API — resolver, key management, CA and certificates Mounts /sshid (nginx route added). Public text/plain authorized_keys resolver (+ exact /:algo filter, HTML viewer) and CA public-key endpoint; no-store + noindex headers on every resolver response including early 404s. Authenticated management: claim/rename/delete handle, add/import/generate/enable/delete keys, and a per-user CA (create/rotate/delete) with pure-Node OpenSSH certificate issuance. Audit logging on all mutations; UNIQUE races map to a precise 409. Unit tests for key parsing and certificate signing (ssh-keygen-validated). * feat(ssh-id): frontend panel, API client and i18n SSH ID panel wired into the app rail and AppShell: claim handle, resolver URL + curl one-liner, key list, generate, paste/import, CA enable/rotate/remove with server trust command, and per-key certificate issuance. API client re-exported through main-axios.ts; all strings i18n'd. * style(ssh-id): align panel and resolver page with Termix theme - Rebuild the SSH ID sidebar panel with the theme's square components (SectionCard / SettingRow / FakeSwitch) instead of rounded ad-hoc cards; use accent-brand and destructive tokens rather than raw red/green. - Fix panel scrolling: move overflow to a block scroll container so the cards keep their natural height instead of being clipped. - Restyle the public resolver HTML page (/sshid/u/:handle) to the Termix dark theme: square corners, #18181b/#303032 palette, #f59145 accent, uppercase section labels. - Tidy copy: 'Save To Credentials' label, drop the redundant generate intro, and correct the generate tooltip (the key is stored when saving to vault). * feat: rename to Termix ID, improve UI, backend inconsistencies, and general bug fixes --------- Co-authored-by: LukeGus <bugattiguy527@gmail.com> * ci(deps): bump actions/checkout from 6 to 7 in the github-actions group (#922) Bumps the github-actions group with 1 update: [actions/checkout](https://github.com/actions/checkout). Updates `actions/checkout` from 6 to 7 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v6...v7) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-dev): bump the dev-patch-updates group with 11 updates (#923) Bumps the dev-patch-updates group with 11 updates: | Package | From | To | | --- | --- | --- | | [@codemirror/search](https://github.com/codemirror/search) | `6.7.0` | `6.7.1` | | [@codemirror/view](https://github.com/codemirror/view) | `6.43.0` | `6.43.1` | | [@tailwindcss/vite](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-vite) | `4.3.0` | `4.3.1` | | [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.1.8` | `4.1.9` | | [@vitest/ui](https://github.com/vitest-dev/vitest/tree/HEAD/packages/ui) | `4.1.8` | `4.1.9` | | [eslint-plugin-react-refresh](https://github.com/ArnaudBarre/eslint-plugin-react-refresh) | `0.5.2` | `0.5.3` | | [lint-staged](https://github.com/lint-staged/lint-staged) | `17.0.7` | `17.0.8` | | [prettier](https://github.com/prettier/prettier) | `3.8.3` | `3.8.4` | | [sharp](https://github.com/lovell/sharp) | `0.35.1` | `0.35.2` | | [tailwindcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss) | `4.3.0` | `4.3.1` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.8` | `4.1.9` | Updates `@codemirror/search` from 6.7.0 to 6.7.1 - [Changelog](https://github.com/codemirror/search/blob/main/CHANGELOG.md) - [Commits](https://github.com/codemirror/search/commits) Updates `@codemirror/view` from 6.43.0 to 6.43.1 - [Changelog](https://github.com/codemirror/view/blob/main/CHANGELOG.md) - [Commits](https://github.com/codemirror/view/commits) Updates `@tailwindcss/vite` from 4.3.0 to 4.3.1 - [Release notes](https://github.com/tailwindlabs/tailwindcss/releases) - [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md) - [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.1/packages/@tailwindcss-vite) Updates `@vitest/coverage-v8` from 4.1.8 to 4.1.9 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.9/packages/coverage-v8) Updates `@vitest/ui` from 4.1.8 to 4.1.9 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.9/packages/ui) Updates `eslint-plugin-react-refresh` from 0.5.2 to 0.5.3 - [Release notes](https://github.com/ArnaudBarre/eslint-plugin-react-refresh/releases) - [Changelog](https://github.com/ArnaudBarre/eslint-plugin-react-refresh/blob/main/CHANGELOG.md) - [Commits](https://github.com/ArnaudBarre/eslint-plugin-react-refresh/compare/v0.5.2...v0.5.3) Updates `lint-staged` from 17.0.7 to 17.0.8 - [Release notes](https://github.com/lint-staged/lint-staged/releases) - [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md) - [Commits](https://github.com/lint-staged/lint-staged/compare/v17.0.7...v17.0.8) Updates `prettier` from 3.8.3 to 3.8.4 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](https://github.com/prettier/prettier/compare/3.8.3...3.8.4) Updates `sharp` from 0.35.1 to 0.35.2 - [Release notes](https://github.com/lovell/sharp/releases) - [Commits](https://github.com/lovell/sharp/compare/v0.35.1...v0.35.2) Updates `tailwindcss` from 4.3.0 to 4.3.1 - [Release notes](https://github.com/tailwindlabs/tailwindcss/releases) - [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md) - [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.1/packages/tailwindcss) Updates `vitest` from 4.1.8 to 4.1.9 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.9/packages/vitest) --- updated-dependencies: - dependency-name: "@codemirror/search" dependency-version: 6.7.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: "@codemirror/view" dependency-version: 6.43.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: "@tailwindcss/vite" dependency-version: 4.3.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: "@vitest/coverage-v8" dependency-version: 4.1.9 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: "@vitest/ui" dependency-version: 4.1.9 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: eslint-plugin-react-refresh dependency-version: 0.5.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: lint-staged dependency-version: 17.0.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: prettier dependency-version: 3.8.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: sharp dependency-version: 0.35.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: tailwindcss dependency-version: 4.3.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: vitest dependency-version: 4.1.9 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps): bump nanoid in the prod-patch-updates group (#925) Bumps the prod-patch-updates group with 1 update: [nanoid](https://github.com/ai/nanoid). Updates `nanoid` from 5.1.11 to 5.1.15 - [Release notes](https://github.com/ai/nanoid/releases) - [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md) - [Commits](https://github.com/ai/nanoid/compare/5.1.11...5.1.15) --- updated-dependencies: - dependency-name: nanoid dependency-version: 5.1.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-patch-updates ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps): bump the major-updates group with 5 updates (#926) Bumps the major-updates group with 5 updates: | Package | From | To | | --- | --- | --- | | [js-yaml](https://github.com/nodeca/js-yaml) | `4.2.0` | `5.0.0` | | [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js) | `9.39.4` | `10.0.1` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.9.2` | `26.0.0` | | [concurrently](https://github.com/open-cli-tools/concurrently) | `9.2.1` | `10.0.3` | | [eslint](https://github.com/eslint/eslint) | `9.39.4` | `10.5.0` | Updates `js-yaml` from 4.2.0 to 5.0.0 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](https://github.com/nodeca/js-yaml/compare/4.2.0...5.0.0) Updates `@eslint/js` from 9.39.4 to 10.0.1 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](https://github.com/eslint/eslint/commits/v10.0.1/packages/js) Updates `@types/node` from 25.9.2 to 26.0.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `concurrently` from 9.2.1 to 10.0.3 - [Release notes](https://github.com/open-cli-tools/concurrently/releases) - [Commits](https://github.com/open-cli-tools/concurrently/compare/v9.2.1...v10.0.3) Updates `eslint` from 9.39.4 to 10.5.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](https://github.com/eslint/eslint/compare/v9.39.4...v10.5.0) --- updated-dependencies: - dependency-name: js-yaml dependency-version: 5.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: major-updates - dependency-name: "@eslint/js" dependency-version: 10.0.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: major-updates - dependency-name: "@types/node" dependency-version: 26.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: major-updates - dependency-name: concurrently dependency-version: 10.0.3 dependency-type: direct:development update-type: version-update:semver-major dependency-group: major-updates - dependency-name: eslint dependency-version: 10.5.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: major-updates ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * feat(ssh): add HashiCorp Vault SSH signer authentication * fix: small fixes to vault feature to align with Termix codebase * chore: add view docs links for vault/termix id * fix: file upload fails with 400 and missing schema migrations on upgrade (#929) Two bugs introduced in v2.4.1: 1. uploadFileStream uses fileManagerApi.post() which triggers axios's transformRequest to JSON-serialize the FormData because the instance default Content-Type is application/json. Change to postForm() which sets Content-Type: multipart/form-data so the browser XHR sends the correct multipart body with boundary. 2. Two schema items added to schema.ts were not included in migrateSchema() in db/index.ts, causing 500 errors on existing installations upgrading from v2.4.0: - user_preferences.status_color_scheme (no such column) - dashboard_service_links table (no such table) Fixes #928 Co-authored-by: sash <sash@fominykh.io> * fix: support PuTTY PPK ssh keys (#930) * fix: chunk large file manager uploads (#932) * fix: route dashboard hosts by protocol (#934) * fix: resolve tunnel endpoints reliably (#935) * Fix Electron OIDC browser auth failures (#936) * Allow RDP connections without stored credentials (#937) * Sync role credential shares for OIDC users (#938) * Fix terminal link dialog layering (#940) * Confirm large files before opening editor (#942) * Confirm closing active host connections (#943) * Preserve file path case in file manager UI (#941) * fix: preserve unicode guacamole tokens (#933) * Persist VNC authentication settings (#944) * Fix Guacamole websocket base path (#946) * Promote file manager terminals to tabs (#939) * Guard Guacamole disconnect during startup (#945) * chore: increment ver * feat: bitwarden ssh agent integration * feat: serial connections support * fix: various small bug fixes * feat: open all sessions in a folder and terminal custom theme color support * feat: cross host file manager clipboard and several small bug fixes * feat: tailscale/wireguard support and added a new status state for when backend is checking status * feat: grafana like server stats history, new alert system, ntfy/webhook support * feat: new grid and widget based homepage function * feat: new donate button in dashboard * fix: alert ui incorrectly using termix css and fixed issue with alert system not loading * chore: start database layer refactor * docs: plan database layer refactor * docs: audit database layer refactor phase zero * chore: add database runtime adapter skeleton * chore: add settings repository skeleton * chore: add user session repository skeleton * chore: add host credential repository skeleton * chore: add field encryption boundary * chore: migrate settings route slice * chore: migrate user settings routes * chore: migrate host metrics settings routes * chore: migrate acme settings route * chore: migrate terminal settings route * chore: migrate tailscale settings read * chore: migrate guacamole settings reads * chore: migrate session timeout settings reads * chore: migrate auth route settings reads * chore: migrate host metrics settings reads * chore: migrate startup settings reads * chore: migrate user settings cleanup * chore: migrate password reset settings * chore: migrate oidc legacy settings read * chore: migrate user route settings slice * chore: migrate oidc state settings * chore: migrate user login settings reads * chore: migrate user crypto settings * chore: consolidate startup settings defaults * chore: consolidate database settings import export * chore: migrate core session auth paths * chore: migrate remaining session auth paths * chore: migrate admin user routes * chore: migrate user route admin checks * chore: migrate user lifecycle routes * chore: migrate auth user lookups * chore: migrate oidc user routes * chore: migrate api key repository paths * docs: add database gray rollout guide * chore: migrate trusted device paths * chore: migrate user session route user lookups * chore: add database repository rollout guard * chore: expose repository rollout status * chore: warn on repository rollout misconfiguration * chore: migrate remaining user lookup helpers * chore: migrate ssh user lookups * chore: migrate user settings admin lookups * chore: migrate acme ssl user lookups * chore: migrate audit log admin checks * chore: migrate oidc account user updates * chore: migrate password reset user updates * chore: migrate user deletion core records * chore: migrate snippet audit user lookups * chore: migrate ldap user sync paths * chore: migrate totp user updates * chore: migrate rbac user checks * chore: migrate rbac role paths * chore: migrate permission role lookups * chore: migrate rbac access list reads * chore: migrate shared rbac reads * chore: migrate rbac access writes * chore: migrate permission host access * chore: migrate role host access lookup * chore: migrate snippet access lookup * chore: migrate shared credential access lookups * chore: migrate host access cleanup writes * chore: migrate host list access checks * chore: migrate host access cleanup routes * chore: migrate shared credential role lookups * chore: migrate user role cleanup * chore: migrate admin role sync * chore: migrate ldap role sync * chore: migrate user role assignment * chore: migrate sso provider access * chore: migrate audit log access * chore: migrate user preference access * chore: migrate open tab access * chore: migrate dismissed alert access * chore: migrate homepage layout access * chore: migrate network topology access * chore: migrate dashboard service link access * chore: migrate command history access * chore: migrate recent activity cleanup * chore: migrate ssh credential usage access * chore: migrate transfer recent access * chore: migrate file manager bookmark access * chore: migrate c2s tunnel preset access * chore: migrate homepage item access * chore: migrate session recording access * chore: migrate tmux session tag access * chore: migrate opkssh token access * chore: migrate vault token access * chore: migrate vault profile access * chore: migrate host metrics preference access * chore: migrate host health access * chore: migrate host metrics history access * chore: migrate alert persistence access * chore: route alert host lookup through repository * chore: migrate user data export reads * chore: route host metrics stats sync through repository * chore: migrate host folder persistence * chore: migrate host resolution reads * chore: route jump host resolution reads * chore: route docker console jump host reads * chore: route docker ssh resolution reads * chore: route proxmox discovery resolution reads * chore: route file manager activity host reads * chore: route host metrics resolution reads * chore: route ssh auth credential reads * chore: route tunnel endpoint credential reads * chore: route credential deployment resolution reads * chore: route command history host flag reads * chore: route snippet execution resolution reads * chore: route terminal host resolution reads * chore: route vault oidc host resolution reads * chore: route wake on lan host reads * chore: route internal host list reads * chore: route host key verification persistence * chore: route credential read paths * chore: route credential host usage reads * chore: route credential folder rename * chore: route host owner access checks * chore: route shared credential source reads * chore: route user host credential cleanup * chore: route credential delete reads * chore: route credential update reads * chore: route host credential reads * chore: route host read paths * chore: route host projection reads * chore: route host list reads * chore: route snippet read paths * chore: route snippet folder writes * chore: route snippet crud paths * chore: route snippet bulk import * chore: route rbac ownership reads * chore: route user count reads * chore: route cleanup snippets folders * chore: route shared credential persistence * chore: route dashboard activity * chore: route guacamole host reads * chore: route host bulk lookups * chore: remove unlock-only simple db ops * chore: route host autostart persistence * chore: route ldap provisioning through users * chore: route credential encrypted writes * chore: route host encrypted writes * chore: route bulk host encrypted writes * chore: route termix id credentials * chore: route termix id ca persistence * chore: route termix identity persistence * chore: route credential system migration * chore: isolate user encryption migration storage * chore: remove legacy simple db ops * chore: isolate legacy sqlite migration copy * chore: route database settings import export * chore: route database host credential export * chore: route database host credential import * chore: route database file-manager import export * chore: route database alert usage import export * chore: route database user checks * chore: isolate auth lazy migration storage * chore: route explicit database saves * chore: initialize database save boundary * chore: route migration snapshot saves * chore: isolate sqlite import constraints * chore: route import sqlite boundary * chore: route user encryption migration store * chore: centralize current repository runtime * chore: route more current repositories * chore: route activity repository runtimes * chore: route token repository runtimes * chore: route health repository runtimes * chore: route identity repository runtimes * chore: route rbac repository runtime * chore: centralize current sqlite runtime access * chore: route user deletion key cleanup * chore: route user deletion vault cleanup * chore: route user deletion homepage cleanup * chore: route user deletion health cleanup * chore: route user deletion alert cleanup * chore: route user deletion identity cleanup * chore: add database layer preupgrade backup * Fix database repository type errors * fix: complete post-merge compile fixes for database refactor Restore missing DatabaseSaveTrigger/getDb imports, session log format fallback, OIDC provider resolution, guacamole recording insert, and passwordFallbackOnly typing after merging current dev. --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: DivByZero <mr.oplus@yahoo.fr> Co-authored-by: LukeGus <bugattiguy527@gmail.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: devdanetra <46488477+devdanetra@users.noreply.github.com> Co-authored-by: Aleksandr Fominykh <neoformalex@users.noreply.github.com> Co-authored-by: sash <sash@fominykh.io> * refactor(db): collapse repository rollout scaffolding into single factory Repositories are now the only data path. Replaces the 41 current-*-repository wrapper files, the DATABASE_LAYER_REPOSITORY_ROLLOUT flag/alias map and the unused database/runtime adapter with repositories/factory.ts, a plain DatabaseContext type and an in-memory TestSqliteDatabase test harness. * refactor(db): route remaining raw DB access through repositories proxmox, session-log, oidc-utils, webauthn and guacamole recording now use repositories (new WebauthnCredentialRepository; SsoProviderRepository listEnabled; HostRepository findDecryptedByIdAs/listProxmoxEnabled). Remaining raw access: db boot code, simple-db-ops and docker.ts, which are removed/restructured in later phases. * feat(crypto): add UserKeyManager with system-wrapped per-user DEKs New utils/user-keys.ts: one random 32-byte DEK per user, wrapped AES-256-GCM under an HKDF key derived from the system ENCRYPTION_KEY (per-user info string + AAD binding, versioned v3 wrap format stored in settings). Synchronous unwrap-on-demand with a 15-minute cache so the existing DataCrypto facade keeps its sync call sites. Not wired up yet. * feat(crypto): boot-time DEK migration to system-wrapped v3 format utils/crypto-migration/dek-migration.ts carries the legacy unwrap paths (PBKDF2 password KEK, OIDC/WebAuthn system keys, hardcoded-default fallback) and migrates every server-unwrappable DEK to the v3 wrap at startup. Password-wrapped DEKs migrate at next login or from a live session via adoptRecoveredDEK. Legacy rows are kept for now; cleanup flips on once the new path is authoritative. * refactor(crypto): make system-wrapped DEKs the authoritative key path DataCrypto and AuthManager now read keys through UserKeyManager: DEKs are always unwrappable server-side, so the in-memory unlock session, DEK-in-JWT wrapping, session-expiry data locks and ALLOW_APIKEY_DATA_UNLOCK are gone. utils/user-crypto.ts is deleted; boot migration now cleans legacy wraps. A one-release shim adopts DEKs from legacy dataKeyWrap tokens so active password users migrate without re-login. Password login migrates legacy password-wrapped DEKs via migratePasswordUserAtLogin. * refactor(crypto): remove pending share queue and credential sharing key With server-unwrappable DEKs both sides of a share are always available, so the needsReEncryption queue, CREDENTIAL_SHARING_KEY and the system_* shadow columns on ssh_credentials are gone. A one-time boot cleanup re-creates legacy pending share copies where possible (dropping unresolvable ones with a warning) and drops the legacy columns. * feat(auth): non-destructive password resets and admin reset endpoint Password resets no longer destroy user data: the DEK is system-wrapped, so forgot-password and admin resets are just a hash update plus session revoke. The wipe branch survives only for accounts that never logged in since the encryption upgrade and now requires explicit confirmDataWipe (surfaced as a 409 DATA_WIPE_REQUIRED; the reset UI asks for confirmation). Adds POST /users/admin/reset-password and removes the dead re-encryption paths. * refactor(ssh): consolidate four jump-host chain copies into one module terminal, host-metrics and docker now use ssh/jump-host-chain.ts (already shared by file-manager, tmux-monitor and docker-console); docker's inline copy also drops its raw SimpleDBOps host/credential lookups in favor of repositories. * refactor(ssh): single shared createConnectionLog helper file-manager-log.ts becomes ssh/connection-log.ts; the copies in docker.ts and host-metrics-helpers.ts are gone. * refactor(ssh): split docker module into layered directory ssh/docker/{index,routes,session-manager,container-routes,console}.ts: server boot and wiring in index, HTTP handlers in routes, SSH session registry and command execution in session-manager. Code motion only; port 30007/30009 and endpoints unchanged. Swagger now scans ssh subdirectories. * refactor(ssh): split tunnel module into layered directory ssh/tunnel/{index,routes,manager}.ts: server boot in index, HTTP handlers in routes, tunnel state and engine (connect/retry/autostart) in manager. Code motion only; port 30003 and endpoints unchanged. * refactor(backend): reorganize top-level layout - ssh/ renamed to hosts/ (it covers SSH, RDP, VNC, Telnet, Docker, metrics) - serial/serial.ts and guacamole/ moved inside hosts/ - dashboard.ts and homepage.ts moved to services/ - swagger.ts moved to utils/ with adjusted scan globs Import paths and the generate:openapi script updated; ports and endpoints unchanged. * refactor(tests): move backend tests into src/backend/tests mirror tree Backend *.test.ts files (and the test-support harness) no longer sit next to source files; they live under src/backend/tests/ mirroring the source layout. Imports rewritten accordingly; CLAUDE.md convention updated. * refactor(hosts): group host modules into per-feature directories file-manager/, metrics/ (incl. widgets, managers, alert-engine), terminal/, tmux/ and tunnel/ each own their files; docker/ gains container-runtime. Genuinely shared helpers (jump-host chain, host resolver, connection pool, opkssh, vault, serial) stay at hosts/ root. Pure file moves with import path updates; mirrored test paths follow. * refactor(backend): final cleanup pass - re-register WebAuthn passkey routes (registration was dropped in the #1054 merge, breaking passkey login) and document all six endpoints - delete utils/simple-db-ops.ts (last caller migrated to DataCrypto) - starter: use the typed serverReady export, collapse the four-way version lookup to env then package.json candidates - add OpenAPI JSDoc to c2s-tunnel-presets endpoints - strip block-divider comment banners * feat: remove legacy "data_unlocked" field * feat: refactor rbac/sharing to support new permissions and auth types * feat: refactor rbac/sharing to support new permissions and auth types * feat: add "id" to user profile hide list * chore: root cleanup * feat: add more donation references and a 30-day donation reminder * chore: update readme * feat: automate beta tests * feat: add links to milestones * fix: hoist github/google SSO defaults to module scope (#1065) * fix(ssh-tools): allow clipboard paste in key recording field (#1066) The broadcast key-recording input was marked readOnly, which makes browsers block paste entirely (no context-menu Paste, Ctrl+V does nothing). handleKeyDown also called preventDefault() unconditionally, swallowing the Ctrl+V shortcut before a paste event could even fire. Let Ctrl/Cmd+V pass through in handleKeyDown, drop readOnly, and add an onPaste handler that reads the clipboard text and broadcasts it to the selected terminals like any other captured keystroke. Signed-off-by: emreumar <emreumar@users.noreply.github.com> Co-authored-by: emreumar <emreumar@users.noreply.github.com> * chore: write release notes * chore: update release notes * chore: update readmes * chore: add crypto only reminder in en.json * fix: macOS and cask errors on release workflow * chore: sync Crowdin translations for 2.5.1 --------- Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: emreumar <emreumar@users.noreply.github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: ZacharyZcR <zacharyzcr1984@gmail.com> Co-authored-by: Russell Poovey <09.our_seekers@icloud.com> Co-authored-by: russell <git@0896c69e.com> Co-authored-by: Subedi Bibek <77529535+questbibek@users.noreply.github.com> Co-authored-by: Claude Fable 5 <noreply@anthropic.com> Co-authored-by: Alexander Elsner <101340634+Bensonheimer992@users.noreply.github.com> Co-authored-by: SankeerthNara <sankeerthnara@gmail.com> Co-authored-by: Stephan Groth <96803994+Kalvalax@users.noreply.github.com> Co-authored-by: DivByZero <mr.oplus@yahoo.fr> Co-authored-by: devdanetra <46488477+devdanetra@users.noreply.github.com> Co-authored-by: Aleksandr Fominykh <neoformalex@users.noreply.github.com> Co-authored-by: sash <sash@fominykh.io> Co-authored-by: lhojun <ldgs3324@gmail.com> Co-authored-by: Yunus Emre Umar <77045015+emre155@users.noreply.github.com> Co-authored-by: emreumar <emreumar@users.noreply.github.com>
This commit is contained in:
Luke Gustafson
co-authored by
emreumar
dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
ZacharyZcR
Russell Poovey
russell
Subedi Bibek
Claude Fable 5
Alexander Elsner
SankeerthNara
Stephan Groth
DivByZero
devdanetra
Aleksandr Fominykh
sash
lhojun
Yunus Emre Umar
emreumar
dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
ZacharyZcR
Russell Poovey
russell
Subedi Bibek
Claude Fable 5
Alexander Elsner
SankeerthNara
Stephan Groth
DivByZero
devdanetra
Aleksandr Fominykh
sash
lhojun
Yunus Emre Umar
parent
fba645e92e
commit
ddbdd5c437
+1
-1
@@ -34,7 +34,7 @@ README.md
|
|||||||
CONTRIBUTING.md
|
CONTRIBUTING.md
|
||||||
LICENSE
|
LICENSE
|
||||||
|
|
||||||
repo-images/
|
docs/repo-images/
|
||||||
|
|
||||||
uploads/
|
uploads/
|
||||||
|
|
||||||
|
|||||||
@@ -0,0 +1,179 @@
|
|||||||
|
name: Weekly Beta Release
|
||||||
|
|
||||||
|
on:
|
||||||
|
schedule:
|
||||||
|
- cron: "15 6 * * 1"
|
||||||
|
workflow_dispatch:
|
||||||
|
inputs:
|
||||||
|
dry_run:
|
||||||
|
description: "Build and test but do not push images, upload installers, or publish a release"
|
||||||
|
required: false
|
||||||
|
default: false
|
||||||
|
type: boolean
|
||||||
|
|
||||||
|
permissions:
|
||||||
|
contents: write
|
||||||
|
|
||||||
|
jobs:
|
||||||
|
prep:
|
||||||
|
runs-on: blacksmith-2vcpu-ubuntu-2404
|
||||||
|
outputs:
|
||||||
|
dev_branch: ${{ steps.dev.outputs.branch }}
|
||||||
|
beta_version: ${{ steps.dev.outputs.beta_version }}
|
||||||
|
sha: ${{ steps.dev.outputs.sha }}
|
||||||
|
steps:
|
||||||
|
- name: Checkout repository
|
||||||
|
uses: actions/checkout@v7
|
||||||
|
with:
|
||||||
|
fetch-depth: 1
|
||||||
|
|
||||||
|
- name: Setup Node.js
|
||||||
|
uses: actions/setup-node@v6
|
||||||
|
with:
|
||||||
|
node-version-file: ".nvmrc"
|
||||||
|
|
||||||
|
- name: Resolve newest dev branch and compute beta version
|
||||||
|
id: dev
|
||||||
|
env:
|
||||||
|
GH_TOKEN: ${{ secrets.GHCR_TOKEN }}
|
||||||
|
run: |
|
||||||
|
REFS=$(gh api "repos/${{ github.repository }}/branches" --paginate -q '.[].name')
|
||||||
|
if DEV_BRANCH=$(printf '%s\n' "$REFS" | node scripts/latest-dev-branch.cjs 2>/dev/null); then
|
||||||
|
echo "Newest dev branch: $DEV_BRANCH"
|
||||||
|
else
|
||||||
|
echo "No dev-X.Y.Z branch open; nothing to snapshot for this week's beta."
|
||||||
|
echo "branch=" >> "$GITHUB_OUTPUT"
|
||||||
|
exit 0
|
||||||
|
fi
|
||||||
|
|
||||||
|
BASE_VERSION=$(node scripts/parse-dev-branch.cjs "$DEV_BRANCH")
|
||||||
|
BETA_VERSION="${BASE_VERSION}-beta.$(date -u +%Y%m%d)"
|
||||||
|
SHA=$(gh api "repos/${{ github.repository }}/branches/$DEV_BRANCH" -q .commit.sha)
|
||||||
|
|
||||||
|
echo "Beta version: $BETA_VERSION"
|
||||||
|
echo "branch=$DEV_BRANCH" >> "$GITHUB_OUTPUT"
|
||||||
|
echo "beta_version=$BETA_VERSION" >> "$GITHUB_OUTPUT"
|
||||||
|
echo "sha=$SHA" >> "$GITHUB_OUTPUT"
|
||||||
|
|
||||||
|
verify:
|
||||||
|
needs: [prep]
|
||||||
|
if: ${{ needs.prep.outputs.dev_branch != '' }}
|
||||||
|
runs-on: blacksmith-2vcpu-ubuntu-2404
|
||||||
|
steps:
|
||||||
|
- name: Checkout dev branch
|
||||||
|
uses: actions/checkout@v7
|
||||||
|
with:
|
||||||
|
ref: ${{ needs.prep.outputs.dev_branch }}
|
||||||
|
fetch-depth: 1
|
||||||
|
|
||||||
|
- name: Setup Node.js
|
||||||
|
uses: actions/setup-node@v6
|
||||||
|
with:
|
||||||
|
node-version-file: ".nvmrc"
|
||||||
|
cache: "npm"
|
||||||
|
|
||||||
|
- name: Install dependencies
|
||||||
|
run: npm ci
|
||||||
|
|
||||||
|
- name: Run ESLint
|
||||||
|
run: npx eslint .
|
||||||
|
|
||||||
|
- name: Run Prettier check
|
||||||
|
run: npx prettier --check .
|
||||||
|
|
||||||
|
- name: Type check
|
||||||
|
run: npx tsc --noEmit
|
||||||
|
|
||||||
|
- name: Run unit tests
|
||||||
|
run: npm run test
|
||||||
|
|
||||||
|
- name: Build
|
||||||
|
run: npm run build
|
||||||
|
|
||||||
|
create-release:
|
||||||
|
needs: [prep, verify]
|
||||||
|
if: ${{ needs.prep.outputs.dev_branch != '' && inputs.dry_run != true }}
|
||||||
|
runs-on: blacksmith-2vcpu-ubuntu-2404
|
||||||
|
permissions:
|
||||||
|
contents: write
|
||||||
|
steps:
|
||||||
|
- name: Checkout dev branch
|
||||||
|
uses: actions/checkout@v7
|
||||||
|
with:
|
||||||
|
ref: ${{ needs.prep.outputs.dev_branch }}
|
||||||
|
fetch-depth: 0
|
||||||
|
|
||||||
|
- name: Resolve previous beta commit
|
||||||
|
id: prev
|
||||||
|
env:
|
||||||
|
GH_TOKEN: ${{ secrets.GHCR_TOKEN }}
|
||||||
|
run: |
|
||||||
|
PREV_SHA=$(gh release view beta --repo ${{ github.repository }} --json targetCommitish -q .targetCommitish 2>/dev/null || true)
|
||||||
|
if [ -n "$PREV_SHA" ] && git cat-file -e "$PREV_SHA" 2>/dev/null && git merge-base --is-ancestor "$PREV_SHA" "${{ needs.prep.outputs.sha }}"; then
|
||||||
|
echo "sha=$PREV_SHA" >> "$GITHUB_OUTPUT"
|
||||||
|
else
|
||||||
|
echo "sha=" >> "$GITHUB_OUTPUT"
|
||||||
|
fi
|
||||||
|
|
||||||
|
- name: Generate rolling beta release notes
|
||||||
|
run: |
|
||||||
|
if [ -n "${{ steps.prev.outputs.sha }}" ]; then
|
||||||
|
CHANGES=$(git log --oneline --no-merges "${{ steps.prev.outputs.sha }}..${{ needs.prep.outputs.sha }}" -- . ':!package-lock.json' | sed 's/^/- /')
|
||||||
|
fi
|
||||||
|
if [ -z "$CHANGES" ]; then
|
||||||
|
CHANGES="- No new commits since the last beta (or this is the first beta build)."
|
||||||
|
fi
|
||||||
|
|
||||||
|
cat > BETA_RELEASE_BODY.md << EOF
|
||||||
|
> [!WARNING]
|
||||||
|
> This is an automated weekly beta build, snapshotted from the \`${{ needs.prep.outputs.dev_branch }}\` branch. It is not a stable release: it may contain unfinished features, regressions, or breaking changes, and this tag is overwritten every week. Do not run it in production.
|
||||||
|
>
|
||||||
|
> Found a bug? [Open a Beta Feedback report](https://github.com/Termix-SSH/Support/issues/new?template=beta_feedback.yml) and mention this build: \`${{ needs.prep.outputs.beta_version }}\`.
|
||||||
|
|
||||||
|
**Snapshot of:** \`${{ needs.prep.outputs.dev_branch }}\` @ \`${{ needs.prep.outputs.sha }}\`
|
||||||
|
**Docker image:** \`ghcr.io/lukegus/termix:beta\` / \`docker.io/bugattiguy527/termix:beta\` (rolling), or pin to \`:beta-${{ needs.prep.outputs.beta_version }}\` for this exact build.
|
||||||
|
**Built:** $(date -u +"%Y-%m-%d %H:%M UTC")
|
||||||
|
|
||||||
|
### Changes since last beta
|
||||||
|
|
||||||
|
$CHANGES
|
||||||
|
EOF
|
||||||
|
|
||||||
|
- name: Create or update rolling beta release
|
||||||
|
env:
|
||||||
|
GH_TOKEN: ${{ secrets.GHCR_TOKEN }}
|
||||||
|
run: |
|
||||||
|
TAG="beta"
|
||||||
|
TITLE="Beta (rolling) - ${{ needs.prep.outputs.beta_version }}"
|
||||||
|
if gh release view "$TAG" --repo ${{ github.repository }} >/dev/null 2>&1; then
|
||||||
|
gh release edit "$TAG" --repo ${{ github.repository }} \
|
||||||
|
--title "$TITLE" --notes-file BETA_RELEASE_BODY.md \
|
||||||
|
--prerelease --target "${{ needs.prep.outputs.sha }}"
|
||||||
|
else
|
||||||
|
gh release create "$TAG" --repo ${{ github.repository }} \
|
||||||
|
--title "$TITLE" --notes-file BETA_RELEASE_BODY.md \
|
||||||
|
--prerelease --target "${{ needs.prep.outputs.sha }}"
|
||||||
|
fi
|
||||||
|
|
||||||
|
docker:
|
||||||
|
needs: [prep, verify, create-release]
|
||||||
|
if: ${{ always() && needs.prep.outputs.dev_branch != '' && (needs.create-release.result == 'success' || needs.create-release.result == 'skipped') }}
|
||||||
|
uses: ./.github/workflows/docker.yml
|
||||||
|
with:
|
||||||
|
version: ${{ needs.prep.outputs.beta_version }}
|
||||||
|
build_type: Beta
|
||||||
|
dry_run: ${{ inputs.dry_run == true }}
|
||||||
|
source_ref: ${{ needs.prep.outputs.sha }}
|
||||||
|
secrets: inherit
|
||||||
|
|
||||||
|
electron-release:
|
||||||
|
needs: [prep, verify, create-release]
|
||||||
|
if: ${{ always() && needs.prep.outputs.dev_branch != '' && inputs.dry_run != true && needs.create-release.result == 'success' }}
|
||||||
|
uses: ./.github/workflows/electron.yml
|
||||||
|
with:
|
||||||
|
build_type: all
|
||||||
|
artifact_destination: release
|
||||||
|
release_tag: beta
|
||||||
|
version_override: ${{ needs.prep.outputs.beta_version }}
|
||||||
|
source_ref: ${{ needs.prep.outputs.sha }}
|
||||||
|
secrets: inherit
|
||||||
@@ -13,7 +13,12 @@ on:
|
|||||||
type: choice
|
type: choice
|
||||||
options:
|
options:
|
||||||
- Development
|
- Development
|
||||||
|
- Beta
|
||||||
- Production
|
- Production
|
||||||
|
source_ref:
|
||||||
|
description: "Git ref/SHA to build (defaults to the workflow ref)"
|
||||||
|
required: false
|
||||||
|
default: ""
|
||||||
workflow_call:
|
workflow_call:
|
||||||
inputs:
|
inputs:
|
||||||
version:
|
version:
|
||||||
@@ -29,6 +34,11 @@ on:
|
|||||||
required: false
|
required: false
|
||||||
type: boolean
|
type: boolean
|
||||||
default: false
|
default: false
|
||||||
|
source_ref:
|
||||||
|
description: "Git ref/SHA to build"
|
||||||
|
required: false
|
||||||
|
type: string
|
||||||
|
default: ""
|
||||||
|
|
||||||
jobs:
|
jobs:
|
||||||
build:
|
build:
|
||||||
@@ -37,8 +47,12 @@ jobs:
|
|||||||
- name: Checkout repository
|
- name: Checkout repository
|
||||||
uses: actions/checkout@v7
|
uses: actions/checkout@v7
|
||||||
with:
|
with:
|
||||||
|
ref: ${{ inputs.source_ref || github.ref }}
|
||||||
fetch-depth: 1
|
fetch-depth: 1
|
||||||
|
|
||||||
|
- name: Resolve source revision
|
||||||
|
run: echo "SOURCE_SHA=$(git rev-parse HEAD)" >> "$GITHUB_ENV"
|
||||||
|
|
||||||
- name: Set up QEMU
|
- name: Set up QEMU
|
||||||
uses: docker/setup-qemu-action@v4
|
uses: docker/setup-qemu-action@v4
|
||||||
with:
|
with:
|
||||||
@@ -62,6 +76,12 @@ jobs:
|
|||||||
ALL_TAGS+=("ghcr.io/lukegus/termix:$tag")
|
ALL_TAGS+=("ghcr.io/lukegus/termix:$tag")
|
||||||
ALL_TAGS+=("docker.io/bugattiguy527/termix:$tag")
|
ALL_TAGS+=("docker.io/bugattiguy527/termix:$tag")
|
||||||
done
|
done
|
||||||
|
elif [ "$BUILD_TYPE" = "Beta" ]; then
|
||||||
|
TAGS+=("beta" "beta-$VERSION")
|
||||||
|
for tag in "${TAGS[@]}"; do
|
||||||
|
ALL_TAGS+=("ghcr.io/lukegus/termix:$tag")
|
||||||
|
ALL_TAGS+=("docker.io/bugattiguy527/termix:$tag")
|
||||||
|
done
|
||||||
else
|
else
|
||||||
TAGS+=("dev-$VERSION")
|
TAGS+=("dev-$VERSION")
|
||||||
for tag in "${TAGS[@]}"; do
|
for tag in "${TAGS[@]}"; do
|
||||||
@@ -79,8 +99,8 @@ jobs:
|
|||||||
username: lukegus
|
username: lukegus
|
||||||
password: ${{ secrets.GHCR_TOKEN }}
|
password: ${{ secrets.GHCR_TOKEN }}
|
||||||
|
|
||||||
- name: Login to Docker Hub (prod only)
|
- name: Login to Docker Hub (prod and beta only)
|
||||||
if: ${{ inputs.build_type == 'Production' && !inputs.dry_run }}
|
if: ${{ (inputs.build_type == 'Production' || inputs.build_type == 'Beta') && !inputs.dry_run }}
|
||||||
uses: docker/login-action@v4
|
uses: docker/login-action@v4
|
||||||
with:
|
with:
|
||||||
username: bugattiguy527
|
username: bugattiguy527
|
||||||
@@ -98,7 +118,7 @@ jobs:
|
|||||||
BUILDKIT_CONTEXT_KEEP_GIT_DIR=1
|
BUILDKIT_CONTEXT_KEEP_GIT_DIR=1
|
||||||
labels: |
|
labels: |
|
||||||
org.opencontainers.image.source=https://github.com/${{ github.repository }}
|
org.opencontainers.image.source=https://github.com/${{ github.repository }}
|
||||||
org.opencontainers.image.revision=${{ github.sha }}
|
org.opencontainers.image.revision=${{ env.SOURCE_SHA }}
|
||||||
org.opencontainers.image.created=${{ github.run_id }}
|
org.opencontainers.image.created=${{ github.run_id }}
|
||||||
cache-from: type=gha
|
cache-from: type=gha
|
||||||
cache-to: type=gha,mode=max
|
cache-to: type=gha,mode=max
|
||||||
|
|||||||
@@ -23,6 +23,10 @@ on:
|
|||||||
- file
|
- file
|
||||||
- release
|
- release
|
||||||
- submit
|
- submit
|
||||||
|
source_ref:
|
||||||
|
description: "Git ref/SHA to build (defaults to the workflow ref)"
|
||||||
|
required: false
|
||||||
|
default: ""
|
||||||
workflow_call:
|
workflow_call:
|
||||||
inputs:
|
inputs:
|
||||||
build_type:
|
build_type:
|
||||||
@@ -38,6 +42,16 @@ on:
|
|||||||
required: false
|
required: false
|
||||||
type: string
|
type: string
|
||||||
default: ""
|
default: ""
|
||||||
|
version_override:
|
||||||
|
description: "Version string to stamp into built artifacts instead of package.json's version"
|
||||||
|
required: false
|
||||||
|
type: string
|
||||||
|
default: ""
|
||||||
|
source_ref:
|
||||||
|
description: "Git ref/SHA to build"
|
||||||
|
required: false
|
||||||
|
type: string
|
||||||
|
default: ""
|
||||||
outputs:
|
outputs:
|
||||||
macos_universal_dmg_sha256:
|
macos_universal_dmg_sha256:
|
||||||
description: "SHA256 of the universal macOS DMG (for Homebrew cask)"
|
description: "SHA256 of the universal macOS DMG (for Homebrew cask)"
|
||||||
@@ -54,6 +68,7 @@ jobs:
|
|||||||
- name: Checkout repository
|
- name: Checkout repository
|
||||||
uses: actions/checkout@v7
|
uses: actions/checkout@v7
|
||||||
with:
|
with:
|
||||||
|
ref: ${{ inputs.source_ref || github.ref }}
|
||||||
fetch-depth: 1
|
fetch-depth: 1
|
||||||
|
|
||||||
- name: Setup Node.js
|
- name: Setup Node.js
|
||||||
@@ -68,7 +83,10 @@ jobs:
|
|||||||
- name: Get version
|
- name: Get version
|
||||||
id: package-version
|
id: package-version
|
||||||
run: |
|
run: |
|
||||||
|
$VERSION = "${{ inputs.version_override }}"
|
||||||
|
if ([string]::IsNullOrEmpty($VERSION)) {
|
||||||
$VERSION = (Get-Content package.json | ConvertFrom-Json).version
|
$VERSION = (Get-Content package.json | ConvertFrom-Json).version
|
||||||
|
}
|
||||||
echo "version=$VERSION" >> $env:GITHUB_OUTPUT
|
echo "version=$VERSION" >> $env:GITHUB_OUTPUT
|
||||||
|
|
||||||
- name: Build Windows (All Architectures)
|
- name: Build Windows (All Architectures)
|
||||||
@@ -144,6 +162,7 @@ jobs:
|
|||||||
- name: Checkout repository
|
- name: Checkout repository
|
||||||
uses: actions/checkout@v7
|
uses: actions/checkout@v7
|
||||||
with:
|
with:
|
||||||
|
ref: ${{ inputs.source_ref || github.ref }}
|
||||||
fetch-depth: 1
|
fetch-depth: 1
|
||||||
|
|
||||||
- name: Setup Node.js
|
- name: Setup Node.js
|
||||||
@@ -274,7 +293,10 @@ jobs:
|
|||||||
- name: Get version for Flatpak
|
- name: Get version for Flatpak
|
||||||
id: flatpak-version
|
id: flatpak-version
|
||||||
run: |
|
run: |
|
||||||
|
VERSION="${{ inputs.version_override }}"
|
||||||
|
if [ -z "$VERSION" ]; then
|
||||||
VERSION=$(node -p "require('./package.json').version")
|
VERSION=$(node -p "require('./package.json').version")
|
||||||
|
fi
|
||||||
RELEASE_DATE=$(date +%Y-%m-%d)
|
RELEASE_DATE=$(date +%Y-%m-%d)
|
||||||
echo "version=$VERSION" >> $GITHUB_OUTPUT
|
echo "version=$VERSION" >> $GITHUB_OUTPUT
|
||||||
echo "release_date=$RELEASE_DATE" >> $GITHUB_OUTPUT
|
echo "release_date=$RELEASE_DATE" >> $GITHUB_OUTPUT
|
||||||
@@ -288,9 +310,9 @@ jobs:
|
|||||||
CHECKSUM_ARM64=$(sha256sum "release/termix_linux_arm64_appimage.AppImage" | awk '{print $1}')
|
CHECKSUM_ARM64=$(sha256sum "release/termix_linux_arm64_appimage.AppImage" | awk '{print $1}')
|
||||||
|
|
||||||
mkdir -p flatpak-build
|
mkdir -p flatpak-build
|
||||||
cp flatpak/com.karmaa.termix.yml flatpak-build/
|
cp packaging/flatpak/com.karmaa.termix.yml flatpak-build/
|
||||||
cp flatpak/com.karmaa.termix.desktop flatpak-build/
|
cp packaging/flatpak/com.karmaa.termix.desktop flatpak-build/
|
||||||
cp flatpak/com.karmaa.termix.metainfo.xml flatpak-build/
|
cp packaging/flatpak/com.karmaa.termix.metainfo.xml flatpak-build/
|
||||||
cp public/icon.svg flatpak-build/com.karmaa.termix.svg
|
cp public/icon.svg flatpak-build/com.karmaa.termix.svg
|
||||||
convert public/icon.png -resize 256x256 flatpak-build/icon-256.png
|
convert public/icon.png -resize 256x256 flatpak-build/icon-256.png
|
||||||
convert public/icon.png -resize 128x128 flatpak-build/icon-128.png
|
convert public/icon.png -resize 128x128 flatpak-build/icon-128.png
|
||||||
@@ -322,7 +344,7 @@ jobs:
|
|||||||
- name: Create flatpakref file
|
- name: Create flatpakref file
|
||||||
run: |
|
run: |
|
||||||
VERSION="${{ steps.flatpak-version.outputs.version }}"
|
VERSION="${{ steps.flatpak-version.outputs.version }}"
|
||||||
cp flatpak/com.karmaa.termix.flatpakref release/
|
cp packaging/flatpak/com.karmaa.termix.flatpakref release/
|
||||||
sed -i "s|VERSION_PLACEHOLDER|release-${VERSION}-tag|g" release/com.karmaa.termix.flatpakref
|
sed -i "s|VERSION_PLACEHOLDER|release-${VERSION}-tag|g" release/com.karmaa.termix.flatpakref
|
||||||
|
|
||||||
- name: Upload Flatpak bundle
|
- name: Upload Flatpak bundle
|
||||||
@@ -354,6 +376,7 @@ jobs:
|
|||||||
- name: Checkout repository
|
- name: Checkout repository
|
||||||
uses: actions/checkout@v7
|
uses: actions/checkout@v7
|
||||||
with:
|
with:
|
||||||
|
ref: ${{ inputs.source_ref || github.ref }}
|
||||||
fetch-depth: 1
|
fetch-depth: 1
|
||||||
|
|
||||||
- name: Setup Node.js
|
- name: Setup Node.js
|
||||||
@@ -514,7 +537,10 @@ jobs:
|
|||||||
- name: Get version for Homebrew
|
- name: Get version for Homebrew
|
||||||
id: homebrew-version
|
id: homebrew-version
|
||||||
run: |
|
run: |
|
||||||
|
VERSION="${{ inputs.version_override }}"
|
||||||
|
if [ -z "$VERSION" ]; then
|
||||||
VERSION=$(node -p "require('./package.json').version")
|
VERSION=$(node -p "require('./package.json').version")
|
||||||
|
fi
|
||||||
echo "version=$VERSION" >> $GITHUB_OUTPUT
|
echo "version=$VERSION" >> $GITHUB_OUTPUT
|
||||||
|
|
||||||
- name: Compute universal DMG checksum
|
- name: Compute universal DMG checksum
|
||||||
@@ -525,7 +551,7 @@ jobs:
|
|||||||
echo "sha256=$CHECKSUM" >> $GITHUB_OUTPUT
|
echo "sha256=$CHECKSUM" >> $GITHUB_OUTPUT
|
||||||
|
|
||||||
- name: Generate Homebrew Cask
|
- name: Generate Homebrew Cask
|
||||||
if: hashFiles('release/termix_macos_universal_dmg.dmg') != '' && (inputs.artifact_destination == 'file' || inputs.artifact_destination == 'release')
|
if: hashFiles('release/termix_macos_universal_dmg.dmg') != '' && inputs.version_override == '' && (inputs.artifact_destination == 'file' || inputs.artifact_destination == 'release')
|
||||||
run: |
|
run: |
|
||||||
VERSION="${{ steps.homebrew-version.outputs.version }}"
|
VERSION="${{ steps.homebrew-version.outputs.version }}"
|
||||||
DMG_PATH="release/termix_macos_universal_dmg.dmg"
|
DMG_PATH="release/termix_macos_universal_dmg.dmg"
|
||||||
@@ -533,7 +559,7 @@ jobs:
|
|||||||
CHECKSUM=$(shasum -a 256 "$DMG_PATH" | awk '{print $1}')
|
CHECKSUM=$(shasum -a 256 "$DMG_PATH" | awk '{print $1}')
|
||||||
|
|
||||||
mkdir -p homebrew-generated
|
mkdir -p homebrew-generated
|
||||||
cp Casks/termix.rb homebrew-generated/termix.rb
|
cp packaging/Casks/termix.rb homebrew-generated/termix.rb
|
||||||
|
|
||||||
sed -i '' "s/VERSION_PLACEHOLDER/$VERSION/g" homebrew-generated/termix.rb
|
sed -i '' "s/VERSION_PLACEHOLDER/$VERSION/g" homebrew-generated/termix.rb
|
||||||
sed -i '' "s/CHECKSUM_PLACEHOLDER/$CHECKSUM/g" homebrew-generated/termix.rb
|
sed -i '' "s/CHECKSUM_PLACEHOLDER/$CHECKSUM/g" homebrew-generated/termix.rb
|
||||||
@@ -550,7 +576,7 @@ jobs:
|
|||||||
retention-days: 30
|
retention-days: 30
|
||||||
|
|
||||||
- name: Upload Homebrew Cask to release
|
- name: Upload Homebrew Cask to release
|
||||||
if: hashFiles('homebrew-generated/termix.rb') != '' && inputs.artifact_destination == 'release'
|
if: hashFiles('homebrew-generated/termix.rb') != '' && inputs.version_override == '' && inputs.artifact_destination == 'release'
|
||||||
env:
|
env:
|
||||||
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
||||||
run: |
|
run: |
|
||||||
@@ -580,6 +606,7 @@ jobs:
|
|||||||
- name: Checkout repository
|
- name: Checkout repository
|
||||||
uses: actions/checkout@v7
|
uses: actions/checkout@v7
|
||||||
with:
|
with:
|
||||||
|
ref: ${{ inputs.source_ref || github.ref }}
|
||||||
fetch-depth: 1
|
fetch-depth: 1
|
||||||
|
|
||||||
- name: Get version from package.json
|
- name: Get version from package.json
|
||||||
@@ -619,7 +646,7 @@ jobs:
|
|||||||
$DOWNLOAD_URL = "https://github.com/Termix-SSH/Termix/releases/download/release-$VERSION-tag/$MSI_NAME"
|
$DOWNLOAD_URL = "https://github.com/Termix-SSH/Termix/releases/download/release-$VERSION-tag/$MSI_NAME"
|
||||||
|
|
||||||
New-Item -ItemType Directory -Force -Path "choco-build"
|
New-Item -ItemType Directory -Force -Path "choco-build"
|
||||||
Copy-Item -Path "chocolatey\*" -Destination "choco-build" -Recurse -Force
|
Copy-Item -Path "packaging\chocolatey\*" -Destination "choco-build" -Recurse -Force
|
||||||
|
|
||||||
$installScript = Get-Content "choco-build\tools\chocolateyinstall.ps1" -Raw -Encoding UTF8
|
$installScript = Get-Content "choco-build\tools\chocolateyinstall.ps1" -Raw -Encoding UTF8
|
||||||
$installScript = $installScript -replace 'DOWNLOAD_URL_PLACEHOLDER', $DOWNLOAD_URL
|
$installScript = $installScript -replace 'DOWNLOAD_URL_PLACEHOLDER', $DOWNLOAD_URL
|
||||||
@@ -686,6 +713,7 @@ jobs:
|
|||||||
- name: Checkout repository
|
- name: Checkout repository
|
||||||
uses: actions/checkout@v7
|
uses: actions/checkout@v7
|
||||||
with:
|
with:
|
||||||
|
ref: ${{ inputs.source_ref || github.ref }}
|
||||||
fetch-depth: 1
|
fetch-depth: 1
|
||||||
|
|
||||||
- name: Get version from package.json
|
- name: Get version from package.json
|
||||||
@@ -737,10 +765,10 @@ jobs:
|
|||||||
|
|
||||||
mkdir -p flatpak-submission
|
mkdir -p flatpak-submission
|
||||||
|
|
||||||
cp flatpak/com.karmaa.termix.yml flatpak-submission/
|
cp packaging/flatpak/com.karmaa.termix.yml flatpak-submission/
|
||||||
cp flatpak/com.karmaa.termix.desktop flatpak-submission/
|
cp packaging/flatpak/com.karmaa.termix.desktop flatpak-submission/
|
||||||
cp flatpak/com.karmaa.termix.metainfo.xml flatpak-submission/
|
cp packaging/flatpak/com.karmaa.termix.metainfo.xml flatpak-submission/
|
||||||
cp flatpak/flathub.json flatpak-submission/
|
cp packaging/flatpak/flathub.json flatpak-submission/
|
||||||
|
|
||||||
cp public/icon.svg flatpak-submission/com.karmaa.termix.svg
|
cp public/icon.svg flatpak-submission/com.karmaa.termix.svg
|
||||||
convert public/icon.png -resize 256x256 flatpak-submission/icon-256.png
|
convert public/icon.png -resize 256x256 flatpak-submission/icon-256.png
|
||||||
@@ -823,6 +851,7 @@ jobs:
|
|||||||
- name: Checkout repository
|
- name: Checkout repository
|
||||||
uses: actions/checkout@v7
|
uses: actions/checkout@v7
|
||||||
with:
|
with:
|
||||||
|
ref: ${{ inputs.source_ref || github.ref }}
|
||||||
fetch-depth: 1
|
fetch-depth: 1
|
||||||
|
|
||||||
- name: Get version from package.json
|
- name: Get version from package.json
|
||||||
@@ -865,7 +894,7 @@ jobs:
|
|||||||
|
|
||||||
mkdir -p homebrew-submission/Casks/t
|
mkdir -p homebrew-submission/Casks/t
|
||||||
|
|
||||||
cp Casks/termix.rb homebrew-submission/Casks/t/termix.rb
|
cp packaging/Casks/termix.rb homebrew-submission/Casks/t/termix.rb
|
||||||
|
|
||||||
sed -i '' "s/VERSION_PLACEHOLDER/$VERSION/g" homebrew-submission/Casks/t/termix.rb
|
sed -i '' "s/VERSION_PLACEHOLDER/$VERSION/g" homebrew-submission/Casks/t/termix.rb
|
||||||
sed -i '' "s/CHECKSUM_PLACEHOLDER/$CHECKSUM/g" homebrew-submission/Casks/t/termix.rb
|
sed -i '' "s/CHECKSUM_PLACEHOLDER/$CHECKSUM/g" homebrew-submission/Casks/t/termix.rb
|
||||||
@@ -933,6 +962,7 @@ jobs:
|
|||||||
- name: Checkout repository
|
- name: Checkout repository
|
||||||
uses: actions/checkout@v7
|
uses: actions/checkout@v7
|
||||||
with:
|
with:
|
||||||
|
ref: ${{ inputs.source_ref || github.ref }}
|
||||||
fetch-depth: 1
|
fetch-depth: 1
|
||||||
|
|
||||||
- name: Setup Node.js
|
- name: Setup Node.js
|
||||||
@@ -1029,18 +1059,26 @@ jobs:
|
|||||||
|
|
||||||
VERSION=$(node -p "require('./package.json').version")
|
VERSION=$(node -p "require('./package.json').version")
|
||||||
|
|
||||||
# Write API key JSON that Fastlane deliver expects
|
# Write API key JSON that Fastlane deliver expects; the PEM's
|
||||||
|
# newlines must be preserved as literal \n escapes, not stripped,
|
||||||
|
# or spaceship fails to parse the key (invalid curve name).
|
||||||
mkdir -p /tmp/asc_keys
|
mkdir -p /tmp/asc_keys
|
||||||
KEY_P8_PATH="/tmp/asc_keys/AuthKey_${APPLE_KEY_ID}.p8"
|
KEY_P8_PATH="/tmp/asc_keys/AuthKey_${APPLE_KEY_ID}.p8"
|
||||||
API_KEY_JSON="/tmp/asc_keys/api_key.json"
|
API_KEY_JSON="/tmp/asc_keys/api_key.json"
|
||||||
|
|
||||||
echo "$APPLE_KEY_CONTENT" | base64 --decode > "$KEY_P8_PATH"
|
echo "$APPLE_KEY_CONTENT" | base64 --decode > "$KEY_P8_PATH"
|
||||||
|
|
||||||
printf '{\n "key_id": "%s",\n "issuer_id": "%s",\n "key": "%s",\n "in_house": false\n}\n' \
|
KEY_ID="$APPLE_KEY_ID" ISSUER_ID="$APPLE_ISSUER_ID" KEY_P8_PATH="$KEY_P8_PATH" \
|
||||||
"$APPLE_KEY_ID" \
|
node -e '
|
||||||
"$APPLE_ISSUER_ID" \
|
const fs = require("fs");
|
||||||
"$(tr -d '\n' < "$KEY_P8_PATH")" \
|
const key = fs.readFileSync(process.env.KEY_P8_PATH, "utf8");
|
||||||
> "$API_KEY_JSON"
|
process.stdout.write(JSON.stringify({
|
||||||
|
key_id: process.env.KEY_ID,
|
||||||
|
issuer_id: process.env.ISSUER_ID,
|
||||||
|
key,
|
||||||
|
in_house: false,
|
||||||
|
}, null, 2) + "\n");
|
||||||
|
' > "$API_KEY_JSON"
|
||||||
|
|
||||||
fastlane deliver \
|
fastlane deliver \
|
||||||
--pkg "$PKG_FILE" \
|
--pkg "$PKG_FILE" \
|
||||||
|
|||||||
@@ -278,7 +278,7 @@ jobs:
|
|||||||
|
|
||||||
MAIN_SHA=$(gh api repos/${{ github.repository }}/commits/main -q .sha)
|
MAIN_SHA=$(gh api repos/${{ github.repository }}/commits/main -q .sha)
|
||||||
echo "main_sha=$MAIN_SHA" >> "$GITHUB_OUTPUT"
|
echo "main_sha=$MAIN_SHA" >> "$GITHUB_OUTPUT"
|
||||||
echo "build_ref=main" >> "$GITHUB_OUTPUT"
|
echo "build_ref=$MAIN_SHA" >> "$GITHUB_OUTPUT"
|
||||||
|
|
||||||
docker:
|
docker:
|
||||||
needs: [prep, merge-to-main]
|
needs: [prep, merge-to-main]
|
||||||
@@ -287,6 +287,7 @@ jobs:
|
|||||||
version: ${{ needs.prep.outputs.version }}
|
version: ${{ needs.prep.outputs.version }}
|
||||||
build_type: Production
|
build_type: Production
|
||||||
dry_run: ${{ inputs.mode == 'Dry run' }}
|
dry_run: ${{ inputs.mode == 'Dry run' }}
|
||||||
|
source_ref: ${{ needs.merge-to-main.outputs.build_ref }}
|
||||||
secrets: inherit
|
secrets: inherit
|
||||||
|
|
||||||
create-release:
|
create-release:
|
||||||
@@ -351,15 +352,17 @@ jobs:
|
|||||||
build_type: all
|
build_type: all
|
||||||
artifact_destination: ${{ inputs.mode == 'Dry run' && 'file' || 'release' }}
|
artifact_destination: ${{ inputs.mode == 'Dry run' && 'file' || 'release' }}
|
||||||
release_tag: ${{ needs.prep.outputs.release_tag }}
|
release_tag: ${{ needs.prep.outputs.release_tag }}
|
||||||
|
source_ref: ${{ needs.merge-to-main.outputs.build_ref }}
|
||||||
secrets: inherit
|
secrets: inherit
|
||||||
|
|
||||||
electron-submit:
|
electron-submit:
|
||||||
needs: [prep, electron-release]
|
needs: [prep, merge-to-main, electron-release]
|
||||||
if: ${{ inputs.mode != 'Dry run' && inputs.mode != 'Skip submit' }}
|
if: ${{ inputs.mode != 'Dry run' && inputs.mode != 'Skip submit' }}
|
||||||
uses: ./.github/workflows/electron.yml
|
uses: ./.github/workflows/electron.yml
|
||||||
with:
|
with:
|
||||||
build_type: all
|
build_type: all
|
||||||
artifact_destination: submit
|
artifact_destination: submit
|
||||||
|
source_ref: ${{ needs.merge-to-main.outputs.build_ref }}
|
||||||
secrets: inherit
|
secrets: inherit
|
||||||
|
|
||||||
cask-commit-back:
|
cask-commit-back:
|
||||||
@@ -386,20 +389,21 @@ jobs:
|
|||||||
exit 0
|
exit 0
|
||||||
fi
|
fi
|
||||||
|
|
||||||
sed -i "s|version \".*\"|version \"$VERSION\"|g" Casks/termix.rb
|
git config user.name "LukeGus"
|
||||||
sed -i "s|sha256 \".*\"|sha256 \"$DMG_SHA256\"|g" Casks/termix.rb
|
git config user.email "bugattiguy527@gmail.com"
|
||||||
|
|
||||||
if git diff --quiet Casks/termix.rb; then
|
git fetch origin main
|
||||||
|
git checkout -B main origin/main
|
||||||
|
|
||||||
|
sed -i "s|version \".*\"|version \"$VERSION\"|g" packaging/Casks/termix.rb
|
||||||
|
sed -i "s|sha256 \".*\"|sha256 \"$DMG_SHA256\"|g" packaging/Casks/termix.rb
|
||||||
|
|
||||||
|
git add packaging/Casks/termix.rb
|
||||||
|
if git diff --cached --quiet; then
|
||||||
echo "Cask already up to date."
|
echo "Cask already up to date."
|
||||||
exit 0
|
exit 0
|
||||||
fi
|
fi
|
||||||
|
|
||||||
git config user.name "LukeGus"
|
|
||||||
git config user.email "bugattiguy527@gmail.com"
|
|
||||||
git add Casks/termix.rb
|
|
||||||
git stash
|
|
||||||
git pull --rebase origin main
|
|
||||||
git stash pop
|
|
||||||
git commit -m "chore: bump Homebrew cask to $VERSION"
|
git commit -m "chore: bump Homebrew cask to $VERSION"
|
||||||
git push origin HEAD:main
|
git push origin HEAD:main
|
||||||
|
|
||||||
@@ -530,7 +534,7 @@ jobs:
|
|||||||
docs,
|
docs,
|
||||||
publish-youtube,
|
publish-youtube,
|
||||||
]
|
]
|
||||||
if: ${{ always() && (inputs.mode == 'Everything' || inputs.mode == 'Skip submit') && needs.merge-to-main.result == 'success' && needs.electron-release.result == 'success' && needs.cask-commit-back.result == 'success' && needs.docs.result == 'success' && needs.publish-youtube.result == 'success' }}
|
if: ${{ always() && (inputs.mode == 'Everything' || inputs.mode == 'Skip submit') && needs.merge-to-main.result == 'success' && needs.electron-release.result == 'success' }}
|
||||||
runs-on: blacksmith-2vcpu-ubuntu-2404
|
runs-on: blacksmith-2vcpu-ubuntu-2404
|
||||||
steps:
|
steps:
|
||||||
- name: Delete dev branch in Termix
|
- name: Delete dev branch in Termix
|
||||||
|
|||||||
@@ -1,128 +0,0 @@
|
|||||||
# Contributor Covenant Code of Conduct
|
|
||||||
|
|
||||||
## Our Pledge
|
|
||||||
|
|
||||||
We as members, contributors, and leaders pledge to make participation in our
|
|
||||||
community a harassment-free experience for everyone, regardless of age, body
|
|
||||||
size, visible or invisible disability, ethnicity, sex characteristics, gender
|
|
||||||
identity and expression, level of experience, education, socio-economic status,
|
|
||||||
nationality, personal appearance, race, religion, or sexual identity
|
|
||||||
and orientation.
|
|
||||||
|
|
||||||
We pledge to act and interact in ways that contribute to an open, welcoming,
|
|
||||||
diverse, inclusive, and healthy community.
|
|
||||||
|
|
||||||
## Our Standards
|
|
||||||
|
|
||||||
Examples of behavior that contributes to a positive environment for our
|
|
||||||
community include:
|
|
||||||
|
|
||||||
- Demonstrating empathy and kindness toward other people
|
|
||||||
- Being respectful of differing opinions, viewpoints, and experiences
|
|
||||||
- Giving and gracefully accepting constructive feedback
|
|
||||||
- Accepting responsibility and apologizing to those affected by our mistakes,
|
|
||||||
and learning from the experience
|
|
||||||
- Focusing on what is best not just for us as individuals, but for the
|
|
||||||
overall community
|
|
||||||
|
|
||||||
Examples of unacceptable behavior include:
|
|
||||||
|
|
||||||
- The use of sexualized language or imagery, and sexual attention or
|
|
||||||
advances of any kind
|
|
||||||
- Trolling, insulting or derogatory comments, and personal or political attacks
|
|
||||||
- Public or private harassment
|
|
||||||
- Publishing others' private information, such as a physical or email
|
|
||||||
address, without their explicit permission
|
|
||||||
- Other conduct which could reasonably be considered inappropriate in a
|
|
||||||
professional setting
|
|
||||||
|
|
||||||
## Enforcement Responsibilities
|
|
||||||
|
|
||||||
Community leaders are responsible for clarifying and enforcing our standards of
|
|
||||||
acceptable behavior and will take appropriate and fair corrective action in
|
|
||||||
response to any behavior that they deem inappropriate, threatening, offensive,
|
|
||||||
or harmful.
|
|
||||||
|
|
||||||
Community leaders have the right and responsibility to remove, edit, or reject
|
|
||||||
comments, commits, code, wiki edits, issues, and other contributions that are
|
|
||||||
not aligned to this Code of Conduct, and will communicate reasons for moderation
|
|
||||||
decisions when appropriate.
|
|
||||||
|
|
||||||
## Scope
|
|
||||||
|
|
||||||
This Code of Conduct applies within all community spaces, and also applies when
|
|
||||||
an individual is officially representing the community in public spaces.
|
|
||||||
Examples of representing our community include using an official e-mail address,
|
|
||||||
posting via an official social media account, or acting as an appointed
|
|
||||||
representative at an online or offline event.
|
|
||||||
|
|
||||||
## Enforcement
|
|
||||||
|
|
||||||
Instances of abusive, harassing, or otherwise unacceptable behavior may be
|
|
||||||
reported to the community leaders responsible for enforcement at
|
|
||||||
mail@termix.site.
|
|
||||||
All complaints will be reviewed and investigated promptly and fairly.
|
|
||||||
|
|
||||||
All community leaders are obligated to respect the privacy and security of the
|
|
||||||
reporter of any incident.
|
|
||||||
|
|
||||||
## Enforcement Guidelines
|
|
||||||
|
|
||||||
Community leaders will follow these Community Impact Guidelines in determining
|
|
||||||
the consequences for any action they deem in violation of this Code of Conduct:
|
|
||||||
|
|
||||||
### 1. Correction
|
|
||||||
|
|
||||||
**Community Impact**: Use of inappropriate language or other behavior deemed
|
|
||||||
unprofessional or unwelcome in the community.
|
|
||||||
|
|
||||||
**Consequence**: A private, written warning from community leaders, providing
|
|
||||||
clarity around the nature of the violation and an explanation of why the
|
|
||||||
behavior was inappropriate. A public apology may be requested.
|
|
||||||
|
|
||||||
### 2. Warning
|
|
||||||
|
|
||||||
**Community Impact**: A violation through a single incident or series
|
|
||||||
of actions.
|
|
||||||
|
|
||||||
**Consequence**: A warning with consequences for continued behavior. No
|
|
||||||
interaction with the people involved, including unsolicited interaction with
|
|
||||||
those enforcing the Code of Conduct, for a specified period of time. This
|
|
||||||
includes avoiding interactions in community spaces as well as external channels
|
|
||||||
like social media. Violating these terms may lead to a temporary or
|
|
||||||
permanent ban.
|
|
||||||
|
|
||||||
### 3. Temporary Ban
|
|
||||||
|
|
||||||
**Community Impact**: A serious violation of community standards, including
|
|
||||||
sustained inappropriate behavior.
|
|
||||||
|
|
||||||
**Consequence**: A temporary ban from any sort of interaction or public
|
|
||||||
communication with the community for a specified period of time. No public or
|
|
||||||
private interaction with the people involved, including unsolicited interaction
|
|
||||||
with those enforcing the Code of Conduct, is allowed during this period.
|
|
||||||
Violating these terms may lead to a permanent ban.
|
|
||||||
|
|
||||||
### 4. Permanent Ban
|
|
||||||
|
|
||||||
**Community Impact**: Demonstrating a pattern of violation of community
|
|
||||||
standards, including sustained inappropriate behavior, harassment of an
|
|
||||||
individual, or aggression toward or disparagement of classes of individuals.
|
|
||||||
|
|
||||||
**Consequence**: A permanent ban from any sort of public interaction within
|
|
||||||
the community.
|
|
||||||
|
|
||||||
## Attribution
|
|
||||||
|
|
||||||
This Code of Conduct is adapted from the [Contributor Covenant][homepage],
|
|
||||||
version 2.0, available at
|
|
||||||
https://www.contributor-covenant.org/version/2/0/code_of_conduct.html.
|
|
||||||
|
|
||||||
Community Impact Guidelines were inspired by [Mozilla's code of conduct
|
|
||||||
enforcement ladder](https://github.com/mozilla/diversity).
|
|
||||||
|
|
||||||
[homepage]: https://www.contributor-covenant.org
|
|
||||||
|
|
||||||
For answers to common questions about this code of conduct, see the FAQ at
|
|
||||||
https://www.contributor-covenant.org/faq. Translations are available at
|
|
||||||
https://www.contributor-covenant.org/translations.
|
|
||||||
@@ -8,19 +8,19 @@
|
|||||||
|
|
||||||
<p>
|
<p>
|
||||||
English ·
|
English ·
|
||||||
<a href="readme/README-CN.md">中文</a> ·
|
<a href="docs/readme/README-CN.md">中文</a> ·
|
||||||
<a href="readme/README-JA.md">日本語</a> ·
|
<a href="docs/readme/README-JA.md">日本語</a> ·
|
||||||
<a href="readme/README-KO.md">한국어</a> ·
|
<a href="docs/readme/README-KO.md">한국어</a> ·
|
||||||
<a href="readme/README-FR.md">Français</a> ·
|
<a href="docs/readme/README-FR.md">Français</a> ·
|
||||||
<a href="readme/README-DE.md">Deutsch</a> ·
|
<a href="docs/readme/README-DE.md">Deutsch</a> ·
|
||||||
<a href="readme/README-ES.md">Español</a> ·
|
<a href="docs/readme/README-ES.md">Español</a> ·
|
||||||
<a href="readme/README-PT.md">Português</a> ·
|
<a href="docs/readme/README-PT.md">Português</a> ·
|
||||||
<a href="readme/README-RU.md">Русский</a> ·
|
<a href="docs/readme/README-RU.md">Русский</a> ·
|
||||||
<a href="readme/README-AR.md">العربية</a> ·
|
<a href="docs/readme/README-AR.md">العربية</a> ·
|
||||||
<a href="readme/README-HI.md">हिन्दी</a> ·
|
<a href="docs/readme/README-HI.md">हिन्दी</a> ·
|
||||||
<a href="readme/README-TR.md">Türkçe</a> ·
|
<a href="docs/readme/README-TR.md">Türkçe</a> ·
|
||||||
<a href="readme/README-VI.md">Tiếng Việt</a> ·
|
<a href="docs/readme/README-VI.md">Tiếng Việt</a> ·
|
||||||
<a href="readme/README-IT.md">Italiano</a>
|
<a href="docs/readme/README-IT.md">Italiano</a>
|
||||||
</p>
|
</p>
|
||||||
|
|
||||||
<p>
|
<p>
|
||||||
@@ -41,13 +41,13 @@ Termix is free and open source. If you find it useful, consider [donating](https
|
|||||||
|
|
||||||
<br />
|
<br />
|
||||||
|
|
||||||
<img src="./repo-images/Termix Header.png" alt="Termix Banner" width="900" />
|
<img src="./docs/repo-images/Termix Header.png" alt="Termix Banner" width="900" />
|
||||||
|
|
||||||
<br />
|
<br />
|
||||||
<br />
|
<br />
|
||||||
|
|
||||||
<p>
|
<p>
|
||||||
<img src="repo-images/Repo of the Day.png" alt="Repo of the Day Achievement" width="280" />
|
<img src="docs/repo-images/Repo of the Day.png" alt="Repo of the Day Achievement" width="280" />
|
||||||
<br />
|
<br />
|
||||||
<sub>Achieved on September 1st, 2025</sub>
|
<sub>Achieved on September 1st, 2025</sub>
|
||||||
</p>
|
</p>
|
||||||
@@ -117,7 +117,7 @@ View CPU, memory, disk usage, network, uptime, system information, firewall, por
|
|||||||
<td width="50%" valign="top">
|
<td width="50%" valign="top">
|
||||||
|
|
||||||
**User Authentication:**
|
**User Authentication:**
|
||||||
Secure user management with admin controls and OIDC/LDAP/SSO (with access control), 2FA (TOTP), and passkey (WebAuthn) support. View active user sessions across all platforms and revoke permissions. Link your OIDC/Local accounts together. View audit log of all users actions.
|
Secure user management with admin controls (can edit other users information) and OIDC/LDAP/SSO (with access control), 2FA (TOTP), and passkey (WebAuthn) support. View active user sessions across all platforms and revoke permissions. Link your OIDC/Local accounts together. View audit log of all users actions.
|
||||||
|
|
||||||
</td>
|
</td>
|
||||||
</tr>
|
</tr>
|
||||||
@@ -130,8 +130,8 @@ List devices from your tailnet to quickly add them as hosts, and connect using T
|
|||||||
</td>
|
</td>
|
||||||
<td width="50%" valign="top">
|
<td width="50%" valign="top">
|
||||||
|
|
||||||
**RBAC:**
|
**RBAC/Sharing:**
|
||||||
Create roles and share hosts across users/roles.
|
Create roles and share hosts across users/roles. Supports all auth types and all host protocols.
|
||||||
|
|
||||||
</td>
|
</td>
|
||||||
</tr>
|
</tr>
|
||||||
@@ -295,74 +295,16 @@ networks:
|
|||||||
|
|
||||||
## Donate
|
## Donate
|
||||||
|
|
||||||
Termix is free and open source with no subscriptions or paid plans. If you find it useful, consider donating to help cover server costs, domains, and development time.
|
Termix is free and open source with no subscriptions or paid plans. If you find it useful, consider donating to help cover server costs, domains, and development time. Donations also help fund the time to research and learn what's needed to build features like SAML, Kubernetes, and Agent support. Track progress and donate below.
|
||||||
|
|
||||||
[Donate](https://donate.termix.site/)
|
[Donate](https://donate.termix.site/)
|
||||||
|
|
||||||
<br />
|
<br />
|
||||||
|
|
||||||
## Screenshots
|
|
||||||
|
|
||||||
<div align="center">
|
|
||||||
|
|
||||||
<br />
|
|
||||||
|
|
||||||
[](https://www.youtube.com/@TermixSSH/videos)
|
|
||||||
|
|
||||||
<sub>Watch update overviews on YouTube</sub>
|
|
||||||
|
|
||||||
<br />
|
|
||||||
<br />
|
|
||||||
|
|
||||||
<table>
|
|
||||||
<tr>
|
|
||||||
<td><img src="./repo-images/Image 1.png" alt="Termix Screenshot 1" width="400" /></td>
|
|
||||||
<td><img src="./repo-images/Image 2.png" alt="Termix Screenshot 2" width="400" /></td>
|
|
||||||
</tr>
|
|
||||||
<tr>
|
|
||||||
<td><img src="./repo-images/Image 3.png" alt="Termix Screenshot 3" width="400" /></td>
|
|
||||||
<td><img src="./repo-images/Image 4.png" alt="Termix Screenshot 4" width="400" /></td>
|
|
||||||
</tr>
|
|
||||||
<tr>
|
|
||||||
<td><img src="./repo-images/Image 5.png" alt="Termix Screenshot 5" width="400" /></td>
|
|
||||||
<td><img src="./repo-images/Image 6.png" alt="Termix Screenshot 6" width="400" /></td>
|
|
||||||
</tr>
|
|
||||||
<tr>
|
|
||||||
<td><img src="./repo-images/Image 7.png" alt="Termix Screenshot 7" width="400" /></td>
|
|
||||||
<td><img src="./repo-images/Image 8.png" alt="Termix Screenshot 8" width="400" /></td>
|
|
||||||
</tr>
|
|
||||||
<tr>
|
|
||||||
<td><img src="./repo-images/Image 9.png" alt="Termix Screenshot 9" width="400" /></td>
|
|
||||||
<td><img src="./repo-images/Image 10.png" alt="Termix Screenshot 10" width="400" /></td>
|
|
||||||
</tr>
|
|
||||||
<tr>
|
|
||||||
<td><img src="./repo-images/Image 11.png" alt="Termix Screenshot 11" width="400" /></td>
|
|
||||||
<td><img src="./repo-images/Image 12.png" alt="Termix Screenshot 12" width="400" /></td>
|
|
||||||
</tr>
|
|
||||||
<tr>
|
|
||||||
<td><img src="./repo-images/Image 13.png" alt="Termix Screenshot 13" width="400" /></td>
|
|
||||||
<td><img src="./repo-images/Image 14.png" alt="Termix Screenshot 14" width="400" /></td>
|
|
||||||
</tr>
|
|
||||||
<tr>
|
|
||||||
<td><img src="./repo-images/Image 15.png" alt="Termix Screenshot 15" width="400" /></td>
|
|
||||||
<td><img src="./repo-images/Image 16.png" alt="Termix Screenshot 16" width="400" /></td>
|
|
||||||
</tr>
|
|
||||||
</table>
|
|
||||||
|
|
||||||
<sub>Some videos and images may be out of date or may not perfectly showcase features.</sub>
|
|
||||||
|
|
||||||
</div>
|
|
||||||
|
|
||||||
<br />
|
|
||||||
|
|
||||||
## Planned Features
|
|
||||||
|
|
||||||
See [Projects](https://github.com/orgs/Termix-SSH/projects/5) for all planned features. If you are looking to contribute, see [Contributing](https://github.com/Termix-SSH/Termix/blob/main/CONTRIBUTING.md).
|
|
||||||
|
|
||||||
<br />
|
|
||||||
|
|
||||||
## Sponsors
|
## Sponsors
|
||||||
|
|
||||||
|
Interested in a paid placement to support development? Email [mail@termix.site](mailto:mail@termix.site).
|
||||||
|
|
||||||
<div align="center">
|
<div align="center">
|
||||||
|
|
||||||
<br />
|
<br />
|
||||||
@@ -396,7 +338,7 @@ See [Projects](https://github.com/orgs/Termix-SSH/projects/5) for all planned fe
|
|||||||
</a>
|
</a>
|
||||||
|
|
||||||
<a href="https://rackgenius.com/">
|
<a href="https://rackgenius.com/">
|
||||||
<img src="https://rackgenius.com/rackgenius-logo.png" height="40" alt="AWS" />
|
<img src="https://rackgenius.com/rackgenius-logo.png" height="40" alt="Rack Genius" />
|
||||||
</a>
|
</a>
|
||||||
|
|
||||||
</div>
|
</div>
|
||||||
@@ -409,6 +351,66 @@ If you need help or want to request a feature with Termix, visit the [Issues](ht
|
|||||||
|
|
||||||
<br />
|
<br />
|
||||||
|
|
||||||
|
## Screenshots
|
||||||
|
|
||||||
|
<div align="center">
|
||||||
|
|
||||||
|
<br />
|
||||||
|
|
||||||
|
[](https://www.youtube.com/@TermixSSH/videos)
|
||||||
|
|
||||||
|
<sub>Watch update overviews on YouTube</sub>
|
||||||
|
|
||||||
|
<br />
|
||||||
|
<br />
|
||||||
|
|
||||||
|
<table>
|
||||||
|
<tr>
|
||||||
|
<td><img src="./docs/repo-images/Image 1.png" alt="Termix Screenshot 1" width="400" /></td>
|
||||||
|
<td><img src="./docs/repo-images/Image 2.png" alt="Termix Screenshot 2" width="400" /></td>
|
||||||
|
</tr>
|
||||||
|
<tr>
|
||||||
|
<td><img src="./docs/repo-images/Image 3.png" alt="Termix Screenshot 3" width="400" /></td>
|
||||||
|
<td><img src="./docs/repo-images/Image 4.png" alt="Termix Screenshot 4" width="400" /></td>
|
||||||
|
</tr>
|
||||||
|
<tr>
|
||||||
|
<td><img src="./docs/repo-images/Image 5.png" alt="Termix Screenshot 5" width="400" /></td>
|
||||||
|
<td><img src="./docs/repo-images/Image 6.png" alt="Termix Screenshot 6" width="400" /></td>
|
||||||
|
</tr>
|
||||||
|
<tr>
|
||||||
|
<td><img src="./docs/repo-images/Image 7.png" alt="Termix Screenshot 7" width="400" /></td>
|
||||||
|
<td><img src="./docs/repo-images/Image 8.png" alt="Termix Screenshot 8" width="400" /></td>
|
||||||
|
</tr>
|
||||||
|
<tr>
|
||||||
|
<td><img src="./docs/repo-images/Image 9.png" alt="Termix Screenshot 9" width="400" /></td>
|
||||||
|
<td><img src="./docs/repo-images/Image 10.png" alt="Termix Screenshot 10" width="400" /></td>
|
||||||
|
</tr>
|
||||||
|
<tr>
|
||||||
|
<td><img src="./docs/repo-images/Image 11.png" alt="Termix Screenshot 11" width="400" /></td>
|
||||||
|
<td><img src="./docs/repo-images/Image 12.png" alt="Termix Screenshot 12" width="400" /></td>
|
||||||
|
</tr>
|
||||||
|
<tr>
|
||||||
|
<td><img src="./docs/repo-images/Image 13.png" alt="Termix Screenshot 13" width="400" /></td>
|
||||||
|
<td><img src="./docs/repo-images/Image 14.png" alt="Termix Screenshot 14" width="400" /></td>
|
||||||
|
</tr>
|
||||||
|
<tr>
|
||||||
|
<td><img src="./docs/repo-images/Image 15.png" alt="Termix Screenshot 15" width="400" /></td>
|
||||||
|
<td><img src="./docs/repo-images/Image 16.png" alt="Termix Screenshot 16" width="400" /></td>
|
||||||
|
</tr>
|
||||||
|
</table>
|
||||||
|
|
||||||
|
<sub>Some videos and images may be out of date or may not perfectly showcase features.</sub>
|
||||||
|
|
||||||
|
</div>
|
||||||
|
|
||||||
|
<br />
|
||||||
|
|
||||||
|
## Planned Features
|
||||||
|
|
||||||
|
See [Projects](https://github.com/orgs/Termix-SSH/projects/5) for all planned features. If you are looking to contribute, see [Contributing](https://github.com/Termix-SSH/Termix/blob/main/CONTRIBUTING.md).
|
||||||
|
|
||||||
|
<br />
|
||||||
|
|
||||||
## License
|
## License
|
||||||
|
|
||||||
Distributed under the Apache License Version 2.0. See `LICENSE` for more information.
|
Distributed under the Apache License Version 2.0. See `LICENSE` for more information.
|
||||||
|
|||||||
+52
-63
@@ -1,6 +1,6 @@
|
|||||||
<!-- SUMMARY -->
|
<!-- SUMMARY -->
|
||||||
|
|
||||||
Major new features including serial connections, Tailscale/WireGuard support, HashiCorp Vault SSH auth, Bitwarden SSH agent, WebAuthn passkeys, Podman support, a new grid-based dashboard, host metrics history with alerting, and much more.
|
Revamped RBAC/sharing, session recording & replay, Vault auth for monitors, API key host enrollment, Proxmox guest auto sync, database refactor, plus 30+ bug fixes across terminal, file manager, RDP/VNC, and auth. DO NOT DOWNGRADE FROM THIS VERSION.
|
||||||
|
|
||||||
<!-- /SUMMARY -->
|
<!-- /SUMMARY -->
|
||||||
|
|
||||||
@@ -12,70 +12,59 @@ https://youtu.be/c3UD4q2jW_8
|
|||||||
|
|
||||||
<!-- UPDATE_LOG -->
|
<!-- UPDATE_LOG -->
|
||||||
|
|
||||||
- Termix ID with a public handle, hosted public key resolver, and built-in CA for issuing SSH certificates
|
- Revamped RBAC/sharing system (new UI, all auth types and host protocols now supported)
|
||||||
- Serial connections support
|
- Complete admin control over user information (manage all users hosts, credentials, and snippets)
|
||||||
- Tailscale and WireGuard VPN host integration with status detection
|
- Support Vault auth for monitors
|
||||||
- HashiCorp Vault SSH signer authentication
|
- API key host enrollment endpoint
|
||||||
- Bitwarden SSH agent integration
|
- Allow pinned hosts with name sorting
|
||||||
- WebAuthn passkey authentication
|
- Session recording and replay
|
||||||
- Podman container runtime support alongside Docker
|
- Terminal font size shortcuts (ctrl + / -)
|
||||||
- SSH agent forwarding support across all SSH features
|
- Open File Manager to tab right-click menu
|
||||||
- New grid and widget-based dashboard homepage
|
- Proxmox guest auto sync
|
||||||
- Grafana-style server stats history graphs
|
- Complete database refactor
|
||||||
- Alert system with ntfy and webhook notification support
|
- 30-day donation reminder and new donation milestones that support research: (donate.termix.site)
|
||||||
- Host temperature metrics card
|
- Improve site performance with cache and poll pauses
|
||||||
- App fullscreen mode
|
- Save quick connect sessions as hosts
|
||||||
- External editor support for file manager (desktop app)
|
|
||||||
- Safe host sharing export
|
|
||||||
- SSH credential password fallback for key-based auth
|
|
||||||
- Open all sessions in a folder at once
|
|
||||||
- Custom terminal theme color support
|
|
||||||
- Custom tunnel endpoints configuration
|
|
||||||
- GUACD_URL environment variable support
|
|
||||||
- App rail hover expansion setting
|
|
||||||
- Terminal font zoom with mouse wheel
|
|
||||||
- File manager terminals promoted to full tabs
|
|
||||||
- Donate button on dashboard
|
|
||||||
- PuTTY PPK SSH key support
|
|
||||||
- Confirmation dialog when closing active host connections
|
|
||||||
- Confirmation prompt before opening large files in the editor
|
|
||||||
- Cross-host file manager clipboard
|
|
||||||
- Prioritize host results in command palette search
|
|
||||||
- Retry autostart tunnel host fetches on failure
|
|
||||||
<!-- /UPDATE_LOG -->
|
<!-- /UPDATE_LOG -->
|
||||||
|
|
||||||
<!-- BUG_FIXES -->
|
<!-- BUG_FIXES -->
|
||||||
|
|
||||||
- SSH port connection bug
|
- Syntax highlighting artifacts
|
||||||
- VNC required argument handshake failure
|
- Filter dashboard status hosts
|
||||||
- Jump host SOCKS5 proxy selection using wrong proxy
|
- Persist dashboard service link changes
|
||||||
- Tunnel endpoint resolution failing in some configurations
|
- Snippet text overflow
|
||||||
- Direct tunnel skipping endpoint credential validation incorrectly
|
- Persist remote desktop credential auth
|
||||||
- Dashboard host routing ignoring protocol settings
|
- Guard language switching failures
|
||||||
- Dashboard service link creation broken
|
- Resolve tunnel source credentials
|
||||||
- File manager uploads failing with 400 error and missing schema migrations on upgrade
|
- Windows file delete command
|
||||||
- Large file manager uploads not chunked (chunked for files >=1.5GB)
|
- Artifact release checkout ref
|
||||||
- File uploads over 100MB failing due to ArrayBuffer browser limit
|
- Command palette escape in fullscreen
|
||||||
- File path case not preserved in file manager UI
|
- Alerts and audit log normalization
|
||||||
- File downloads unreliable in the desktop app
|
- macOS VNC protocol negotiation
|
||||||
- Tmux detection path handling incorrect
|
- Port knocking before SSH connect
|
||||||
- Host metrics startup polling incorrect
|
- Allow escape to close link confirmation
|
||||||
- TUI terminal output highlighting incorrect
|
- Prevent Electron modifier wheel zoom
|
||||||
- Runtime base path for auth callbacks incorrect
|
- Credential auth optional password
|
||||||
- Windows app icon unstable
|
- Retry transient terminal DNS lookups
|
||||||
- SSH heading syntax highlighting broken
|
- OIDC redirect forwarded port handling
|
||||||
- Terminal link dialog layering issue
|
- Preserve recent open tabs on startup
|
||||||
- Electron OIDC browser authentication failures
|
- Terminal font selection
|
||||||
- Proxmox import auth fallback not working
|
- Poor font legibility in multiple places
|
||||||
- OIDC role credential shares not synced for OIDC users
|
- File manager uploads failing
|
||||||
- RDP connections requiring credentials when none are needed
|
- Tmux detection for non-POSTIX shells
|
||||||
- VNC authentication settings not persisted
|
- OPKSSH js-yaml ESM import
|
||||||
- Guacamole unicode token corruption
|
- Android Vietnamese IME input
|
||||||
- Guacamole websocket base path incorrect
|
- Firefox RDP clipboard paste
|
||||||
- Guacamole disconnect during startup crash
|
- Proxmox discovery over HTTPS
|
||||||
- Host metrics starting for non-SSH hosts
|
- External editor actions in file preview
|
||||||
- Sidebar host hover causing layout shift
|
- Firefox desktop OIDC callback
|
||||||
- Alert UI incorrectly applying Termix CSS and alert system failing to load
|
- Status checks through jump hosts
|
||||||
- Translation key incorrect for nav close action
|
- Restore sudo password auto fill settings
|
||||||
- PUID HTML ownership in Docker entrypoint
|
- Preserve file editor position on save
|
||||||
|
- Sync cloud preference storage mode
|
||||||
|
- Render RDP sessions at native pixel density
|
||||||
|
- Restore database import in embedded desktop mode
|
||||||
|
- Command autocomplete dropdown poor contrast
|
||||||
|
- Allow clipboard paste in key recording field
|
||||||
|
- Fix GitHub/google SSO "not defined" errors
|
||||||
<!-- /BUG_FIXES -->
|
<!-- /BUG_FIXES -->
|
||||||
|
|||||||
+3
-3
@@ -1,5 +1,5 @@
|
|||||||
# Stage 1: Install dependencies
|
# Stage 1: Install dependencies
|
||||||
FROM node:24-slim AS deps
|
FROM node:26-slim AS deps
|
||||||
WORKDIR /app
|
WORKDIR /app
|
||||||
|
|
||||||
RUN apt-get update && apt-get install -y python3 make g++ && rm -rf /var/lib/apt/lists/*
|
RUN apt-get update && apt-get install -y python3 make g++ && rm -rf /var/lib/apt/lists/*
|
||||||
@@ -36,7 +36,7 @@ RUN npm rebuild better-sqlite3
|
|||||||
RUN npm run build:backend
|
RUN npm run build:backend
|
||||||
|
|
||||||
# Stage 4: Production dependencies only
|
# Stage 4: Production dependencies only
|
||||||
FROM node:24-slim AS production-deps
|
FROM node:26-slim AS production-deps
|
||||||
WORKDIR /app
|
WORKDIR /app
|
||||||
|
|
||||||
RUN apt-get update && apt-get install -y python3 make g++ && rm -rf /var/lib/apt/lists/*
|
RUN apt-get update && apt-get install -y python3 make g++ && rm -rf /var/lib/apt/lists/*
|
||||||
@@ -53,7 +53,7 @@ RUN npm ci --omit=dev --ignore-scripts && \
|
|||||||
npm cache clean --force
|
npm cache clean --force
|
||||||
|
|
||||||
# Stage 5: Final optimized image
|
# Stage 5: Final optimized image
|
||||||
FROM node:24-slim
|
FROM node:26-slim
|
||||||
WORKDIR /app
|
WORKDIR /app
|
||||||
|
|
||||||
ENV DATA_DIR=/app/data \
|
ENV DATA_DIR=/app/data \
|
||||||
|
|||||||
@@ -12,6 +12,8 @@ services:
|
|||||||
environment:
|
environment:
|
||||||
PORT: "8080"
|
PORT: "8080"
|
||||||
NODE_ENV: development
|
NODE_ENV: development
|
||||||
|
GUACD_HOST: "guacd-dev"
|
||||||
|
GUACD_RECORDING_PATH: "/termix-data/session_recordings/guacamole"
|
||||||
depends_on:
|
depends_on:
|
||||||
- guacd-dev
|
- guacd-dev
|
||||||
networks:
|
networks:
|
||||||
@@ -21,6 +23,8 @@ services:
|
|||||||
image: guacamole/guacd:1.6.0
|
image: guacamole/guacd:1.6.0
|
||||||
container_name: guacd-dev
|
container_name: guacd-dev
|
||||||
restart: unless-stopped
|
restart: unless-stopped
|
||||||
|
volumes:
|
||||||
|
- termix-dev-data:/termix-data
|
||||||
networks:
|
networks:
|
||||||
- termix-dev-net
|
- termix-dev-net
|
||||||
|
|
||||||
|
|||||||
@@ -10,6 +10,7 @@ services:
|
|||||||
environment:
|
environment:
|
||||||
PORT: "8080"
|
PORT: "8080"
|
||||||
GUACD_HOST: "guacd"
|
GUACD_HOST: "guacd"
|
||||||
|
GUACD_RECORDING_PATH: "/termix-data/session_recordings/guacamole"
|
||||||
depends_on:
|
depends_on:
|
||||||
- guacd
|
- guacd
|
||||||
networks:
|
networks:
|
||||||
@@ -19,6 +20,8 @@ services:
|
|||||||
image: guacamole/guacd:1.6.0
|
image: guacamole/guacd:1.6.0
|
||||||
container_name: guacd
|
container_name: guacd
|
||||||
restart: unless-stopped
|
restart: unless-stopped
|
||||||
|
volumes:
|
||||||
|
- termix-data:/termix-data
|
||||||
networks:
|
networks:
|
||||||
- termix-net
|
- termix-net
|
||||||
|
|
||||||
|
|||||||
+16
-4
@@ -235,6 +235,18 @@ http {
|
|||||||
proxy_set_header X-Forwarded-Proto $scheme;
|
proxy_set_header X-Forwarded-Proto $scheme;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
location ~ ^/proxmox(/.*)?$ {
|
||||||
|
proxy_pass http://127.0.0.1:30001;
|
||||||
|
proxy_http_version 1.1;
|
||||||
|
proxy_set_header Host $http_host;
|
||||||
|
proxy_set_header X-Real-IP $remote_addr;
|
||||||
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||||
|
proxy_set_header X-Forwarded-Proto $proxy_x_forwarded_proto;
|
||||||
|
proxy_connect_timeout 60s;
|
||||||
|
proxy_send_timeout 120s;
|
||||||
|
proxy_read_timeout 120s;
|
||||||
|
}
|
||||||
|
|
||||||
location ~ ^/c2s-tunnel-presets(/.*)?$ {
|
location ~ ^/c2s-tunnel-presets(/.*)?$ {
|
||||||
proxy_pass http://127.0.0.1:30001;
|
proxy_pass http://127.0.0.1:30001;
|
||||||
proxy_http_version 1.1;
|
proxy_http_version 1.1;
|
||||||
@@ -433,8 +445,8 @@ http {
|
|||||||
proxy_set_header X-Real-IP $remote_addr;
|
proxy_set_header X-Real-IP $remote_addr;
|
||||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||||
proxy_set_header X-Forwarded-Proto $proxy_x_forwarded_proto;
|
proxy_set_header X-Forwarded-Proto $proxy_x_forwarded_proto;
|
||||||
proxy_set_header X-Forwarded-Port $server_port;
|
proxy_set_header X-Forwarded-Port $proxy_x_forwarded_port;
|
||||||
proxy_set_header X-Forwarded-Host $http_host;
|
proxy_set_header X-Forwarded-Host $proxy_x_forwarded_host;
|
||||||
|
|
||||||
proxy_read_timeout 86400s;
|
proxy_read_timeout 86400s;
|
||||||
proxy_send_timeout 86400s;
|
proxy_send_timeout 86400s;
|
||||||
@@ -676,8 +688,8 @@ http {
|
|||||||
proxy_set_header X-Real-IP $remote_addr;
|
proxy_set_header X-Real-IP $remote_addr;
|
||||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||||
proxy_set_header X-Forwarded-Proto $proxy_x_forwarded_proto;
|
proxy_set_header X-Forwarded-Proto $proxy_x_forwarded_proto;
|
||||||
proxy_set_header X-Forwarded-Port $server_port;
|
proxy_set_header X-Forwarded-Port $proxy_x_forwarded_port;
|
||||||
proxy_set_header X-Forwarded-Host $http_host;
|
proxy_set_header X-Forwarded-Host $proxy_x_forwarded_host;
|
||||||
|
|
||||||
proxy_read_timeout 86400s;
|
proxy_read_timeout 86400s;
|
||||||
proxy_send_timeout 86400s;
|
proxy_send_timeout 86400s;
|
||||||
|
|||||||
+4
-4
@@ -434,8 +434,8 @@ http {
|
|||||||
proxy_set_header X-Real-IP $remote_addr;
|
proxy_set_header X-Real-IP $remote_addr;
|
||||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||||
proxy_set_header X-Forwarded-Proto $proxy_x_forwarded_proto;
|
proxy_set_header X-Forwarded-Proto $proxy_x_forwarded_proto;
|
||||||
proxy_set_header X-Forwarded-Port $server_port;
|
proxy_set_header X-Forwarded-Port $proxy_x_forwarded_port;
|
||||||
proxy_set_header X-Forwarded-Host $http_host;
|
proxy_set_header X-Forwarded-Host $proxy_x_forwarded_host;
|
||||||
|
|
||||||
proxy_read_timeout 86400s;
|
proxy_read_timeout 86400s;
|
||||||
proxy_send_timeout 86400s;
|
proxy_send_timeout 86400s;
|
||||||
@@ -677,8 +677,8 @@ http {
|
|||||||
proxy_set_header X-Real-IP $remote_addr;
|
proxy_set_header X-Real-IP $remote_addr;
|
||||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||||
proxy_set_header X-Forwarded-Proto $proxy_x_forwarded_proto;
|
proxy_set_header X-Forwarded-Proto $proxy_x_forwarded_proto;
|
||||||
proxy_set_header X-Forwarded-Port $server_port;
|
proxy_set_header X-Forwarded-Port $proxy_x_forwarded_port;
|
||||||
proxy_set_header X-Forwarded-Host $http_host;
|
proxy_set_header X-Forwarded-Host $proxy_x_forwarded_host;
|
||||||
|
|
||||||
proxy_read_timeout 86400s;
|
proxy_read_timeout 86400s;
|
||||||
proxy_send_timeout 86400s;
|
proxy_send_timeout 86400s;
|
||||||
|
|||||||
@@ -31,12 +31,14 @@
|
|||||||
<a href="https://donate.termix.site/"><img alt="Donate" src="https://img.shields.io/badge/Donate-Support%20Termix-F39044?style=flat&labelColor=1a1a1a" /></a>
|
<a href="https://donate.termix.site/"><img alt="Donate" src="https://img.shields.io/badge/Donate-Support%20Termix-F39044?style=flat&labelColor=1a1a1a" /></a>
|
||||||
</p>
|
</p>
|
||||||
|
|
||||||
|
<p>
|
||||||
|
<a href="https://donate.termix.site/"><img alt="Donations this month" src="https://img.shields.io/badge/dynamic/json?style=for-the-badge&label=Donations%20this%20month&query=%24.fiatTotal&prefix=%24&url=https%3A%2F%2Ftermix.site%2Fdonation-snapshot.json&color=F39044&labelColor=1a1a1a" /></a>
|
||||||
|
</p>
|
||||||
|
|
||||||
<br />
|
<br />
|
||||||
|
|
||||||
Termix مجاني ومفتوح المصدر. إذا وجدته مفيدًا، فكّر في [التبرع](https://donate.termix.site/) للمساعدة في تغطية تكاليف الخادم ووقت التطوير.
|
Termix مجاني ومفتوح المصدر. إذا وجدته مفيدًا، فكّر في [التبرع](https://donate.termix.site/) للمساعدة في تغطية تكاليف الخادم ووقت التطوير.
|
||||||
|
|
||||||
<a href="https://donate.termix.site/"><img src="../repo-images/donation-goal.svg" alt="Monthly donation goal" /></a>
|
|
||||||
|
|
||||||
<br />
|
<br />
|
||||||
|
|
||||||
<img src="../repo-images/Termix Header.png" alt="Termix Banner" width="900" />
|
<img src="../repo-images/Termix Header.png" alt="Termix Banner" width="900" />
|
||||||
@@ -81,13 +83,13 @@ Termix هي منصة مفتوحة المصدر ومجانية للأبد وذا
|
|||||||
<td width="50%" valign="top">
|
<td width="50%" valign="top">
|
||||||
|
|
||||||
**إدارة أنفاق SSH:**
|
**إدارة أنفاق SSH:**
|
||||||
إنشاء وإدارة أنفاق SSH بين الخوادم مع إعادة الاتصال التلقائي ومراقبة الحالة وإعادة التوجيه المحلي أو البعيد أو SOCKS الديناميكي. يتم تخزين إعدادات نفق العميل-المكتبي إلى السيرفر محلياً لكل تثبيت مكتبي؛ يمكن حفظ لقطات C2S الاختيارية على الخادم وإعادة تسميتها وتحميلها أو حذفها لنقل تكوين النفق المحلي بين العملاء.
|
إنشاء وإدارة أنفاق SSH بين الخوادم مع إعادة الاتصال التلقائي ومراقبة الحالة وإعادة التوجيه المحلي أو البعيد أو SOCKS الديناميكي. يتم تخزين إعدادات نفق العميل-المكتبي إلى السيرفر محلياً لكل تثبيت مكتبي، ويمكن حفظ لقطات C2S الاختيارية على الخادم وإعادة تسميتها وتحميلها أو حذفها عندما تريد نقل تكوين النفق المحلي بين العملاء.
|
||||||
|
|
||||||
</td>
|
</td>
|
||||||
<td width="50%" valign="top">
|
<td width="50%" valign="top">
|
||||||
|
|
||||||
**مدير الملفات عن بُعد:**
|
**مدير الملفات عن بُعد:**
|
||||||
إدارة الملفات مباشرة على الخوادم البعيدة مع دعم عرض وتحرير الكود والصور والصوت والفيديو. رفع وتنزيل وإعادة تسمية وحذف ونقل الملفات بسلاسة مع دعم sudo.
|
إدارة الملفات مباشرة على الخوادم البعيدة مع دعم عرض وتحرير الكود والصور والصوت والفيديو. رفع وتنزيل وإعادة تسمية وحذف ونقل الملفات بسلاسة مع دعم sudo. يتضمن دعم نقل الملفات من خادم إلى آخر.
|
||||||
|
|
||||||
</td>
|
</td>
|
||||||
</tr>
|
</tr>
|
||||||
@@ -109,13 +111,13 @@ Termix هي منصة مفتوحة المصدر ومجانية للأبد وذا
|
|||||||
<td width="50%" valign="top">
|
<td width="50%" valign="top">
|
||||||
|
|
||||||
**مقاييس المضيف:**
|
**مقاييس المضيف:**
|
||||||
عرض استخدام المعالج والذاكرة والقرص والشبكة ووقت التشغيل ومعلومات النظام وجدار الحماية ومراقب المنافذ وعارض السجلات والمستخدمين/الصلاحيات والشهادات وغيرها الكثير، تعمل على معظم الخوادم المبنية على Linux.
|
عرض استخدام المعالج والذاكرة والقرص والشبكة ووقت التشغيل ومعلومات النظام وجدار الحماية ومراقب المنافذ وعارض السجلات والمستخدمين/الصلاحيات والشهادات وغيرها الكثير، تعمل على معظم الخوادم المبنية على Linux. يتضمن رسوم بيانية تاريخية زمنية السلسلة وتنبيهات قائمة على الحدود مع دعم ntfy والـ webhook.
|
||||||
|
|
||||||
</td>
|
</td>
|
||||||
<td width="50%" valign="top">
|
<td width="50%" valign="top">
|
||||||
|
|
||||||
**مصادقة المستخدمين:**
|
**مصادقة المستخدمين:**
|
||||||
إدارة آمنة للمستخدمين مع ضوابط إدارية ودعم OIDC/LDAP/SSO (مع التحكم في الوصول) و 2FA (TOTP). عرض جلسات المستخدمين النشطة عبر جميع المنصات وإلغاء الصلاحيات. ربط حسابات OIDC/المحلية معاً. عرض سجل تدقيق لجميع إجراءات المستخدمين.
|
إدارة آمنة للمستخدمين مع ضوابط إدارية (يمكن تعديل معلومات المستخدمين الآخرين) ودعم OIDC/LDAP/SSO (مع التحكم في الوصول) و 2FA (TOTP) ودعم مفاتيح المرور (WebAuthn). عرض جلسات المستخدمين النشطة عبر جميع المنصات وإلغاء الصلاحيات. ربط حسابات OIDC/المحلية معاً. عرض سجل تدقيق لجميع إجراءات المستخدمين.
|
||||||
|
|
||||||
</td>
|
</td>
|
||||||
</tr>
|
</tr>
|
||||||
@@ -128,8 +130,8 @@ Termix هي منصة مفتوحة المصدر ومجانية للأبد وذا
|
|||||||
</td>
|
</td>
|
||||||
<td width="50%" valign="top">
|
<td width="50%" valign="top">
|
||||||
|
|
||||||
**RBAC:**
|
**RBAC/المشاركة:**
|
||||||
إنشاء الأدوار ومشاركة المضيفات عبر المستخدمين/الأدوار.
|
إنشاء الأدوار ومشاركة المضيفات عبر المستخدمين/الأدوار. يدعم جميع أنواع المصادقة وجميع بروتوكولات المضيف.
|
||||||
|
|
||||||
</td>
|
</td>
|
||||||
</tr>
|
</tr>
|
||||||
@@ -206,7 +208,8 @@ Termix هي منصة مفتوحة المصدر ومجانية للأبد وذا
|
|||||||
- **الاتصال السريع** - الاتصال بخادم دون الحاجة إلى حفظ بيانات الاتصال
|
- **الاتصال السريع** - الاتصال بخادم دون الحاجة إلى حفظ بيانات الاتصال
|
||||||
- **لوحة الأوامر** - اضغط مرتين على Shift الأيسر للوصول السريع إلى اتصالات SSH باستخدام لوحة المفاتيح
|
- **لوحة الأوامر** - اضغط مرتين على Shift الأيسر للوصول السريع إلى اتصالات SSH باستخدام لوحة المفاتيح
|
||||||
- **تكامل Proxmox** - إضافة المضيفات تلقائياً إلى Termix من نسخة Proxmox الخاصة بك
|
- **تكامل Proxmox** - إضافة المضيفات تلقائياً إلى Termix من نسخة Proxmox الخاصة بك
|
||||||
- **ميزات SSH الغنية** - دعم مضيفات القفز، Warpgate، الاتصالات المبنية على TOTP، SOCKS5، التحقق من مفتاح المضيف، الملء التلقائي لكلمة المرور، [OPKSSH](https://github.com/openpubkey/opkssh)، tmux، port knocking، تسجيل الطرفية، إلخ.
|
- **ميزات SSH الغنية** - دعم مضيفات القفز، Warpgate، الاتصالات المبنية على TOTP، SOCKS5، التحقق من مفتاح المضيف، الملء التلقائي لكلمة المرور، [OPKSSH](https://github.com/openpubkey/opkssh)، tmux، port knocking، تسجيل الطرفية، إعادة توجيه وكيل SSH، وكيل Bitwarden SSH، توقيع SSH عبر HashiCorp Vault، وغيرها.
|
||||||
|
- **Termix ID** - مكافئ لـ sshid.io مدمج في Termix. احصل على اسم مستخدم، انشر مفاتيح SSH العامة الخاصة بك على رابط محلل (resolver URL)، واستخدم هيئة إصدار شهادات (CA) مدمجة لإصدار شهادات SSH.
|
||||||
|
|
||||||
</details>
|
</details>
|
||||||
|
|
||||||
@@ -249,7 +252,9 @@ Termix هي منصة مفتوحة المصدر ومجانية للأبد وذا
|
|||||||
|
|
||||||
## التثبيت
|
## التثبيت
|
||||||
|
|
||||||
قم بزيارة [وثائق](https://docs.termix.site/install) Termix للحصول على مزيد من المعلومات حول كيفية تثبيت Termix على جميع المنصات. يمكنك الاطلاع على نموذج ملف Docker Compose هنا (يمكنك حذف guacd والشبكة إذا كنت لا تخطط لاستخدام ميزات سطح المكتب البعيد):
|
قم بزيارة [وثائق](https://docs.termix.site/install) Termix للحصول على تعليمات التثبيت الكاملة عبر جميع المنصات.
|
||||||
|
|
||||||
|
نموذج ملف Docker Compose (يمكنك حذف `guacd` والشبكة إذا كنت لا تخطط لاستخدام ميزات سطح المكتب البعيد):
|
||||||
|
|
||||||
```yaml
|
```yaml
|
||||||
services:
|
services:
|
||||||
@@ -290,9 +295,59 @@ networks:
|
|||||||
|
|
||||||
## التبرع
|
## التبرع
|
||||||
|
|
||||||
Termix مجاني ومفتوح المصدر. إذا وجدته مفيدًا، فكّر في [التبرع](https://donate.termix.site/) للمساعدة في تغطية تكاليف الخادم ووقت التطوير.
|
Termix مجاني ومفتوح المصدر بدون اشتراكات أو خطط مدفوعة. إذا وجدته مفيدًا، فكّر في التبرع للمساعدة في تغطية تكاليف الخادم والنطاقات ووقت التطوير. تساعد التبرعات أيضاً في تمويل الوقت اللازم للبحث وتعلم ما هو مطلوب لبناء ميزات مثل SAML و Kubernetes ودعم الوكلاء (Agent). تابع التقدم وتبرع أدناه.
|
||||||
|
|
||||||
<a href="https://donate.termix.site/"><img src="../repo-images/donation-goal.svg" alt="Monthly donation goal" /></a>
|
[تبرع](https://donate.termix.site/)
|
||||||
|
|
||||||
|
<br />
|
||||||
|
|
||||||
|
## الرعاة
|
||||||
|
|
||||||
|
هل تريد إعلاناً مدفوعاً لدعم التطوير؟ راسلنا عبر البريد الإلكتروني [mail@termix.site](mailto:mail@termix.site).
|
||||||
|
|
||||||
|
<div align="center">
|
||||||
|
|
||||||
|
<br />
|
||||||
|
|
||||||
|
<a href="https://www.digitalocean.com/">
|
||||||
|
<img src="https://opensource.nyc3.cdn.digitaloceanspaces.com/attribution/assets/SVG/DO_Logo_horizontal_blue.svg" height="40" alt="DigitalOcean" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://crowdin.com/">
|
||||||
|
<img src="https://support.crowdin.com/assets/logos/core-logo/svg/crowdin-core-logo-cDark.svg" height="40" alt="Crowdin" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://www.blacksmith.sh/">
|
||||||
|
<img src="https://cdn.prod.website-files.com/681bfb0c9a4601bc6e288ec4/683ca9e2c5186757092611b8_e8cb22127df4da0811c4120a523722d2_logo-backsmith-wordmark-light.svg" height="40" alt="Blacksmith" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://www.cloudflare.com/">
|
||||||
|
<img src="https://sirv.sirv.com/website/screenshots/cloudflare/cloudflare-logo.png?w=300" height="40" alt="Cloudflare" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://tailscale.com/">
|
||||||
|
<img src="https://drive.google.com/uc?export=view&id=1lIxkJuX6M23bW-2FElhT0rQieTrzaVSL" height="40" alt="Tailscale" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://akamai.com/">
|
||||||
|
<img src="https://upload.wikimedia.org/wikipedia/commons/8/8b/Akamai_logo.svg" height="40" alt="Akamai" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://aws.amazon.com/">
|
||||||
|
<img src="https://upload.wikimedia.org/wikipedia/commons/thumb/9/93/Amazon_Web_Services_Logo.svg/960px-Amazon_Web_Services_Logo.svg.png" height="40" alt="AWS" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://rackgenius.com/">
|
||||||
|
<img src="https://rackgenius.com/rackgenius-logo.png" height="40" alt="Rack Genius" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
</div>
|
||||||
|
|
||||||
|
<br />
|
||||||
|
|
||||||
|
## الدعم
|
||||||
|
|
||||||
|
إذا كنت بحاجة إلى مساعدة أو ترغب في طلب ميزة لـ Termix، قم بزيارة صفحة [المشكلات](https://github.com/Termix-SSH/Support/issues)، وسجل الدخول، واضغط على `New Issue`. يرجى أن تكون مفصلاً قدر الإمكان في مشكلتك، ويُفضَّل كتابتها باللغة الإنجليزية. يمكنك أيضاً الانضمام إلى خادم [Discord](https://discord.gg/jVQGdvHDrf) وزيارة قناة الدعم، ومع ذلك قد تكون أوقات الاستجابة أطول.
|
||||||
|
|
||||||
<br />
|
<br />
|
||||||
|
|
||||||
@@ -356,50 +411,6 @@ Termix مجاني ومفتوح المصدر. إذا وجدته مفيدًا، ف
|
|||||||
|
|
||||||
<br />
|
<br />
|
||||||
|
|
||||||
## الرعاة
|
|
||||||
|
|
||||||
<div align="center">
|
|
||||||
|
|
||||||
<br />
|
|
||||||
|
|
||||||
<a href="https://www.digitalocean.com/">
|
|
||||||
<img src="https://opensource.nyc3.cdn.digitaloceanspaces.com/attribution/assets/SVG/DO_Logo_horizontal_blue.svg" height="40" alt="DigitalOcean" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://crowdin.com/">
|
|
||||||
<img src="https://support.crowdin.com/assets/logos/core-logo/svg/crowdin-core-logo-cDark.svg" height="40" alt="Crowdin" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://www.blacksmith.sh/">
|
|
||||||
<img src="https://cdn.prod.website-files.com/681bfb0c9a4601bc6e288ec4/683ca9e2c5186757092611b8_e8cb22127df4da0811c4120a523722d2_logo-backsmith-wordmark-light.svg" height="40" alt="Blacksmith" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://www.cloudflare.com/">
|
|
||||||
<img src="https://sirv.sirv.com/website/screenshots/cloudflare/cloudflare-logo.png?w=300" height="40" alt="Cloudflare" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://tailscale.com/">
|
|
||||||
<img src="https://drive.google.com/uc?export=view&id=1lIxkJuX6M23bW-2FElhT0rQieTrzaVSL" height="40" alt="Tailscale" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://akamai.com/">
|
|
||||||
<img src="https://upload.wikimedia.org/wikipedia/commons/8/8b/Akamai_logo.svg" height="40" alt="Akamai" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://aws.amazon.com/">
|
|
||||||
<img src="https://upload.wikimedia.org/wikipedia/commons/thumb/9/93/Amazon_Web_Services_Logo.svg/960px-Amazon_Web_Services_Logo.svg.png" height="40" alt="AWS" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
</div>
|
|
||||||
|
|
||||||
<br />
|
|
||||||
|
|
||||||
## الدعم
|
|
||||||
|
|
||||||
إذا كنت بحاجة إلى مساعدة أو ترغب في طلب ميزة لـ Termix، قم بزيارة صفحة [المشكلات](https://github.com/Termix-SSH/Support/issues)، وسجل الدخول، واضغط على `New Issue`. يرجى أن تكون مفصلاً قدر الإمكان في مشكلتك، ويُفضَّل كتابتها باللغة الإنجليزية. يمكنك أيضاً الانضمام إلى خادم [Discord](https://discord.gg/jVQGdvHDrf) وزيارة قناة الدعم، ومع ذلك قد تكون أوقات الاستجابة أطول.
|
|
||||||
|
|
||||||
<br />
|
|
||||||
|
|
||||||
## الترخيص
|
## الترخيص
|
||||||
|
|
||||||
موزع بموجب رخصة Apache License الإصدار 2.0. راجع ملف `LICENSE` لمزيد من المعلومات.
|
موزع بموجب رخصة Apache License الإصدار 2.0. راجع ملف `LICENSE` لمزيد من المعلومات.
|
||||||
@@ -31,12 +31,14 @@
|
|||||||
<a href="https://donate.termix.site/"><img alt="Donate" src="https://img.shields.io/badge/Donate-Support%20Termix-F39044?style=flat&labelColor=1a1a1a" /></a>
|
<a href="https://donate.termix.site/"><img alt="Donate" src="https://img.shields.io/badge/Donate-Support%20Termix-F39044?style=flat&labelColor=1a1a1a" /></a>
|
||||||
</p>
|
</p>
|
||||||
|
|
||||||
|
<p>
|
||||||
|
<a href="https://donate.termix.site/"><img alt="Donations this month" src="https://img.shields.io/badge/dynamic/json?style=for-the-badge&label=Donations%20this%20month&query=%24.fiatTotal&prefix=%24&url=https%3A%2F%2Ftermix.site%2Fdonation-snapshot.json&color=F39044&labelColor=1a1a1a" /></a>
|
||||||
|
</p>
|
||||||
|
|
||||||
<br />
|
<br />
|
||||||
|
|
||||||
Termix 免费且开源。如果您觉得它有用，请考虑[捐赠](https://donate.termix.site/)以帮助支付服务器费用和开发时间。
|
Termix 免费且开源。如果您觉得它有用，请考虑[捐赠](https://donate.termix.site/)以帮助支付服务器费用和开发时间。
|
||||||
|
|
||||||
<a href="https://donate.termix.site/"><img src="../repo-images/donation-goal.svg" alt="Monthly donation goal" /></a>
|
|
||||||
|
|
||||||
<br />
|
<br />
|
||||||
|
|
||||||
<img src="../repo-images/Termix Header.png" alt="Termix Banner" width="900" />
|
<img src="../repo-images/Termix Header.png" alt="Termix Banner" width="900" />
|
||||||
@@ -56,7 +58,7 @@ Termix 免费且开源。如果您觉得它有用，请考虑[捐赠](https://do
|
|||||||
|
|
||||||
## 概览
|
## 概览
|
||||||
|
|
||||||
Termix 是一个开源、永久免费、自托管的一体化服务器管理平台。它提供了一个多平台解决方案，通过一个直观的界面管理你的服务器和基础设施。Termix 提供 SSH 终端访问、远程桌面控制（RDP、VNC、Telnet）、SSH 隧道功能、远程 SSH 文件管理以及许多其他工具。Termix 是适用于所有平台的完美免费自托管 Termius 替代品。
|
Termix 是一个开源、永久免费、自托管的一体化服务器管理平台。它提供了一个多平台解决方案，通过一个直观的界面管理你的服务器和基础设施。Termix 提供 SSH 终端访问、远程桌面控制（RDP、VNC、Telnet）、SSH 隧道功能、远程文件管理以及许多其他工具。Termix 是适用于所有平台的完美免费自托管 Termius 替代品。
|
||||||
|
|
||||||
<br />
|
<br />
|
||||||
|
|
||||||
@@ -87,7 +89,7 @@ Termix 是一个开源、永久免费、自托管的一体化服务器管理平
|
|||||||
<td width="50%" valign="top">
|
<td width="50%" valign="top">
|
||||||
|
|
||||||
**远程文件管理器:**
|
**远程文件管理器:**
|
||||||
直接在远程服务器上管理文件，支持查看和编辑代码、图像、音频和视频。支持通过 sudo 无缝上传、下载、重命名、删除和移动文件。
|
直接在远程服务器上管理文件，支持查看和编辑代码、图像、音频和视频。支持通过 sudo 无缝上传、下载、重命名、删除和移动文件。包括支持在服务器之间移动文件。
|
||||||
|
|
||||||
</td>
|
</td>
|
||||||
</tr>
|
</tr>
|
||||||
@@ -109,13 +111,13 @@ Termix 是一个开源、永久免费、自托管的一体化服务器管理平
|
|||||||
<td width="50%" valign="top">
|
<td width="50%" valign="top">
|
||||||
|
|
||||||
**主机指标:**
|
**主机指标:**
|
||||||
在大多数基于 Linux 的服务器上查看 CPU、内存、磁盘使用情况、网络、运行时间、系统信息、防火墙、端口监控、日志查看器、用户/权限、证书等更多信息。
|
在大多数基于 Linux 的服务器上查看 CPU、内存、磁盘使用情况、网络、运行时间、系统信息、防火墙、端口监控、日志查看器、用户/权限、证书等更多信息。包括时间序列历史图表和支持 ntfy 与 webhook 的阈值告警。
|
||||||
|
|
||||||
</td>
|
</td>
|
||||||
<td width="50%" valign="top">
|
<td width="50%" valign="top">
|
||||||
|
|
||||||
**用户认证:**
|
**用户认证:**
|
||||||
安全的用户管理，具有管理员控制、OIDC/LDAP/SSO（带访问控制）和 2FA (TOTP) 支持。查看所有平台上的活动用户会话并撤销权限。将您的 OIDC/本地账户链接在一起。查看所有用户操作的审计日志。
|
安全的用户管理，具有管理员控制（可编辑其他用户信息）和 OIDC/LDAP/SSO（带访问控制）、2FA (TOTP) 以及通行密钥（WebAuthn）支持。查看所有平台上的活动用户会话并撤销权限。将您的 OIDC/本地账户链接在一起。查看所有用户操作的审计日志。
|
||||||
|
|
||||||
</td>
|
</td>
|
||||||
</tr>
|
</tr>
|
||||||
@@ -128,8 +130,8 @@ Termix 是一个开源、永久免费、自托管的一体化服务器管理平
|
|||||||
</td>
|
</td>
|
||||||
<td width="50%" valign="top">
|
<td width="50%" valign="top">
|
||||||
|
|
||||||
**RBAC:**
|
**RBAC/共享:**
|
||||||
创建角色并在用户/角色之间共享主机。
|
创建角色并在用户/角色之间共享主机。支持所有认证类型和所有主机协议。
|
||||||
|
|
||||||
</td>
|
</td>
|
||||||
</tr>
|
</tr>
|
||||||
@@ -206,7 +208,8 @@ Termix 是一个开源、永久免费、自托管的一体化服务器管理平
|
|||||||
- **快速连接** - 无需保存连接数据即可连接到服务器
|
- **快速连接** - 无需保存连接数据即可连接到服务器
|
||||||
- **命令面板** - 双击左 Shift 键即可通过键盘快速访问 SSH 连接
|
- **命令面板** - 双击左 Shift 键即可通过键盘快速访问 SSH 连接
|
||||||
- **Proxmox 集成** - 从您的 Proxmox 实例自动将主机添加到 Termix
|
- **Proxmox 集成** - 从您的 Proxmox 实例自动将主机添加到 Termix
|
||||||
- **丰富的 SSH 功能** - 支持跳转主机、Warpgate、基于 TOTP 的连接、SOCKS5、主机密钥验证、密码自动填充、[OPKSSH](https://github.com/openpubkey/opkssh)、tmux、端口敲击、终端日志记录等
|
- **丰富的 SSH 功能** - 支持跳转主机、Warpgate、基于 TOTP 的连接、SOCKS5、主机密钥验证、密码自动填充、[OPKSSH](https://github.com/openpubkey/opkssh)、tmux、端口敲击、终端日志记录、SSH 代理转发、Bitwarden SSH 代理、HashiCorp Vault SSH 签名等
|
||||||
|
- **Termix ID** - 内置于 Termix 中的 sshid.io 等效功能。认领一个用户名，在解析 URL 上发布您的公开 SSH 密钥，并使用内置 CA 签发 SSH 证书。
|
||||||
|
|
||||||
</details>
|
</details>
|
||||||
|
|
||||||
@@ -249,7 +252,9 @@ Termix 是一个开源、永久免费、自托管的一体化服务器管理平
|
|||||||
|
|
||||||
## 安装
|
## 安装
|
||||||
|
|
||||||
访问 [Termix 文档](https://docs.termix.site/install) 了解有关如何在所有平台上安装 Termix 的更多信息。此外，这里有一个示例 Docker Compose 文件（如果您不打算使用远程桌面功能，可以省略 guacd 和网络部分）：
|
访问 [Termix 文档](https://docs.termix.site/install) 了解有关如何在所有平台上安装 Termix 的完整说明。
|
||||||
|
|
||||||
|
示例 Docker Compose 文件（如果您不打算使用远程桌面功能，可以省略 `guacd` 和网络部分）：
|
||||||
|
|
||||||
```yaml
|
```yaml
|
||||||
services:
|
services:
|
||||||
@@ -290,9 +295,59 @@ networks:
|
|||||||
|
|
||||||
## 捐赠
|
## 捐赠
|
||||||
|
|
||||||
Termix 免费且开源。如果您觉得它有用，请考虑[捐赠](https://donate.termix.site/)以帮助支付服务器费用和开发时间。
|
Termix 免费且开源，没有订阅或付费方案。如果您觉得它有用，请考虑捐赠以帮助支付服务器费用、域名和开发时间。捐赠还有助于资助研究和学习构建 SAML、Kubernetes 和 Agent 支持等功能所需的时间。在下方追踪进度并进行捐赠。
|
||||||
|
|
||||||
<a href="https://donate.termix.site/"><img src="../repo-images/donation-goal.svg" alt="Monthly donation goal" /></a>
|
[捐赠](https://donate.termix.site/)
|
||||||
|
|
||||||
|
<br />
|
||||||
|
|
||||||
|
## 赞助商
|
||||||
|
|
||||||
|
有意通过付费展示位置支持开发吗？请发送邮件至 [mail@termix.site](mailto:mail@termix.site)。
|
||||||
|
|
||||||
|
<div align="center">
|
||||||
|
|
||||||
|
<br />
|
||||||
|
|
||||||
|
<a href="https://www.digitalocean.com/">
|
||||||
|
<img src="https://opensource.nyc3.cdn.digitaloceanspaces.com/attribution/assets/SVG/DO_Logo_horizontal_blue.svg" height="40" alt="DigitalOcean" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://crowdin.com/">
|
||||||
|
<img src="https://support.crowdin.com/assets/logos/core-logo/svg/crowdin-core-logo-cDark.svg" height="40" alt="Crowdin" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://www.blacksmith.sh/">
|
||||||
|
<img src="https://cdn.prod.website-files.com/681bfb0c9a4601bc6e288ec4/683ca9e2c5186757092611b8_e8cb22127df4da0811c4120a523722d2_logo-backsmith-wordmark-light.svg" height="40" alt="Blacksmith" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://www.cloudflare.com/">
|
||||||
|
<img src="https://sirv.sirv.com/website/screenshots/cloudflare/cloudflare-logo.png?w=300" height="40" alt="Cloudflare" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://tailscale.com/">
|
||||||
|
<img src="https://drive.google.com/uc?export=view&id=1lIxkJuX6M23bW-2FElhT0rQieTrzaVSL" height="40" alt="Tailscale" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://akamai.com/">
|
||||||
|
<img src="https://upload.wikimedia.org/wikipedia/commons/8/8b/Akamai_logo.svg" height="40" alt="Akamai" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://aws.amazon.com/">
|
||||||
|
<img src="https://upload.wikimedia.org/wikipedia/commons/thumb/9/93/Amazon_Web_Services_Logo.svg/960px-Amazon_Web_Services_Logo.svg.png" height="40" alt="AWS" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://rackgenius.com/">
|
||||||
|
<img src="https://rackgenius.com/rackgenius-logo.png" height="40" alt="Rack Genius" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
</div>
|
||||||
|
|
||||||
|
<br />
|
||||||
|
|
||||||
|
## 支持
|
||||||
|
|
||||||
|
如果您需要 Termix 的帮助或想要请求功能，请访问 [Issues](https://github.com/Termix-SSH/Support/issues) 页面，登录并点击 `New Issue`。请尽可能详细地描述您的问题，建议使用英语。您也可以加入 [Discord](https://discord.gg/jVQGdvHDrf) 服务器并访问支持频道，但响应时间可能较长。
|
||||||
|
|
||||||
<br />
|
<br />
|
||||||
|
|
||||||
@@ -356,50 +411,6 @@ Termix 免费且开源。如果您觉得它有用，请考虑[捐赠](https://do
|
|||||||
|
|
||||||
<br />
|
<br />
|
||||||
|
|
||||||
## 赞助商
|
|
||||||
|
|
||||||
<div align="center">
|
|
||||||
|
|
||||||
<br />
|
|
||||||
|
|
||||||
<a href="https://www.digitalocean.com/">
|
|
||||||
<img src="https://opensource.nyc3.cdn.digitaloceanspaces.com/attribution/assets/SVG/DO_Logo_horizontal_blue.svg" height="40" alt="DigitalOcean" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://crowdin.com/">
|
|
||||||
<img src="https://support.crowdin.com/assets/logos/core-logo/svg/crowdin-core-logo-cDark.svg" height="40" alt="Crowdin" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://www.blacksmith.sh/">
|
|
||||||
<img src="https://cdn.prod.website-files.com/681bfb0c9a4601bc6e288ec4/683ca9e2c5186757092611b8_e8cb22127df4da0811c4120a523722d2_logo-backsmith-wordmark-light.svg" height="40" alt="Blacksmith" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://www.cloudflare.com/">
|
|
||||||
<img src="https://sirv.sirv.com/website/screenshots/cloudflare/cloudflare-logo.png?w=300" height="40" alt="Cloudflare" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://tailscale.com/">
|
|
||||||
<img src="https://drive.google.com/uc?export=view&id=1lIxkJuX6M23bW-2FElhT0rQieTrzaVSL" height="40" alt="Tailscale" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://akamai.com/">
|
|
||||||
<img src="https://upload.wikimedia.org/wikipedia/commons/8/8b/Akamai_logo.svg" height="40" alt="Akamai" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://aws.amazon.com/">
|
|
||||||
<img src="https://upload.wikimedia.org/wikipedia/commons/thumb/9/93/Amazon_Web_Services_Logo.svg/960px-Amazon_Web_Services_Logo.svg.png" height="40" alt="AWS" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
</div>
|
|
||||||
|
|
||||||
<br />
|
|
||||||
|
|
||||||
## 支持
|
|
||||||
|
|
||||||
如果您需要 Termix 的帮助或想要请求功能，请访问 [Issues](https://github.com/Termix-SSH/Support/issues) 页面，登录并点击 `New Issue`。请尽可能详细地描述您的问题，建议使用英语。您也可以加入 [Discord](https://discord.gg/jVQGdvHDrf) 服务器并访问支持频道，但响应时间可能较长。
|
|
||||||
|
|
||||||
<br />
|
|
||||||
|
|
||||||
## 许可证
|
## 许可证
|
||||||
|
|
||||||
根据 Apache License Version 2.0 发布。更多信息请参见 `LICENSE`。
|
根据 Apache License Version 2.0 发布。更多信息请参见 `LICENSE`。
|
||||||
@@ -31,12 +31,14 @@
|
|||||||
<a href="https://donate.termix.site/"><img alt="Donate" src="https://img.shields.io/badge/Donate-Support%20Termix-F39044?style=flat&labelColor=1a1a1a" /></a>
|
<a href="https://donate.termix.site/"><img alt="Donate" src="https://img.shields.io/badge/Donate-Support%20Termix-F39044?style=flat&labelColor=1a1a1a" /></a>
|
||||||
</p>
|
</p>
|
||||||
|
|
||||||
|
<p>
|
||||||
|
<a href="https://donate.termix.site/"><img alt="Donations this month" src="https://img.shields.io/badge/dynamic/json?style=for-the-badge&label=Donations%20this%20month&query=%24.fiatTotal&prefix=%24&url=https%3A%2F%2Ftermix.site%2Fdonation-snapshot.json&color=F39044&labelColor=1a1a1a" /></a>
|
||||||
|
</p>
|
||||||
|
|
||||||
<br />
|
<br />
|
||||||
|
|
||||||
Termix ist kostenlos und Open Source. Wenn Sie es nützlich finden, erwägen Sie eine [Spende](https://donate.termix.site/), um Serverkosten und Entwicklungszeit zu decken.
|
Termix ist kostenlos und Open Source. Wenn Sie es nützlich finden, erwägen Sie eine [Spende](https://donate.termix.site/), um Serverkosten und Entwicklungszeit zu decken.
|
||||||
|
|
||||||
<a href="https://donate.termix.site/"><img src="../repo-images/donation-goal.svg" alt="Monthly donation goal" /></a>
|
|
||||||
|
|
||||||
<br />
|
<br />
|
||||||
|
|
||||||
<img src="../repo-images/Termix Header.png" alt="Termix Banner" width="900" />
|
<img src="../repo-images/Termix Header.png" alt="Termix Banner" width="900" />
|
||||||
@@ -56,7 +58,7 @@ Termix ist kostenlos und Open Source. Wenn Sie es nützlich finden, erwägen Sie
|
|||||||
|
|
||||||
## Uberblick
|
## Uberblick
|
||||||
|
|
||||||
Termix ist eine quelloffene, dauerhaft kostenlose, selbst gehostete All-in-One-Serververwaltungsplattform. Sie bietet eine plattformubergreifende Losung zur Verwaltung Ihrer Server und Infrastruktur uber eine einzige, intuitive Oberflache. Termix bietet SSH-Terminalzugriff, Remote-Desktop-Steuerung (RDP, VNC, Telnet), SSH-Tunneling-Funktionen, Remote-SSH-Dateiverwaltung und viele weitere Werkzeuge. Termix ist die perfekte kostenlose und selbst gehostete Alternative zu Termius, verfugbar fur alle Plattformen.
|
Termix ist eine quelloffene, dauerhaft kostenlose, selbst gehostete All-in-One-Serververwaltungsplattform. Sie bietet eine plattformubergreifende Losung zur Verwaltung Ihrer Server und Infrastruktur uber eine einzige, intuitive Oberflache. Termix bietet SSH-Terminalzugriff, Remote-Desktop-Steuerung (RDP, VNC, Telnet), SSH-Tunneling-Funktionen, Remote-Dateiverwaltung und viele weitere Werkzeuge. Termix ist die perfekte kostenlose und selbst gehostete Alternative zu Termius, verfugbar fur alle Plattformen.
|
||||||
|
|
||||||
<br />
|
<br />
|
||||||
|
|
||||||
@@ -81,13 +83,13 @@ RDP-, VNC- und Telnet-Unterstutzung uber den Browser mit vollstandiger Anpassung
|
|||||||
<td width="50%" valign="top">
|
<td width="50%" valign="top">
|
||||||
|
|
||||||
**SSH-Tunnelverwaltung:**
|
**SSH-Tunnelverwaltung:**
|
||||||
Erstellen und verwalten Sie Server-zu-Server-SSH-Tunnel mit automatischer Wiederverbindung und Gesundheitsuberwachung sowie lokaler, entfernter oder dynamischer SOCKS-Weiterleitung. Desktop-Client-zu-Server-Tunneleinstellungen werden lokal pro Desktop-Installation gespeichert, optionale C2S-Preset-Snapshots konnen auf dem Server gespeichert, umbenannt, geladen oder geloscht werden, um eine lokale Tunnelkonfiguration zwischen Clients zu ubertragen.
|
Erstellen und verwalten Sie Server-zu-Server-SSH-Tunnel mit automatischer Wiederverbindung, Gesundheitsuberwachung sowie lokaler, entfernter oder dynamischer SOCKS-Weiterleitung. Desktop-Client-zu-Server-Tunneleinstellungen werden lokal pro Desktop-Installation gespeichert, optionale C2S-Preset-Snapshots konnen auf dem Server gespeichert, umbenannt, geladen oder geloscht werden, wenn Sie eine lokale Tunnelkonfiguration zwischen Clients ubertragen mochten.
|
||||||
|
|
||||||
</td>
|
</td>
|
||||||
<td width="50%" valign="top">
|
<td width="50%" valign="top">
|
||||||
|
|
||||||
**Remote-Dateimanager:**
|
**Remote-Dateimanager:**
|
||||||
Verwalten Sie Dateien direkt auf Remote-Servern mit Unterstutzung fur das Anzeigen und Bearbeiten von Code, Bildern, Audio und Video. Laden Sie Dateien hoch, herunter, benennen Sie sie um, loschen oder verschieben Sie sie nahtlos mit Sudo-Unterstutzung.
|
Verwalten Sie Dateien direkt auf Remote-Servern mit Unterstutzung fur das Anzeigen und Bearbeiten von Code, Bildern, Audio und Video. Laden Sie Dateien hoch, herunter, benennen Sie sie um, loschen oder verschieben Sie sie nahtlos mit Sudo-Unterstutzung. Enthalt Unterstutzung fur das Verschieben von Dateien von Server zu Server.
|
||||||
|
|
||||||
</td>
|
</td>
|
||||||
</tr>
|
</tr>
|
||||||
@@ -109,13 +111,13 @@ Speichern, organisieren und verwalten Sie Ihre SSH-Verbindungen mit Tags und Ord
|
|||||||
<td width="50%" valign="top">
|
<td width="50%" valign="top">
|
||||||
|
|
||||||
**Host-Metriken:**
|
**Host-Metriken:**
|
||||||
CPU-, Arbeitsspeicher- und Festplattenauslastung, Netzwerk, Betriebszeit, Systeminformationen, Firewall, Port-Monitor, Log-Viewer, Benutzer/Berechtigungen, Zertifikate und vieles mehr auf den meisten Linux-basierten Servern anzeigen.
|
CPU-, Arbeitsspeicher- und Festplattenauslastung, Netzwerk, Betriebszeit, Systeminformationen, Firewall, Port-Monitor, Log-Viewer, Benutzer/Berechtigungen, Zertifikate und vieles mehr anzeigen, was auf den meisten Linux-basierten Servern funktioniert. Enthalt Zeitreihen-Verlaufsdiagramme und schwellenwertbasierte Warnmeldungen mit ntfy- und Webhook-Unterstutzung.
|
||||||
|
|
||||||
</td>
|
</td>
|
||||||
<td width="50%" valign="top">
|
<td width="50%" valign="top">
|
||||||
|
|
||||||
**Benutzerauthentifizierung:**
|
**Benutzerauthentifizierung:**
|
||||||
Sichere Benutzerverwaltung mit Admin-Kontrollen und OIDC-/LDAP-/SSO-Unterstutzung (mit Zugriffskontrolle) sowie 2FA (TOTP)-Unterstutzung. Aktive Benutzersitzungen uber alle Plattformen anzeigen und Berechtigungen widerrufen. OIDC-/Lokale Konten miteinander verknupfen. Audit-Protokoll aller Benutzeraktionen anzeigen.
|
Sichere Benutzerverwaltung mit Admin-Kontrollen (kann Informationen anderer Benutzer bearbeiten) und OIDC-/LDAP-/SSO-Unterstutzung (mit Zugriffskontrolle), 2FA (TOTP) und Passkey (WebAuthn)-Unterstutzung. Aktive Benutzersitzungen uber alle Plattformen anzeigen und Berechtigungen widerrufen. OIDC-/Lokale Konten miteinander verknupfen. Audit-Protokoll aller Benutzeraktionen anzeigen.
|
||||||
|
|
||||||
</td>
|
</td>
|
||||||
</tr>
|
</tr>
|
||||||
@@ -128,8 +130,8 @@ Gerate aus Ihrem Tailnet auflisten, um sie schnell als Hosts hinzuzufugen, und m
|
|||||||
</td>
|
</td>
|
||||||
<td width="50%" valign="top">
|
<td width="50%" valign="top">
|
||||||
|
|
||||||
**RBAC:**
|
**RBAC/Freigabe:**
|
||||||
Rollen erstellen und Hosts uber Benutzer/Rollen teilen.
|
Erstellen Sie Rollen und teilen Sie Hosts uber Benutzer/Rollen hinweg. Unterstutzt alle Authentifizierungstypen und alle Host-Protokolle.
|
||||||
|
|
||||||
</td>
|
</td>
|
||||||
</tr>
|
</tr>
|
||||||
@@ -206,7 +208,8 @@ Integrierte Unterstutzung fur ca. 30 Sprachen (verwaltet uber [Crowdin](https://
|
|||||||
- **Schnellverbindung** - Verbinden Sie sich mit einem Server, ohne die Verbindungsdaten speichern zu mussen
|
- **Schnellverbindung** - Verbinden Sie sich mit einem Server, ohne die Verbindungsdaten speichern zu mussen
|
||||||
- **Befehlspalette** - Doppeltippen Sie die linke Umschalttaste, um schnell auf SSH-Verbindungen mit Ihrer Tastatur zuzugreifen
|
- **Befehlspalette** - Doppeltippen Sie die linke Umschalttaste, um schnell auf SSH-Verbindungen mit Ihrer Tastatur zuzugreifen
|
||||||
- **Proxmox-Integration** - Automatisches Hinzufugen von Hosts zu Termix aus Ihrer Proxmox-Instanz
|
- **Proxmox-Integration** - Automatisches Hinzufugen von Hosts zu Termix aus Ihrer Proxmox-Instanz
|
||||||
- **SSH-Funktionsreich** - Unterstutzt Jump-Hosts, Warpgate, TOTP-basierte Verbindungen, SOCKS5, Host-Key-Verifizierung, automatisches Ausfullen von Passwortern, [OPKSSH](https://github.com/openpubkey/opkssh), tmux, Port Knocking, Terminal-Protokollierung usw.
|
- **SSH-Funktionsreich** - Unterstutzt Jump-Hosts, Warpgate, TOTP-basierte Verbindungen, SOCKS5, Host-Key-Verifizierung, automatisches Ausfullen von Passwortern, [OPKSSH](https://github.com/openpubkey/opkssh), tmux, Port Knocking, Terminal-Protokollierung, SSH-Agent-Forwarding, Bitwarden SSH-Agent, HashiCorp Vault SSH-Signierung und mehr.
|
||||||
|
- **Termix ID** - Ein sshid.io-Aquivalent, integriert in Termix. Beanspruchen Sie einen Handle, veroffentlichen Sie Ihre offentlichen SSH-Schlussel unter einer Resolver-URL und nutzen Sie eine integrierte CA zur Ausstellung von SSH-Zertifikaten.
|
||||||
|
|
||||||
</details>
|
</details>
|
||||||
|
|
||||||
@@ -249,7 +252,9 @@ Integrierte Unterstutzung fur ca. 30 Sprachen (verwaltet uber [Crowdin](https://
|
|||||||
|
|
||||||
## Installation
|
## Installation
|
||||||
|
|
||||||
Besuchen Sie die Termix-[Dokumentation](https://docs.termix.site/install) fur weitere Informationen zur Installation von Termix auf allen Plattformen. Alternativ finden Sie hier eine Docker Compose-Beispieldatei (Sie konnen guacd und das Netzwerk weglassen, wenn Sie keine Remote-Desktop-Funktionen nutzen mochten):
|
Besuchen Sie die [Termix-Dokumentation](https://docs.termix.site/install) fur vollstandige Installationsanleitungen fur alle Plattformen.
|
||||||
|
|
||||||
|
Beispiel einer Docker-Compose-Datei (Sie konnen `guacd` und das Netzwerk weglassen, wenn Sie keine Remote-Desktop-Funktionen nutzen mochten):
|
||||||
|
|
||||||
```yaml
|
```yaml
|
||||||
services:
|
services:
|
||||||
@@ -290,9 +295,59 @@ networks:
|
|||||||
|
|
||||||
## Spenden
|
## Spenden
|
||||||
|
|
||||||
Termix ist kostenlos und Open Source. Wenn Sie es nützlich finden, erwägen Sie eine [Spende](https://donate.termix.site/), um Serverkosten und Entwicklungszeit zu decken.
|
Termix ist kostenlos und Open Source, ohne Abonnements oder kostenpflichtige Plane. Wenn Sie es nutzlich finden, erwagen Sie eine Spende, um Serverkosten, Domains und Entwicklungszeit zu decken. Spenden helfen auch dabei, die Zeit zu finanzieren, die benotigt wird, um zu erforschen und zu lernen, was fur Funktionen wie SAML-, Kubernetes- und Agent-Unterstutzung erforderlich ist. Verfolgen Sie den Fortschritt und spenden Sie unten.
|
||||||
|
|
||||||
<a href="https://donate.termix.site/"><img src="../repo-images/donation-goal.svg" alt="Monthly donation goal" /></a>
|
[Spenden](https://donate.termix.site/)
|
||||||
|
|
||||||
|
<br />
|
||||||
|
|
||||||
|
## Sponsoren
|
||||||
|
|
||||||
|
Interessiert an einer bezahlten Platzierung zur Unterstutzung der Entwicklung? Schreiben Sie eine E-Mail an [mail@termix.site](mailto:mail@termix.site).
|
||||||
|
|
||||||
|
<div align="center">
|
||||||
|
|
||||||
|
<br />
|
||||||
|
|
||||||
|
<a href="https://www.digitalocean.com/">
|
||||||
|
<img src="https://opensource.nyc3.cdn.digitaloceanspaces.com/attribution/assets/SVG/DO_Logo_horizontal_blue.svg" height="40" alt="DigitalOcean" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://crowdin.com/">
|
||||||
|
<img src="https://support.crowdin.com/assets/logos/core-logo/svg/crowdin-core-logo-cDark.svg" height="40" alt="Crowdin" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://www.blacksmith.sh/">
|
||||||
|
<img src="https://cdn.prod.website-files.com/681bfb0c9a4601bc6e288ec4/683ca9e2c5186757092611b8_e8cb22127df4da0811c4120a523722d2_logo-backsmith-wordmark-light.svg" height="40" alt="Blacksmith" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://www.cloudflare.com/">
|
||||||
|
<img src="https://sirv.sirv.com/website/screenshots/cloudflare/cloudflare-logo.png?w=300" height="40" alt="Cloudflare" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://tailscale.com/">
|
||||||
|
<img src="https://drive.google.com/uc?export=view&id=1lIxkJuX6M23bW-2FElhT0rQieTrzaVSL" height="40" alt="Tailscale" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://akamai.com/">
|
||||||
|
<img src="https://upload.wikimedia.org/wikipedia/commons/8/8b/Akamai_logo.svg" height="40" alt="Akamai" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://aws.amazon.com/">
|
||||||
|
<img src="https://upload.wikimedia.org/wikipedia/commons/thumb/9/93/Amazon_Web_Services_Logo.svg/960px-Amazon_Web_Services_Logo.svg.png" height="40" alt="AWS" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://rackgenius.com/">
|
||||||
|
<img src="https://rackgenius.com/rackgenius-logo.png" height="40" alt="Rack Genius" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
</div>
|
||||||
|
|
||||||
|
<br />
|
||||||
|
|
||||||
|
## Support
|
||||||
|
|
||||||
|
Wenn Sie Hilfe benotigen oder eine Funktion fur Termix anfragen mochten, besuchen Sie die [Issues](https://github.com/Termix-SSH/Support/issues)-Seite, melden Sie sich an und klicken Sie auf `New Issue`. Bitte beschreiben Sie Ihr Anliegen so detailliert wie moglich, vorzugsweise auf Englisch. Sie konnen auch dem [Discord](https://discord.gg/jVQGdvHDrf)-Server beitreten und den Support-Kanal besuchen, allerdings konnen die Antwortzeiten dort langer sein.
|
||||||
|
|
||||||
<br />
|
<br />
|
||||||
|
|
||||||
@@ -356,50 +411,6 @@ Siehe [Projekte](https://github.com/orgs/Termix-SSH/projects/5) fur alle geplant
|
|||||||
|
|
||||||
<br />
|
<br />
|
||||||
|
|
||||||
## Sponsoren
|
|
||||||
|
|
||||||
<div align="center">
|
|
||||||
|
|
||||||
<br />
|
|
||||||
|
|
||||||
<a href="https://www.digitalocean.com/">
|
|
||||||
<img src="https://opensource.nyc3.cdn.digitaloceanspaces.com/attribution/assets/SVG/DO_Logo_horizontal_blue.svg" height="40" alt="DigitalOcean" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://crowdin.com/">
|
|
||||||
<img src="https://support.crowdin.com/assets/logos/core-logo/svg/crowdin-core-logo-cDark.svg" height="40" alt="Crowdin" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://www.blacksmith.sh/">
|
|
||||||
<img src="https://cdn.prod.website-files.com/681bfb0c9a4601bc6e288ec4/683ca9e2c5186757092611b8_e8cb22127df4da0811c4120a523722d2_logo-backsmith-wordmark-light.svg" height="40" alt="Blacksmith" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://www.cloudflare.com/">
|
|
||||||
<img src="https://sirv.sirv.com/website/screenshots/cloudflare/cloudflare-logo.png?w=300" height="40" alt="Cloudflare" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://tailscale.com/">
|
|
||||||
<img src="https://drive.google.com/uc?export=view&id=1lIxkJuX6M23bW-2FElhT0rQieTrzaVSL" height="40" alt="Tailscale" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://akamai.com/">
|
|
||||||
<img src="https://upload.wikimedia.org/wikipedia/commons/8/8b/Akamai_logo.svg" height="40" alt="Akamai" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://aws.amazon.com/">
|
|
||||||
<img src="https://upload.wikimedia.org/wikipedia/commons/thumb/9/93/Amazon_Web_Services_Logo.svg/960px-Amazon_Web_Services_Logo.svg.png" height="40" alt="AWS" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
</div>
|
|
||||||
|
|
||||||
<br />
|
|
||||||
|
|
||||||
## Support
|
|
||||||
|
|
||||||
Wenn Sie Hilfe benotigen oder eine Funktion fur Termix anfragen mochten, besuchen Sie die [Issues](https://github.com/Termix-SSH/Support/issues)-Seite, melden Sie sich an und klicken Sie auf `New Issue`. Bitte beschreiben Sie Ihr Anliegen so detailliert wie moglich, vorzugsweise auf Englisch. Sie konnen auch dem [Discord](https://discord.gg/jVQGdvHDrf)-Server beitreten und den Support-Kanal besuchen, allerdings konnen die Antwortzeiten dort langer sein.
|
|
||||||
|
|
||||||
<br />
|
|
||||||
|
|
||||||
## Lizenz
|
## Lizenz
|
||||||
|
|
||||||
Verteilt unter der Apache License Version 2.0. Siehe `LICENSE` fur weitere Informationen.
|
Verteilt unter der Apache License Version 2.0. Siehe `LICENSE` fur weitere Informationen.
|
||||||
@@ -4,7 +4,7 @@
|
|||||||
|
|
||||||
<h1>Termix</h1>
|
<h1>Termix</h1>
|
||||||
|
|
||||||
<p>Gestion SSH autoalojada y acceso a escritorio remoto</p>
|
<p>Gestión SSH autoalojada y acceso a escritorio remoto</p>
|
||||||
|
|
||||||
<p>
|
<p>
|
||||||
<a href="../README.md">English</a> ·
|
<a href="../README.md">English</a> ·
|
||||||
@@ -31,12 +31,14 @@
|
|||||||
<a href="https://donate.termix.site/"><img alt="Donate" src="https://img.shields.io/badge/Donate-Support%20Termix-F39044?style=flat&labelColor=1a1a1a" /></a>
|
<a href="https://donate.termix.site/"><img alt="Donate" src="https://img.shields.io/badge/Donate-Support%20Termix-F39044?style=flat&labelColor=1a1a1a" /></a>
|
||||||
</p>
|
</p>
|
||||||
|
|
||||||
|
<p>
|
||||||
|
<a href="https://donate.termix.site/"><img alt="Donations this month" src="https://img.shields.io/badge/dynamic/json?style=for-the-badge&label=Donations%20this%20month&query=%24.fiatTotal&prefix=%24&url=https%3A%2F%2Ftermix.site%2Fdonation-snapshot.json&color=F39044&labelColor=1a1a1a" /></a>
|
||||||
|
</p>
|
||||||
|
|
||||||
<br />
|
<br />
|
||||||
|
|
||||||
Termix es gratuito y de código abierto. Si lo encuentras útil, considera [donar](https://donate.termix.site/) para ayudar a cubrir los costos del servidor y el tiempo de desarrollo.
|
Termix es gratuito y de código abierto. Si lo encuentras útil, considera [donar](https://donate.termix.site/) para ayudar a cubrir los costos del servidor y el tiempo de desarrollo.
|
||||||
|
|
||||||
<a href="https://donate.termix.site/"><img src="../repo-images/donation-goal.svg" alt="Monthly donation goal" /></a>
|
|
||||||
|
|
||||||
<br />
|
<br />
|
||||||
|
|
||||||
<img src="../repo-images/Termix Header.png" alt="Termix Banner" width="900" />
|
<img src="../repo-images/Termix Header.png" alt="Termix Banner" width="900" />
|
||||||
@@ -56,7 +58,7 @@ Termix es gratuito y de código abierto. Si lo encuentras útil, considera [dona
|
|||||||
|
|
||||||
## Descripcion General
|
## Descripcion General
|
||||||
|
|
||||||
Termix es una plataforma de gestion de servidores todo en uno, de codigo abierto, siempre gratuita y autoalojada. Proporciona una solucion multiplataforma para gestionar sus servidores e infraestructura a traves de una interfaz unica e intuitiva. Termix ofrece acceso a terminal SSH, control de escritorio remoto (RDP, VNC, Telnet), capacidades de tuneles SSH, gestion remota de archivos SSH y muchas otras herramientas. Termix es la alternativa perfecta, gratuita y autoalojada a Termius, disponible para todas las plataformas.
|
Termix es una plataforma de gestion de servidores todo en uno, de codigo abierto, siempre gratuita y autoalojada. Proporciona una solucion multiplataforma para gestionar sus servidores e infraestructura a traves de una interfaz unica e intuitiva. Termix ofrece acceso a terminal SSH, control de escritorio remoto (RDP, VNC, Telnet), capacidades de tuneles SSH, gestion remota de archivos y muchas otras herramientas. Termix es la alternativa perfecta, gratuita y autoalojada a Termius, disponible para todas las plataformas.
|
||||||
|
|
||||||
<br />
|
<br />
|
||||||
|
|
||||||
@@ -81,13 +83,13 @@ Soporte RDP, VNC y Telnet a traves del navegador con personalizacion completa y
|
|||||||
<td width="50%" valign="top">
|
<td width="50%" valign="top">
|
||||||
|
|
||||||
**Gestion de Tuneles SSH:**
|
**Gestion de Tuneles SSH:**
|
||||||
Cree y gestione tuneles SSH de servidor a servidor con reconexion automatica, monitoreo de estado y reenvio local, remoto o dinamico SOCKS. La configuracion de tuneles de cliente de escritorio a servidor se almacena localmente por instalacion de escritorio; los snapshots de presets C2S opcionales pueden guardarse en el servidor, renombrarse, cargarse o eliminarse para mover una configuracion de tunel local entre clientes.
|
Cree y gestione tuneles SSH de servidor a servidor con reconexion automatica, monitoreo de estado y reenvio local, remoto o dinamico SOCKS. La configuracion de tuneles de cliente de escritorio a servidor se almacena localmente por instalacion de escritorio, los snapshots de presets C2S opcionales pueden guardarse en el servidor, renombrarse, cargarse o eliminarse cuando desee mover una configuracion de tunel local entre clientes.
|
||||||
|
|
||||||
</td>
|
</td>
|
||||||
<td width="50%" valign="top">
|
<td width="50%" valign="top">
|
||||||
|
|
||||||
**Gestor Remoto de Archivos:**
|
**Gestor Remoto de Archivos:**
|
||||||
Gestione archivos directamente en servidores remotos con soporte para visualizar y editar codigo, imagenes, audio y video. Suba, descargue, renombre, elimine y mueva archivos sin problemas con soporte sudo.
|
Gestione archivos directamente en servidores remotos con soporte para visualizar y editar codigo, imagenes, audio y video. Suba, descargue, renombre, elimine y mueva archivos sin problemas con soporte sudo. Incluye soporte para mover archivos de servidor a servidor.
|
||||||
|
|
||||||
</td>
|
</td>
|
||||||
</tr>
|
</tr>
|
||||||
@@ -109,13 +111,13 @@ Guarde, organice y gestione sus conexiones SSH con etiquetas y carpetas (con per
|
|||||||
<td width="50%" valign="top">
|
<td width="50%" valign="top">
|
||||||
|
|
||||||
**Metricas del Host:**
|
**Metricas del Host:**
|
||||||
Vea el uso de CPU, memoria y disco, red, tiempo de actividad, informacion del sistema, firewall, monitor de puertos, visor de registros, usuarios/permisos, certificados y muchos mas en la mayoria de los servidores basados en Linux.
|
Vea el uso de CPU, memoria y disco, red, tiempo de actividad, informacion del sistema, firewall, monitor de puertos, visor de registros, usuarios/permisos, certificados y muchos mas, que funcionan en la mayoria de los servidores basados en Linux. Incluye graficos de historial de series temporales y alertas basadas en umbrales con soporte para ntfy y webhooks.
|
||||||
|
|
||||||
</td>
|
</td>
|
||||||
<td width="50%" valign="top">
|
<td width="50%" valign="top">
|
||||||
|
|
||||||
**Autenticacion de Usuarios:**
|
**Autenticacion de Usuarios:**
|
||||||
Gestion segura de usuarios con controles de administrador y soporte para OIDC/LDAP/SSO (con control de acceso) y 2FA (TOTP). Vea sesiones activas de usuarios en todas las plataformas y revoque permisos. Vincule sus cuentas OIDC/Locales entre si. Vea el registro de auditoria de las acciones de todos los usuarios.
|
Gestion segura de usuarios con controles de administrador (puede editar la informacion de otros usuarios) y soporte para OIDC/LDAP/SSO (con control de acceso), 2FA (TOTP) y soporte para passkeys (WebAuthn). Vea sesiones activas de usuarios en todas las plataformas y revoque permisos. Vincule sus cuentas OIDC/Locales entre si. Vea el registro de auditoria de las acciones de todos los usuarios.
|
||||||
|
|
||||||
</td>
|
</td>
|
||||||
</tr>
|
</tr>
|
||||||
@@ -128,8 +130,8 @@ Liste dispositivos de su red Tailscale para agregarlos rapidamente como hosts y
|
|||||||
</td>
|
</td>
|
||||||
<td width="50%" valign="top">
|
<td width="50%" valign="top">
|
||||||
|
|
||||||
**RBAC:**
|
**RBAC/Compartir:**
|
||||||
Cree roles y comparta hosts entre usuarios/roles.
|
Cree roles y comparta hosts entre usuarios/roles. Compatible con todos los tipos de autenticacion y todos los protocolos de host.
|
||||||
|
|
||||||
</td>
|
</td>
|
||||||
</tr>
|
</tr>
|
||||||
@@ -206,7 +208,8 @@ Soporte integrado para aproximadamente 30 idiomas (gestionado por [Crowdin](http
|
|||||||
- **Conexion Rapida** - Conectese a un servidor sin necesidad de guardar los datos de conexion
|
- **Conexion Rapida** - Conectese a un servidor sin necesidad de guardar los datos de conexion
|
||||||
- **Paleta de Comandos** - Pulse dos veces la tecla Shift izquierda para acceder rapidamente a las conexiones SSH con su teclado
|
- **Paleta de Comandos** - Pulse dos veces la tecla Shift izquierda para acceder rapidamente a las conexiones SSH con su teclado
|
||||||
- **Integracion con Proxmox** - Agregue automaticamente hosts a Termix desde su instancia de Proxmox
|
- **Integracion con Proxmox** - Agregue automaticamente hosts a Termix desde su instancia de Proxmox
|
||||||
- **SSH Rico en Funciones** - Soporta jump hosts, Warpgate, conexiones basadas en TOTP, SOCKS5, verificacion de clave de host, autocompletado de contrasenas, [OPKSSH](https://github.com/openpubkey/opkssh), tmux, port knocking, registro de terminal, etc.
|
- **SSH Rico en Funciones** - Soporta jump hosts, Warpgate, conexiones basadas en TOTP, SOCKS5, verificacion de clave de host, autocompletado de contrasenas, [OPKSSH](https://github.com/openpubkey/opkssh), tmux, port knocking, registro de terminal, reenvio de agente SSH, agente SSH de Bitwarden, firma SSH con HashiCorp Vault y mas.
|
||||||
|
- **Termix ID** - Un equivalente a sshid.io integrado en Termix. Reclame un identificador, publique sus claves publicas SSH en una URL de resolucion y use una CA integrada para emitir certificados SSH.
|
||||||
|
|
||||||
</details>
|
</details>
|
||||||
|
|
||||||
@@ -249,7 +252,9 @@ Soporte integrado para aproximadamente 30 idiomas (gestionado por [Crowdin](http
|
|||||||
|
|
||||||
## Instalacion
|
## Instalacion
|
||||||
|
|
||||||
Visite la [documentacion](https://docs.termix.site/install) de Termix para mas informacion sobre como instalar Termix en todas las plataformas. De lo contrario, vea un archivo Docker Compose de ejemplo aqui (puede omitir guacd y la red si no planea usar funciones de escritorio remoto):
|
Visite la [documentacion de Termix](https://docs.termix.site/install) para obtener instrucciones completas de instalacion en todas las plataformas.
|
||||||
|
|
||||||
|
Archivo de ejemplo de Docker Compose (puede omitir `guacd` y la red si no planea usar las funciones de escritorio remoto):
|
||||||
|
|
||||||
```yaml
|
```yaml
|
||||||
services:
|
services:
|
||||||
@@ -290,9 +295,59 @@ networks:
|
|||||||
|
|
||||||
## Donar
|
## Donar
|
||||||
|
|
||||||
Termix es gratuito y de código abierto. Si lo encuentras útil, considera [donar](https://donate.termix.site/) para ayudar a cubrir los costos del servidor y el tiempo de desarrollo.
|
Termix es gratuito y de codigo abierto, sin suscripciones ni planes de pago. Si lo encuentra util, considere donar para ayudar a cubrir los costos del servidor, los dominios y el tiempo de desarrollo. Las donaciones tambien ayudan a financiar el tiempo necesario para investigar y aprender lo que se necesita para construir funciones como soporte para SAML, Kubernetes y Agent. Siga el progreso y done a continuacion.
|
||||||
|
|
||||||
<a href="https://donate.termix.site/"><img src="../repo-images/donation-goal.svg" alt="Monthly donation goal" /></a>
|
[Donar](https://donate.termix.site/)
|
||||||
|
|
||||||
|
<br />
|
||||||
|
|
||||||
|
## Patrocinadores
|
||||||
|
|
||||||
|
Interesado en un espacio patrocinado de pago para apoyar el desarrollo? Escriba a [mail@termix.site](mailto:mail@termix.site).
|
||||||
|
|
||||||
|
<div align="center">
|
||||||
|
|
||||||
|
<br />
|
||||||
|
|
||||||
|
<a href="https://www.digitalocean.com/">
|
||||||
|
<img src="https://opensource.nyc3.cdn.digitaloceanspaces.com/attribution/assets/SVG/DO_Logo_horizontal_blue.svg" height="40" alt="DigitalOcean" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://crowdin.com/">
|
||||||
|
<img src="https://support.crowdin.com/assets/logos/core-logo/svg/crowdin-core-logo-cDark.svg" height="40" alt="Crowdin" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://www.blacksmith.sh/">
|
||||||
|
<img src="https://cdn.prod.website-files.com/681bfb0c9a4601bc6e288ec4/683ca9e2c5186757092611b8_e8cb22127df4da0811c4120a523722d2_logo-backsmith-wordmark-light.svg" height="40" alt="Blacksmith" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://www.cloudflare.com/">
|
||||||
|
<img src="https://sirv.sirv.com/website/screenshots/cloudflare/cloudflare-logo.png?w=300" height="40" alt="Cloudflare" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://tailscale.com/">
|
||||||
|
<img src="https://drive.google.com/uc?export=view&id=1lIxkJuX6M23bW-2FElhT0rQieTrzaVSL" height="40" alt="Tailscale" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://akamai.com/">
|
||||||
|
<img src="https://upload.wikimedia.org/wikipedia/commons/8/8b/Akamai_logo.svg" height="40" alt="Akamai" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://aws.amazon.com/">
|
||||||
|
<img src="https://upload.wikimedia.org/wikipedia/commons/thumb/9/93/Amazon_Web_Services_Logo.svg/960px-Amazon_Web_Services_Logo.svg.png" height="40" alt="AWS" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://rackgenius.com/">
|
||||||
|
<img src="https://rackgenius.com/rackgenius-logo.png" height="40" alt="Rack Genius" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
</div>
|
||||||
|
|
||||||
|
<br />
|
||||||
|
|
||||||
|
## Soporte
|
||||||
|
|
||||||
|
Si necesita ayuda o desea solicitar una funcion para Termix, visite la pagina de [Issues](https://github.com/Termix-SSH/Support/issues), inicie sesion y pulse `New Issue`. Por favor, sea lo mas detallado posible en su reporte, preferiblemente escrito en ingles. Tambien puede unirse al servidor de [Discord](https://discord.gg/jVQGdvHDrf) y visitar el canal de soporte, sin embargo, los tiempos de respuesta pueden ser mas largos.
|
||||||
|
|
||||||
<br />
|
<br />
|
||||||
|
|
||||||
@@ -356,50 +411,6 @@ Consulte [Proyectos](https://github.com/orgs/Termix-SSH/projects/5) para todas l
|
|||||||
|
|
||||||
<br />
|
<br />
|
||||||
|
|
||||||
## Patrocinadores
|
|
||||||
|
|
||||||
<div align="center">
|
|
||||||
|
|
||||||
<br />
|
|
||||||
|
|
||||||
<a href="https://www.digitalocean.com/">
|
|
||||||
<img src="https://opensource.nyc3.cdn.digitaloceanspaces.com/attribution/assets/SVG/DO_Logo_horizontal_blue.svg" height="40" alt="DigitalOcean" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://crowdin.com/">
|
|
||||||
<img src="https://support.crowdin.com/assets/logos/core-logo/svg/crowdin-core-logo-cDark.svg" height="40" alt="Crowdin" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://www.blacksmith.sh/">
|
|
||||||
<img src="https://cdn.prod.website-files.com/681bfb0c9a4601bc6e288ec4/683ca9e2c5186757092611b8_e8cb22127df4da0811c4120a523722d2_logo-backsmith-wordmark-light.svg" height="40" alt="Blacksmith" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://www.cloudflare.com/">
|
|
||||||
<img src="https://sirv.sirv.com/website/screenshots/cloudflare/cloudflare-logo.png?w=300" height="40" alt="Cloudflare" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://tailscale.com/">
|
|
||||||
<img src="https://drive.google.com/uc?export=view&id=1lIxkJuX6M23bW-2FElhT0rQieTrzaVSL" height="40" alt="Tailscale" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://akamai.com/">
|
|
||||||
<img src="https://upload.wikimedia.org/wikipedia/commons/8/8b/Akamai_logo.svg" height="40" alt="Akamai" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://aws.amazon.com/">
|
|
||||||
<img src="https://upload.wikimedia.org/wikipedia/commons/thumb/9/93/Amazon_Web_Services_Logo.svg/960px-Amazon_Web_Services_Logo.svg.png" height="40" alt="AWS" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
</div>
|
|
||||||
|
|
||||||
<br />
|
|
||||||
|
|
||||||
## Soporte
|
|
||||||
|
|
||||||
Si necesita ayuda o desea solicitar una funcion para Termix, visite la pagina de [Issues](https://github.com/Termix-SSH/Support/issues), inicie sesion y pulse `New Issue`. Por favor, sea lo mas detallado posible en su reporte, preferiblemente escrito en ingles. Tambien puede unirse al servidor de [Discord](https://discord.gg/jVQGdvHDrf) y visitar el canal de soporte, sin embargo, los tiempos de respuesta pueden ser mas largos.
|
|
||||||
|
|
||||||
<br />
|
|
||||||
|
|
||||||
## Licencia
|
## Licencia
|
||||||
|
|
||||||
Distribuido bajo la Licencia Apache Version 2.0. Consulte `LICENSE` para mas informacion.
|
Distribuido bajo la Licencia Apache Version 2.0. Consulte `LICENSE` para mas informacion.
|
||||||
@@ -31,12 +31,14 @@
|
|||||||
<a href="https://donate.termix.site/"><img alt="Donate" src="https://img.shields.io/badge/Donate-Support%20Termix-F39044?style=flat&labelColor=1a1a1a" /></a>
|
<a href="https://donate.termix.site/"><img alt="Donate" src="https://img.shields.io/badge/Donate-Support%20Termix-F39044?style=flat&labelColor=1a1a1a" /></a>
|
||||||
</p>
|
</p>
|
||||||
|
|
||||||
|
<p>
|
||||||
|
<a href="https://donate.termix.site/"><img alt="Donations this month" src="https://img.shields.io/badge/dynamic/json?style=for-the-badge&label=Donations%20this%20month&query=%24.fiatTotal&prefix=%24&url=https%3A%2F%2Ftermix.site%2Fdonation-snapshot.json&color=F39044&labelColor=1a1a1a" /></a>
|
||||||
|
</p>
|
||||||
|
|
||||||
<br />
|
<br />
|
||||||
|
|
||||||
Termix est gratuit et open source. Si vous le trouvez utile, pensez à [faire un don](https://donate.termix.site/) pour aider à couvrir les coûts de serveur et le temps de développement.
|
Termix est gratuit et open source. Si vous le trouvez utile, pensez à [faire un don](https://donate.termix.site/) pour aider à couvrir les coûts de serveur et le temps de développement.
|
||||||
|
|
||||||
<a href="https://donate.termix.site/"><img src="../repo-images/donation-goal.svg" alt="Monthly donation goal" /></a>
|
|
||||||
|
|
||||||
<br />
|
<br />
|
||||||
|
|
||||||
<img src="../repo-images/Termix Header.png" alt="Termix Banner" width="900" />
|
<img src="../repo-images/Termix Header.png" alt="Termix Banner" width="900" />
|
||||||
@@ -87,7 +89,7 @@ Creez et gerez des tunnels SSH de serveur a serveur avec reconnexion automatique
|
|||||||
<td width="50%" valign="top">
|
<td width="50%" valign="top">
|
||||||
|
|
||||||
**Gestionnaire de fichiers distant:**
|
**Gestionnaire de fichiers distant:**
|
||||||
Gerez les fichiers directement sur les serveurs distants avec support de la visualisation et de l'edition de code, images, audio et video. Televersez, telechargez, renommez, supprimez et deplacez des fichiers de maniere fluide avec support sudo.
|
Gerez les fichiers directement sur les serveurs distants avec support de la visualisation et de l'edition de code, images, audio et video. Televersez, telechargez, renommez, supprimez et deplacez des fichiers de maniere fluide avec support sudo. Inclut la prise en charge du deplacement de fichiers de serveur a serveur.
|
||||||
|
|
||||||
</td>
|
</td>
|
||||||
</tr>
|
</tr>
|
||||||
@@ -109,13 +111,13 @@ Enregistrez, organisez et gerez vos connexions SSH avec des tags et des dossiers
|
|||||||
<td width="50%" valign="top">
|
<td width="50%" valign="top">
|
||||||
|
|
||||||
**Metriques d'hote:**
|
**Metriques d'hote:**
|
||||||
Visualisez l'utilisation du CPU, de la memoire, du disque, le reseau, le temps de fonctionnement, les informations systeme, le pare-feu, le moniteur de ports, le visualiseur de journaux, les utilisateurs/permissions, les certificats et bien plus encore sur la plupart des serveurs Linux.
|
Visualisez l'utilisation du CPU, de la memoire, du disque, le reseau, le temps de fonctionnement, les informations systeme, le pare-feu, le moniteur de ports, le visualiseur de journaux, les utilisateurs/permissions, les certificats et bien plus encore sur la plupart des serveurs Linux. Inclut des graphiques d'historique en serie temporelle et des alertes basees sur des seuils avec support ntfy et webhook.
|
||||||
|
|
||||||
</td>
|
</td>
|
||||||
<td width="50%" valign="top">
|
<td width="50%" valign="top">
|
||||||
|
|
||||||
**Authentification des utilisateurs:**
|
**Authentification des utilisateurs:**
|
||||||
Gestion securisee des utilisateurs avec controles administrateur et support OIDC/LDAP/SSO (avec controle d'acces) et 2FA (TOTP). Visualisez les sessions utilisateur actives sur toutes les plateformes et revoquez les permissions. Liez vos comptes OIDC/locaux ensemble. Consultez le journal d'audit des actions de tous les utilisateurs.
|
Gestion securisee des utilisateurs avec controles administrateur (peut modifier les informations des autres utilisateurs) et support OIDC/LDAP/SSO (avec controle d'acces), 2FA (TOTP), et support des passkeys (WebAuthn). Visualisez les sessions utilisateur actives sur toutes les plateformes et revoquez les permissions. Liez vos comptes OIDC/locaux ensemble. Consultez le journal d'audit des actions de tous les utilisateurs.
|
||||||
|
|
||||||
</td>
|
</td>
|
||||||
</tr>
|
</tr>
|
||||||
@@ -128,8 +130,8 @@ Listez les appareils de votre reseau Tailscale pour les ajouter rapidement comme
|
|||||||
</td>
|
</td>
|
||||||
<td width="50%" valign="top">
|
<td width="50%" valign="top">
|
||||||
|
|
||||||
**RBAC:**
|
**RBAC/Partage:**
|
||||||
Creez des roles et partagez des hotes entre utilisateurs/roles.
|
Creez des roles et partagez des hotes entre utilisateurs/roles. Prend en charge tous les types d'authentification et tous les protocoles d'hote.
|
||||||
|
|
||||||
</td>
|
</td>
|
||||||
</tr>
|
</tr>
|
||||||
@@ -206,7 +208,8 @@ Support integre d'environ 30 langues (gere par [Crowdin](https://docs.termix.sit
|
|||||||
- **Connexion rapide** - Connectez-vous a un serveur sans avoir a sauvegarder les donnees de connexion
|
- **Connexion rapide** - Connectez-vous a un serveur sans avoir a sauvegarder les donnees de connexion
|
||||||
- **Palette de commandes** - Appuyez deux fois sur Shift gauche pour acceder rapidement aux connexions SSH avec votre clavier
|
- **Palette de commandes** - Appuyez deux fois sur Shift gauche pour acceder rapidement aux connexions SSH avec votre clavier
|
||||||
- **Integration Proxmox** - Ajoutez automatiquement des hotes dans Termix depuis votre instance Proxmox
|
- **Integration Proxmox** - Ajoutez automatiquement des hotes dans Termix depuis votre instance Proxmox
|
||||||
- **SSH riche en fonctionnalites** - Support des hotes de rebond, Warpgate, connexions basees sur TOTP, SOCKS5, verification des cles d'hote, remplissage automatique des mots de passe, [OPKSSH](https://github.com/openpubkey/opkssh), tmux, port knocking, journalisation du terminal, etc.
|
- **SSH riche en fonctionnalites** - Support des hotes de rebond, Warpgate, connexions basees sur TOTP, SOCKS5, verification des cles d'hote, remplissage automatique des mots de passe, [OPKSSH](https://github.com/openpubkey/opkssh), tmux, port knocking, journalisation du terminal, transfert d'agent SSH, agent SSH Bitwarden, signature SSH HashiCorp Vault, et plus encore.
|
||||||
|
- **Termix ID** - Un equivalent de sshid.io integre a Termix. Reservez un identifiant, publiez vos cles SSH publiques a une URL de resolution, et utilisez une autorite de certification integree pour emettre des certificats SSH.
|
||||||
|
|
||||||
</details>
|
</details>
|
||||||
|
|
||||||
@@ -249,7 +252,9 @@ Support integre d'environ 30 langues (gere par [Crowdin](https://docs.termix.sit
|
|||||||
|
|
||||||
## Installation
|
## Installation
|
||||||
|
|
||||||
Visitez la [documentation](https://docs.termix.site/install) de Termix pour plus d'informations sur l'installation de Termix sur toutes les plateformes. Voici un exemple de fichier Docker Compose (vous pouvez omettre guacd et le reseau si vous ne prevoyez pas d'utiliser les fonctionnalites de bureau a distance) :
|
Visitez la [documentation](https://docs.termix.site/install) de Termix pour des instructions d'installation completes sur toutes les plateformes.
|
||||||
|
|
||||||
|
Voici un exemple de fichier Docker Compose (vous pouvez omettre guacd et le reseau si vous ne prevoyez pas d'utiliser les fonctionnalites de bureau a distance) :
|
||||||
|
|
||||||
```yaml
|
```yaml
|
||||||
services:
|
services:
|
||||||
@@ -290,9 +295,59 @@ networks:
|
|||||||
|
|
||||||
## Faire un don
|
## Faire un don
|
||||||
|
|
||||||
Termix est gratuit et open source. Si vous le trouvez utile, pensez à [faire un don](https://donate.termix.site/) pour aider à couvrir les coûts de serveur et le temps de développement.
|
Termix est gratuit et open source, sans abonnement ni plan payant. Si vous le trouvez utile, pensez a faire un don pour aider a couvrir les couts de serveur, les domaines et le temps de developpement. Les dons contribuent egalement a financer le temps necessaire pour rechercher et apprendre ce qui est requis pour construire des fonctionnalites comme SAML, Kubernetes et le support des agents. Suivez la progression et faites un don ci-dessous.
|
||||||
|
|
||||||
<a href="https://donate.termix.site/"><img src="../repo-images/donation-goal.svg" alt="Monthly donation goal" /></a>
|
[Faire un don](https://donate.termix.site/)
|
||||||
|
|
||||||
|
<br />
|
||||||
|
|
||||||
|
## Sponsors
|
||||||
|
|
||||||
|
Interesse par un placement payant pour soutenir le developpement ? Envoyez un email a [mail@termix.site](mailto:mail@termix.site).
|
||||||
|
|
||||||
|
<div align="center">
|
||||||
|
|
||||||
|
<br />
|
||||||
|
|
||||||
|
<a href="https://www.digitalocean.com/">
|
||||||
|
<img src="https://opensource.nyc3.cdn.digitaloceanspaces.com/attribution/assets/SVG/DO_Logo_horizontal_blue.svg" height="40" alt="DigitalOcean" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://crowdin.com/">
|
||||||
|
<img src="https://support.crowdin.com/assets/logos/core-logo/svg/crowdin-core-logo-cDark.svg" height="40" alt="Crowdin" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://www.blacksmith.sh/">
|
||||||
|
<img src="https://cdn.prod.website-files.com/681bfb0c9a4601bc6e288ec4/683ca9e2c5186757092611b8_e8cb22127df4da0811c4120a523722d2_logo-backsmith-wordmark-light.svg" height="40" alt="Blacksmith" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://www.cloudflare.com/">
|
||||||
|
<img src="https://sirv.sirv.com/website/screenshots/cloudflare/cloudflare-logo.png?w=300" height="40" alt="Cloudflare" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://tailscale.com/">
|
||||||
|
<img src="https://drive.google.com/uc?export=view&id=1lIxkJuX6M23bW-2FElhT0rQieTrzaVSL" height="40" alt="Tailscale" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://akamai.com/">
|
||||||
|
<img src="https://upload.wikimedia.org/wikipedia/commons/8/8b/Akamai_logo.svg" height="40" alt="Akamai" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://aws.amazon.com/">
|
||||||
|
<img src="https://upload.wikimedia.org/wikipedia/commons/thumb/9/93/Amazon_Web_Services_Logo.svg/960px-Amazon_Web_Services_Logo.svg.png" height="40" alt="AWS" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://rackgenius.com/">
|
||||||
|
<img src="https://rackgenius.com/rackgenius-logo.png" height="40" alt="Rack Genius" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
</div>
|
||||||
|
|
||||||
|
<br />
|
||||||
|
|
||||||
|
## Support
|
||||||
|
|
||||||
|
Si vous avez besoin d'aide ou souhaitez demander une fonctionnalite pour Termix, visitez la page [Issues](https://github.com/Termix-SSH/Support/issues), connectez-vous et appuyez sur `New Issue`. Veuillez etre aussi detaille que possible dans votre issue, de preference redigee en anglais. Vous pouvez egalement rejoindre le serveur [Discord](https://discord.gg/jVQGdvHDrf) et visiter le canal de support, cependant les temps de reponse peuvent etre plus longs.
|
||||||
|
|
||||||
<br />
|
<br />
|
||||||
|
|
||||||
@@ -356,50 +411,6 @@ Consultez les [Projects](https://github.com/orgs/Termix-SSH/projects/5) pour tou
|
|||||||
|
|
||||||
<br />
|
<br />
|
||||||
|
|
||||||
## Sponsors
|
|
||||||
|
|
||||||
<div align="center">
|
|
||||||
|
|
||||||
<br />
|
|
||||||
|
|
||||||
<a href="https://www.digitalocean.com/">
|
|
||||||
<img src="https://opensource.nyc3.cdn.digitaloceanspaces.com/attribution/assets/SVG/DO_Logo_horizontal_blue.svg" height="40" alt="DigitalOcean" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://crowdin.com/">
|
|
||||||
<img src="https://support.crowdin.com/assets/logos/core-logo/svg/crowdin-core-logo-cDark.svg" height="40" alt="Crowdin" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://www.blacksmith.sh/">
|
|
||||||
<img src="https://cdn.prod.website-files.com/681bfb0c9a4601bc6e288ec4/683ca9e2c5186757092611b8_e8cb22127df4da0811c4120a523722d2_logo-backsmith-wordmark-light.svg" height="40" alt="Blacksmith" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://www.cloudflare.com/">
|
|
||||||
<img src="https://sirv.sirv.com/website/screenshots/cloudflare/cloudflare-logo.png?w=300" height="40" alt="Cloudflare" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://tailscale.com/">
|
|
||||||
<img src="https://drive.google.com/uc?export=view&id=1lIxkJuX6M23bW-2FElhT0rQieTrzaVSL" height="40" alt="Tailscale" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://akamai.com/">
|
|
||||||
<img src="https://upload.wikimedia.org/wikipedia/commons/8/8b/Akamai_logo.svg" height="40" alt="Akamai" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://aws.amazon.com/">
|
|
||||||
<img src="https://upload.wikimedia.org/wikipedia/commons/thumb/9/93/Amazon_Web_Services_Logo.svg/960px-Amazon_Web_Services_Logo.svg.png" height="40" alt="AWS" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
</div>
|
|
||||||
|
|
||||||
<br />
|
|
||||||
|
|
||||||
## Support
|
|
||||||
|
|
||||||
Si vous avez besoin d'aide ou souhaitez demander une fonctionnalite pour Termix, visitez la page [Issues](https://github.com/Termix-SSH/Support/issues), connectez-vous et appuyez sur `New Issue`. Veuillez etre aussi detaille que possible dans votre issue, de preference redigee en anglais. Vous pouvez egalement rejoindre le serveur [Discord](https://discord.gg/jVQGdvHDrf) et visiter le canal de support, cependant les temps de reponse peuvent etre plus longs.
|
|
||||||
|
|
||||||
<br />
|
|
||||||
|
|
||||||
## Licence
|
## Licence
|
||||||
|
|
||||||
Distribue sous la licence Apache Version 2.0. Consultez `LICENSE` pour plus d'informations.
|
Distribue sous la licence Apache Version 2.0. Consultez `LICENSE` pour plus d'informations.
|
||||||
@@ -31,12 +31,14 @@
|
|||||||
<a href="https://donate.termix.site/"><img alt="Donate" src="https://img.shields.io/badge/Donate-Support%20Termix-F39044?style=flat&labelColor=1a1a1a" /></a>
|
<a href="https://donate.termix.site/"><img alt="Donate" src="https://img.shields.io/badge/Donate-Support%20Termix-F39044?style=flat&labelColor=1a1a1a" /></a>
|
||||||
</p>
|
</p>
|
||||||
|
|
||||||
|
<p>
|
||||||
|
<a href="https://donate.termix.site/"><img alt="Donations this month" src="https://img.shields.io/badge/dynamic/json?style=for-the-badge&label=Donations%20this%20month&query=%24.fiatTotal&prefix=%24&url=https%3A%2F%2Ftermix.site%2Fdonation-snapshot.json&color=F39044&labelColor=1a1a1a" /></a>
|
||||||
|
</p>
|
||||||
|
|
||||||
<br />
|
<br />
|
||||||
|
|
||||||
Termix मुफ़्त और ओपन सोर्स है। यदि आपको यह उपयोगी लगता है, तो सर्वर लागत और विकास समय में मदद के लिए [दान करें](https://donate.termix.site/)।
|
Termix मुफ़्त और ओपन सोर्स है। यदि आपको यह उपयोगी लगता है, तो सर्वर लागत और विकास समय में मदद के लिए [दान करें](https://donate.termix.site/)।
|
||||||
|
|
||||||
<a href="https://donate.termix.site/"><img src="../repo-images/donation-goal.svg" alt="Monthly donation goal" /></a>
|
|
||||||
|
|
||||||
<br />
|
<br />
|
||||||
|
|
||||||
<img src="../repo-images/Termix Header.png" alt="Termix Banner" width="900" />
|
<img src="../repo-images/Termix Header.png" alt="Termix Banner" width="900" />
|
||||||
@@ -56,7 +58,7 @@ Termix मुफ़्त और ओपन सोर्स है। यदि
|
|||||||
|
|
||||||
## अवलोकन
|
## अवलोकन
|
||||||
|
|
||||||
Termix एक ओपन-सोर्स, हमेशा के लिए मुफ़्त, सेल्फ-होस्टेड ऑल-इन-वन सर्वर प्रबंधन प्लेटफ़ॉर्म है। यह एक एकल, सहज इंटरफ़ेस के माध्यम से आपके सर्वर और बुनियादी ढाँचे के प्रबंधन के लिए एक मल्टी-प्लेटफ़ॉर्म समाधान प्रदान करता है। Termix SSH टर्मिनल एक्सेस, रिमोट डेस्कटॉप कंट्रोल (RDP, VNC, Telnet), SSH टनलिंग क्षमताएँ, रिमोट SSH फ़ाइल प्रबंधन, और कई अन्य उपकरण प्रदान करता है। Termix सभी प्लेटफ़ॉर्म पर उपलब्ध Termius का सही मुफ़्त और सेल्फ-होस्टेड विकल्प है।
|
Termix एक ओपन-सोर्स, हमेशा के लिए मुफ़्त, सेल्फ-होस्टेड ऑल-इन-वन सर्वर प्रबंधन प्लेटफ़ॉर्म है। यह एक एकल, सहज इंटरफ़ेस के माध्यम से आपके सर्वर और बुनियादी ढाँचे के प्रबंधन के लिए एक मल्टी-प्लेटफ़ॉर्म समाधान प्रदान करता है। Termix SSH टर्मिनल एक्सेस, रिमोट डेस्कटॉप कंट्रोल (RDP, VNC, Telnet), SSH टनलिंग क्षमताएँ, रिमोट फ़ाइल प्रबंधन, और कई अन्य उपकरण प्रदान करता है। Termix सभी प्लेटफ़ॉर्म पर उपलब्ध Termius का सही मुफ़्त और सेल्फ-होस्टेड विकल्प है।
|
||||||
|
|
||||||
<br />
|
<br />
|
||||||
|
|
||||||
@@ -81,13 +83,13 @@ Termix एक ओपन-सोर्स, हमेशा के लिए मु
|
|||||||
<td width="50%" valign="top">
|
<td width="50%" valign="top">
|
||||||
|
|
||||||
**SSH टनल प्रबंधन:**
|
**SSH टनल प्रबंधन:**
|
||||||
ऑटोमैटिक रीकनेक्शन, हेल्थ मॉनिटरिंग और लोकल, रिमोट या डायनेमिक SOCKS फॉरवर्डिंग के साथ सर्वर-टु-सर्वर SSH टनल बनाएँ और प्रबंधित करें। डेस्कटॉप क्लाइंट-टु-सर्वर टनल सेटिंग्स प्रत्येक डेस्कटॉप इंस्टॉल में स्थानीय रूप से संग्रहीत होती हैं; वैकल्पिक C2S प्रीसेट स्नैपशॉट सर्वर पर सेव, रीनेम, लोड या डिलीट किए जा सकते हैं।
|
ऑटोमैटिक रीकनेक्शन, हेल्थ मॉनिटरिंग और लोकल, रिमोट या डायनेमिक SOCKS फॉरवर्डिंग के साथ सर्वर-टु-सर्वर SSH टनल बनाएँ और प्रबंधित करें। डेस्कटॉप क्लाइंट-टु-सर्वर टनल सेटिंग्स प्रत्येक डेस्कटॉप इंस्टॉल में स्थानीय रूप से संग्रहीत होती हैं; वैकल्पिक C2S प्रीसेट स्नैपशॉट सर्वर पर सेव किए जा सकते हैं, तथा जब आप किसी लोकल टनल कॉन्फ़िगरेशन को क्लाइंट के बीच स्थानांतरित करना चाहें तो उन्हें रीनेम, लोड या डिलीट किया जा सकता है।
|
||||||
|
|
||||||
</td>
|
</td>
|
||||||
<td width="50%" valign="top">
|
<td width="50%" valign="top">
|
||||||
|
|
||||||
**रिमोट फ़ाइल मैनेजर:**
|
**रिमोट फ़ाइल मैनेजर:**
|
||||||
कोड, इमेज, ऑडियो और वीडियो देखने और संपादित करने के सपोर्ट के साथ रिमोट सर्वर पर सीधे फ़ाइलें प्रबंधित करें। sudo सपोर्ट के साथ फ़ाइलें अपलोड, डाउनलोड, रीनेम, डिलीट और मूव करें।
|
कोड, इमेज, ऑडियो और वीडियो देखने और संपादित करने के सपोर्ट के साथ रिमोट सर्वर पर सीधे फ़ाइलें प्रबंधित करें। sudo सपोर्ट के साथ फ़ाइलें अपलोड, डाउनलोड, रीनेम, डिलीट और मूव करें। इसमें फ़ाइलों को एक सर्वर से दूसरे सर्वर में स्थानांतरित करने का सपोर्ट भी शामिल है।
|
||||||
|
|
||||||
</td>
|
</td>
|
||||||
</tr>
|
</tr>
|
||||||
@@ -109,13 +111,13 @@ Termix एक ओपन-सोर्स, हमेशा के लिए मु
|
|||||||
<td width="50%" valign="top">
|
<td width="50%" valign="top">
|
||||||
|
|
||||||
**होस्ट मेट्रिक्स:**
|
**होस्ट मेट्रिक्स:**
|
||||||
अधिकांश Linux आधारित सर्वर पर CPU, मेमोरी, डिस्क उपयोग, नेटवर्क, अपटाइम, सिस्टम जानकारी, फ़ायरवॉल, पोर्ट मॉनिटर, लॉग व्यूअर, उपयोगकर्ता/अनुमतियाँ, सर्टिफ़िकेट और भी बहुत कुछ देखें।
|
अधिकांश Linux आधारित सर्वर पर CPU, मेमोरी, डिस्क उपयोग, नेटवर्क, अपटाइम, सिस्टम जानकारी, फ़ायरवॉल, पोर्ट मॉनिटर, लॉग व्यूअर, उपयोगकर्ता/अनुमतियाँ, सर्टिफ़िकेट और भी बहुत कुछ देखें। इसमें टाइम-सीरीज़ हिस्ट्री ग्राफ़ और ntfy व webhook सपोर्ट के साथ थ्रेशोल्ड-आधारित अलर्ट शामिल हैं।
|
||||||
|
|
||||||
</td>
|
</td>
|
||||||
<td width="50%" valign="top">
|
<td width="50%" valign="top">
|
||||||
|
|
||||||
**उपयोगकर्ता प्रमाणीकरण:**
|
**उपयोगकर्ता प्रमाणीकरण:**
|
||||||
व्यवस्थापक नियंत्रण और OIDC/LDAP/SSO (एक्सेस कंट्रोल के साथ) और 2FA (TOTP) सपोर्ट के साथ सुरक्षित उपयोगकर्ता प्रबंधन। सभी प्लेटफ़ॉर्म पर सक्रिय उपयोगकर्ता सत्र देखें और अनुमतियाँ रद्द करें। अपने OIDC/स्थानीय खातों को एक साथ जोड़ें। सभी उपयोगकर्ताओं की कार्रवाइयों का ऑडिट लॉग देखें।
|
व्यवस्थापक नियंत्रण (अन्य उपयोगकर्ताओं की जानकारी संपादित कर सकते हैं) और OIDC/LDAP/SSO (एक्सेस कंट्रोल के साथ), 2FA (TOTP), और पासकी (WebAuthn) सपोर्ट के साथ सुरक्षित उपयोगकर्ता प्रबंधन। सभी प्लेटफ़ॉर्म पर सक्रिय उपयोगकर्ता सत्र देखें और अनुमतियाँ रद्द करें। अपने OIDC/स्थानीय खातों को एक साथ जोड़ें। सभी उपयोगकर्ताओं की कार्रवाइयों का ऑडिट लॉग देखें।
|
||||||
|
|
||||||
</td>
|
</td>
|
||||||
</tr>
|
</tr>
|
||||||
@@ -128,8 +130,8 @@ Termix एक ओपन-सोर्स, हमेशा के लिए मु
|
|||||||
</td>
|
</td>
|
||||||
<td width="50%" valign="top">
|
<td width="50%" valign="top">
|
||||||
|
|
||||||
**RBAC:**
|
**RBAC/शेयरिंग:**
|
||||||
भूमिकाएँ बनाएँ और उपयोगकर्ताओं/भूमिकाओं में होस्ट साझा करें।
|
भूमिकाएँ बनाएँ और उपयोगकर्ताओं/भूमिकाओं में होस्ट साझा करें। सभी प्रमाणीकरण प्रकारों और सभी होस्ट प्रोटोकॉल का सपोर्ट करता है।
|
||||||
|
|
||||||
</td>
|
</td>
|
||||||
</tr>
|
</tr>
|
||||||
@@ -206,7 +208,8 @@ Termix एक ओपन-सोर्स, हमेशा के लिए मु
|
|||||||
- **क्विक कनेक्ट** - कनेक्शन डेटा सहेजे बिना सर्वर से कनेक्ट करें
|
- **क्विक कनेक्ट** - कनेक्शन डेटा सहेजे बिना सर्वर से कनेक्ट करें
|
||||||
- **कमांड पैलेट** - अपने कीबोर्ड से SSH कनेक्शन तक त्वरित पहुँच के लिए बाएँ Shift को दो बार टैप करें
|
- **कमांड पैलेट** - अपने कीबोर्ड से SSH कनेक्शन तक त्वरित पहुँच के लिए बाएँ Shift को दो बार टैप करें
|
||||||
- **Proxmox एकीकरण** - अपने Proxmox इंस्टेंस से Termix में होस्ट स्वचालित रूप से जोड़ें
|
- **Proxmox एकीकरण** - अपने Proxmox इंस्टेंस से Termix में होस्ट स्वचालित रूप से जोड़ें
|
||||||
- **SSH सुविधाओं से भरपूर** - जम्प होस्ट, Warpgate, TOTP आधारित कनेक्शन, SOCKS5, होस्ट की वेरिफ़िकेशन, पासवर्ड ऑटोफ़िल, [OPKSSH](https://github.com/openpubkey/opkssh), tmux, पोर्ट नॉकिंग, टर्मिनल लॉगिंग आदि का सपोर्ट
|
- **SSH सुविधाओं से भरपूर** - जम्प होस्ट, Warpgate, TOTP आधारित कनेक्शन, SOCKS5, होस्ट की वेरिफ़िकेशन, पासवर्ड ऑटोफ़िल, [OPKSSH](https://github.com/openpubkey/opkssh), tmux, पोर्ट नॉकिंग, टर्मिनल लॉगिंग, SSH एजेंट फ़ॉरवर्डिंग, Bitwarden SSH एजेंट, HashiCorp Vault SSH सिग्निंग, और अन्य का सपोर्ट।
|
||||||
|
- **Termix ID** - Termix में बिल्ट-इन sshid.io के समकक्ष। एक हैंडल क्लेम करें, अपनी सार्वजनिक SSH कुंजियों को एक रिज़ॉल्वर URL पर प्रकाशित करें, और SSH सर्टिफ़िकेट जारी करने के लिए बिल्ट-इन CA का उपयोग करें।
|
||||||
|
|
||||||
</details>
|
</details>
|
||||||
|
|
||||||
@@ -249,7 +252,9 @@ Termix एक ओपन-सोर्स, हमेशा के लिए मु
|
|||||||
|
|
||||||
## इंस्टॉलेशन
|
## इंस्टॉलेशन
|
||||||
|
|
||||||
सभी प्लेटफ़ॉर्म पर Termix इंस्टॉल करने के बारे में अधिक जानकारी के लिए Termix [डॉक्स](https://docs.termix.site/install) पर जाएँ। यहाँ एक नमूना Docker Compose फ़ाइल देखें (यदि आप रिमोट डेस्कटॉप सुविधाओं का उपयोग करने की योजना नहीं बना रहे हैं तो आप guacd और नेटवर्क को हटा सकते हैं):
|
सभी प्लेटफ़ॉर्म पर पूर्ण इंस्टॉलेशन निर्देशों के लिए Termix [डॉक्स](https://docs.termix.site/install) पर जाएँ।
|
||||||
|
|
||||||
|
नमूना Docker Compose फ़ाइल (यदि आप रिमोट डेस्कटॉप सुविधाओं का उपयोग करने की योजना नहीं बना रहे हैं तो आप `guacd` और नेटवर्क को हटा सकते हैं):
|
||||||
|
|
||||||
```yaml
|
```yaml
|
||||||
services:
|
services:
|
||||||
@@ -290,9 +295,59 @@ networks:
|
|||||||
|
|
||||||
## दान करें
|
## दान करें
|
||||||
|
|
||||||
Termix मुफ़्त और ओपन सोर्स है। यदि आपको यह उपयोगी लगता है, तो सर्वर लागत और विकास समय में मदद के लिए [दान करें](https://donate.termix.site/)।
|
Termix मुफ़्त और ओपन सोर्स है, बिना किसी सब्सक्रिप्शन या पेड प्लान के। यदि आपको यह उपयोगी लगता है, तो सर्वर लागत, डोमेन और विकास समय को कवर करने में मदद के लिए दान करने पर विचार करें। दान SAML, Kubernetes, और Agent सपोर्ट जैसी सुविधाओं के निर्माण के लिए आवश्यक शोध और सीखने में लगने वाले समय को वित्त पोषित करने में भी मदद करते हैं। नीचे प्रगति देखें और दान करें।
|
||||||
|
|
||||||
<a href="https://donate.termix.site/"><img src="../repo-images/donation-goal.svg" alt="Monthly donation goal" /></a>
|
[दान करें](https://donate.termix.site/)
|
||||||
|
|
||||||
|
<br />
|
||||||
|
|
||||||
|
## प्रायोजक
|
||||||
|
|
||||||
|
विकास को समर्थन देने के लिए पेड प्लेसमेंट में रुचि है? [mail@termix.site](mailto:mail@termix.site) पर ईमेल करें।
|
||||||
|
|
||||||
|
<div align="center">
|
||||||
|
|
||||||
|
<br />
|
||||||
|
|
||||||
|
<a href="https://www.digitalocean.com/">
|
||||||
|
<img src="https://opensource.nyc3.cdn.digitaloceanspaces.com/attribution/assets/SVG/DO_Logo_horizontal_blue.svg" height="40" alt="DigitalOcean" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://crowdin.com/">
|
||||||
|
<img src="https://support.crowdin.com/assets/logos/core-logo/svg/crowdin-core-logo-cDark.svg" height="40" alt="Crowdin" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://www.blacksmith.sh/">
|
||||||
|
<img src="https://cdn.prod.website-files.com/681bfb0c9a4601bc6e288ec4/683ca9e2c5186757092611b8_e8cb22127df4da0811c4120a523722d2_logo-backsmith-wordmark-light.svg" height="40" alt="Blacksmith" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://www.cloudflare.com/">
|
||||||
|
<img src="https://sirv.sirv.com/website/screenshots/cloudflare/cloudflare-logo.png?w=300" height="40" alt="Cloudflare" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://tailscale.com/">
|
||||||
|
<img src="https://drive.google.com/uc?export=view&id=1lIxkJuX6M23bW-2FElhT0rQieTrzaVSL" height="40" alt="Tailscale" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://akamai.com/">
|
||||||
|
<img src="https://upload.wikimedia.org/wikipedia/commons/8/8b/Akamai_logo.svg" height="40" alt="Akamai" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://aws.amazon.com/">
|
||||||
|
<img src="https://upload.wikimedia.org/wikipedia/commons/thumb/9/93/Amazon_Web_Services_Logo.svg/960px-Amazon_Web_Services_Logo.svg.png" height="40" alt="AWS" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://rackgenius.com/">
|
||||||
|
<img src="https://rackgenius.com/rackgenius-logo.png" height="40" alt="Rack Genius" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
</div>
|
||||||
|
|
||||||
|
<br />
|
||||||
|
|
||||||
|
## सहायता
|
||||||
|
|
||||||
|
यदि आपको सहायता चाहिए या Termix के लिए किसी विशेषता का अनुरोध करना चाहते हैं, तो [इश्यूज़](https://github.com/Termix-SSH/Support/issues) पेज पर जाएँ, लॉग इन करें, और `New Issue` दबाएँ। कृपया अपने इश्यू में यथासंभव विस्तृत विवरण दें, अधिमानतः अंग्रेज़ी में लिखें। आप [Discord](https://discord.gg/jVQGdvHDrf) सर्वर में भी शामिल हो सकते हैं और सहायता चैनल पर जा सकते हैं, हालाँकि, प्रतिक्रिया समय अधिक हो सकता है।
|
||||||
|
|
||||||
<br />
|
<br />
|
||||||
|
|
||||||
@@ -356,50 +411,6 @@ Termix मुफ़्त और ओपन सोर्स है। यदि
|
|||||||
|
|
||||||
<br />
|
<br />
|
||||||
|
|
||||||
## प्रायोजक
|
|
||||||
|
|
||||||
<div align="center">
|
|
||||||
|
|
||||||
<br />
|
|
||||||
|
|
||||||
<a href="https://www.digitalocean.com/">
|
|
||||||
<img src="https://opensource.nyc3.cdn.digitaloceanspaces.com/attribution/assets/SVG/DO_Logo_horizontal_blue.svg" height="40" alt="DigitalOcean" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://crowdin.com/">
|
|
||||||
<img src="https://support.crowdin.com/assets/logos/core-logo/svg/crowdin-core-logo-cDark.svg" height="40" alt="Crowdin" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://www.blacksmith.sh/">
|
|
||||||
<img src="https://cdn.prod.website-files.com/681bfb0c9a4601bc6e288ec4/683ca9e2c5186757092611b8_e8cb22127df4da0811c4120a523722d2_logo-backsmith-wordmark-light.svg" height="40" alt="Blacksmith" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://www.cloudflare.com/">
|
|
||||||
<img src="https://sirv.sirv.com/website/screenshots/cloudflare/cloudflare-logo.png?w=300" height="40" alt="Cloudflare" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://tailscale.com/">
|
|
||||||
<img src="https://drive.google.com/uc?export=view&id=1lIxkJuX6M23bW-2FElhT0rQieTrzaVSL" height="40" alt="Tailscale" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://akamai.com/">
|
|
||||||
<img src="https://upload.wikimedia.org/wikipedia/commons/8/8b/Akamai_logo.svg" height="40" alt="Akamai" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://aws.amazon.com/">
|
|
||||||
<img src="https://upload.wikimedia.org/wikipedia/commons/thumb/9/93/Amazon_Web_Services_Logo.svg/960px-Amazon_Web_Services_Logo.svg.png" height="40" alt="AWS" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
</div>
|
|
||||||
|
|
||||||
<br />
|
|
||||||
|
|
||||||
## सहायता
|
|
||||||
|
|
||||||
यदि आपको सहायता चाहिए या Termix के लिए किसी विशेषता का अनुरोध करना चाहते हैं, तो [इश्यूज़](https://github.com/Termix-SSH/Support/issues) पेज पर जाएँ, लॉग इन करें, और `New Issue` दबाएँ। कृपया अपने इश्यू में यथासंभव विस्तृत विवरण दें, अधिमानतः अंग्रेज़ी में लिखें। आप [Discord](https://discord.gg/jVQGdvHDrf) सर्वर में भी शामिल हो सकते हैं और सहायता चैनल पर जा सकते हैं, हालाँकि, प्रतिक्रिया समय अधिक हो सकता है।
|
|
||||||
|
|
||||||
<br />
|
|
||||||
|
|
||||||
## लाइसेंस
|
## लाइसेंस
|
||||||
|
|
||||||
Apache License Version 2.0 के तहत वितरित। अधिक जानकारी के लिए `LICENSE` देखें।
|
Apache License Version 2.0 के तहत वितरित। अधिक जानकारी के लिए `LICENSE` देखें।
|
||||||
@@ -31,12 +31,14 @@
|
|||||||
<a href="https://donate.termix.site/"><img alt="Donate" src="https://img.shields.io/badge/Donate-Support%20Termix-F39044?style=flat&labelColor=1a1a1a" /></a>
|
<a href="https://donate.termix.site/"><img alt="Donate" src="https://img.shields.io/badge/Donate-Support%20Termix-F39044?style=flat&labelColor=1a1a1a" /></a>
|
||||||
</p>
|
</p>
|
||||||
|
|
||||||
|
<p>
|
||||||
|
<a href="https://donate.termix.site/"><img alt="Donazioni di questo mese" src="https://img.shields.io/badge/dynamic/json?style=for-the-badge&label=Donazioni%20di%20questo%20mese&query=%24.fiatTotal&prefix=%24&url=https%3A%2F%2Ftermix.site%2Fdonation-snapshot.json&color=F39044&labelColor=1a1a1a" /></a>
|
||||||
|
</p>
|
||||||
|
|
||||||
<br />
|
<br />
|
||||||
|
|
||||||
Termix è gratuito e open source. Se lo trovi utile, considera di [donare](https://donate.termix.site/) per aiutare a coprire i costi del server e il tempo di sviluppo.
|
Termix è gratuito e open source. Se lo trovi utile, considera di [donare](https://donate.termix.site/) per aiutare a coprire i costi del server e il tempo di sviluppo.
|
||||||
|
|
||||||
<a href="https://donate.termix.site/"><img src="../repo-images/donation-goal.svg" alt="Monthly donation goal" /></a>
|
|
||||||
|
|
||||||
<br />
|
<br />
|
||||||
|
|
||||||
<img src="../repo-images/Termix Header.png" alt="Termix Banner" width="900" />
|
<img src="../repo-images/Termix Header.png" alt="Termix Banner" width="900" />
|
||||||
@@ -56,11 +58,11 @@ Termix è gratuito e open source. Se lo trovi utile, considera di [donare](https
|
|||||||
|
|
||||||
## Panoramica
|
## Panoramica
|
||||||
|
|
||||||
Termix e una piattaforma di gestione server tutto-in-uno, open-source, per sempre gratuita e self-hosted. Fornisce una soluzione multipiattaforma per gestire i tuoi server e la tua infrastruttura attraverso un'unica interfaccia intuitiva. Termix offre accesso al terminale SSH, controllo remoto del desktop (RDP, VNC, Telnet), funzionalita di tunneling SSH, gestione remota dei file SSH e molti altri strumenti. Termix e la perfetta alternativa gratuita e self-hosted a Termius, disponibile per tutte le piattaforme.
|
Termix è una piattaforma di gestione server tutto-in-uno, open-source, per sempre gratuita e self-hosted. Fornisce una soluzione multipiattaforma per gestire i tuoi server e la tua infrastruttura attraverso un'unica interfaccia intuitiva. Termix offre accesso al terminale SSH, controllo remoto del desktop (RDP, VNC, Telnet), funzionalità di tunneling SSH, gestione remota dei file e molti altri strumenti. Termix è la perfetta alternativa gratuita e self-hosted a Termius, disponibile per tutte le piattaforme.
|
||||||
|
|
||||||
<br />
|
<br />
|
||||||
|
|
||||||
## Funzionalita
|
## Funzionalità
|
||||||
|
|
||||||
<table>
|
<table>
|
||||||
<tr>
|
<tr>
|
||||||
@@ -87,7 +89,7 @@ Crea e gestisci tunnel SSH da server a server con riconnessione automatica, moni
|
|||||||
<td width="50%" valign="top">
|
<td width="50%" valign="top">
|
||||||
|
|
||||||
**Gestore File Remoto:**
|
**Gestore File Remoto:**
|
||||||
Gestisci i file direttamente sui server remoti con supporto per la visualizzazione e la modifica di codice, immagini, audio e video. Carica, scarica, rinomina, elimina e sposta file senza problemi con supporto sudo.
|
Gestisci i file direttamente sui server remoti con supporto per la visualizzazione e la modifica di codice, immagini, audio e video. Carica, scarica, rinomina, elimina e sposta file senza problemi con supporto sudo. Include il supporto per spostare file da server a server.
|
||||||
|
|
||||||
</td>
|
</td>
|
||||||
</tr>
|
</tr>
|
||||||
@@ -95,7 +97,7 @@ Gestisci i file direttamente sui server remoti con supporto per la visualizzazio
|
|||||||
<td width="50%" valign="top">
|
<td width="50%" valign="top">
|
||||||
|
|
||||||
**Gestione Docker e Podman:**
|
**Gestione Docker e Podman:**
|
||||||
Avvia, ferma, metti in pausa, rimuovi container. Visualizza le statistiche dei container. Controlla i container tramite terminale docker exec. Supporta sia Docker che Podman come runtime dei container. Non e stato creato per sostituire Portainer o Dockge, ma piuttosto per gestire semplicemente i tuoi container rispetto alla loro creazione.
|
Avvia, ferma, metti in pausa, rimuovi container. Visualizza le statistiche dei container. Controlla i container tramite terminale docker exec. Supporta sia Docker che Podman come runtime dei container. Non è stato creato per sostituire Portainer o Dockge, ma piuttosto per gestire semplicemente i tuoi container rispetto alla loro creazione.
|
||||||
|
|
||||||
</td>
|
</td>
|
||||||
<td width="50%" valign="top">
|
<td width="50%" valign="top">
|
||||||
@@ -109,13 +111,13 @@ Salva, organizza e gestisci le tue connessioni SSH con tag e cartelle (con perso
|
|||||||
<td width="50%" valign="top">
|
<td width="50%" valign="top">
|
||||||
|
|
||||||
**Metriche Host:**
|
**Metriche Host:**
|
||||||
Visualizza l'utilizzo di CPU, memoria, disco, rete, uptime, informazioni di sistema, firewall, monitoraggio porte, visualizzatore di log, utenti/permessi, certificati e molto altro sulla maggior parte dei server basati su Linux.
|
Visualizza CPU, memoria, utilizzo del disco, rete, uptime, informazioni di sistema, firewall, monitoraggio porte, visualizzatore di log, utenti/permessi, certificati e molto altro, funzionanti sulla maggior parte dei server basati su Linux. Include grafici storici delle serie temporali e avvisi basati su soglie con supporto ntfy e webhook.
|
||||||
|
|
||||||
</td>
|
</td>
|
||||||
<td width="50%" valign="top">
|
<td width="50%" valign="top">
|
||||||
|
|
||||||
**Autenticazione Utente:**
|
**Autenticazione Utente:**
|
||||||
Gestione utenti sicura con controlli amministrativi e supporto OIDC/LDAP/SSO (con controllo degli accessi) e 2FA (TOTP). Visualizza le sessioni utente attive su tutte le piattaforme e revoca i permessi. Collega i tuoi account OIDC/Locali tra loro. Visualizza il log di controllo delle azioni di tutti gli utenti.
|
Gestione utenti sicura con controlli amministrativi (può modificare le informazioni di altri utenti) e OIDC/LDAP/SSO (con controllo degli accessi), 2FA (TOTP) e supporto passkey (WebAuthn). Visualizza le sessioni utente attive su tutte le piattaforme e revoca i permessi. Collega i tuoi account OIDC/Locali tra loro. Visualizza il log di controllo delle azioni di tutti gli utenti.
|
||||||
|
|
||||||
</td>
|
</td>
|
||||||
</tr>
|
</tr>
|
||||||
@@ -128,8 +130,8 @@ Elenca i dispositivi della tua rete Tailscale per aggiungerli rapidamente come h
|
|||||||
</td>
|
</td>
|
||||||
<td width="50%" valign="top">
|
<td width="50%" valign="top">
|
||||||
|
|
||||||
**RBAC:**
|
**RBAC/Condivisione:**
|
||||||
Crea ruoli e condividi host tra utenti/ruoli.
|
Crea ruoli e condividi host tra utenti/ruoli. Supporta tutti i tipi di autenticazione e tutti i protocolli host.
|
||||||
|
|
||||||
</td>
|
</td>
|
||||||
</tr>
|
</tr>
|
||||||
@@ -137,7 +139,7 @@ Crea ruoli e condividi host tra utenti/ruoli.
|
|||||||
<td width="50%" valign="top">
|
<td width="50%" valign="top">
|
||||||
|
|
||||||
**Connessioni Seriali:**
|
**Connessioni Seriali:**
|
||||||
Connettiti a dispositivi seriali (router, switch, microcontrollori, ecc.) direttamente dal browser o dall'app desktop. Configura baud rate, bit di dati, bit di stop e parita. Utilizza la Web Serial API nei browser supportati o un backend nativo nell'app Electron.
|
Connettiti a dispositivi seriali (router, switch, microcontrollori, ecc.) direttamente dal browser o dall'app desktop. Configura baud rate, bit di dati, bit di stop e parità. Utilizza la Web Serial API nei browser supportati o un backend nativo nell'app Electron.
|
||||||
|
|
||||||
</td>
|
</td>
|
||||||
<td width="50%" valign="top">
|
<td width="50%" valign="top">
|
||||||
@@ -157,7 +159,7 @@ Una homepage completamente personalizzabile con una griglia di widget drag-and-d
|
|||||||
<td width="50%" valign="top">
|
<td width="50%" valign="top">
|
||||||
|
|
||||||
**Crittografia Database:**
|
**Crittografia Database:**
|
||||||
Il backend e archiviato come file di database SQLite crittografati. Consulta la [documentazione](https://docs.termix.site/security) per maggiori informazioni.
|
Il backend è archiviato come file di database SQLite crittografati. Consulta la [documentazione](https://docs.termix.site/security) per maggiori informazioni.
|
||||||
|
|
||||||
</td>
|
</td>
|
||||||
</tr>
|
</tr>
|
||||||
@@ -171,7 +173,7 @@ Personalizza la tua Dashboard per visualizzare il tuo homelab basato sulle conne
|
|||||||
<td width="50%" valign="top">
|
<td width="50%" valign="top">
|
||||||
|
|
||||||
**Strumenti SSH:**
|
**Strumenti SSH:**
|
||||||
Crea snippet di comandi riutilizzabili che si eseguono con un singolo clic. Esegui un comando simultaneamente su piu terminali aperti.
|
Crea snippet di comandi riutilizzabili che si eseguono con un singolo clic. Esegui un comando simultaneamente su più terminali aperti.
|
||||||
|
|
||||||
</td>
|
</td>
|
||||||
</tr>
|
</tr>
|
||||||
@@ -194,7 +196,7 @@ Supporto integrato per circa 30 lingue (gestito da [Crowdin](https://docs.termix
|
|||||||
<br />
|
<br />
|
||||||
|
|
||||||
<details>
|
<details>
|
||||||
<summary><b>Altre funzionalita</b></summary>
|
<summary><b>Altre funzionalità</b></summary>
|
||||||
<br />
|
<br />
|
||||||
|
|
||||||
- **Dashboard** - Visualizza le informazioni del server a colpo d'occhio sulla tua dashboard
|
- **Dashboard** - Visualizza le informazioni del server a colpo d'occhio sulla tua dashboard
|
||||||
@@ -206,7 +208,8 @@ Supporto integrato per circa 30 lingue (gestito da [Crowdin](https://docs.termix
|
|||||||
- **Connessione Rapida** - Connettiti a un server senza dover salvare i dati di connessione
|
- **Connessione Rapida** - Connettiti a un server senza dover salvare i dati di connessione
|
||||||
- **Palette Comandi** - Premi due volte shift sinistro per accedere rapidamente alle connessioni SSH con la tastiera
|
- **Palette Comandi** - Premi due volte shift sinistro per accedere rapidamente alle connessioni SSH con la tastiera
|
||||||
- **Integrazione Proxmox** - Aggiungi automaticamente host a Termix dalla tua istanza Proxmox
|
- **Integrazione Proxmox** - Aggiungi automaticamente host a Termix dalla tua istanza Proxmox
|
||||||
- **SSH Ricco di Funzionalita** - Supporta jump host, Warpgate, connessioni basate su TOTP, SOCKS5, verifica chiave host, compilazione automatica password, [OPKSSH](https://github.com/openpubkey/opkssh), tmux, port knocking, registrazione terminale, ecc.
|
- **SSH Ricco di Funzionalità** - Supporta jump host, Warpgate, connessioni basate su TOTP, SOCKS5, verifica chiave host, compilazione automatica password, [OPKSSH](https://github.com/openpubkey/opkssh), tmux, port knocking, registrazione terminale, SSH agent forwarding, Bitwarden SSH agent, firma SSH HashiCorp Vault e altro ancora
|
||||||
|
- **Termix ID** - L'equivalente di sshid.io integrato in Termix. Rivendica un handle, pubblica le tue chiavi SSH pubbliche su un URL resolver e utilizza una CA integrata per emettere certificati SSH
|
||||||
|
|
||||||
</details>
|
</details>
|
||||||
|
|
||||||
@@ -225,7 +228,7 @@ Supporto integrato per circa 30 lingue (gestito da [Crowdin](https://docs.termix
|
|||||||
</tr>
|
</tr>
|
||||||
<tr>
|
<tr>
|
||||||
<td align="center"><b>Windows</b> <sub>x64/ia32</sub></td>
|
<td align="center"><b>Windows</b> <sub>x64/ia32</sub></td>
|
||||||
<td>Portable · MSI Installer · Chocolatey</td>
|
<td>Portable · Installer MSI · Chocolatey</td>
|
||||||
</tr>
|
</tr>
|
||||||
<tr>
|
<tr>
|
||||||
<td align="center"><b>Linux</b> <sub>x64/ia32</sub></td>
|
<td align="center"><b>Linux</b> <sub>x64/ia32</sub></td>
|
||||||
@@ -249,7 +252,9 @@ Supporto integrato per circa 30 lingue (gestito da [Crowdin](https://docs.termix
|
|||||||
|
|
||||||
## Installazione
|
## Installazione
|
||||||
|
|
||||||
Visita la [Documentazione](https://docs.termix.site/install) di Termix per maggiori informazioni su come installare Termix su tutte le piattaforme. In alternativa, visualizza un file Docker Compose di esempio qui (puoi omettere guacd e la rete se non prevedi di utilizzare le funzioni di desktop remoto):
|
Visita la [Documentazione Termix](https://docs.termix.site/install) per le istruzioni complete di installazione su tutte le piattaforme.
|
||||||
|
|
||||||
|
File Docker Compose di esempio (puoi omettere `guacd` e la rete se non prevedi di utilizzare le funzioni di desktop remoto):
|
||||||
|
|
||||||
```yaml
|
```yaml
|
||||||
services:
|
services:
|
||||||
@@ -290,9 +295,59 @@ networks:
|
|||||||
|
|
||||||
## Dona
|
## Dona
|
||||||
|
|
||||||
Termix è gratuito e open source. Se lo trovi utile, considera di [donare](https://donate.termix.site/) per aiutare a coprire i costi del server e il tempo di sviluppo.
|
Termix è gratuito e open source, senza abbonamenti o piani a pagamento. Se lo trovi utile, considera di donare per aiutare a coprire i costi del server, i domini e il tempo di sviluppo. Le donazioni aiutano anche a finanziare il tempo necessario per ricercare e imparare ciò che serve per costruire funzionalità come SAML, Kubernetes e supporto Agent. Segui i progressi e dona qui sotto.
|
||||||
|
|
||||||
<a href="https://donate.termix.site/"><img src="../repo-images/donation-goal.svg" alt="Monthly donation goal" /></a>
|
[Dona](https://donate.termix.site/)
|
||||||
|
|
||||||
|
<br />
|
||||||
|
|
||||||
|
## Sponsor
|
||||||
|
|
||||||
|
Interessato a un posizionamento a pagamento per supportare lo sviluppo? Scrivi a [mail@termix.site](mailto:mail@termix.site).
|
||||||
|
|
||||||
|
<div align="center">
|
||||||
|
|
||||||
|
<br />
|
||||||
|
|
||||||
|
<a href="https://www.digitalocean.com/">
|
||||||
|
<img src="https://opensource.nyc3.cdn.digitaloceanspaces.com/attribution/assets/SVG/DO_Logo_horizontal_blue.svg" height="40" alt="DigitalOcean" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://crowdin.com/">
|
||||||
|
<img src="https://support.crowdin.com/assets/logos/core-logo/svg/crowdin-core-logo-cDark.svg" height="40" alt="Crowdin" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://www.blacksmith.sh/">
|
||||||
|
<img src="https://cdn.prod.website-files.com/681bfb0c9a4601bc6e288ec4/683ca9e2c5186757092611b8_e8cb22127df4da0811c4120a523722d2_logo-backsmith-wordmark-light.svg" height="40" alt="Blacksmith" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://www.cloudflare.com/">
|
||||||
|
<img src="https://sirv.sirv.com/website/screenshots/cloudflare/cloudflare-logo.png?w=300" height="40" alt="Cloudflare" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://tailscale.com/">
|
||||||
|
<img src="https://drive.google.com/uc?export=view&id=1lIxkJuX6M23bW-2FElhT0rQieTrzaVSL" height="40" alt="Tailscale" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://akamai.com/">
|
||||||
|
<img src="https://upload.wikimedia.org/wikipedia/commons/8/8b/Akamai_logo.svg" height="40" alt="Akamai" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://aws.amazon.com/">
|
||||||
|
<img src="https://upload.wikimedia.org/wikipedia/commons/thumb/9/93/Amazon_Web_Services_Logo.svg/960px-Amazon_Web_Services_Logo.svg.png" height="40" alt="AWS" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://rackgenius.com/">
|
||||||
|
<img src="https://rackgenius.com/rackgenius-logo.png" height="40" alt="Rack Genius" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
</div>
|
||||||
|
|
||||||
|
<br />
|
||||||
|
|
||||||
|
## Supporto
|
||||||
|
|
||||||
|
Se hai bisogno di aiuto o vuoi richiedere una funzionalità per Termix, visita la pagina [Issues](https://github.com/Termix-SSH/Support/issues), accedi e premi `New Issue`. Per favore, sii il più dettagliato possibile nella tua segnalazione, preferibilmente scritta in inglese. Puoi anche unirti al server [Discord](https://discord.gg/jVQGdvHDrf) e visitare il canale di supporto, tuttavia i tempi di risposta potrebbero essere più lunghi.
|
||||||
|
|
||||||
<br />
|
<br />
|
||||||
|
|
||||||
@@ -344,59 +399,15 @@ Termix è gratuito e open source. Se lo trovi utile, considera di [donare](https
|
|||||||
</tr>
|
</tr>
|
||||||
</table>
|
</table>
|
||||||
|
|
||||||
<sub>Alcuni video e immagini potrebbero non essere aggiornati o potrebbero non mostrare perfettamente le funzionalita.</sub>
|
<sub>Alcuni video e immagini potrebbero non essere aggiornati o potrebbero non mostrare perfettamente le funzionalità.</sub>
|
||||||
|
|
||||||
</div>
|
</div>
|
||||||
|
|
||||||
<br />
|
<br />
|
||||||
|
|
||||||
## Funzionalita Pianificate
|
## Funzionalità Pianificate
|
||||||
|
|
||||||
Consulta [Progetti](https://github.com/orgs/Termix-SSH/projects/5) per tutte le funzionalita pianificate. Se desideri contribuire, consulta [Contribuire](https://github.com/Termix-SSH/Termix/blob/main/CONTRIBUTING.md).
|
Consulta [Projects](https://github.com/orgs/Termix-SSH/projects/5) per tutte le funzionalità pianificate. Se desideri contribuire, consulta [Contributing](https://github.com/Termix-SSH/Termix/blob/main/CONTRIBUTING.md).
|
||||||
|
|
||||||
<br />
|
|
||||||
|
|
||||||
## Sponsor
|
|
||||||
|
|
||||||
<div align="center">
|
|
||||||
|
|
||||||
<br />
|
|
||||||
|
|
||||||
<a href="https://www.digitalocean.com/">
|
|
||||||
<img src="https://opensource.nyc3.cdn.digitaloceanspaces.com/attribution/assets/SVG/DO_Logo_horizontal_blue.svg" height="40" alt="DigitalOcean" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://crowdin.com/">
|
|
||||||
<img src="https://support.crowdin.com/assets/logos/core-logo/svg/crowdin-core-logo-cDark.svg" height="40" alt="Crowdin" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://www.blacksmith.sh/">
|
|
||||||
<img src="https://cdn.prod.website-files.com/681bfb0c9a4601bc6e288ec4/683ca9e2c5186757092611b8_e8cb22127df4da0811c4120a523722d2_logo-backsmith-wordmark-light.svg" height="40" alt="Blacksmith" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://www.cloudflare.com/">
|
|
||||||
<img src="https://sirv.sirv.com/website/screenshots/cloudflare/cloudflare-logo.png?w=300" height="40" alt="Cloudflare" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://tailscale.com/">
|
|
||||||
<img src="https://drive.google.com/uc?export=view&id=1lIxkJuX6M23bW-2FElhT0rQieTrzaVSL" height="40" alt="Tailscale" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://akamai.com/">
|
|
||||||
<img src="https://upload.wikimedia.org/wikipedia/commons/8/8b/Akamai_logo.svg" height="40" alt="Akamai" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://aws.amazon.com/">
|
|
||||||
<img src="https://upload.wikimedia.org/wikipedia/commons/thumb/9/93/Amazon_Web_Services_Logo.svg/960px-Amazon_Web_Services_Logo.svg.png" height="40" alt="AWS" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
</div>
|
|
||||||
|
|
||||||
<br />
|
|
||||||
|
|
||||||
## Supporto
|
|
||||||
|
|
||||||
Se hai bisogno di aiuto o vuoi richiedere una funzionalita per Termix, visita la pagina [Segnalazioni](https://github.com/Termix-SSH/Support/issues), accedi e premi `New Issue`. Per favore, sii il piu dettagliato possibile nella tua segnalazione, preferibilmente scritta in inglese. Puoi anche unirti al server [Discord](https://discord.gg/jVQGdvHDrf) e visitare il canale di supporto, tuttavia i tempi di risposta potrebbero essere piu lunghi.
|
|
||||||
|
|
||||||
<br />
|
<br />
|
||||||
|
|
||||||
@@ -31,12 +31,14 @@
|
|||||||
<a href="https://donate.termix.site/"><img alt="Donate" src="https://img.shields.io/badge/Donate-Support%20Termix-F39044?style=flat&labelColor=1a1a1a" /></a>
|
<a href="https://donate.termix.site/"><img alt="Donate" src="https://img.shields.io/badge/Donate-Support%20Termix-F39044?style=flat&labelColor=1a1a1a" /></a>
|
||||||
</p>
|
</p>
|
||||||
|
|
||||||
|
<p>
|
||||||
|
<a href="https://donate.termix.site/"><img alt="Donations this month" src="https://img.shields.io/badge/dynamic/json?style=for-the-badge&label=Donations%20this%20month&query=%24.fiatTotal&prefix=%24&url=https%3A%2F%2Ftermix.site%2Fdonation-snapshot.json&color=F39044&labelColor=1a1a1a" /></a>
|
||||||
|
</p>
|
||||||
|
|
||||||
<br />
|
<br />
|
||||||
|
|
||||||
Termix は無料のオープンソースプロジェクトです。便利だと感じた場合は、サーバーコストと開発時間のために[寄付](https://donate.termix.site/)をご検討ください。
|
Termix は無料のオープンソースプロジェクトです。便利だと感じた場合は、サーバーコストと開発時間のために[寄付](https://donate.termix.site/)をご検討ください。
|
||||||
|
|
||||||
<a href="https://donate.termix.site/"><img src="../repo-images/donation-goal.svg" alt="Monthly donation goal" /></a>
|
|
||||||
|
|
||||||
<br />
|
<br />
|
||||||
|
|
||||||
<img src="../repo-images/Termix Header.png" alt="Termix Banner" width="900" />
|
<img src="../repo-images/Termix Header.png" alt="Termix Banner" width="900" />
|
||||||
@@ -56,7 +58,7 @@ Termix は無料のオープンソースプロジェクトです。便利だと
|
|||||||
|
|
||||||
## 概要
|
## 概要
|
||||||
|
|
||||||
Termixは、オープンソースで永久無料のセルフホスト型オールインワンサーバー管理プラットフォームです。単一の直感的なインターフェースを通じて、サーバーとインフラストラクチャを管理するマルチプラットフォームソリューションを提供します。Termixは、SSHターミナルアクセス、リモートデスクトップ制御（RDP、VNC、Telnet）、SSHトンネリング機能、リモートSSHファイル管理、およびその他多くのツールを提供します。Termixは、すべてのプラットフォームで利用可能なTermiusの完全無料でセルフホスト可能な代替ソリューションです。
|
Termixは、オープンソースで永久無料のセルフホスト型オールインワンサーバー管理プラットフォームです。単一の直感的なインターフェースを通じて、サーバーとインフラストラクチャを管理するマルチプラットフォームソリューションを提供します。Termixは、SSHターミナルアクセス、リモートデスクトップ制御（RDP、VNC、Telnet）、SSHトンネリング機能、リモートファイル管理、およびその他多くのツールを提供します。Termixは、すべてのプラットフォームで利用可能なTermiusの完全無料でセルフホスト可能な代替ソリューションです。
|
||||||
|
|
||||||
<br />
|
<br />
|
||||||
|
|
||||||
@@ -87,7 +89,7 @@ Termixは、オープンソースで永久無料のセルフホスト型オー
|
|||||||
<td width="50%" valign="top">
|
<td width="50%" valign="top">
|
||||||
|
|
||||||
**リモートファイルマネージャー:**
|
**リモートファイルマネージャー:**
|
||||||
コード、画像、音声、動画の表示・編集に対応し、リモートサーバー上のファイルを直接管理できます。sudo対応でファイルのアップロード、ダウンロード、名前変更、削除、移動をシームレスに実行できます。
|
コード、画像、音声、動画の表示・編集に対応し、リモートサーバー上のファイルを直接管理できます。sudo対応でファイルのアップロード、ダウンロード、名前変更、削除、移動をシームレスに実行できます。サーバー間でのファイル移動にも対応しています。
|
||||||
|
|
||||||
</td>
|
</td>
|
||||||
</tr>
|
</tr>
|
||||||
@@ -109,13 +111,13 @@ Termixは、オープンソースで永久無料のセルフホスト型オー
|
|||||||
<td width="50%" valign="top">
|
<td width="50%" valign="top">
|
||||||
|
|
||||||
**ホストメトリクス:**
|
**ホストメトリクス:**
|
||||||
ほとんどのLinuxベースのサーバーで、CPU、メモリ、ディスク使用量、ネットワーク、アップタイム、システム情報、ファイアウォール、ポートモニター、ログビューア、ユーザー/権限、証明書など、さらに多くの情報を表示できます。
|
ほとんどのLinuxベースのサーバーで、CPU、メモリ、ディスク使用量、ネットワーク、アップタイム、システム情報、ファイアウォール、ポートモニター、ログビューア、ユーザー/権限、証明書など、さらに多くの情報を表示できます。時系列の履歴グラフと、ntfyおよびwebhookに対応したしきい値ベースのアラートを含みます。
|
||||||
|
|
||||||
</td>
|
</td>
|
||||||
<td width="50%" valign="top">
|
<td width="50%" valign="top">
|
||||||
|
|
||||||
**ユーザー認証:**
|
**ユーザー認証:**
|
||||||
管理者コントロールとOIDC/LDAP/SSO（アクセス制御付き）および2FA（TOTP）対応による安全なユーザー管理。すべてのプラットフォームでアクティブなユーザーセッションを表示し、権限を取り消し可能。OIDC/ローカルアカウントの連携が可能です。すべてのユーザー操作の監査ログを表示できます。
|
管理者コントロール（他のユーザー情報を編集可能）とOIDC/LDAP/SSO（アクセス制御付き）、2FA（TOTP）、パスキー（WebAuthn）対応による安全なユーザー管理。すべてのプラットフォームでアクティブなユーザーセッションを表示し、権限を取り消し可能。OIDC/ローカルアカウントの連携が可能です。すべてのユーザー操作の監査ログを表示できます。
|
||||||
|
|
||||||
</td>
|
</td>
|
||||||
</tr>
|
</tr>
|
||||||
@@ -123,13 +125,13 @@ Termixは、オープンソースで永久無料のセルフホスト型オー
|
|||||||
<td width="50%" valign="top">
|
<td width="50%" valign="top">
|
||||||
|
|
||||||
**Tailscaleインテグレーション:**
|
**Tailscaleインテグレーション:**
|
||||||
TailnetのデバイスをリストしてホストとしてすばやくH追加し、Tailscale SSHを認証方法として使用して接続します。これにより、TailnetのACLが認証情報を保存せずに認可を処理します。
|
Tailnetのデバイスをリストしてホストとしてすばやく追加し、Tailscale SSHを認証方法として使用して接続します。これにより、TailnetのACLが認証情報を保存せずに認可を処理します。
|
||||||
|
|
||||||
</td>
|
</td>
|
||||||
<td width="50%" valign="top">
|
<td width="50%" valign="top">
|
||||||
|
|
||||||
**RBAC:**
|
**RBAC/共有:**
|
||||||
ロールを作成し、ユーザー/ロール間でホストを共有できます。
|
ロールを作成し、ユーザー/ロール間でホストを共有できます。すべての認証タイプとすべてのホストプロトコルに対応しています。
|
||||||
|
|
||||||
</td>
|
</td>
|
||||||
</tr>
|
</tr>
|
||||||
@@ -206,7 +208,8 @@ TailnetのデバイスをリストしてホストとしてすばやくH追加し
|
|||||||
- **クイック接続** - 接続データを保存せずにサーバーに接続できます
|
- **クイック接続** - 接続データを保存せずにサーバーに接続できます
|
||||||
- **コマンドパレット** - 左Shiftキーを2回押すことで、キーボードからSSH接続に素早くアクセスできます
|
- **コマンドパレット** - 左Shiftキーを2回押すことで、キーボードからSSH接続に素早くアクセスできます
|
||||||
- **Proxmox統合** - Proxmoxインスタンスからホストを自動的にTermixに追加できます
|
- **Proxmox統合** - Proxmoxインスタンスからホストを自動的にTermixに追加できます
|
||||||
- **SSH機能充実** - ジャンプホスト、Warpgate、TOTPベースの接続、SOCKS5、ホストキー検証、パスワード自動入力、[OPKSSH](https://github.com/openpubkey/opkssh)、tmux、ポート敲き（port knocking）、ターミナルログ記録などに対応しています
|
- **SSH機能充実** - ジャンプホスト、Warpgate、TOTPベースの接続、SOCKS5、ホストキー検証、パスワード自動入力、[OPKSSH](https://github.com/openpubkey/opkssh)、tmux、ポート敲き（port knocking）、ターミナルログ記録、SSHエージェントフォワーディング、Bitwarden SSHエージェント、HashiCorp Vault SSH署名などに対応しています
|
||||||
|
- **Termix ID** - Termixに組み込まれたsshid.io相当の機能です。ハンドルを取得し、リゾルバーURLで公開SSHキーを公開し、組み込みCAを使用してSSH証明書を発行できます。
|
||||||
|
|
||||||
</details>
|
</details>
|
||||||
|
|
||||||
@@ -249,7 +252,9 @@ TailnetのデバイスをリストしてホストとしてすばやくH追加し
|
|||||||
|
|
||||||
## インストール
|
## インストール
|
||||||
|
|
||||||
すべてのプラットフォームへのTermixのインストール方法については、Termixの[ドキュメント](https://docs.termix.site/install)をご覧ください。また、以下のサンプルDocker Composeファイルをご覧ください（リモートデスクトップ機能を使用する予定がない場合は、guacdとネットワークの設定を省略できます）：
|
すべてのプラットフォームへのTermixのインストール方法については、[Termixドキュメント](https://docs.termix.site/install)をご覧ください。
|
||||||
|
|
||||||
|
サンプルDocker Composeファイル（リモートデスクトップ機能を使用する予定がない場合は、`guacd`とネットワークの設定を省略できます）：
|
||||||
|
|
||||||
```yaml
|
```yaml
|
||||||
services:
|
services:
|
||||||
@@ -290,9 +295,59 @@ networks:
|
|||||||
|
|
||||||
## 寄付
|
## 寄付
|
||||||
|
|
||||||
Termix は無料のオープンソースプロジェクトです。便利だと感じた場合は、サーバーコストと開発時間のために[寄付](https://donate.termix.site/)をご検討ください。
|
Termixは無料のオープンソースプロジェクトであり、サブスクリプションや有料プランはありません。便利だと感じた場合は、サーバーコスト、ドメイン、開発時間を賄うための寄付をご検討ください。寄付は、SAML、Kubernetes、Agentサポートなどの機能を構築するために必要な調査と学習の時間を確保することにも役立ちます。以下で進捗を確認し、寄付できます。
|
||||||
|
|
||||||
<a href="https://donate.termix.site/"><img src="../repo-images/donation-goal.svg" alt="Monthly donation goal" /></a>
|
[寄付する](https://donate.termix.site/)
|
||||||
|
|
||||||
|
<br />
|
||||||
|
|
||||||
|
## スポンサー
|
||||||
|
|
||||||
|
開発を支援するための有料掲載にご興味がありますか？[mail@termix.site](mailto:mail@termix.site)までメールをお送りください。
|
||||||
|
|
||||||
|
<div align="center">
|
||||||
|
|
||||||
|
<br />
|
||||||
|
|
||||||
|
<a href="https://www.digitalocean.com/">
|
||||||
|
<img src="https://opensource.nyc3.cdn.digitaloceanspaces.com/attribution/assets/SVG/DO_Logo_horizontal_blue.svg" height="40" alt="DigitalOcean" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://crowdin.com/">
|
||||||
|
<img src="https://support.crowdin.com/assets/logos/core-logo/svg/crowdin-core-logo-cDark.svg" height="40" alt="Crowdin" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://www.blacksmith.sh/">
|
||||||
|
<img src="https://cdn.prod.website-files.com/681bfb0c9a4601bc6e288ec4/683ca9e2c5186757092611b8_e8cb22127df4da0811c4120a523722d2_logo-backsmith-wordmark-light.svg" height="40" alt="Blacksmith" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://www.cloudflare.com/">
|
||||||
|
<img src="https://sirv.sirv.com/website/screenshots/cloudflare/cloudflare-logo.png?w=300" height="40" alt="Cloudflare" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://tailscale.com/">
|
||||||
|
<img src="https://drive.google.com/uc?export=view&id=1lIxkJuX6M23bW-2FElhT0rQieTrzaVSL" height="40" alt="Tailscale" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://akamai.com/">
|
||||||
|
<img src="https://upload.wikimedia.org/wikipedia/commons/8/8b/Akamai_logo.svg" height="40" alt="Akamai" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://aws.amazon.com/">
|
||||||
|
<img src="https://upload.wikimedia.org/wikipedia/commons/thumb/9/93/Amazon_Web_Services_Logo.svg/960px-Amazon_Web_Services_Logo.svg.png" height="40" alt="AWS" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://rackgenius.com/">
|
||||||
|
<img src="https://rackgenius.com/rackgenius-logo.png" height="40" alt="Rack Genius" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
</div>
|
||||||
|
|
||||||
|
<br />
|
||||||
|
|
||||||
|
## サポート
|
||||||
|
|
||||||
|
Termixに関するヘルプや機能リクエストが必要な場合は、[Issues](https://github.com/Termix-SSH/Support/issues)ページにアクセスし、ログインして`New Issue`を押してください。Issueはできるだけ詳細に記述し、英語での記述が望ましいです。また、[Discord](https://discord.gg/jVQGdvHDrf)サーバーに参加してサポートチャンネルを利用することもできますが、応答時間が長くなる場合があります。
|
||||||
|
|
||||||
<br />
|
<br />
|
||||||
|
|
||||||
@@ -356,50 +411,6 @@ Termix は無料のオープンソースプロジェクトです。便利だと
|
|||||||
|
|
||||||
<br />
|
<br />
|
||||||
|
|
||||||
## スポンサー
|
|
||||||
|
|
||||||
<div align="center">
|
|
||||||
|
|
||||||
<br />
|
|
||||||
|
|
||||||
<a href="https://www.digitalocean.com/">
|
|
||||||
<img src="https://opensource.nyc3.cdn.digitaloceanspaces.com/attribution/assets/SVG/DO_Logo_horizontal_blue.svg" height="40" alt="DigitalOcean" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://crowdin.com/">
|
|
||||||
<img src="https://support.crowdin.com/assets/logos/core-logo/svg/crowdin-core-logo-cDark.svg" height="40" alt="Crowdin" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://www.blacksmith.sh/">
|
|
||||||
<img src="https://cdn.prod.website-files.com/681bfb0c9a4601bc6e288ec4/683ca9e2c5186757092611b8_e8cb22127df4da0811c4120a523722d2_logo-backsmith-wordmark-light.svg" height="40" alt="Blacksmith" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://www.cloudflare.com/">
|
|
||||||
<img src="https://sirv.sirv.com/website/screenshots/cloudflare/cloudflare-logo.png?w=300" height="40" alt="Cloudflare" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://tailscale.com/">
|
|
||||||
<img src="https://drive.google.com/uc?export=view&id=1lIxkJuX6M23bW-2FElhT0rQieTrzaVSL" height="40" alt="Tailscale" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://akamai.com/">
|
|
||||||
<img src="https://upload.wikimedia.org/wikipedia/commons/8/8b/Akamai_logo.svg" height="40" alt="Akamai" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://aws.amazon.com/">
|
|
||||||
<img src="https://upload.wikimedia.org/wikipedia/commons/thumb/9/93/Amazon_Web_Services_Logo.svg/960px-Amazon_Web_Services_Logo.svg.png" height="40" alt="AWS" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
</div>
|
|
||||||
|
|
||||||
<br />
|
|
||||||
|
|
||||||
## サポート
|
|
||||||
|
|
||||||
Termixに関するヘルプや機能リクエストが必要な場合は、[Issues](https://github.com/Termix-SSH/Support/issues)ページにアクセスし、ログインして`New Issue`を押してください。Issueはできるだけ詳細に記述し、英語での記述が望ましいです。また、[Discord](https://discord.gg/jVQGdvHDrf)サーバーに参加してサポートチャンネルを利用することもできますが、応答時間が長くなる場合があります。
|
|
||||||
|
|
||||||
<br />
|
|
||||||
|
|
||||||
## ライセンス
|
## ライセンス
|
||||||
|
|
||||||
Apache License Version 2.0のもとで配布されています。詳細は`LICENSE`をご覧ください。
|
Apache License Version 2.0のもとで配布されています。詳細は`LICENSE`をご覧ください。
|
||||||
@@ -31,12 +31,14 @@
|
|||||||
<a href="https://donate.termix.site/"><img alt="Donate" src="https://img.shields.io/badge/Donate-Support%20Termix-F39044?style=flat&labelColor=1a1a1a" /></a>
|
<a href="https://donate.termix.site/"><img alt="Donate" src="https://img.shields.io/badge/Donate-Support%20Termix-F39044?style=flat&labelColor=1a1a1a" /></a>
|
||||||
</p>
|
</p>
|
||||||
|
|
||||||
|
<p>
|
||||||
|
<a href="https://donate.termix.site/"><img alt="Donations this month" src="https://img.shields.io/badge/dynamic/json?style=for-the-badge&label=Donations%20this%20month&query=%24.fiatTotal&prefix=%24&url=https%3A%2F%2Ftermix.site%2Fdonation-snapshot.json&color=F39044&labelColor=1a1a1a" /></a>
|
||||||
|
</p>
|
||||||
|
|
||||||
<br />
|
<br />
|
||||||
|
|
||||||
Termix는 무료 오픈소스 프로젝트입니다. 유용하게 사용하고 있다면 서버 비용과 개발 시간을 위해 [후원](https://donate.termix.site/)을 고려해 주세요.
|
Termix는 무료 오픈소스 프로젝트입니다. 유용하게 사용하고 있다면 서버 비용과 개발 시간을 위해 [후원](https://donate.termix.site/)을 고려해 주세요.
|
||||||
|
|
||||||
<a href="https://donate.termix.site/"><img src="../repo-images/donation-goal.svg" alt="Monthly donation goal" /></a>
|
|
||||||
|
|
||||||
<br />
|
<br />
|
||||||
|
|
||||||
<img src="../repo-images/Termix Header.png" alt="Termix Banner" width="900" />
|
<img src="../repo-images/Termix Header.png" alt="Termix Banner" width="900" />
|
||||||
@@ -87,7 +89,7 @@ Termix는 오픈 소스이며 영구 무료인 셀프 호스팅 올인원 서버
|
|||||||
<td width="50%" valign="top">
|
<td width="50%" valign="top">
|
||||||
|
|
||||||
**원격 파일 관리자:**
|
**원격 파일 관리자:**
|
||||||
코드, 이미지, 오디오, 비디오의 보기 및 편집을 지원하여 원격 서버에서 파일을 직접 관리. sudo 지원으로 파일 업로드, 다운로드, 이름 변경, 삭제, 이동을 원활하게 수행.
|
코드, 이미지, 오디오, 비디오의 보기 및 편집을 지원하여 원격 서버에서 파일을 직접 관리. sudo 지원으로 파일 업로드, 다운로드, 이름 변경, 삭제, 이동을 원활하게 수행. 서버 간 파일 이동도 지원합니다.
|
||||||
|
|
||||||
</td>
|
</td>
|
||||||
</tr>
|
</tr>
|
||||||
@@ -109,13 +111,13 @@ Termix는 오픈 소스이며 영구 무료인 셀프 호스팅 올인원 서버
|
|||||||
<td width="50%" valign="top">
|
<td width="50%" valign="top">
|
||||||
|
|
||||||
**호스트 메트릭:**
|
**호스트 메트릭:**
|
||||||
대부분의 Linux 기반 서버에서 CPU, 메모리, 디스크 사용량, 네트워크, 업타임, 시스템 정보, 방화벽, 포트 모니터, 로그 뷰어, 사용자/권한, 인증서 등 다양한 정보를 표시.
|
대부분의 Linux 기반 서버에서 CPU, 메모리, 디스크 사용량, 네트워크, 업타임, 시스템 정보, 방화벽, 포트 모니터, 로그 뷰어, 사용자/권한, 인증서 등 다양한 정보를 표시. 시계열 히스토리 그래프와 ntfy 및 웹훅을 지원하는 임계값 기반 알림을 포함합니다.
|
||||||
|
|
||||||
</td>
|
</td>
|
||||||
<td width="50%" valign="top">
|
<td width="50%" valign="top">
|
||||||
|
|
||||||
**사용자 인증:**
|
**사용자 인증:**
|
||||||
관리자 제어와 OIDC/LDAP/SSO(액세스 제어 포함) 및 2FA(TOTP) 지원을 통한 안전한 사용자 관리. 모든 플랫폼에서 활성 사용자 세션을 보고 권한을 취소 가능. OIDC/로컬 계정 연동. 모든 사용자 작업의 감사 로그 조회.
|
관리자 제어(다른 사용자 정보 편집 가능)와 OIDC/LDAP/SSO(액세스 제어 포함), 2FA(TOTP), 패스키(WebAuthn) 지원을 통한 안전한 사용자 관리. 모든 플랫폼에서 활성 사용자 세션을 보고 권한을 취소 가능. OIDC/로컬 계정 연동. 모든 사용자 작업의 감사 로그 조회.
|
||||||
|
|
||||||
</td>
|
</td>
|
||||||
</tr>
|
</tr>
|
||||||
@@ -128,8 +130,8 @@ Tailscale 네트워크의 기기를 나열하여 호스트로 빠르게 추가
|
|||||||
</td>
|
</td>
|
||||||
<td width="50%" valign="top">
|
<td width="50%" valign="top">
|
||||||
|
|
||||||
**RBAC:**
|
**RBAC/공유:**
|
||||||
역할을 생성하고 사용자/역할 간에 호스트 공유.
|
역할을 생성하고 사용자/역할 간에 호스트를 공유합니다. 모든 인증 유형과 모든 호스트 프로토콜을 지원합니다.
|
||||||
|
|
||||||
</td>
|
</td>
|
||||||
</tr>
|
</tr>
|
||||||
@@ -206,7 +208,8 @@ Tailscale 네트워크의 기기를 나열하여 호스트로 빠르게 추가
|
|||||||
- **빠른 연결** - 연결 데이터를 저장하지 않고 서버에 접속
|
- **빠른 연결** - 연결 데이터를 저장하지 않고 서버에 접속
|
||||||
- **명령어 팔레트** - 왼쪽 Shift 키를 두 번 눌러 키보드로 SSH 연결에 빠르게 접근
|
- **명령어 팔레트** - 왼쪽 Shift 키를 두 번 눌러 키보드로 SSH 연결에 빠르게 접근
|
||||||
- **Proxmox 통합** - Proxmox 인스턴스에서 Termix로 호스트를 자동 추가
|
- **Proxmox 통합** - Proxmox 인스턴스에서 Termix로 호스트를 자동 추가
|
||||||
- **풍부한 SSH 기능** - 점프 호스트, Warpgate, TOTP 기반 연결, SOCKS5, 호스트 키 검증, 비밀번호 자동 입력, [OPKSSH](https://github.com/openpubkey/opkssh), tmux, 포트 노킹, 터미널 로깅 등 지원
|
- **풍부한 SSH 기능** - 점프 호스트, Warpgate, TOTP 기반 연결, SOCKS5, 호스트 키 검증, 비밀번호 자동 입력, [OPKSSH](https://github.com/openpubkey/opkssh), tmux, 포트 노킹, 터미널 로깅, SSH 에이전트 포워딩, Bitwarden SSH 에이전트, HashiCorp Vault SSH 서명 등 지원.
|
||||||
|
- **Termix ID** - Termix에 내장된 sshid.io와 동등한 기능. 핸들을 등록하고, 리졸버 URL에 공개 SSH 키를 게시하며, 내장 CA를 사용하여 SSH 인증서를 발급할 수 있습니다.
|
||||||
|
|
||||||
</details>
|
</details>
|
||||||
|
|
||||||
@@ -249,7 +252,9 @@ Tailscale 네트워크의 기기를 나열하여 호스트로 빠르게 추가
|
|||||||
|
|
||||||
## 설치
|
## 설치
|
||||||
|
|
||||||
모든 플랫폼에 Termix를 설치하는 방법에 대한 자세한 내용은 Termix [문서](https://docs.termix.site/install)를 방문하세요. 다음은 Docker Compose 파일 예시입니다(원격 데스크톱 기능을 사용할 계획이 없다면 guacd와 네트워크를 생략할 수 있습니다):
|
모든 플랫폼에 Termix를 설치하는 방법에 대한 자세한 내용은 Termix [문서](https://docs.termix.site/install)를 방문하세요.
|
||||||
|
|
||||||
|
다음은 Docker Compose 파일 예시입니다(원격 데스크톱 기능을 사용할 계획이 없다면 guacd와 네트워크를 생략할 수 있습니다):
|
||||||
|
|
||||||
```yaml
|
```yaml
|
||||||
services:
|
services:
|
||||||
@@ -290,9 +295,59 @@ networks:
|
|||||||
|
|
||||||
## 후원
|
## 후원
|
||||||
|
|
||||||
Termix는 무료 오픈소스 프로젝트입니다. 유용하게 사용하고 있다면 서버 비용과 개발 시간을 위해 [후원](https://donate.termix.site/)을 고려해 주세요.
|
Termix는 구독이나 유료 요금제가 없는 무료 오픈소스 프로젝트입니다. 유용하게 사용하고 있다면 서버 비용, 도메인, 개발 시간을 위해 후원을 고려해 주세요. 후원은 SAML, Kubernetes, 에이전트 지원과 같은 기능을 구축하는 데 필요한 사항을 연구하고 학습하는 시간에도 사용됩니다. 아래에서 진행 상황을 확인하고 후원할 수 있습니다.
|
||||||
|
|
||||||
<a href="https://donate.termix.site/"><img src="../repo-images/donation-goal.svg" alt="Monthly donation goal" /></a>
|
[후원하기](https://donate.termix.site/)
|
||||||
|
|
||||||
|
<br />
|
||||||
|
|
||||||
|
## 스폰서
|
||||||
|
|
||||||
|
개발 지원을 위한 유료 광고에 관심이 있으신가요? [mail@termix.site](mailto:mail@termix.site)로 이메일을 보내주세요.
|
||||||
|
|
||||||
|
<div align="center">
|
||||||
|
|
||||||
|
<br />
|
||||||
|
|
||||||
|
<a href="https://www.digitalocean.com/">
|
||||||
|
<img src="https://opensource.nyc3.cdn.digitaloceanspaces.com/attribution/assets/SVG/DO_Logo_horizontal_blue.svg" height="40" alt="DigitalOcean" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://crowdin.com/">
|
||||||
|
<img src="https://support.crowdin.com/assets/logos/core-logo/svg/crowdin-core-logo-cDark.svg" height="40" alt="Crowdin" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://www.blacksmith.sh/">
|
||||||
|
<img src="https://cdn.prod.website-files.com/681bfb0c9a4601bc6e288ec4/683ca9e2c5186757092611b8_e8cb22127df4da0811c4120a523722d2_logo-backsmith-wordmark-light.svg" height="40" alt="Blacksmith" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://www.cloudflare.com/">
|
||||||
|
<img src="https://sirv.sirv.com/website/screenshots/cloudflare/cloudflare-logo.png?w=300" height="40" alt="Cloudflare" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://tailscale.com/">
|
||||||
|
<img src="https://drive.google.com/uc?export=view&id=1lIxkJuX6M23bW-2FElhT0rQieTrzaVSL" height="40" alt="Tailscale" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://akamai.com/">
|
||||||
|
<img src="https://upload.wikimedia.org/wikipedia/commons/8/8b/Akamai_logo.svg" height="40" alt="Akamai" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://aws.amazon.com/">
|
||||||
|
<img src="https://upload.wikimedia.org/wikipedia/commons/thumb/9/93/Amazon_Web_Services_Logo.svg/960px-Amazon_Web_Services_Logo.svg.png" height="40" alt="AWS" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://rackgenius.com/">
|
||||||
|
<img src="https://rackgenius.com/rackgenius-logo.png" height="40" alt="Rack Genius" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
</div>
|
||||||
|
|
||||||
|
<br />
|
||||||
|
|
||||||
|
## 지원
|
||||||
|
|
||||||
|
Termix에 대한 도움이 필요하거나 기능을 요청하려면 [Issues](https://github.com/Termix-SSH/Support/issues) 페이지를 방문하여 로그인하고 `New Issue`를 누르세요. 이슈는 가능한 한 상세하게 작성하고, 영어로 작성하는 것이 좋습니다. [Discord](https://discord.gg/jVQGdvHDrf) 서버에 참여하여 지원 채널을 이용할 수도 있지만, 응답 시간이 더 길 수 있습니다.
|
||||||
|
|
||||||
<br />
|
<br />
|
||||||
|
|
||||||
@@ -356,50 +411,6 @@ Termix는 무료 오픈소스 프로젝트입니다. 유용하게 사용하고
|
|||||||
|
|
||||||
<br />
|
<br />
|
||||||
|
|
||||||
## 스폰서
|
|
||||||
|
|
||||||
<div align="center">
|
|
||||||
|
|
||||||
<br />
|
|
||||||
|
|
||||||
<a href="https://www.digitalocean.com/">
|
|
||||||
<img src="https://opensource.nyc3.cdn.digitaloceanspaces.com/attribution/assets/SVG/DO_Logo_horizontal_blue.svg" height="40" alt="DigitalOcean" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://crowdin.com/">
|
|
||||||
<img src="https://support.crowdin.com/assets/logos/core-logo/svg/crowdin-core-logo-cDark.svg" height="40" alt="Crowdin" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://www.blacksmith.sh/">
|
|
||||||
<img src="https://cdn.prod.website-files.com/681bfb0c9a4601bc6e288ec4/683ca9e2c5186757092611b8_e8cb22127df4da0811c4120a523722d2_logo-backsmith-wordmark-light.svg" height="40" alt="Blacksmith" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://www.cloudflare.com/">
|
|
||||||
<img src="https://sirv.sirv.com/website/screenshots/cloudflare/cloudflare-logo.png?w=300" height="40" alt="Cloudflare" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://tailscale.com/">
|
|
||||||
<img src="https://drive.google.com/uc?export=view&id=1lIxkJuX6M23bW-2FElhT0rQieTrzaVSL" height="40" alt="Tailscale" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://akamai.com/">
|
|
||||||
<img src="https://upload.wikimedia.org/wikipedia/commons/8/8b/Akamai_logo.svg" height="40" alt="Akamai" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://aws.amazon.com/">
|
|
||||||
<img src="https://upload.wikimedia.org/wikipedia/commons/thumb/9/93/Amazon_Web_Services_Logo.svg/960px-Amazon_Web_Services_Logo.svg.png" height="40" alt="AWS" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
</div>
|
|
||||||
|
|
||||||
<br />
|
|
||||||
|
|
||||||
## 지원
|
|
||||||
|
|
||||||
Termix에 대한 도움이 필요하거나 기능을 요청하려면 [Issues](https://github.com/Termix-SSH/Support/issues) 페이지를 방문하여 로그인하고 `New Issue`를 누르세요. 이슈는 가능한 한 상세하게 작성하고, 영어로 작성하는 것이 좋습니다. [Discord](https://discord.gg/jVQGdvHDrf) 서버에 참여하여 지원 채널을 이용할 수도 있지만, 응답 시간이 더 길 수 있습니다.
|
|
||||||
|
|
||||||
<br />
|
|
||||||
|
|
||||||
## 라이선스
|
## 라이선스
|
||||||
|
|
||||||
Apache License Version 2.0에 따라 배포됩니다. 자세한 내용은 `LICENSE`를 참조하세요.
|
Apache License Version 2.0에 따라 배포됩니다. 자세한 내용은 `LICENSE`를 참조하세요.
|
||||||
@@ -31,12 +31,14 @@
|
|||||||
<a href="https://donate.termix.site/"><img alt="Donate" src="https://img.shields.io/badge/Donate-Support%20Termix-F39044?style=flat&labelColor=1a1a1a" /></a>
|
<a href="https://donate.termix.site/"><img alt="Donate" src="https://img.shields.io/badge/Donate-Support%20Termix-F39044?style=flat&labelColor=1a1a1a" /></a>
|
||||||
</p>
|
</p>
|
||||||
|
|
||||||
|
<p>
|
||||||
|
<a href="https://donate.termix.site/"><img alt="Donations this month" src="https://img.shields.io/badge/dynamic/json?style=for-the-badge&label=Donations%20this%20month&query=%24.fiatTotal&prefix=%24&url=https%3A%2F%2Ftermix.site%2Fdonation-snapshot.json&color=F39044&labelColor=1a1a1a" /></a>
|
||||||
|
</p>
|
||||||
|
|
||||||
<br />
|
<br />
|
||||||
|
|
||||||
Termix é gratuito e de código aberto. Se o achar útil, considere [doar](https://donate.termix.site/) para ajudar a cobrir os custos de servidor e o tempo de desenvolvimento.
|
Termix é gratuito e de código aberto. Se o achar útil, considere [doar](https://donate.termix.site/) para ajudar a cobrir os custos de servidor e o tempo de desenvolvimento.
|
||||||
|
|
||||||
<a href="https://donate.termix.site/"><img src="../repo-images/donation-goal.svg" alt="Monthly donation goal" /></a>
|
|
||||||
|
|
||||||
<br />
|
<br />
|
||||||
|
|
||||||
<img src="../repo-images/Termix Header.png" alt="Termix Banner" width="900" />
|
<img src="../repo-images/Termix Header.png" alt="Termix Banner" width="900" />
|
||||||
@@ -81,13 +83,13 @@ Suporte a RDP, VNC e Telnet pelo navegador com personalizacao completa e tela di
|
|||||||
<td width="50%" valign="top">
|
<td width="50%" valign="top">
|
||||||
|
|
||||||
**Gerenciamento de Tuneis SSH:**
|
**Gerenciamento de Tuneis SSH:**
|
||||||
Crie e gerencie tuneis SSH de servidor para servidor com reconexao automatica, monitoramento de saude e encaminhamento local, remoto ou SOCKS dinamico. As configuracoes de tunel de cliente desktop para servidor sao armazenadas localmente por instalacao de desktop; snapshots de predefinicoes C2S opcionais podem ser salvos no servidor, renomeados, carregados ou excluidos para mover uma configuracao de tunel local entre clientes.
|
Crie e gerencie tuneis SSH de servidor para servidor com reconexao automatica, monitoramento de saude e encaminhamento local, remoto ou SOCKS dinamico. As configuracoes de tunel de cliente desktop para servidor sao armazenadas localmente por instalacao de desktop, snapshots de predefinicoes C2S opcionais podem ser salvos no servidor, renomeados, carregados ou excluidos quando voce quiser mover uma configuracao de tunel local entre clientes.
|
||||||
|
|
||||||
</td>
|
</td>
|
||||||
<td width="50%" valign="top">
|
<td width="50%" valign="top">
|
||||||
|
|
||||||
**Gerenciador Remoto de Arquivos:**
|
**Gerenciador Remoto de Arquivos:**
|
||||||
Gerencie arquivos diretamente em servidores remotos com suporte para visualizar e editar codigo, imagens, audio e video. Faca upload, download, renomeie, exclua e mova arquivos facilmente com suporte sudo.
|
Gerencie arquivos diretamente em servidores remotos com suporte para visualizar e editar codigo, imagens, audio e video. Faca upload, download, renomeie, exclua e mova arquivos facilmente com suporte sudo. Inclui suporte para mover arquivos de servidor para servidor.
|
||||||
|
|
||||||
</td>
|
</td>
|
||||||
</tr>
|
</tr>
|
||||||
@@ -109,13 +111,13 @@ Salve, organize e gerencie suas conexoes SSH com tags e pastas (com personalizac
|
|||||||
<td width="50%" valign="top">
|
<td width="50%" valign="top">
|
||||||
|
|
||||||
**Metricas do Host:**
|
**Metricas do Host:**
|
||||||
Visualize o uso de CPU, memoria e disco, rede, tempo de atividade, informacoes do sistema, firewall, monitor de portas, visualizador de logs, usuarios/permissoes, certificados e muito mais na maioria dos servidores baseados em Linux.
|
Visualize o uso de CPU, memoria e disco, rede, tempo de atividade, informacoes do sistema, firewall, monitor de portas, visualizador de logs, usuarios/permissoes, certificados e muito mais na maioria dos servidores baseados em Linux. Inclui graficos de historico em serie temporal e alertas baseados em limites com suporte a ntfy e webhook.
|
||||||
|
|
||||||
</td>
|
</td>
|
||||||
<td width="50%" valign="top">
|
<td width="50%" valign="top">
|
||||||
|
|
||||||
**Autenticacao de Usuarios:**
|
**Autenticacao de Usuarios:**
|
||||||
Gerenciamento seguro de usuarios com controles de administrador e suporte para OIDC/LDAP/SSO (com controle de acesso) e 2FA (TOTP). Visualize sessoes ativas de usuarios em todas as plataformas e revogue permissoes. Vincule suas contas OIDC/Locais entre si. Visualize o log de auditoria de todas as acoes dos usuarios.
|
Gerenciamento seguro de usuarios com controles de administrador (podem editar informacoes de outros usuarios) e suporte para OIDC/LDAP/SSO (com controle de acesso), 2FA (TOTP) e passkey (WebAuthn). Visualize sessoes ativas de usuarios em todas as plataformas e revogue permissoes. Vincule suas contas OIDC/Locais entre si. Visualize o log de auditoria de todas as acoes dos usuarios.
|
||||||
|
|
||||||
</td>
|
</td>
|
||||||
</tr>
|
</tr>
|
||||||
@@ -128,8 +130,8 @@ Liste dispositivos da sua rede Tailscale para adicioná-los rapidamente como hos
|
|||||||
</td>
|
</td>
|
||||||
<td width="50%" valign="top">
|
<td width="50%" valign="top">
|
||||||
|
|
||||||
**RBAC:**
|
**RBAC/Compartilhamento:**
|
||||||
Crie funcoes e compartilhe hosts entre usuarios/funcoes.
|
Crie funcoes e compartilhe hosts entre usuarios/funcoes. Suporta todos os tipos de autenticacao e todos os protocolos de host.
|
||||||
|
|
||||||
</td>
|
</td>
|
||||||
</tr>
|
</tr>
|
||||||
@@ -206,7 +208,8 @@ Suporte integrado para aproximadamente 30 idiomas (gerenciado pelo [Crowdin](htt
|
|||||||
- **Conexao Rapida** - Conecte-se a um servidor sem precisar salvar os dados de conexao
|
- **Conexao Rapida** - Conecte-se a um servidor sem precisar salvar os dados de conexao
|
||||||
- **Paleta de Comandos** - Pressione duas vezes a tecla Shift esquerda para acessar rapidamente as conexoes SSH com seu teclado
|
- **Paleta de Comandos** - Pressione duas vezes a tecla Shift esquerda para acessar rapidamente as conexoes SSH com seu teclado
|
||||||
- **Integracao com Proxmox** - Adicione automaticamente hosts ao Termix a partir da sua instancia Proxmox
|
- **Integracao com Proxmox** - Adicione automaticamente hosts ao Termix a partir da sua instancia Proxmox
|
||||||
- **SSH Rico em Funcionalidades** - Suporta jump hosts, Warpgate, conexoes baseadas em TOTP, SOCKS5, verificacao de chave do host, preenchimento automatico de senhas, [OPKSSH](https://github.com/openpubkey/opkssh), tmux, port knocking, registro de terminal, etc.
|
- **SSH Rico em Funcionalidades** - Suporta jump hosts, Warpgate, conexoes baseadas em TOTP, SOCKS5, verificacao de chave do host, preenchimento automatico de senhas, [OPKSSH](https://github.com/openpubkey/opkssh), tmux, port knocking, registro de terminal, encaminhamento de agente SSH, agente SSH do Bitwarden, assinatura SSH do HashiCorp Vault, e mais.
|
||||||
|
- **Termix ID** - Um equivalente ao sshid.io integrado ao Termix. Reivindique um identificador, publique suas chaves SSH publicas em uma URL de resolucao e use uma CA integrada para emitir certificados SSH.
|
||||||
|
|
||||||
</details>
|
</details>
|
||||||
|
|
||||||
@@ -249,7 +252,9 @@ Suporte integrado para aproximadamente 30 idiomas (gerenciado pelo [Crowdin](htt
|
|||||||
|
|
||||||
## Instalacao
|
## Instalacao
|
||||||
|
|
||||||
Visite a [documentacao](https://docs.termix.site/install) do Termix para mais informacoes sobre como instalar o Termix em todas as plataformas. Caso contrario, veja um arquivo Docker Compose de exemplo aqui (voce pode omitir o guacd e a rede se nao planeja usar recursos de area de trabalho remota):
|
Visite a [documentacao](https://docs.termix.site/install) do Termix para instrucoes completas de instalacao em todas as plataformas.
|
||||||
|
|
||||||
|
Arquivo Docker Compose de exemplo (voce pode omitir o `guacd` e a rede se nao planeja usar recursos de area de trabalho remota):
|
||||||
|
|
||||||
```yaml
|
```yaml
|
||||||
services:
|
services:
|
||||||
@@ -290,9 +295,59 @@ networks:
|
|||||||
|
|
||||||
## Doar
|
## Doar
|
||||||
|
|
||||||
Termix é gratuito e de código aberto. Se o achar útil, considere [doar](https://donate.termix.site/) para ajudar a cobrir os custos de servidor e o tempo de desenvolvimento.
|
Termix e gratuito e de codigo aberto, sem assinaturas ou planos pagos. Se o achar util, considere doar para ajudar a cobrir custos de servidor, dominios e tempo de desenvolvimento. As doacoes tambem ajudam a financiar o tempo de pesquisa e aprendizado necessario para construir funcionalidades como suporte a SAML, Kubernetes e Agent. Acompanhe o progresso e doe abaixo.
|
||||||
|
|
||||||
<a href="https://donate.termix.site/"><img src="../repo-images/donation-goal.svg" alt="Monthly donation goal" /></a>
|
[Doar](https://donate.termix.site/)
|
||||||
|
|
||||||
|
<br />
|
||||||
|
|
||||||
|
## Patrocinadores
|
||||||
|
|
||||||
|
Interessado em um espaco pago para apoiar o desenvolvimento? Envie um email para [mail@termix.site](mailto:mail@termix.site).
|
||||||
|
|
||||||
|
<div align="center">
|
||||||
|
|
||||||
|
<br />
|
||||||
|
|
||||||
|
<a href="https://www.digitalocean.com/">
|
||||||
|
<img src="https://opensource.nyc3.cdn.digitaloceanspaces.com/attribution/assets/SVG/DO_Logo_horizontal_blue.svg" height="40" alt="DigitalOcean" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://crowdin.com/">
|
||||||
|
<img src="https://support.crowdin.com/assets/logos/core-logo/svg/crowdin-core-logo-cDark.svg" height="40" alt="Crowdin" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://www.blacksmith.sh/">
|
||||||
|
<img src="https://cdn.prod.website-files.com/681bfb0c9a4601bc6e288ec4/683ca9e2c5186757092611b8_e8cb22127df4da0811c4120a523722d2_logo-backsmith-wordmark-light.svg" height="40" alt="Blacksmith" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://www.cloudflare.com/">
|
||||||
|
<img src="https://sirv.sirv.com/website/screenshots/cloudflare/cloudflare-logo.png?w=300" height="40" alt="Cloudflare" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://tailscale.com/">
|
||||||
|
<img src="https://drive.google.com/uc?export=view&id=1lIxkJuX6M23bW-2FElhT0rQieTrzaVSL" height="40" alt="Tailscale" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://akamai.com/">
|
||||||
|
<img src="https://upload.wikimedia.org/wikipedia/commons/8/8b/Akamai_logo.svg" height="40" alt="Akamai" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://aws.amazon.com/">
|
||||||
|
<img src="https://upload.wikimedia.org/wikipedia/commons/thumb/9/93/Amazon_Web_Services_Logo.svg/960px-Amazon_Web_Services_Logo.svg.png" height="40" alt="AWS" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://rackgenius.com/">
|
||||||
|
<img src="https://rackgenius.com/rackgenius-logo.png" height="40" alt="Rack Genius" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
</div>
|
||||||
|
|
||||||
|
<br />
|
||||||
|
|
||||||
|
## Suporte
|
||||||
|
|
||||||
|
Se voce precisa de ajuda ou deseja solicitar uma funcionalidade para o Termix, visite a pagina de [Issues](https://github.com/Termix-SSH/Support/issues), faca login e clique em `New Issue`. Por favor, seja o mais detalhado possivel no seu relato, preferencialmente escrito em ingles. Voce tambem pode entrar no servidor do [Discord](https://discord.gg/jVQGdvHDrf) e visitar o canal de suporte, porem, os tempos de resposta podem ser mais longos.
|
||||||
|
|
||||||
<br />
|
<br />
|
||||||
|
|
||||||
@@ -356,50 +411,6 @@ Consulte [Projetos](https://github.com/orgs/Termix-SSH/projects/5) para todas as
|
|||||||
|
|
||||||
<br />
|
<br />
|
||||||
|
|
||||||
## Patrocinadores
|
|
||||||
|
|
||||||
<div align="center">
|
|
||||||
|
|
||||||
<br />
|
|
||||||
|
|
||||||
<a href="https://www.digitalocean.com/">
|
|
||||||
<img src="https://opensource.nyc3.cdn.digitaloceanspaces.com/attribution/assets/SVG/DO_Logo_horizontal_blue.svg" height="40" alt="DigitalOcean" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://crowdin.com/">
|
|
||||||
<img src="https://support.crowdin.com/assets/logos/core-logo/svg/crowdin-core-logo-cDark.svg" height="40" alt="Crowdin" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://www.blacksmith.sh/">
|
|
||||||
<img src="https://cdn.prod.website-files.com/681bfb0c9a4601bc6e288ec4/683ca9e2c5186757092611b8_e8cb22127df4da0811c4120a523722d2_logo-backsmith-wordmark-light.svg" height="40" alt="Blacksmith" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://www.cloudflare.com/">
|
|
||||||
<img src="https://sirv.sirv.com/website/screenshots/cloudflare/cloudflare-logo.png?w=300" height="40" alt="Cloudflare" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://tailscale.com/">
|
|
||||||
<img src="https://drive.google.com/uc?export=view&id=1lIxkJuX6M23bW-2FElhT0rQieTrzaVSL" height="40" alt="Tailscale" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://akamai.com/">
|
|
||||||
<img src="https://upload.wikimedia.org/wikipedia/commons/8/8b/Akamai_logo.svg" height="40" alt="Akamai" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://aws.amazon.com/">
|
|
||||||
<img src="https://upload.wikimedia.org/wikipedia/commons/thumb/9/93/Amazon_Web_Services_Logo.svg/960px-Amazon_Web_Services_Logo.svg.png" height="40" alt="AWS" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
</div>
|
|
||||||
|
|
||||||
<br />
|
|
||||||
|
|
||||||
## Suporte
|
|
||||||
|
|
||||||
Se voce precisa de ajuda ou deseja solicitar uma funcionalidade para o Termix, visite a pagina de [Issues](https://github.com/Termix-SSH/Support/issues), faca login e clique em `New Issue`. Por favor, seja o mais detalhado possivel no seu relato, preferencialmente escrito em ingles. Voce tambem pode entrar no servidor do [Discord](https://discord.gg/jVQGdvHDrf) e visitar o canal de suporte, porem, os tempos de resposta podem ser mais longos.
|
|
||||||
|
|
||||||
<br />
|
|
||||||
|
|
||||||
## Licenca
|
## Licenca
|
||||||
|
|
||||||
Distribuido sob a Licenca Apache Versao 2.0. Consulte `LICENSE` para mais informacoes.
|
Distribuido sob a Licenca Apache Versao 2.0. Consulte `LICENSE` para mais informacoes.
|
||||||
@@ -31,12 +31,14 @@
|
|||||||
<a href="https://donate.termix.site/"><img alt="Donate" src="https://img.shields.io/badge/Donate-Support%20Termix-F39044?style=flat&labelColor=1a1a1a" /></a>
|
<a href="https://donate.termix.site/"><img alt="Donate" src="https://img.shields.io/badge/Donate-Support%20Termix-F39044?style=flat&labelColor=1a1a1a" /></a>
|
||||||
</p>
|
</p>
|
||||||
|
|
||||||
|
<p>
|
||||||
|
<a href="https://donate.termix.site/"><img alt="Donations this month" src="https://img.shields.io/badge/dynamic/json?style=for-the-badge&label=Donations%20this%20month&query=%24.fiatTotal&prefix=%24&url=https%3A%2F%2Ftermix.site%2Fdonation-snapshot.json&color=F39044&labelColor=1a1a1a" /></a>
|
||||||
|
</p>
|
||||||
|
|
||||||
<br />
|
<br />
|
||||||
|
|
||||||
Termix — бесплатный проект с открытым исходным кодом. Если он вам полезен, рассмотрите возможность [пожертвования](https://donate.termix.site/) для покрытия расходов на серверы и время разработки.
|
Termix — бесплатный проект с открытым исходным кодом. Если он вам полезен, рассмотрите возможность [пожертвования](https://donate.termix.site/) для покрытия расходов на серверы и время разработки.
|
||||||
|
|
||||||
<a href="https://donate.termix.site/"><img src="../repo-images/donation-goal.svg" alt="Monthly donation goal" /></a>
|
|
||||||
|
|
||||||
<br />
|
<br />
|
||||||
|
|
||||||
<img src="../repo-images/Termix Header.png" alt="Termix Banner" width="900" />
|
<img src="../repo-images/Termix Header.png" alt="Termix Banner" width="900" />
|
||||||
@@ -81,13 +83,13 @@ Termix - это платформа для управления серверам
|
|||||||
<td width="50%" valign="top">
|
<td width="50%" valign="top">
|
||||||
|
|
||||||
**Управление SSH-туннелями:**
|
**Управление SSH-туннелями:**
|
||||||
Создание и управление межсерверными SSH-туннелями с автоматическим переподключением, мониторингом состояния и локальной, удалённой или динамической SOCKS-переадресацией. Настройки туннелей «десктопный клиент - сервер» хранятся локально для каждой установки; опциональные снимки C2S-пресетов можно сохранять на сервере, переименовывать, загружать или удалять для переноса конфигурации между клиентами.
|
Создание и управление межсерверными SSH-туннелями с автоматическим переподключением, мониторингом состояния и локальной, удалённой или динамической SOCKS-переадресацией. Настройки туннелей «десктопный клиент - сервер» хранятся локально для каждой установки; опциональные снимки C2S-пресетов можно сохранять на сервере, переименовывать, загружать или удалять, когда вы хотите перенести локальную конфигурацию туннеля между клиентами.
|
||||||
|
|
||||||
</td>
|
</td>
|
||||||
<td width="50%" valign="top">
|
<td width="50%" valign="top">
|
||||||
|
|
||||||
**Удалённый файловый менеджер:**
|
**Удалённый файловый менеджер:**
|
||||||
Управление файлами непосредственно на удалённых серверах с поддержкой просмотра и редактирования кода, изображений, аудио и видео. Загрузка, скачивание, переименование, удаление и перемещение файлов с поддержкой sudo.
|
Управление файлами непосредственно на удалённых серверах с поддержкой просмотра и редактирования кода, изображений, аудио и видео. Загрузка, скачивание, переименование, удаление и перемещение файлов с поддержкой sudo. Включает поддержку перемещения файлов с сервера на сервер.
|
||||||
|
|
||||||
</td>
|
</td>
|
||||||
</tr>
|
</tr>
|
||||||
@@ -109,13 +111,13 @@ Termix - это платформа для управления серверам
|
|||||||
<td width="50%" valign="top">
|
<td width="50%" valign="top">
|
||||||
|
|
||||||
**Метрики хоста:**
|
**Метрики хоста:**
|
||||||
Просмотр использования CPU, памяти и диска, сети, времени работы, информации о системе, файрвола, монитора портов, просмотрщика логов, пользователей/прав доступа, сертификатов и многого другого на большинстве серверов на базе Linux.
|
Просмотр использования CPU, памяти и диска, сети, времени работы, информации о системе, файрвола, монитора портов, просмотрщика логов, пользователей/прав доступа, сертификатов и многого другого на большинстве серверов на базе Linux. Включает графики истории временных рядов и оповещения на основе пороговых значений с поддержкой ntfy и вебхуков.
|
||||||
|
|
||||||
</td>
|
</td>
|
||||||
<td width="50%" valign="top">
|
<td width="50%" valign="top">
|
||||||
|
|
||||||
**Аутентификация пользователей:**
|
**Аутентификация пользователей:**
|
||||||
Безопасное управление пользователями с административным контролем и поддержкой OIDC/LDAP/SSO (с контролем доступа) и 2FA (TOTP). Просмотр активных сессий пользователей на всех платформах и отзыв прав доступа. Связывание аккаунтов OIDC/локальных аккаунтов. Просмотр журнала аудита действий всех пользователей.
|
Безопасное управление пользователями с административным контролем (может редактировать информацию других пользователей) и поддержкой OIDC/LDAP/SSO (с контролем доступа), 2FA (TOTP) и поддержкой ключей доступа (WebAuthn). Просмотр активных сессий пользователей на всех платформах и отзыв прав доступа. Связывание аккаунтов OIDC/локальных аккаунтов. Просмотр журнала аудита действий всех пользователей.
|
||||||
|
|
||||||
</td>
|
</td>
|
||||||
</tr>
|
</tr>
|
||||||
@@ -128,8 +130,8 @@ Termix - это платформа для управления серверам
|
|||||||
</td>
|
</td>
|
||||||
<td width="50%" valign="top">
|
<td width="50%" valign="top">
|
||||||
|
|
||||||
**RBAC:**
|
**RBAC/Общий доступ:**
|
||||||
Создание ролей и предоставление общего доступа к хостам для пользователей/ролей.
|
Создание ролей и предоставление общего доступа к хостам для пользователей/ролей. Поддерживает все типы аутентификации и все протоколы хостов.
|
||||||
|
|
||||||
</td>
|
</td>
|
||||||
</tr>
|
</tr>
|
||||||
@@ -206,7 +208,8 @@ SSH-сессии и вкладки остаются открытыми на вс
|
|||||||
- **Быстрое подключение** - Подключение к серверу без необходимости сохранения данных подключения
|
- **Быстрое подключение** - Подключение к серверу без необходимости сохранения данных подключения
|
||||||
- **Командная палитра** - Двойное нажатие левого Shift для быстрого доступа к SSH-подключениям с клавиатуры
|
- **Командная палитра** - Двойное нажатие левого Shift для быстрого доступа к SSH-подключениям с клавиатуры
|
||||||
- **Интеграция с Proxmox** - Автоматическое добавление хостов в Termix из вашего экземпляра Proxmox
|
- **Интеграция с Proxmox** - Автоматическое добавление хостов в Termix из вашего экземпляра Proxmox
|
||||||
- **Богатый функционал SSH** - Поддержка jump-хостов, Warpgate, подключений на основе TOTP, SOCKS5, верификации ключей хоста, автозаполнения паролей, [OPKSSH](https://github.com/openpubkey/opkssh), tmux, port knocking, логирования терминала и др.
|
- **Богатый функционал SSH** - Поддержка jump-хостов, Warpgate, подключений на основе TOTP, SOCKS5, верификации ключей хоста, автозаполнения паролей, [OPKSSH](https://github.com/openpubkey/opkssh), tmux, port knocking, логирования терминала, переадресации SSH-агента, SSH-агента Bitwarden, подписи SSH через HashiCorp Vault и многого другого.
|
||||||
|
- **Termix ID** - Аналог sshid.io, встроенный в Termix. Зарегистрируйте имя пользователя, опубликуйте свои публичные SSH-ключи по URL резолвера и используйте встроенный ЦС для выдачи SSH-сертификатов.
|
||||||
|
|
||||||
</details>
|
</details>
|
||||||
|
|
||||||
@@ -249,7 +252,9 @@ SSH-сессии и вкладки остаются открытыми на вс
|
|||||||
|
|
||||||
## Установка
|
## Установка
|
||||||
|
|
||||||
Посетите [документацию](https://docs.termix.site/install) Termix для получения дополнительной информации об установке Termix на всех платформах. Также вы можете ознакомиться с примером файла Docker Compose здесь (вы можете опустить guacd и сеть, если не планируете использовать функции удаленного рабочего стола):
|
Посетите [документацию](https://docs.termix.site/install) Termix для получения полных инструкций по установке на всех платформах.
|
||||||
|
|
||||||
|
Пример файла Docker Compose (вы можете опустить `guacd` и сеть, если не планируете использовать функции удаленного рабочего стола):
|
||||||
|
|
||||||
```yaml
|
```yaml
|
||||||
services:
|
services:
|
||||||
@@ -290,9 +295,59 @@ networks:
|
|||||||
|
|
||||||
## Пожертвование
|
## Пожертвование
|
||||||
|
|
||||||
Termix — бесплатный проект с открытым исходным кодом. Если он вам полезен, рассмотрите возможность [пожертвования](https://donate.termix.site/) для покрытия расходов на серверы и время разработки.
|
Termix бесплатен и имеет открытый исходный код, без подписок или платных тарифов. Если он вам полезен, рассмотрите возможность пожертвования, чтобы помочь покрыть расходы на серверы, домены и время разработки. Пожертвования также помогают финансировать время на исследование и изучение того, что необходимо для создания таких функций, как поддержка SAML, Kubernetes и Agent. Отслеживайте прогресс и делайте пожертвования ниже.
|
||||||
|
|
||||||
<a href="https://donate.termix.site/"><img src="../repo-images/donation-goal.svg" alt="Monthly donation goal" /></a>
|
[Пожертвовать](https://donate.termix.site/)
|
||||||
|
|
||||||
|
<br />
|
||||||
|
|
||||||
|
## Спонсоры
|
||||||
|
|
||||||
|
Заинтересованы в платном размещении для поддержки разработки? Напишите на [mail@termix.site](mailto:mail@termix.site).
|
||||||
|
|
||||||
|
<div align="center">
|
||||||
|
|
||||||
|
<br />
|
||||||
|
|
||||||
|
<a href="https://www.digitalocean.com/">
|
||||||
|
<img src="https://opensource.nyc3.cdn.digitaloceanspaces.com/attribution/assets/SVG/DO_Logo_horizontal_blue.svg" height="40" alt="DigitalOcean" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://crowdin.com/">
|
||||||
|
<img src="https://support.crowdin.com/assets/logos/core-logo/svg/crowdin-core-logo-cDark.svg" height="40" alt="Crowdin" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://www.blacksmith.sh/">
|
||||||
|
<img src="https://cdn.prod.website-files.com/681bfb0c9a4601bc6e288ec4/683ca9e2c5186757092611b8_e8cb22127df4da0811c4120a523722d2_logo-backsmith-wordmark-light.svg" height="40" alt="Blacksmith" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://www.cloudflare.com/">
|
||||||
|
<img src="https://sirv.sirv.com/website/screenshots/cloudflare/cloudflare-logo.png?w=300" height="40" alt="Cloudflare" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://tailscale.com/">
|
||||||
|
<img src="https://drive.google.com/uc?export=view&id=1lIxkJuX6M23bW-2FElhT0rQieTrzaVSL" height="40" alt="Tailscale" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://akamai.com/">
|
||||||
|
<img src="https://upload.wikimedia.org/wikipedia/commons/8/8b/Akamai_logo.svg" height="40" alt="Akamai" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://aws.amazon.com/">
|
||||||
|
<img src="https://upload.wikimedia.org/wikipedia/commons/thumb/9/93/Amazon_Web_Services_Logo.svg/960px-Amazon_Web_Services_Logo.svg.png" height="40" alt="AWS" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://rackgenius.com/">
|
||||||
|
<img src="https://rackgenius.com/rackgenius-logo.png" height="40" alt="Rack Genius" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
</div>
|
||||||
|
|
||||||
|
<br />
|
||||||
|
|
||||||
|
## Поддержка
|
||||||
|
|
||||||
|
Если вам нужна помощь или вы хотите запросить новую функцию для Termix, посетите страницу [Проблемы](https://github.com/Termix-SSH/Support/issues), войдите в систему и нажмите `New Issue`. Пожалуйста, опишите вашу проблему как можно подробнее, предпочтительно на английском языке. Вы также можете присоединиться к серверу [Discord](https://discord.gg/jVQGdvHDrf) и обратиться в канал поддержки, однако время ответа может быть дольше.
|
||||||
|
|
||||||
<br />
|
<br />
|
||||||
|
|
||||||
@@ -356,50 +411,6 @@ Termix — бесплатный проект с открытым исходны
|
|||||||
|
|
||||||
<br />
|
<br />
|
||||||
|
|
||||||
## Спонсоры
|
|
||||||
|
|
||||||
<div align="center">
|
|
||||||
|
|
||||||
<br />
|
|
||||||
|
|
||||||
<a href="https://www.digitalocean.com/">
|
|
||||||
<img src="https://opensource.nyc3.cdn.digitaloceanspaces.com/attribution/assets/SVG/DO_Logo_horizontal_blue.svg" height="40" alt="DigitalOcean" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://crowdin.com/">
|
|
||||||
<img src="https://support.crowdin.com/assets/logos/core-logo/svg/crowdin-core-logo-cDark.svg" height="40" alt="Crowdin" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://www.blacksmith.sh/">
|
|
||||||
<img src="https://cdn.prod.website-files.com/681bfb0c9a4601bc6e288ec4/683ca9e2c5186757092611b8_e8cb22127df4da0811c4120a523722d2_logo-backsmith-wordmark-light.svg" height="40" alt="Blacksmith" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://www.cloudflare.com/">
|
|
||||||
<img src="https://sirv.sirv.com/website/screenshots/cloudflare/cloudflare-logo.png?w=300" height="40" alt="Cloudflare" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://tailscale.com/">
|
|
||||||
<img src="https://drive.google.com/uc?export=view&id=1lIxkJuX6M23bW-2FElhT0rQieTrzaVSL" height="40" alt="Tailscale" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://akamai.com/">
|
|
||||||
<img src="https://upload.wikimedia.org/wikipedia/commons/8/8b/Akamai_logo.svg" height="40" alt="Akamai" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://aws.amazon.com/">
|
|
||||||
<img src="https://upload.wikimedia.org/wikipedia/commons/thumb/9/93/Amazon_Web_Services_Logo.svg/960px-Amazon_Web_Services_Logo.svg.png" height="40" alt="AWS" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
</div>
|
|
||||||
|
|
||||||
<br />
|
|
||||||
|
|
||||||
## Поддержка
|
|
||||||
|
|
||||||
Если вам нужна помощь или вы хотите запросить новую функцию для Termix, посетите страницу [Проблемы](https://github.com/Termix-SSH/Support/issues), войдите в систему и нажмите `New Issue`. Пожалуйста, опишите вашу проблему как можно подробнее, предпочтительно на английском языке. Вы также можете присоединиться к серверу [Discord](https://discord.gg/jVQGdvHDrf) и обратиться в канал поддержки, однако время ответа может быть дольше.
|
|
||||||
|
|
||||||
<br />
|
|
||||||
|
|
||||||
## Лицензия
|
## Лицензия
|
||||||
|
|
||||||
Распространяется по лицензии Apache License Version 2.0. Подробнее см. в файле `LICENSE`.
|
Распространяется по лицензии Apache License Version 2.0. Подробнее см. в файле `LICENSE`.
|
||||||
@@ -31,12 +31,14 @@
|
|||||||
<a href="https://donate.termix.site/"><img alt="Donate" src="https://img.shields.io/badge/Donate-Support%20Termix-F39044?style=flat&labelColor=1a1a1a" /></a>
|
<a href="https://donate.termix.site/"><img alt="Donate" src="https://img.shields.io/badge/Donate-Support%20Termix-F39044?style=flat&labelColor=1a1a1a" /></a>
|
||||||
</p>
|
</p>
|
||||||
|
|
||||||
|
<p>
|
||||||
|
<a href="https://donate.termix.site/"><img alt="Donations this month" src="https://img.shields.io/badge/dynamic/json?style=for-the-badge&label=Donations%20this%20month&query=%24.fiatTotal&prefix=%24&url=https%3A%2F%2Ftermix.site%2Fdonation-snapshot.json&color=F39044&labelColor=1a1a1a" /></a>
|
||||||
|
</p>
|
||||||
|
|
||||||
<br />
|
<br />
|
||||||
|
|
||||||
Termix ücretsiz ve açık kaynaklıdır. Faydalı buluyorsanız, sunucu maliyetleri ve geliştirme süresine katkıda bulunmak için [bağış yapmayı](https://donate.termix.site/) düşünebilirsiniz.
|
Termix ücretsiz ve açık kaynaklıdır. Faydalı buluyorsanız, sunucu maliyetleri ve geliştirme süresine katkıda bulunmak için [bağış yapmayı](https://donate.termix.site/) düşünebilirsiniz.
|
||||||
|
|
||||||
<a href="https://donate.termix.site/"><img src="../repo-images/donation-goal.svg" alt="Monthly donation goal" /></a>
|
|
||||||
|
|
||||||
<br />
|
<br />
|
||||||
|
|
||||||
<img src="../repo-images/Termix Header.png" alt="Termix Banner" width="900" />
|
<img src="../repo-images/Termix Header.png" alt="Termix Banner" width="900" />
|
||||||
@@ -56,7 +58,7 @@ Termix ücretsiz ve açık kaynaklıdır. Faydalı buluyorsanız, sunucu maliyet
|
|||||||
|
|
||||||
## Genel Bakis
|
## Genel Bakis
|
||||||
|
|
||||||
Termix, acik kaynakli, sonsuza kadar ucretsiz, kendi sunucunuzda barindirabileceginez hepsi bir arada sunucu yonetim platformudur. Sunucularinizi ve altyapinizi tek bir sezgisel arayuz uzerinden yonetmek icin cok platformlu bir cozum sunar. Termix, SSH terminal erisimi, uzak masaustu kontrolu (RDP, VNC, Telnet), SSH tunelleme yetenekleri, uzak SSH dosya yonetimi ve daha bircok arac saglar. Termix, tum platformlarda kullanilabilen Termius'un mukemmel ucretsiz ve kendi barindirmali alternatifidir.
|
Termix, acik kaynakli, sonsuza kadar ucretsiz, kendi sunucunuzda barindirabileceginez hepsi bir arada sunucu yonetim platformudur. Sunucularinizi ve altyapinizi tek bir sezgisel arayuz uzerinden yonetmek icin cok platformlu bir cozum sunar. Termix, SSH terminal erisimi, uzak masaustu kontrolu (RDP, VNC, Telnet), SSH tunelleme yetenekleri, uzak dosya yonetimi ve daha bircok arac saglar. Termix, tum platformlarda kullanilabilen Termius'un mukemmel ucretsiz ve kendi barindirmali alternatifidir.
|
||||||
|
|
||||||
<br />
|
<br />
|
||||||
|
|
||||||
@@ -81,13 +83,13 @@ Tam ozellestirme ve bolunmus ekran ile tarayici uzerinden RDP, VNC ve Telnet des
|
|||||||
<td width="50%" valign="top">
|
<td width="50%" valign="top">
|
||||||
|
|
||||||
**SSH Tunel Yonetimi:**
|
**SSH Tunel Yonetimi:**
|
||||||
Otomatik yeniden baglantiya, saglik izleme ve yerel, uzak veya dinamik SOCKS yonlendirme destegi ile sunucular arasi SSH tunelleri olusturun ve yonetin. Masaustu istemci-sunucu tunel ayarlari her masaustu kurulumu icin yerel olarak depolanir; istege bagli C2S hazir ayar anlik goruntuleri sunucuya kaydedilebilir, yeniden adlandirilabilir, yuklenebilir veya silinebilir.
|
Otomatik yeniden baglanti, saglik izleme ve yerel, uzak veya dinamik SOCKS yonlendirme ile sunucular arasi SSH tunelleri olusturun ve yonetin. Masaustu istemci-sunucu tunel ayarlari her masaustu kurulumu icin yerel olarak depolanir; istege bagli C2S hazir ayar anlik goruntuleri, yerel bir tunel yapilandirmasini istemciler arasinda tasimak istediginizde sunucuya kaydedilebilir, yeniden adlandirilabilir, yuklenebilir veya silinebilir.
|
||||||
|
|
||||||
</td>
|
</td>
|
||||||
<td width="50%" valign="top">
|
<td width="50%" valign="top">
|
||||||
|
|
||||||
**Uzak Dosya Yoneticisi:**
|
**Uzak Dosya Yoneticisi:**
|
||||||
Uzak sunuculardaki dosyalari dogrudan yonetin; kod, goruntu, ses ve video goruntuleme ve duzenleme destegi ile. Sudo destegi ile dosyalari sorunsuzca yukleyin, indirin, yeniden adlandirin, silin ve tasiyin.
|
Uzak sunuculardaki dosyalari dogrudan yonetin; kod, goruntu, ses ve video goruntuleme ve duzenleme destegi ile. Sudo destegi ile dosyalari sorunsuzca yukleyin, indirin, yeniden adlandirin, silin ve tasiyin. Dosyalari sunucudan sunucuya tasima destegini de icerir.
|
||||||
|
|
||||||
</td>
|
</td>
|
||||||
</tr>
|
</tr>
|
||||||
@@ -109,13 +111,13 @@ SSH baglantilarinizi etiketler ve klasorlerle (klasor ozellestirme ve ic ice kla
|
|||||||
<td width="50%" valign="top">
|
<td width="50%" valign="top">
|
||||||
|
|
||||||
**Ana Bilgisayar Metrikleri:**
|
**Ana Bilgisayar Metrikleri:**
|
||||||
Cogu Linux tabanli sunucularda CPU, bellek, disk kullanimi, ag, calisma suresi, sistem bilgisi, guvenlik duvari, port izleme, gunluk goruntuleyici, kullanicilar/izinler, sertifikalar ve daha fazlasini goruntuleyin.
|
Cogu Linux tabanli sunucularda calisan CPU, bellek, disk kullanimi, ag, calisma suresi, sistem bilgisi, guvenlik duvari, port izleme, gunluk goruntuleyici, kullanicilar/izinler, sertifikalar ve daha fazlasini goruntuleyin. Zaman serisi gecmis grafiklerini ve ntfy ile webhook destekli esik tabanli uyarilari icerir.
|
||||||
|
|
||||||
</td>
|
</td>
|
||||||
<td width="50%" valign="top">
|
<td width="50%" valign="top">
|
||||||
|
|
||||||
**Kullanici Kimlik Dogrulama:**
|
**Kullanici Kimlik Dogrulama:**
|
||||||
Yonetici kontrolleri, OIDC/LDAP/SSO (erisim kontrollu) ve 2FA (TOTP) destegi ile guvenli kullanici yonetimi. Tum platformlardaki aktif kullanici oturumlarini goruntuleyin ve izinleri iptal edin. OIDC/Yerel hesaplarinizi birbirine baglayin. Tum kullanicilarin islemlerinin denetim gunlugunu goruntuleyin.
|
Yonetici kontrolleri (diger kullanicilarin bilgilerini duzenleyebilir), OIDC/LDAP/SSO (erisim kontrollu), 2FA (TOTP) ve passkey (WebAuthn) destegi ile guvenli kullanici yonetimi. Tum platformlardaki aktif kullanici oturumlarini goruntuleyin ve izinleri iptal edin. OIDC/Yerel hesaplarinizi birbirine baglayin. Tum kullanicilarin islemlerinin denetim gunlugunu goruntuleyin.
|
||||||
|
|
||||||
</td>
|
</td>
|
||||||
</tr>
|
</tr>
|
||||||
@@ -128,8 +130,8 @@ Tailscale aginizdaki cihazlari listeleyerek hizlica ana bilgisayar olarak ekleyi
|
|||||||
</td>
|
</td>
|
||||||
<td width="50%" valign="top">
|
<td width="50%" valign="top">
|
||||||
|
|
||||||
**RBAC:**
|
**RBAC/Paylasim:**
|
||||||
Roller olusturun ve ana bilgisayarlari kullanicilar/roller arasinda paylasin.
|
Roller olusturun ve ana bilgisayarlari kullanicilar/roller arasinda paylasin. Tum kimlik dogrulama turlerini ve tum ana bilgisayar protokollerini destekler.
|
||||||
|
|
||||||
</td>
|
</td>
|
||||||
</tr>
|
</tr>
|
||||||
@@ -151,7 +153,7 @@ Ana bilgisayar metrikleri (CPU, bellek, disk vb.) icin esik tabanli uyari kurall
|
|||||||
<td width="50%" valign="top">
|
<td width="50%" valign="top">
|
||||||
|
|
||||||
**Ana Sayfa:**
|
**Ana Sayfa:**
|
||||||
Surukleme ve birakma widget izgarasina sahip tamamen ozerlestirilebilir bir ana sayfa. Ana bilgisayar durumu, hizmet baglantilari, saatler, notlar, RSS besleme, hava durumu, Docker konteynerleri, ana bilgisayar metrik grafikleri, gomulu terminaller, iframe ve daha fazlasi icin widget ekleyin.
|
Surukleme ve birakma widget izgarasina sahip tamamen ozellestirilebilir bir ana sayfa. Ana bilgisayar durumu, hizmet baglantilari, saatler, notlar, RSS besleme, hava durumu, Docker konteynerleri, ana bilgisayar metrik grafikleri, gomulu terminaller, iframe ve daha fazlasi icin widget ekleyin.
|
||||||
|
|
||||||
</td>
|
</td>
|
||||||
<td width="50%" valign="top">
|
<td width="50%" valign="top">
|
||||||
@@ -206,7 +208,8 @@ Yaklasik 30 dil icin yerlesik destek ([Crowdin](https://docs.termix.site/transla
|
|||||||
- **Hizli Baglanti** - Baglanti verilerini kaydetmeden bir sunucuya baglanin
|
- **Hizli Baglanti** - Baglanti verilerini kaydetmeden bir sunucuya baglanin
|
||||||
- **Komut Paleti** - Sol shift tusuna iki kez basarak SSH baglantilariniza klavyenizle hizlica erisin
|
- **Komut Paleti** - Sol shift tusuna iki kez basarak SSH baglantilariniza klavyenizle hizlica erisin
|
||||||
- **Proxmox Entegrasyonu** - Proxmox ornekinizden Termix'e otomatik olarak ana bilgisayar ekleyin
|
- **Proxmox Entegrasyonu** - Proxmox ornekinizden Termix'e otomatik olarak ana bilgisayar ekleyin
|
||||||
- **SSH Zengin Ozellikler** - Atlama ana bilgisayarlari, Warpgate, TOTP tabanli baglantilar, SOCKS5, ana bilgisayar anahtar dogrulama, otomatik sifre doldurma, [OPKSSH](https://github.com/openpubkey/opkssh), tmux, port knocking, terminal gunlukleme vb. destekler.
|
- **SSH Zengin Ozellikler** - Atlama ana bilgisayarlari, Warpgate, TOTP tabanli baglantilar, SOCKS5, ana bilgisayar anahtar dogrulama, otomatik sifre doldurma, [OPKSSH](https://github.com/openpubkey/opkssh), tmux, port knocking, terminal gunlukleme, SSH agent forwarding, Bitwarden SSH agent, HashiCorp Vault SSH imzalama ve dahasini destekler.
|
||||||
|
- **Termix ID** - Termix'e entegre edilmis bir sshid.io esdegeri. Bir kullanici adi edinin, genel SSH anahtarlarinizi bir cozumleyici URL'sinde yayinlayin ve SSH sertifikalari vermek icin yerlesik bir CA kullanin.
|
||||||
|
|
||||||
</details>
|
</details>
|
||||||
|
|
||||||
@@ -249,7 +252,9 @@ Yaklasik 30 dil icin yerlesik destek ([Crowdin](https://docs.termix.site/transla
|
|||||||
|
|
||||||
## Kurulum
|
## Kurulum
|
||||||
|
|
||||||
Termix'i tum platformlara nasil kuracaginiz hakkinda daha fazla bilgi icin Termix [Belgelerine](https://docs.termix.site/install) bakin. Ornek bir Docker Compose dosyasini asagida inceleyebilirsiniz (uzak masaustu ozelliklerini kullanmayi planlamiyorsaniz guacd'yi ve agi cikarabilirsiniz):
|
Termix'i tum platformlara nasil kuracaginiz hakkinda daha fazla bilgi icin Termix [Belgelerine](https://docs.termix.site/install) bakin.
|
||||||
|
|
||||||
|
Ornek bir Docker Compose dosyasi (uzak masaustu ozelliklerini kullanmayi planlamiyorsaniz `guacd` ve agi cikarabilirsiniz):
|
||||||
|
|
||||||
```yaml
|
```yaml
|
||||||
services:
|
services:
|
||||||
@@ -290,9 +295,59 @@ networks:
|
|||||||
|
|
||||||
## Bağış Yapın
|
## Bağış Yapın
|
||||||
|
|
||||||
Termix ücretsiz ve açık kaynaklıdır. Faydalı buluyorsanız, sunucu maliyetleri ve geliştirme süresine katkıda bulunmak için [bağış yapmayı](https://donate.termix.site/) düşünebilirsiniz.
|
Termix ücretsiz ve açık kaynaklıdır, abonelik veya ücretli plan yoktur. Faydalı buluyorsaniz, sunucu maliyetleri, alan adlari ve gelistirme suresine katkida bulunmak icin bagis yapmayi dusunebilirsiniz. Bagislar ayrica SAML, Kubernetes ve Agent destegi gibi ozellikleri gelistirmek icin gereken arastirma ve ogrenme suresini finanse etmeye yardimci olur. Ilerlemeyi takip edin ve asagidan bagis yapin.
|
||||||
|
|
||||||
<a href="https://donate.termix.site/"><img src="../repo-images/donation-goal.svg" alt="Monthly donation goal" /></a>
|
[Bağış Yapın](https://donate.termix.site/)
|
||||||
|
|
||||||
|
<br />
|
||||||
|
|
||||||
|
## Sponsorlar
|
||||||
|
|
||||||
|
Gelistirmeyi desteklemek icin ucretli bir yerlesim ile ilgileniyor musunuz? [mail@termix.site](mailto:mail@termix.site) adresine e-posta gonderin.
|
||||||
|
|
||||||
|
<div align="center">
|
||||||
|
|
||||||
|
<br />
|
||||||
|
|
||||||
|
<a href="https://www.digitalocean.com/">
|
||||||
|
<img src="https://opensource.nyc3.cdn.digitaloceanspaces.com/attribution/assets/SVG/DO_Logo_horizontal_blue.svg" height="40" alt="DigitalOcean" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://crowdin.com/">
|
||||||
|
<img src="https://support.crowdin.com/assets/logos/core-logo/svg/crowdin-core-logo-cDark.svg" height="40" alt="Crowdin" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://www.blacksmith.sh/">
|
||||||
|
<img src="https://cdn.prod.website-files.com/681bfb0c9a4601bc6e288ec4/683ca9e2c5186757092611b8_e8cb22127df4da0811c4120a523722d2_logo-backsmith-wordmark-light.svg" height="40" alt="Blacksmith" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://www.cloudflare.com/">
|
||||||
|
<img src="https://sirv.sirv.com/website/screenshots/cloudflare/cloudflare-logo.png?w=300" height="40" alt="Cloudflare" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://tailscale.com/">
|
||||||
|
<img src="https://drive.google.com/uc?export=view&id=1lIxkJuX6M23bW-2FElhT0rQieTrzaVSL" height="40" alt="Tailscale" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://akamai.com/">
|
||||||
|
<img src="https://upload.wikimedia.org/wikipedia/commons/8/8b/Akamai_logo.svg" height="40" alt="Akamai" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://aws.amazon.com/">
|
||||||
|
<img src="https://upload.wikimedia.org/wikipedia/commons/thumb/9/93/Amazon_Web_Services_Logo.svg/960px-Amazon_Web_Services_Logo.svg.png" height="40" alt="AWS" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://rackgenius.com/">
|
||||||
|
<img src="https://rackgenius.com/rackgenius-logo.png" height="40" alt="Rack Genius" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
</div>
|
||||||
|
|
||||||
|
<br />
|
||||||
|
|
||||||
|
## Destek
|
||||||
|
|
||||||
|
Termix ile ilgili yardima ihtiyaciniz varsa veya bir ozellik talep etmek istiyorsaniz, [Sorunlar](https://github.com/Termix-SSH/Support/issues) sayfasini ziyaret edin, giris yapin ve `New Issue` butonuna basin. Lutfen sorununuzu mumkun oldugunca ayrintili yazin, tercihen Ingilizce olarak. Ayrica [Discord](https://discord.gg/jVQGdvHDrf) sunucusuna katilabilir ve destek kanalini ziyaret edebilirsiniz, ancak yanit sureleri daha uzun olabilir.
|
||||||
|
|
||||||
<br />
|
<br />
|
||||||
|
|
||||||
@@ -356,50 +411,6 @@ Tum planlanan ozellikler icin [Projeler](https://github.com/orgs/Termix-SSH/proj
|
|||||||
|
|
||||||
<br />
|
<br />
|
||||||
|
|
||||||
## Sponsorlar
|
|
||||||
|
|
||||||
<div align="center">
|
|
||||||
|
|
||||||
<br />
|
|
||||||
|
|
||||||
<a href="https://www.digitalocean.com/">
|
|
||||||
<img src="https://opensource.nyc3.cdn.digitaloceanspaces.com/attribution/assets/SVG/DO_Logo_horizontal_blue.svg" height="40" alt="DigitalOcean" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://crowdin.com/">
|
|
||||||
<img src="https://support.crowdin.com/assets/logos/core-logo/svg/crowdin-core-logo-cDark.svg" height="40" alt="Crowdin" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://www.blacksmith.sh/">
|
|
||||||
<img src="https://cdn.prod.website-files.com/681bfb0c9a4601bc6e288ec4/683ca9e2c5186757092611b8_e8cb22127df4da0811c4120a523722d2_logo-backsmith-wordmark-light.svg" height="40" alt="Blacksmith" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://www.cloudflare.com/">
|
|
||||||
<img src="https://sirv.sirv.com/website/screenshots/cloudflare/cloudflare-logo.png?w=300" height="40" alt="Cloudflare" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://tailscale.com/">
|
|
||||||
<img src="https://drive.google.com/uc?export=view&id=1lIxkJuX6M23bW-2FElhT0rQieTrzaVSL" height="40" alt="Tailscale" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://akamai.com/">
|
|
||||||
<img src="https://upload.wikimedia.org/wikipedia/commons/8/8b/Akamai_logo.svg" height="40" alt="Akamai" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://aws.amazon.com/">
|
|
||||||
<img src="https://upload.wikimedia.org/wikipedia/commons/thumb/9/93/Amazon_Web_Services_Logo.svg/960px-Amazon_Web_Services_Logo.svg.png" height="40" alt="AWS" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
</div>
|
|
||||||
|
|
||||||
<br />
|
|
||||||
|
|
||||||
## Destek
|
|
||||||
|
|
||||||
Termix ile ilgili yardima ihtiyaciniz varsa veya bir ozellik talep etmek istiyorsaniz, [Sorunlar](https://github.com/Termix-SSH/Support/issues) sayfasini ziyaret edin, giris yapin ve `New Issue` butonuna basin. Lutfen sorununuzu mumkun oldugunca ayrintili yazin, tercihen Ingilizce olarak. Ayrica [Discord](https://discord.gg/jVQGdvHDrf) sunucusuna katilabilir ve destek kanalini ziyaret edebilirsiniz, ancak yanit sureleri daha uzun olabilir.
|
|
||||||
|
|
||||||
<br />
|
|
||||||
|
|
||||||
## Lisans
|
## Lisans
|
||||||
|
|
||||||
Apache Lisansi Surumu 2.0 altinda dagitilmaktadir. Daha fazla bilgi icin `LICENSE` dosyasina bakin.
|
Apache Lisansi Surumu 2.0 altinda dagitilmaktadir. Daha fazla bilgi icin `LICENSE` dosyasina bakin.
|
||||||
@@ -31,12 +31,14 @@
|
|||||||
<a href="https://donate.termix.site/"><img alt="Donate" src="https://img.shields.io/badge/Donate-Support%20Termix-F39044?style=flat&labelColor=1a1a1a" /></a>
|
<a href="https://donate.termix.site/"><img alt="Donate" src="https://img.shields.io/badge/Donate-Support%20Termix-F39044?style=flat&labelColor=1a1a1a" /></a>
|
||||||
</p>
|
</p>
|
||||||
|
|
||||||
|
<p>
|
||||||
|
<a href="https://donate.termix.site/"><img alt="Donations this month" src="https://img.shields.io/badge/dynamic/json?style=for-the-badge&label=Donations%20this%20month&query=%24.fiatTotal&prefix=%24&url=https%3A%2F%2Ftermix.site%2Fdonation-snapshot.json&color=F39044&labelColor=1a1a1a" /></a>
|
||||||
|
</p>
|
||||||
|
|
||||||
<br />
|
<br />
|
||||||
|
|
||||||
Termix là dự án miễn phí và mã nguồn mở. Nếu bạn thấy hữu ích, hãy cân nhắc [quyên góp](https://donate.termix.site/) để giúp trang trải chi phí máy chủ và thời gian phát triển.
|
Termix là dự án miễn phí và mã nguồn mở. Nếu bạn thấy hữu ích, hãy cân nhắc [quyên góp](https://donate.termix.site/) để giúp trang trải chi phí máy chủ và thời gian phát triển.
|
||||||
|
|
||||||
<a href="https://donate.termix.site/"><img src="../repo-images/donation-goal.svg" alt="Monthly donation goal" /></a>
|
|
||||||
|
|
||||||
<br />
|
<br />
|
||||||
|
|
||||||
<img src="../repo-images/Termix Header.png" alt="Termix Banner" width="900" />
|
<img src="../repo-images/Termix Header.png" alt="Termix Banner" width="900" />
|
||||||
@@ -56,7 +58,7 @@ Termix là dự án miễn phí và mã nguồn mở. Nếu bạn thấy hữu
|
|||||||
|
|
||||||
## Tong Quan
|
## Tong Quan
|
||||||
|
|
||||||
Termix la nen tang quan ly may chu tat ca trong mot, ma nguon mo, mien phi vinh vien, tu luu tru. No cung cap giai phap da nen tang de quan ly may chu va co so ha tang cua ban thong qua mot giao dien truc quan duy nhat. Termix cung cap quyen truy cap terminal SSH, dieu khien may tinh tu xa (RDP, VNC, Telnet), kha nang tao duong ham SSH, quan ly tep SSH tu xa va nhieu cong cu khac. Termix la giai phap thay the mien phi va tu luu tru hoan hao cho Termius, kha dung tren tat ca cac nen tang.
|
Termix la nen tang quan ly may chu tat ca trong mot, ma nguon mo, mien phi vinh vien, tu luu tru. No cung cap giai phap da nen tang de quan ly may chu va co so ha tang cua ban thong qua mot giao dien truc quan duy nhat. Termix cung cap quyen truy cap terminal SSH, dieu khien may tinh tu xa (RDP, VNC, Telnet), kha nang tao duong ham SSH, quan ly tep tu xa va nhieu cong cu khac. Termix la giai phap thay the mien phi va tu luu tru hoan hao cho Termius, kha dung tren tat ca cac nen tang.
|
||||||
|
|
||||||
<br />
|
<br />
|
||||||
|
|
||||||
@@ -81,13 +83,13 @@ Ho tro RDP, VNC va Telnet qua trinh duyet voi day du tuy chinh va chia man hinh.
|
|||||||
<td width="50%" valign="top">
|
<td width="50%" valign="top">
|
||||||
|
|
||||||
**Quan Ly Duong Ham SSH:**
|
**Quan Ly Duong Ham SSH:**
|
||||||
Tao va quan ly duong ham SSH giua cac may chu voi tu dong ket noi lai, giam sat suc khoe va chuyen tiep cuc bo, tu xa hoac SOCKS dong. Cai dat duong ham tu may khach desktop den may chu duoc luu tru cuc bo cho moi ban cai dat desktop; cac snapshot C2S preset tuy chon co the duoc luu tren may chu, doi ten, tai hoac xoa de di chuyen cau hinh duong ham cuc bo giua cac may khach.
|
Tao va quan ly duong ham SSH giua cac may chu voi tu dong ket noi lai, giam sat suc khoe va chuyen tiep cuc bo, tu xa hoac SOCKS dong. Cai dat duong ham tu may khach desktop den may chu duoc luu tru cuc bo cho moi ban cai dat desktop; cac snapshot C2S preset tuy chon co the duoc luu tren may chu, doi ten, tai hoac xoa khi ban muon di chuyen mot cau hinh duong ham cuc bo giua cac may khach.
|
||||||
|
|
||||||
</td>
|
</td>
|
||||||
<td width="50%" valign="top">
|
<td width="50%" valign="top">
|
||||||
|
|
||||||
**Trinh Quan Ly Tep Tu Xa:**
|
**Trinh Quan Ly Tep Tu Xa:**
|
||||||
Quan ly tep truc tiep tren may chu tu xa voi ho tro xem va chinh sua ma, hinh anh, am thanh va video. Tai len, tai xuong, doi ten, xoa va di chuyen tep lien mach voi ho tro sudo.
|
Quan ly tep truc tiep tren may chu tu xa voi ho tro xem va chinh sua ma, hinh anh, am thanh va video. Tai len, tai xuong, doi ten, xoa va di chuyen tep lien mach voi ho tro sudo. Bao gom ho tro di chuyen tep tu may chu nay sang may chu khac.
|
||||||
|
|
||||||
</td>
|
</td>
|
||||||
</tr>
|
</tr>
|
||||||
@@ -109,13 +111,13 @@ Luu, sap xep va quan ly cac ket noi SSH cua ban voi the va thu muc (ho tro tuy c
|
|||||||
<td width="50%" valign="top">
|
<td width="50%" valign="top">
|
||||||
|
|
||||||
**Chi So May Chu:**
|
**Chi So May Chu:**
|
||||||
Xem muc su dung CPU, bo nho, o dia, mang, thoi gian hoat dong, thong tin he thong, tuong lua, giam sat cong, trinh xem nhat ky, nguoi dung/quyen, chung chi va nhieu hon nua tren hau het cac may chu chay Linux.
|
Xem muc su dung CPU, bo nho, o dia, mang, thoi gian hoat dong, thong tin he thong, tuong lua, giam sat cong, trinh xem nhat ky, nguoi dung/quyen, chung chi va nhieu hon nua tren hau het cac may chu chay Linux. Bao gom bieu do lich su theo chuoi thoi gian va canh bao dua tren nguong voi ho tro ntfy va webhook.
|
||||||
|
|
||||||
</td>
|
</td>
|
||||||
<td width="50%" valign="top">
|
<td width="50%" valign="top">
|
||||||
|
|
||||||
**Xac Thuc Nguoi Dung:**
|
**Xac Thuc Nguoi Dung:**
|
||||||
Quan ly nguoi dung an toan voi quyen quan tri va ho tro OIDC/LDAP/SSO (co kiem soat truy cap) va 2FA (TOTP). Xem phien hoat dong cua nguoi dung tren tat ca cac nen tang va thu hoi quyen. Lien ket tai khoan OIDC/Noi bo cua ban voi nhau. Xem nhat ky kiem toan cac hanh dong cua tat ca nguoi dung.
|
Quan ly nguoi dung an toan voi quyen quan tri (co the chinh sua thong tin cua nguoi dung khac) va ho tro OIDC/LDAP/SSO (co kiem soat truy cap), 2FA (TOTP) va passkey (WebAuthn). Xem phien hoat dong cua nguoi dung tren tat ca cac nen tang va thu hoi quyen. Lien ket tai khoan OIDC/Noi bo cua ban voi nhau. Xem nhat ky kiem toan cac hanh dong cua tat ca nguoi dung.
|
||||||
|
|
||||||
</td>
|
</td>
|
||||||
</tr>
|
</tr>
|
||||||
@@ -128,8 +130,8 @@ Liet ke cac thiet bi trong mang Tailscale de nhanh chong them vao lam may chu, v
|
|||||||
</td>
|
</td>
|
||||||
<td width="50%" valign="top">
|
<td width="50%" valign="top">
|
||||||
|
|
||||||
**RBAC:**
|
**RBAC/Chia Se:**
|
||||||
Tao vai tro va chia se may chu giua nguoi dung/vai tro.
|
Tao vai tro va chia se may chu giua nguoi dung/vai tro. Ho tro tat ca cac loai xac thuc va tat ca cac giao thuc may chu.
|
||||||
|
|
||||||
</td>
|
</td>
|
||||||
</tr>
|
</tr>
|
||||||
@@ -143,7 +145,7 @@ Ket noi voi cac thiet bi noi tiep (router, switch, vi dieu khien, v.v.) truc tie
|
|||||||
<td width="50%" valign="top">
|
<td width="50%" valign="top">
|
||||||
|
|
||||||
**Canh Bao:**
|
**Canh Bao:**
|
||||||
Dat cac quy tac canh bao dua tren nguong cho chi so may chu (CPU, bo nho, o dia, v.v.) va nhan thong bao qua ntfy hoac webhook khi chung khi toa. Xem canh bao dang kich hoat va da giai quyet trong nhat ky lich su.
|
Dat cac quy tac canh bao dua tren nguong cho chi so may chu (CPU, bo nho, o dia, v.v.) va nhan thong bao qua ntfy hoac webhook khi chung kich hoat. Xem canh bao dang kich hoat va da giai quyet trong nhat ky lich su.
|
||||||
|
|
||||||
</td>
|
</td>
|
||||||
</tr>
|
</tr>
|
||||||
@@ -206,7 +208,8 @@ Ho tro tich hop khoang 30 ngon ngu (duoc quan ly boi [Crowdin](https://docs.term
|
|||||||
- **Ket Noi Nhanh** - Ket noi den may chu ma khong can luu du lieu ket noi
|
- **Ket Noi Nhanh** - Ket noi den may chu ma khong can luu du lieu ket noi
|
||||||
- **Bang Lenh** - Nhan dup phim shift trai de truy cap nhanh cac ket noi SSH bang ban phim
|
- **Bang Lenh** - Nhan dup phim shift trai de truy cap nhanh cac ket noi SSH bang ban phim
|
||||||
- **Tich Hop Proxmox** - Tu dong them may chu vao Termix tu instance Proxmox cua ban
|
- **Tich Hop Proxmox** - Tu dong them may chu vao Termix tu instance Proxmox cua ban
|
||||||
- **SSH Giau Tinh Nang** - Ho tro jump host, Warpgate, ket noi dua tren TOTP, SOCKS5, xac minh khoa may chu, tu dong dien mat khau, [OPKSSH](https://github.com/openpubkey/opkssh), tmux, port knocking, ghi nhat ky terminal, v.v.
|
- **SSH Giau Tinh Nang** - Ho tro jump host, Warpgate, ket noi dua tren TOTP, SOCKS5, xac minh khoa may chu, tu dong dien mat khau, [OPKSSH](https://github.com/openpubkey/opkssh), tmux, port knocking, ghi nhat ky terminal, chuyen tiep SSH agent, Bitwarden SSH agent, ky SSH bang HashiCorp Vault va nhieu hon nua.
|
||||||
|
- **Termix ID** - Mot tuong duong cua sshid.io duoc tich hop san trong Termix. Dang ky mot ten dinh danh, cong bo khoa SSH cong khai cua ban tai mot URL phan giai va su dung CA tich hop san de cap chung chi SSH.
|
||||||
|
|
||||||
</details>
|
</details>
|
||||||
|
|
||||||
@@ -249,7 +252,9 @@ Ho tro tich hop khoang 30 ngon ngu (duoc quan ly boi [Crowdin](https://docs.term
|
|||||||
|
|
||||||
## Cai Dat
|
## Cai Dat
|
||||||
|
|
||||||
Truy cap [Tai Lieu](https://docs.termix.site/install) Termix de biet them thong tin ve cach cai dat Termix tren tat ca cac nen tang. Ngoai ra, xem tep Docker Compose mau tai day (ban co the bo qua guacd va mang neu khong co y dinh su dung cac tinh nang dieu khien may tinh tu xa):
|
Truy cap [Tai Lieu](https://docs.termix.site/install) Termix de biet them thong tin ve cach cai dat Termix tren tat ca cac nen tang.
|
||||||
|
|
||||||
|
Tep Docker Compose mau (ban co the bo qua `guacd` va mang neu khong co y dinh su dung cac tinh nang dieu khien may tinh tu xa):
|
||||||
|
|
||||||
```yaml
|
```yaml
|
||||||
services:
|
services:
|
||||||
@@ -290,9 +295,59 @@ networks:
|
|||||||
|
|
||||||
## Quyên góp
|
## Quyên góp
|
||||||
|
|
||||||
Termix là dự án miễn phí và mã nguồn mở. Nếu bạn thấy hữu ích, hãy cân nhắc [quyên góp](https://donate.termix.site/) để giúp trang trải chi phí máy chủ và thời gian phát triển.
|
Termix là dự án miễn phí và mã nguồn mở, không có gói đăng ký hay trả phí. Nếu bạn thấy hữu ích, hãy cân nhắc quyên góp để giúp trang trải chi phí máy chủ, tên miền và thời gian phát triển. Các khoản quyên góp cũng giúp tài trợ thời gian nghiên cứu và tìm hiểu những gì cần thiết để xây dựng các tính năng như SAML, Kubernetes và hỗ trợ Agent. Theo dõi tiến độ và quyên góp bên dưới.
|
||||||
|
|
||||||
<a href="https://donate.termix.site/"><img src="../repo-images/donation-goal.svg" alt="Monthly donation goal" /></a>
|
[Quyên góp](https://donate.termix.site/)
|
||||||
|
|
||||||
|
<br />
|
||||||
|
|
||||||
|
## Nha Tai Tro
|
||||||
|
|
||||||
|
Ban quan tam den viec dat quang cao tra phi de ho tro phat trien? Gui email toi [mail@termix.site](mailto:mail@termix.site).
|
||||||
|
|
||||||
|
<div align="center">
|
||||||
|
|
||||||
|
<br />
|
||||||
|
|
||||||
|
<a href="https://www.digitalocean.com/">
|
||||||
|
<img src="https://opensource.nyc3.cdn.digitaloceanspaces.com/attribution/assets/SVG/DO_Logo_horizontal_blue.svg" height="40" alt="DigitalOcean" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://crowdin.com/">
|
||||||
|
<img src="https://support.crowdin.com/assets/logos/core-logo/svg/crowdin-core-logo-cDark.svg" height="40" alt="Crowdin" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://www.blacksmith.sh/">
|
||||||
|
<img src="https://cdn.prod.website-files.com/681bfb0c9a4601bc6e288ec4/683ca9e2c5186757092611b8_e8cb22127df4da0811c4120a523722d2_logo-backsmith-wordmark-light.svg" height="40" alt="Blacksmith" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://www.cloudflare.com/">
|
||||||
|
<img src="https://sirv.sirv.com/website/screenshots/cloudflare/cloudflare-logo.png?w=300" height="40" alt="Cloudflare" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://tailscale.com/">
|
||||||
|
<img src="https://drive.google.com/uc?export=view&id=1lIxkJuX6M23bW-2FElhT0rQieTrzaVSL" height="40" alt="Tailscale" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://akamai.com/">
|
||||||
|
<img src="https://upload.wikimedia.org/wikipedia/commons/8/8b/Akamai_logo.svg" height="40" alt="Akamai" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://aws.amazon.com/">
|
||||||
|
<img src="https://upload.wikimedia.org/wikipedia/commons/thumb/9/93/Amazon_Web_Services_Logo.svg/960px-Amazon_Web_Services_Logo.svg.png" height="40" alt="AWS" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
<a href="https://rackgenius.com/">
|
||||||
|
<img src="https://rackgenius.com/rackgenius-logo.png" height="40" alt="Rack Genius" />
|
||||||
|
</a>
|
||||||
|
|
||||||
|
</div>
|
||||||
|
|
||||||
|
<br />
|
||||||
|
|
||||||
|
## Ho Tro
|
||||||
|
|
||||||
|
Neu ban can tro giup hoac muon yeu cau tinh nang voi Termix, hay truy cap trang [Van De](https://github.com/Termix-SSH/Support/issues), dang nhap va nhan `New Issue`. Vui long mo ta van de cang chi tiet cang tot, uu tien viet bang tieng Anh. Ban cung co the tham gia may chu [Discord](https://discord.gg/jVQGdvHDrf) va truy cap kenh ho tro, tuy nhien thoi gian phan hoi co the lau hon.
|
||||||
|
|
||||||
<br />
|
<br />
|
||||||
|
|
||||||
@@ -356,50 +411,6 @@ Xem [Du An](https://github.com/orgs/Termix-SSH/projects/5) de biet tat ca cac ti
|
|||||||
|
|
||||||
<br />
|
<br />
|
||||||
|
|
||||||
## Nha Tai Tro
|
|
||||||
|
|
||||||
<div align="center">
|
|
||||||
|
|
||||||
<br />
|
|
||||||
|
|
||||||
<a href="https://www.digitalocean.com/">
|
|
||||||
<img src="https://opensource.nyc3.cdn.digitaloceanspaces.com/attribution/assets/SVG/DO_Logo_horizontal_blue.svg" height="40" alt="DigitalOcean" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://crowdin.com/">
|
|
||||||
<img src="https://support.crowdin.com/assets/logos/core-logo/svg/crowdin-core-logo-cDark.svg" height="40" alt="Crowdin" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://www.blacksmith.sh/">
|
|
||||||
<img src="https://cdn.prod.website-files.com/681bfb0c9a4601bc6e288ec4/683ca9e2c5186757092611b8_e8cb22127df4da0811c4120a523722d2_logo-backsmith-wordmark-light.svg" height="40" alt="Blacksmith" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://www.cloudflare.com/">
|
|
||||||
<img src="https://sirv.sirv.com/website/screenshots/cloudflare/cloudflare-logo.png?w=300" height="40" alt="Cloudflare" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://tailscale.com/">
|
|
||||||
<img src="https://drive.google.com/uc?export=view&id=1lIxkJuX6M23bW-2FElhT0rQieTrzaVSL" height="40" alt="Tailscale" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://akamai.com/">
|
|
||||||
<img src="https://upload.wikimedia.org/wikipedia/commons/8/8b/Akamai_logo.svg" height="40" alt="Akamai" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
<a href="https://aws.amazon.com/">
|
|
||||||
<img src="https://upload.wikimedia.org/wikipedia/commons/thumb/9/93/Amazon_Web_Services_Logo.svg/960px-Amazon_Web_Services_Logo.svg.png" height="40" alt="AWS" />
|
|
||||||
</a>
|
|
||||||
|
|
||||||
</div>
|
|
||||||
|
|
||||||
<br />
|
|
||||||
|
|
||||||
## Ho Tro
|
|
||||||
|
|
||||||
Neu ban can tro giup hoac muon yeu cau tinh nang voi Termix, hay truy cap trang [Van De](https://github.com/Termix-SSH/Support/issues), dang nhap va nhan `New Issue`. Vui long mo ta van de cang chi tiet cang tot, uu tien viet bang tieng Anh. Ban cung co the tham gia may chu [Discord](https://discord.gg/jVQGdvHDrf) va truy cap kenh ho tro, tuy nhien thoi gian phan hoi co the lau hon.
|
|
||||||
|
|
||||||
<br />
|
|
||||||
|
|
||||||
## Giay Phep
|
## Giay Phep
|
||||||
|
|
||||||
Duoc phan phoi theo Giay Phep Apache Phien Ban 2.0. Xem `LICENSE` de biet them thong tin.
|
Duoc phan phoi theo Giay Phep Apache Phien Ban 2.0. Xem `LICENSE` de biet them thong tin.
|
||||||
|
Before Width: | Height: | Size: 364 KiB After Width: | Height: | Size: 364 KiB |
|
Before Width: | Height: | Size: 81 KiB After Width: | Height: | Size: 81 KiB |
|
Before Width: | Height: | Size: 26 KiB After Width: | Height: | Size: 26 KiB |
|
Before Width: | Height: | Size: 39 KiB After Width: | Height: | Size: 39 KiB |
|
Before Width: | Height: | Size: 26 KiB After Width: | Height: | Size: 26 KiB |
|
Before Width: | Height: | Size: 276 KiB After Width: | Height: | Size: 276 KiB |
|
Before Width: | Height: | Size: 527 KiB After Width: | Height: | Size: 527 KiB |
|
Before Width: | Height: | Size: 74 KiB After Width: | Height: | Size: 74 KiB |
|
Before Width: | Height: | Size: 794 KiB After Width: | Height: | Size: 794 KiB |
|
Before Width: | Height: | Size: 567 KiB After Width: | Height: | Size: 567 KiB |
|
Before Width: | Height: | Size: 236 KiB After Width: | Height: | Size: 236 KiB |
|
Before Width: | Height: | Size: 404 KiB After Width: | Height: | Size: 404 KiB |
|
Before Width: | Height: | Size: 372 KiB After Width: | Height: | Size: 372 KiB |
|
Before Width: | Height: | Size: 449 KiB After Width: | Height: | Size: 449 KiB |
|
Before Width: | Height: | Size: 534 KiB After Width: | Height: | Size: 534 KiB |
|
Before Width: | Height: | Size: 98 KiB After Width: | Height: | Size: 98 KiB |
|
Before Width: | Height: | Size: 46 KiB After Width: | Height: | Size: 46 KiB |
|
Before Width: | Height: | Size: 284 KiB After Width: | Height: | Size: 284 KiB |
|
Before Width: | Height: | Size: 493 KiB After Width: | Height: | Size: 493 KiB |
@@ -117,8 +117,8 @@
|
|||||||
"category": "public.app-category.developer-tools",
|
"category": "public.app-category.developer-tools",
|
||||||
"hardenedRuntime": true,
|
"hardenedRuntime": true,
|
||||||
"gatekeeperAssess": false,
|
"gatekeeperAssess": false,
|
||||||
"entitlements": "build/entitlements.mac.plist",
|
"entitlements": "packaging/build/entitlements.mac.plist",
|
||||||
"entitlementsInherit": "build/entitlements.mac.inherit.plist",
|
"entitlementsInherit": "packaging/build/entitlements.mac.inherit.plist",
|
||||||
"type": "distribution",
|
"type": "distribution",
|
||||||
"minimumSystemVersion": "10.15",
|
"minimumSystemVersion": "10.15",
|
||||||
"mergeASARs": false,
|
"mergeASARs": false,
|
||||||
@@ -129,12 +129,12 @@
|
|||||||
"artifactName": "termix_macos_${arch}_dmg.${ext}",
|
"artifactName": "termix_macos_${arch}_dmg.${ext}",
|
||||||
"sign": true
|
"sign": true
|
||||||
},
|
},
|
||||||
"afterPack": "build/after-pack.cjs",
|
"afterPack": "packaging/build/after-pack.cjs",
|
||||||
"afterSign": "build/notarize.cjs",
|
"afterSign": "packaging/build/notarize.cjs",
|
||||||
"mas": {
|
"mas": {
|
||||||
"provisioningProfile": "build/Termix_Mac_App_Store.provisionprofile",
|
"provisioningProfile": "packaging/build/Termix_Mac_App_Store.provisionprofile",
|
||||||
"entitlements": "build/entitlements.mas.plist",
|
"entitlements": "packaging/build/entitlements.mas.plist",
|
||||||
"entitlementsInherit": "build/entitlements.mas.inherit.plist",
|
"entitlementsInherit": "packaging/build/entitlements.mas.inherit.plist",
|
||||||
"hardenedRuntime": false,
|
"hardenedRuntime": false,
|
||||||
"gatekeeperAssess": false,
|
"gatekeeperAssess": false,
|
||||||
"type": "distribution",
|
"type": "distribution",
|
||||||
|
|||||||
+1
-1
@@ -1397,7 +1397,7 @@ ipcMain.handle(
|
|||||||
|
|
||||||
server.once("error", fail);
|
server.once("error", fail);
|
||||||
|
|
||||||
server.listen(callbackPort, "127.0.0.1", async () => {
|
server.listen(callbackPort, "localhost", async () => {
|
||||||
try {
|
try {
|
||||||
await shell.openExternal(authUrl);
|
await shell.openExternal(authUrl);
|
||||||
} catch (error) {
|
} catch (error) {
|
||||||
|
|||||||
Generated
+605
-644
File diff suppressed because it is too large
Load Diff
+33
-32
@@ -1,7 +1,7 @@
|
|||||||
{
|
{
|
||||||
"name": "termix",
|
"name": "termix",
|
||||||
"private": true,
|
"private": true,
|
||||||
"version": "2.5.0",
|
"version": "2.5.1",
|
||||||
"description": "Self-hosted SSH and remote desktop management.",
|
"description": "Self-hosted SSH and remote desktop management.",
|
||||||
"author": "Karmaa",
|
"author": "Karmaa",
|
||||||
"main": "electron/main.cjs",
|
"main": "electron/main.cjs",
|
||||||
@@ -14,7 +14,7 @@
|
|||||||
"format:check": "prettier --check .",
|
"format:check": "prettier --check .",
|
||||||
"biome:check": "biome check biome.json package.json",
|
"biome:check": "biome check biome.json package.json",
|
||||||
"biome:fix": "biome check --write biome.json package.json",
|
"biome:fix": "biome check --write biome.json package.json",
|
||||||
"postinstall": "node scripts/patch-app-builder-lib.cjs && node scripts/patch-guacamole-lite.cjs && node scripts/patch-better-sqlite3.cjs && node scripts/patch-nan.cjs",
|
"postinstall": "node scripts/patch-app-builder-lib.cjs && node scripts/patch-guacamole-lite.cjs && node scripts/patch-better-sqlite3.cjs && node scripts/patch-nan.cjs && node scripts/patch-xterm-android-ime.cjs",
|
||||||
"prebuild": "node scripts/write-electron-build-info.cjs",
|
"prebuild": "node scripts/write-electron-build-info.cjs",
|
||||||
"lint": "eslint .",
|
"lint": "eslint .",
|
||||||
"lint:fix": "eslint --fix .",
|
"lint:fix": "eslint --fix .",
|
||||||
@@ -29,7 +29,7 @@
|
|||||||
"dev:backend": "tsc -p tsconfig.node.json && node -e \"require('fs').copyFileSync('src/backend/package.json','dist/backend/package.json')\" && node ./dist/backend/backend/starter.js",
|
"dev:backend": "tsc -p tsconfig.node.json && node -e \"require('fs').copyFileSync('src/backend/package.json','dist/backend/package.json')\" && node ./dist/backend/backend/starter.js",
|
||||||
"dev:docker": "docker stop termix-dev 2>nul & docker rm termix-dev 2>nul & docker build -f docker/Dockerfile -t termix:dev --no-cache . && docker run -d --name termix-dev -p 3000:3000 -p 8080:8080 -p 30001-30006:30001-30006 -v \"%cd%\\db\\data:/app/data\" termix:dev",
|
"dev:docker": "docker stop termix-dev 2>nul & docker rm termix-dev 2>nul & docker build -f docker/Dockerfile -t termix:dev --no-cache . && docker run -d --name termix-dev -p 3000:3000 -p 8080:8080 -p 30001-30006:30001-30006 -v \"%cd%\\db\\data:/app/data\" termix:dev",
|
||||||
"dev:docker:restart": "docker stop termix-dev 2>nul & docker rm termix-dev 2>nul & docker run -d --name termix-dev -p 8080:8080 -p 30001-30006:30001-30006 -v \"%cd%\\db\\data:/app/data\" termix:dev",
|
"dev:docker:restart": "docker stop termix-dev 2>nul & docker rm termix-dev 2>nul & docker run -d --name termix-dev -p 8080:8080 -p 30001-30006:30001-30006 -v \"%cd%\\db\\data:/app/data\" termix:dev",
|
||||||
"generate:openapi": "tsc -p tsconfig.node.json && node -e \"require('fs').copyFileSync('src/backend/package.json','dist/backend/package.json')\" && node ./dist/backend/backend/swagger.js",
|
"generate:openapi": "tsc -p tsconfig.node.json && node -e \"require('fs').copyFileSync('src/backend/package.json','dist/backend/package.json')\" && node ./dist/backend/backend/utils/swagger.js",
|
||||||
"preview": "vite preview",
|
"preview": "vite preview",
|
||||||
"electron:dev": "concurrently \"npm run dev\" \"powershell -c \\\"Start-Sleep -Seconds 5\\\" && electron .\"",
|
"electron:dev": "concurrently \"npm run dev\" \"powershell -c \\\"Start-Sleep -Seconds 5\\\" && electron .\"",
|
||||||
"electron:patch-builder": "node scripts/patch-app-builder-lib.cjs",
|
"electron:patch-builder": "node scripts/patch-app-builder-lib.cjs",
|
||||||
@@ -45,8 +45,9 @@
|
|||||||
"dependencies": {
|
"dependencies": {
|
||||||
"@simplewebauthn/browser": "^13.3.0",
|
"@simplewebauthn/browser": "^13.3.0",
|
||||||
"@simplewebauthn/server": "^13.3.2",
|
"@simplewebauthn/server": "^13.3.2",
|
||||||
|
"@tanstack/react-virtual": "^3.14.6",
|
||||||
"@types/ldapjs": "^3.0.6",
|
"@types/ldapjs": "^3.0.6",
|
||||||
"axios": "^1.18.0",
|
"axios": "^1.18.1",
|
||||||
"bcryptjs": "^3.0.3",
|
"bcryptjs": "^3.0.3",
|
||||||
"better-sqlite3": "^12.11.1",
|
"better-sqlite3": "^12.11.1",
|
||||||
"body-parser": "^2.3.0",
|
"body-parser": "^2.3.0",
|
||||||
@@ -58,28 +59,28 @@
|
|||||||
"express": "^5.2.1",
|
"express": "^5.2.1",
|
||||||
"guacamole-lite": "^1.2.0",
|
"guacamole-lite": "^1.2.0",
|
||||||
"jose": "^6.2.2",
|
"jose": "^6.2.2",
|
||||||
"js-yaml": "^5.0.0",
|
"js-yaml": "^5.2.1",
|
||||||
"jsonwebtoken": "^9.0.3",
|
"jsonwebtoken": "^9.0.3",
|
||||||
"jszip": "^3.10.1",
|
"jszip": "^3.10.1",
|
||||||
"ldapjs": "^3.0.7",
|
"ldapjs": "^3.0.7",
|
||||||
"motion": "^12.38.0",
|
"motion": "^12.42.2",
|
||||||
"multer": "^2.2.0",
|
"multer": "^2.2.0",
|
||||||
"nanoid": "^5.1.15",
|
"nanoid": "^5.1.16",
|
||||||
"qrcode": "^1.5.4",
|
"qrcode": "^1.5.4",
|
||||||
"serialport": "^13.0.0",
|
"serialport": "^13.0.0",
|
||||||
"socks": "^2.8.7",
|
"socks": "^2.8.7",
|
||||||
"speakeasy": "^2.0.0",
|
"speakeasy": "^2.0.0",
|
||||||
"ssh2": "^1.17.0",
|
"ssh2": "^1.17.0",
|
||||||
"undici": "^8.5.0",
|
"undici": "^8.7.0",
|
||||||
"ws": "^8.20.0"
|
"ws": "^8.20.0"
|
||||||
},
|
},
|
||||||
"devDependencies": {
|
"devDependencies": {
|
||||||
"@biomejs/biome": "2.5.1",
|
"@biomejs/biome": "2.5.2",
|
||||||
"@codemirror/autocomplete": "^6.20.3",
|
"@codemirror/autocomplete": "^6.20.3",
|
||||||
"@codemirror/commands": "^6.10.3",
|
"@codemirror/commands": "^6.10.4",
|
||||||
"@codemirror/search": "^6.7.1",
|
"@codemirror/search": "^6.7.1",
|
||||||
"@codemirror/theme-one-dark": "^6.1.3",
|
"@codemirror/theme-one-dark": "^6.1.3",
|
||||||
"@codemirror/view": "^6.43.1",
|
"@codemirror/view": "^6.43.5",
|
||||||
"@commitlint/cli": "^21.0.2",
|
"@commitlint/cli": "^21.0.2",
|
||||||
"@commitlint/config-conventional": "^21.0.2",
|
"@commitlint/config-conventional": "^21.0.2",
|
||||||
"@deadendjs/swagger-jsdoc": "^8.1.2",
|
"@deadendjs/swagger-jsdoc": "^8.1.2",
|
||||||
@@ -91,23 +92,23 @@
|
|||||||
"@fontsource/jetbrains-mono": "^5.2.8",
|
"@fontsource/jetbrains-mono": "^5.2.8",
|
||||||
"@fontsource/source-code-pro": "^5.2.7",
|
"@fontsource/source-code-pro": "^5.2.7",
|
||||||
"@monaco-editor/react": "^4.7.0",
|
"@monaco-editor/react": "^4.7.0",
|
||||||
"@radix-ui/react-accordion": "^1.2.13",
|
"@radix-ui/react-accordion": "^1.2.15",
|
||||||
"@radix-ui/react-alert-dialog": "^1.1.16",
|
"@radix-ui/react-alert-dialog": "^1.1.18",
|
||||||
"@radix-ui/react-checkbox": "^1.3.4",
|
"@radix-ui/react-checkbox": "^1.3.6",
|
||||||
"@radix-ui/react-dialog": "^1.1.16",
|
"@radix-ui/react-dialog": "^1.1.18",
|
||||||
"@radix-ui/react-dropdown-menu": "^2.1.17",
|
"@radix-ui/react-dropdown-menu": "^2.1.19",
|
||||||
"@radix-ui/react-label": "^2.1.9",
|
"@radix-ui/react-label": "^2.1.11",
|
||||||
"@radix-ui/react-popover": "^1.1.16",
|
"@radix-ui/react-popover": "^1.1.18",
|
||||||
"@radix-ui/react-progress": "^1.1.9",
|
"@radix-ui/react-progress": "^1.1.11",
|
||||||
"@radix-ui/react-scroll-area": "^1.2.11",
|
"@radix-ui/react-scroll-area": "^1.2.13",
|
||||||
"@radix-ui/react-select": "^2.3.1",
|
"@radix-ui/react-select": "^2.3.2",
|
||||||
"@radix-ui/react-separator": "^1.1.9",
|
"@radix-ui/react-separator": "^1.1.11",
|
||||||
"@radix-ui/react-slider": "^1.4.1",
|
"@radix-ui/react-slider": "^1.4.2",
|
||||||
"@radix-ui/react-slot": "^1.3.0",
|
"@radix-ui/react-slot": "^1.3.0",
|
||||||
"@radix-ui/react-switch": "^1.3.1",
|
"@radix-ui/react-switch": "^1.3.2",
|
||||||
"@radix-ui/react-tabs": "^1.1.14",
|
"@radix-ui/react-tabs": "^1.1.16",
|
||||||
"@radix-ui/react-tooltip": "^1.2.9",
|
"@radix-ui/react-tooltip": "^1.2.11",
|
||||||
"@tailwindcss/vite": "^4.3.1",
|
"@tailwindcss/vite": "^4.3.2",
|
||||||
"@testing-library/dom": "^10.4.1",
|
"@testing-library/dom": "^10.4.1",
|
||||||
"@testing-library/jest-dom": "^6.9.1",
|
"@testing-library/jest-dom": "^6.9.1",
|
||||||
"@testing-library/react": "^16.3.2",
|
"@testing-library/react": "^16.3.2",
|
||||||
@@ -130,7 +131,7 @@
|
|||||||
"@uiw/codemirror-extensions-langs": "^4.25.9",
|
"@uiw/codemirror-extensions-langs": "^4.25.9",
|
||||||
"@uiw/codemirror-theme-github": "^4.25.9",
|
"@uiw/codemirror-theme-github": "^4.25.9",
|
||||||
"@uiw/react-codemirror": "^4.25.9",
|
"@uiw/react-codemirror": "^4.25.9",
|
||||||
"@vitejs/plugin-react": "^6.0.1",
|
"@vitejs/plugin-react": "^6.0.3",
|
||||||
"@vitest/coverage-v8": "^4.1.9",
|
"@vitest/coverage-v8": "^4.1.9",
|
||||||
"@vitest/ui": "^4.1.9",
|
"@vitest/ui": "^4.1.9",
|
||||||
"@xterm/addon-clipboard": "^0.2.0",
|
"@xterm/addon-clipboard": "^0.2.0",
|
||||||
@@ -143,7 +144,7 @@
|
|||||||
"cmdk": "^1.1.1",
|
"cmdk": "^1.1.1",
|
||||||
"concurrently": "^10.0.3",
|
"concurrently": "^10.0.3",
|
||||||
"cytoscape": "^3.34.0",
|
"cytoscape": "^3.34.0",
|
||||||
"electron": "^42.4.1",
|
"electron": "^43.0.0",
|
||||||
"electron-builder": "^26.15.3",
|
"electron-builder": "^26.15.3",
|
||||||
"eslint": "^10.5.0",
|
"eslint": "^10.5.0",
|
||||||
"eslint-plugin-react-hooks": "^7.1.1",
|
"eslint-plugin-react-hooks": "^7.1.1",
|
||||||
@@ -152,13 +153,13 @@
|
|||||||
"globals": "^17.5.0",
|
"globals": "^17.5.0",
|
||||||
"guacamole-common-js": "^1.5.0",
|
"guacamole-common-js": "^1.5.0",
|
||||||
"husky": "^9.1.7",
|
"husky": "^9.1.7",
|
||||||
"i18next": "^26.3.1",
|
"i18next": "^26.3.4",
|
||||||
"i18next-browser-languagedetector": "^8.2.1",
|
"i18next-browser-languagedetector": "^8.2.1",
|
||||||
"jsdom": "^29.1.1",
|
"jsdom": "^29.1.1",
|
||||||
"lint-staged": "^17.0.8",
|
"lint-staged": "^17.0.8",
|
||||||
"lucide-react": "^1.20.0",
|
"lucide-react": "^1.20.0",
|
||||||
"prettier": "3.8.4",
|
"prettier": "3.8.4",
|
||||||
"radix-ui": "^1.6.0",
|
"radix-ui": "^1.6.1",
|
||||||
"react": "^19.2.7",
|
"react": "^19.2.7",
|
||||||
"react-cytoscapejs": "^2.0.0",
|
"react-cytoscapejs": "^2.0.0",
|
||||||
"react-dom": "^19.2.7",
|
"react-dom": "^19.2.7",
|
||||||
@@ -172,7 +173,7 @@
|
|||||||
"react-syntax-highlighter": "^16.1.1",
|
"react-syntax-highlighter": "^16.1.1",
|
||||||
"react-xtermjs": "^1.0.10",
|
"react-xtermjs": "^1.0.10",
|
||||||
"remark-gfm": "^4.0.1",
|
"remark-gfm": "^4.0.1",
|
||||||
"sharp": "^0.35.2",
|
"sharp": "^0.35.3",
|
||||||
"sonner": "^2.0.7",
|
"sonner": "^2.0.7",
|
||||||
"tailwind-merge": "^3.5.0",
|
"tailwind-merge": "^3.5.0",
|
||||||
"tailwindcss": "^4.2.4",
|
"tailwindcss": "^4.2.4",
|
||||||
|
|||||||
@@ -95,13 +95,20 @@ function main() {
|
|||||||
const videoId = youtubeId(youtube);
|
const videoId = youtubeId(youtube);
|
||||||
const embed = [
|
const embed = [
|
||||||
`<a href="https://youtu.be/${videoId}">`,
|
`<a href="https://youtu.be/${videoId}">`,
|
||||||
` <img src="./repo-images/YouTube.png" alt="YouTube" width="500">`,
|
` <img src="./docs/repo-images/YouTube.png" alt="YouTube" width="500">`,
|
||||||
`</a>`,
|
`</a>`,
|
||||||
].join("\n");
|
].join("\n");
|
||||||
|
|
||||||
const table = buildTable(version, mobileVersion);
|
const table = buildTable(version, mobileVersion);
|
||||||
|
|
||||||
|
const donateAlert = [
|
||||||
|
"> [!TIP]",
|
||||||
|
"> Termix is free and always will be. If it's useful to you, consider [donating](https://donate.termix.site/donate/) to support development.",
|
||||||
|
].join("\n");
|
||||||
|
|
||||||
const body = [
|
const body = [
|
||||||
|
donateAlert,
|
||||||
|
"",
|
||||||
summary,
|
summary,
|
||||||
"",
|
"",
|
||||||
embed,
|
embed,
|
||||||
|
|||||||
@@ -26,10 +26,31 @@ if (!fs.existsSync(guacdClientPath) || !fs.existsSync(cryptPath)) {
|
|||||||
let guacdClientContent = fs.readFileSync(guacdClientPath, "utf8");
|
let guacdClientContent = fs.readFileSync(guacdClientPath, "utf8");
|
||||||
let cryptContent = fs.readFileSync(cryptPath, "utf8");
|
let cryptContent = fs.readFileSync(cryptPath, "utf8");
|
||||||
|
|
||||||
// Patch 1: version acceptance list
|
// Patch 1: protocol version negotiation.
|
||||||
const oldVersionCheck = "if (version === '1_0_0' || version === '1_1_0') {";
|
// guacamole-lite originally only accepted 1.0.0/1.1.0. Support the protocol
|
||||||
const newVersionCheck =
|
// versions Termix can handle, and conservatively answer future 1.x versions as
|
||||||
"if (version === '1_0_0' || version === '1_1_0' || version === '1_3_0' || version === '1_5_0') {";
|
// VERSION_1_5_0 so guacd still sees support for `require`/`name` without us
|
||||||
|
// claiming support for unknown instructions.
|
||||||
|
const oldVersionBlock =
|
||||||
|
" if (version === '1_0_0' || version === '1_1_0') {\n" +
|
||||||
|
" protocolVersion = version;\n" +
|
||||||
|
" } else {\n" +
|
||||||
|
" protocolVersion = '1_1_0';\n" +
|
||||||
|
" }";
|
||||||
|
const oldPatchedVersionBlock =
|
||||||
|
" if (version === '1_0_0' || version === '1_1_0' || version === '1_3_0' || version === '1_5_0') {\n" +
|
||||||
|
" protocolVersion = version;\n" +
|
||||||
|
" } else {\n" +
|
||||||
|
" protocolVersion = '1_1_0';\n" +
|
||||||
|
" }";
|
||||||
|
const newVersionBlock =
|
||||||
|
" if (version === '1_0_0' || version === '1_1_0' || version === '1_3_0' || version === '1_5_0') {\n" +
|
||||||
|
" protocolVersion = version;\n" +
|
||||||
|
" } else if (/^1_\\d+_0$/.test(version)) {\n" +
|
||||||
|
" protocolVersion = '1_5_0';\n" +
|
||||||
|
" } else {\n" +
|
||||||
|
" protocolVersion = '1_1_0';\n" +
|
||||||
|
" }";
|
||||||
|
|
||||||
// Patch 2: timezone instruction must be sent for all protocols >= 1.1.0, not just 1.1.0
|
// Patch 2: timezone instruction must be sent for all protocols >= 1.1.0, not just 1.1.0
|
||||||
const oldTimezone = "if (protocolVersion === '1_1_0') {";
|
const oldTimezone = "if (protocolVersion === '1_1_0') {";
|
||||||
@@ -105,17 +126,23 @@ const newReadyHandler =
|
|||||||
|
|
||||||
let patched = false;
|
let patched = false;
|
||||||
|
|
||||||
if (!guacdClientContent.includes(newVersionCheck)) {
|
if (!guacdClientContent.includes("} else if (/^1_\\d+_0$/.test(version)) {")) {
|
||||||
if (!guacdClientContent.includes(oldVersionCheck)) {
|
if (guacdClientContent.includes(oldPatchedVersionBlock)) {
|
||||||
|
guacdClientContent = guacdClientContent.replace(
|
||||||
|
oldPatchedVersionBlock,
|
||||||
|
newVersionBlock,
|
||||||
|
);
|
||||||
|
} else if (guacdClientContent.includes(oldVersionBlock)) {
|
||||||
|
guacdClientContent = guacdClientContent.replace(
|
||||||
|
oldVersionBlock,
|
||||||
|
newVersionBlock,
|
||||||
|
);
|
||||||
|
} else {
|
||||||
console.log(
|
console.log(
|
||||||
"[patch-guacamole-lite] Version check target not found, skipping",
|
"[patch-guacamole-lite] Version check target not found, skipping",
|
||||||
);
|
);
|
||||||
process.exit(0);
|
process.exit(0);
|
||||||
}
|
}
|
||||||
guacdClientContent = guacdClientContent.replace(
|
|
||||||
oldVersionCheck,
|
|
||||||
newVersionCheck,
|
|
||||||
);
|
|
||||||
patched = true;
|
patched = true;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|||||||
@@ -1,6 +1,29 @@
|
|||||||
import fs from "node:fs";
|
import fs from "node:fs";
|
||||||
|
import { createRequire } from "node:module";
|
||||||
import path from "node:path";
|
import path from "node:path";
|
||||||
import { describe, expect, it } from "vitest";
|
import { describe, expect, it, vi } from "vitest";
|
||||||
|
|
||||||
|
const require = createRequire(import.meta.url);
|
||||||
|
const GuacdClient = require("../node_modules/guacamole-lite/lib/GuacdClient.js");
|
||||||
|
|
||||||
|
type PatchedGuacdClient = {
|
||||||
|
connectionSettings: Record<string, unknown>;
|
||||||
|
nextArgumentStreamIndex: number;
|
||||||
|
sendInstruction: ReturnType<typeof vi.fn>;
|
||||||
|
sendHandshakeReply: (serverHandshake: string[]) => void;
|
||||||
|
sendRequiredArguments: (params: string[]) => void;
|
||||||
|
};
|
||||||
|
|
||||||
|
function createPatchedClient(
|
||||||
|
connectionSettings: Record<string, unknown>,
|
||||||
|
): PatchedGuacdClient {
|
||||||
|
return Object.assign(Object.create(GuacdClient.prototype), {
|
||||||
|
connectionSettings,
|
||||||
|
logger: { log: vi.fn() },
|
||||||
|
nextArgumentStreamIndex: 0,
|
||||||
|
sendInstruction: vi.fn(),
|
||||||
|
});
|
||||||
|
}
|
||||||
|
|
||||||
describe("patch-guacamole-lite", () => {
|
describe("patch-guacamole-lite", () => {
|
||||||
it("handles guacd dynamic argument requests", () => {
|
it("handles guacd dynamic argument requests", () => {
|
||||||
@@ -20,4 +43,49 @@ describe("patch-guacamole-lite", () => {
|
|||||||
expect(content).toContain("this.sendInstruction(['blob'");
|
expect(content).toContain("this.sendInstruction(['blob'");
|
||||||
expect(content).toContain("this.sendInstruction(['end'");
|
expect(content).toContain("this.sendInstruction(['end'");
|
||||||
});
|
});
|
||||||
|
|
||||||
|
it("keeps required-argument support when guacd offers a future 1.x protocol", () => {
|
||||||
|
const client = createPatchedClient({
|
||||||
|
hostname: "192.0.2.10",
|
||||||
|
port: 5900,
|
||||||
|
password: "secret",
|
||||||
|
width: 1280,
|
||||||
|
height: 720,
|
||||||
|
dpi: 96,
|
||||||
|
});
|
||||||
|
|
||||||
|
client.sendHandshakeReply(["VERSION_1_6_0", "hostname", "port"]);
|
||||||
|
|
||||||
|
expect(client.sendInstruction).toHaveBeenCalledWith(["timezone"]);
|
||||||
|
expect(client.sendInstruction).toHaveBeenCalledWith([
|
||||||
|
"name",
|
||||||
|
"guacamole-lite",
|
||||||
|
]);
|
||||||
|
expect(client.sendInstruction).toHaveBeenCalledWith([
|
||||||
|
"connect",
|
||||||
|
"VERSION_1_5_0",
|
||||||
|
"192.0.2.10",
|
||||||
|
5900,
|
||||||
|
]);
|
||||||
|
});
|
||||||
|
|
||||||
|
it("answers required credentials through argument value streams", () => {
|
||||||
|
const client = createPatchedClient({
|
||||||
|
username: "",
|
||||||
|
password: "secret",
|
||||||
|
});
|
||||||
|
|
||||||
|
client.sendRequiredArguments(["username", "password"]);
|
||||||
|
|
||||||
|
expect(
|
||||||
|
client.sendInstruction.mock.calls.map(([instruction]) => instruction),
|
||||||
|
).toEqual([
|
||||||
|
["argv", 0, "text/plain", "username"],
|
||||||
|
["blob", 0, ""],
|
||||||
|
["end", 0],
|
||||||
|
["argv", 1, "text/plain", "password"],
|
||||||
|
["blob", 1, Buffer.from("secret", "utf8").toString("base64")],
|
||||||
|
["end", 1],
|
||||||
|
]);
|
||||||
|
});
|
||||||
});
|
});
|
||||||
|
|||||||
@@ -0,0 +1,85 @@
|
|||||||
|
const fs = require("node:fs");
|
||||||
|
const path = require("node:path");
|
||||||
|
|
||||||
|
const xtermDir = path.join(
|
||||||
|
__dirname,
|
||||||
|
"..",
|
||||||
|
"node_modules",
|
||||||
|
"@xterm",
|
||||||
|
"xterm",
|
||||||
|
"lib",
|
||||||
|
);
|
||||||
|
|
||||||
|
// Backport the textarea-shrink fix from gmuxapp/xterm.js@6a011cf while
|
||||||
|
// xtermjs/xterm.js#3600 remains unresolved upstream. Android IMEs can restart
|
||||||
|
// composition on the previous word and replace it with a shorter value (for
|
||||||
|
// example, Vietnamese "Hoar" -> "Hỏa"). xterm 6.0 otherwise emits nothing.
|
||||||
|
const patches = [
|
||||||
|
{
|
||||||
|
file: "xterm.mjs",
|
||||||
|
replacements: [
|
||||||
|
[
|
||||||
|
'this._compositionPosition={start:0,end:0},this._dataAlreadySent=""',
|
||||||
|
'this._compositionPosition={start:0,end:0},this._preCompositionValue="",this._dataAlreadySent=""',
|
||||||
|
],
|
||||||
|
[
|
||||||
|
'this._compositionPosition.start=this._textarea.value.length,this._compositionView.textContent=""',
|
||||||
|
'this._compositionPosition.start=this._textarea.value.length,this._preCompositionValue=this._textarea.value,this._compositionView.textContent=""',
|
||||||
|
],
|
||||||
|
[
|
||||||
|
"let e={start:this._compositionPosition.start,end:this._compositionPosition.end};this._isSendingComposition=!0",
|
||||||
|
"let e={start:this._compositionPosition.start,end:this._compositionPosition.end};const s=this._preCompositionValue;this._isSendingComposition=!0",
|
||||||
|
],
|
||||||
|
[
|
||||||
|
"e.start+=this._dataAlreadySent.length,this._isComposing?i=this._textarea.value.substring(e.start,this._compositionPosition.start):i=this._textarea.value.substring(e.start),i.length>0&&",
|
||||||
|
"e.start+=this._dataAlreadySent.length;if(this._isComposing)i=this._textarea.value.substring(e.start,this._compositionPosition.start);else{const t=this._textarea.value;if(t.length<s.length){let e=0;const r=Math.min(t.length,s.length);for(;e<r&&t.charCodeAt(e)===s.charCodeAt(e);)e++;i=b.DEL.repeat(s.length-e)+t.substring(e)}else i=t.substring(e.start)}i.length>0&&",
|
||||||
|
],
|
||||||
|
],
|
||||||
|
},
|
||||||
|
{
|
||||||
|
file: "xterm.js",
|
||||||
|
replacements: [
|
||||||
|
[
|
||||||
|
'this._compositionPosition={start:0,end:0},this._dataAlreadySent=""',
|
||||||
|
'this._compositionPosition={start:0,end:0},this._preCompositionValue="",this._dataAlreadySent=""',
|
||||||
|
],
|
||||||
|
[
|
||||||
|
'this._compositionPosition.start=this._textarea.value.length,this._compositionView.textContent=""',
|
||||||
|
'this._compositionPosition.start=this._textarea.value.length,this._preCompositionValue=this._textarea.value,this._compositionView.textContent=""',
|
||||||
|
],
|
||||||
|
[
|
||||||
|
"const e={start:this._compositionPosition.start,end:this._compositionPosition.end};this._isSendingComposition=!0",
|
||||||
|
"const e={start:this._compositionPosition.start,end:this._compositionPosition.end},i=this._preCompositionValue;this._isSendingComposition=!0",
|
||||||
|
],
|
||||||
|
[
|
||||||
|
"e.start+=this._dataAlreadySent.length,t=this._isComposing?this._textarea.value.substring(e.start,this._compositionPosition.start):this._textarea.value.substring(e.start),t.length>0&&",
|
||||||
|
"e.start+=this._dataAlreadySent.length;this._isComposing?t=this._textarea.value.substring(e.start,this._compositionPosition.start):(()=>{const s=this._textarea.value;if(s.length<i.length){let e=0;const r=Math.min(s.length,i.length);for(;e<r&&s.charCodeAt(e)===i.charCodeAt(e);)e++;t=a.C0.DEL.repeat(i.length-e)+s.substring(e)}else t=s.substring(e.start)})(),t.length>0&&",
|
||||||
|
],
|
||||||
|
],
|
||||||
|
},
|
||||||
|
];
|
||||||
|
|
||||||
|
for (const { file, replacements } of patches) {
|
||||||
|
const filePath = path.join(xtermDir, file);
|
||||||
|
if (!fs.existsSync(filePath)) {
|
||||||
|
throw new Error(`[patch-xterm-android-ime] Missing ${filePath}`);
|
||||||
|
}
|
||||||
|
|
||||||
|
let source = fs.readFileSync(filePath, "utf8");
|
||||||
|
if (source.includes("_preCompositionValue")) {
|
||||||
|
console.log(`[patch-xterm-android-ime] ${file} already patched`);
|
||||||
|
continue;
|
||||||
|
}
|
||||||
|
|
||||||
|
for (const [original, patched] of replacements) {
|
||||||
|
if (!source.includes(original)) {
|
||||||
|
throw new Error(
|
||||||
|
`[patch-xterm-android-ime] Expected source not found in ${file}`,
|
||||||
|
);
|
||||||
|
}
|
||||||
|
source = source.replace(original, patched);
|
||||||
|
}
|
||||||
|
|
||||||
|
fs.writeFileSync(filePath, source);
|
||||||
|
console.log(`[patch-xterm-android-ime] Patched ${file}`);
|
||||||
|
}
|
||||||
@@ -1,7 +1,7 @@
|
|||||||
const fs = require("fs");
|
const fs = require("fs");
|
||||||
const path = require("path");
|
const path = require("path");
|
||||||
|
|
||||||
const SEMVER = /^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)$/;
|
const SEMVER = /^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(-[0-9A-Za-z.-]+)?$/;
|
||||||
|
|
||||||
function readJsonWithTrailingNewline(filePath) {
|
function readJsonWithTrailingNewline(filePath) {
|
||||||
const raw = fs.readFileSync(filePath, "utf8");
|
const raw = fs.readFileSync(filePath, "utf8");
|
||||||
|
|||||||
@@ -69,6 +69,13 @@ describe("syncVersion", () => {
|
|||||||
expect(() => syncVersion("2.4", { root })).toThrow(/invalid version/);
|
expect(() => syncVersion("2.4", { root })).toThrow(/invalid version/);
|
||||||
});
|
});
|
||||||
|
|
||||||
|
it("accepts a prerelease suffix", () => {
|
||||||
|
const changed = syncVersion("2.6.0-beta.20260720", { root });
|
||||||
|
expect(changed).toEqual(["package.json", "package-lock.json"]);
|
||||||
|
expect(pkg().version).toBe("2.6.0-beta.20260720");
|
||||||
|
expect(lock().version).toBe("2.6.0-beta.20260720");
|
||||||
|
});
|
||||||
|
|
||||||
it("works when only the lock root version is stale", () => {
|
it("works when only the lock root version is stale", () => {
|
||||||
fs.writeFileSync(
|
fs.writeFileSync(
|
||||||
path.join(root, "package.json"),
|
path.join(root, "package.json"),
|
||||||
|
|||||||
+144
-193
@@ -11,7 +11,7 @@ import snippetsRoutes from "./routes/snippets.js";
|
|||||||
import c2sTunnelPresetRoutes from "./routes/c2s-tunnel-presets.js";
|
import c2sTunnelPresetRoutes from "./routes/c2s-tunnel-presets.js";
|
||||||
import terminalRoutes from "./routes/terminal.js";
|
import terminalRoutes from "./routes/terminal.js";
|
||||||
import sessionLogRoutes from "./routes/session-log-routes.js";
|
import sessionLogRoutes from "./routes/session-log-routes.js";
|
||||||
import guacamoleRoutes from "../guacamole/routes.js";
|
import guacamoleRoutes from "../hosts/guacamole/routes.js";
|
||||||
import networkTopologyRoutes from "./routes/network-topology.js";
|
import networkTopologyRoutes from "./routes/network-topology.js";
|
||||||
import rbacRoutes from "./routes/rbac.js";
|
import rbacRoutes from "./routes/rbac.js";
|
||||||
import openTabsRoutes from "./routes/open-tabs.js";
|
import openTabsRoutes from "./routes/open-tabs.js";
|
||||||
@@ -34,27 +34,25 @@ import { DatabaseFileEncryption } from "../utils/database-file-encryption.js";
|
|||||||
import { DatabaseMigration } from "../utils/database-migration.js";
|
import { DatabaseMigration } from "../utils/database-migration.js";
|
||||||
import { UserDataExport } from "../utils/user-data-export.js";
|
import { UserDataExport } from "../utils/user-data-export.js";
|
||||||
import { AutoSSLSetup } from "../utils/auto-ssl-setup.js";
|
import { AutoSSLSetup } from "../utils/auto-ssl-setup.js";
|
||||||
import { eq, and } from "drizzle-orm";
|
import {
|
||||||
|
createCurrentCredentialRepository,
|
||||||
|
createCurrentDismissedAlertRepository,
|
||||||
|
createCurrentFileManagerBookmarkRepository,
|
||||||
|
createCurrentHostRepository,
|
||||||
|
createCurrentSettingsRepository,
|
||||||
|
createCurrentSshCredentialUsageRepository,
|
||||||
|
createCurrentUserRepository,
|
||||||
|
} from "./repositories/factory.js";
|
||||||
|
import { withCurrentSqliteForeignKeysDisabled } from "./repositories/sqlite-foreign-keys.js";
|
||||||
import { parseUserAgent } from "../utils/user-agent-parser.js";
|
import { parseUserAgent } from "../utils/user-agent-parser.js";
|
||||||
import { getProxyAgent } from "../utils/proxy-agent.js";
|
import { getProxyAgent } from "../utils/proxy-agent.js";
|
||||||
import {
|
|
||||||
users,
|
|
||||||
hosts,
|
|
||||||
sshCredentials,
|
|
||||||
fileManagerRecent,
|
|
||||||
fileManagerPinned,
|
|
||||||
fileManagerShortcuts,
|
|
||||||
dismissedAlerts,
|
|
||||||
sshCredentialUsage,
|
|
||||||
settings,
|
|
||||||
} from "./db/schema.js";
|
|
||||||
import type {
|
import type {
|
||||||
CacheEntry,
|
CacheEntry,
|
||||||
GitHubRelease,
|
GitHubRelease,
|
||||||
GitHubAPIResponse,
|
GitHubAPIResponse,
|
||||||
AuthenticatedRequest,
|
AuthenticatedRequest,
|
||||||
} from "../../types/index.js";
|
} from "../../types/index.js";
|
||||||
import { getDb, DatabaseSaveTrigger } from "./db/index.js";
|
import { DatabaseSaveTrigger } from "./db/index.js";
|
||||||
import Database from "better-sqlite3";
|
import Database from "better-sqlite3";
|
||||||
import { fileURLToPath } from "url";
|
import { fileURLToPath } from "url";
|
||||||
|
|
||||||
@@ -70,6 +68,45 @@ const authenticateJWT = authManager.createAuthMiddleware();
|
|||||||
const requireAdmin = authManager.createAdminMiddleware();
|
const requireAdmin = authManager.createAdminMiddleware();
|
||||||
app.use(createCorsMiddleware());
|
app.use(createCorsMiddleware());
|
||||||
|
|
||||||
|
type SettingData = {
|
||||||
|
key: string;
|
||||||
|
value: string;
|
||||||
|
};
|
||||||
|
|
||||||
|
function shouldExportSetting(key: string): boolean {
|
||||||
|
return !key.startsWith("reset_code_") && !key.startsWith("temp_reset_token_");
|
||||||
|
}
|
||||||
|
|
||||||
|
async function getExportableSettings(): Promise<SettingData[]> {
|
||||||
|
const settingsRows = await createCurrentSettingsRepository().listAll();
|
||||||
|
|
||||||
|
return settingsRows.filter((setting) => shouldExportSetting(setting.key));
|
||||||
|
}
|
||||||
|
|
||||||
|
function writeSettingsToExportDatabase(
|
||||||
|
exportDb: Database.Database,
|
||||||
|
settingsRows: SettingData[],
|
||||||
|
): void {
|
||||||
|
const insertSetting = exportDb.prepare(`
|
||||||
|
INSERT INTO settings (key, value)
|
||||||
|
VALUES (?, ?)
|
||||||
|
`);
|
||||||
|
|
||||||
|
for (const setting of settingsRows) {
|
||||||
|
insertSetting.run(setting.key, setting.value);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
function readImportedSettings(importDb: Database.Database): SettingData[] {
|
||||||
|
return importDb
|
||||||
|
.prepare("SELECT key, value FROM settings")
|
||||||
|
.all() as SettingData[];
|
||||||
|
}
|
||||||
|
|
||||||
|
async function upsertImportedSetting(setting: SettingData): Promise<void> {
|
||||||
|
await createCurrentSettingsRepository().upsert(setting.key, setting.value);
|
||||||
|
}
|
||||||
|
|
||||||
const uploadsDir = path.join(process.env.DATA_DIR || "./db/data", "uploads");
|
const uploadsDir = path.join(process.env.DATA_DIR || "./db/data", "uploads");
|
||||||
|
|
||||||
const storage = multer.diskStorage({
|
const storage = multer.diskStorage({
|
||||||
@@ -621,12 +658,13 @@ app.post("/database/export", authenticateJWT, async (req, res) => {
|
|||||||
const userId = (req as AuthenticatedRequest).userId;
|
const userId = (req as AuthenticatedRequest).userId;
|
||||||
const deviceInfo = parseUserAgent(req);
|
const deviceInfo = parseUserAgent(req);
|
||||||
|
|
||||||
const user = await getDb().select().from(users).where(eq(users.id, userId));
|
const userRepository = createCurrentUserRepository();
|
||||||
if (!user || user.length === 0) {
|
const user = await userRepository.findById(userId);
|
||||||
|
if (!user) {
|
||||||
return res.status(404).json({ error: "User not found" });
|
return res.status(404).json({ error: "User not found" });
|
||||||
}
|
}
|
||||||
|
|
||||||
const isOidcUser = !!user[0].isOidc;
|
const isOidcUser = !!user.isOidc;
|
||||||
|
|
||||||
if (!DataCrypto.getUserDataKey(userId)) {
|
if (!DataCrypto.getUserDataKey(userId)) {
|
||||||
if (isOidcUser) {
|
if (isOidcUser) {
|
||||||
@@ -867,22 +905,14 @@ app.post("/database/export", authenticateJWT, async (req, res) => {
|
|||||||
userRecord.totpBackupCodes || null,
|
userRecord.totpBackupCodes || null,
|
||||||
);
|
);
|
||||||
|
|
||||||
const sshHosts = await getDb()
|
const sshHosts =
|
||||||
.select()
|
await createCurrentHostRepository().listDecryptedByUserId(userId);
|
||||||
.from(hosts)
|
|
||||||
.where(eq(hosts.userId, userId));
|
|
||||||
const insertHost = exportDb.prepare(`
|
const insertHost = exportDb.prepare(`
|
||||||
INSERT INTO ssh_data (id, user_id, connection_type, name, ip, port, username, folder, tags, pin, auth_type, force_keyboard_interactive, password, key, key_password, key_type, sudo_password, autostart_password, autostart_key, autostart_key_password, credential_id, override_credential_username, enable_terminal, enable_tunnel, tunnel_connections, jump_hosts, enable_file_manager, enable_docker, show_terminal_in_sidebar, show_file_manager_in_sidebar, show_tunnel_in_sidebar, show_docker_in_sidebar, show_server_stats_in_sidebar, default_path, stats_config, docker_config, terminal_config, quick_actions, notes, use_socks5, socks5_host, socks5_port, socks5_username, socks5_password, socks5_proxy_chain, domain, security, ignore_cert, guacamole_config, mac_address, port_knock_sequence, created_at, updated_at)
|
INSERT INTO ssh_data (id, user_id, connection_type, name, ip, port, username, folder, tags, pin, auth_type, force_keyboard_interactive, password, key, key_password, key_type, sudo_password, autostart_password, autostart_key, autostart_key_password, credential_id, override_credential_username, enable_terminal, enable_tunnel, tunnel_connections, jump_hosts, enable_file_manager, enable_docker, show_terminal_in_sidebar, show_file_manager_in_sidebar, show_tunnel_in_sidebar, show_docker_in_sidebar, show_server_stats_in_sidebar, default_path, stats_config, docker_config, terminal_config, quick_actions, notes, use_socks5, socks5_host, socks5_port, socks5_username, socks5_password, socks5_proxy_chain, domain, security, ignore_cert, guacamole_config, mac_address, port_knock_sequence, created_at, updated_at)
|
||||||
VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
|
VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
|
||||||
`);
|
`);
|
||||||
|
|
||||||
for (const host of sshHosts) {
|
for (const decrypted of sshHosts) {
|
||||||
const decrypted = DataCrypto.decryptRecord(
|
|
||||||
"ssh_data",
|
|
||||||
host,
|
|
||||||
userId,
|
|
||||||
userDataKey,
|
|
||||||
);
|
|
||||||
insertHost.run(
|
insertHost.run(
|
||||||
decrypted.id,
|
decrypted.id,
|
||||||
decrypted.userId,
|
decrypted.userId,
|
||||||
@@ -940,22 +970,14 @@ app.post("/database/export", authenticateJWT, async (req, res) => {
|
|||||||
);
|
);
|
||||||
}
|
}
|
||||||
|
|
||||||
const credentials = await getDb()
|
const credentials =
|
||||||
.select()
|
await createCurrentCredentialRepository().listDecryptedByUserId(userId);
|
||||||
.from(sshCredentials)
|
|
||||||
.where(eq(sshCredentials.userId, userId));
|
|
||||||
const insertCred = exportDb.prepare(`
|
const insertCred = exportDb.prepare(`
|
||||||
INSERT INTO ssh_credentials (id, user_id, name, description, folder, tags, auth_type, username, password, key, private_key, public_key, key_password, key_type, detected_key_type, usage_count, last_used, created_at, updated_at)
|
INSERT INTO ssh_credentials (id, user_id, name, description, folder, tags, auth_type, username, password, key, private_key, public_key, key_password, key_type, detected_key_type, usage_count, last_used, created_at, updated_at)
|
||||||
VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
|
VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
|
||||||
`);
|
`);
|
||||||
|
|
||||||
for (const cred of credentials) {
|
for (const decrypted of credentials) {
|
||||||
const decrypted = DataCrypto.decryptRecord(
|
|
||||||
"ssh_credentials",
|
|
||||||
cred,
|
|
||||||
userId,
|
|
||||||
userDataKey,
|
|
||||||
);
|
|
||||||
insertCred.run(
|
insertCred.run(
|
||||||
decrypted.id,
|
decrypted.id,
|
||||||
decrypted.userId,
|
decrypted.userId,
|
||||||
@@ -979,19 +1001,12 @@ app.post("/database/export", authenticateJWT, async (req, res) => {
|
|||||||
);
|
);
|
||||||
}
|
}
|
||||||
|
|
||||||
|
const fileManagerRepository =
|
||||||
|
createCurrentFileManagerBookmarkRepository();
|
||||||
const [recentFiles, pinnedFiles, shortcuts] = await Promise.all([
|
const [recentFiles, pinnedFiles, shortcuts] = await Promise.all([
|
||||||
getDb()
|
fileManagerRepository.listRecentByUserId(userId),
|
||||||
.select()
|
fileManagerRepository.listPinnedByUserId(userId),
|
||||||
.from(fileManagerRecent)
|
fileManagerRepository.listShortcutsByUserId(userId),
|
||||||
.where(eq(fileManagerRecent.userId, userId)),
|
|
||||||
getDb()
|
|
||||||
.select()
|
|
||||||
.from(fileManagerPinned)
|
|
||||||
.where(eq(fileManagerPinned.userId, userId)),
|
|
||||||
getDb()
|
|
||||||
.select()
|
|
||||||
.from(fileManagerShortcuts)
|
|
||||||
.where(eq(fileManagerShortcuts.userId, userId)),
|
|
||||||
]);
|
]);
|
||||||
|
|
||||||
const insertRecent = exportDb.prepare(`
|
const insertRecent = exportDb.prepare(`
|
||||||
@@ -1039,10 +1054,8 @@ app.post("/database/export", authenticateJWT, async (req, res) => {
|
|||||||
);
|
);
|
||||||
}
|
}
|
||||||
|
|
||||||
const alerts = await getDb()
|
const dismissedAlertRepository = createCurrentDismissedAlertRepository();
|
||||||
.select()
|
const alerts = await dismissedAlertRepository.listByUserId(userId);
|
||||||
.from(dismissedAlerts)
|
|
||||||
.where(eq(dismissedAlerts.userId, userId));
|
|
||||||
const insertAlert = exportDb.prepare(`
|
const insertAlert = exportDb.prepare(`
|
||||||
INSERT INTO dismissed_alerts (id, user_id, alert_id, dismissed_at)
|
INSERT INTO dismissed_alerts (id, user_id, alert_id, dismissed_at)
|
||||||
VALUES (?, ?, ?, ?)
|
VALUES (?, ?, ?, ?)
|
||||||
@@ -1056,10 +1069,9 @@ app.post("/database/export", authenticateJWT, async (req, res) => {
|
|||||||
);
|
);
|
||||||
}
|
}
|
||||||
|
|
||||||
const usage = await getDb()
|
const sshCredentialUsageRepository =
|
||||||
.select()
|
createCurrentSshCredentialUsageRepository();
|
||||||
.from(sshCredentialUsage)
|
const usage = await sshCredentialUsageRepository.listByUserId(userId);
|
||||||
.where(eq(sshCredentialUsage.userId, userId));
|
|
||||||
const insertUsage = exportDb.prepare(`
|
const insertUsage = exportDb.prepare(`
|
||||||
INSERT INTO ssh_credential_usage (id, credential_id, host_id, user_id, used_at)
|
INSERT INTO ssh_credential_usage (id, credential_id, host_id, user_id, used_at)
|
||||||
VALUES (?, ?, ?, ?, ?)
|
VALUES (?, ?, ?, ?, ?)
|
||||||
@@ -1074,20 +1086,7 @@ app.post("/database/export", authenticateJWT, async (req, res) => {
|
|||||||
);
|
);
|
||||||
}
|
}
|
||||||
|
|
||||||
const settingsData = await getDb().select().from(settings);
|
writeSettingsToExportDatabase(exportDb, await getExportableSettings());
|
||||||
const insertSetting = exportDb.prepare(`
|
|
||||||
INSERT INTO settings (key, value)
|
|
||||||
VALUES (?, ?)
|
|
||||||
`);
|
|
||||||
for (const setting of settingsData) {
|
|
||||||
if (
|
|
||||||
setting.key.startsWith("reset_code_") ||
|
|
||||||
setting.key.startsWith("temp_reset_token_")
|
|
||||||
) {
|
|
||||||
continue;
|
|
||||||
}
|
|
||||||
insertSetting.run(setting.key, setting.value);
|
|
||||||
}
|
|
||||||
} finally {
|
} finally {
|
||||||
exportDb.close();
|
exportDb.close();
|
||||||
}
|
}
|
||||||
@@ -1182,19 +1181,16 @@ app.post(
|
|||||||
}
|
}
|
||||||
|
|
||||||
const userId = (req as AuthenticatedRequest).userId;
|
const userId = (req as AuthenticatedRequest).userId;
|
||||||
const mainDb = getDb();
|
|
||||||
const deviceInfo = parseUserAgent(req);
|
const deviceInfo = parseUserAgent(req);
|
||||||
|
|
||||||
const userRecords = await mainDb
|
const userRepository = createCurrentUserRepository();
|
||||||
.select()
|
const userRecord = await userRepository.findById(userId);
|
||||||
.from(users)
|
|
||||||
.where(eq(users.id, userId));
|
|
||||||
|
|
||||||
if (!userRecords || userRecords.length === 0) {
|
if (!userRecord) {
|
||||||
return res.status(404).json({ error: "User not found" });
|
return res.status(404).json({ error: "User not found" });
|
||||||
}
|
}
|
||||||
|
|
||||||
const isOidcUser = !!userRecords[0].isOidc;
|
const isOidcUser = !!userRecord.isOidc;
|
||||||
|
|
||||||
if (!DataCrypto.getUserDataKey(userId)) {
|
if (!DataCrypto.getUserDataKey(userId)) {
|
||||||
if (isOidcUser) {
|
if (isOidcUser) {
|
||||||
@@ -1276,26 +1272,22 @@ app.post(
|
|||||||
};
|
};
|
||||||
|
|
||||||
try {
|
try {
|
||||||
mainDb.$client.exec("PRAGMA foreign_keys = OFF");
|
await withCurrentSqliteForeignKeysDisabled(async () => {
|
||||||
try {
|
try {
|
||||||
const importedHosts = importDb
|
const importedHosts = importDb
|
||||||
.prepare("SELECT * FROM ssh_data")
|
.prepare("SELECT * FROM ssh_data")
|
||||||
.all();
|
.all();
|
||||||
for (const host of importedHosts) {
|
for (const host of importedHosts) {
|
||||||
try {
|
try {
|
||||||
const existing = await mainDb
|
const hostRepository = createCurrentHostRepository();
|
||||||
.select()
|
const exists = await hostRepository.existsForImportIdentity(
|
||||||
.from(hosts)
|
userId,
|
||||||
.where(
|
host.ip,
|
||||||
and(
|
host.port,
|
||||||
eq(hosts.userId, userId),
|
host.username,
|
||||||
eq(hosts.ip, host.ip),
|
|
||||||
eq(hosts.port, host.port),
|
|
||||||
eq(hosts.username, host.username),
|
|
||||||
),
|
|
||||||
);
|
);
|
||||||
|
|
||||||
if (existing.length > 0) {
|
if (exists) {
|
||||||
result.summary.skippedItems++;
|
result.summary.skippedItems++;
|
||||||
continue;
|
continue;
|
||||||
}
|
}
|
||||||
@@ -1353,13 +1345,7 @@ app.post(
|
|||||||
updatedAt: new Date().toISOString(),
|
updatedAt: new Date().toISOString(),
|
||||||
};
|
};
|
||||||
|
|
||||||
const encrypted = DataCrypto.encryptRecord(
|
await hostRepository.createEncryptedForUser(userId, hostData);
|
||||||
"ssh_data",
|
|
||||||
hostData,
|
|
||||||
userId,
|
|
||||||
userDataKey,
|
|
||||||
);
|
|
||||||
await mainDb.insert(hosts).values(encrypted);
|
|
||||||
result.summary.sshHostsImported++;
|
result.summary.sshHostsImported++;
|
||||||
} catch (hostError) {
|
} catch (hostError) {
|
||||||
result.summary.errors.push(
|
result.summary.errors.push(
|
||||||
@@ -1377,18 +1363,16 @@ app.post(
|
|||||||
.all();
|
.all();
|
||||||
for (const cred of importedCreds) {
|
for (const cred of importedCreds) {
|
||||||
try {
|
try {
|
||||||
const existing = await mainDb
|
const credentialRepository =
|
||||||
.select()
|
createCurrentCredentialRepository();
|
||||||
.from(sshCredentials)
|
const exists =
|
||||||
.where(
|
await credentialRepository.existsForImportIdentity(
|
||||||
and(
|
userId,
|
||||||
eq(sshCredentials.userId, userId),
|
cred.name,
|
||||||
eq(sshCredentials.name, cred.name),
|
cred.username,
|
||||||
eq(sshCredentials.username, cred.username),
|
|
||||||
),
|
|
||||||
);
|
);
|
||||||
|
|
||||||
if (existing.length > 0) {
|
if (exists) {
|
||||||
result.summary.skippedItems++;
|
result.summary.skippedItems++;
|
||||||
continue;
|
continue;
|
||||||
}
|
}
|
||||||
@@ -1414,13 +1398,10 @@ app.post(
|
|||||||
updatedAt: new Date().toISOString(),
|
updatedAt: new Date().toISOString(),
|
||||||
};
|
};
|
||||||
|
|
||||||
const encrypted = DataCrypto.encryptRecord(
|
await credentialRepository.createEncryptedForUser(
|
||||||
"ssh_credentials",
|
|
||||||
credData,
|
|
||||||
userId,
|
userId,
|
||||||
userDataKey,
|
credData,
|
||||||
);
|
);
|
||||||
await mainDb.insert(sshCredentials).values(encrypted);
|
|
||||||
result.summary.sshCredentialsImported++;
|
result.summary.sshCredentialsImported++;
|
||||||
} catch (credError) {
|
} catch (credError) {
|
||||||
result.summary.errors.push(
|
result.summary.errors.push(
|
||||||
@@ -1437,62 +1418,57 @@ app.post(
|
|||||||
const fileManagerTables = [
|
const fileManagerTables = [
|
||||||
{
|
{
|
||||||
table: "file_manager_recent",
|
table: "file_manager_recent",
|
||||||
schema: fileManagerRecent,
|
|
||||||
key: "fileManagerItemsImported",
|
key: "fileManagerItemsImported",
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
table: "file_manager_pinned",
|
table: "file_manager_pinned",
|
||||||
schema: fileManagerPinned,
|
|
||||||
key: "fileManagerItemsImported",
|
key: "fileManagerItemsImported",
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
table: "file_manager_shortcuts",
|
table: "file_manager_shortcuts",
|
||||||
schema: fileManagerShortcuts,
|
|
||||||
key: "fileManagerItemsImported",
|
key: "fileManagerItemsImported",
|
||||||
},
|
},
|
||||||
];
|
];
|
||||||
|
|
||||||
for (const { table, schema, key } of fileManagerTables) {
|
const fileManagerRepository =
|
||||||
|
createCurrentFileManagerBookmarkRepository();
|
||||||
|
|
||||||
|
for (const { table, key } of fileManagerTables) {
|
||||||
try {
|
try {
|
||||||
const importedItems = importDb
|
const importedItems = importDb
|
||||||
.prepare(`SELECT * FROM ${table}`)
|
.prepare(`SELECT * FROM ${table}`)
|
||||||
.all();
|
.all();
|
||||||
for (const item of importedItems) {
|
for (const item of importedItems) {
|
||||||
try {
|
try {
|
||||||
const existing = await mainDb
|
const bookmark = {
|
||||||
.select()
|
|
||||||
.from(schema)
|
|
||||||
.where(
|
|
||||||
and(
|
|
||||||
eq(schema.userId, userId),
|
|
||||||
eq(schema.path, item.path),
|
|
||||||
eq(schema.name, item.name),
|
|
||||||
),
|
|
||||||
);
|
|
||||||
|
|
||||||
if (existing.length > 0) {
|
|
||||||
result.summary.skippedItems++;
|
|
||||||
continue;
|
|
||||||
}
|
|
||||||
|
|
||||||
const itemData = {
|
|
||||||
userId: userId,
|
|
||||||
hostId: item.host_id,
|
hostId: item.host_id,
|
||||||
name: item.name,
|
name: item.name,
|
||||||
path: item.path,
|
path: item.path,
|
||||||
...(table === "file_manager_recent" && {
|
|
||||||
lastOpened: item.last_opened,
|
|
||||||
}),
|
|
||||||
...(table === "file_manager_pinned" && {
|
|
||||||
pinnedAt: item.pinned_at,
|
|
||||||
}),
|
|
||||||
...(table === "file_manager_shortcuts" && {
|
|
||||||
createdAt: item.created_at,
|
|
||||||
}),
|
|
||||||
};
|
};
|
||||||
|
const created =
|
||||||
|
table === "file_manager_recent"
|
||||||
|
? await fileManagerRepository.createRecentForImport(
|
||||||
|
userId,
|
||||||
|
bookmark,
|
||||||
|
item.last_opened,
|
||||||
|
)
|
||||||
|
: table === "file_manager_pinned"
|
||||||
|
? await fileManagerRepository.createPinnedForImport(
|
||||||
|
userId,
|
||||||
|
bookmark,
|
||||||
|
item.pinned_at,
|
||||||
|
)
|
||||||
|
: await fileManagerRepository.createShortcutForImport(
|
||||||
|
userId,
|
||||||
|
bookmark,
|
||||||
|
item.created_at,
|
||||||
|
);
|
||||||
|
|
||||||
await mainDb.insert(schema).values(itemData);
|
if (created) {
|
||||||
result.summary[key]++;
|
result.summary[key]++;
|
||||||
|
} else {
|
||||||
|
result.summary.skippedItems++;
|
||||||
|
}
|
||||||
} catch (itemError) {
|
} catch (itemError) {
|
||||||
result.summary.errors.push(
|
result.summary.errors.push(
|
||||||
`${table} import error: ${itemError.message}`,
|
`${table} import error: ${itemError.message}`,
|
||||||
@@ -1500,37 +1476,31 @@ app.post(
|
|||||||
}
|
}
|
||||||
}
|
}
|
||||||
} catch {
|
} catch {
|
||||||
apiLogger.info(`${table} table not found in import file, skipping`);
|
apiLogger.info(
|
||||||
|
`${table} table not found in import file, skipping`,
|
||||||
|
);
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
const dismissedAlertRepository =
|
||||||
|
createCurrentDismissedAlertRepository();
|
||||||
|
|
||||||
try {
|
try {
|
||||||
const importedAlerts = importDb
|
const importedAlerts = importDb
|
||||||
.prepare("SELECT * FROM dismissed_alerts")
|
.prepare("SELECT * FROM dismissed_alerts")
|
||||||
.all();
|
.all();
|
||||||
for (const alert of importedAlerts) {
|
for (const alert of importedAlerts) {
|
||||||
try {
|
try {
|
||||||
const existing = await mainDb
|
const created = await dismissedAlertRepository.createForImport(
|
||||||
.select()
|
userId,
|
||||||
.from(dismissedAlerts)
|
alert.alert_id,
|
||||||
.where(
|
alert.dismissed_at,
|
||||||
and(
|
|
||||||
eq(dismissedAlerts.userId, userId),
|
|
||||||
eq(dismissedAlerts.alertId, alert.alert_id),
|
|
||||||
),
|
|
||||||
);
|
);
|
||||||
|
if (created) {
|
||||||
if (existing.length > 0) {
|
|
||||||
result.summary.skippedItems++;
|
|
||||||
continue;
|
|
||||||
}
|
|
||||||
|
|
||||||
await mainDb.insert(dismissedAlerts).values({
|
|
||||||
userId: userId,
|
|
||||||
alertId: alert.alert_id,
|
|
||||||
dismissedAt: alert.dismissed_at || new Date().toISOString(),
|
|
||||||
});
|
|
||||||
result.summary.dismissedAlertsImported++;
|
result.summary.dismissedAlertsImported++;
|
||||||
|
} else {
|
||||||
|
result.summary.skippedItems++;
|
||||||
|
}
|
||||||
} catch (alertError) {
|
} catch (alertError) {
|
||||||
result.summary.errors.push(
|
result.summary.errors.push(
|
||||||
`Dismissed alert import error: ${alertError.message}`,
|
`Dismissed alert import error: ${alertError.message}`,
|
||||||
@@ -1543,35 +1513,14 @@ app.post(
|
|||||||
);
|
);
|
||||||
}
|
}
|
||||||
|
|
||||||
const targetUser = await mainDb
|
const targetUser = await userRepository.findById(userId);
|
||||||
.select()
|
if (targetUser?.isAdmin) {
|
||||||
.from(users)
|
|
||||||
.where(eq(users.id, userId));
|
|
||||||
if (targetUser.length > 0 && targetUser[0].isAdmin) {
|
|
||||||
try {
|
try {
|
||||||
const importedSettings = importDb
|
const importedSettings = readImportedSettings(importDb);
|
||||||
.prepare("SELECT * FROM settings")
|
|
||||||
.all();
|
|
||||||
for (const setting of importedSettings) {
|
for (const setting of importedSettings) {
|
||||||
try {
|
try {
|
||||||
const existing = await mainDb
|
await upsertImportedSetting(setting);
|
||||||
.select()
|
|
||||||
.from(settings)
|
|
||||||
.where(eq(settings.key, setting.key));
|
|
||||||
|
|
||||||
if (existing.length > 0) {
|
|
||||||
await mainDb
|
|
||||||
.update(settings)
|
|
||||||
.set({ value: setting.value })
|
|
||||||
.where(eq(settings.key, setting.key));
|
|
||||||
result.summary.settingsImported++;
|
result.summary.settingsImported++;
|
||||||
} else {
|
|
||||||
await mainDb.insert(settings).values({
|
|
||||||
key: setting.key,
|
|
||||||
value: setting.value,
|
|
||||||
});
|
|
||||||
result.summary.settingsImported++;
|
|
||||||
}
|
|
||||||
} catch (settingError) {
|
} catch (settingError) {
|
||||||
result.summary.errors.push(
|
result.summary.errors.push(
|
||||||
`Setting import error (${setting.key}): ${settingError.message}`,
|
`Setting import error (${setting.key}): ${settingError.message}`,
|
||||||
@@ -1579,7 +1528,9 @@ app.post(
|
|||||||
}
|
}
|
||||||
}
|
}
|
||||||
} catch {
|
} catch {
|
||||||
apiLogger.info("settings table not found in import file, skipping");
|
apiLogger.info(
|
||||||
|
"settings table not found in import file, skipping",
|
||||||
|
);
|
||||||
}
|
}
|
||||||
} else {
|
} else {
|
||||||
apiLogger.info(
|
apiLogger.info(
|
||||||
@@ -1587,7 +1538,6 @@ app.post(
|
|||||||
);
|
);
|
||||||
}
|
}
|
||||||
|
|
||||||
mainDb.$client.exec("PRAGMA foreign_keys = ON");
|
|
||||||
result.success = true;
|
result.success = true;
|
||||||
|
|
||||||
try {
|
try {
|
||||||
@@ -1602,6 +1552,7 @@ app.post(
|
|||||||
},
|
},
|
||||||
);
|
);
|
||||||
}
|
}
|
||||||
|
});
|
||||||
} finally {
|
} finally {
|
||||||
if (importDb) {
|
if (importDb) {
|
||||||
importDb.close();
|
importDb.close();
|
||||||
|
|||||||
@@ -25,6 +25,28 @@ let memoryDatabase: Database.Database;
|
|||||||
let isNewDatabase = false;
|
let isNewDatabase = false;
|
||||||
let sqlite: Database.Database;
|
let sqlite: Database.Database;
|
||||||
|
|
||||||
|
function getRawSettingValue(key: string): string | null {
|
||||||
|
const row = sqlite
|
||||||
|
.prepare("SELECT value FROM settings WHERE key = ?")
|
||||||
|
.get(key) as { value?: string } | undefined;
|
||||||
|
|
||||||
|
return row?.value ?? null;
|
||||||
|
}
|
||||||
|
|
||||||
|
function setRawSettingValue(key: string, value: string): void {
|
||||||
|
sqlite
|
||||||
|
.prepare("INSERT OR REPLACE INTO settings (key, value) VALUES (?, ?)")
|
||||||
|
.run(key, value);
|
||||||
|
}
|
||||||
|
|
||||||
|
function ensureRawSettingDefault(key: string, value: string): void {
|
||||||
|
if (getRawSettingValue(key) === null) {
|
||||||
|
sqlite
|
||||||
|
.prepare("INSERT INTO settings (key, value) VALUES (?, ?)")
|
||||||
|
.run(key, value);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
async function initializeDatabaseAsync(): Promise<void> {
|
async function initializeDatabaseAsync(): Promise<void> {
|
||||||
const systemCrypto = SystemCrypto.getInstance();
|
const systemCrypto = SystemCrypto.getInstance();
|
||||||
|
|
||||||
@@ -165,7 +187,9 @@ async function initializeCompleteDatabase(): Promise<void> {
|
|||||||
scopes TEXT DEFAULT 'openid email profile',
|
scopes TEXT DEFAULT 'openid email profile',
|
||||||
totp_secret TEXT,
|
totp_secret TEXT,
|
||||||
totp_enabled INTEGER NOT NULL DEFAULT 0,
|
totp_enabled INTEGER NOT NULL DEFAULT 0,
|
||||||
totp_backup_codes TEXT
|
totp_backup_codes TEXT,
|
||||||
|
registered_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
|
||||||
|
donation_modal_dismissed INTEGER NOT NULL DEFAULT 0
|
||||||
);
|
);
|
||||||
|
|
||||||
CREATE TABLE IF NOT EXISTS settings (
|
CREATE TABLE IF NOT EXISTS settings (
|
||||||
@@ -460,6 +484,8 @@ async function initializeCompleteDatabase(): Promise<void> {
|
|||||||
commands TEXT,
|
commands TEXT,
|
||||||
dangerous_actions TEXT,
|
dangerous_actions TEXT,
|
||||||
recording_path TEXT,
|
recording_path TEXT,
|
||||||
|
protocol TEXT NOT NULL DEFAULT 'ssh',
|
||||||
|
format TEXT NOT NULL DEFAULT 'text',
|
||||||
terminated_by_owner INTEGER DEFAULT 0,
|
terminated_by_owner INTEGER DEFAULT 0,
|
||||||
termination_reason TEXT,
|
termination_reason TEXT,
|
||||||
FOREIGN KEY (host_id) REFERENCES ssh_data (id) ON DELETE CASCADE,
|
FOREIGN KEY (host_id) REFERENCES ssh_data (id) ON DELETE CASCADE,
|
||||||
@@ -564,12 +590,30 @@ async function initializeCompleteDatabase(): Promise<void> {
|
|||||||
`);
|
`);
|
||||||
|
|
||||||
try {
|
try {
|
||||||
sqlite.prepare("DELETE FROM user_open_tabs").run();
|
const timeoutRow = sqlite
|
||||||
databaseLogger.info("Open tabs cleared on startup", {
|
.prepare(
|
||||||
|
"SELECT value FROM settings WHERE key = 'terminal_session_timeout_minutes'",
|
||||||
|
)
|
||||||
|
.get() as { value: string } | undefined;
|
||||||
|
const timeoutMinutes = timeoutRow
|
||||||
|
? parseInt(timeoutRow.value, 10)
|
||||||
|
: 30;
|
||||||
|
const ttlMs =
|
||||||
|
!isNaN(timeoutMinutes) && timeoutMinutes > 0
|
||||||
|
? timeoutMinutes * 60_000
|
||||||
|
: 30 * 60_000;
|
||||||
|
const cutoff = new Date(Date.now() - ttlMs).toISOString();
|
||||||
|
const result = sqlite
|
||||||
|
.prepare("DELETE FROM user_open_tabs WHERE updated_at <= ?")
|
||||||
|
.run(cutoff);
|
||||||
|
if (result.changes > 0) {
|
||||||
|
databaseLogger.info("Expired open tabs cleared on startup", {
|
||||||
operation: "db_init_open_tabs_cleanup",
|
operation: "db_init_open_tabs_cleanup",
|
||||||
|
count: result.changes,
|
||||||
});
|
});
|
||||||
|
}
|
||||||
} catch (e) {
|
} catch (e) {
|
||||||
databaseLogger.warn("Could not clear open tabs on startup", {
|
databaseLogger.warn("Could not clear expired open tabs on startup", {
|
||||||
operation: "db_init_open_tabs_cleanup_failed",
|
operation: "db_init_open_tabs_cleanup_failed",
|
||||||
error: e,
|
error: e,
|
||||||
});
|
});
|
||||||
@@ -595,16 +639,7 @@ async function initializeCompleteDatabase(): Promise<void> {
|
|||||||
migrateSchema();
|
migrateSchema();
|
||||||
|
|
||||||
try {
|
try {
|
||||||
const row = sqlite
|
ensureRawSettingDefault("allow_registration", "true");
|
||||||
.prepare("SELECT value FROM settings WHERE key = 'allow_registration'")
|
|
||||||
.get();
|
|
||||||
if (!row) {
|
|
||||||
sqlite
|
|
||||||
.prepare(
|
|
||||||
"INSERT INTO settings (key, value) VALUES ('allow_registration', 'true')",
|
|
||||||
)
|
|
||||||
.run();
|
|
||||||
}
|
|
||||||
} catch (e) {
|
} catch (e) {
|
||||||
databaseLogger.warn("Could not initialize default settings", {
|
databaseLogger.warn("Could not initialize default settings", {
|
||||||
operation: "db_init",
|
operation: "db_init",
|
||||||
@@ -613,16 +648,7 @@ async function initializeCompleteDatabase(): Promise<void> {
|
|||||||
}
|
}
|
||||||
|
|
||||||
try {
|
try {
|
||||||
const row = sqlite
|
ensureRawSettingDefault("allow_password_login", "true");
|
||||||
.prepare("SELECT value FROM settings WHERE key = 'allow_password_login'")
|
|
||||||
.get();
|
|
||||||
if (!row) {
|
|
||||||
sqlite
|
|
||||||
.prepare(
|
|
||||||
"INSERT INTO settings (key, value) VALUES ('allow_password_login', 'true')",
|
|
||||||
)
|
|
||||||
.run();
|
|
||||||
}
|
|
||||||
} catch (e) {
|
} catch (e) {
|
||||||
databaseLogger.warn("Could not initialize allow_password_login setting", {
|
databaseLogger.warn("Could not initialize allow_password_login setting", {
|
||||||
operation: "db_init",
|
operation: "db_init",
|
||||||
@@ -631,16 +657,7 @@ async function initializeCompleteDatabase(): Promise<void> {
|
|||||||
}
|
}
|
||||||
|
|
||||||
try {
|
try {
|
||||||
const row = sqlite
|
ensureRawSettingDefault("guac_enabled", "true");
|
||||||
.prepare("SELECT value FROM settings WHERE key = 'guac_enabled'")
|
|
||||||
.get();
|
|
||||||
if (!row) {
|
|
||||||
sqlite
|
|
||||||
.prepare(
|
|
||||||
"INSERT INTO settings (key, value) VALUES ('guac_enabled', 'true')",
|
|
||||||
)
|
|
||||||
.run();
|
|
||||||
}
|
|
||||||
} catch (e) {
|
} catch (e) {
|
||||||
databaseLogger.warn("Could not initialize guac_enabled setting", {
|
databaseLogger.warn("Could not initialize guac_enabled setting", {
|
||||||
operation: "db_init",
|
operation: "db_init",
|
||||||
@@ -649,16 +666,7 @@ async function initializeCompleteDatabase(): Promise<void> {
|
|||||||
}
|
}
|
||||||
|
|
||||||
try {
|
try {
|
||||||
const row = sqlite
|
ensureRawSettingDefault("guac_url", getDefaultGuacdUrl());
|
||||||
.prepare("SELECT value FROM settings WHERE key = 'guac_url'")
|
|
||||||
.get();
|
|
||||||
if (!row) {
|
|
||||||
sqlite
|
|
||||||
.prepare(
|
|
||||||
"INSERT INTO settings (key, value) VALUES ('guac_url', ?)",
|
|
||||||
)
|
|
||||||
.run(getDefaultGuacdUrl());
|
|
||||||
}
|
|
||||||
} catch (e) {
|
} catch (e) {
|
||||||
databaseLogger.warn("Could not initialize guac_url setting", {
|
databaseLogger.warn("Could not initialize guac_url setting", {
|
||||||
operation: "db_init",
|
operation: "db_init",
|
||||||
@@ -695,6 +703,17 @@ const addColumnIfNotExists = (
|
|||||||
};
|
};
|
||||||
|
|
||||||
const migrateSchema = () => {
|
const migrateSchema = () => {
|
||||||
|
addColumnIfNotExists(
|
||||||
|
"session_recordings",
|
||||||
|
"protocol",
|
||||||
|
"TEXT NOT NULL DEFAULT 'ssh'",
|
||||||
|
);
|
||||||
|
addColumnIfNotExists(
|
||||||
|
"session_recordings",
|
||||||
|
"format",
|
||||||
|
"TEXT NOT NULL DEFAULT 'text'",
|
||||||
|
);
|
||||||
|
|
||||||
addColumnIfNotExists("user_preferences", "theme", "TEXT");
|
addColumnIfNotExists("user_preferences", "theme", "TEXT");
|
||||||
addColumnIfNotExists("user_preferences", "font_size", "TEXT");
|
addColumnIfNotExists("user_preferences", "font_size", "TEXT");
|
||||||
addColumnIfNotExists("user_preferences", "accent_color", "TEXT");
|
addColumnIfNotExists("user_preferences", "accent_color", "TEXT");
|
||||||
@@ -747,6 +766,62 @@ const migrateSchema = () => {
|
|||||||
addColumnIfNotExists("users", "totp_enabled", "INTEGER NOT NULL DEFAULT 0");
|
addColumnIfNotExists("users", "totp_enabled", "INTEGER NOT NULL DEFAULT 0");
|
||||||
addColumnIfNotExists("users", "totp_backup_codes", "TEXT");
|
addColumnIfNotExists("users", "totp_backup_codes", "TEXT");
|
||||||
|
|
||||||
|
const hadRegisteredAtColumn = (() => {
|
||||||
|
try {
|
||||||
|
sqlite.prepare(`SELECT "registered_at" FROM users LIMIT 1`).get();
|
||||||
|
return true;
|
||||||
|
} catch {
|
||||||
|
return false;
|
||||||
|
}
|
||||||
|
})();
|
||||||
|
// SQLite's ALTER TABLE ADD COLUMN rejects non-constant defaults like
|
||||||
|
// CURRENT_TIMESTAMP, so the column is added empty and backfilled below.
|
||||||
|
addColumnIfNotExists("users", "registered_at", "TEXT");
|
||||||
|
if (!hadRegisteredAtColumn) {
|
||||||
|
// Pre-existing users are backdated past the 30 day mark so they see the
|
||||||
|
// donation modal immediately on upgrade instead of waiting a fresh
|
||||||
|
// 30 days as if they had just registered.
|
||||||
|
try {
|
||||||
|
sqlite.exec(
|
||||||
|
`UPDATE users SET registered_at = datetime('now', '-31 days') WHERE registered_at IS NULL`,
|
||||||
|
);
|
||||||
|
} catch (backfillError) {
|
||||||
|
databaseLogger.warn("Failed to backfill users.registered_at", {
|
||||||
|
operation: "schema_migration",
|
||||||
|
error:
|
||||||
|
backfillError instanceof Error
|
||||||
|
? backfillError.message
|
||||||
|
: String(backfillError),
|
||||||
|
});
|
||||||
|
}
|
||||||
|
} else {
|
||||||
|
try {
|
||||||
|
sqlite.exec(
|
||||||
|
`UPDATE users SET registered_at = CURRENT_TIMESTAMP WHERE registered_at IS NULL`,
|
||||||
|
);
|
||||||
|
} catch (backfillError) {
|
||||||
|
databaseLogger.warn(
|
||||||
|
"Failed to backfill NULL users.registered_at values",
|
||||||
|
{
|
||||||
|
operation: "schema_migration",
|
||||||
|
error:
|
||||||
|
backfillError instanceof Error
|
||||||
|
? backfillError.message
|
||||||
|
: String(backfillError),
|
||||||
|
},
|
||||||
|
);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
addColumnIfNotExists(
|
||||||
|
"users",
|
||||||
|
"donation_modal_dismissed",
|
||||||
|
"INTEGER NOT NULL DEFAULT 0",
|
||||||
|
);
|
||||||
|
|
||||||
|
addColumnIfNotExists("sessions", "oidc_sub", "TEXT");
|
||||||
|
addColumnIfNotExists("sessions", "oidc_sid", "TEXT");
|
||||||
|
addColumnIfNotExists("sessions", "sso_provider_id", "INTEGER");
|
||||||
|
|
||||||
sqlite.exec(`
|
sqlite.exec(`
|
||||||
CREATE TABLE IF NOT EXISTS webauthn_credentials (
|
CREATE TABLE IF NOT EXISTS webauthn_credentials (
|
||||||
id TEXT PRIMARY KEY,
|
id TEXT PRIMARY KEY,
|
||||||
@@ -918,10 +993,6 @@ const migrateSchema = () => {
|
|||||||
|
|
||||||
addColumnIfNotExists("ssh_credentials", "cert_public_key", "TEXT");
|
addColumnIfNotExists("ssh_credentials", "cert_public_key", "TEXT");
|
||||||
|
|
||||||
addColumnIfNotExists("ssh_credentials", "system_password", "TEXT");
|
|
||||||
addColumnIfNotExists("ssh_credentials", "system_key", "TEXT");
|
|
||||||
addColumnIfNotExists("ssh_credentials", "system_key_password", "TEXT");
|
|
||||||
|
|
||||||
try {
|
try {
|
||||||
const tableInfo = sqlite.prepare("PRAGMA table_info(ssh_credentials)").all() as Array<{
|
const tableInfo = sqlite.prepare("PRAGMA table_info(ssh_credentials)").all() as Array<{
|
||||||
cid: number;
|
cid: number;
|
||||||
@@ -959,9 +1030,6 @@ const migrateSchema = () => {
|
|||||||
private_key TEXT,
|
private_key TEXT,
|
||||||
public_key TEXT,
|
public_key TEXT,
|
||||||
detected_key_type TEXT,
|
detected_key_type TEXT,
|
||||||
system_password TEXT,
|
|
||||||
system_key TEXT,
|
|
||||||
system_key_password TEXT,
|
|
||||||
FOREIGN KEY (user_id) REFERENCES users (id) ON DELETE CASCADE
|
FOREIGN KEY (user_id) REFERENCES users (id) ON DELETE CASCADE
|
||||||
);
|
);
|
||||||
|
|
||||||
@@ -1553,6 +1621,8 @@ const migrateSchema = () => {
|
|||||||
commands TEXT,
|
commands TEXT,
|
||||||
dangerous_actions TEXT,
|
dangerous_actions TEXT,
|
||||||
recording_path TEXT,
|
recording_path TEXT,
|
||||||
|
protocol TEXT NOT NULL DEFAULT 'ssh',
|
||||||
|
format TEXT NOT NULL DEFAULT 'text',
|
||||||
terminated_by_owner INTEGER DEFAULT 0,
|
terminated_by_owner INTEGER DEFAULT 0,
|
||||||
termination_reason TEXT,
|
termination_reason TEXT,
|
||||||
FOREIGN KEY (host_id) REFERENCES ssh_data (id) ON DELETE CASCADE,
|
FOREIGN KEY (host_id) REFERENCES ssh_data (id) ON DELETE CASCADE,
|
||||||
@@ -1569,37 +1639,54 @@ const migrateSchema = () => {
|
|||||||
}
|
}
|
||||||
|
|
||||||
try {
|
try {
|
||||||
sqlite.prepare("SELECT id FROM shared_credentials LIMIT 1").get();
|
sqlite.prepare("SELECT id FROM shared_host_secrets LIMIT 1").get();
|
||||||
} catch {
|
} catch {
|
||||||
try {
|
try {
|
||||||
sqlite.exec(`
|
sqlite.exec(`
|
||||||
CREATE TABLE IF NOT EXISTS shared_credentials (
|
CREATE TABLE IF NOT EXISTS shared_host_secrets (
|
||||||
id INTEGER PRIMARY KEY AUTOINCREMENT,
|
id INTEGER PRIMARY KEY AUTOINCREMENT,
|
||||||
host_access_id INTEGER NOT NULL,
|
host_access_id INTEGER NOT NULL,
|
||||||
original_credential_id INTEGER NOT NULL,
|
|
||||||
target_user_id TEXT NOT NULL,
|
target_user_id TEXT NOT NULL,
|
||||||
encrypted_username TEXT NOT NULL,
|
protocol TEXT NOT NULL DEFAULT 'ssh',
|
||||||
encrypted_auth_type TEXT NOT NULL,
|
source_type TEXT NOT NULL DEFAULT 'credential',
|
||||||
|
original_credential_id INTEGER,
|
||||||
|
encrypted_username TEXT,
|
||||||
|
encrypted_auth_type TEXT,
|
||||||
encrypted_password TEXT,
|
encrypted_password TEXT,
|
||||||
encrypted_key TEXT,
|
encrypted_key TEXT,
|
||||||
encrypted_key_password TEXT,
|
encrypted_key_password TEXT,
|
||||||
encrypted_key_type TEXT,
|
encrypted_key_type TEXT,
|
||||||
|
encrypted_domain TEXT,
|
||||||
created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
|
created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
|
||||||
updated_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
|
updated_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
|
||||||
needs_re_encryption INTEGER NOT NULL DEFAULT 0,
|
UNIQUE(host_access_id, target_user_id, protocol),
|
||||||
FOREIGN KEY (host_access_id) REFERENCES host_access (id) ON DELETE CASCADE,
|
FOREIGN KEY (host_access_id) REFERENCES host_access (id) ON DELETE CASCADE,
|
||||||
FOREIGN KEY (original_credential_id) REFERENCES ssh_credentials (id) ON DELETE CASCADE,
|
FOREIGN KEY (original_credential_id) REFERENCES ssh_credentials (id) ON DELETE CASCADE,
|
||||||
FOREIGN KEY (target_user_id) REFERENCES users (id) ON DELETE CASCADE
|
FOREIGN KEY (target_user_id) REFERENCES users (id) ON DELETE CASCADE
|
||||||
);
|
);
|
||||||
`);
|
`);
|
||||||
} catch (createError) {
|
} catch (createError) {
|
||||||
databaseLogger.warn("Failed to create shared_credentials table", {
|
databaseLogger.warn("Failed to create shared_host_secrets table", {
|
||||||
operation: "schema_migration",
|
operation: "schema_migration",
|
||||||
error: createError,
|
error: createError,
|
||||||
});
|
});
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
try {
|
||||||
|
if (getRawSettingValue("rbac_permission_levels_v2") === null) {
|
||||||
|
sqlite.exec(
|
||||||
|
"UPDATE host_access SET permission_level = 'connect' WHERE permission_level = 'view'",
|
||||||
|
);
|
||||||
|
setRawSettingValue("rbac_permission_levels_v2", "done");
|
||||||
|
}
|
||||||
|
} catch (migrateError) {
|
||||||
|
databaseLogger.warn("Failed to migrate legacy view permission level", {
|
||||||
|
operation: "schema_migration",
|
||||||
|
error: migrateError,
|
||||||
|
});
|
||||||
|
}
|
||||||
|
|
||||||
try {
|
try {
|
||||||
sqlite.prepare("SELECT id FROM opkssh_tokens LIMIT 1").get();
|
sqlite.prepare("SELECT id FROM opkssh_tokens LIMIT 1").get();
|
||||||
} catch {
|
} catch {
|
||||||
@@ -1900,31 +1987,30 @@ const migrateSchema = () => {
|
|||||||
|
|
||||||
// Migrate legacy single oidc_config settings blob into sso_providers table
|
// Migrate legacy single oidc_config settings blob into sso_providers table
|
||||||
try {
|
try {
|
||||||
const migrationDone = sqlite
|
const migrationDone = getRawSettingValue("sso_migration_v1");
|
||||||
.prepare("SELECT value FROM settings WHERE key = 'sso_migration_v1'")
|
|
||||||
.get();
|
|
||||||
if (!migrationDone) {
|
if (!migrationDone) {
|
||||||
const providerCount = (
|
const providerCount = (
|
||||||
sqlite.prepare("SELECT COUNT(*) as c FROM sso_providers").get() as { c: number }
|
sqlite.prepare("SELECT COUNT(*) as c FROM sso_providers").get() as {
|
||||||
|
c: number;
|
||||||
|
}
|
||||||
).c;
|
).c;
|
||||||
if (providerCount === 0) {
|
if (providerCount === 0) {
|
||||||
const legacyRow = sqlite
|
const legacyConfig = getRawSettingValue("oidc_config");
|
||||||
.prepare("SELECT value FROM settings WHERE key = 'oidc_config'")
|
if (legacyConfig) {
|
||||||
.get() as { value: string } | undefined;
|
|
||||||
if (legacyRow) {
|
|
||||||
sqlite
|
sqlite
|
||||||
.prepare(
|
.prepare(
|
||||||
"INSERT INTO sso_providers (name, type, enabled, display_order, config) VALUES (?, 'oidc', 1, 0, ?)",
|
"INSERT INTO sso_providers (name, type, enabled, display_order, config) VALUES (?, 'oidc', 1, 0, ?)",
|
||||||
)
|
)
|
||||||
.run("OIDC", legacyRow.value);
|
.run("OIDC", legacyConfig);
|
||||||
databaseLogger.info("Migrated legacy oidc_config into sso_providers table", {
|
databaseLogger.info(
|
||||||
|
"Migrated legacy oidc_config into sso_providers table",
|
||||||
|
{
|
||||||
operation: "sso_migration_v1",
|
operation: "sso_migration_v1",
|
||||||
});
|
},
|
||||||
|
);
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
sqlite
|
setRawSettingValue("sso_migration_v1", "true");
|
||||||
.prepare("INSERT OR REPLACE INTO settings (key, value) VALUES ('sso_migration_v1', 'true')")
|
|
||||||
.run();
|
|
||||||
}
|
}
|
||||||
} catch (e) {
|
} catch (e) {
|
||||||
databaseLogger.warn("Failed to run SSO migration v1", {
|
databaseLogger.warn("Failed to run SSO migration v1", {
|
||||||
@@ -2063,19 +2149,15 @@ const migrateSchema = () => {
|
|||||||
|
|
||||||
// Seed default metrics history retention setting
|
// Seed default metrics history retention setting
|
||||||
try {
|
try {
|
||||||
const retentionRow = sqlite
|
ensureRawSettingDefault("metrics_history_retention_days", "7");
|
||||||
.prepare("SELECT value FROM settings WHERE key = 'metrics_history_retention_days'")
|
|
||||||
.get();
|
|
||||||
if (!retentionRow) {
|
|
||||||
sqlite
|
|
||||||
.prepare("INSERT INTO settings (key, value) VALUES ('metrics_history_retention_days', '7')")
|
|
||||||
.run();
|
|
||||||
}
|
|
||||||
} catch (e) {
|
} catch (e) {
|
||||||
databaseLogger.warn("Could not initialize metrics_history_retention_days setting", {
|
databaseLogger.warn(
|
||||||
|
"Could not initialize metrics_history_retention_days setting",
|
||||||
|
{
|
||||||
operation: "schema_migration",
|
operation: "schema_migration",
|
||||||
error: e,
|
error: e,
|
||||||
});
|
},
|
||||||
|
);
|
||||||
}
|
}
|
||||||
|
|
||||||
// --- homepage begin ---
|
// --- homepage begin ---
|
||||||
@@ -2166,21 +2248,23 @@ async function saveMemoryDatabaseToFile(): Promise<void> {
|
|||||||
}
|
}
|
||||||
|
|
||||||
async function handlePostInitFileEncryption() {
|
async function handlePostInitFileEncryption() {
|
||||||
if (!enableFileEncryption) return;
|
|
||||||
|
|
||||||
try {
|
try {
|
||||||
if (memoryDatabase) {
|
if (memoryDatabase) {
|
||||||
|
DatabaseSaveTrigger.initialize(saveMemoryDatabaseToFile);
|
||||||
|
|
||||||
|
if (enableFileEncryption) {
|
||||||
await saveMemoryDatabaseToFile();
|
await saveMemoryDatabaseToFile();
|
||||||
|
}
|
||||||
|
|
||||||
setInterval(() => {
|
setInterval(() => {
|
||||||
if (DatabaseSaveTrigger.isDirty) {
|
if (DatabaseSaveTrigger.isDirty) {
|
||||||
saveMemoryDatabaseToFile();
|
saveMemoryDatabaseToFile();
|
||||||
}
|
}
|
||||||
}, 5 * 60 * 1000);
|
}, 5 * 60 * 1000);
|
||||||
|
|
||||||
DatabaseSaveTrigger.initialize(saveMemoryDatabaseToFile);
|
|
||||||
}
|
}
|
||||||
|
|
||||||
|
if (!enableFileEncryption) return;
|
||||||
|
|
||||||
try {
|
try {
|
||||||
const migration = new DatabaseMigration(dataDir);
|
const migration = new DatabaseMigration(dataDir);
|
||||||
migration.cleanupOldBackups();
|
migration.cleanupOldBackups();
|
||||||
|
|||||||
@@ -24,6 +24,13 @@ export const users = sqliteTable("users", {
|
|||||||
.notNull()
|
.notNull()
|
||||||
.default(false),
|
.default(false),
|
||||||
totpBackupCodes: text("totp_backup_codes"),
|
totpBackupCodes: text("totp_backup_codes"),
|
||||||
|
|
||||||
|
registeredAt: text("registered_at").notNull().default(sql`CURRENT_TIMESTAMP`),
|
||||||
|
donationModalDismissed: integer("donation_modal_dismissed", {
|
||||||
|
mode: "boolean",
|
||||||
|
})
|
||||||
|
.notNull()
|
||||||
|
.default(false),
|
||||||
});
|
});
|
||||||
|
|
||||||
export const settings = sqliteTable("settings", {
|
export const settings = sqliteTable("settings", {
|
||||||
@@ -54,6 +61,9 @@ export const sessions = sqliteTable("sessions", {
|
|||||||
jwtToken: text("jwt_token").notNull(),
|
jwtToken: text("jwt_token").notNull(),
|
||||||
deviceType: text("device_type").notNull(),
|
deviceType: text("device_type").notNull(),
|
||||||
deviceInfo: text("device_info").notNull(),
|
deviceInfo: text("device_info").notNull(),
|
||||||
|
oidcSub: text("oidc_sub"),
|
||||||
|
oidcSid: text("oidc_sid"),
|
||||||
|
ssoProviderId: integer("sso_provider_id"),
|
||||||
createdAt: text("created_at")
|
createdAt: text("created_at")
|
||||||
.notNull()
|
.notNull()
|
||||||
.default(sql`CURRENT_TIMESTAMP`),
|
.default(sql`CURRENT_TIMESTAMP`),
|
||||||
@@ -341,9 +351,6 @@ export const sshCredentials = sqliteTable("ssh_credentials", {
|
|||||||
|
|
||||||
certPublicKey: text("cert_public_key", { length: 8192 }),
|
certPublicKey: text("cert_public_key", { length: 8192 }),
|
||||||
|
|
||||||
systemPassword: text("system_password"),
|
|
||||||
systemKey: text("system_key", { length: 16384 }),
|
|
||||||
systemKeyPassword: text("system_key_password"),
|
|
||||||
|
|
||||||
usageCount: integer("usage_count").notNull().default(0),
|
usageCount: integer("usage_count").notNull().default(0),
|
||||||
lastUsed: text("last_used"),
|
lastUsed: text("last_used"),
|
||||||
@@ -523,7 +530,7 @@ export const hostAccess = sqliteTable("host_access", {
|
|||||||
|
|
||||||
permissionLevel: text("permission_level")
|
permissionLevel: text("permission_level")
|
||||||
.notNull()
|
.notNull()
|
||||||
.default("view"),
|
.default("connect"),
|
||||||
|
|
||||||
expiresAt: text("expires_at"),
|
expiresAt: text("expires_at"),
|
||||||
|
|
||||||
@@ -538,27 +545,32 @@ export const hostAccess = sqliteTable("host_access", {
|
|||||||
),
|
),
|
||||||
});
|
});
|
||||||
|
|
||||||
export const sharedCredentials = sqliteTable("shared_credentials", {
|
export const sharedHostSecrets = sqliteTable("shared_host_secrets", {
|
||||||
id: integer("id").primaryKey({ autoIncrement: true }),
|
id: integer("id").primaryKey({ autoIncrement: true }),
|
||||||
|
|
||||||
hostAccessId: integer("host_access_id")
|
hostAccessId: integer("host_access_id")
|
||||||
.notNull()
|
.notNull()
|
||||||
.references(() => hostAccess.id, { onDelete: "cascade" }),
|
.references(() => hostAccess.id, { onDelete: "cascade" }),
|
||||||
|
|
||||||
originalCredentialId: integer("original_credential_id")
|
|
||||||
.notNull()
|
|
||||||
.references(() => sshCredentials.id, { onDelete: "cascade" }),
|
|
||||||
|
|
||||||
targetUserId: text("target_user_id")
|
targetUserId: text("target_user_id")
|
||||||
.notNull()
|
.notNull()
|
||||||
.references(() => users.id, { onDelete: "cascade" }),
|
.references(() => users.id, { onDelete: "cascade" }),
|
||||||
|
|
||||||
encryptedUsername: text("encrypted_username").notNull(),
|
protocol: text("protocol").notNull().default("ssh"),
|
||||||
encryptedAuthType: text("encrypted_auth_type").notNull(),
|
sourceType: text("source_type").notNull().default("credential"),
|
||||||
|
|
||||||
|
originalCredentialId: integer("original_credential_id").references(
|
||||||
|
() => sshCredentials.id,
|
||||||
|
{ onDelete: "cascade" },
|
||||||
|
),
|
||||||
|
|
||||||
|
encryptedUsername: text("encrypted_username"),
|
||||||
|
encryptedAuthType: text("encrypted_auth_type"),
|
||||||
encryptedPassword: text("encrypted_password"),
|
encryptedPassword: text("encrypted_password"),
|
||||||
encryptedKey: text("encrypted_key", { length: 16384 }),
|
encryptedKey: text("encrypted_key", { length: 16384 }),
|
||||||
encryptedKeyPassword: text("encrypted_key_password"),
|
encryptedKeyPassword: text("encrypted_key_password"),
|
||||||
encryptedKeyType: text("encrypted_key_type"),
|
encryptedKeyType: text("encrypted_key_type"),
|
||||||
|
encryptedDomain: text("encrypted_domain"),
|
||||||
|
|
||||||
createdAt: text("created_at")
|
createdAt: text("created_at")
|
||||||
.notNull()
|
.notNull()
|
||||||
@@ -566,10 +578,6 @@ export const sharedCredentials = sqliteTable("shared_credentials", {
|
|||||||
updatedAt: text("updated_at")
|
updatedAt: text("updated_at")
|
||||||
.notNull()
|
.notNull()
|
||||||
.default(sql`CURRENT_TIMESTAMP`),
|
.default(sql`CURRENT_TIMESTAMP`),
|
||||||
|
|
||||||
needsReEncryption: integer("needs_re_encryption", { mode: "boolean" })
|
|
||||||
.notNull()
|
|
||||||
.default(false),
|
|
||||||
});
|
});
|
||||||
|
|
||||||
export const roles = sqliteTable("roles", {
|
export const roles = sqliteTable("roles", {
|
||||||
@@ -657,6 +665,8 @@ export const sessionRecordings = sqliteTable("session_recordings", {
|
|||||||
dangerousActions: text("dangerous_actions"),
|
dangerousActions: text("dangerous_actions"),
|
||||||
|
|
||||||
recordingPath: text("recording_path"),
|
recordingPath: text("recording_path"),
|
||||||
|
protocol: text("protocol").notNull().default("ssh"),
|
||||||
|
format: text("format").notNull().default("text"),
|
||||||
|
|
||||||
terminatedByOwner: integer("terminated_by_owner", { mode: "boolean" })
|
terminatedByOwner: integer("terminated_by_owner", { mode: "boolean" })
|
||||||
.default(false),
|
.default(false),
|
||||||
|
|||||||
@@ -0,0 +1,622 @@
|
|||||||
|
import { and, count, desc, eq, inArray, isNull, or } from "drizzle-orm";
|
||||||
|
import {
|
||||||
|
alertFirings,
|
||||||
|
alertRuleChannels,
|
||||||
|
alertRules,
|
||||||
|
hosts,
|
||||||
|
notificationChannels,
|
||||||
|
} from "../db/schema.js";
|
||||||
|
import type { DatabaseContext } from "./database-context.js";
|
||||||
|
|
||||||
|
type AlertRuleRecord = typeof alertRules.$inferSelect;
|
||||||
|
type NotificationChannelRecord = typeof notificationChannels.$inferSelect;
|
||||||
|
type AlertFiringRecord = typeof alertFirings.$inferSelect;
|
||||||
|
|
||||||
|
export interface NotificationChannelRow {
|
||||||
|
id: number;
|
||||||
|
user_id: string;
|
||||||
|
name: string;
|
||||||
|
type: string;
|
||||||
|
config: string;
|
||||||
|
enabled: number;
|
||||||
|
created_at: string;
|
||||||
|
}
|
||||||
|
|
||||||
|
export interface AlertRuleRow {
|
||||||
|
id: number;
|
||||||
|
user_id: string;
|
||||||
|
host_id: number | null;
|
||||||
|
name: string;
|
||||||
|
enabled: number;
|
||||||
|
trigger_type: string;
|
||||||
|
threshold_value: number | null;
|
||||||
|
threshold_duration_seconds: number | null;
|
||||||
|
cooldown_minutes: number;
|
||||||
|
created_at: string;
|
||||||
|
updated_at: string;
|
||||||
|
}
|
||||||
|
|
||||||
|
export interface AlertRuleWithChannelsRow extends AlertRuleRow {
|
||||||
|
channels: number[];
|
||||||
|
}
|
||||||
|
|
||||||
|
export interface AlertFiringRow {
|
||||||
|
id: number;
|
||||||
|
user_id: string;
|
||||||
|
rule_id: number;
|
||||||
|
host_id: number;
|
||||||
|
host_name: string;
|
||||||
|
fired_at: string;
|
||||||
|
resolved_at: string | null;
|
||||||
|
value: number | null;
|
||||||
|
message: string;
|
||||||
|
severity: string;
|
||||||
|
acknowledged: number;
|
||||||
|
rule_name: string | null;
|
||||||
|
}
|
||||||
|
|
||||||
|
export interface AlertEngineRule {
|
||||||
|
id: number;
|
||||||
|
userId: string;
|
||||||
|
hostId: number | null;
|
||||||
|
name: string;
|
||||||
|
enabled: boolean;
|
||||||
|
triggerType: string;
|
||||||
|
thresholdValue: number | null;
|
||||||
|
thresholdDurationSeconds: number | null;
|
||||||
|
cooldownMinutes: number;
|
||||||
|
}
|
||||||
|
|
||||||
|
export interface AlertEngineChannel {
|
||||||
|
id: number;
|
||||||
|
type: string;
|
||||||
|
config: string;
|
||||||
|
enabled: boolean;
|
||||||
|
}
|
||||||
|
|
||||||
|
export class AlertRepository {
|
||||||
|
constructor(
|
||||||
|
private readonly context: DatabaseContext,
|
||||||
|
private readonly onWrite?: () => void | Promise<void>,
|
||||||
|
) {}
|
||||||
|
|
||||||
|
async listNotificationChannels(
|
||||||
|
userId: string,
|
||||||
|
): Promise<NotificationChannelRow[]> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.select()
|
||||||
|
.from(notificationChannels)
|
||||||
|
.where(eq(notificationChannels.userId, userId))
|
||||||
|
.orderBy(notificationChannels.id);
|
||||||
|
|
||||||
|
return rows.map(mapChannelRow);
|
||||||
|
}
|
||||||
|
|
||||||
|
async findNotificationChannelForUser(
|
||||||
|
id: number,
|
||||||
|
userId: string,
|
||||||
|
): Promise<NotificationChannelRow | null> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.select()
|
||||||
|
.from(notificationChannels)
|
||||||
|
.where(
|
||||||
|
and(
|
||||||
|
eq(notificationChannels.id, id),
|
||||||
|
eq(notificationChannels.userId, userId),
|
||||||
|
),
|
||||||
|
)
|
||||||
|
.limit(1);
|
||||||
|
|
||||||
|
return rows[0] ? mapChannelRow(rows[0]) : null;
|
||||||
|
}
|
||||||
|
|
||||||
|
async createNotificationChannel(input: {
|
||||||
|
userId: string;
|
||||||
|
name: string;
|
||||||
|
type: string;
|
||||||
|
config: string;
|
||||||
|
enabled: boolean;
|
||||||
|
}): Promise<NotificationChannelRow> {
|
||||||
|
const [created] = await this.context.drizzle
|
||||||
|
.insert(notificationChannels)
|
||||||
|
.values({
|
||||||
|
userId: input.userId,
|
||||||
|
name: input.name,
|
||||||
|
type: input.type,
|
||||||
|
config: input.config,
|
||||||
|
enabled: input.enabled,
|
||||||
|
})
|
||||||
|
.returning();
|
||||||
|
|
||||||
|
await this.afterWrite();
|
||||||
|
return mapChannelRow(created);
|
||||||
|
}
|
||||||
|
|
||||||
|
async updateNotificationChannel(
|
||||||
|
id: number,
|
||||||
|
userId: string,
|
||||||
|
input: {
|
||||||
|
name?: string;
|
||||||
|
type?: string;
|
||||||
|
config?: string;
|
||||||
|
enabled?: boolean;
|
||||||
|
},
|
||||||
|
): Promise<NotificationChannelRow | null> {
|
||||||
|
if (Object.keys(input).length === 0) {
|
||||||
|
return this.findNotificationChannelForUser(id, userId);
|
||||||
|
}
|
||||||
|
|
||||||
|
const [updated] = await this.context.drizzle
|
||||||
|
.update(notificationChannels)
|
||||||
|
.set(input)
|
||||||
|
.where(
|
||||||
|
and(
|
||||||
|
eq(notificationChannels.id, id),
|
||||||
|
eq(notificationChannels.userId, userId),
|
||||||
|
),
|
||||||
|
)
|
||||||
|
.returning();
|
||||||
|
|
||||||
|
if (!updated) return null;
|
||||||
|
await this.afterWrite();
|
||||||
|
return mapChannelRow(updated);
|
||||||
|
}
|
||||||
|
|
||||||
|
async deleteNotificationChannel(
|
||||||
|
id: number,
|
||||||
|
userId: string,
|
||||||
|
): Promise<boolean> {
|
||||||
|
const deleted = await this.context.drizzle
|
||||||
|
.delete(notificationChannels)
|
||||||
|
.where(
|
||||||
|
and(
|
||||||
|
eq(notificationChannels.id, id),
|
||||||
|
eq(notificationChannels.userId, userId),
|
||||||
|
),
|
||||||
|
)
|
||||||
|
.returning({ id: notificationChannels.id });
|
||||||
|
|
||||||
|
if (deleted.length === 0) return false;
|
||||||
|
await this.afterWrite();
|
||||||
|
return true;
|
||||||
|
}
|
||||||
|
|
||||||
|
async listAlertRules(userId: string): Promise<AlertRuleWithChannelsRow[]> {
|
||||||
|
const rules = await this.context.drizzle
|
||||||
|
.select()
|
||||||
|
.from(alertRules)
|
||||||
|
.where(eq(alertRules.userId, userId))
|
||||||
|
.orderBy(alertRules.id);
|
||||||
|
|
||||||
|
const result: AlertRuleWithChannelsRow[] = [];
|
||||||
|
for (const rule of rules) {
|
||||||
|
result.push({
|
||||||
|
...mapRuleRow(rule),
|
||||||
|
channels: await this.listChannelIdsForRule(rule.id),
|
||||||
|
});
|
||||||
|
}
|
||||||
|
return result;
|
||||||
|
}
|
||||||
|
|
||||||
|
async createAlertRule(input: {
|
||||||
|
userId: string;
|
||||||
|
hostId: number | null;
|
||||||
|
name: string;
|
||||||
|
enabled: boolean;
|
||||||
|
triggerType: string;
|
||||||
|
thresholdValue: number | null;
|
||||||
|
thresholdDurationSeconds: number | null;
|
||||||
|
cooldownMinutes: number;
|
||||||
|
channels: number[];
|
||||||
|
now: string;
|
||||||
|
}): Promise<AlertRuleWithChannelsRow> {
|
||||||
|
const [created] = await this.context.drizzle
|
||||||
|
.insert(alertRules)
|
||||||
|
.values({
|
||||||
|
userId: input.userId,
|
||||||
|
hostId: input.hostId,
|
||||||
|
name: input.name,
|
||||||
|
enabled: input.enabled,
|
||||||
|
triggerType: input.triggerType,
|
||||||
|
thresholdValue: input.thresholdValue,
|
||||||
|
thresholdDurationSeconds: input.thresholdDurationSeconds,
|
||||||
|
cooldownMinutes: input.cooldownMinutes,
|
||||||
|
createdAt: input.now,
|
||||||
|
updatedAt: input.now,
|
||||||
|
})
|
||||||
|
.returning();
|
||||||
|
|
||||||
|
const channels = await this.replaceRuleChannels(
|
||||||
|
created.id,
|
||||||
|
input.userId,
|
||||||
|
input.channels,
|
||||||
|
);
|
||||||
|
await this.afterWrite();
|
||||||
|
return { ...mapRuleRow(created), channels };
|
||||||
|
}
|
||||||
|
|
||||||
|
async findAlertRuleForUser(
|
||||||
|
id: number,
|
||||||
|
userId: string,
|
||||||
|
): Promise<AlertRuleRow | null> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.select()
|
||||||
|
.from(alertRules)
|
||||||
|
.where(and(eq(alertRules.id, id), eq(alertRules.userId, userId)))
|
||||||
|
.limit(1);
|
||||||
|
|
||||||
|
return rows[0] ? mapRuleRow(rows[0]) : null;
|
||||||
|
}
|
||||||
|
|
||||||
|
async updateAlertRule(
|
||||||
|
id: number,
|
||||||
|
userId: string,
|
||||||
|
input: {
|
||||||
|
name?: string;
|
||||||
|
hostId?: number | null;
|
||||||
|
enabled?: boolean;
|
||||||
|
triggerType?: string;
|
||||||
|
thresholdValue?: number | null;
|
||||||
|
thresholdDurationSeconds?: number | null;
|
||||||
|
cooldownMinutes?: number;
|
||||||
|
channels?: number[];
|
||||||
|
now: string;
|
||||||
|
},
|
||||||
|
): Promise<AlertRuleWithChannelsRow | null> {
|
||||||
|
const [updated] = await this.context.drizzle
|
||||||
|
.update(alertRules)
|
||||||
|
.set({
|
||||||
|
...(input.name !== undefined ? { name: input.name } : {}),
|
||||||
|
...(input.hostId !== undefined ? { hostId: input.hostId } : {}),
|
||||||
|
...(input.enabled !== undefined ? { enabled: input.enabled } : {}),
|
||||||
|
...(input.triggerType !== undefined
|
||||||
|
? { triggerType: input.triggerType }
|
||||||
|
: {}),
|
||||||
|
...(input.thresholdValue !== undefined
|
||||||
|
? { thresholdValue: input.thresholdValue }
|
||||||
|
: {}),
|
||||||
|
...(input.thresholdDurationSeconds !== undefined
|
||||||
|
? { thresholdDurationSeconds: input.thresholdDurationSeconds }
|
||||||
|
: {}),
|
||||||
|
...(input.cooldownMinutes !== undefined
|
||||||
|
? { cooldownMinutes: input.cooldownMinutes }
|
||||||
|
: {}),
|
||||||
|
updatedAt: input.now,
|
||||||
|
})
|
||||||
|
.where(and(eq(alertRules.id, id), eq(alertRules.userId, userId)))
|
||||||
|
.returning();
|
||||||
|
|
||||||
|
if (!updated) return null;
|
||||||
|
|
||||||
|
const channels =
|
||||||
|
input.channels === undefined
|
||||||
|
? await this.listChannelIdsForRule(id)
|
||||||
|
: await this.replaceRuleChannels(id, userId, input.channels);
|
||||||
|
|
||||||
|
await this.afterWrite();
|
||||||
|
return { ...mapRuleRow(updated), channels };
|
||||||
|
}
|
||||||
|
|
||||||
|
async deleteAlertRule(id: number, userId: string): Promise<boolean> {
|
||||||
|
const deleted = await this.context.drizzle
|
||||||
|
.delete(alertRules)
|
||||||
|
.where(and(eq(alertRules.id, id), eq(alertRules.userId, userId)))
|
||||||
|
.returning({ id: alertRules.id });
|
||||||
|
|
||||||
|
if (deleted.length === 0) return false;
|
||||||
|
await this.afterWrite();
|
||||||
|
return true;
|
||||||
|
}
|
||||||
|
|
||||||
|
async listAlertFirings(input: {
|
||||||
|
userId: string;
|
||||||
|
acknowledged?: boolean;
|
||||||
|
limit: number;
|
||||||
|
offset: number;
|
||||||
|
}): Promise<{ firings: AlertFiringRow[]; total: number }> {
|
||||||
|
const filters = [eq(alertFirings.userId, input.userId)];
|
||||||
|
if (input.acknowledged !== undefined) {
|
||||||
|
filters.push(eq(alertFirings.acknowledged, input.acknowledged));
|
||||||
|
}
|
||||||
|
|
||||||
|
const where = and(...filters);
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.select({
|
||||||
|
firing: alertFirings,
|
||||||
|
ruleName: alertRules.name,
|
||||||
|
})
|
||||||
|
.from(alertFirings)
|
||||||
|
.leftJoin(alertRules, eq(alertRules.id, alertFirings.ruleId))
|
||||||
|
.where(where)
|
||||||
|
.orderBy(desc(alertFirings.firedAt))
|
||||||
|
.limit(input.limit)
|
||||||
|
.offset(input.offset);
|
||||||
|
|
||||||
|
const totalRows = await this.context.drizzle
|
||||||
|
.select({ total: count() })
|
||||||
|
.from(alertFirings)
|
||||||
|
.where(where);
|
||||||
|
|
||||||
|
return {
|
||||||
|
firings: rows.map((row) => mapFiringRow(row.firing, row.ruleName)),
|
||||||
|
total: totalRows[0]?.total ?? 0,
|
||||||
|
};
|
||||||
|
}
|
||||||
|
|
||||||
|
async acknowledgeFiring(id: number, userId: string): Promise<void> {
|
||||||
|
await this.context.drizzle
|
||||||
|
.update(alertFirings)
|
||||||
|
.set({ acknowledged: true })
|
||||||
|
.where(and(eq(alertFirings.id, id), eq(alertFirings.userId, userId)));
|
||||||
|
await this.afterWrite();
|
||||||
|
}
|
||||||
|
|
||||||
|
async acknowledgeAllFirings(userId: string): Promise<void> {
|
||||||
|
await this.context.drizzle
|
||||||
|
.update(alertFirings)
|
||||||
|
.set({ acknowledged: true })
|
||||||
|
.where(eq(alertFirings.userId, userId));
|
||||||
|
await this.afterWrite();
|
||||||
|
}
|
||||||
|
|
||||||
|
async listEnabledRulesForHost(hostId: number): Promise<AlertEngineRule[]> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.select()
|
||||||
|
.from(alertRules)
|
||||||
|
.where(
|
||||||
|
and(
|
||||||
|
eq(alertRules.enabled, true),
|
||||||
|
or(eq(alertRules.hostId, hostId), isNull(alertRules.hostId)),
|
||||||
|
),
|
||||||
|
);
|
||||||
|
return rows.map(mapEngineRule);
|
||||||
|
}
|
||||||
|
|
||||||
|
async listEnabledRulesForHostUser(
|
||||||
|
hostId: number,
|
||||||
|
userId: string,
|
||||||
|
): Promise<AlertEngineRule[]> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.select()
|
||||||
|
.from(alertRules)
|
||||||
|
.where(
|
||||||
|
and(
|
||||||
|
eq(alertRules.enabled, true),
|
||||||
|
eq(alertRules.userId, userId),
|
||||||
|
or(eq(alertRules.hostId, hostId), isNull(alertRules.hostId)),
|
||||||
|
),
|
||||||
|
);
|
||||||
|
return rows.map(mapEngineRule);
|
||||||
|
}
|
||||||
|
|
||||||
|
async findRuleById(id: number): Promise<AlertEngineRule | null> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.select()
|
||||||
|
.from(alertRules)
|
||||||
|
.where(eq(alertRules.id, id))
|
||||||
|
.limit(1);
|
||||||
|
return rows[0] ? mapEngineRule(rows[0]) : null;
|
||||||
|
}
|
||||||
|
|
||||||
|
async createFiring(input: {
|
||||||
|
userId: string;
|
||||||
|
ruleId: number;
|
||||||
|
hostId: number;
|
||||||
|
hostName: string;
|
||||||
|
value: number | null;
|
||||||
|
message: string;
|
||||||
|
severity: string;
|
||||||
|
}): Promise<void> {
|
||||||
|
await this.context.drizzle.insert(alertFirings).values(input);
|
||||||
|
await this.afterWrite();
|
||||||
|
}
|
||||||
|
|
||||||
|
pruneFiringsOlderThan(userId: string, days: number): void {
|
||||||
|
this.context.sqlite
|
||||||
|
?.prepare(
|
||||||
|
"DELETE FROM alert_firings WHERE user_id = ? AND fired_at < datetime('now', ?)",
|
||||||
|
)
|
||||||
|
.run(userId, `-${days} days`);
|
||||||
|
}
|
||||||
|
|
||||||
|
async deleteByUserId(userId: string): Promise<{
|
||||||
|
firingsDeleted: number;
|
||||||
|
ruleLinksDeleted: number;
|
||||||
|
rulesDeleted: number;
|
||||||
|
channelsDeleted: number;
|
||||||
|
}> {
|
||||||
|
const ruleIds = (
|
||||||
|
await this.context.drizzle
|
||||||
|
.select({ id: alertRules.id })
|
||||||
|
.from(alertRules)
|
||||||
|
.where(eq(alertRules.userId, userId))
|
||||||
|
).map((row) => row.id);
|
||||||
|
const channelIds = (
|
||||||
|
await this.context.drizzle
|
||||||
|
.select({ id: notificationChannels.id })
|
||||||
|
.from(notificationChannels)
|
||||||
|
.where(eq(notificationChannels.userId, userId))
|
||||||
|
).map((row) => row.id);
|
||||||
|
|
||||||
|
const firingRows = await this.context.drizzle
|
||||||
|
.delete(alertFirings)
|
||||||
|
.where(eq(alertFirings.userId, userId))
|
||||||
|
.returning({ id: alertFirings.id });
|
||||||
|
|
||||||
|
const linkFilters = [
|
||||||
|
...(ruleIds.length > 0
|
||||||
|
? [inArray(alertRuleChannels.ruleId, ruleIds)]
|
||||||
|
: []),
|
||||||
|
...(channelIds.length > 0
|
||||||
|
? [inArray(alertRuleChannels.channelId, channelIds)]
|
||||||
|
: []),
|
||||||
|
];
|
||||||
|
const linkRows =
|
||||||
|
linkFilters.length === 0
|
||||||
|
? []
|
||||||
|
: await this.context.drizzle
|
||||||
|
.delete(alertRuleChannels)
|
||||||
|
.where(or(...linkFilters))
|
||||||
|
.returning({ id: alertRuleChannels.id });
|
||||||
|
|
||||||
|
const ruleRows = await this.context.drizzle
|
||||||
|
.delete(alertRules)
|
||||||
|
.where(eq(alertRules.userId, userId))
|
||||||
|
.returning({ id: alertRules.id });
|
||||||
|
const channelRows = await this.context.drizzle
|
||||||
|
.delete(notificationChannels)
|
||||||
|
.where(eq(notificationChannels.userId, userId))
|
||||||
|
.returning({ id: notificationChannels.id });
|
||||||
|
|
||||||
|
if (
|
||||||
|
firingRows.length > 0 ||
|
||||||
|
linkRows.length > 0 ||
|
||||||
|
ruleRows.length > 0 ||
|
||||||
|
channelRows.length > 0
|
||||||
|
) {
|
||||||
|
await this.afterWrite();
|
||||||
|
}
|
||||||
|
|
||||||
|
return {
|
||||||
|
firingsDeleted: firingRows.length,
|
||||||
|
ruleLinksDeleted: linkRows.length,
|
||||||
|
rulesDeleted: ruleRows.length,
|
||||||
|
channelsDeleted: channelRows.length,
|
||||||
|
};
|
||||||
|
}
|
||||||
|
|
||||||
|
async listEnabledChannelsForRule(
|
||||||
|
ruleId: number,
|
||||||
|
): Promise<AlertEngineChannel[]> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.select({
|
||||||
|
id: notificationChannels.id,
|
||||||
|
type: notificationChannels.type,
|
||||||
|
config: notificationChannels.config,
|
||||||
|
enabled: notificationChannels.enabled,
|
||||||
|
})
|
||||||
|
.from(notificationChannels)
|
||||||
|
.innerJoin(
|
||||||
|
alertRuleChannels,
|
||||||
|
eq(alertRuleChannels.channelId, notificationChannels.id),
|
||||||
|
)
|
||||||
|
.where(
|
||||||
|
and(
|
||||||
|
eq(alertRuleChannels.ruleId, ruleId),
|
||||||
|
eq(notificationChannels.enabled, true),
|
||||||
|
),
|
||||||
|
);
|
||||||
|
|
||||||
|
return rows;
|
||||||
|
}
|
||||||
|
|
||||||
|
async getHostDisplayName(hostId: number): Promise<string | null> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.select({ name: hosts.name, ip: hosts.ip })
|
||||||
|
.from(hosts)
|
||||||
|
.where(eq(hosts.id, hostId))
|
||||||
|
.limit(1);
|
||||||
|
|
||||||
|
const row = rows[0];
|
||||||
|
return row ? row.name || row.ip : null;
|
||||||
|
}
|
||||||
|
|
||||||
|
private async replaceRuleChannels(
|
||||||
|
ruleId: number,
|
||||||
|
userId: string,
|
||||||
|
channelIds: number[],
|
||||||
|
): Promise<number[]> {
|
||||||
|
await this.context.drizzle
|
||||||
|
.delete(alertRuleChannels)
|
||||||
|
.where(eq(alertRuleChannels.ruleId, ruleId));
|
||||||
|
|
||||||
|
const linked: number[] = [];
|
||||||
|
for (const channelId of channelIds) {
|
||||||
|
const channel = await this.findNotificationChannelForUser(
|
||||||
|
channelId,
|
||||||
|
userId,
|
||||||
|
);
|
||||||
|
if (!channel) continue;
|
||||||
|
await this.context.drizzle
|
||||||
|
.insert(alertRuleChannels)
|
||||||
|
.values({ ruleId, channelId });
|
||||||
|
linked.push(channelId);
|
||||||
|
}
|
||||||
|
return linked;
|
||||||
|
}
|
||||||
|
|
||||||
|
private async listChannelIdsForRule(ruleId: number): Promise<number[]> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.select({ channelId: alertRuleChannels.channelId })
|
||||||
|
.from(alertRuleChannels)
|
||||||
|
.where(eq(alertRuleChannels.ruleId, ruleId));
|
||||||
|
|
||||||
|
return rows.map((row) => row.channelId);
|
||||||
|
}
|
||||||
|
|
||||||
|
private async afterWrite(): Promise<void> {
|
||||||
|
await this.onWrite?.();
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
function mapChannelRow(row: NotificationChannelRecord): NotificationChannelRow {
|
||||||
|
return {
|
||||||
|
id: row.id,
|
||||||
|
user_id: row.userId,
|
||||||
|
name: row.name,
|
||||||
|
type: row.type,
|
||||||
|
config: row.config,
|
||||||
|
enabled: row.enabled ? 1 : 0,
|
||||||
|
created_at: row.createdAt,
|
||||||
|
};
|
||||||
|
}
|
||||||
|
|
||||||
|
function mapRuleRow(row: AlertRuleRecord): AlertRuleRow {
|
||||||
|
return {
|
||||||
|
id: row.id,
|
||||||
|
user_id: row.userId,
|
||||||
|
host_id: row.hostId,
|
||||||
|
name: row.name,
|
||||||
|
enabled: row.enabled ? 1 : 0,
|
||||||
|
trigger_type: row.triggerType,
|
||||||
|
threshold_value: row.thresholdValue,
|
||||||
|
threshold_duration_seconds: row.thresholdDurationSeconds,
|
||||||
|
cooldown_minutes: row.cooldownMinutes,
|
||||||
|
created_at: row.createdAt,
|
||||||
|
updated_at: row.updatedAt,
|
||||||
|
};
|
||||||
|
}
|
||||||
|
|
||||||
|
function mapFiringRow(
|
||||||
|
row: AlertFiringRecord,
|
||||||
|
ruleName: string | null,
|
||||||
|
): AlertFiringRow {
|
||||||
|
return {
|
||||||
|
id: row.id,
|
||||||
|
user_id: row.userId,
|
||||||
|
rule_id: row.ruleId,
|
||||||
|
host_id: row.hostId,
|
||||||
|
host_name: row.hostName,
|
||||||
|
fired_at: row.firedAt,
|
||||||
|
resolved_at: row.resolvedAt,
|
||||||
|
value: row.value,
|
||||||
|
message: row.message,
|
||||||
|
severity: row.severity,
|
||||||
|
acknowledged: row.acknowledged ? 1 : 0,
|
||||||
|
rule_name: ruleName,
|
||||||
|
};
|
||||||
|
}
|
||||||
|
|
||||||
|
function mapEngineRule(row: AlertRuleRecord): AlertEngineRule {
|
||||||
|
return {
|
||||||
|
id: row.id,
|
||||||
|
userId: row.userId,
|
||||||
|
hostId: row.hostId,
|
||||||
|
name: row.name,
|
||||||
|
enabled: row.enabled,
|
||||||
|
triggerType: row.triggerType,
|
||||||
|
thresholdValue: row.thresholdValue,
|
||||||
|
thresholdDurationSeconds: row.thresholdDurationSeconds,
|
||||||
|
cooldownMinutes: row.cooldownMinutes,
|
||||||
|
};
|
||||||
|
}
|
||||||
@@ -0,0 +1,103 @@
|
|||||||
|
import { eq, and } from "drizzle-orm";
|
||||||
|
import { apiKeys, users } from "../db/schema.js";
|
||||||
|
import type { DatabaseContext } from "./database-context.js";
|
||||||
|
|
||||||
|
export type ApiKeyRecord = typeof apiKeys.$inferSelect;
|
||||||
|
export type NewApiKeyRecord = typeof apiKeys.$inferInsert;
|
||||||
|
|
||||||
|
export interface ApiKeyListRecord {
|
||||||
|
id: string;
|
||||||
|
name: string;
|
||||||
|
userId: string;
|
||||||
|
username: string | null;
|
||||||
|
tokenPrefix: string;
|
||||||
|
createdAt: string;
|
||||||
|
expiresAt: string | null;
|
||||||
|
lastUsedAt: string | null;
|
||||||
|
isActive: boolean;
|
||||||
|
}
|
||||||
|
|
||||||
|
export class ApiKeyRepository {
|
||||||
|
constructor(
|
||||||
|
private readonly context: DatabaseContext,
|
||||||
|
private readonly onWrite?: () => void | Promise<void>,
|
||||||
|
) {}
|
||||||
|
|
||||||
|
async create(apiKey: NewApiKeyRecord): Promise<ApiKeyRecord> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.insert(apiKeys)
|
||||||
|
.values(apiKey)
|
||||||
|
.returning();
|
||||||
|
await this.afterWrite();
|
||||||
|
return rows[0];
|
||||||
|
}
|
||||||
|
|
||||||
|
async listAllWithUsers(): Promise<ApiKeyListRecord[]> {
|
||||||
|
return this.context.drizzle
|
||||||
|
.select({
|
||||||
|
id: apiKeys.id,
|
||||||
|
name: apiKeys.name,
|
||||||
|
userId: apiKeys.userId,
|
||||||
|
username: users.username,
|
||||||
|
tokenPrefix: apiKeys.tokenPrefix,
|
||||||
|
createdAt: apiKeys.createdAt,
|
||||||
|
expiresAt: apiKeys.expiresAt,
|
||||||
|
lastUsedAt: apiKeys.lastUsedAt,
|
||||||
|
isActive: apiKeys.isActive,
|
||||||
|
})
|
||||||
|
.from(apiKeys)
|
||||||
|
.leftJoin(users, eq(apiKeys.userId, users.id))
|
||||||
|
.orderBy(apiKeys.createdAt);
|
||||||
|
}
|
||||||
|
|
||||||
|
async findById(id: string): Promise<ApiKeyRecord | null> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.select()
|
||||||
|
.from(apiKeys)
|
||||||
|
.where(eq(apiKeys.id, id))
|
||||||
|
.limit(1);
|
||||||
|
|
||||||
|
return rows[0] ?? null;
|
||||||
|
}
|
||||||
|
|
||||||
|
async listActiveByTokenPrefix(tokenPrefix: string): Promise<ApiKeyRecord[]> {
|
||||||
|
return this.context.drizzle
|
||||||
|
.select()
|
||||||
|
.from(apiKeys)
|
||||||
|
.where(
|
||||||
|
and(eq(apiKeys.tokenPrefix, tokenPrefix), eq(apiKeys.isActive, true)),
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
async updateLastUsedAt(id: string, lastUsedAt: string): Promise<void> {
|
||||||
|
await this.context.drizzle
|
||||||
|
.update(apiKeys)
|
||||||
|
.set({ lastUsedAt })
|
||||||
|
.where(eq(apiKeys.id, id));
|
||||||
|
await this.afterWrite();
|
||||||
|
}
|
||||||
|
|
||||||
|
async delete(id: string): Promise<ApiKeyRecord | null> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.delete(apiKeys)
|
||||||
|
.where(eq(apiKeys.id, id))
|
||||||
|
.returning();
|
||||||
|
|
||||||
|
await this.afterWrite();
|
||||||
|
return rows[0] ?? null;
|
||||||
|
}
|
||||||
|
|
||||||
|
async deleteByUserId(userId: string): Promise<number> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.delete(apiKeys)
|
||||||
|
.where(eq(apiKeys.userId, userId))
|
||||||
|
.returning({ id: apiKeys.id });
|
||||||
|
|
||||||
|
await this.afterWrite();
|
||||||
|
return rows.length;
|
||||||
|
}
|
||||||
|
|
||||||
|
private async afterWrite(): Promise<void> {
|
||||||
|
await this.onWrite?.();
|
||||||
|
}
|
||||||
|
}
|
||||||
@@ -0,0 +1,135 @@
|
|||||||
|
import { and, asc, desc, eq, gte, inArray, lte, sql } from "drizzle-orm";
|
||||||
|
import { auditLogs } from "../db/schema.js";
|
||||||
|
import type { DatabaseContext } from "./database-context.js";
|
||||||
|
|
||||||
|
export type AuditLogRecord = typeof auditLogs.$inferSelect;
|
||||||
|
export type NewAuditLogRecord = typeof auditLogs.$inferInsert;
|
||||||
|
|
||||||
|
export type AuditLogFilters = {
|
||||||
|
userId?: string;
|
||||||
|
action?: string;
|
||||||
|
resourceType?: string;
|
||||||
|
success?: boolean;
|
||||||
|
startDate?: string;
|
||||||
|
endDate?: string;
|
||||||
|
};
|
||||||
|
|
||||||
|
export type AuditLogPage = {
|
||||||
|
logs: AuditLogRecord[];
|
||||||
|
total: number;
|
||||||
|
};
|
||||||
|
|
||||||
|
const PRUNE_MAX = 10000;
|
||||||
|
const PRUNE_TARGET = 9000;
|
||||||
|
|
||||||
|
export class AuditLogRepository {
|
||||||
|
constructor(
|
||||||
|
private readonly context: DatabaseContext,
|
||||||
|
private readonly onWrite?: () => void | Promise<void>,
|
||||||
|
) {}
|
||||||
|
|
||||||
|
async create(entry: NewAuditLogRecord): Promise<void> {
|
||||||
|
await this.context.drizzle.insert(auditLogs).values(entry);
|
||||||
|
await this.pruneIfNeeded();
|
||||||
|
await this.afterWrite();
|
||||||
|
}
|
||||||
|
|
||||||
|
async listPage(input: {
|
||||||
|
filters: AuditLogFilters;
|
||||||
|
limit: number;
|
||||||
|
offset: number;
|
||||||
|
}): Promise<AuditLogPage> {
|
||||||
|
const whereClause = this.buildWhere(input.filters);
|
||||||
|
|
||||||
|
const [logs, totalResult] = await Promise.all([
|
||||||
|
this.context.drizzle
|
||||||
|
.select()
|
||||||
|
.from(auditLogs)
|
||||||
|
.where(whereClause)
|
||||||
|
.orderBy(desc(auditLogs.timestamp))
|
||||||
|
.limit(input.limit)
|
||||||
|
.offset(input.offset),
|
||||||
|
this.context.drizzle
|
||||||
|
.select({ count: sql<number>`COUNT(*)` })
|
||||||
|
.from(auditLogs)
|
||||||
|
.where(whereClause),
|
||||||
|
]);
|
||||||
|
|
||||||
|
return {
|
||||||
|
logs,
|
||||||
|
total: totalResult[0]?.count ?? 0,
|
||||||
|
};
|
||||||
|
}
|
||||||
|
|
||||||
|
async listDistinctActions(): Promise<string[]> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.selectDistinct({ action: auditLogs.action })
|
||||||
|
.from(auditLogs)
|
||||||
|
.orderBy(asc(auditLogs.action));
|
||||||
|
|
||||||
|
return rows.map((row) => row.action);
|
||||||
|
}
|
||||||
|
|
||||||
|
async deleteByUserId(userId: string): Promise<number> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.delete(auditLogs)
|
||||||
|
.where(eq(auditLogs.userId, userId))
|
||||||
|
.returning({ id: auditLogs.id });
|
||||||
|
|
||||||
|
if (rows.length > 0) {
|
||||||
|
await this.afterWrite();
|
||||||
|
}
|
||||||
|
|
||||||
|
return rows.length;
|
||||||
|
}
|
||||||
|
|
||||||
|
private buildWhere(filters: AuditLogFilters) {
|
||||||
|
const conditions = [];
|
||||||
|
|
||||||
|
if (filters.userId) conditions.push(eq(auditLogs.userId, filters.userId));
|
||||||
|
if (filters.action) conditions.push(eq(auditLogs.action, filters.action));
|
||||||
|
if (filters.resourceType) {
|
||||||
|
conditions.push(eq(auditLogs.resourceType, filters.resourceType));
|
||||||
|
}
|
||||||
|
if (filters.success !== undefined) {
|
||||||
|
conditions.push(eq(auditLogs.success, filters.success));
|
||||||
|
}
|
||||||
|
if (filters.startDate) {
|
||||||
|
conditions.push(gte(auditLogs.timestamp, filters.startDate));
|
||||||
|
}
|
||||||
|
if (filters.endDate) {
|
||||||
|
conditions.push(lte(auditLogs.timestamp, filters.endDate));
|
||||||
|
}
|
||||||
|
|
||||||
|
return conditions.length > 0 ? and(...conditions) : undefined;
|
||||||
|
}
|
||||||
|
|
||||||
|
private async pruneIfNeeded(): Promise<void> {
|
||||||
|
const countResult = await this.context.drizzle
|
||||||
|
.select({ count: sql<number>`COUNT(*)` })
|
||||||
|
.from(auditLogs);
|
||||||
|
const count = countResult[0]?.count ?? 0;
|
||||||
|
|
||||||
|
if (count < PRUNE_MAX) {
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
|
||||||
|
const deleteCount = count - PRUNE_TARGET;
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.select({ id: auditLogs.id })
|
||||||
|
.from(auditLogs)
|
||||||
|
.orderBy(asc(auditLogs.timestamp))
|
||||||
|
.limit(deleteCount);
|
||||||
|
const ids = rows.map((row) => row.id);
|
||||||
|
|
||||||
|
if (ids.length > 0) {
|
||||||
|
await this.context.drizzle
|
||||||
|
.delete(auditLogs)
|
||||||
|
.where(inArray(auditLogs.id, ids));
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
private async afterWrite(): Promise<void> {
|
||||||
|
await this.onWrite?.();
|
||||||
|
}
|
||||||
|
}
|
||||||
@@ -0,0 +1,136 @@
|
|||||||
|
import { and, asc, eq, sql } from "drizzle-orm";
|
||||||
|
import { c2sTunnelPresets } from "../db/schema.js";
|
||||||
|
import type { DatabaseContext } from "./database-context.js";
|
||||||
|
|
||||||
|
export type C2sTunnelPresetRecord = typeof c2sTunnelPresets.$inferSelect;
|
||||||
|
|
||||||
|
export interface C2sTunnelPresetCreateInput {
|
||||||
|
name: string;
|
||||||
|
config: string;
|
||||||
|
platform?: string | null;
|
||||||
|
computerName?: string | null;
|
||||||
|
}
|
||||||
|
|
||||||
|
export type C2sTunnelPresetUpdateInput = Partial<C2sTunnelPresetCreateInput>;
|
||||||
|
|
||||||
|
export class C2sTunnelPresetRepository {
|
||||||
|
constructor(
|
||||||
|
private readonly context: DatabaseContext,
|
||||||
|
private readonly onWrite?: () => void | Promise<void>,
|
||||||
|
) {}
|
||||||
|
|
||||||
|
async listByUserId(userId: string): Promise<C2sTunnelPresetRecord[]> {
|
||||||
|
return this.context.drizzle
|
||||||
|
.select()
|
||||||
|
.from(c2sTunnelPresets)
|
||||||
|
.where(eq(c2sTunnelPresets.userId, userId))
|
||||||
|
.orderBy(asc(c2sTunnelPresets.name));
|
||||||
|
}
|
||||||
|
|
||||||
|
async findByIdForUser(
|
||||||
|
userId: string,
|
||||||
|
id: number,
|
||||||
|
): Promise<C2sTunnelPresetRecord | null> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.select()
|
||||||
|
.from(c2sTunnelPresets)
|
||||||
|
.where(
|
||||||
|
and(eq(c2sTunnelPresets.id, id), eq(c2sTunnelPresets.userId, userId)),
|
||||||
|
)
|
||||||
|
.limit(1);
|
||||||
|
|
||||||
|
return rows[0] ?? null;
|
||||||
|
}
|
||||||
|
|
||||||
|
async hasNameForUser(
|
||||||
|
userId: string,
|
||||||
|
name: string,
|
||||||
|
excludingId?: number,
|
||||||
|
): Promise<boolean> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.select({ id: c2sTunnelPresets.id })
|
||||||
|
.from(c2sTunnelPresets)
|
||||||
|
.where(
|
||||||
|
and(
|
||||||
|
eq(c2sTunnelPresets.userId, userId),
|
||||||
|
eq(c2sTunnelPresets.name, name),
|
||||||
|
),
|
||||||
|
);
|
||||||
|
|
||||||
|
return rows.some((row) => row.id !== excludingId);
|
||||||
|
}
|
||||||
|
|
||||||
|
async createForUser(
|
||||||
|
userId: string,
|
||||||
|
input: C2sTunnelPresetCreateInput,
|
||||||
|
): Promise<C2sTunnelPresetRecord> {
|
||||||
|
const [created] = await this.context.drizzle
|
||||||
|
.insert(c2sTunnelPresets)
|
||||||
|
.values({
|
||||||
|
userId,
|
||||||
|
name: input.name,
|
||||||
|
config: input.config,
|
||||||
|
platform: input.platform ?? null,
|
||||||
|
computerName: input.computerName ?? null,
|
||||||
|
})
|
||||||
|
.returning();
|
||||||
|
|
||||||
|
await this.afterWrite();
|
||||||
|
return created;
|
||||||
|
}
|
||||||
|
|
||||||
|
async updateForUser(
|
||||||
|
userId: string,
|
||||||
|
id: number,
|
||||||
|
updates: C2sTunnelPresetUpdateInput,
|
||||||
|
): Promise<C2sTunnelPresetRecord | null> {
|
||||||
|
const [updated] = await this.context.drizzle
|
||||||
|
.update(c2sTunnelPresets)
|
||||||
|
.set({
|
||||||
|
...updates,
|
||||||
|
updatedAt: sql`CURRENT_TIMESTAMP`,
|
||||||
|
})
|
||||||
|
.where(
|
||||||
|
and(eq(c2sTunnelPresets.id, id), eq(c2sTunnelPresets.userId, userId)),
|
||||||
|
)
|
||||||
|
.returning();
|
||||||
|
|
||||||
|
if (updated) {
|
||||||
|
await this.afterWrite();
|
||||||
|
}
|
||||||
|
|
||||||
|
return updated ?? null;
|
||||||
|
}
|
||||||
|
|
||||||
|
async deleteForUser(userId: string, id: number): Promise<boolean> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.delete(c2sTunnelPresets)
|
||||||
|
.where(
|
||||||
|
and(eq(c2sTunnelPresets.id, id), eq(c2sTunnelPresets.userId, userId)),
|
||||||
|
)
|
||||||
|
.returning({ id: c2sTunnelPresets.id });
|
||||||
|
|
||||||
|
if (rows.length > 0) {
|
||||||
|
await this.afterWrite();
|
||||||
|
}
|
||||||
|
|
||||||
|
return rows.length > 0;
|
||||||
|
}
|
||||||
|
|
||||||
|
async deleteByUserId(userId: string): Promise<number> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.delete(c2sTunnelPresets)
|
||||||
|
.where(eq(c2sTunnelPresets.userId, userId))
|
||||||
|
.returning({ id: c2sTunnelPresets.id });
|
||||||
|
|
||||||
|
if (rows.length > 0) {
|
||||||
|
await this.afterWrite();
|
||||||
|
}
|
||||||
|
|
||||||
|
return rows.length;
|
||||||
|
}
|
||||||
|
|
||||||
|
private async afterWrite(): Promise<void> {
|
||||||
|
await this.onWrite?.();
|
||||||
|
}
|
||||||
|
}
|
||||||
@@ -0,0 +1,161 @@
|
|||||||
|
import { and, desc, eq, inArray, sql } from "drizzle-orm";
|
||||||
|
import { commandHistory } from "../db/schema.js";
|
||||||
|
import type { DatabaseContext } from "./database-context.js";
|
||||||
|
|
||||||
|
export type CommandHistoryRecord = typeof commandHistory.$inferSelect;
|
||||||
|
|
||||||
|
export class CommandHistoryRepository {
|
||||||
|
constructor(
|
||||||
|
private readonly context: DatabaseContext,
|
||||||
|
private readonly onWrite?: () => void | Promise<void>,
|
||||||
|
) {}
|
||||||
|
|
||||||
|
async create(
|
||||||
|
userId: string,
|
||||||
|
hostId: number,
|
||||||
|
command: string,
|
||||||
|
executedAt = new Date().toISOString(),
|
||||||
|
): Promise<CommandHistoryRecord> {
|
||||||
|
const [created] = await this.context.drizzle
|
||||||
|
.insert(commandHistory)
|
||||||
|
.values({ userId, hostId, command, executedAt })
|
||||||
|
.returning();
|
||||||
|
await this.afterWrite();
|
||||||
|
return created;
|
||||||
|
}
|
||||||
|
|
||||||
|
async listUniqueCommandsForHost(
|
||||||
|
userId: string,
|
||||||
|
hostId: number,
|
||||||
|
limit = 500,
|
||||||
|
): Promise<string[]> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.select({
|
||||||
|
command: commandHistory.command,
|
||||||
|
maxExecutedAt: sql<number>`MAX(${commandHistory.executedAt})`,
|
||||||
|
})
|
||||||
|
.from(commandHistory)
|
||||||
|
.where(
|
||||||
|
and(
|
||||||
|
eq(commandHistory.userId, userId),
|
||||||
|
eq(commandHistory.hostId, hostId),
|
||||||
|
),
|
||||||
|
)
|
||||||
|
.groupBy(commandHistory.command)
|
||||||
|
.orderBy(desc(sql`MAX(${commandHistory.executedAt})`))
|
||||||
|
.limit(limit);
|
||||||
|
|
||||||
|
return rows.map((row) => row.command);
|
||||||
|
}
|
||||||
|
|
||||||
|
async listCommandsForHost(
|
||||||
|
userId: string,
|
||||||
|
hostId: number,
|
||||||
|
limit = 200,
|
||||||
|
): Promise<string[]> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.select({
|
||||||
|
id: commandHistory.id,
|
||||||
|
command: commandHistory.command,
|
||||||
|
})
|
||||||
|
.from(commandHistory)
|
||||||
|
.where(
|
||||||
|
and(
|
||||||
|
eq(commandHistory.userId, userId),
|
||||||
|
eq(commandHistory.hostId, hostId),
|
||||||
|
),
|
||||||
|
)
|
||||||
|
.orderBy(desc(commandHistory.executedAt))
|
||||||
|
.limit(limit);
|
||||||
|
|
||||||
|
return rows.map((row) => row.command);
|
||||||
|
}
|
||||||
|
|
||||||
|
async deleteCommandForHost(
|
||||||
|
userId: string,
|
||||||
|
hostId: number,
|
||||||
|
command: string,
|
||||||
|
): Promise<number> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.delete(commandHistory)
|
||||||
|
.where(
|
||||||
|
and(
|
||||||
|
eq(commandHistory.userId, userId),
|
||||||
|
eq(commandHistory.hostId, hostId),
|
||||||
|
eq(commandHistory.command, command),
|
||||||
|
),
|
||||||
|
)
|
||||||
|
.returning({ id: commandHistory.id });
|
||||||
|
|
||||||
|
if (rows.length > 0) {
|
||||||
|
await this.afterWrite();
|
||||||
|
}
|
||||||
|
|
||||||
|
return rows.length;
|
||||||
|
}
|
||||||
|
|
||||||
|
async deleteByUserAndHost(userId: string, hostId: number): Promise<number> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.delete(commandHistory)
|
||||||
|
.where(
|
||||||
|
and(
|
||||||
|
eq(commandHistory.userId, userId),
|
||||||
|
eq(commandHistory.hostId, hostId),
|
||||||
|
),
|
||||||
|
)
|
||||||
|
.returning({ id: commandHistory.id });
|
||||||
|
|
||||||
|
if (rows.length > 0) {
|
||||||
|
await this.afterWrite();
|
||||||
|
}
|
||||||
|
|
||||||
|
return rows.length;
|
||||||
|
}
|
||||||
|
|
||||||
|
async deleteByHostId(hostId: number): Promise<number> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.delete(commandHistory)
|
||||||
|
.where(eq(commandHistory.hostId, hostId))
|
||||||
|
.returning({ id: commandHistory.id });
|
||||||
|
|
||||||
|
if (rows.length > 0) {
|
||||||
|
await this.afterWrite();
|
||||||
|
}
|
||||||
|
|
||||||
|
return rows.length;
|
||||||
|
}
|
||||||
|
|
||||||
|
async deleteByHostIds(hostIds: number[]): Promise<number> {
|
||||||
|
if (hostIds.length === 0) {
|
||||||
|
return 0;
|
||||||
|
}
|
||||||
|
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.delete(commandHistory)
|
||||||
|
.where(inArray(commandHistory.hostId, hostIds))
|
||||||
|
.returning({ id: commandHistory.id });
|
||||||
|
|
||||||
|
if (rows.length > 0) {
|
||||||
|
await this.afterWrite();
|
||||||
|
}
|
||||||
|
|
||||||
|
return rows.length;
|
||||||
|
}
|
||||||
|
|
||||||
|
async deleteByUserId(userId: string): Promise<number> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.delete(commandHistory)
|
||||||
|
.where(eq(commandHistory.userId, userId))
|
||||||
|
.returning({ id: commandHistory.id });
|
||||||
|
|
||||||
|
if (rows.length > 0) {
|
||||||
|
await this.afterWrite();
|
||||||
|
}
|
||||||
|
|
||||||
|
return rows.length;
|
||||||
|
}
|
||||||
|
|
||||||
|
private async afterWrite(): Promise<void> {
|
||||||
|
await this.onWrite?.();
|
||||||
|
}
|
||||||
|
}
|
||||||
@@ -0,0 +1,307 @@
|
|||||||
|
import { and, desc, eq, sql } from "drizzle-orm";
|
||||||
|
import { sshCredentials, sshCredentialUsage } from "../db/schema.js";
|
||||||
|
import type { DatabaseContext } from "./database-context.js";
|
||||||
|
import { DataCrypto } from "../../utils/data-crypto.js";
|
||||||
|
|
||||||
|
export type CredentialRecord = typeof sshCredentials.$inferSelect;
|
||||||
|
export type NewCredentialRecord = typeof sshCredentials.$inferInsert;
|
||||||
|
export type CredentialUpdate = Partial<
|
||||||
|
Omit<NewCredentialRecord, "id" | "userId">
|
||||||
|
>;
|
||||||
|
|
||||||
|
export class CredentialRepository {
|
||||||
|
constructor(
|
||||||
|
private readonly context: DatabaseContext,
|
||||||
|
private readonly onWrite?: () => void | Promise<void>,
|
||||||
|
) {}
|
||||||
|
|
||||||
|
async create(credential: NewCredentialRecord): Promise<CredentialRecord> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.insert(sshCredentials)
|
||||||
|
.values(credential)
|
||||||
|
.returning();
|
||||||
|
await this.afterWrite();
|
||||||
|
return rows[0];
|
||||||
|
}
|
||||||
|
|
||||||
|
async createEncryptedForUser(
|
||||||
|
userId: string,
|
||||||
|
credential: NewCredentialRecord | Record<string, unknown>,
|
||||||
|
): Promise<CredentialRecord> {
|
||||||
|
const userDataKey = DataCrypto.validateUserAccess(userId);
|
||||||
|
const tempId = credential.id ?? Date.now();
|
||||||
|
const dataWithTempId = { ...credential, id: tempId };
|
||||||
|
const encryptedCredential = this.encryptCredentialRecordForWrite(
|
||||||
|
dataWithTempId,
|
||||||
|
userId,
|
||||||
|
userDataKey,
|
||||||
|
);
|
||||||
|
|
||||||
|
if (!credential.id) {
|
||||||
|
delete (encryptedCredential as Partial<NewCredentialRecord>).id;
|
||||||
|
}
|
||||||
|
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.insert(sshCredentials)
|
||||||
|
.values(encryptedCredential as NewCredentialRecord)
|
||||||
|
.returning();
|
||||||
|
|
||||||
|
await this.afterWrite();
|
||||||
|
return DataCrypto.decryptRecord(
|
||||||
|
"ssh_credentials",
|
||||||
|
rows[0],
|
||||||
|
userId,
|
||||||
|
userDataKey,
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
async findByIdForUser(
|
||||||
|
userId: string,
|
||||||
|
credentialId: number,
|
||||||
|
): Promise<CredentialRecord | null> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.select()
|
||||||
|
.from(sshCredentials)
|
||||||
|
.where(
|
||||||
|
and(
|
||||||
|
eq(sshCredentials.id, credentialId),
|
||||||
|
eq(sshCredentials.userId, userId),
|
||||||
|
),
|
||||||
|
)
|
||||||
|
.limit(1);
|
||||||
|
|
||||||
|
return rows[0] ?? null;
|
||||||
|
}
|
||||||
|
|
||||||
|
async findById(credentialId: number): Promise<CredentialRecord | null> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.select()
|
||||||
|
.from(sshCredentials)
|
||||||
|
.where(eq(sshCredentials.id, credentialId))
|
||||||
|
.limit(1);
|
||||||
|
|
||||||
|
return rows[0] ?? null;
|
||||||
|
}
|
||||||
|
|
||||||
|
async listByUserId(userId: string): Promise<CredentialRecord[]> {
|
||||||
|
return this.context.drizzle
|
||||||
|
.select()
|
||||||
|
.from(sshCredentials)
|
||||||
|
.where(eq(sshCredentials.userId, userId))
|
||||||
|
.orderBy(desc(sshCredentials.updatedAt));
|
||||||
|
}
|
||||||
|
|
||||||
|
async existsForImportIdentity(
|
||||||
|
userId: string,
|
||||||
|
name: string,
|
||||||
|
username: string | null,
|
||||||
|
): Promise<boolean> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.select({ id: sshCredentials.id })
|
||||||
|
.from(sshCredentials)
|
||||||
|
.where(
|
||||||
|
and(
|
||||||
|
eq(sshCredentials.userId, userId),
|
||||||
|
eq(sshCredentials.name, name),
|
||||||
|
eq(sshCredentials.username, username),
|
||||||
|
),
|
||||||
|
)
|
||||||
|
.limit(1);
|
||||||
|
|
||||||
|
return rows.length > 0;
|
||||||
|
}
|
||||||
|
|
||||||
|
async findDecryptedByIdForUser(
|
||||||
|
userId: string,
|
||||||
|
credentialId: number,
|
||||||
|
): Promise<CredentialRecord | null> {
|
||||||
|
const row = await this.findByIdForUser(userId, credentialId);
|
||||||
|
return this.decryptOne(row, userId);
|
||||||
|
}
|
||||||
|
|
||||||
|
async listDecryptedByUserId(userId: string): Promise<CredentialRecord[]> {
|
||||||
|
const rows = await this.listByUserId(userId);
|
||||||
|
return this.decryptMany(rows, userId);
|
||||||
|
}
|
||||||
|
|
||||||
|
async listFolders(userId: string): Promise<string[]> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.select({ folder: sshCredentials.folder })
|
||||||
|
.from(sshCredentials)
|
||||||
|
.where(eq(sshCredentials.userId, userId));
|
||||||
|
|
||||||
|
return [...new Set(rows.map((row) => row.folder).filter(Boolean))].sort();
|
||||||
|
}
|
||||||
|
|
||||||
|
async renameFolder(
|
||||||
|
userId: string,
|
||||||
|
oldName: string,
|
||||||
|
newName: string,
|
||||||
|
): Promise<number> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.update(sshCredentials)
|
||||||
|
.set({ folder: newName })
|
||||||
|
.where(
|
||||||
|
and(
|
||||||
|
eq(sshCredentials.userId, userId),
|
||||||
|
eq(sshCredentials.folder, oldName),
|
||||||
|
),
|
||||||
|
)
|
||||||
|
.returning({ id: sshCredentials.id });
|
||||||
|
|
||||||
|
if (rows.length > 0) {
|
||||||
|
await this.afterWrite();
|
||||||
|
}
|
||||||
|
|
||||||
|
return rows.length;
|
||||||
|
}
|
||||||
|
|
||||||
|
async updateForUser(
|
||||||
|
userId: string,
|
||||||
|
credentialId: number,
|
||||||
|
update: CredentialUpdate,
|
||||||
|
): Promise<CredentialRecord | null> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.update(sshCredentials)
|
||||||
|
.set(update)
|
||||||
|
.where(
|
||||||
|
and(
|
||||||
|
eq(sshCredentials.id, credentialId),
|
||||||
|
eq(sshCredentials.userId, userId),
|
||||||
|
),
|
||||||
|
)
|
||||||
|
.returning();
|
||||||
|
|
||||||
|
await this.afterWrite();
|
||||||
|
return rows[0] ?? null;
|
||||||
|
}
|
||||||
|
|
||||||
|
async updateEncryptedForUser(
|
||||||
|
userId: string,
|
||||||
|
credentialId: number,
|
||||||
|
update: CredentialUpdate,
|
||||||
|
): Promise<CredentialRecord | null> {
|
||||||
|
const userDataKey = DataCrypto.validateUserAccess(userId);
|
||||||
|
const encryptedUpdate = this.encryptCredentialRecordForWrite(
|
||||||
|
update,
|
||||||
|
userId,
|
||||||
|
userDataKey,
|
||||||
|
);
|
||||||
|
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.update(sshCredentials)
|
||||||
|
.set(encryptedUpdate)
|
||||||
|
.where(
|
||||||
|
and(
|
||||||
|
eq(sshCredentials.id, credentialId),
|
||||||
|
eq(sshCredentials.userId, userId),
|
||||||
|
),
|
||||||
|
)
|
||||||
|
.returning();
|
||||||
|
|
||||||
|
await this.afterWrite();
|
||||||
|
return this.decryptOne(rows[0] ?? null, userId);
|
||||||
|
}
|
||||||
|
|
||||||
|
async deleteForUser(userId: string, credentialId: number): Promise<boolean> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.delete(sshCredentials)
|
||||||
|
.where(
|
||||||
|
and(
|
||||||
|
eq(sshCredentials.id, credentialId),
|
||||||
|
eq(sshCredentials.userId, userId),
|
||||||
|
),
|
||||||
|
)
|
||||||
|
.returning({ id: sshCredentials.id });
|
||||||
|
|
||||||
|
await this.afterWrite();
|
||||||
|
return rows.length > 0;
|
||||||
|
}
|
||||||
|
|
||||||
|
async deleteByUserId(userId: string): Promise<number> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.delete(sshCredentials)
|
||||||
|
.where(eq(sshCredentials.userId, userId))
|
||||||
|
.returning({ id: sshCredentials.id });
|
||||||
|
|
||||||
|
if (rows.length > 0) {
|
||||||
|
await this.afterWrite();
|
||||||
|
}
|
||||||
|
|
||||||
|
return rows.length;
|
||||||
|
}
|
||||||
|
|
||||||
|
async recordUsage(
|
||||||
|
userId: string,
|
||||||
|
credentialId: number,
|
||||||
|
hostId: number,
|
||||||
|
usedAt = new Date().toISOString(),
|
||||||
|
): Promise<void> {
|
||||||
|
await this.context.drizzle.insert(sshCredentialUsage).values({
|
||||||
|
credentialId,
|
||||||
|
hostId,
|
||||||
|
userId,
|
||||||
|
usedAt,
|
||||||
|
});
|
||||||
|
|
||||||
|
await this.context.drizzle
|
||||||
|
.update(sshCredentials)
|
||||||
|
.set({
|
||||||
|
lastUsed: usedAt,
|
||||||
|
usageCount: sql`${sshCredentials.usageCount} + 1`,
|
||||||
|
})
|
||||||
|
.where(
|
||||||
|
and(
|
||||||
|
eq(sshCredentials.id, credentialId),
|
||||||
|
eq(sshCredentials.userId, userId),
|
||||||
|
),
|
||||||
|
);
|
||||||
|
await this.afterWrite();
|
||||||
|
}
|
||||||
|
|
||||||
|
private decryptOne<T extends Record<string, unknown>>(
|
||||||
|
record: T | null,
|
||||||
|
userId: string,
|
||||||
|
): T | null {
|
||||||
|
if (!record) return null;
|
||||||
|
const userDataKey = DataCrypto.getUserDataKey(userId);
|
||||||
|
if (!userDataKey) return null;
|
||||||
|
return DataCrypto.decryptRecord(
|
||||||
|
"ssh_credentials",
|
||||||
|
record,
|
||||||
|
userId,
|
||||||
|
userDataKey,
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
private decryptMany<T extends Record<string, unknown>>(
|
||||||
|
records: T[],
|
||||||
|
userId: string,
|
||||||
|
): T[] {
|
||||||
|
const userDataKey = DataCrypto.getUserDataKey(userId);
|
||||||
|
if (!userDataKey) return [];
|
||||||
|
return DataCrypto.decryptRecords(
|
||||||
|
"ssh_credentials",
|
||||||
|
records,
|
||||||
|
userId,
|
||||||
|
userDataKey,
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
private encryptCredentialRecordForWrite<T extends Record<string, unknown>>(
|
||||||
|
record: T,
|
||||||
|
userId: string,
|
||||||
|
userDataKey: Buffer,
|
||||||
|
): T {
|
||||||
|
return DataCrypto.encryptRecord(
|
||||||
|
"ssh_credentials",
|
||||||
|
record,
|
||||||
|
userId,
|
||||||
|
userDataKey,
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
private async afterWrite(): Promise<void> {
|
||||||
|
await this.onWrite?.();
|
||||||
|
}
|
||||||
|
}
|
||||||
@@ -0,0 +1,129 @@
|
|||||||
|
import { and, asc, eq } from "drizzle-orm";
|
||||||
|
import { dashboardServiceLinks } from "../db/schema.js";
|
||||||
|
import type { DatabaseContext } from "./database-context.js";
|
||||||
|
|
||||||
|
export type DashboardServiceLinkRecord =
|
||||||
|
typeof dashboardServiceLinks.$inferSelect;
|
||||||
|
|
||||||
|
export type DashboardServiceLinkUpdate = Partial<{
|
||||||
|
label: string;
|
||||||
|
url: string;
|
||||||
|
}>;
|
||||||
|
|
||||||
|
export class DashboardServiceLinkRepository {
|
||||||
|
constructor(
|
||||||
|
private readonly context: DatabaseContext,
|
||||||
|
private readonly onWrite?: () => void | Promise<void>,
|
||||||
|
) {}
|
||||||
|
|
||||||
|
async listByUserId(userId: string): Promise<DashboardServiceLinkRecord[]> {
|
||||||
|
return this.context.drizzle
|
||||||
|
.select()
|
||||||
|
.from(dashboardServiceLinks)
|
||||||
|
.where(eq(dashboardServiceLinks.userId, userId))
|
||||||
|
.orderBy(asc(dashboardServiceLinks.order), asc(dashboardServiceLinks.id));
|
||||||
|
}
|
||||||
|
|
||||||
|
async createForUser(
|
||||||
|
userId: string,
|
||||||
|
input: { label: string; url: string },
|
||||||
|
createdAt = new Date().toISOString(),
|
||||||
|
): Promise<DashboardServiceLinkRecord> {
|
||||||
|
const existing = await this.context.drizzle
|
||||||
|
.select({ order: dashboardServiceLinks.order })
|
||||||
|
.from(dashboardServiceLinks)
|
||||||
|
.where(eq(dashboardServiceLinks.userId, userId))
|
||||||
|
.orderBy(asc(dashboardServiceLinks.order));
|
||||||
|
const nextOrder =
|
||||||
|
existing.length > 0 ? existing[existing.length - 1].order + 1 : 0;
|
||||||
|
|
||||||
|
const [created] = await this.context.drizzle
|
||||||
|
.insert(dashboardServiceLinks)
|
||||||
|
.values({
|
||||||
|
userId,
|
||||||
|
label: input.label,
|
||||||
|
url: input.url,
|
||||||
|
order: nextOrder,
|
||||||
|
createdAt,
|
||||||
|
})
|
||||||
|
.returning();
|
||||||
|
await this.afterWrite();
|
||||||
|
return created;
|
||||||
|
}
|
||||||
|
|
||||||
|
async findByIdForUser(
|
||||||
|
userId: string,
|
||||||
|
id: number,
|
||||||
|
): Promise<DashboardServiceLinkRecord | null> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.select()
|
||||||
|
.from(dashboardServiceLinks)
|
||||||
|
.where(
|
||||||
|
and(
|
||||||
|
eq(dashboardServiceLinks.id, id),
|
||||||
|
eq(dashboardServiceLinks.userId, userId),
|
||||||
|
),
|
||||||
|
)
|
||||||
|
.limit(1);
|
||||||
|
|
||||||
|
return rows[0] ?? null;
|
||||||
|
}
|
||||||
|
|
||||||
|
async updateForUser(
|
||||||
|
userId: string,
|
||||||
|
id: number,
|
||||||
|
updates: DashboardServiceLinkUpdate,
|
||||||
|
): Promise<DashboardServiceLinkRecord | null> {
|
||||||
|
const [updated] = await this.context.drizzle
|
||||||
|
.update(dashboardServiceLinks)
|
||||||
|
.set(updates)
|
||||||
|
.where(
|
||||||
|
and(
|
||||||
|
eq(dashboardServiceLinks.id, id),
|
||||||
|
eq(dashboardServiceLinks.userId, userId),
|
||||||
|
),
|
||||||
|
)
|
||||||
|
.returning();
|
||||||
|
|
||||||
|
if (updated) {
|
||||||
|
await this.afterWrite();
|
||||||
|
}
|
||||||
|
|
||||||
|
return updated ?? null;
|
||||||
|
}
|
||||||
|
|
||||||
|
async deleteForUser(userId: string, id: number): Promise<boolean> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.delete(dashboardServiceLinks)
|
||||||
|
.where(
|
||||||
|
and(
|
||||||
|
eq(dashboardServiceLinks.id, id),
|
||||||
|
eq(dashboardServiceLinks.userId, userId),
|
||||||
|
),
|
||||||
|
)
|
||||||
|
.returning({ id: dashboardServiceLinks.id });
|
||||||
|
|
||||||
|
if (rows.length > 0) {
|
||||||
|
await this.afterWrite();
|
||||||
|
}
|
||||||
|
|
||||||
|
return rows.length > 0;
|
||||||
|
}
|
||||||
|
|
||||||
|
async deleteByUserId(userId: string): Promise<number> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.delete(dashboardServiceLinks)
|
||||||
|
.where(eq(dashboardServiceLinks.userId, userId))
|
||||||
|
.returning({ id: dashboardServiceLinks.id });
|
||||||
|
|
||||||
|
if (rows.length > 0) {
|
||||||
|
await this.afterWrite();
|
||||||
|
}
|
||||||
|
|
||||||
|
return rows.length;
|
||||||
|
}
|
||||||
|
|
||||||
|
private async afterWrite(): Promise<void> {
|
||||||
|
await this.onWrite?.();
|
||||||
|
}
|
||||||
|
}
|
||||||
@@ -0,0 +1,9 @@
|
|||||||
|
import type { BetterSQLite3Database } from "drizzle-orm/better-sqlite3";
|
||||||
|
import type { Database as BetterSqliteDatabase } from "better-sqlite3";
|
||||||
|
import type * as schema from "../db/schema.js";
|
||||||
|
|
||||||
|
export interface DatabaseContext {
|
||||||
|
dialect: "sqlite";
|
||||||
|
drizzle: BetterSQLite3Database<typeof schema>;
|
||||||
|
sqlite?: BetterSqliteDatabase;
|
||||||
|
}
|
||||||
@@ -0,0 +1,108 @@
|
|||||||
|
import { and, eq } from "drizzle-orm";
|
||||||
|
import { dismissedAlerts } from "../db/schema.js";
|
||||||
|
import type { DatabaseContext } from "./database-context.js";
|
||||||
|
|
||||||
|
export type DismissedAlertRecord = typeof dismissedAlerts.$inferSelect;
|
||||||
|
|
||||||
|
export class DismissedAlertRepository {
|
||||||
|
constructor(
|
||||||
|
private readonly context: DatabaseContext,
|
||||||
|
private readonly onWrite?: () => void | Promise<void>,
|
||||||
|
) {}
|
||||||
|
|
||||||
|
async listByUserId(userId: string): Promise<DismissedAlertRecord[]> {
|
||||||
|
return this.context.drizzle
|
||||||
|
.select()
|
||||||
|
.from(dismissedAlerts)
|
||||||
|
.where(eq(dismissedAlerts.userId, userId));
|
||||||
|
}
|
||||||
|
|
||||||
|
async listAlertIdsByUserId(userId: string): Promise<string[]> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.select({ alertId: dismissedAlerts.alertId })
|
||||||
|
.from(dismissedAlerts)
|
||||||
|
.where(eq(dismissedAlerts.userId, userId));
|
||||||
|
|
||||||
|
return rows.map((row) => row.alertId);
|
||||||
|
}
|
||||||
|
|
||||||
|
async findForUser(
|
||||||
|
userId: string,
|
||||||
|
alertId: string,
|
||||||
|
): Promise<DismissedAlertRecord | null> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.select()
|
||||||
|
.from(dismissedAlerts)
|
||||||
|
.where(
|
||||||
|
and(
|
||||||
|
eq(dismissedAlerts.userId, userId),
|
||||||
|
eq(dismissedAlerts.alertId, alertId),
|
||||||
|
),
|
||||||
|
)
|
||||||
|
.limit(1);
|
||||||
|
|
||||||
|
return rows[0] ?? null;
|
||||||
|
}
|
||||||
|
|
||||||
|
async create(userId: string, alertId: string): Promise<void> {
|
||||||
|
await this.context.drizzle.insert(dismissedAlerts).values({
|
||||||
|
userId,
|
||||||
|
alertId,
|
||||||
|
});
|
||||||
|
await this.afterWrite();
|
||||||
|
}
|
||||||
|
|
||||||
|
async createForImport(
|
||||||
|
userId: string,
|
||||||
|
alertId: string,
|
||||||
|
dismissedAt = new Date().toISOString(),
|
||||||
|
): Promise<boolean> {
|
||||||
|
const existing = await this.findForUser(userId, alertId);
|
||||||
|
if (existing) {
|
||||||
|
return false;
|
||||||
|
}
|
||||||
|
|
||||||
|
await this.context.drizzle.insert(dismissedAlerts).values({
|
||||||
|
userId,
|
||||||
|
alertId,
|
||||||
|
dismissedAt,
|
||||||
|
});
|
||||||
|
await this.afterWrite();
|
||||||
|
return true;
|
||||||
|
}
|
||||||
|
|
||||||
|
async deleteForUser(userId: string, alertId: string): Promise<boolean> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.delete(dismissedAlerts)
|
||||||
|
.where(
|
||||||
|
and(
|
||||||
|
eq(dismissedAlerts.userId, userId),
|
||||||
|
eq(dismissedAlerts.alertId, alertId),
|
||||||
|
),
|
||||||
|
)
|
||||||
|
.returning({ id: dismissedAlerts.id });
|
||||||
|
|
||||||
|
if (rows.length > 0) {
|
||||||
|
await this.afterWrite();
|
||||||
|
}
|
||||||
|
|
||||||
|
return rows.length > 0;
|
||||||
|
}
|
||||||
|
|
||||||
|
async deleteByUserId(userId: string): Promise<number> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.delete(dismissedAlerts)
|
||||||
|
.where(eq(dismissedAlerts.userId, userId))
|
||||||
|
.returning({ id: dismissedAlerts.id });
|
||||||
|
|
||||||
|
if (rows.length > 0) {
|
||||||
|
await this.afterWrite();
|
||||||
|
}
|
||||||
|
|
||||||
|
return rows.length;
|
||||||
|
}
|
||||||
|
|
||||||
|
private async afterWrite(): Promise<void> {
|
||||||
|
await this.onWrite?.();
|
||||||
|
}
|
||||||
|
}
|
||||||
@@ -0,0 +1,356 @@
|
|||||||
|
import { DatabaseSaveTrigger } from "../../utils/database-save-trigger.js";
|
||||||
|
import { getDb, getSqlite } from "../db/index.js";
|
||||||
|
import type { DatabaseContext } from "./database-context.js";
|
||||||
|
import { WebauthnCredentialRepository } from "./webauthn-credential-repository.js";
|
||||||
|
import { AlertRepository } from "./alert-repository.js";
|
||||||
|
import { ApiKeyRepository } from "./api-key-repository.js";
|
||||||
|
import { AuditLogRepository } from "./audit-log-repository.js";
|
||||||
|
import { C2sTunnelPresetRepository } from "./c2s-tunnel-preset-repository.js";
|
||||||
|
import { CommandHistoryRepository } from "./command-history-repository.js";
|
||||||
|
import { CredentialRepository } from "./credential-repository.js";
|
||||||
|
import { DashboardServiceLinkRepository } from "./dashboard-service-link-repository.js";
|
||||||
|
import { DismissedAlertRepository } from "./dismissed-alert-repository.js";
|
||||||
|
import { FileManagerBookmarkRepository } from "./file-manager-bookmark-repository.js";
|
||||||
|
import { HomepageItemRepository } from "./homepage-item-repository.js";
|
||||||
|
import { HomepageLayoutRepository } from "./homepage-layout-repository.js";
|
||||||
|
import { HostFolderRepository } from "./host-folder-repository.js";
|
||||||
|
import { HostHealthRepository } from "./host-health-repository.js";
|
||||||
|
import { HostMetricsHistoryRepository } from "./host-metrics-history-repository.js";
|
||||||
|
import { HostMetricsPreferenceRepository } from "./host-metrics-preference-repository.js";
|
||||||
|
import { HostRepository } from "./host-repository.js";
|
||||||
|
import { HostResolutionRepository } from "./host-resolution-repository.js";
|
||||||
|
import { NetworkTopologyRepository } from "./network-topology-repository.js";
|
||||||
|
import { OpenTabRepository } from "./open-tab-repository.js";
|
||||||
|
import { OpksshTokenRepository } from "./opkssh-token-repository.js";
|
||||||
|
import { RbacAccessRepository } from "./rbac-access-repository.js";
|
||||||
|
import { RecentActivityRepository } from "./recent-activity-repository.js";
|
||||||
|
import { RoleRepository } from "./role-repository.js";
|
||||||
|
import { SessionRecordingRepository } from "./session-recording-repository.js";
|
||||||
|
import { SessionRepository } from "./session-repository.js";
|
||||||
|
import { SettingsRepository } from "./settings-repository.js";
|
||||||
|
import { SharedHostSecretsRepository } from "./shared-host-secrets-repository.js";
|
||||||
|
import { SnippetRepository } from "./snippet-repository.js";
|
||||||
|
import { SshCredentialUsageRepository } from "./ssh-credential-usage-repository.js";
|
||||||
|
import { SsoProviderRepository } from "./sso-provider-repository.js";
|
||||||
|
import { TermixIdentityCaRepository } from "./termix-identity-ca-repository.js";
|
||||||
|
import { TermixIdentityRepository } from "./termix-identity-repository.js";
|
||||||
|
import { TmuxSessionTagRepository } from "./tmux-session-tag-repository.js";
|
||||||
|
import { TransferRecentRepository } from "./transfer-recent-repository.js";
|
||||||
|
import { TrustedDeviceRepository } from "./trusted-device-repository.js";
|
||||||
|
import { UserDataExportRepository } from "./user-data-export-repository.js";
|
||||||
|
import { UserPreferenceRepository } from "./user-preference-repository.js";
|
||||||
|
import { UserRepository } from "./user-repository.js";
|
||||||
|
import { VaultProfileRepository } from "./vault-profile-repository.js";
|
||||||
|
import { VaultTokenRepository } from "./vault-token-repository.js";
|
||||||
|
|
||||||
|
export function createCurrentRepositoryContext(): DatabaseContext {
|
||||||
|
return {
|
||||||
|
dialect: "sqlite",
|
||||||
|
drizzle: getDb(),
|
||||||
|
sqlite: getSqlite(),
|
||||||
|
};
|
||||||
|
}
|
||||||
|
|
||||||
|
export function createCurrentRepositoryWriteHook(
|
||||||
|
reason: string,
|
||||||
|
): () => Promise<void> {
|
||||||
|
return () => DatabaseSaveTrigger.forceSave(reason);
|
||||||
|
}
|
||||||
|
|
||||||
|
export function getCurrentRepositorySqlite() {
|
||||||
|
return getSqlite();
|
||||||
|
}
|
||||||
|
|
||||||
|
export function getCurrentSettingValue(key: string): string | null {
|
||||||
|
const row = getCurrentRepositorySqlite()
|
||||||
|
.prepare("SELECT value FROM settings WHERE key = ?")
|
||||||
|
.get(key) as { value?: string } | undefined;
|
||||||
|
|
||||||
|
return row?.value ?? null;
|
||||||
|
}
|
||||||
|
|
||||||
|
export function createCurrentWebauthnCredentialRepository(): WebauthnCredentialRepository {
|
||||||
|
return new WebauthnCredentialRepository(
|
||||||
|
createCurrentRepositoryContext(),
|
||||||
|
createCurrentRepositoryWriteHook("webauthn_credential_repository_write"),
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
export function createCurrentAlertRepository(): AlertRepository {
|
||||||
|
return new AlertRepository(
|
||||||
|
createCurrentRepositoryContext(),
|
||||||
|
createCurrentRepositoryWriteHook("alert_repository_write"),
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
export function createCurrentApiKeyRepository(): ApiKeyRepository {
|
||||||
|
return new ApiKeyRepository(
|
||||||
|
createCurrentRepositoryContext(),
|
||||||
|
createCurrentRepositoryWriteHook("api_key_repository_write"),
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
export function createCurrentAuditLogRepository(): AuditLogRepository {
|
||||||
|
return new AuditLogRepository(
|
||||||
|
createCurrentRepositoryContext(),
|
||||||
|
createCurrentRepositoryWriteHook("audit_log_repository_write"),
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
export function createCurrentC2sTunnelPresetRepository(): C2sTunnelPresetRepository {
|
||||||
|
return new C2sTunnelPresetRepository(
|
||||||
|
createCurrentRepositoryContext(),
|
||||||
|
createCurrentRepositoryWriteHook("c2s_tunnel_preset_repository_write"),
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
export function createCurrentCommandHistoryRepository(): CommandHistoryRepository {
|
||||||
|
return new CommandHistoryRepository(
|
||||||
|
createCurrentRepositoryContext(),
|
||||||
|
createCurrentRepositoryWriteHook("command_history_repository_write"),
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
export function createCurrentCredentialRepository(): CredentialRepository {
|
||||||
|
return new CredentialRepository(
|
||||||
|
createCurrentRepositoryContext(),
|
||||||
|
createCurrentRepositoryWriteHook("credential_repository_write"),
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
export function createCurrentDashboardServiceLinkRepository(): DashboardServiceLinkRepository {
|
||||||
|
return new DashboardServiceLinkRepository(
|
||||||
|
createCurrentRepositoryContext(),
|
||||||
|
createCurrentRepositoryWriteHook("dashboard_service_link_repository_write"),
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
export function createCurrentDismissedAlertRepository(): DismissedAlertRepository {
|
||||||
|
return new DismissedAlertRepository(
|
||||||
|
createCurrentRepositoryContext(),
|
||||||
|
createCurrentRepositoryWriteHook("dismissed_alert_repository_write"),
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
export function createCurrentFileManagerBookmarkRepository(): FileManagerBookmarkRepository {
|
||||||
|
return new FileManagerBookmarkRepository(
|
||||||
|
createCurrentRepositoryContext(),
|
||||||
|
createCurrentRepositoryWriteHook("file_manager_bookmarks_repository_write"),
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
export function createCurrentHomepageItemRepository(): HomepageItemRepository {
|
||||||
|
return new HomepageItemRepository(
|
||||||
|
createCurrentRepositoryContext(),
|
||||||
|
createCurrentRepositoryWriteHook("homepage_item_repository_write"),
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
export function createCurrentHomepageLayoutRepository(): HomepageLayoutRepository {
|
||||||
|
return new HomepageLayoutRepository(
|
||||||
|
createCurrentRepositoryContext(),
|
||||||
|
createCurrentRepositoryWriteHook("homepage_layout_repository_write"),
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
export function createCurrentHostFolderRepository(): HostFolderRepository {
|
||||||
|
return new HostFolderRepository(
|
||||||
|
createCurrentRepositoryContext(),
|
||||||
|
createCurrentRepositoryWriteHook("host_folder_repository_write"),
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
export function createCurrentHostHealthRepository(): HostHealthRepository {
|
||||||
|
return new HostHealthRepository(
|
||||||
|
createCurrentRepositoryContext(),
|
||||||
|
createCurrentRepositoryWriteHook("host_health_repository_write"),
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
export function createCurrentHostMetricsHistoryRepository(): HostMetricsHistoryRepository {
|
||||||
|
return new HostMetricsHistoryRepository(
|
||||||
|
createCurrentRepositoryContext(),
|
||||||
|
createCurrentRepositoryWriteHook("host_metrics_history_repository_write"),
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
export function createCurrentHostMetricsPreferenceRepository(): HostMetricsPreferenceRepository {
|
||||||
|
return new HostMetricsPreferenceRepository(
|
||||||
|
createCurrentRepositoryContext(),
|
||||||
|
createCurrentRepositoryWriteHook(
|
||||||
|
"host_metrics_preference_repository_write",
|
||||||
|
),
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
export function createCurrentHostRepository(): HostRepository {
|
||||||
|
return new HostRepository(
|
||||||
|
createCurrentRepositoryContext(),
|
||||||
|
createCurrentRepositoryWriteHook("host_repository_write"),
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
export function createCurrentHostResolutionRepository(): HostResolutionRepository {
|
||||||
|
return new HostResolutionRepository(
|
||||||
|
createCurrentRepositoryContext(),
|
||||||
|
createCurrentRepositoryWriteHook("host_resolution_repository_write"),
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
export function createCurrentNetworkTopologyRepository(): NetworkTopologyRepository {
|
||||||
|
return new NetworkTopologyRepository(
|
||||||
|
createCurrentRepositoryContext(),
|
||||||
|
createCurrentRepositoryWriteHook("network_topology_repository_write"),
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
export function createCurrentOpenTabRepository(): OpenTabRepository {
|
||||||
|
return new OpenTabRepository(
|
||||||
|
createCurrentRepositoryContext(),
|
||||||
|
createCurrentRepositoryWriteHook("open_tab_repository_write"),
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
export function createCurrentOpksshTokenRepository(): OpksshTokenRepository {
|
||||||
|
return new OpksshTokenRepository(
|
||||||
|
createCurrentRepositoryContext(),
|
||||||
|
createCurrentRepositoryWriteHook("opkssh_token_repository_write"),
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
export function createCurrentRbacAccessRepository(): RbacAccessRepository {
|
||||||
|
return new RbacAccessRepository(
|
||||||
|
createCurrentRepositoryContext(),
|
||||||
|
createCurrentRepositoryWriteHook("rbac_access_repository_write"),
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
export function createCurrentRecentActivityRepository(): RecentActivityRepository {
|
||||||
|
return new RecentActivityRepository(
|
||||||
|
createCurrentRepositoryContext(),
|
||||||
|
createCurrentRepositoryWriteHook("recent_activity_repository_write"),
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
export function createCurrentRoleRepository(): RoleRepository {
|
||||||
|
return new RoleRepository(
|
||||||
|
createCurrentRepositoryContext(),
|
||||||
|
createCurrentRepositoryWriteHook("role_repository_write"),
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
export function createCurrentSessionRecordingRepository(): SessionRecordingRepository {
|
||||||
|
return new SessionRecordingRepository(
|
||||||
|
createCurrentRepositoryContext(),
|
||||||
|
createCurrentRepositoryWriteHook("session_recording_repository_write"),
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
export function createCurrentSessionRepository(): SessionRepository {
|
||||||
|
return new SessionRepository(
|
||||||
|
createCurrentRepositoryContext(),
|
||||||
|
createCurrentRepositoryWriteHook("session_repository_write"),
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
export function createCurrentSettingsRepository(): SettingsRepository {
|
||||||
|
return new SettingsRepository(
|
||||||
|
createCurrentRepositoryContext(),
|
||||||
|
createCurrentRepositoryWriteHook("settings_repository_write"),
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
export function createCurrentSharedHostSecretsRepository(): SharedHostSecretsRepository {
|
||||||
|
return new SharedHostSecretsRepository(
|
||||||
|
createCurrentRepositoryContext(),
|
||||||
|
createCurrentRepositoryWriteHook("shared_host_secrets_repository_write"),
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
export function createCurrentSnippetRepository(): SnippetRepository {
|
||||||
|
return new SnippetRepository(
|
||||||
|
createCurrentRepositoryContext(),
|
||||||
|
createCurrentRepositoryWriteHook("snippet_repository_write"),
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
export function createCurrentSshCredentialUsageRepository(): SshCredentialUsageRepository {
|
||||||
|
return new SshCredentialUsageRepository(
|
||||||
|
createCurrentRepositoryContext(),
|
||||||
|
createCurrentRepositoryWriteHook("ssh_credential_usage_repository_write"),
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
export function createCurrentSsoProviderRepository(): SsoProviderRepository {
|
||||||
|
return new SsoProviderRepository(
|
||||||
|
createCurrentRepositoryContext(),
|
||||||
|
createCurrentRepositoryWriteHook("sso_provider_repository_write"),
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
export function createCurrentTermixIdentityCaRepository(): TermixIdentityCaRepository {
|
||||||
|
return new TermixIdentityCaRepository(
|
||||||
|
createCurrentRepositoryContext(),
|
||||||
|
createCurrentRepositoryWriteHook("termix_identity_ca_repository_write"),
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
export function createCurrentTermixIdentityRepository(): TermixIdentityRepository {
|
||||||
|
return new TermixIdentityRepository(
|
||||||
|
createCurrentRepositoryContext(),
|
||||||
|
createCurrentRepositoryWriteHook("termix_identity_repository_write"),
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
export function createCurrentTmuxSessionTagRepository(): TmuxSessionTagRepository {
|
||||||
|
return new TmuxSessionTagRepository(
|
||||||
|
createCurrentRepositoryContext(),
|
||||||
|
createCurrentRepositoryWriteHook("tmux_session_tag_repository_write"),
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
export function createCurrentTransferRecentRepository(): TransferRecentRepository {
|
||||||
|
return new TransferRecentRepository(
|
||||||
|
createCurrentRepositoryContext(),
|
||||||
|
createCurrentRepositoryWriteHook("transfer_recent_repository_write"),
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
export function createCurrentTrustedDeviceRepository(): TrustedDeviceRepository {
|
||||||
|
return new TrustedDeviceRepository(
|
||||||
|
createCurrentRepositoryContext(),
|
||||||
|
createCurrentRepositoryWriteHook("trusted_device_repository_write"),
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
export function createCurrentUserDataExportRepository(): UserDataExportRepository {
|
||||||
|
return new UserDataExportRepository(createCurrentRepositoryContext());
|
||||||
|
}
|
||||||
|
|
||||||
|
export function createCurrentUserPreferenceRepository(): UserPreferenceRepository {
|
||||||
|
return new UserPreferenceRepository(
|
||||||
|
createCurrentRepositoryContext(),
|
||||||
|
createCurrentRepositoryWriteHook("user_preference_repository_write"),
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
export function createCurrentUserRepository(): UserRepository {
|
||||||
|
return new UserRepository(
|
||||||
|
createCurrentRepositoryContext(),
|
||||||
|
createCurrentRepositoryWriteHook("user_repository_write"),
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
export function createCurrentVaultProfileRepository(): VaultProfileRepository {
|
||||||
|
return new VaultProfileRepository(
|
||||||
|
createCurrentRepositoryContext(),
|
||||||
|
createCurrentRepositoryWriteHook("vault_profile_repository_write"),
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
export function createCurrentVaultTokenRepository(): VaultTokenRepository {
|
||||||
|
return new VaultTokenRepository(
|
||||||
|
createCurrentRepositoryContext(),
|
||||||
|
createCurrentRepositoryWriteHook("vault_token_repository_write"),
|
||||||
|
);
|
||||||
|
}
|
||||||
@@ -0,0 +1,158 @@
|
|||||||
|
import { FieldCrypto } from "../../utils/field-crypto.js";
|
||||||
|
import { LazyFieldEncryption } from "../../utils/lazy-field-encryption.js";
|
||||||
|
|
||||||
|
const FIELD_ENCRYPTION_POLICY = {
|
||||||
|
users: {
|
||||||
|
sensitive: new Set([
|
||||||
|
"passwordHash",
|
||||||
|
"clientSecret",
|
||||||
|
"totpSecret",
|
||||||
|
"totpBackupCodes",
|
||||||
|
"oidcIdentifier",
|
||||||
|
]),
|
||||||
|
plaintext: new Set(["id", "username", "isAdmin", "isOidc"]),
|
||||||
|
},
|
||||||
|
ssh_data: {
|
||||||
|
sensitive: new Set([
|
||||||
|
"password",
|
||||||
|
"key",
|
||||||
|
"keyPassword",
|
||||||
|
"sudoPassword",
|
||||||
|
"autostartPassword",
|
||||||
|
"autostartKey",
|
||||||
|
"autostartKeyPassword",
|
||||||
|
"socks5Password",
|
||||||
|
"rdpPassword",
|
||||||
|
"vncPassword",
|
||||||
|
"telnetPassword",
|
||||||
|
]),
|
||||||
|
plaintext: new Set([
|
||||||
|
"id",
|
||||||
|
"userId",
|
||||||
|
"connectionType",
|
||||||
|
"name",
|
||||||
|
"ip",
|
||||||
|
"port",
|
||||||
|
"username",
|
||||||
|
"folder",
|
||||||
|
"tags",
|
||||||
|
"authType",
|
||||||
|
"credentialId",
|
||||||
|
]),
|
||||||
|
},
|
||||||
|
ssh_credentials: {
|
||||||
|
sensitive: new Set([
|
||||||
|
"password",
|
||||||
|
"key",
|
||||||
|
"privateKey",
|
||||||
|
"publicKey",
|
||||||
|
"keyPassword",
|
||||||
|
]),
|
||||||
|
plaintext: new Set([
|
||||||
|
"id",
|
||||||
|
"userId",
|
||||||
|
"name",
|
||||||
|
"description",
|
||||||
|
"folder",
|
||||||
|
"tags",
|
||||||
|
"authType",
|
||||||
|
"username",
|
||||||
|
"keyType",
|
||||||
|
"detectedKeyType",
|
||||||
|
"usageCount",
|
||||||
|
"lastUsed",
|
||||||
|
]),
|
||||||
|
},
|
||||||
|
opkssh_tokens: {
|
||||||
|
sensitive: new Set(["sshCert", "privateKey"]),
|
||||||
|
plaintext: new Set(["id", "userId", "hostId", "createdAt", "expiresAt"]),
|
||||||
|
},
|
||||||
|
termix_identity_ca: {
|
||||||
|
sensitive: new Set(["privateKey"]),
|
||||||
|
plaintext: new Set(["id", "publicKey", "createdAt", "updatedAt"]),
|
||||||
|
},
|
||||||
|
vault_tokens: {
|
||||||
|
sensitive: new Set(["sshCert", "privateKey"]),
|
||||||
|
plaintext: new Set(["id", "userId", "profileId", "expiresAt"]),
|
||||||
|
},
|
||||||
|
} as const;
|
||||||
|
|
||||||
|
type PolicyTable = keyof typeof FIELD_ENCRYPTION_POLICY;
|
||||||
|
export type FieldClassification = "sensitive" | "plaintext" | "unknown";
|
||||||
|
|
||||||
|
export class FieldEncryptionBoundary {
|
||||||
|
static classifyField(
|
||||||
|
tableName: string,
|
||||||
|
fieldName: string,
|
||||||
|
): FieldClassification {
|
||||||
|
const policy = this.getPolicy(tableName);
|
||||||
|
if (!policy) return "unknown";
|
||||||
|
if (policy.sensitive.has(fieldName)) return "sensitive";
|
||||||
|
if (policy.plaintext.has(fieldName)) return "plaintext";
|
||||||
|
return "unknown";
|
||||||
|
}
|
||||||
|
|
||||||
|
static getSensitiveFields(tableName: string): string[] {
|
||||||
|
const policy = this.getPolicy(tableName);
|
||||||
|
return policy ? [...policy.sensitive].sort() : [];
|
||||||
|
}
|
||||||
|
|
||||||
|
static encryptRecord<T extends Record<string, unknown>>(
|
||||||
|
tableName: string,
|
||||||
|
record: T,
|
||||||
|
userDataKey: Buffer,
|
||||||
|
recordId = record.id,
|
||||||
|
): T {
|
||||||
|
const id = this.requireRecordId(recordId);
|
||||||
|
const encryptedRecord: Record<string, unknown> = { ...record };
|
||||||
|
|
||||||
|
for (const fieldName of this.getSensitiveFields(tableName)) {
|
||||||
|
const value = encryptedRecord[fieldName];
|
||||||
|
if (typeof value === "string" && value) {
|
||||||
|
encryptedRecord[fieldName] = FieldCrypto.encryptField(
|
||||||
|
value,
|
||||||
|
userDataKey,
|
||||||
|
id,
|
||||||
|
fieldName,
|
||||||
|
);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
return encryptedRecord as T;
|
||||||
|
}
|
||||||
|
|
||||||
|
static decryptRecord<T extends Record<string, unknown>>(
|
||||||
|
tableName: string,
|
||||||
|
record: T,
|
||||||
|
userDataKey: Buffer,
|
||||||
|
recordId = record.id,
|
||||||
|
): T {
|
||||||
|
const id = this.requireRecordId(recordId);
|
||||||
|
const decryptedRecord: Record<string, unknown> = { ...record };
|
||||||
|
|
||||||
|
for (const fieldName of this.getSensitiveFields(tableName)) {
|
||||||
|
const value = decryptedRecord[fieldName];
|
||||||
|
if (typeof value === "string" && value) {
|
||||||
|
decryptedRecord[fieldName] = LazyFieldEncryption.safeGetFieldValue(
|
||||||
|
value,
|
||||||
|
userDataKey,
|
||||||
|
id,
|
||||||
|
fieldName,
|
||||||
|
);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
return decryptedRecord as T;
|
||||||
|
}
|
||||||
|
|
||||||
|
private static getPolicy(tableName: string) {
|
||||||
|
return FIELD_ENCRYPTION_POLICY[tableName as PolicyTable];
|
||||||
|
}
|
||||||
|
|
||||||
|
private static requireRecordId(recordId: unknown): string {
|
||||||
|
if (recordId === null || recordId === undefined || recordId === "") {
|
||||||
|
throw new Error("Field encryption requires a stable record id.");
|
||||||
|
}
|
||||||
|
return String(recordId);
|
||||||
|
}
|
||||||
|
}
|
||||||
@@ -0,0 +1,533 @@
|
|||||||
|
import { and, desc, eq, inArray } from "drizzle-orm";
|
||||||
|
import {
|
||||||
|
fileManagerPinned,
|
||||||
|
fileManagerRecent,
|
||||||
|
fileManagerShortcuts,
|
||||||
|
} from "../db/schema.js";
|
||||||
|
import type { DatabaseContext } from "./database-context.js";
|
||||||
|
|
||||||
|
export type FileManagerRecentRecord = typeof fileManagerRecent.$inferSelect;
|
||||||
|
export type FileManagerPinnedRecord = typeof fileManagerPinned.$inferSelect;
|
||||||
|
export type FileManagerShortcutRecord =
|
||||||
|
typeof fileManagerShortcuts.$inferSelect;
|
||||||
|
|
||||||
|
export interface FileManagerBookmarkInput {
|
||||||
|
hostId: number;
|
||||||
|
path: string;
|
||||||
|
name?: string | null;
|
||||||
|
}
|
||||||
|
|
||||||
|
function resolveBookmarkName(path: string, name?: string | null): string {
|
||||||
|
return name || path.split("/").pop() || "Unknown";
|
||||||
|
}
|
||||||
|
|
||||||
|
export class FileManagerBookmarkRepository {
|
||||||
|
constructor(
|
||||||
|
private readonly context: DatabaseContext,
|
||||||
|
private readonly onWrite?: () => void | Promise<void>,
|
||||||
|
) {}
|
||||||
|
|
||||||
|
async listRecentForHost(
|
||||||
|
userId: string,
|
||||||
|
hostId: number,
|
||||||
|
limit = 20,
|
||||||
|
): Promise<FileManagerRecentRecord[]> {
|
||||||
|
return this.context.drizzle
|
||||||
|
.select()
|
||||||
|
.from(fileManagerRecent)
|
||||||
|
.where(
|
||||||
|
and(
|
||||||
|
eq(fileManagerRecent.userId, userId),
|
||||||
|
eq(fileManagerRecent.hostId, hostId),
|
||||||
|
),
|
||||||
|
)
|
||||||
|
.orderBy(desc(fileManagerRecent.lastOpened))
|
||||||
|
.limit(limit);
|
||||||
|
}
|
||||||
|
|
||||||
|
async listRecentByUserId(userId: string): Promise<FileManagerRecentRecord[]> {
|
||||||
|
return this.context.drizzle
|
||||||
|
.select()
|
||||||
|
.from(fileManagerRecent)
|
||||||
|
.where(eq(fileManagerRecent.userId, userId));
|
||||||
|
}
|
||||||
|
|
||||||
|
async upsertRecent(
|
||||||
|
userId: string,
|
||||||
|
input: FileManagerBookmarkInput,
|
||||||
|
lastOpened = new Date().toISOString(),
|
||||||
|
): Promise<void> {
|
||||||
|
const [existing] = await this.context.drizzle
|
||||||
|
.select({ id: fileManagerRecent.id })
|
||||||
|
.from(fileManagerRecent)
|
||||||
|
.where(
|
||||||
|
and(
|
||||||
|
eq(fileManagerRecent.userId, userId),
|
||||||
|
eq(fileManagerRecent.hostId, input.hostId),
|
||||||
|
eq(fileManagerRecent.path, input.path),
|
||||||
|
),
|
||||||
|
)
|
||||||
|
.limit(1);
|
||||||
|
|
||||||
|
if (existing) {
|
||||||
|
await this.context.drizzle
|
||||||
|
.update(fileManagerRecent)
|
||||||
|
.set({ lastOpened })
|
||||||
|
.where(eq(fileManagerRecent.id, existing.id));
|
||||||
|
} else {
|
||||||
|
await this.context.drizzle.insert(fileManagerRecent).values({
|
||||||
|
userId,
|
||||||
|
hostId: input.hostId,
|
||||||
|
path: input.path,
|
||||||
|
name: resolveBookmarkName(input.path, input.name),
|
||||||
|
lastOpened,
|
||||||
|
});
|
||||||
|
}
|
||||||
|
|
||||||
|
await this.afterWrite();
|
||||||
|
}
|
||||||
|
|
||||||
|
async createRecentForImport(
|
||||||
|
userId: string,
|
||||||
|
input: FileManagerBookmarkInput,
|
||||||
|
lastOpened = new Date().toISOString(),
|
||||||
|
): Promise<boolean> {
|
||||||
|
const exists = await this.existsRecentImportItem(userId, input);
|
||||||
|
if (exists) {
|
||||||
|
return false;
|
||||||
|
}
|
||||||
|
|
||||||
|
await this.context.drizzle.insert(fileManagerRecent).values({
|
||||||
|
userId,
|
||||||
|
hostId: input.hostId,
|
||||||
|
path: input.path,
|
||||||
|
name: resolveBookmarkName(input.path, input.name),
|
||||||
|
lastOpened,
|
||||||
|
});
|
||||||
|
await this.afterWrite();
|
||||||
|
return true;
|
||||||
|
}
|
||||||
|
|
||||||
|
async deleteRecentForHostPath(
|
||||||
|
userId: string,
|
||||||
|
input: Pick<FileManagerBookmarkInput, "hostId" | "path">,
|
||||||
|
): Promise<number> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.delete(fileManagerRecent)
|
||||||
|
.where(
|
||||||
|
and(
|
||||||
|
eq(fileManagerRecent.userId, userId),
|
||||||
|
eq(fileManagerRecent.hostId, input.hostId),
|
||||||
|
eq(fileManagerRecent.path, input.path),
|
||||||
|
),
|
||||||
|
)
|
||||||
|
.returning({ id: fileManagerRecent.id });
|
||||||
|
|
||||||
|
if (rows.length > 0) {
|
||||||
|
await this.afterWrite();
|
||||||
|
}
|
||||||
|
|
||||||
|
return rows.length;
|
||||||
|
}
|
||||||
|
|
||||||
|
async listPinnedForHost(
|
||||||
|
userId: string,
|
||||||
|
hostId: number,
|
||||||
|
): Promise<FileManagerPinnedRecord[]> {
|
||||||
|
return this.context.drizzle
|
||||||
|
.select()
|
||||||
|
.from(fileManagerPinned)
|
||||||
|
.where(
|
||||||
|
and(
|
||||||
|
eq(fileManagerPinned.userId, userId),
|
||||||
|
eq(fileManagerPinned.hostId, hostId),
|
||||||
|
),
|
||||||
|
)
|
||||||
|
.orderBy(desc(fileManagerPinned.pinnedAt));
|
||||||
|
}
|
||||||
|
|
||||||
|
async listPinnedByUserId(userId: string): Promise<FileManagerPinnedRecord[]> {
|
||||||
|
return this.context.drizzle
|
||||||
|
.select()
|
||||||
|
.from(fileManagerPinned)
|
||||||
|
.where(eq(fileManagerPinned.userId, userId));
|
||||||
|
}
|
||||||
|
|
||||||
|
async createPinned(
|
||||||
|
userId: string,
|
||||||
|
input: FileManagerBookmarkInput,
|
||||||
|
pinnedAt = new Date().toISOString(),
|
||||||
|
): Promise<boolean> {
|
||||||
|
const exists = await this.existsPinned(userId, input.hostId, input.path);
|
||||||
|
if (exists) {
|
||||||
|
return false;
|
||||||
|
}
|
||||||
|
|
||||||
|
await this.context.drizzle.insert(fileManagerPinned).values({
|
||||||
|
userId,
|
||||||
|
hostId: input.hostId,
|
||||||
|
path: input.path,
|
||||||
|
name: resolveBookmarkName(input.path, input.name),
|
||||||
|
pinnedAt,
|
||||||
|
});
|
||||||
|
await this.afterWrite();
|
||||||
|
return true;
|
||||||
|
}
|
||||||
|
|
||||||
|
async createPinnedForImport(
|
||||||
|
userId: string,
|
||||||
|
input: FileManagerBookmarkInput,
|
||||||
|
pinnedAt = new Date().toISOString(),
|
||||||
|
): Promise<boolean> {
|
||||||
|
const exists = await this.existsPinnedImportItem(userId, input);
|
||||||
|
if (exists) {
|
||||||
|
return false;
|
||||||
|
}
|
||||||
|
|
||||||
|
await this.context.drizzle.insert(fileManagerPinned).values({
|
||||||
|
userId,
|
||||||
|
hostId: input.hostId,
|
||||||
|
path: input.path,
|
||||||
|
name: resolveBookmarkName(input.path, input.name),
|
||||||
|
pinnedAt,
|
||||||
|
});
|
||||||
|
await this.afterWrite();
|
||||||
|
return true;
|
||||||
|
}
|
||||||
|
|
||||||
|
async deletePinnedForHostPath(
|
||||||
|
userId: string,
|
||||||
|
input: Pick<FileManagerBookmarkInput, "hostId" | "path">,
|
||||||
|
): Promise<number> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.delete(fileManagerPinned)
|
||||||
|
.where(
|
||||||
|
and(
|
||||||
|
eq(fileManagerPinned.userId, userId),
|
||||||
|
eq(fileManagerPinned.hostId, input.hostId),
|
||||||
|
eq(fileManagerPinned.path, input.path),
|
||||||
|
),
|
||||||
|
)
|
||||||
|
.returning({ id: fileManagerPinned.id });
|
||||||
|
|
||||||
|
if (rows.length > 0) {
|
||||||
|
await this.afterWrite();
|
||||||
|
}
|
||||||
|
|
||||||
|
return rows.length;
|
||||||
|
}
|
||||||
|
|
||||||
|
async listShortcutsForHost(
|
||||||
|
userId: string,
|
||||||
|
hostId: number,
|
||||||
|
): Promise<FileManagerShortcutRecord[]> {
|
||||||
|
return this.context.drizzle
|
||||||
|
.select()
|
||||||
|
.from(fileManagerShortcuts)
|
||||||
|
.where(
|
||||||
|
and(
|
||||||
|
eq(fileManagerShortcuts.userId, userId),
|
||||||
|
eq(fileManagerShortcuts.hostId, hostId),
|
||||||
|
),
|
||||||
|
)
|
||||||
|
.orderBy(desc(fileManagerShortcuts.createdAt));
|
||||||
|
}
|
||||||
|
|
||||||
|
async listShortcutsByUserId(
|
||||||
|
userId: string,
|
||||||
|
): Promise<FileManagerShortcutRecord[]> {
|
||||||
|
return this.context.drizzle
|
||||||
|
.select()
|
||||||
|
.from(fileManagerShortcuts)
|
||||||
|
.where(eq(fileManagerShortcuts.userId, userId));
|
||||||
|
}
|
||||||
|
|
||||||
|
async createShortcut(
|
||||||
|
userId: string,
|
||||||
|
input: FileManagerBookmarkInput,
|
||||||
|
createdAt = new Date().toISOString(),
|
||||||
|
): Promise<boolean> {
|
||||||
|
const exists = await this.existsShortcut(userId, input.hostId, input.path);
|
||||||
|
if (exists) {
|
||||||
|
return false;
|
||||||
|
}
|
||||||
|
|
||||||
|
await this.context.drizzle.insert(fileManagerShortcuts).values({
|
||||||
|
userId,
|
||||||
|
hostId: input.hostId,
|
||||||
|
path: input.path,
|
||||||
|
name: resolveBookmarkName(input.path, input.name),
|
||||||
|
createdAt,
|
||||||
|
});
|
||||||
|
await this.afterWrite();
|
||||||
|
return true;
|
||||||
|
}
|
||||||
|
|
||||||
|
async createShortcutForImport(
|
||||||
|
userId: string,
|
||||||
|
input: FileManagerBookmarkInput,
|
||||||
|
createdAt = new Date().toISOString(),
|
||||||
|
): Promise<boolean> {
|
||||||
|
const exists = await this.existsShortcutImportItem(userId, input);
|
||||||
|
if (exists) {
|
||||||
|
return false;
|
||||||
|
}
|
||||||
|
|
||||||
|
await this.context.drizzle.insert(fileManagerShortcuts).values({
|
||||||
|
userId,
|
||||||
|
hostId: input.hostId,
|
||||||
|
path: input.path,
|
||||||
|
name: resolveBookmarkName(input.path, input.name),
|
||||||
|
createdAt,
|
||||||
|
});
|
||||||
|
await this.afterWrite();
|
||||||
|
return true;
|
||||||
|
}
|
||||||
|
|
||||||
|
async deleteShortcutForHostPath(
|
||||||
|
userId: string,
|
||||||
|
input: Pick<FileManagerBookmarkInput, "hostId" | "path">,
|
||||||
|
): Promise<number> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.delete(fileManagerShortcuts)
|
||||||
|
.where(
|
||||||
|
and(
|
||||||
|
eq(fileManagerShortcuts.userId, userId),
|
||||||
|
eq(fileManagerShortcuts.hostId, input.hostId),
|
||||||
|
eq(fileManagerShortcuts.path, input.path),
|
||||||
|
),
|
||||||
|
)
|
||||||
|
.returning({ id: fileManagerShortcuts.id });
|
||||||
|
|
||||||
|
if (rows.length > 0) {
|
||||||
|
await this.afterWrite();
|
||||||
|
}
|
||||||
|
|
||||||
|
return rows.length;
|
||||||
|
}
|
||||||
|
|
||||||
|
async deleteByUserId(userId: string): Promise<number> {
|
||||||
|
const total =
|
||||||
|
(await this.deleteRecentByUserId(userId)) +
|
||||||
|
(await this.deletePinnedByUserId(userId)) +
|
||||||
|
(await this.deleteShortcutsByUserId(userId));
|
||||||
|
|
||||||
|
if (total > 0) {
|
||||||
|
await this.afterWrite();
|
||||||
|
}
|
||||||
|
|
||||||
|
return total;
|
||||||
|
}
|
||||||
|
|
||||||
|
async deleteByHostId(hostId: number): Promise<number> {
|
||||||
|
const total =
|
||||||
|
(await this.deleteRecentByHostId(hostId)) +
|
||||||
|
(await this.deletePinnedByHostId(hostId)) +
|
||||||
|
(await this.deleteShortcutsByHostId(hostId));
|
||||||
|
|
||||||
|
if (total > 0) {
|
||||||
|
await this.afterWrite();
|
||||||
|
}
|
||||||
|
|
||||||
|
return total;
|
||||||
|
}
|
||||||
|
|
||||||
|
async deleteByHostIds(hostIds: number[]): Promise<number> {
|
||||||
|
if (hostIds.length === 0) {
|
||||||
|
return 0;
|
||||||
|
}
|
||||||
|
|
||||||
|
const total =
|
||||||
|
(await this.deleteRecentByHostIds(hostIds)) +
|
||||||
|
(await this.deletePinnedByHostIds(hostIds)) +
|
||||||
|
(await this.deleteShortcutsByHostIds(hostIds));
|
||||||
|
|
||||||
|
if (total > 0) {
|
||||||
|
await this.afterWrite();
|
||||||
|
}
|
||||||
|
|
||||||
|
return total;
|
||||||
|
}
|
||||||
|
|
||||||
|
private async existsPinned(
|
||||||
|
userId: string,
|
||||||
|
hostId: number,
|
||||||
|
path: string,
|
||||||
|
): Promise<boolean> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.select({ id: fileManagerPinned.id })
|
||||||
|
.from(fileManagerPinned)
|
||||||
|
.where(
|
||||||
|
and(
|
||||||
|
eq(fileManagerPinned.userId, userId),
|
||||||
|
eq(fileManagerPinned.hostId, hostId),
|
||||||
|
eq(fileManagerPinned.path, path),
|
||||||
|
),
|
||||||
|
)
|
||||||
|
.limit(1);
|
||||||
|
|
||||||
|
return rows.length > 0;
|
||||||
|
}
|
||||||
|
|
||||||
|
private async existsRecentImportItem(
|
||||||
|
userId: string,
|
||||||
|
input: FileManagerBookmarkInput,
|
||||||
|
): Promise<boolean> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.select({ id: fileManagerRecent.id })
|
||||||
|
.from(fileManagerRecent)
|
||||||
|
.where(
|
||||||
|
and(
|
||||||
|
eq(fileManagerRecent.userId, userId),
|
||||||
|
eq(fileManagerRecent.path, input.path),
|
||||||
|
eq(
|
||||||
|
fileManagerRecent.name,
|
||||||
|
resolveBookmarkName(input.path, input.name),
|
||||||
|
),
|
||||||
|
),
|
||||||
|
)
|
||||||
|
.limit(1);
|
||||||
|
|
||||||
|
return rows.length > 0;
|
||||||
|
}
|
||||||
|
|
||||||
|
private async existsPinnedImportItem(
|
||||||
|
userId: string,
|
||||||
|
input: FileManagerBookmarkInput,
|
||||||
|
): Promise<boolean> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.select({ id: fileManagerPinned.id })
|
||||||
|
.from(fileManagerPinned)
|
||||||
|
.where(
|
||||||
|
and(
|
||||||
|
eq(fileManagerPinned.userId, userId),
|
||||||
|
eq(fileManagerPinned.path, input.path),
|
||||||
|
eq(
|
||||||
|
fileManagerPinned.name,
|
||||||
|
resolveBookmarkName(input.path, input.name),
|
||||||
|
),
|
||||||
|
),
|
||||||
|
)
|
||||||
|
.limit(1);
|
||||||
|
|
||||||
|
return rows.length > 0;
|
||||||
|
}
|
||||||
|
|
||||||
|
private async existsShortcutImportItem(
|
||||||
|
userId: string,
|
||||||
|
input: FileManagerBookmarkInput,
|
||||||
|
): Promise<boolean> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.select({ id: fileManagerShortcuts.id })
|
||||||
|
.from(fileManagerShortcuts)
|
||||||
|
.where(
|
||||||
|
and(
|
||||||
|
eq(fileManagerShortcuts.userId, userId),
|
||||||
|
eq(fileManagerShortcuts.path, input.path),
|
||||||
|
eq(
|
||||||
|
fileManagerShortcuts.name,
|
||||||
|
resolveBookmarkName(input.path, input.name),
|
||||||
|
),
|
||||||
|
),
|
||||||
|
)
|
||||||
|
.limit(1);
|
||||||
|
|
||||||
|
return rows.length > 0;
|
||||||
|
}
|
||||||
|
|
||||||
|
private async existsShortcut(
|
||||||
|
userId: string,
|
||||||
|
hostId: number,
|
||||||
|
path: string,
|
||||||
|
): Promise<boolean> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.select({ id: fileManagerShortcuts.id })
|
||||||
|
.from(fileManagerShortcuts)
|
||||||
|
.where(
|
||||||
|
and(
|
||||||
|
eq(fileManagerShortcuts.userId, userId),
|
||||||
|
eq(fileManagerShortcuts.hostId, hostId),
|
||||||
|
eq(fileManagerShortcuts.path, path),
|
||||||
|
),
|
||||||
|
)
|
||||||
|
.limit(1);
|
||||||
|
|
||||||
|
return rows.length > 0;
|
||||||
|
}
|
||||||
|
|
||||||
|
private async deleteRecentByUserId(userId: string): Promise<number> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.delete(fileManagerRecent)
|
||||||
|
.where(eq(fileManagerRecent.userId, userId))
|
||||||
|
.returning({ id: fileManagerRecent.id });
|
||||||
|
return rows.length;
|
||||||
|
}
|
||||||
|
|
||||||
|
private async deletePinnedByUserId(userId: string): Promise<number> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.delete(fileManagerPinned)
|
||||||
|
.where(eq(fileManagerPinned.userId, userId))
|
||||||
|
.returning({ id: fileManagerPinned.id });
|
||||||
|
return rows.length;
|
||||||
|
}
|
||||||
|
|
||||||
|
private async deleteShortcutsByUserId(userId: string): Promise<number> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.delete(fileManagerShortcuts)
|
||||||
|
.where(eq(fileManagerShortcuts.userId, userId))
|
||||||
|
.returning({ id: fileManagerShortcuts.id });
|
||||||
|
return rows.length;
|
||||||
|
}
|
||||||
|
|
||||||
|
private async deleteRecentByHostId(hostId: number): Promise<number> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.delete(fileManagerRecent)
|
||||||
|
.where(eq(fileManagerRecent.hostId, hostId))
|
||||||
|
.returning({ id: fileManagerRecent.id });
|
||||||
|
return rows.length;
|
||||||
|
}
|
||||||
|
|
||||||
|
private async deletePinnedByHostId(hostId: number): Promise<number> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.delete(fileManagerPinned)
|
||||||
|
.where(eq(fileManagerPinned.hostId, hostId))
|
||||||
|
.returning({ id: fileManagerPinned.id });
|
||||||
|
return rows.length;
|
||||||
|
}
|
||||||
|
|
||||||
|
private async deleteShortcutsByHostId(hostId: number): Promise<number> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.delete(fileManagerShortcuts)
|
||||||
|
.where(eq(fileManagerShortcuts.hostId, hostId))
|
||||||
|
.returning({ id: fileManagerShortcuts.id });
|
||||||
|
return rows.length;
|
||||||
|
}
|
||||||
|
|
||||||
|
private async deleteRecentByHostIds(hostIds: number[]): Promise<number> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.delete(fileManagerRecent)
|
||||||
|
.where(inArray(fileManagerRecent.hostId, hostIds))
|
||||||
|
.returning({ id: fileManagerRecent.id });
|
||||||
|
return rows.length;
|
||||||
|
}
|
||||||
|
|
||||||
|
private async deletePinnedByHostIds(hostIds: number[]): Promise<number> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.delete(fileManagerPinned)
|
||||||
|
.where(inArray(fileManagerPinned.hostId, hostIds))
|
||||||
|
.returning({ id: fileManagerPinned.id });
|
||||||
|
return rows.length;
|
||||||
|
}
|
||||||
|
|
||||||
|
private async deleteShortcutsByHostIds(hostIds: number[]): Promise<number> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.delete(fileManagerShortcuts)
|
||||||
|
.where(inArray(fileManagerShortcuts.hostId, hostIds))
|
||||||
|
.returning({ id: fileManagerShortcuts.id });
|
||||||
|
return rows.length;
|
||||||
|
}
|
||||||
|
|
||||||
|
private async afterWrite(): Promise<void> {
|
||||||
|
await this.onWrite?.();
|
||||||
|
}
|
||||||
|
}
|
||||||
@@ -0,0 +1,114 @@
|
|||||||
|
import { and, asc, eq } from "drizzle-orm";
|
||||||
|
import { homepageItems } from "../db/schema.js";
|
||||||
|
import type { DatabaseContext } from "./database-context.js";
|
||||||
|
|
||||||
|
export type HomepageItemRecord = typeof homepageItems.$inferSelect;
|
||||||
|
|
||||||
|
export interface HomepageItemCreateInput {
|
||||||
|
typeId: string;
|
||||||
|
title: string | null;
|
||||||
|
config: string;
|
||||||
|
}
|
||||||
|
|
||||||
|
export type HomepageItemUpdateInput = Partial<{
|
||||||
|
title: string | null;
|
||||||
|
config: string;
|
||||||
|
}>;
|
||||||
|
|
||||||
|
export class HomepageItemRepository {
|
||||||
|
constructor(
|
||||||
|
private readonly context: DatabaseContext,
|
||||||
|
private readonly onWrite?: () => void | Promise<void>,
|
||||||
|
) {}
|
||||||
|
|
||||||
|
async listByUserId(userId: string): Promise<HomepageItemRecord[]> {
|
||||||
|
return this.context.drizzle
|
||||||
|
.select()
|
||||||
|
.from(homepageItems)
|
||||||
|
.where(eq(homepageItems.userId, userId))
|
||||||
|
.orderBy(asc(homepageItems.id));
|
||||||
|
}
|
||||||
|
|
||||||
|
async createForUser(
|
||||||
|
userId: string,
|
||||||
|
input: HomepageItemCreateInput,
|
||||||
|
now = new Date().toISOString(),
|
||||||
|
): Promise<HomepageItemRecord> {
|
||||||
|
const [created] = await this.context.drizzle
|
||||||
|
.insert(homepageItems)
|
||||||
|
.values({
|
||||||
|
userId,
|
||||||
|
typeId: input.typeId,
|
||||||
|
title: input.title,
|
||||||
|
config: input.config,
|
||||||
|
createdAt: now,
|
||||||
|
updatedAt: now,
|
||||||
|
})
|
||||||
|
.returning();
|
||||||
|
|
||||||
|
await this.afterWrite();
|
||||||
|
return created;
|
||||||
|
}
|
||||||
|
|
||||||
|
async findByIdForUser(
|
||||||
|
userId: string,
|
||||||
|
id: number,
|
||||||
|
): Promise<HomepageItemRecord | null> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.select()
|
||||||
|
.from(homepageItems)
|
||||||
|
.where(and(eq(homepageItems.id, id), eq(homepageItems.userId, userId)))
|
||||||
|
.limit(1);
|
||||||
|
|
||||||
|
return rows[0] ?? null;
|
||||||
|
}
|
||||||
|
|
||||||
|
async updateForUser(
|
||||||
|
userId: string,
|
||||||
|
id: number,
|
||||||
|
updates: HomepageItemUpdateInput,
|
||||||
|
updatedAt = new Date().toISOString(),
|
||||||
|
): Promise<HomepageItemRecord | null> {
|
||||||
|
const [updated] = await this.context.drizzle
|
||||||
|
.update(homepageItems)
|
||||||
|
.set({ ...updates, updatedAt })
|
||||||
|
.where(and(eq(homepageItems.id, id), eq(homepageItems.userId, userId)))
|
||||||
|
.returning();
|
||||||
|
|
||||||
|
if (updated) {
|
||||||
|
await this.afterWrite();
|
||||||
|
}
|
||||||
|
|
||||||
|
return updated ?? null;
|
||||||
|
}
|
||||||
|
|
||||||
|
async deleteForUser(userId: string, id: number): Promise<boolean> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.delete(homepageItems)
|
||||||
|
.where(and(eq(homepageItems.id, id), eq(homepageItems.userId, userId)))
|
||||||
|
.returning({ id: homepageItems.id });
|
||||||
|
|
||||||
|
if (rows.length > 0) {
|
||||||
|
await this.afterWrite();
|
||||||
|
}
|
||||||
|
|
||||||
|
return rows.length > 0;
|
||||||
|
}
|
||||||
|
|
||||||
|
async deleteByUserId(userId: string): Promise<number> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.delete(homepageItems)
|
||||||
|
.where(eq(homepageItems.userId, userId))
|
||||||
|
.returning({ id: homepageItems.id });
|
||||||
|
|
||||||
|
if (rows.length > 0) {
|
||||||
|
await this.afterWrite();
|
||||||
|
}
|
||||||
|
|
||||||
|
return rows.length;
|
||||||
|
}
|
||||||
|
|
||||||
|
private async afterWrite(): Promise<void> {
|
||||||
|
await this.onWrite?.();
|
||||||
|
}
|
||||||
|
}
|
||||||
@@ -0,0 +1,64 @@
|
|||||||
|
import { eq } from "drizzle-orm";
|
||||||
|
import { homepageLayouts } from "../db/schema.js";
|
||||||
|
import type { DatabaseContext } from "./database-context.js";
|
||||||
|
|
||||||
|
export type HomepageLayoutRecord = typeof homepageLayouts.$inferSelect;
|
||||||
|
|
||||||
|
export class HomepageLayoutRepository {
|
||||||
|
constructor(
|
||||||
|
private readonly context: DatabaseContext,
|
||||||
|
private readonly onWrite?: () => void | Promise<void>,
|
||||||
|
) {}
|
||||||
|
|
||||||
|
async findByUserId(userId: string): Promise<HomepageLayoutRecord | null> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.select()
|
||||||
|
.from(homepageLayouts)
|
||||||
|
.where(eq(homepageLayouts.userId, userId))
|
||||||
|
.limit(1);
|
||||||
|
|
||||||
|
return rows[0] ?? null;
|
||||||
|
}
|
||||||
|
|
||||||
|
async upsertForUser(
|
||||||
|
userId: string,
|
||||||
|
layout: string,
|
||||||
|
updatedAt = new Date().toISOString(),
|
||||||
|
): Promise<HomepageLayoutRecord> {
|
||||||
|
const existing = await this.findByUserId(userId);
|
||||||
|
|
||||||
|
if (!existing) {
|
||||||
|
const [created] = await this.context.drizzle
|
||||||
|
.insert(homepageLayouts)
|
||||||
|
.values({ userId, layout, updatedAt })
|
||||||
|
.returning();
|
||||||
|
await this.afterWrite();
|
||||||
|
return created;
|
||||||
|
}
|
||||||
|
|
||||||
|
const [updated] = await this.context.drizzle
|
||||||
|
.update(homepageLayouts)
|
||||||
|
.set({ layout, updatedAt })
|
||||||
|
.where(eq(homepageLayouts.userId, userId))
|
||||||
|
.returning();
|
||||||
|
await this.afterWrite();
|
||||||
|
return updated;
|
||||||
|
}
|
||||||
|
|
||||||
|
async deleteByUserId(userId: string): Promise<number> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.delete(homepageLayouts)
|
||||||
|
.where(eq(homepageLayouts.userId, userId))
|
||||||
|
.returning({ id: homepageLayouts.id });
|
||||||
|
|
||||||
|
if (rows.length > 0) {
|
||||||
|
await this.afterWrite();
|
||||||
|
}
|
||||||
|
|
||||||
|
return rows.length;
|
||||||
|
}
|
||||||
|
|
||||||
|
private async afterWrite(): Promise<void> {
|
||||||
|
await this.onWrite?.();
|
||||||
|
}
|
||||||
|
}
|
||||||
@@ -0,0 +1,168 @@
|
|||||||
|
import { and, eq, like, or, sql } from "drizzle-orm";
|
||||||
|
import type { SQLiteColumn } from "drizzle-orm/sqlite-core";
|
||||||
|
import { hosts, sshCredentials, sshFolders } from "../db/schema.js";
|
||||||
|
import type { DatabaseContext } from "./database-context.js";
|
||||||
|
|
||||||
|
export type HostFolderRecord = typeof sshFolders.$inferSelect;
|
||||||
|
export type HostFolderHostRecord = typeof hosts.$inferSelect;
|
||||||
|
|
||||||
|
export interface RenameFolderResult {
|
||||||
|
updatedHosts: number;
|
||||||
|
updatedCredentials: number;
|
||||||
|
}
|
||||||
|
|
||||||
|
export class HostFolderRepository {
|
||||||
|
constructor(
|
||||||
|
private readonly context: DatabaseContext,
|
||||||
|
private readonly onWrite?: () => void | Promise<void>,
|
||||||
|
) {}
|
||||||
|
|
||||||
|
async renameFolder(
|
||||||
|
userId: string,
|
||||||
|
oldName: string,
|
||||||
|
newName: string,
|
||||||
|
now = new Date().toISOString(),
|
||||||
|
): Promise<RenameFolderResult> {
|
||||||
|
const oldPrefix = `${oldName} / `;
|
||||||
|
const newPrefix = `${newName} / `;
|
||||||
|
const childLike = `${oldPrefix}%`;
|
||||||
|
const renameExpr = (col: SQLiteColumn) =>
|
||||||
|
sql`CASE WHEN ${col} = ${oldName} THEN ${newName} ELSE ${newPrefix} || substr(${col}, ${oldPrefix.length + 1}) END`;
|
||||||
|
const folderMatch = (col: SQLiteColumn) =>
|
||||||
|
or(eq(col, oldName), like(col, childLike));
|
||||||
|
|
||||||
|
const updatedHosts = await this.context.drizzle
|
||||||
|
.update(hosts)
|
||||||
|
.set({ folder: renameExpr(hosts.folder), updatedAt: now })
|
||||||
|
.where(and(eq(hosts.userId, userId), folderMatch(hosts.folder)))
|
||||||
|
.returning({ id: hosts.id });
|
||||||
|
|
||||||
|
const updatedCredentials = await this.context.drizzle
|
||||||
|
.update(sshCredentials)
|
||||||
|
.set({ folder: renameExpr(sshCredentials.folder), updatedAt: now })
|
||||||
|
.where(
|
||||||
|
and(
|
||||||
|
eq(sshCredentials.userId, userId),
|
||||||
|
folderMatch(sshCredentials.folder),
|
||||||
|
),
|
||||||
|
)
|
||||||
|
.returning({ id: sshCredentials.id });
|
||||||
|
|
||||||
|
await this.context.drizzle
|
||||||
|
.update(sshFolders)
|
||||||
|
.set({ name: renameExpr(sshFolders.name), updatedAt: now })
|
||||||
|
.where(and(eq(sshFolders.userId, userId), folderMatch(sshFolders.name)));
|
||||||
|
|
||||||
|
await this.afterWrite();
|
||||||
|
return {
|
||||||
|
updatedHosts: updatedHosts.length,
|
||||||
|
updatedCredentials: updatedCredentials.length,
|
||||||
|
};
|
||||||
|
}
|
||||||
|
|
||||||
|
async listFolders(userId: string): Promise<HostFolderRecord[]> {
|
||||||
|
return this.context.drizzle
|
||||||
|
.select()
|
||||||
|
.from(sshFolders)
|
||||||
|
.where(eq(sshFolders.userId, userId));
|
||||||
|
}
|
||||||
|
|
||||||
|
async upsertMetadata(
|
||||||
|
userId: string,
|
||||||
|
name: string,
|
||||||
|
color: string | null | undefined,
|
||||||
|
icon: string | null | undefined,
|
||||||
|
now = new Date().toISOString(),
|
||||||
|
): Promise<{ folder: HostFolderRecord; created: boolean }> {
|
||||||
|
const existing = await this.findFolder(userId, name);
|
||||||
|
if (existing) {
|
||||||
|
const [updated] = await this.context.drizzle
|
||||||
|
.update(sshFolders)
|
||||||
|
.set({ color, icon, updatedAt: now })
|
||||||
|
.where(and(eq(sshFolders.userId, userId), eq(sshFolders.name, name)))
|
||||||
|
.returning();
|
||||||
|
|
||||||
|
await this.afterWrite();
|
||||||
|
return { folder: updated, created: false };
|
||||||
|
}
|
||||||
|
|
||||||
|
const [created] = await this.context.drizzle
|
||||||
|
.insert(sshFolders)
|
||||||
|
.values({
|
||||||
|
userId,
|
||||||
|
name,
|
||||||
|
color,
|
||||||
|
icon,
|
||||||
|
createdAt: now,
|
||||||
|
updatedAt: now,
|
||||||
|
})
|
||||||
|
.returning();
|
||||||
|
|
||||||
|
await this.afterWrite();
|
||||||
|
return { folder: created, created: true };
|
||||||
|
}
|
||||||
|
|
||||||
|
async listHostsInFolder(
|
||||||
|
userId: string,
|
||||||
|
folderName: string,
|
||||||
|
): Promise<HostFolderHostRecord[]> {
|
||||||
|
const folderMatch = (col: SQLiteColumn) =>
|
||||||
|
or(eq(col, folderName), like(col, `${folderName} / %`));
|
||||||
|
|
||||||
|
return this.context.drizzle
|
||||||
|
.select()
|
||||||
|
.from(hosts)
|
||||||
|
.where(and(eq(hosts.userId, userId), folderMatch(hosts.folder)));
|
||||||
|
}
|
||||||
|
|
||||||
|
async deleteHostsAndFolderRecords(
|
||||||
|
userId: string,
|
||||||
|
folderName: string,
|
||||||
|
): Promise<void> {
|
||||||
|
const folderMatch = (col: SQLiteColumn) =>
|
||||||
|
or(eq(col, folderName), like(col, `${folderName} / %`));
|
||||||
|
|
||||||
|
const hostsToDelete = await this.listHostsInFolder(userId, folderName);
|
||||||
|
if (hostsToDelete.length > 0) {
|
||||||
|
await this.context.drizzle
|
||||||
|
.delete(hosts)
|
||||||
|
.where(and(eq(hosts.userId, userId), folderMatch(hosts.folder)));
|
||||||
|
}
|
||||||
|
|
||||||
|
await this.context.drizzle
|
||||||
|
.delete(sshFolders)
|
||||||
|
.where(and(eq(sshFolders.userId, userId), folderMatch(sshFolders.name)));
|
||||||
|
|
||||||
|
await this.afterWrite();
|
||||||
|
}
|
||||||
|
|
||||||
|
async deleteByUserId(userId: string): Promise<number> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.delete(sshFolders)
|
||||||
|
.where(eq(sshFolders.userId, userId))
|
||||||
|
.returning({ id: sshFolders.id });
|
||||||
|
|
||||||
|
if (rows.length > 0) {
|
||||||
|
await this.afterWrite();
|
||||||
|
}
|
||||||
|
|
||||||
|
return rows.length;
|
||||||
|
}
|
||||||
|
|
||||||
|
private async findFolder(
|
||||||
|
userId: string,
|
||||||
|
name: string,
|
||||||
|
): Promise<HostFolderRecord | null> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.select()
|
||||||
|
.from(sshFolders)
|
||||||
|
.where(and(eq(sshFolders.userId, userId), eq(sshFolders.name, name)))
|
||||||
|
.limit(1);
|
||||||
|
|
||||||
|
return rows[0] ?? null;
|
||||||
|
}
|
||||||
|
|
||||||
|
private async afterWrite(): Promise<void> {
|
||||||
|
await this.onWrite?.();
|
||||||
|
}
|
||||||
|
}
|
||||||
@@ -0,0 +1,164 @@
|
|||||||
|
import { and, desc, eq } from "drizzle-orm";
|
||||||
|
import { hostHealthChecks, hostHealthHistory } from "../db/schema.js";
|
||||||
|
import type { DatabaseContext } from "./database-context.js";
|
||||||
|
|
||||||
|
export type HostHealthCheckRecord = typeof hostHealthChecks.$inferSelect;
|
||||||
|
export type HostHealthHistoryRecord = typeof hostHealthHistory.$inferSelect;
|
||||||
|
|
||||||
|
export interface HostHealthResultInput {
|
||||||
|
checkId: string;
|
||||||
|
ok: boolean;
|
||||||
|
latencyMs: number | null;
|
||||||
|
detail: string;
|
||||||
|
}
|
||||||
|
|
||||||
|
export class HostHealthRepository {
|
||||||
|
constructor(
|
||||||
|
private readonly context: DatabaseContext,
|
||||||
|
private readonly onWrite?: () => void | Promise<void>,
|
||||||
|
) {}
|
||||||
|
|
||||||
|
async findChecksByUserAndHost(
|
||||||
|
userId: string,
|
||||||
|
hostId: number,
|
||||||
|
): Promise<HostHealthCheckRecord | null> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.select()
|
||||||
|
.from(hostHealthChecks)
|
||||||
|
.where(
|
||||||
|
and(
|
||||||
|
eq(hostHealthChecks.userId, userId),
|
||||||
|
eq(hostHealthChecks.hostId, hostId),
|
||||||
|
),
|
||||||
|
)
|
||||||
|
.limit(1);
|
||||||
|
|
||||||
|
return rows[0] ?? null;
|
||||||
|
}
|
||||||
|
|
||||||
|
async upsertChecks(
|
||||||
|
userId: string,
|
||||||
|
hostId: number,
|
||||||
|
checks: string,
|
||||||
|
intervalSeconds: number,
|
||||||
|
now = new Date().toISOString(),
|
||||||
|
): Promise<HostHealthCheckRecord> {
|
||||||
|
const existing = await this.findChecksByUserAndHost(userId, hostId);
|
||||||
|
if (existing) {
|
||||||
|
const [updated] = await this.context.drizzle
|
||||||
|
.update(hostHealthChecks)
|
||||||
|
.set({ checks, intervalSeconds, updatedAt: now })
|
||||||
|
.where(eq(hostHealthChecks.id, existing.id))
|
||||||
|
.returning();
|
||||||
|
|
||||||
|
await this.afterWrite();
|
||||||
|
return updated;
|
||||||
|
}
|
||||||
|
|
||||||
|
const [created] = await this.context.drizzle
|
||||||
|
.insert(hostHealthChecks)
|
||||||
|
.values({
|
||||||
|
userId,
|
||||||
|
hostId,
|
||||||
|
checks,
|
||||||
|
intervalSeconds,
|
||||||
|
createdAt: now,
|
||||||
|
updatedAt: now,
|
||||||
|
})
|
||||||
|
.returning();
|
||||||
|
|
||||||
|
await this.afterWrite();
|
||||||
|
return created;
|
||||||
|
}
|
||||||
|
|
||||||
|
async recordHistory(
|
||||||
|
userId: string,
|
||||||
|
hostId: number,
|
||||||
|
results: HostHealthResultInput[],
|
||||||
|
keep: number,
|
||||||
|
now = new Date().toISOString(),
|
||||||
|
): Promise<number> {
|
||||||
|
if (results.length === 0) {
|
||||||
|
return 0;
|
||||||
|
}
|
||||||
|
|
||||||
|
await this.context.drizzle.insert(hostHealthHistory).values(
|
||||||
|
results.map((result) => ({
|
||||||
|
userId,
|
||||||
|
hostId,
|
||||||
|
checkId: result.checkId,
|
||||||
|
ts: now,
|
||||||
|
ok: result.ok,
|
||||||
|
latencyMs: result.latencyMs,
|
||||||
|
detail: result.detail,
|
||||||
|
})),
|
||||||
|
);
|
||||||
|
|
||||||
|
this.pruneHistory(userId, hostId, keep);
|
||||||
|
await this.afterWrite();
|
||||||
|
return results.length;
|
||||||
|
}
|
||||||
|
|
||||||
|
async listHistory(
|
||||||
|
userId: string,
|
||||||
|
hostId: number,
|
||||||
|
limit: number,
|
||||||
|
): Promise<HostHealthHistoryRecord[]> {
|
||||||
|
return this.context.drizzle
|
||||||
|
.select()
|
||||||
|
.from(hostHealthHistory)
|
||||||
|
.where(
|
||||||
|
and(
|
||||||
|
eq(hostHealthHistory.userId, userId),
|
||||||
|
eq(hostHealthHistory.hostId, hostId),
|
||||||
|
),
|
||||||
|
)
|
||||||
|
.orderBy(desc(hostHealthHistory.ts))
|
||||||
|
.limit(limit);
|
||||||
|
}
|
||||||
|
|
||||||
|
async deleteByUserId(userId: string): Promise<{
|
||||||
|
checksDeleted: number;
|
||||||
|
historyDeleted: number;
|
||||||
|
}> {
|
||||||
|
const historyRows = await this.context.drizzle
|
||||||
|
.delete(hostHealthHistory)
|
||||||
|
.where(eq(hostHealthHistory.userId, userId))
|
||||||
|
.returning({ id: hostHealthHistory.id });
|
||||||
|
|
||||||
|
const checkRows = await this.context.drizzle
|
||||||
|
.delete(hostHealthChecks)
|
||||||
|
.where(eq(hostHealthChecks.userId, userId))
|
||||||
|
.returning({ id: hostHealthChecks.id });
|
||||||
|
|
||||||
|
if (historyRows.length > 0 || checkRows.length > 0) {
|
||||||
|
await this.afterWrite();
|
||||||
|
}
|
||||||
|
|
||||||
|
return {
|
||||||
|
checksDeleted: checkRows.length,
|
||||||
|
historyDeleted: historyRows.length,
|
||||||
|
};
|
||||||
|
}
|
||||||
|
|
||||||
|
private pruneHistory(userId: string, hostId: number, keep: number): void {
|
||||||
|
this.context.sqlite
|
||||||
|
?.prepare(
|
||||||
|
`DELETE FROM host_health_history
|
||||||
|
WHERE id IN (
|
||||||
|
SELECT id FROM host_health_history
|
||||||
|
WHERE user_id = ? AND host_id = ?
|
||||||
|
AND id NOT IN (
|
||||||
|
SELECT id FROM host_health_history
|
||||||
|
WHERE user_id = ? AND host_id = ?
|
||||||
|
ORDER BY ts DESC LIMIT ?
|
||||||
|
)
|
||||||
|
)`,
|
||||||
|
)
|
||||||
|
.run(userId, hostId, userId, hostId, keep);
|
||||||
|
}
|
||||||
|
|
||||||
|
private async afterWrite(): Promise<void> {
|
||||||
|
await this.onWrite?.();
|
||||||
|
}
|
||||||
|
}
|
||||||
@@ -0,0 +1,64 @@
|
|||||||
|
import { and, asc, eq, gte, lte } from "drizzle-orm";
|
||||||
|
import { hostMetricsHistory } from "../db/schema.js";
|
||||||
|
import type { DatabaseContext } from "./database-context.js";
|
||||||
|
|
||||||
|
export type HostMetricsHistoryRecord = typeof hostMetricsHistory.$inferSelect;
|
||||||
|
|
||||||
|
export interface HostMetricsHistoryCreateInput {
|
||||||
|
hostId: number;
|
||||||
|
cpuPercent?: number | null;
|
||||||
|
memPercent?: number | null;
|
||||||
|
diskPercent?: number | null;
|
||||||
|
netRxBytes?: number | null;
|
||||||
|
netTxBytes?: number | null;
|
||||||
|
}
|
||||||
|
|
||||||
|
export class HostMetricsHistoryRepository {
|
||||||
|
constructor(
|
||||||
|
private readonly context: DatabaseContext,
|
||||||
|
private readonly onWrite?: () => void | Promise<void>,
|
||||||
|
) {}
|
||||||
|
|
||||||
|
async create(input: HostMetricsHistoryCreateInput): Promise<void> {
|
||||||
|
await this.context.drizzle.insert(hostMetricsHistory).values({
|
||||||
|
hostId: input.hostId,
|
||||||
|
cpuPercent: input.cpuPercent,
|
||||||
|
memPercent: input.memPercent,
|
||||||
|
diskPercent: input.diskPercent,
|
||||||
|
netRxBytes: input.netRxBytes,
|
||||||
|
netTxBytes: input.netTxBytes,
|
||||||
|
});
|
||||||
|
|
||||||
|
await this.afterWrite();
|
||||||
|
}
|
||||||
|
|
||||||
|
pruneOlderThan(hostId: number, retentionDays: number): void {
|
||||||
|
this.context.sqlite
|
||||||
|
?.prepare(
|
||||||
|
"DELETE FROM host_metrics_history WHERE host_id = ? AND ts < datetime('now', ?)",
|
||||||
|
)
|
||||||
|
.run(hostId, `-${retentionDays} days`);
|
||||||
|
}
|
||||||
|
|
||||||
|
async listRange(
|
||||||
|
hostId: number,
|
||||||
|
fromTs: string,
|
||||||
|
toTs: string,
|
||||||
|
): Promise<HostMetricsHistoryRecord[]> {
|
||||||
|
return this.context.drizzle
|
||||||
|
.select()
|
||||||
|
.from(hostMetricsHistory)
|
||||||
|
.where(
|
||||||
|
and(
|
||||||
|
eq(hostMetricsHistory.hostId, hostId),
|
||||||
|
gte(hostMetricsHistory.ts, fromTs),
|
||||||
|
lte(hostMetricsHistory.ts, toTs),
|
||||||
|
),
|
||||||
|
)
|
||||||
|
.orderBy(asc(hostMetricsHistory.ts));
|
||||||
|
}
|
||||||
|
|
||||||
|
private async afterWrite(): Promise<void> {
|
||||||
|
await this.onWrite?.();
|
||||||
|
}
|
||||||
|
}
|
||||||
@@ -0,0 +1,97 @@
|
|||||||
|
import { and, eq } from "drizzle-orm";
|
||||||
|
import { hostMetricsPreferences, hosts } from "../db/schema.js";
|
||||||
|
import type { DatabaseContext } from "./database-context.js";
|
||||||
|
|
||||||
|
export type HostMetricsPreferenceRecord =
|
||||||
|
typeof hostMetricsPreferences.$inferSelect;
|
||||||
|
|
||||||
|
export class HostMetricsPreferenceRepository {
|
||||||
|
constructor(
|
||||||
|
private readonly context: DatabaseContext,
|
||||||
|
private readonly onWrite?: () => void | Promise<void>,
|
||||||
|
) {}
|
||||||
|
|
||||||
|
async findByUserAndHost(
|
||||||
|
userId: string,
|
||||||
|
hostId: number,
|
||||||
|
): Promise<HostMetricsPreferenceRecord | null> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.select()
|
||||||
|
.from(hostMetricsPreferences)
|
||||||
|
.where(
|
||||||
|
and(
|
||||||
|
eq(hostMetricsPreferences.userId, userId),
|
||||||
|
eq(hostMetricsPreferences.hostId, hostId),
|
||||||
|
),
|
||||||
|
)
|
||||||
|
.limit(1);
|
||||||
|
|
||||||
|
return rows[0] ?? null;
|
||||||
|
}
|
||||||
|
|
||||||
|
async upsertLayout(
|
||||||
|
userId: string,
|
||||||
|
hostId: number,
|
||||||
|
layout: string,
|
||||||
|
now = new Date().toISOString(),
|
||||||
|
): Promise<HostMetricsPreferenceRecord> {
|
||||||
|
const existing = await this.findByUserAndHost(userId, hostId);
|
||||||
|
if (existing) {
|
||||||
|
const [updated] = await this.context.drizzle
|
||||||
|
.update(hostMetricsPreferences)
|
||||||
|
.set({ layout, updatedAt: now })
|
||||||
|
.where(eq(hostMetricsPreferences.id, existing.id))
|
||||||
|
.returning();
|
||||||
|
|
||||||
|
await this.afterWrite();
|
||||||
|
return updated;
|
||||||
|
}
|
||||||
|
|
||||||
|
const [created] = await this.context.drizzle
|
||||||
|
.insert(hostMetricsPreferences)
|
||||||
|
.values({
|
||||||
|
userId,
|
||||||
|
hostId,
|
||||||
|
layout,
|
||||||
|
createdAt: now,
|
||||||
|
updatedAt: now,
|
||||||
|
})
|
||||||
|
.returning();
|
||||||
|
|
||||||
|
await this.afterWrite();
|
||||||
|
return created;
|
||||||
|
}
|
||||||
|
|
||||||
|
async updateHostStatsConfig(
|
||||||
|
userId: string,
|
||||||
|
hostId: number,
|
||||||
|
statsConfig: string,
|
||||||
|
): Promise<boolean> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.update(hosts)
|
||||||
|
.set({ statsConfig })
|
||||||
|
.where(and(eq(hosts.id, hostId), eq(hosts.userId, userId)))
|
||||||
|
.returning({ id: hosts.id });
|
||||||
|
|
||||||
|
if (rows.length === 0) return false;
|
||||||
|
await this.afterWrite();
|
||||||
|
return true;
|
||||||
|
}
|
||||||
|
|
||||||
|
async deleteByUserId(userId: string): Promise<number> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.delete(hostMetricsPreferences)
|
||||||
|
.where(eq(hostMetricsPreferences.userId, userId))
|
||||||
|
.returning({ id: hostMetricsPreferences.id });
|
||||||
|
|
||||||
|
if (rows.length > 0) {
|
||||||
|
await this.afterWrite();
|
||||||
|
}
|
||||||
|
|
||||||
|
return rows.length;
|
||||||
|
}
|
||||||
|
|
||||||
|
private async afterWrite(): Promise<void> {
|
||||||
|
await this.onWrite?.();
|
||||||
|
}
|
||||||
|
}
|
||||||
@@ -0,0 +1,265 @@
|
|||||||
|
import { and, eq, inArray } from "drizzle-orm";
|
||||||
|
import { hostAccess, hosts } from "../db/schema.js";
|
||||||
|
import type { DatabaseContext } from "./database-context.js";
|
||||||
|
import { DataCrypto } from "../../utils/data-crypto.js";
|
||||||
|
|
||||||
|
export type HostRecord = typeof hosts.$inferSelect;
|
||||||
|
export type NewHostRecord = typeof hosts.$inferInsert;
|
||||||
|
export type HostUpdate = Partial<Omit<NewHostRecord, "id" | "userId">>;
|
||||||
|
export interface HostBulkUpdateState {
|
||||||
|
id: number;
|
||||||
|
statsConfig: string | null;
|
||||||
|
credentialId: number | null;
|
||||||
|
proxmoxConfig: string | null;
|
||||||
|
}
|
||||||
|
|
||||||
|
export class HostRepository {
|
||||||
|
constructor(
|
||||||
|
private readonly context: DatabaseContext,
|
||||||
|
private readonly onWrite?: () => void | Promise<void>,
|
||||||
|
) {}
|
||||||
|
|
||||||
|
async create(host: NewHostRecord): Promise<HostRecord> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.insert(hosts)
|
||||||
|
.values(host)
|
||||||
|
.returning();
|
||||||
|
await this.afterWrite();
|
||||||
|
return rows[0];
|
||||||
|
}
|
||||||
|
|
||||||
|
async createEncryptedForUser(
|
||||||
|
userId: string,
|
||||||
|
host: NewHostRecord | Record<string, unknown>,
|
||||||
|
): Promise<HostRecord> {
|
||||||
|
const userDataKey = DataCrypto.validateUserAccess(userId);
|
||||||
|
const tempId = host.id ?? Date.now();
|
||||||
|
const dataWithTempId = { ...host, id: tempId };
|
||||||
|
const encryptedHost = DataCrypto.encryptRecord(
|
||||||
|
"ssh_data",
|
||||||
|
dataWithTempId,
|
||||||
|
userId,
|
||||||
|
userDataKey,
|
||||||
|
);
|
||||||
|
|
||||||
|
if (!host.id) {
|
||||||
|
delete (encryptedHost as Partial<NewHostRecord>).id;
|
||||||
|
}
|
||||||
|
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.insert(hosts)
|
||||||
|
.values(encryptedHost as NewHostRecord)
|
||||||
|
.returning();
|
||||||
|
|
||||||
|
await this.afterWrite();
|
||||||
|
return DataCrypto.decryptRecord("ssh_data", rows[0], userId, userDataKey);
|
||||||
|
}
|
||||||
|
|
||||||
|
async findById(id: number): Promise<HostRecord | null> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.select()
|
||||||
|
.from(hosts)
|
||||||
|
.where(eq(hosts.id, id))
|
||||||
|
.limit(1);
|
||||||
|
|
||||||
|
return rows[0] ?? null;
|
||||||
|
}
|
||||||
|
|
||||||
|
async findByIdForUser(
|
||||||
|
userId: string,
|
||||||
|
hostId: number,
|
||||||
|
): Promise<HostRecord | null> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.select()
|
||||||
|
.from(hosts)
|
||||||
|
.where(and(eq(hosts.id, hostId), eq(hosts.userId, userId)))
|
||||||
|
.limit(1);
|
||||||
|
|
||||||
|
return rows[0] ?? null;
|
||||||
|
}
|
||||||
|
|
||||||
|
async findDecryptedByIdAs(
|
||||||
|
userId: string,
|
||||||
|
hostId: number,
|
||||||
|
): Promise<HostRecord | null> {
|
||||||
|
const row = await this.findById(hostId);
|
||||||
|
if (!row) return null;
|
||||||
|
|
||||||
|
const userDataKey = DataCrypto.getUserDataKey(userId);
|
||||||
|
if (!userDataKey) return null;
|
||||||
|
|
||||||
|
return DataCrypto.decryptRecord("ssh_data", row, userId, userDataKey);
|
||||||
|
}
|
||||||
|
|
||||||
|
async listProxmoxEnabled(): Promise<
|
||||||
|
Pick<HostRecord, "id" | "userId" | "proxmoxConfig">[]
|
||||||
|
> {
|
||||||
|
return this.context.drizzle
|
||||||
|
.select({
|
||||||
|
id: hosts.id,
|
||||||
|
userId: hosts.userId,
|
||||||
|
proxmoxConfig: hosts.proxmoxConfig,
|
||||||
|
})
|
||||||
|
.from(hosts)
|
||||||
|
.where(eq(hosts.enableProxmox, true));
|
||||||
|
}
|
||||||
|
|
||||||
|
async listByUserId(userId: string): Promise<HostRecord[]> {
|
||||||
|
return this.context.drizzle
|
||||||
|
.select()
|
||||||
|
.from(hosts)
|
||||||
|
.where(eq(hosts.userId, userId));
|
||||||
|
}
|
||||||
|
|
||||||
|
async listDecryptedByUserId(userId: string): Promise<HostRecord[]> {
|
||||||
|
const rows = await this.listByUserId(userId);
|
||||||
|
const userDataKey = DataCrypto.getUserDataKey(userId);
|
||||||
|
if (!userDataKey) return [];
|
||||||
|
return DataCrypto.decryptRecords("ssh_data", rows, userId, userDataKey);
|
||||||
|
}
|
||||||
|
|
||||||
|
async existsForImportIdentity(
|
||||||
|
userId: string,
|
||||||
|
ip: string,
|
||||||
|
port: number,
|
||||||
|
username: string,
|
||||||
|
): Promise<boolean> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.select({ id: hosts.id })
|
||||||
|
.from(hosts)
|
||||||
|
.where(
|
||||||
|
and(
|
||||||
|
eq(hosts.userId, userId),
|
||||||
|
eq(hosts.ip, ip),
|
||||||
|
eq(hosts.port, port),
|
||||||
|
eq(hosts.username, username),
|
||||||
|
),
|
||||||
|
)
|
||||||
|
.limit(1);
|
||||||
|
|
||||||
|
return rows.length > 0;
|
||||||
|
}
|
||||||
|
|
||||||
|
async updateForUser(
|
||||||
|
userId: string,
|
||||||
|
hostId: number,
|
||||||
|
update: HostUpdate,
|
||||||
|
): Promise<HostRecord | null> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.update(hosts)
|
||||||
|
.set(update)
|
||||||
|
.where(and(eq(hosts.id, hostId), eq(hosts.userId, userId)))
|
||||||
|
.returning();
|
||||||
|
|
||||||
|
await this.afterWrite();
|
||||||
|
return rows[0] ?? null;
|
||||||
|
}
|
||||||
|
|
||||||
|
async updateEncryptedForUser(
|
||||||
|
userId: string,
|
||||||
|
hostId: number,
|
||||||
|
update: HostUpdate,
|
||||||
|
): Promise<HostRecord | null> {
|
||||||
|
const userDataKey = DataCrypto.validateUserAccess(userId);
|
||||||
|
const encryptedUpdate = DataCrypto.encryptRecord(
|
||||||
|
"ssh_data",
|
||||||
|
update,
|
||||||
|
userId,
|
||||||
|
userDataKey,
|
||||||
|
);
|
||||||
|
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.update(hosts)
|
||||||
|
.set(encryptedUpdate)
|
||||||
|
.where(and(eq(hosts.id, hostId), eq(hosts.userId, userId)))
|
||||||
|
.returning();
|
||||||
|
|
||||||
|
await this.afterWrite();
|
||||||
|
return rows[0]
|
||||||
|
? DataCrypto.decryptRecord("ssh_data", rows[0], userId, userDataKey)
|
||||||
|
: null;
|
||||||
|
}
|
||||||
|
|
||||||
|
async listBulkUpdateState(
|
||||||
|
userId: string,
|
||||||
|
hostIds: number[],
|
||||||
|
): Promise<HostBulkUpdateState[]> {
|
||||||
|
if (hostIds.length === 0) {
|
||||||
|
return [];
|
||||||
|
}
|
||||||
|
|
||||||
|
return this.context.drizzle
|
||||||
|
.select({
|
||||||
|
id: hosts.id,
|
||||||
|
statsConfig: hosts.statsConfig,
|
||||||
|
credentialId: hosts.credentialId,
|
||||||
|
proxmoxConfig: hosts.proxmoxConfig,
|
||||||
|
})
|
||||||
|
.from(hosts)
|
||||||
|
.where(and(inArray(hosts.id, hostIds), eq(hosts.userId, userId)));
|
||||||
|
}
|
||||||
|
|
||||||
|
async updateManyForUser(
|
||||||
|
userId: string,
|
||||||
|
hostIds: number[],
|
||||||
|
update: HostUpdate,
|
||||||
|
): Promise<number> {
|
||||||
|
if (hostIds.length === 0 || Object.keys(update).length === 0) {
|
||||||
|
return 0;
|
||||||
|
}
|
||||||
|
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.update(hosts)
|
||||||
|
.set(update)
|
||||||
|
.where(and(inArray(hosts.id, hostIds), eq(hosts.userId, userId)))
|
||||||
|
.returning({ id: hosts.id });
|
||||||
|
|
||||||
|
if (rows.length > 0) {
|
||||||
|
await this.afterWrite();
|
||||||
|
}
|
||||||
|
|
||||||
|
return rows.length;
|
||||||
|
}
|
||||||
|
|
||||||
|
async deleteForUser(userId: string, hostId: number): Promise<boolean> {
|
||||||
|
await this.deleteAccessForHost(hostId);
|
||||||
|
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.delete(hosts)
|
||||||
|
.where(and(eq(hosts.id, hostId), eq(hosts.userId, userId)))
|
||||||
|
.returning({ id: hosts.id });
|
||||||
|
|
||||||
|
await this.afterWrite();
|
||||||
|
return rows.length > 0;
|
||||||
|
}
|
||||||
|
|
||||||
|
async deleteByUserId(userId: string): Promise<number> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.delete(hosts)
|
||||||
|
.where(eq(hosts.userId, userId))
|
||||||
|
.returning({ id: hosts.id });
|
||||||
|
|
||||||
|
if (rows.length > 0) {
|
||||||
|
await this.afterWrite();
|
||||||
|
}
|
||||||
|
|
||||||
|
return rows.length;
|
||||||
|
}
|
||||||
|
|
||||||
|
async deleteAccessForHost(hostId: number): Promise<number> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.delete(hostAccess)
|
||||||
|
.where(eq(hostAccess.hostId, hostId))
|
||||||
|
.returning({ id: hostAccess.id });
|
||||||
|
|
||||||
|
if (rows.length > 0) {
|
||||||
|
await this.afterWrite();
|
||||||
|
}
|
||||||
|
|
||||||
|
return rows.length;
|
||||||
|
}
|
||||||
|
|
||||||
|
private async afterWrite(): Promise<void> {
|
||||||
|
await this.onWrite?.();
|
||||||
|
}
|
||||||
|
}
|
||||||
@@ -0,0 +1,356 @@
|
|||||||
|
import { and, eq, inArray, isNotNull } from "drizzle-orm";
|
||||||
|
import { hostAccess, hosts, sshCredentials } from "../db/schema.js";
|
||||||
|
import type { DatabaseContext } from "./database-context.js";
|
||||||
|
import { DataCrypto } from "../../utils/data-crypto.js";
|
||||||
|
|
||||||
|
export type HostResolutionHostRecord = typeof hosts.$inferSelect;
|
||||||
|
export type HostResolutionCredentialRecord = typeof sshCredentials.$inferSelect;
|
||||||
|
export interface HostKeyVerificationRecord {
|
||||||
|
hostKeyFingerprint: string | null;
|
||||||
|
hostKeyType: string | null;
|
||||||
|
hostKeyAlgorithm: string | null;
|
||||||
|
hostKeyChangedCount: number | null;
|
||||||
|
name: string | null;
|
||||||
|
}
|
||||||
|
export interface HostUpdateStateRecord {
|
||||||
|
userId: string;
|
||||||
|
credentialId: number | null;
|
||||||
|
rdpCredentialId: number | null;
|
||||||
|
vncCredentialId: number | null;
|
||||||
|
telnetCredentialId: number | null;
|
||||||
|
vaultProfileId: number | null;
|
||||||
|
authType: string;
|
||||||
|
}
|
||||||
|
export interface HostListAccessEntry {
|
||||||
|
hostId: number;
|
||||||
|
permissionLevel: string;
|
||||||
|
expiresAt: string | null;
|
||||||
|
}
|
||||||
|
export type HostListRow = HostResolutionHostRecord & {
|
||||||
|
ownerId: string;
|
||||||
|
isShared: boolean;
|
||||||
|
permissionLevel?: string;
|
||||||
|
expiresAt?: string | null;
|
||||||
|
};
|
||||||
|
|
||||||
|
export class HostResolutionRepository {
|
||||||
|
constructor(
|
||||||
|
private readonly context: DatabaseContext,
|
||||||
|
private readonly onWrite?: () => void | Promise<void>,
|
||||||
|
) {}
|
||||||
|
|
||||||
|
async findHostById(
|
||||||
|
hostId: number,
|
||||||
|
userId: string,
|
||||||
|
): Promise<HostResolutionHostRecord | null> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.select()
|
||||||
|
.from(hosts)
|
||||||
|
.where(eq(hosts.id, hostId))
|
||||||
|
.limit(1);
|
||||||
|
|
||||||
|
return this.decryptOne("ssh_data", rows[0], userId);
|
||||||
|
}
|
||||||
|
|
||||||
|
async findHostByIdForUser(
|
||||||
|
hostId: number,
|
||||||
|
userId: string,
|
||||||
|
): Promise<HostResolutionHostRecord | null> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.select()
|
||||||
|
.from(hosts)
|
||||||
|
.where(and(eq(hosts.id, hostId), eq(hosts.userId, userId)))
|
||||||
|
.limit(1);
|
||||||
|
|
||||||
|
return this.decryptOne("ssh_data", rows[0], userId);
|
||||||
|
}
|
||||||
|
|
||||||
|
async findHostUpdateState(
|
||||||
|
hostId: number,
|
||||||
|
): Promise<HostUpdateStateRecord | null> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.select({
|
||||||
|
userId: hosts.userId,
|
||||||
|
credentialId: hosts.credentialId,
|
||||||
|
rdpCredentialId: hosts.rdpCredentialId,
|
||||||
|
vncCredentialId: hosts.vncCredentialId,
|
||||||
|
telnetCredentialId: hosts.telnetCredentialId,
|
||||||
|
vaultProfileId: hosts.vaultProfileId,
|
||||||
|
authType: hosts.authType,
|
||||||
|
})
|
||||||
|
.from(hosts)
|
||||||
|
.where(eq(hosts.id, hostId))
|
||||||
|
.limit(1);
|
||||||
|
|
||||||
|
return rows[0] ?? null;
|
||||||
|
}
|
||||||
|
|
||||||
|
async findHostsByUserId(userId: string): Promise<HostResolutionHostRecord[]> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.select()
|
||||||
|
.from(hosts)
|
||||||
|
.where(eq(hosts.userId, userId));
|
||||||
|
|
||||||
|
return this.decryptMany("ssh_data", rows, userId);
|
||||||
|
}
|
||||||
|
|
||||||
|
async listHostRowsForAccessList(
|
||||||
|
userId: string,
|
||||||
|
accessEntries: HostListAccessEntry[],
|
||||||
|
): Promise<HostListRow[]> {
|
||||||
|
const ownHostRows = await this.context.drizzle
|
||||||
|
.select()
|
||||||
|
.from(hosts)
|
||||||
|
.where(eq(hosts.userId, userId));
|
||||||
|
|
||||||
|
const sharedHostIds = Array.from(
|
||||||
|
new Set(accessEntries.map((access) => access.hostId)),
|
||||||
|
);
|
||||||
|
const sharedHostRows =
|
||||||
|
sharedHostIds.length > 0
|
||||||
|
? await this.context.drizzle
|
||||||
|
.select()
|
||||||
|
.from(hosts)
|
||||||
|
.where(inArray(hosts.id, sharedHostIds))
|
||||||
|
: [];
|
||||||
|
const sharedHostsById = new Map(
|
||||||
|
sharedHostRows.map((host) => [host.id, host]),
|
||||||
|
);
|
||||||
|
|
||||||
|
return [
|
||||||
|
...ownHostRows.map((host) => ({
|
||||||
|
...host,
|
||||||
|
ownerId: host.userId,
|
||||||
|
isShared: false,
|
||||||
|
permissionLevel: undefined,
|
||||||
|
expiresAt: undefined,
|
||||||
|
})),
|
||||||
|
...accessEntries.flatMap((access) => {
|
||||||
|
const host = sharedHostsById.get(access.hostId);
|
||||||
|
if (!host || host.userId === userId) {
|
||||||
|
return [];
|
||||||
|
}
|
||||||
|
|
||||||
|
return [
|
||||||
|
{
|
||||||
|
...host,
|
||||||
|
ownerId: host.userId,
|
||||||
|
isShared: host.userId !== userId,
|
||||||
|
permissionLevel: access.permissionLevel,
|
||||||
|
expiresAt: access.expiresAt,
|
||||||
|
},
|
||||||
|
];
|
||||||
|
}),
|
||||||
|
];
|
||||||
|
}
|
||||||
|
|
||||||
|
async findHostOwnerId(hostId: number): Promise<string | null> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.select({ ownerId: hosts.userId })
|
||||||
|
.from(hosts)
|
||||||
|
.where(eq(hosts.id, hostId))
|
||||||
|
.limit(1);
|
||||||
|
|
||||||
|
return rows[0]?.ownerId ?? null;
|
||||||
|
}
|
||||||
|
|
||||||
|
async isHostOwnedByUser(hostId: number, userId: string): Promise<boolean> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.select({ id: hosts.id })
|
||||||
|
.from(hosts)
|
||||||
|
.where(and(eq(hosts.id, hostId), eq(hosts.userId, userId)))
|
||||||
|
.limit(1);
|
||||||
|
|
||||||
|
return rows.length > 0;
|
||||||
|
}
|
||||||
|
|
||||||
|
async listAllHosts(): Promise<HostResolutionHostRecord[]> {
|
||||||
|
const rows = await this.context.drizzle.select().from(hosts);
|
||||||
|
|
||||||
|
return this.decryptManyByOwner("ssh_data", rows);
|
||||||
|
}
|
||||||
|
|
||||||
|
async listHostsWithTunnelConnections(): Promise<HostResolutionHostRecord[]> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.select()
|
||||||
|
.from(hosts)
|
||||||
|
.where(
|
||||||
|
and(eq(hosts.enableTunnel, true), isNotNull(hosts.tunnelConnections)),
|
||||||
|
);
|
||||||
|
|
||||||
|
return this.decryptManyByOwner("ssh_data", rows);
|
||||||
|
}
|
||||||
|
|
||||||
|
async listHostsUsingCredentialForUser(
|
||||||
|
userId: string,
|
||||||
|
credentialId: number,
|
||||||
|
): Promise<HostResolutionHostRecord[]> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.select()
|
||||||
|
.from(hosts)
|
||||||
|
.where(
|
||||||
|
and(eq(hosts.credentialId, credentialId), eq(hosts.userId, userId)),
|
||||||
|
);
|
||||||
|
|
||||||
|
return this.decryptMany("ssh_data", rows, userId);
|
||||||
|
}
|
||||||
|
|
||||||
|
async findHostKeyVerificationData(
|
||||||
|
hostId: number,
|
||||||
|
): Promise<HostKeyVerificationRecord | null> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.select({
|
||||||
|
hostKeyFingerprint: hosts.hostKeyFingerprint,
|
||||||
|
hostKeyType: hosts.hostKeyType,
|
||||||
|
hostKeyAlgorithm: hosts.hostKeyAlgorithm,
|
||||||
|
hostKeyChangedCount: hosts.hostKeyChangedCount,
|
||||||
|
name: hosts.name,
|
||||||
|
})
|
||||||
|
.from(hosts)
|
||||||
|
.where(eq(hosts.id, hostId))
|
||||||
|
.limit(1);
|
||||||
|
|
||||||
|
return rows[0] ?? null;
|
||||||
|
}
|
||||||
|
|
||||||
|
async storeHostKey(
|
||||||
|
hostId: number,
|
||||||
|
fingerprint: string,
|
||||||
|
keyType: string,
|
||||||
|
algorithm: string,
|
||||||
|
now = new Date().toISOString(),
|
||||||
|
): Promise<void> {
|
||||||
|
await this.context.drizzle
|
||||||
|
.update(hosts)
|
||||||
|
.set({
|
||||||
|
hostKeyFingerprint: fingerprint,
|
||||||
|
hostKeyType: keyType,
|
||||||
|
hostKeyAlgorithm: algorithm,
|
||||||
|
hostKeyFirstSeen: now,
|
||||||
|
hostKeyLastVerified: now,
|
||||||
|
})
|
||||||
|
.where(eq(hosts.id, hostId));
|
||||||
|
await this.afterWrite();
|
||||||
|
}
|
||||||
|
|
||||||
|
async updateHostKey(
|
||||||
|
hostId: number,
|
||||||
|
fingerprint: string,
|
||||||
|
keyType: string,
|
||||||
|
algorithm: string,
|
||||||
|
currentChangeCount: number,
|
||||||
|
now = new Date().toISOString(),
|
||||||
|
): Promise<void> {
|
||||||
|
await this.context.drizzle
|
||||||
|
.update(hosts)
|
||||||
|
.set({
|
||||||
|
hostKeyFingerprint: fingerprint,
|
||||||
|
hostKeyType: keyType,
|
||||||
|
hostKeyAlgorithm: algorithm,
|
||||||
|
hostKeyLastVerified: now,
|
||||||
|
hostKeyChangedCount: currentChangeCount + 1,
|
||||||
|
})
|
||||||
|
.where(eq(hosts.id, hostId));
|
||||||
|
await this.afterWrite();
|
||||||
|
}
|
||||||
|
|
||||||
|
async touchHostKeyLastVerified(
|
||||||
|
hostId: number,
|
||||||
|
now = new Date().toISOString(),
|
||||||
|
): Promise<void> {
|
||||||
|
await this.context.drizzle
|
||||||
|
.update(hosts)
|
||||||
|
.set({ hostKeyLastVerified: now })
|
||||||
|
.where(eq(hosts.id, hostId));
|
||||||
|
await this.afterWrite();
|
||||||
|
}
|
||||||
|
|
||||||
|
async findCredentialByIdForUser(
|
||||||
|
credentialId: number,
|
||||||
|
userId: string,
|
||||||
|
): Promise<HostResolutionCredentialRecord | null> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.select()
|
||||||
|
.from(sshCredentials)
|
||||||
|
.where(
|
||||||
|
and(
|
||||||
|
eq(sshCredentials.id, credentialId),
|
||||||
|
eq(sshCredentials.userId, userId),
|
||||||
|
),
|
||||||
|
)
|
||||||
|
.limit(1);
|
||||||
|
|
||||||
|
return this.decryptOne("ssh_credentials", rows[0], userId);
|
||||||
|
}
|
||||||
|
|
||||||
|
async findCredentialByIdForOwnerDecryptedAs(
|
||||||
|
credentialId: number,
|
||||||
|
ownerUserId: string,
|
||||||
|
decryptUserId: string,
|
||||||
|
): Promise<HostResolutionCredentialRecord | null> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.select()
|
||||||
|
.from(sshCredentials)
|
||||||
|
.where(
|
||||||
|
and(
|
||||||
|
eq(sshCredentials.id, credentialId),
|
||||||
|
eq(sshCredentials.userId, ownerUserId),
|
||||||
|
),
|
||||||
|
)
|
||||||
|
.limit(1);
|
||||||
|
|
||||||
|
return this.decryptOne("ssh_credentials", rows[0], decryptUserId);
|
||||||
|
}
|
||||||
|
|
||||||
|
async findOverrideCredentialId(
|
||||||
|
hostId: number,
|
||||||
|
userId: string,
|
||||||
|
): Promise<number | null> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.select({ overrideCredentialId: hostAccess.overrideCredentialId })
|
||||||
|
.from(hostAccess)
|
||||||
|
.where(and(eq(hostAccess.hostId, hostId), eq(hostAccess.userId, userId)))
|
||||||
|
.limit(1);
|
||||||
|
|
||||||
|
return rows[0]?.overrideCredentialId ?? null;
|
||||||
|
}
|
||||||
|
|
||||||
|
private decryptOne<T extends Record<string, unknown>>(
|
||||||
|
tableName: "ssh_data" | "ssh_credentials",
|
||||||
|
record: T | undefined,
|
||||||
|
userId: string,
|
||||||
|
): T | null {
|
||||||
|
if (!record) return null;
|
||||||
|
const userDataKey = DataCrypto.getUserDataKey(userId);
|
||||||
|
if (!userDataKey) return null;
|
||||||
|
return DataCrypto.decryptRecord(tableName, record, userId, userDataKey);
|
||||||
|
}
|
||||||
|
|
||||||
|
private decryptMany<T extends Record<string, unknown>>(
|
||||||
|
tableName: "ssh_data" | "ssh_credentials",
|
||||||
|
records: T[],
|
||||||
|
userId: string,
|
||||||
|
): T[] {
|
||||||
|
const userDataKey = DataCrypto.getUserDataKey(userId);
|
||||||
|
if (!userDataKey) return [];
|
||||||
|
return records.map((record) =>
|
||||||
|
DataCrypto.decryptRecord(tableName, record, userId, userDataKey),
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
private decryptManyByOwner<
|
||||||
|
T extends Record<string, unknown> & { userId: string },
|
||||||
|
>(tableName: "ssh_data" | "ssh_credentials", records: T[]): T[] {
|
||||||
|
return records.flatMap((record) => {
|
||||||
|
const userDataKey = DataCrypto.getUserDataKey(record.userId);
|
||||||
|
if (!userDataKey) return [];
|
||||||
|
return [
|
||||||
|
DataCrypto.decryptRecord(tableName, record, record.userId, userDataKey),
|
||||||
|
];
|
||||||
|
});
|
||||||
|
}
|
||||||
|
|
||||||
|
private async afterWrite(): Promise<void> {
|
||||||
|
await this.onWrite?.();
|
||||||
|
}
|
||||||
|
}
|
||||||
@@ -0,0 +1,63 @@
|
|||||||
|
import { eq } from "drizzle-orm";
|
||||||
|
import { networkTopology } from "../db/schema.js";
|
||||||
|
import type { DatabaseContext } from "./database-context.js";
|
||||||
|
|
||||||
|
export type NetworkTopologyRecord = typeof networkTopology.$inferSelect;
|
||||||
|
|
||||||
|
export class NetworkTopologyRepository {
|
||||||
|
constructor(
|
||||||
|
private readonly context: DatabaseContext,
|
||||||
|
private readonly onWrite?: () => void | Promise<void>,
|
||||||
|
) {}
|
||||||
|
|
||||||
|
async findByUserId(userId: string): Promise<NetworkTopologyRecord | null> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.select()
|
||||||
|
.from(networkTopology)
|
||||||
|
.where(eq(networkTopology.userId, userId))
|
||||||
|
.limit(1);
|
||||||
|
|
||||||
|
return rows[0] ?? null;
|
||||||
|
}
|
||||||
|
|
||||||
|
async upsertForUser(
|
||||||
|
userId: string,
|
||||||
|
topology: string,
|
||||||
|
updatedAt = new Date().toISOString(),
|
||||||
|
): Promise<void> {
|
||||||
|
const existing = await this.findByUserId(userId);
|
||||||
|
|
||||||
|
if (existing) {
|
||||||
|
await this.context.drizzle
|
||||||
|
.update(networkTopology)
|
||||||
|
.set({ topology, updatedAt })
|
||||||
|
.where(eq(networkTopology.userId, userId));
|
||||||
|
await this.afterWrite();
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
|
||||||
|
await this.context.drizzle.insert(networkTopology).values({
|
||||||
|
userId,
|
||||||
|
topology,
|
||||||
|
updatedAt,
|
||||||
|
});
|
||||||
|
await this.afterWrite();
|
||||||
|
}
|
||||||
|
|
||||||
|
async deleteByUserId(userId: string): Promise<number> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.delete(networkTopology)
|
||||||
|
.where(eq(networkTopology.userId, userId))
|
||||||
|
.returning({ id: networkTopology.id });
|
||||||
|
|
||||||
|
if (rows.length > 0) {
|
||||||
|
await this.afterWrite();
|
||||||
|
}
|
||||||
|
|
||||||
|
return rows.length;
|
||||||
|
}
|
||||||
|
|
||||||
|
private async afterWrite(): Promise<void> {
|
||||||
|
await this.onWrite?.();
|
||||||
|
}
|
||||||
|
}
|
||||||
@@ -0,0 +1,169 @@
|
|||||||
|
import { and, eq, gt } from "drizzle-orm";
|
||||||
|
import { userOpenTabs } from "../db/schema.js";
|
||||||
|
import type { DatabaseContext } from "./database-context.js";
|
||||||
|
|
||||||
|
export type OpenTabRecord = typeof userOpenTabs.$inferSelect;
|
||||||
|
export type NewOpenTabRecord = typeof userOpenTabs.$inferInsert;
|
||||||
|
export type OpenTabUpdate = Partial<
|
||||||
|
Pick<NewOpenTabRecord, "label" | "tabOrder" | "backendSessionId">
|
||||||
|
>;
|
||||||
|
|
||||||
|
export type OpenTabUpsertInput = Pick<
|
||||||
|
NewOpenTabRecord,
|
||||||
|
"id" | "tabType" | "label" | "tabOrder"
|
||||||
|
> & {
|
||||||
|
hostId?: number | null;
|
||||||
|
backendSessionId?: string | null;
|
||||||
|
};
|
||||||
|
|
||||||
|
export class OpenTabRepository {
|
||||||
|
constructor(
|
||||||
|
private readonly context: DatabaseContext,
|
||||||
|
private readonly onWrite?: () => void | Promise<void>,
|
||||||
|
) {}
|
||||||
|
|
||||||
|
async listRecentForUser(
|
||||||
|
userId: string,
|
||||||
|
updatedAfter: string,
|
||||||
|
): Promise<OpenTabRecord[]> {
|
||||||
|
return this.context.drizzle
|
||||||
|
.select()
|
||||||
|
.from(userOpenTabs)
|
||||||
|
.where(
|
||||||
|
and(
|
||||||
|
eq(userOpenTabs.userId, userId),
|
||||||
|
gt(userOpenTabs.updatedAt, updatedAfter),
|
||||||
|
),
|
||||||
|
)
|
||||||
|
.orderBy(userOpenTabs.tabOrder);
|
||||||
|
}
|
||||||
|
|
||||||
|
async upsertForUser(
|
||||||
|
userId: string,
|
||||||
|
input: OpenTabUpsertInput,
|
||||||
|
updatedAt = new Date().toISOString(),
|
||||||
|
): Promise<void> {
|
||||||
|
const existing = await this.findByIdForUser(userId, input.id);
|
||||||
|
if (existing) {
|
||||||
|
await this.context.drizzle
|
||||||
|
.update(userOpenTabs)
|
||||||
|
.set({
|
||||||
|
tabType: input.tabType,
|
||||||
|
hostId: input.hostId ?? null,
|
||||||
|
label: input.label,
|
||||||
|
tabOrder: input.tabOrder,
|
||||||
|
backendSessionId:
|
||||||
|
input.backendSessionId !== undefined
|
||||||
|
? input.backendSessionId
|
||||||
|
: existing.backendSessionId,
|
||||||
|
updatedAt,
|
||||||
|
})
|
||||||
|
.where(
|
||||||
|
and(eq(userOpenTabs.id, input.id), eq(userOpenTabs.userId, userId)),
|
||||||
|
);
|
||||||
|
await this.afterWrite();
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
|
||||||
|
await this.context.drizzle.insert(userOpenTabs).values({
|
||||||
|
id: input.id,
|
||||||
|
userId,
|
||||||
|
tabType: input.tabType,
|
||||||
|
hostId: input.hostId ?? null,
|
||||||
|
label: input.label,
|
||||||
|
tabOrder: input.tabOrder,
|
||||||
|
backendSessionId: input.backendSessionId ?? null,
|
||||||
|
updatedAt,
|
||||||
|
});
|
||||||
|
await this.afterWrite();
|
||||||
|
}
|
||||||
|
|
||||||
|
async replaceForUser(
|
||||||
|
userId: string,
|
||||||
|
tabs: OpenTabUpsertInput[],
|
||||||
|
updatedAt = new Date().toISOString(),
|
||||||
|
): Promise<void> {
|
||||||
|
await this.context.drizzle
|
||||||
|
.delete(userOpenTabs)
|
||||||
|
.where(eq(userOpenTabs.userId, userId));
|
||||||
|
|
||||||
|
if (tabs.length > 0) {
|
||||||
|
await this.context.drizzle.insert(userOpenTabs).values(
|
||||||
|
tabs.map((tab) => ({
|
||||||
|
id: tab.id,
|
||||||
|
userId,
|
||||||
|
tabType: tab.tabType,
|
||||||
|
hostId: tab.hostId ?? null,
|
||||||
|
label: tab.label,
|
||||||
|
tabOrder: tab.tabOrder,
|
||||||
|
backendSessionId: tab.backendSessionId ?? null,
|
||||||
|
updatedAt,
|
||||||
|
})),
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
await this.afterWrite();
|
||||||
|
}
|
||||||
|
|
||||||
|
async updateForUser(
|
||||||
|
userId: string,
|
||||||
|
id: string,
|
||||||
|
update: OpenTabUpdate,
|
||||||
|
updatedAt = new Date().toISOString(),
|
||||||
|
): Promise<boolean> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.update(userOpenTabs)
|
||||||
|
.set({ ...update, updatedAt })
|
||||||
|
.where(and(eq(userOpenTabs.id, id), eq(userOpenTabs.userId, userId)))
|
||||||
|
.returning({ id: userOpenTabs.id });
|
||||||
|
|
||||||
|
if (rows.length > 0) {
|
||||||
|
await this.afterWrite();
|
||||||
|
}
|
||||||
|
|
||||||
|
return rows.length > 0;
|
||||||
|
}
|
||||||
|
|
||||||
|
async deleteForUser(userId: string, id: string): Promise<number> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.delete(userOpenTabs)
|
||||||
|
.where(and(eq(userOpenTabs.id, id), eq(userOpenTabs.userId, userId)))
|
||||||
|
.returning({ id: userOpenTabs.id });
|
||||||
|
|
||||||
|
if (rows.length > 0) {
|
||||||
|
await this.afterWrite();
|
||||||
|
}
|
||||||
|
|
||||||
|
return rows.length;
|
||||||
|
}
|
||||||
|
|
||||||
|
async deleteByUserId(userId: string): Promise<number> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.delete(userOpenTabs)
|
||||||
|
.where(eq(userOpenTabs.userId, userId))
|
||||||
|
.returning({ id: userOpenTabs.id });
|
||||||
|
|
||||||
|
if (rows.length > 0) {
|
||||||
|
await this.afterWrite();
|
||||||
|
}
|
||||||
|
|
||||||
|
return rows.length;
|
||||||
|
}
|
||||||
|
|
||||||
|
private async findByIdForUser(
|
||||||
|
userId: string,
|
||||||
|
id: string,
|
||||||
|
): Promise<OpenTabRecord | null> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.select()
|
||||||
|
.from(userOpenTabs)
|
||||||
|
.where(and(eq(userOpenTabs.id, id), eq(userOpenTabs.userId, userId)))
|
||||||
|
.limit(1);
|
||||||
|
|
||||||
|
return rows[0] ?? null;
|
||||||
|
}
|
||||||
|
|
||||||
|
private async afterWrite(): Promise<void> {
|
||||||
|
await this.onWrite?.();
|
||||||
|
}
|
||||||
|
}
|
||||||
@@ -0,0 +1,125 @@
|
|||||||
|
import { and, eq } from "drizzle-orm";
|
||||||
|
import { opksshTokens } from "../db/schema.js";
|
||||||
|
import type { DatabaseContext } from "./database-context.js";
|
||||||
|
|
||||||
|
export type OpksshTokenRecord = typeof opksshTokens.$inferSelect;
|
||||||
|
|
||||||
|
export interface OpksshTokenUpsertInput {
|
||||||
|
userId: string;
|
||||||
|
hostId: number;
|
||||||
|
sshCert: string;
|
||||||
|
privateKey: string;
|
||||||
|
email?: string | null;
|
||||||
|
sub?: string | null;
|
||||||
|
issuer?: string | null;
|
||||||
|
audience?: string | null;
|
||||||
|
expiresAt: string;
|
||||||
|
createdAt?: string;
|
||||||
|
}
|
||||||
|
|
||||||
|
export class OpksshTokenRepository {
|
||||||
|
constructor(
|
||||||
|
private readonly context: DatabaseContext,
|
||||||
|
private readonly onWrite?: () => void | Promise<void>,
|
||||||
|
) {}
|
||||||
|
|
||||||
|
async upsert(input: OpksshTokenUpsertInput): Promise<void> {
|
||||||
|
const createdAt = input.createdAt ?? new Date().toISOString();
|
||||||
|
|
||||||
|
await this.context.drizzle
|
||||||
|
.insert(opksshTokens)
|
||||||
|
.values({
|
||||||
|
userId: input.userId,
|
||||||
|
hostId: input.hostId,
|
||||||
|
sshCert: input.sshCert,
|
||||||
|
privateKey: input.privateKey,
|
||||||
|
email: input.email,
|
||||||
|
sub: input.sub,
|
||||||
|
issuer: input.issuer,
|
||||||
|
audience: input.audience,
|
||||||
|
expiresAt: input.expiresAt,
|
||||||
|
})
|
||||||
|
.onConflictDoUpdate({
|
||||||
|
target: [opksshTokens.userId, opksshTokens.hostId],
|
||||||
|
set: {
|
||||||
|
sshCert: input.sshCert,
|
||||||
|
privateKey: input.privateKey,
|
||||||
|
email: input.email,
|
||||||
|
sub: input.sub,
|
||||||
|
issuer: input.issuer,
|
||||||
|
audience: input.audience,
|
||||||
|
expiresAt: input.expiresAt,
|
||||||
|
createdAt,
|
||||||
|
},
|
||||||
|
});
|
||||||
|
|
||||||
|
await this.afterWrite();
|
||||||
|
}
|
||||||
|
|
||||||
|
async findByUserAndHost(
|
||||||
|
userId: string,
|
||||||
|
hostId: number,
|
||||||
|
): Promise<OpksshTokenRecord | null> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.select()
|
||||||
|
.from(opksshTokens)
|
||||||
|
.where(
|
||||||
|
and(eq(opksshTokens.userId, userId), eq(opksshTokens.hostId, hostId)),
|
||||||
|
)
|
||||||
|
.limit(1);
|
||||||
|
|
||||||
|
return rows[0] ?? null;
|
||||||
|
}
|
||||||
|
|
||||||
|
async updateLastUsed(
|
||||||
|
userId: string,
|
||||||
|
hostId: number,
|
||||||
|
lastUsed = new Date().toISOString(),
|
||||||
|
): Promise<boolean> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.update(opksshTokens)
|
||||||
|
.set({ lastUsed })
|
||||||
|
.where(
|
||||||
|
and(eq(opksshTokens.userId, userId), eq(opksshTokens.hostId, hostId)),
|
||||||
|
)
|
||||||
|
.returning({ id: opksshTokens.id });
|
||||||
|
|
||||||
|
if (rows.length > 0) {
|
||||||
|
await this.afterWrite();
|
||||||
|
}
|
||||||
|
|
||||||
|
return rows.length > 0;
|
||||||
|
}
|
||||||
|
|
||||||
|
async deleteByUserAndHost(userId: string, hostId: number): Promise<boolean> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.delete(opksshTokens)
|
||||||
|
.where(
|
||||||
|
and(eq(opksshTokens.userId, userId), eq(opksshTokens.hostId, hostId)),
|
||||||
|
)
|
||||||
|
.returning({ id: opksshTokens.id });
|
||||||
|
|
||||||
|
if (rows.length > 0) {
|
||||||
|
await this.afterWrite();
|
||||||
|
}
|
||||||
|
|
||||||
|
return rows.length > 0;
|
||||||
|
}
|
||||||
|
|
||||||
|
async deleteByUserId(userId: string): Promise<number> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.delete(opksshTokens)
|
||||||
|
.where(eq(opksshTokens.userId, userId))
|
||||||
|
.returning({ id: opksshTokens.id });
|
||||||
|
|
||||||
|
if (rows.length > 0) {
|
||||||
|
await this.afterWrite();
|
||||||
|
}
|
||||||
|
|
||||||
|
return rows.length;
|
||||||
|
}
|
||||||
|
|
||||||
|
private async afterWrite(): Promise<void> {
|
||||||
|
await this.onWrite?.();
|
||||||
|
}
|
||||||
|
}
|
||||||
@@ -0,0 +1,721 @@
|
|||||||
|
import { and, desc, eq, gte, inArray, isNull, or, sql } from "drizzle-orm";
|
||||||
|
import {
|
||||||
|
hostAccess,
|
||||||
|
hosts,
|
||||||
|
roles,
|
||||||
|
sharedHostSecrets,
|
||||||
|
snippetAccess,
|
||||||
|
snippets,
|
||||||
|
users,
|
||||||
|
} from "../db/schema.js";
|
||||||
|
import type { DatabaseContext } from "./database-context.js";
|
||||||
|
|
||||||
|
export type RbacAccessTargetType = "user" | "role";
|
||||||
|
|
||||||
|
export interface RbacAccessListItem {
|
||||||
|
id: number;
|
||||||
|
targetType: RbacAccessTargetType;
|
||||||
|
userId: string | null;
|
||||||
|
roleId: number | null;
|
||||||
|
username: string | null;
|
||||||
|
roleName: string | null;
|
||||||
|
roleDisplayName: string | null;
|
||||||
|
grantedBy: string;
|
||||||
|
grantedByUsername: string | null;
|
||||||
|
permissionLevel: string;
|
||||||
|
expiresAt: string | null;
|
||||||
|
createdAt: string;
|
||||||
|
}
|
||||||
|
|
||||||
|
export interface RbacSharedHost {
|
||||||
|
id: number;
|
||||||
|
name: string | null;
|
||||||
|
ip: string;
|
||||||
|
port: number;
|
||||||
|
username: string;
|
||||||
|
folder: string | null;
|
||||||
|
tags: string | null;
|
||||||
|
permissionLevel: string;
|
||||||
|
expiresAt: string | null;
|
||||||
|
grantedBy: string;
|
||||||
|
ownerUsername: string;
|
||||||
|
}
|
||||||
|
|
||||||
|
export interface RbacSharedSnippet {
|
||||||
|
id: number;
|
||||||
|
name: string;
|
||||||
|
content: string;
|
||||||
|
description: string | null;
|
||||||
|
folder: string | null;
|
||||||
|
ownerUsername: string;
|
||||||
|
permissionLevel: string;
|
||||||
|
expiresAt: string | null;
|
||||||
|
}
|
||||||
|
|
||||||
|
export interface RbacVisibleSharedSnippet extends RbacSharedSnippet {
|
||||||
|
userId: string;
|
||||||
|
order: number;
|
||||||
|
createdAt: string;
|
||||||
|
updatedAt: string;
|
||||||
|
}
|
||||||
|
|
||||||
|
export interface RbacAccessibleSnippet extends RbacVisibleSharedSnippet {
|
||||||
|
hostFilter: string | null;
|
||||||
|
}
|
||||||
|
|
||||||
|
export interface RbacRoleHostAccessCredentialSource {
|
||||||
|
hostAccessId: number;
|
||||||
|
credentialId: number | null;
|
||||||
|
rdpCredentialId: number | null;
|
||||||
|
vncCredentialId: number | null;
|
||||||
|
telnetCredentialId: number | null;
|
||||||
|
hostId: number;
|
||||||
|
hostOwnerId: string;
|
||||||
|
}
|
||||||
|
|
||||||
|
export interface RbacVisibleHostAccessEntry {
|
||||||
|
hostId: number;
|
||||||
|
permissionLevel: string;
|
||||||
|
expiresAt: string | null;
|
||||||
|
}
|
||||||
|
|
||||||
|
export type RbacAccessTarget =
|
||||||
|
| { targetType: "user"; targetUserId: string }
|
||||||
|
| { targetType: "role"; targetRoleId: number };
|
||||||
|
|
||||||
|
export type UpsertHostAccessInput = RbacAccessTarget & {
|
||||||
|
hostId: number;
|
||||||
|
grantedBy: string;
|
||||||
|
permissionLevel: string;
|
||||||
|
expiresAt: string | null;
|
||||||
|
};
|
||||||
|
|
||||||
|
export type UpsertSnippetAccessInput = RbacAccessTarget & {
|
||||||
|
snippetId: number;
|
||||||
|
grantedBy: string;
|
||||||
|
expiresAt: string | null;
|
||||||
|
};
|
||||||
|
|
||||||
|
type RawAccessListItem = Omit<RbacAccessListItem, "targetType">;
|
||||||
|
|
||||||
|
function toAccessListItem(access: RawAccessListItem): RbacAccessListItem {
|
||||||
|
return {
|
||||||
|
...access,
|
||||||
|
targetType: access.userId ? "user" : "role",
|
||||||
|
};
|
||||||
|
}
|
||||||
|
|
||||||
|
export class RbacAccessRepository {
|
||||||
|
constructor(
|
||||||
|
private readonly context: DatabaseContext,
|
||||||
|
private readonly onWrite?: () => void | Promise<void>,
|
||||||
|
) {}
|
||||||
|
|
||||||
|
async listHostAccess(hostId: number): Promise<RbacAccessListItem[]> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.select({
|
||||||
|
id: hostAccess.id,
|
||||||
|
userId: hostAccess.userId,
|
||||||
|
roleId: hostAccess.roleId,
|
||||||
|
username: users.username,
|
||||||
|
roleName: roles.name,
|
||||||
|
roleDisplayName: roles.displayName,
|
||||||
|
grantedBy: hostAccess.grantedBy,
|
||||||
|
grantedByUsername: sql<
|
||||||
|
string | null
|
||||||
|
>`(SELECT username FROM users WHERE id = ${hostAccess.grantedBy})`,
|
||||||
|
permissionLevel: hostAccess.permissionLevel,
|
||||||
|
expiresAt: hostAccess.expiresAt,
|
||||||
|
createdAt: hostAccess.createdAt,
|
||||||
|
})
|
||||||
|
.from(hostAccess)
|
||||||
|
.leftJoin(users, eq(hostAccess.userId, users.id))
|
||||||
|
.leftJoin(roles, eq(hostAccess.roleId, roles.id))
|
||||||
|
.where(eq(hostAccess.hostId, hostId))
|
||||||
|
.orderBy(desc(hostAccess.createdAt));
|
||||||
|
|
||||||
|
return rows.map(toAccessListItem);
|
||||||
|
}
|
||||||
|
|
||||||
|
async upsertHostAccess(input: UpsertHostAccessInput): Promise<{
|
||||||
|
id: number;
|
||||||
|
created: boolean;
|
||||||
|
}> {
|
||||||
|
const existing = await this.findHostAccess(input.hostId, input);
|
||||||
|
|
||||||
|
if (existing) {
|
||||||
|
await this.context.drizzle
|
||||||
|
.update(hostAccess)
|
||||||
|
.set({
|
||||||
|
permissionLevel: input.permissionLevel,
|
||||||
|
expiresAt: input.expiresAt,
|
||||||
|
})
|
||||||
|
.where(eq(hostAccess.id, existing.id));
|
||||||
|
|
||||||
|
await this.afterWrite();
|
||||||
|
return { id: existing.id, created: false };
|
||||||
|
}
|
||||||
|
|
||||||
|
const result = await this.context.drizzle.insert(hostAccess).values({
|
||||||
|
hostId: input.hostId,
|
||||||
|
userId: input.targetType === "user" ? input.targetUserId : null,
|
||||||
|
roleId: input.targetType === "role" ? input.targetRoleId : null,
|
||||||
|
grantedBy: input.grantedBy,
|
||||||
|
permissionLevel: input.permissionLevel,
|
||||||
|
expiresAt: input.expiresAt,
|
||||||
|
});
|
||||||
|
|
||||||
|
await this.afterWrite();
|
||||||
|
return { id: Number(result.lastInsertRowid), created: true };
|
||||||
|
}
|
||||||
|
|
||||||
|
async revokeHostAccess(accessId: number, hostId: number): Promise<void> {
|
||||||
|
await this.context.drizzle
|
||||||
|
.delete(hostAccess)
|
||||||
|
.where(and(eq(hostAccess.id, accessId), eq(hostAccess.hostId, hostId)));
|
||||||
|
await this.afterWrite();
|
||||||
|
}
|
||||||
|
|
||||||
|
async deleteHostAccessForHost(hostId: number): Promise<number> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.delete(hostAccess)
|
||||||
|
.where(eq(hostAccess.hostId, hostId))
|
||||||
|
.returning({ id: hostAccess.id });
|
||||||
|
|
||||||
|
if (rows.length > 0) {
|
||||||
|
await this.afterWrite();
|
||||||
|
}
|
||||||
|
|
||||||
|
return rows.length;
|
||||||
|
}
|
||||||
|
|
||||||
|
async deleteHostAccessForHosts(hostIds: number[]): Promise<number> {
|
||||||
|
if (hostIds.length === 0) {
|
||||||
|
return 0;
|
||||||
|
}
|
||||||
|
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.delete(hostAccess)
|
||||||
|
.where(inArray(hostAccess.hostId, hostIds))
|
||||||
|
.returning({ id: hostAccess.id });
|
||||||
|
|
||||||
|
if (rows.length > 0) {
|
||||||
|
await this.afterWrite();
|
||||||
|
}
|
||||||
|
|
||||||
|
return rows.length;
|
||||||
|
}
|
||||||
|
|
||||||
|
async deleteHostAccessForUserReferences(userId: string): Promise<number> {
|
||||||
|
const directRows = await this.context.drizzle
|
||||||
|
.delete(hostAccess)
|
||||||
|
.where(eq(hostAccess.userId, userId))
|
||||||
|
.returning({ id: hostAccess.id });
|
||||||
|
|
||||||
|
const grantedRows = await this.context.drizzle
|
||||||
|
.delete(hostAccess)
|
||||||
|
.where(eq(hostAccess.grantedBy, userId))
|
||||||
|
.returning({ id: hostAccess.id });
|
||||||
|
|
||||||
|
const deletedCount = directRows.length + grantedRows.length;
|
||||||
|
if (deletedCount > 0) {
|
||||||
|
await this.afterWrite();
|
||||||
|
}
|
||||||
|
|
||||||
|
return deletedCount;
|
||||||
|
}
|
||||||
|
|
||||||
|
async findDirectHostAccess(
|
||||||
|
hostId: number,
|
||||||
|
userId: string,
|
||||||
|
): Promise<typeof hostAccess.$inferSelect | null> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.select()
|
||||||
|
.from(hostAccess)
|
||||||
|
.where(and(eq(hostAccess.hostId, hostId), eq(hostAccess.userId, userId)))
|
||||||
|
.limit(1);
|
||||||
|
|
||||||
|
return rows[0] ?? null;
|
||||||
|
}
|
||||||
|
|
||||||
|
async updateHostAccessOverrideCredential(
|
||||||
|
accessId: number,
|
||||||
|
credentialId: number | null,
|
||||||
|
): Promise<void> {
|
||||||
|
await this.context.drizzle
|
||||||
|
.update(hostAccess)
|
||||||
|
.set({ overrideCredentialId: credentialId })
|
||||||
|
.where(eq(hostAccess.id, accessId));
|
||||||
|
await this.afterWrite();
|
||||||
|
}
|
||||||
|
|
||||||
|
async listSnippetAccess(snippetId: number): Promise<RbacAccessListItem[]> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.select({
|
||||||
|
id: snippetAccess.id,
|
||||||
|
userId: snippetAccess.userId,
|
||||||
|
roleId: snippetAccess.roleId,
|
||||||
|
username: users.username,
|
||||||
|
roleName: roles.name,
|
||||||
|
roleDisplayName: roles.displayName,
|
||||||
|
grantedBy: snippetAccess.grantedBy,
|
||||||
|
grantedByUsername: sql<
|
||||||
|
string | null
|
||||||
|
>`(SELECT username FROM users WHERE id = ${snippetAccess.grantedBy})`,
|
||||||
|
permissionLevel: snippetAccess.permissionLevel,
|
||||||
|
expiresAt: snippetAccess.expiresAt,
|
||||||
|
createdAt: snippetAccess.createdAt,
|
||||||
|
})
|
||||||
|
.from(snippetAccess)
|
||||||
|
.leftJoin(users, eq(snippetAccess.userId, users.id))
|
||||||
|
.leftJoin(roles, eq(snippetAccess.roleId, roles.id))
|
||||||
|
.where(eq(snippetAccess.snippetId, snippetId))
|
||||||
|
.orderBy(desc(snippetAccess.createdAt));
|
||||||
|
|
||||||
|
return rows.map(toAccessListItem);
|
||||||
|
}
|
||||||
|
|
||||||
|
async upsertSnippetAccess(input: UpsertSnippetAccessInput): Promise<{
|
||||||
|
id: number;
|
||||||
|
created: boolean;
|
||||||
|
}> {
|
||||||
|
const existing = await this.findSnippetAccess(input.snippetId, input);
|
||||||
|
|
||||||
|
if (existing) {
|
||||||
|
await this.context.drizzle
|
||||||
|
.update(snippetAccess)
|
||||||
|
.set({ expiresAt: input.expiresAt })
|
||||||
|
.where(eq(snippetAccess.id, existing.id));
|
||||||
|
|
||||||
|
await this.afterWrite();
|
||||||
|
return { id: existing.id, created: false };
|
||||||
|
}
|
||||||
|
|
||||||
|
const result = await this.context.drizzle.insert(snippetAccess).values({
|
||||||
|
snippetId: input.snippetId,
|
||||||
|
userId: input.targetType === "user" ? input.targetUserId : null,
|
||||||
|
roleId: input.targetType === "role" ? input.targetRoleId : null,
|
||||||
|
grantedBy: input.grantedBy,
|
||||||
|
permissionLevel: "view",
|
||||||
|
expiresAt: input.expiresAt,
|
||||||
|
});
|
||||||
|
|
||||||
|
await this.afterWrite();
|
||||||
|
return { id: Number(result.lastInsertRowid), created: true };
|
||||||
|
}
|
||||||
|
|
||||||
|
async revokeSnippetAccess(
|
||||||
|
accessId: number,
|
||||||
|
snippetId: number,
|
||||||
|
): Promise<void> {
|
||||||
|
await this.context.drizzle
|
||||||
|
.delete(snippetAccess)
|
||||||
|
.where(
|
||||||
|
and(
|
||||||
|
eq(snippetAccess.id, accessId),
|
||||||
|
eq(snippetAccess.snippetId, snippetId),
|
||||||
|
),
|
||||||
|
);
|
||||||
|
await this.afterWrite();
|
||||||
|
}
|
||||||
|
|
||||||
|
async listSharedHosts(
|
||||||
|
userId: string,
|
||||||
|
roleIds: number[],
|
||||||
|
now = new Date().toISOString(),
|
||||||
|
): Promise<RbacSharedHost[]> {
|
||||||
|
return this.context.drizzle
|
||||||
|
.select({
|
||||||
|
id: hosts.id,
|
||||||
|
name: hosts.name,
|
||||||
|
ip: hosts.ip,
|
||||||
|
port: hosts.port,
|
||||||
|
username: hosts.username,
|
||||||
|
folder: hosts.folder,
|
||||||
|
tags: hosts.tags,
|
||||||
|
permissionLevel: hostAccess.permissionLevel,
|
||||||
|
expiresAt: hostAccess.expiresAt,
|
||||||
|
grantedBy: hostAccess.grantedBy,
|
||||||
|
ownerUsername: users.username,
|
||||||
|
})
|
||||||
|
.from(hostAccess)
|
||||||
|
.innerJoin(hosts, eq(hostAccess.hostId, hosts.id))
|
||||||
|
.innerJoin(users, eq(hosts.userId, users.id))
|
||||||
|
.where(
|
||||||
|
and(
|
||||||
|
this.userOrRoleHostAccessFilter(userId, roleIds),
|
||||||
|
or(isNull(hostAccess.expiresAt), gte(hostAccess.expiresAt, now)),
|
||||||
|
),
|
||||||
|
)
|
||||||
|
.orderBy(desc(hostAccess.createdAt));
|
||||||
|
}
|
||||||
|
|
||||||
|
async listVisibleHostAccessEntries(
|
||||||
|
userId: string,
|
||||||
|
roleIds: number[],
|
||||||
|
now = new Date().toISOString(),
|
||||||
|
): Promise<RbacVisibleHostAccessEntry[]> {
|
||||||
|
return this.context.drizzle
|
||||||
|
.select({
|
||||||
|
hostId: hostAccess.hostId,
|
||||||
|
permissionLevel: hostAccess.permissionLevel,
|
||||||
|
expiresAt: hostAccess.expiresAt,
|
||||||
|
})
|
||||||
|
.from(hostAccess)
|
||||||
|
.where(
|
||||||
|
and(
|
||||||
|
this.userOrRoleHostAccessFilter(userId, roleIds),
|
||||||
|
or(isNull(hostAccess.expiresAt), gte(hostAccess.expiresAt, now)),
|
||||||
|
),
|
||||||
|
)
|
||||||
|
.orderBy(desc(hostAccess.createdAt));
|
||||||
|
}
|
||||||
|
|
||||||
|
async listSharedSnippets(
|
||||||
|
userId: string,
|
||||||
|
roleIds: number[],
|
||||||
|
now = new Date().toISOString(),
|
||||||
|
): Promise<RbacSharedSnippet[]> {
|
||||||
|
const directShared = await this.context.drizzle
|
||||||
|
.select({
|
||||||
|
id: snippets.id,
|
||||||
|
name: snippets.name,
|
||||||
|
content: snippets.content,
|
||||||
|
description: snippets.description,
|
||||||
|
folder: snippets.folder,
|
||||||
|
ownerUsername: users.username,
|
||||||
|
permissionLevel: snippetAccess.permissionLevel,
|
||||||
|
expiresAt: snippetAccess.expiresAt,
|
||||||
|
})
|
||||||
|
.from(snippetAccess)
|
||||||
|
.innerJoin(snippets, eq(snippetAccess.snippetId, snippets.id))
|
||||||
|
.innerJoin(users, eq(snippets.userId, users.id))
|
||||||
|
.where(
|
||||||
|
and(
|
||||||
|
eq(snippetAccess.userId, userId),
|
||||||
|
or(
|
||||||
|
isNull(snippetAccess.expiresAt),
|
||||||
|
gte(snippetAccess.expiresAt, now),
|
||||||
|
),
|
||||||
|
),
|
||||||
|
);
|
||||||
|
|
||||||
|
if (roleIds.length === 0) {
|
||||||
|
return directShared;
|
||||||
|
}
|
||||||
|
|
||||||
|
const directIds = new Set(directShared.map((snippet) => snippet.id));
|
||||||
|
const roleShared = await this.context.drizzle
|
||||||
|
.select({
|
||||||
|
id: snippets.id,
|
||||||
|
name: snippets.name,
|
||||||
|
content: snippets.content,
|
||||||
|
description: snippets.description,
|
||||||
|
folder: snippets.folder,
|
||||||
|
ownerUsername: users.username,
|
||||||
|
permissionLevel: snippetAccess.permissionLevel,
|
||||||
|
expiresAt: snippetAccess.expiresAt,
|
||||||
|
})
|
||||||
|
.from(snippetAccess)
|
||||||
|
.innerJoin(snippets, eq(snippetAccess.snippetId, snippets.id))
|
||||||
|
.innerJoin(users, eq(snippets.userId, users.id))
|
||||||
|
.where(
|
||||||
|
and(
|
||||||
|
or(
|
||||||
|
isNull(snippetAccess.expiresAt),
|
||||||
|
gte(snippetAccess.expiresAt, now),
|
||||||
|
),
|
||||||
|
inArray(snippetAccess.roleId, roleIds),
|
||||||
|
),
|
||||||
|
);
|
||||||
|
|
||||||
|
return [
|
||||||
|
...directShared,
|
||||||
|
...roleShared.filter((snippet) => !directIds.has(snippet.id)),
|
||||||
|
];
|
||||||
|
}
|
||||||
|
|
||||||
|
async listVisibleSharedSnippets(
|
||||||
|
userId: string,
|
||||||
|
roleIds: number[],
|
||||||
|
now = new Date().toISOString(),
|
||||||
|
): Promise<RbacVisibleSharedSnippet[]> {
|
||||||
|
return this.context.drizzle
|
||||||
|
.select({
|
||||||
|
id: snippets.id,
|
||||||
|
userId: snippets.userId,
|
||||||
|
name: snippets.name,
|
||||||
|
content: snippets.content,
|
||||||
|
description: snippets.description,
|
||||||
|
folder: snippets.folder,
|
||||||
|
order: snippets.order,
|
||||||
|
createdAt: snippets.createdAt,
|
||||||
|
updatedAt: snippets.updatedAt,
|
||||||
|
ownerUsername: users.username,
|
||||||
|
permissionLevel: snippetAccess.permissionLevel,
|
||||||
|
expiresAt: snippetAccess.expiresAt,
|
||||||
|
})
|
||||||
|
.from(snippetAccess)
|
||||||
|
.innerJoin(snippets, eq(snippetAccess.snippetId, snippets.id))
|
||||||
|
.innerJoin(users, eq(snippets.userId, users.id))
|
||||||
|
.where(
|
||||||
|
and(
|
||||||
|
this.userOrRoleSnippetAccessFilter(userId, roleIds),
|
||||||
|
or(
|
||||||
|
isNull(snippetAccess.expiresAt),
|
||||||
|
gte(snippetAccess.expiresAt, now),
|
||||||
|
),
|
||||||
|
),
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
async findAccessibleSharedSnippet(
|
||||||
|
snippetId: number,
|
||||||
|
userId: string,
|
||||||
|
roleIds: number[],
|
||||||
|
now = new Date().toISOString(),
|
||||||
|
): Promise<RbacAccessibleSnippet | null> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.select({
|
||||||
|
id: snippets.id,
|
||||||
|
userId: snippets.userId,
|
||||||
|
name: snippets.name,
|
||||||
|
content: snippets.content,
|
||||||
|
description: snippets.description,
|
||||||
|
folder: snippets.folder,
|
||||||
|
order: snippets.order,
|
||||||
|
createdAt: snippets.createdAt,
|
||||||
|
updatedAt: snippets.updatedAt,
|
||||||
|
hostFilter: snippets.hostFilter,
|
||||||
|
ownerUsername: users.username,
|
||||||
|
permissionLevel: snippetAccess.permissionLevel,
|
||||||
|
expiresAt: snippetAccess.expiresAt,
|
||||||
|
})
|
||||||
|
.from(snippetAccess)
|
||||||
|
.innerJoin(snippets, eq(snippetAccess.snippetId, snippets.id))
|
||||||
|
.innerJoin(users, eq(snippets.userId, users.id))
|
||||||
|
.where(
|
||||||
|
and(
|
||||||
|
eq(snippetAccess.snippetId, snippetId),
|
||||||
|
this.userOrRoleSnippetAccessFilter(userId, roleIds),
|
||||||
|
or(
|
||||||
|
isNull(snippetAccess.expiresAt),
|
||||||
|
gte(snippetAccess.expiresAt, now),
|
||||||
|
),
|
||||||
|
),
|
||||||
|
)
|
||||||
|
.limit(1);
|
||||||
|
|
||||||
|
return rows[0] ?? null;
|
||||||
|
}
|
||||||
|
|
||||||
|
async deleteExpiredHostAccess(
|
||||||
|
now = new Date().toISOString(),
|
||||||
|
): Promise<number> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.delete(hostAccess)
|
||||||
|
.where(
|
||||||
|
and(
|
||||||
|
sql`${hostAccess.expiresAt} IS NOT NULL`,
|
||||||
|
sql`${hostAccess.expiresAt} <= ${now}`,
|
||||||
|
),
|
||||||
|
)
|
||||||
|
.returning({ id: hostAccess.id });
|
||||||
|
|
||||||
|
if (rows.length > 0) {
|
||||||
|
await this.afterWrite();
|
||||||
|
}
|
||||||
|
|
||||||
|
return rows.length;
|
||||||
|
}
|
||||||
|
|
||||||
|
async findActiveHostAccess(
|
||||||
|
hostId: number,
|
||||||
|
userId: string,
|
||||||
|
roleIds: number[],
|
||||||
|
now = new Date().toISOString(),
|
||||||
|
): Promise<typeof hostAccess.$inferSelect | null> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.select()
|
||||||
|
.from(hostAccess)
|
||||||
|
.where(
|
||||||
|
and(
|
||||||
|
eq(hostAccess.hostId, hostId),
|
||||||
|
this.userOrRoleHostAccessFilter(userId, roleIds),
|
||||||
|
or(isNull(hostAccess.expiresAt), gte(hostAccess.expiresAt, now)),
|
||||||
|
),
|
||||||
|
)
|
||||||
|
.limit(1);
|
||||||
|
|
||||||
|
return rows[0] ?? null;
|
||||||
|
}
|
||||||
|
|
||||||
|
async touchHostAccess(
|
||||||
|
accessId: number,
|
||||||
|
lastAccessedAt = new Date().toISOString(),
|
||||||
|
): Promise<void> {
|
||||||
|
await this.context.drizzle
|
||||||
|
.update(hostAccess)
|
||||||
|
.set({ lastAccessedAt })
|
||||||
|
.where(eq(hostAccess.id, accessId));
|
||||||
|
await this.afterWrite();
|
||||||
|
}
|
||||||
|
|
||||||
|
async listRoleHostAccessCredentialSources(
|
||||||
|
roleId: number,
|
||||||
|
): Promise<RbacRoleHostAccessCredentialSource[]> {
|
||||||
|
return this.context.drizzle
|
||||||
|
.select({
|
||||||
|
hostAccessId: hostAccess.id,
|
||||||
|
credentialId: hosts.credentialId,
|
||||||
|
rdpCredentialId: hosts.rdpCredentialId,
|
||||||
|
vncCredentialId: hosts.vncCredentialId,
|
||||||
|
telnetCredentialId: hosts.telnetCredentialId,
|
||||||
|
hostId: hosts.id,
|
||||||
|
hostOwnerId: hosts.userId,
|
||||||
|
})
|
||||||
|
.from(hostAccess)
|
||||||
|
.innerJoin(hosts, eq(hostAccess.hostId, hosts.id))
|
||||||
|
.where(eq(hostAccess.roleId, roleId));
|
||||||
|
}
|
||||||
|
|
||||||
|
async findSharedSecretForHostUserProtocol(
|
||||||
|
hostId: number,
|
||||||
|
userId: string,
|
||||||
|
protocol: string,
|
||||||
|
): Promise<typeof sharedHostSecrets.$inferSelect | null> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.select({
|
||||||
|
secret: sharedHostSecrets,
|
||||||
|
})
|
||||||
|
.from(sharedHostSecrets)
|
||||||
|
.innerJoin(hostAccess, eq(sharedHostSecrets.hostAccessId, hostAccess.id))
|
||||||
|
.where(
|
||||||
|
and(
|
||||||
|
eq(hostAccess.hostId, hostId),
|
||||||
|
eq(sharedHostSecrets.targetUserId, userId),
|
||||||
|
eq(sharedHostSecrets.protocol, protocol),
|
||||||
|
),
|
||||||
|
)
|
||||||
|
.limit(1);
|
||||||
|
|
||||||
|
return rows[0]?.secret ?? null;
|
||||||
|
}
|
||||||
|
|
||||||
|
async listActiveHostAccessGrants(
|
||||||
|
hostId: number,
|
||||||
|
now = new Date().toISOString(),
|
||||||
|
): Promise<(typeof hostAccess.$inferSelect)[]> {
|
||||||
|
return this.context.drizzle
|
||||||
|
.select()
|
||||||
|
.from(hostAccess)
|
||||||
|
.where(
|
||||||
|
and(
|
||||||
|
eq(hostAccess.hostId, hostId),
|
||||||
|
or(isNull(hostAccess.expiresAt), gte(hostAccess.expiresAt, now)),
|
||||||
|
),
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
async findHostAccessById(
|
||||||
|
accessId: number,
|
||||||
|
hostId: number,
|
||||||
|
): Promise<typeof hostAccess.$inferSelect | null> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.select()
|
||||||
|
.from(hostAccess)
|
||||||
|
.where(and(eq(hostAccess.id, accessId), eq(hostAccess.hostId, hostId)))
|
||||||
|
.limit(1);
|
||||||
|
|
||||||
|
return rows[0] ?? null;
|
||||||
|
}
|
||||||
|
|
||||||
|
async updateHostAccessGrant(
|
||||||
|
accessId: number,
|
||||||
|
hostId: number,
|
||||||
|
update: { permissionLevel?: string; expiresAt?: string | null },
|
||||||
|
): Promise<boolean> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.update(hostAccess)
|
||||||
|
.set(update)
|
||||||
|
.where(and(eq(hostAccess.id, accessId), eq(hostAccess.hostId, hostId)))
|
||||||
|
.returning({ id: hostAccess.id });
|
||||||
|
|
||||||
|
if (rows.length > 0) {
|
||||||
|
await this.afterWrite();
|
||||||
|
}
|
||||||
|
|
||||||
|
return rows.length > 0;
|
||||||
|
}
|
||||||
|
|
||||||
|
async findHostAccessOwnerId(hostAccessId: number): Promise<string | null> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.select({ ownerId: hosts.userId })
|
||||||
|
.from(hostAccess)
|
||||||
|
.innerJoin(hosts, eq(hostAccess.hostId, hosts.id))
|
||||||
|
.where(eq(hostAccess.id, hostAccessId))
|
||||||
|
.limit(1);
|
||||||
|
|
||||||
|
return rows[0]?.ownerId ?? null;
|
||||||
|
}
|
||||||
|
|
||||||
|
private userOrRoleHostAccessFilter(userId: string, roleIds: number[]) {
|
||||||
|
if (roleIds.length === 0) {
|
||||||
|
return eq(hostAccess.userId, userId);
|
||||||
|
}
|
||||||
|
|
||||||
|
return or(
|
||||||
|
eq(hostAccess.userId, userId),
|
||||||
|
inArray(hostAccess.roleId, roleIds),
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
private userOrRoleSnippetAccessFilter(userId: string, roleIds: number[]) {
|
||||||
|
if (roleIds.length === 0) {
|
||||||
|
return eq(snippetAccess.userId, userId);
|
||||||
|
}
|
||||||
|
|
||||||
|
return or(
|
||||||
|
eq(snippetAccess.userId, userId),
|
||||||
|
inArray(snippetAccess.roleId, roleIds),
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
private async findHostAccess(hostId: number, target: RbacAccessTarget) {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.select()
|
||||||
|
.from(hostAccess)
|
||||||
|
.where(
|
||||||
|
and(
|
||||||
|
eq(hostAccess.hostId, hostId),
|
||||||
|
target.targetType === "user"
|
||||||
|
? eq(hostAccess.userId, target.targetUserId)
|
||||||
|
: eq(hostAccess.roleId, target.targetRoleId),
|
||||||
|
),
|
||||||
|
)
|
||||||
|
.limit(1);
|
||||||
|
|
||||||
|
return rows[0] ?? null;
|
||||||
|
}
|
||||||
|
|
||||||
|
private async findSnippetAccess(snippetId: number, target: RbacAccessTarget) {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.select()
|
||||||
|
.from(snippetAccess)
|
||||||
|
.where(
|
||||||
|
and(
|
||||||
|
eq(snippetAccess.snippetId, snippetId),
|
||||||
|
target.targetType === "user"
|
||||||
|
? eq(snippetAccess.userId, target.targetUserId)
|
||||||
|
: eq(snippetAccess.roleId, target.targetRoleId),
|
||||||
|
),
|
||||||
|
)
|
||||||
|
.limit(1);
|
||||||
|
|
||||||
|
return rows[0] ?? null;
|
||||||
|
}
|
||||||
|
|
||||||
|
private async afterWrite(): Promise<void> {
|
||||||
|
await this.onWrite?.();
|
||||||
|
}
|
||||||
|
}
|
||||||
@@ -0,0 +1,112 @@
|
|||||||
|
import { desc, eq, inArray } from "drizzle-orm";
|
||||||
|
import { recentActivity } from "../db/schema.js";
|
||||||
|
import type { DatabaseContext } from "./database-context.js";
|
||||||
|
|
||||||
|
export type RecentActivityRecord = typeof recentActivity.$inferSelect;
|
||||||
|
export type NewRecentActivityRecord = typeof recentActivity.$inferInsert;
|
||||||
|
|
||||||
|
export class RecentActivityRepository {
|
||||||
|
constructor(
|
||||||
|
private readonly context: DatabaseContext,
|
||||||
|
private readonly onWrite?: () => void | Promise<void>,
|
||||||
|
) {}
|
||||||
|
|
||||||
|
async listByUserId(
|
||||||
|
userId: string,
|
||||||
|
limit: number,
|
||||||
|
): Promise<RecentActivityRecord[]> {
|
||||||
|
return this.context.drizzle
|
||||||
|
.select()
|
||||||
|
.from(recentActivity)
|
||||||
|
.where(eq(recentActivity.userId, userId))
|
||||||
|
.orderBy(desc(recentActivity.timestamp))
|
||||||
|
.limit(limit);
|
||||||
|
}
|
||||||
|
|
||||||
|
async create(
|
||||||
|
activity: NewRecentActivityRecord,
|
||||||
|
): Promise<RecentActivityRecord> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.insert(recentActivity)
|
||||||
|
.values(activity)
|
||||||
|
.returning();
|
||||||
|
|
||||||
|
await this.afterWrite();
|
||||||
|
return rows[0];
|
||||||
|
}
|
||||||
|
|
||||||
|
async trimUserActivity(userId: string, keepCount: number): Promise<number> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.select({ id: recentActivity.id })
|
||||||
|
.from(recentActivity)
|
||||||
|
.where(eq(recentActivity.userId, userId))
|
||||||
|
.orderBy(desc(recentActivity.timestamp));
|
||||||
|
|
||||||
|
const idsToDelete = rows
|
||||||
|
.slice(keepCount)
|
||||||
|
.map((row) => row.id)
|
||||||
|
.filter((id) => typeof id === "number");
|
||||||
|
|
||||||
|
if (idsToDelete.length === 0) {
|
||||||
|
return 0;
|
||||||
|
}
|
||||||
|
|
||||||
|
const deletedRows = await this.context.drizzle
|
||||||
|
.delete(recentActivity)
|
||||||
|
.where(inArray(recentActivity.id, idsToDelete))
|
||||||
|
.returning({ id: recentActivity.id });
|
||||||
|
|
||||||
|
if (deletedRows.length > 0) {
|
||||||
|
await this.afterWrite();
|
||||||
|
}
|
||||||
|
|
||||||
|
return deletedRows.length;
|
||||||
|
}
|
||||||
|
|
||||||
|
async deleteByUserId(userId: string): Promise<number> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.delete(recentActivity)
|
||||||
|
.where(eq(recentActivity.userId, userId))
|
||||||
|
.returning({ id: recentActivity.id });
|
||||||
|
|
||||||
|
if (rows.length > 0) {
|
||||||
|
await this.afterWrite();
|
||||||
|
}
|
||||||
|
|
||||||
|
return rows.length;
|
||||||
|
}
|
||||||
|
|
||||||
|
async deleteByHostId(hostId: number): Promise<number> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.delete(recentActivity)
|
||||||
|
.where(eq(recentActivity.hostId, hostId))
|
||||||
|
.returning({ id: recentActivity.id });
|
||||||
|
|
||||||
|
if (rows.length > 0) {
|
||||||
|
await this.afterWrite();
|
||||||
|
}
|
||||||
|
|
||||||
|
return rows.length;
|
||||||
|
}
|
||||||
|
|
||||||
|
async deleteByHostIds(hostIds: number[]): Promise<number> {
|
||||||
|
if (hostIds.length === 0) {
|
||||||
|
return 0;
|
||||||
|
}
|
||||||
|
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.delete(recentActivity)
|
||||||
|
.where(inArray(recentActivity.hostId, hostIds))
|
||||||
|
.returning({ id: recentActivity.id });
|
||||||
|
|
||||||
|
if (rows.length > 0) {
|
||||||
|
await this.afterWrite();
|
||||||
|
}
|
||||||
|
|
||||||
|
return rows.length;
|
||||||
|
}
|
||||||
|
|
||||||
|
private async afterWrite(): Promise<void> {
|
||||||
|
await this.onWrite?.();
|
||||||
|
}
|
||||||
|
}
|
||||||
@@ -0,0 +1,276 @@
|
|||||||
|
import { and, eq, inArray } from "drizzle-orm";
|
||||||
|
import { hostAccess, roles, userRoles } from "../db/schema.js";
|
||||||
|
import type { DatabaseContext } from "./database-context.js";
|
||||||
|
|
||||||
|
export type RoleRecord = typeof roles.$inferSelect;
|
||||||
|
export type NewRoleRecord = typeof roles.$inferInsert;
|
||||||
|
export type RoleUpdate = Pick<
|
||||||
|
Partial<NewRoleRecord>,
|
||||||
|
"displayName" | "description" | "updatedAt"
|
||||||
|
>;
|
||||||
|
|
||||||
|
export type UserRoleWithRole = {
|
||||||
|
id: number;
|
||||||
|
roleId: number;
|
||||||
|
roleName: string;
|
||||||
|
roleDisplayName: string;
|
||||||
|
description: string | null;
|
||||||
|
isSystem: boolean;
|
||||||
|
grantedAt: string;
|
||||||
|
};
|
||||||
|
|
||||||
|
export type UserRolePermissionRecord = {
|
||||||
|
permissions: string | null;
|
||||||
|
};
|
||||||
|
|
||||||
|
export type UserRoleNameSwitchResult = {
|
||||||
|
added: boolean;
|
||||||
|
removed: boolean;
|
||||||
|
};
|
||||||
|
|
||||||
|
export class RoleRepository {
|
||||||
|
constructor(
|
||||||
|
private readonly context: DatabaseContext,
|
||||||
|
private readonly onWrite?: () => void | Promise<void>,
|
||||||
|
) {}
|
||||||
|
|
||||||
|
async listRoles(): Promise<RoleRecord[]> {
|
||||||
|
return this.context.drizzle
|
||||||
|
.select()
|
||||||
|
.from(roles)
|
||||||
|
.orderBy(roles.isSystem, roles.name);
|
||||||
|
}
|
||||||
|
|
||||||
|
async findRoleById(id: number): Promise<RoleRecord | null> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.select()
|
||||||
|
.from(roles)
|
||||||
|
.where(eq(roles.id, id))
|
||||||
|
.limit(1);
|
||||||
|
|
||||||
|
return rows[0] ?? null;
|
||||||
|
}
|
||||||
|
|
||||||
|
async findRoleByName(name: string): Promise<RoleRecord | null> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.select()
|
||||||
|
.from(roles)
|
||||||
|
.where(eq(roles.name, name))
|
||||||
|
.limit(1);
|
||||||
|
|
||||||
|
return rows[0] ?? null;
|
||||||
|
}
|
||||||
|
|
||||||
|
async createRole(role: NewRoleRecord): Promise<number> {
|
||||||
|
const result = await this.context.drizzle.insert(roles).values(role);
|
||||||
|
await this.afterWrite();
|
||||||
|
return Number(result.lastInsertRowid);
|
||||||
|
}
|
||||||
|
|
||||||
|
async updateRole(id: number, update: RoleUpdate): Promise<boolean> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.update(roles)
|
||||||
|
.set(update)
|
||||||
|
.where(eq(roles.id, id))
|
||||||
|
.returning({ id: roles.id });
|
||||||
|
|
||||||
|
await this.afterWrite();
|
||||||
|
return rows.length > 0;
|
||||||
|
}
|
||||||
|
|
||||||
|
async deleteRole(id: number): Promise<{ deletedUserIds: string[] }> {
|
||||||
|
const deletedUserRoles = await this.context.drizzle
|
||||||
|
.delete(userRoles)
|
||||||
|
.where(eq(userRoles.roleId, id))
|
||||||
|
.returning({ userId: userRoles.userId });
|
||||||
|
|
||||||
|
await this.context.drizzle
|
||||||
|
.delete(hostAccess)
|
||||||
|
.where(eq(hostAccess.roleId, id));
|
||||||
|
|
||||||
|
await this.context.drizzle.delete(roles).where(eq(roles.id, id));
|
||||||
|
await this.afterWrite();
|
||||||
|
|
||||||
|
return {
|
||||||
|
deletedUserIds: deletedUserRoles.map((row) => row.userId),
|
||||||
|
};
|
||||||
|
}
|
||||||
|
|
||||||
|
async findUserRole(
|
||||||
|
userId: string,
|
||||||
|
roleId: number,
|
||||||
|
): Promise<typeof userRoles.$inferSelect | null> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.select()
|
||||||
|
.from(userRoles)
|
||||||
|
.where(and(eq(userRoles.userId, userId), eq(userRoles.roleId, roleId)))
|
||||||
|
.limit(1);
|
||||||
|
|
||||||
|
return rows[0] ?? null;
|
||||||
|
}
|
||||||
|
|
||||||
|
async assignRoleToUser(input: {
|
||||||
|
userId: string;
|
||||||
|
roleId: number;
|
||||||
|
grantedBy: string;
|
||||||
|
}): Promise<void> {
|
||||||
|
await this.context.drizzle.insert(userRoles).values(input);
|
||||||
|
await this.afterWrite();
|
||||||
|
}
|
||||||
|
|
||||||
|
async assignRoleNameToUser(input: {
|
||||||
|
userId: string;
|
||||||
|
roleName: string;
|
||||||
|
grantedBy: string;
|
||||||
|
}): Promise<boolean> {
|
||||||
|
const role = await this.findRoleByName(input.roleName);
|
||||||
|
if (!role) {
|
||||||
|
return false;
|
||||||
|
}
|
||||||
|
|
||||||
|
await this.context.drizzle.insert(userRoles).values({
|
||||||
|
userId: input.userId,
|
||||||
|
roleId: role.id,
|
||||||
|
grantedBy: input.grantedBy,
|
||||||
|
});
|
||||||
|
await this.afterWrite();
|
||||||
|
return true;
|
||||||
|
}
|
||||||
|
|
||||||
|
async switchUserRoleName(input: {
|
||||||
|
userId: string;
|
||||||
|
addRoleName: string;
|
||||||
|
removeRoleName: string;
|
||||||
|
grantedBy: string;
|
||||||
|
}): Promise<UserRoleNameSwitchResult> {
|
||||||
|
const [addRole, removeRole] = await Promise.all([
|
||||||
|
this.findRoleByName(input.addRoleName),
|
||||||
|
this.findRoleByName(input.removeRoleName),
|
||||||
|
]);
|
||||||
|
|
||||||
|
let added = false;
|
||||||
|
let removed = false;
|
||||||
|
|
||||||
|
if (addRole) {
|
||||||
|
await this.context.drizzle
|
||||||
|
.delete(userRoles)
|
||||||
|
.where(
|
||||||
|
and(
|
||||||
|
eq(userRoles.userId, input.userId),
|
||||||
|
eq(userRoles.roleId, addRole.id),
|
||||||
|
),
|
||||||
|
);
|
||||||
|
await this.context.drizzle.insert(userRoles).values({
|
||||||
|
userId: input.userId,
|
||||||
|
roleId: addRole.id,
|
||||||
|
grantedBy: input.grantedBy,
|
||||||
|
});
|
||||||
|
added = true;
|
||||||
|
}
|
||||||
|
|
||||||
|
if (removeRole) {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.delete(userRoles)
|
||||||
|
.where(
|
||||||
|
and(
|
||||||
|
eq(userRoles.userId, input.userId),
|
||||||
|
eq(userRoles.roleId, removeRole.id),
|
||||||
|
),
|
||||||
|
)
|
||||||
|
.returning({ id: userRoles.id });
|
||||||
|
removed = rows.length > 0;
|
||||||
|
}
|
||||||
|
|
||||||
|
if (added || removed) {
|
||||||
|
await this.afterWrite();
|
||||||
|
}
|
||||||
|
|
||||||
|
return { added, removed };
|
||||||
|
}
|
||||||
|
|
||||||
|
async removeRoleFromUser(userId: string, roleId: number): Promise<void> {
|
||||||
|
await this.context.drizzle
|
||||||
|
.delete(userRoles)
|
||||||
|
.where(and(eq(userRoles.userId, userId), eq(userRoles.roleId, roleId)));
|
||||||
|
await this.afterWrite();
|
||||||
|
}
|
||||||
|
|
||||||
|
async removeAllRolesFromUser(userId: string): Promise<number> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.delete(userRoles)
|
||||||
|
.where(eq(userRoles.userId, userId))
|
||||||
|
.returning({ id: userRoles.id });
|
||||||
|
|
||||||
|
if (rows.length > 0) {
|
||||||
|
await this.afterWrite();
|
||||||
|
}
|
||||||
|
|
||||||
|
return rows.length;
|
||||||
|
}
|
||||||
|
|
||||||
|
async listUserRoleIds(userId: string): Promise<number[]> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.select({ roleId: userRoles.roleId })
|
||||||
|
.from(userRoles)
|
||||||
|
.where(eq(userRoles.userId, userId));
|
||||||
|
|
||||||
|
return rows.map((row) => row.roleId);
|
||||||
|
}
|
||||||
|
|
||||||
|
async listRoleUserIds(roleId: number): Promise<string[]> {
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.select({ userId: userRoles.userId })
|
||||||
|
.from(userRoles)
|
||||||
|
.where(eq(userRoles.roleId, roleId));
|
||||||
|
|
||||||
|
return rows.map((row) => row.userId);
|
||||||
|
}
|
||||||
|
|
||||||
|
async listUserRolePermissions(
|
||||||
|
userId: string,
|
||||||
|
): Promise<UserRolePermissionRecord[]> {
|
||||||
|
return this.context.drizzle
|
||||||
|
.select({ permissions: roles.permissions })
|
||||||
|
.from(userRoles)
|
||||||
|
.innerJoin(roles, eq(userRoles.roleId, roles.id))
|
||||||
|
.where(eq(userRoles.userId, userId));
|
||||||
|
}
|
||||||
|
|
||||||
|
async userHasAnyRoleName(
|
||||||
|
userId: string,
|
||||||
|
roleNames: string[],
|
||||||
|
): Promise<boolean> {
|
||||||
|
if (roleNames.length === 0) {
|
||||||
|
return false;
|
||||||
|
}
|
||||||
|
|
||||||
|
const rows = await this.context.drizzle
|
||||||
|
.select({ roleName: roles.name })
|
||||||
|
.from(userRoles)
|
||||||
|
.innerJoin(roles, eq(userRoles.roleId, roles.id))
|
||||||
|
.where(and(eq(userRoles.userId, userId), inArray(roles.name, roleNames)))
|
||||||
|
.limit(1);
|
||||||
|
|
||||||
|
return rows.length > 0;
|
||||||
|
}
|
||||||
|
|
||||||
|
async listUserRoles(userId: string): Promise<UserRoleWithRole[]> {
|
||||||
|
return this.context.drizzle
|
||||||
|
.select({
|
||||||
|
id: userRoles.id,
|
||||||
|
roleId: roles.id,
|
||||||
|
roleName: roles.name,
|
||||||
|
roleDisplayName: roles.displayName,
|
||||||
|
description: roles.description,
|
||||||
|
isSystem: roles.isSystem,
|
||||||
|
grantedAt: userRoles.grantedAt,
|
||||||
|
})
|
||||||
|
.from(userRoles)
|
||||||
|
.innerJoin(roles, eq(userRoles.roleId, roles.id))
|
||||||
|
.where(eq(userRoles.userId, userId));
|
||||||
|
}
|
||||||
|
|
||||||
|
private async afterWrite(): Promise<void> {
|
||||||
|
await this.onWrite?.();
|
||||||
|
}
|
||||||
|
}
|
||||||
Some files were not shown because too many files have changed in this diff Show More
Reference in New Issue
Block a user