Files
mrleeandDevin 9d75fb1d3e
CI / verify (push) Canceled after 0s
fix: 收敛正确性缺口并补齐质量门禁
备份、隧道生命周期、日志、会话与设置项存在一批「静默失效」问题,本次一并收敛。

正确性:
- 备份归档补上 session_secret 与 frp 配置。缺密钥时换机恢复后库里所有凭据都解不开,
  界面表现为「配置都在、一执行就报解密失败」;同时支持口令加密(scrypt + AES-256-GCM)。
- 修复「立即备份」必失败:tar 头用的是遍历时的文件尺寸,而 logs、frpc 配置在打包期间
  还在增长,读出的字节多于声明值导致 archive/tar 报错、整份备份作废。改为打开后重新
  取尺寸并用 LimitReader 兜住,被截短时补零保持条目结构完整。
- 数据库改用 VACUUM INTO 生成一致性快照。直接打包正在写入的 SQLite 文件可能得到
  结构完整但内容自相矛盾的副本,恢复后才暴露。
- Cloudflare 启动改用 StartAuto,Shutdown 显式 StopAll,子进程绑定应用 ctx。此前
  重启会把用户手动停掉的隧道重新拉起,退出也可能留下孤儿进程。
- Nginx 访问/错误日志加轮转(200MB 阈值、gzip 归档、USR1 重开),读取改为从文件尾
  分块倒读,并跨当日归档统计。此前日志只增不减,读接口每次全量扫描。
- 过期会话改由日任务清理;删除反代规则时同步清掉流量累计,避免同名规则重建继承旧读数。
- 启动加就绪门:Nginx bootstrap 完成后再放行 FRP 对账、Agent 隧道与 Cloudflare 自启。

设置项:
- 新增设置项注册表(internal/settings/registry.go),白名单与默认值从它派生,
  并记录每个键的消费者,防止再出现「界面能改、后端没人读」的黑洞设置。
- 接上三个此前不生效的设置项:timezone(启动与保存时应用到 time.Local)、
  theme(后端为权威源,挂载时覆盖本地偏好、顶栏切换回写)、log_retention_days
  (控制日志归档保留天数)。

工程质量:
- gofmt 全量格式化 23 个历史文件,CI 增加格式化门禁。
- 前端引入 ESLint(flat config)与 lint 脚本,CI 增加 lint 步骤;顺带修掉
  logDisplay 的 let→const 与 LogsView 模板内直接改 prop 两处问题。
- 删除无引用的 pnpm-lock.yaml,prototype/ 加入忽略列表。
- 打包版本对齐:Docker manifest 同步到 2.0.0,CI 校验 VERSION 与 package.json 一致。

验证:gofmt 0 文件、go vet、go test ./...、npm run lint/typecheck/test/build 全绿。

Generated with [Devin](https://devin.ai)

Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
2026-10-24 16:30:00 +08:00

287 lines
9.9 KiB
Go

package ddns
import (
"context"
"database/sql"
"errors"
"fmt"
"strings"
"time"
)
type Config struct {
ID int64 `json:"id"`
Provider string `json:"provider"`
Name string `json:"name"`
RootDomain string `json:"root_domain"`
RecordName string `json:"record_name"`
RecordNames []string `json:"record_names"`
IPv4Enabled bool `json:"ipv4_enabled"`
IPv6Enabled bool `json:"ipv6_enabled"`
Enabled bool `json:"enabled"`
HasToken bool `json:"has_token"`
CustomIPv4 string `json:"custom_ipv4,omitempty"`
CustomIPv6 string `json:"custom_ipv6,omitempty"`
LastIPv4 string `json:"last_ipv4"`
LastIPv6 string `json:"last_ipv6"`
LastStatus string `json:"last_status"`
LastError string `json:"last_error,omitempty"`
DomainRecords []DomainRecord `json:"domain_records"`
LastUpdatedAt *time.Time `json:"last_updated_at,omitempty"`
}
type SaveInput struct {
Provider string
Name string
RootDomain string
RecordName string
RecordNames []string
Domains []string
IPv4Enabled bool
IPv6Enabled bool
Enabled bool
CustomIPv4 string
CustomIPv6 string
APIToken string
APITokenID string
APISecret string
}
func (in SaveInput) HasCredentialUpdate() bool {
return strings.TrimSpace(in.APIToken) != "" ||
strings.TrimSpace(in.APITokenID) != "" ||
strings.TrimSpace(in.APISecret) != ""
}
type Store struct {
db *sql.DB
}
func NewStore(db *sql.DB) *Store {
return &Store{db: db}
}
func (s *Store) List(ctx context.Context) ([]Config, error) {
rows, err := s.db.QueryContext(ctx, `
SELECT id, provider, root_domain, record_name, COALESCE(record_names, '[]'), ipv4_enabled, ipv6_enabled, enabled,
CASE WHEN api_token_enc IS NOT NULL AND api_token_enc != '' THEN 1 ELSE 0 END,
COALESCE(last_ipv4, ''), COALESCE(last_ipv6, ''), last_status, COALESCE(last_error, ''),
COALESCE(domain_records, '[]'), last_updated_at, COALESCE(custom_ipv4, ''), COALESCE(custom_ipv6, ''),
COALESCE(name, '')
FROM ddns_configs ORDER BY id ASC
`)
if err != nil {
return nil, err
}
defer rows.Close()
var configs []Config
for rows.Next() {
cfg, err := scanConfig(rows)
if err != nil {
return nil, err
}
configs = append(configs, cfg)
}
return configs, rows.Err()
}
func (s *Store) GetByID(ctx context.Context, id int64) (Config, error) {
row := s.db.QueryRowContext(ctx, `
SELECT id, provider, root_domain, record_name, COALESCE(record_names, '[]'), ipv4_enabled, ipv6_enabled, enabled,
CASE WHEN api_token_enc IS NOT NULL AND api_token_enc != '' THEN 1 ELSE 0 END,
COALESCE(last_ipv4, ''), COALESCE(last_ipv6, ''), last_status, COALESCE(last_error, ''),
COALESCE(domain_records, '[]'), last_updated_at, COALESCE(custom_ipv4, ''), COALESCE(custom_ipv6, ''),
COALESCE(name, '')
FROM ddns_configs WHERE id = ?
`, id)
cfg, err := scanConfig(row)
if errors.Is(err, sql.ErrNoRows) {
return Config{}, fmt.Errorf("DDNS 配置不存在")
}
return cfg, err
}
func (s *Store) GetByRootDomain(ctx context.Context, rootDomain string) (Config, error) {
rootDomain = strings.ToLower(strings.TrimSpace(rootDomain))
row := s.db.QueryRowContext(ctx, `
SELECT id, provider, root_domain, record_name, COALESCE(record_names, '[]'), ipv4_enabled, ipv6_enabled, enabled,
CASE WHEN api_token_enc IS NOT NULL AND api_token_enc != '' THEN 1 ELSE 0 END,
COALESCE(last_ipv4, ''), COALESCE(last_ipv6, ''), last_status, COALESCE(last_error, ''),
COALESCE(domain_records, '[]'), last_updated_at, COALESCE(custom_ipv4, ''), COALESCE(custom_ipv6, ''),
COALESCE(name, '')
FROM ddns_configs WHERE root_domain = ? ORDER BY id LIMIT 1
`, rootDomain)
cfg, err := scanConfig(row)
if errors.Is(err, sql.ErrNoRows) {
return Config{}, fmt.Errorf("未找到域名 %s 的 DDNS 配置", rootDomain)
}
return cfg, err
}
func (s *Store) GetTokenByID(ctx context.Context, id int64) (string, error) {
var enc string
err := s.db.QueryRowContext(ctx, `SELECT COALESCE(api_token_enc, '') FROM ddns_configs WHERE id = ?`, id).Scan(&enc)
if err != nil {
if errors.Is(err, sql.ErrNoRows) {
return "", fmt.Errorf("DDNS 配置不存在")
}
return "", err
}
return enc, nil
}
func (s *Store) Create(ctx context.Context, in SaveInput, tokenEnc string) (Config, error) {
rootDomain, recordName, recordNamesJSON, provider, err := normalizeInput(in)
if err != nil {
return Config{}, err
}
res, err := s.db.ExecContext(ctx, `
INSERT INTO ddns_configs(provider, name, root_domain, record_name, record_names, ipv4_enabled, ipv6_enabled, enabled, api_token_enc, custom_ipv4, custom_ipv6, updated_at)
VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, datetime('now'))
`, provider, strings.TrimSpace(in.Name), rootDomain, recordName, recordNamesJSON, boolInt(in.IPv4Enabled), boolInt(in.IPv6Enabled), boolInt(in.Enabled), tokenEnc, in.CustomIPv4, in.CustomIPv6)
if err != nil {
if strings.Contains(err.Error(), "UNIQUE") {
return Config{}, fmt.Errorf("该域名与子域名组合已存在")
}
return Config{}, err
}
id, _ := res.LastInsertId()
return s.GetByID(ctx, id)
}
func (s *Store) Update(ctx context.Context, id int64, in SaveInput, tokenEnc string, updateToken bool) (Config, error) {
rootDomain, recordName, recordNamesJSON, provider, err := normalizeInput(in)
if err != nil {
return Config{}, err
}
if updateToken {
_, err := s.db.ExecContext(ctx, `
UPDATE ddns_configs
SET provider = ?, name = ?, root_domain = ?, record_name = ?, record_names = ?, ipv4_enabled = ?, ipv6_enabled = ?, enabled = ?,
api_token_enc = ?, custom_ipv4 = ?, custom_ipv6 = ?, updated_at = datetime('now')
WHERE id = ?
`, provider, strings.TrimSpace(in.Name), rootDomain, recordName, recordNamesJSON, boolInt(in.IPv4Enabled), boolInt(in.IPv6Enabled), boolInt(in.Enabled), tokenEnc, in.CustomIPv4, in.CustomIPv6, id)
if err != nil {
if strings.Contains(err.Error(), "UNIQUE") {
return Config{}, fmt.Errorf("该域名与子域名组合已存在")
}
return Config{}, err
}
} else {
_, err := s.db.ExecContext(ctx, `
UPDATE ddns_configs
SET provider = ?, name = ?, root_domain = ?, record_name = ?, record_names = ?, ipv4_enabled = ?, ipv6_enabled = ?, enabled = ?,
custom_ipv4 = ?, custom_ipv6 = ?, updated_at = datetime('now')
WHERE id = ?
`, provider, strings.TrimSpace(in.Name), rootDomain, recordName, recordNamesJSON, boolInt(in.IPv4Enabled), boolInt(in.IPv6Enabled), boolInt(in.Enabled), in.CustomIPv4, in.CustomIPv6, id)
if err != nil {
if strings.Contains(err.Error(), "UNIQUE") {
return Config{}, fmt.Errorf("该域名与子域名组合已存在")
}
return Config{}, err
}
}
return s.GetByID(ctx, id)
}
func (s *Store) Delete(ctx context.Context, id int64) error {
res, err := s.db.ExecContext(ctx, `DELETE FROM ddns_configs WHERE id = ?`, id)
if err != nil {
return err
}
n, _ := res.RowsAffected()
if n == 0 {
return fmt.Errorf("DDNS 配置不存在")
}
return nil
}
func (s *Store) UpdateStatus(ctx context.Context, id int64, ipv4, ipv6, status, lastError string) error {
return s.UpdateSyncResult(ctx, id, ipv4, ipv6, status, lastError, nil)
}
func (s *Store) UpdateSyncResult(ctx context.Context, id int64, ipv4, ipv6, status, lastError string, records []DomainRecord) error {
domainRecordsJSON := ""
if records != nil {
domainRecordsJSON = EncodeDomainRecords(records)
}
if domainRecordsJSON != "" {
_, err := s.db.ExecContext(ctx, `
UPDATE ddns_configs
SET last_ipv4 = ?, last_ipv6 = ?, last_status = ?, last_error = ?, domain_records = ?,
last_updated_at = datetime('now'), updated_at = datetime('now')
WHERE id = ?
`, ipv4, ipv6, status, lastError, domainRecordsJSON, id)
return err
}
_, err := s.db.ExecContext(ctx, `
UPDATE ddns_configs
SET last_ipv4 = ?, last_ipv6 = ?, last_status = ?, last_error = ?, last_updated_at = datetime('now'), updated_at = datetime('now')
WHERE id = ?
`, ipv4, ipv6, status, lastError, id)
return err
}
func normalizeInput(in SaveInput) (rootDomain, recordName, recordNamesJSON, provider string, err error) {
provider = strings.TrimSpace(in.Provider)
if provider == "" {
provider = "cloudflare"
}
var names []string
if len(in.Domains) > 0 {
rootDomain, names, err = ParseDomainLines(in.Domains)
if err != nil {
return "", "", "", "", err
}
} else {
rootDomain = strings.ToLower(strings.TrimSpace(in.RootDomain))
if rootDomain == "" {
return "", "", "", "", fmt.Errorf("至少需要一个域名")
}
names, err = ParseRecordNames(in.RecordNames, in.RecordName)
if err != nil {
return "", "", "", "", err
}
}
return rootDomain, names[0], EncodeRecordNames(names), provider, nil
}
func scanConfig(row interface{ Scan(dest ...any) error }) (Config, error) {
var cfg Config
var ipv4Enabled, ipv6Enabled, enabled, hasToken int
var recordNamesRaw, domainRecordsRaw string
var lastUpdated sql.NullString
if err := row.Scan(&cfg.ID, &cfg.Provider, &cfg.RootDomain, &cfg.RecordName, &recordNamesRaw, &ipv4Enabled, &ipv6Enabled, &enabled, &hasToken, &cfg.LastIPv4, &cfg.LastIPv6, &cfg.LastStatus, &cfg.LastError, &domainRecordsRaw, &lastUpdated, &cfg.CustomIPv4, &cfg.CustomIPv6, &cfg.Name); err != nil {
return Config{}, err
}
cfg.RecordNames = DecodeRecordNames(recordNamesRaw, cfg.RecordName)
cfg.DomainRecords = DecodeDomainRecords(domainRecordsRaw)
cfg.DomainRecords = BuildDomainRecords(cfg)
cfg.IPv4Enabled = ipv4Enabled == 1
cfg.IPv6Enabled = ipv6Enabled == 1
cfg.Enabled = enabled == 1
cfg.HasToken = hasToken == 1
if lastUpdated.Valid {
t := parseTime(lastUpdated.String)
cfg.LastUpdatedAt = &t
}
return cfg, nil
}
func boolInt(v bool) int {
if v {
return 1
}
return 0
}
func parseTime(v string) time.Time {
t, err := time.Parse("2006-01-02 15:04:05", v)
if err != nil {
t, _ = time.Parse(time.RFC3339, v)
}
return t.UTC()
}