- 配置版本:fsutil 版本化备份(内容相同自动去重),主 nginx.conf 与 VPS vhost 的版本列表/逐行差异/一键回滚,回滚先校验语法与 nginx -t 再写回 - agent 0.12.2:写 vhost 前留版本;nginx -t 校验失败改为恢复上一个可用版本(此前直接删文件),新增域名 vhost 版本端点,双架构二进制已重编 - 通知:补企业微信 / 钉钉 / 飞书机器人,切换预设时服务地址跟随该预设默认值 - 阈值告警:新增 internal/monitor 巡检(CPU/内存/磁盘持续超阈值、隧道连续 N 次未注册),默认关闭,带静默期与恢复通知 - API Token:api_tokens 表 + Authorization Bearer 认证,只读/读写两种范围;令牌管理与改密/退出仅限登录会话
188 lines
6.0 KiB
Go
188 lines
6.0 KiB
Go
package settings
|
|
|
|
import (
|
|
"context"
|
|
"database/sql"
|
|
"strconv"
|
|
"strings"
|
|
)
|
|
|
|
const (
|
|
KeyTheme = "theme"
|
|
KeyTimezone = "timezone"
|
|
KeyLogRetentionDays = "log_retention_days"
|
|
KeyDDNSCheckInterval = "ddns_check_interval_minutes"
|
|
KeyCertRenewThreshold = "cert_renew_threshold_days"
|
|
KeyRootDomain = "root_domain"
|
|
KeyACMEEmail = "acme_email"
|
|
KeyACMECA = "acme_ca"
|
|
KeyZeroSSLAPIKey = "zerossl_api_key"
|
|
KeyNotifyWebhookURL = "notify_webhook_url"
|
|
KeyNotifyType = "notify_type"
|
|
KeyNotifyEmailJSON = "notify_email_json"
|
|
KeyNotifySMTPPassword = "notify_smtp_password"
|
|
KeyNotifyWebhookJSON = "notify_webhook_json"
|
|
KeyNotifyWebhookSecret = "notify_webhook_secret"
|
|
KeyNotifyTelegramJSON = "notify_telegram_json"
|
|
KeyNotifyTelegramToken = "notify_telegram_token"
|
|
KeyNotifyOnDDNSError = "notify_on_ddns_error" // legacy, migrated to KeyNotifyOnDDNSFailure
|
|
KeyNotifyOnCertError = "notify_on_cert_error" // legacy, migrated to KeyNotifyOnCertExpiry
|
|
KeyNotifyOnNginxError = "notify_on_nginx_error" // legacy, ignored
|
|
KeyNotifyOnDDNSIPChange = "notify_on_ddns_ip_change"
|
|
KeyNotifyOnDDNSFailure = "notify_on_ddns_failure"
|
|
KeyNotifyOnCertExpiry = "notify_on_cert_expiry"
|
|
KeyNotifyOnCertRenewSuccess = "notify_on_cert_renew_success"
|
|
KeyNotifyOnIPFrequentAccess = "notify_on_ip_frequent_access"
|
|
KeyNotifyOnCertRenewFailure = "notify_on_cert_renew_failure"
|
|
KeyNotifyOnLoginFailure = "notify_on_login_failure"
|
|
KeyNotifyOnNginxReloadFailure = "notify_on_nginx_reload_failure"
|
|
KeyNotifyIPFrequentThreshold = "notify_ip_frequent_threshold"
|
|
KeyNotifyIPFrequentWindowSec = "notify_ip_frequent_window_sec"
|
|
KeyNotifyLoginFailureThreshold = "notify_login_failure_threshold"
|
|
KeyNotifyLoginFailureWindowSec = "notify_login_failure_window_sec"
|
|
KeyNotifyOnResourceThreshold = "notify_on_resource_threshold"
|
|
KeyNotifyOnTunnelDown = "notify_on_tunnel_down"
|
|
KeyNotifyCPUThreshold = "notify_cpu_threshold"
|
|
KeyNotifyMemoryThreshold = "notify_memory_threshold"
|
|
KeyNotifyDiskThreshold = "notify_disk_threshold"
|
|
KeyNotifyTunnelFailThreshold = "notify_tunnel_fail_threshold"
|
|
KeyTrustedProxy = "trusted_proxy_json"
|
|
KeyGlobalIPBlacklist = "global_ip_blacklist"
|
|
KeyGlobalIPWhitelist = "global_ip_whitelist"
|
|
KeyChinaCIDRUpdateHours = "china_cidr_update_interval_hours"
|
|
KeyChinaCIDRSourceV4 = "china_cidr_source_url_v4"
|
|
KeyChinaCIDRSourceV6 = "china_cidr_source_url_v6"
|
|
KeyChinaCIDRUpdatedAt = "china_cidr_updated_at"
|
|
KeyChinaCIDRCountV4 = "china_cidr_count_v4"
|
|
KeyChinaCIDRCountV6 = "china_cidr_count_v6"
|
|
KeyChinaCIDRLastError = "china_cidr_last_error"
|
|
KeyFRPEnabled = "frp_enabled"
|
|
KeyFRPServerAddr = "frp_server_addr"
|
|
KeyFRPServerPort = "frp_server_port"
|
|
KeyFRPAuthToken = "frp_auth_token"
|
|
KeyFRPTLSEnabled = "frp_tls_enabled"
|
|
KeyFRPCustomDomains = "frp_custom_domains"
|
|
KeyFRPLastError = "frp_last_error"
|
|
KeyFRPStartedAt = "frp_started_at"
|
|
KeyNginxGlobalMode = "nginx_global_mode"
|
|
)
|
|
|
|
var Defaults = map[string]string{
|
|
KeyTheme: "system",
|
|
KeyTimezone: "Asia/Shanghai",
|
|
KeyLogRetentionDays: "30",
|
|
KeyDDNSCheckInterval: "5",
|
|
KeyCertRenewThreshold: "30",
|
|
KeyACMECA: "letsencrypt",
|
|
KeyChinaCIDRUpdateHours: "24",
|
|
KeyNginxGlobalMode: "auto",
|
|
}
|
|
|
|
type Store struct {
|
|
db *sql.DB
|
|
}
|
|
|
|
func NewStore(db *sql.DB) *Store {
|
|
return &Store{db: db}
|
|
}
|
|
|
|
func (s *Store) Get(ctx context.Context, key string) (string, error) {
|
|
var value string
|
|
err := s.db.QueryRowContext(ctx, `SELECT value FROM settings WHERE key = ?`, key).Scan(&value)
|
|
if err == sql.ErrNoRows {
|
|
if def, ok := Defaults[key]; ok {
|
|
return def, nil
|
|
}
|
|
return "", nil
|
|
}
|
|
return value, err
|
|
}
|
|
|
|
func (s *Store) Set(ctx context.Context, key, value string) error {
|
|
_, err := s.db.ExecContext(ctx, `
|
|
INSERT INTO settings(key, value) VALUES (?, ?)
|
|
ON CONFLICT(key) DO UPDATE SET value = excluded.value
|
|
`, key, value)
|
|
return err
|
|
}
|
|
|
|
func (s *Store) GetBool(ctx context.Context, key string) (bool, error) {
|
|
raw, err := s.Get(ctx, key)
|
|
if err != nil {
|
|
return false, err
|
|
}
|
|
switch strings.ToLower(strings.TrimSpace(raw)) {
|
|
case "1", "true", "yes", "on":
|
|
return true, nil
|
|
default:
|
|
return false, nil
|
|
}
|
|
}
|
|
|
|
func (s *Store) SetBool(ctx context.Context, key string, value bool) error {
|
|
if value {
|
|
return s.Set(ctx, key, "true")
|
|
}
|
|
return s.Set(ctx, key, "false")
|
|
}
|
|
|
|
func (s *Store) SetInt(ctx context.Context, key string, value int) error {
|
|
return s.Set(ctx, key, strconv.Itoa(value))
|
|
}
|
|
|
|
func (s *Store) GetInt(ctx context.Context, key string) (int, error) {
|
|
raw, err := s.Get(ctx, key)
|
|
if err != nil {
|
|
return 0, err
|
|
}
|
|
if raw == "" {
|
|
if def, ok := Defaults[key]; ok {
|
|
raw = def
|
|
}
|
|
}
|
|
n, err := strconv.Atoi(raw)
|
|
if err != nil {
|
|
return 0, err
|
|
}
|
|
return n, nil
|
|
}
|
|
|
|
func (s *Store) List(ctx context.Context) (map[string]string, error) {
|
|
rows, err := s.db.QueryContext(ctx, `SELECT key, value FROM settings`)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
defer rows.Close()
|
|
|
|
out := map[string]string{}
|
|
for k, v := range Defaults {
|
|
out[k] = v
|
|
}
|
|
for rows.Next() {
|
|
var key, value string
|
|
if err := rows.Scan(&key, &value); err != nil {
|
|
return nil, err
|
|
}
|
|
out[key] = value
|
|
}
|
|
return out, rows.Err()
|
|
}
|
|
|
|
func (s *Store) SetMany(ctx context.Context, values map[string]string) error {
|
|
tx, err := s.db.BeginTx(ctx, nil)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
defer func() { _ = tx.Rollback() }()
|
|
|
|
for key, value := range values {
|
|
if _, err := tx.ExecContext(ctx, `
|
|
INSERT INTO settings(key, value) VALUES (?, ?)
|
|
ON CONFLICT(key) DO UPDATE SET value = excluded.value
|
|
`, key, value); err != nil {
|
|
return err
|
|
}
|
|
}
|
|
return tx.Commit()
|
|
}
|