diff --git a/db/migrations/002_features_14_17.sql b/db/migrations/002_features_14_17.sql index 799658a..d01c183 100644 --- a/db/migrations/002_features_14_17.sql +++ b/db/migrations/002_features_14_17.sql @@ -1,59 +1,29 @@ -- Migration 002: Features #14-17 (WordPress, Backup, Cloudflare, TOTP) - --- #17 TOTP columns on users (ignore errors if columns already exist) ALTER TABLE users ADD COLUMN totp_secret VARCHAR(64) DEFAULT NULL; ALTER TABLE users ADD COLUMN totp_enabled TINYINT(1) DEFAULT 0; ALTER TABLE users ADD COLUMN totp_backup_codes TEXT DEFAULT NULL; - --- #16 Cloudflare columns on accounts ALTER TABLE accounts ADD COLUMN cf_api_key VARCHAR(255) DEFAULT NULL; ALTER TABLE accounts ADD COLUMN cf_api_email VARCHAR(255) DEFAULT NULL; ALTER TABLE accounts ADD COLUMN cf_zone_id VARCHAR(64) DEFAULT NULL; - --- #16 Cloudflare zone_id on dns_zones ALTER TABLE dns_zones ADD COLUMN cf_zone_id VARCHAR(64) DEFAULT NULL; - --- #14 WordPress installs CREATE TABLE IF NOT EXISTS wordpress_installs ( - id INT AUTO_INCREMENT PRIMARY KEY, - account_id INT NOT NULL, - domain VARCHAR(255) NOT NULL, - path VARCHAR(255) DEFAULT '/', - db_name VARCHAR(64) DEFAULT NULL, - db_user VARCHAR(64) DEFAULT NULL, - db_pass VARCHAR(128) DEFAULT NULL, - wp_version VARCHAR(20) DEFAULT NULL, - admin_user VARCHAR(64) DEFAULT NULL, - admin_email VARCHAR(255) DEFAULT NULL, - status ENUM('active','updating','suspended') DEFAULT 'active', - staging_of INT DEFAULT NULL, - created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP, - updated_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP, - INDEX (account_id) + id INT AUTO_INCREMENT PRIMARY KEY,account_id INT NOT NULL,domain VARCHAR(255) NOT NULL, + path VARCHAR(255) DEFAULT '/',db_name VARCHAR(64) DEFAULT NULL,db_user VARCHAR(64) DEFAULT NULL, + db_pass VARCHAR(128) DEFAULT NULL,wp_version VARCHAR(20) DEFAULT NULL,admin_user VARCHAR(64) DEFAULT NULL, + admin_email VARCHAR(255) DEFAULT NULL,status ENUM('active','updating','suspended') DEFAULT 'active', + staging_of INT DEFAULT NULL,created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP, + updated_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,INDEX (account_id) ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci; - --- #15 Backups CREATE TABLE IF NOT EXISTS backups ( - id INT AUTO_INCREMENT PRIMARY KEY, - account_id INT NOT NULL, - filename VARCHAR(255) NOT NULL, - size BIGINT DEFAULT 0, - type ENUM('full','files','database') DEFAULT 'full', - status ENUM('pending','running','complete','failed') DEFAULT 'pending', - storage VARCHAR(50) DEFAULT 'local', - remote_path VARCHAR(500) DEFAULT NULL, - created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP, - INDEX (account_id), - INDEX (status) + id INT AUTO_INCREMENT PRIMARY KEY,account_id INT NOT NULL,filename VARCHAR(255) NOT NULL, + size BIGINT DEFAULT 0,type ENUM('full','files','database') DEFAULT 'full', + status ENUM('pending','running','complete','failed') DEFAULT 'pending', + storage VARCHAR(50) DEFAULT 'local',remote_path VARCHAR(500) DEFAULT NULL, + created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,INDEX (account_id),INDEX (status) ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci; - CREATE TABLE IF NOT EXISTS backup_schedules ( - id INT AUTO_INCREMENT PRIMARY KEY, - account_id INT NOT NULL UNIQUE, - frequency ENUM('hourly','daily','weekly','monthly') DEFAULT 'daily', - type ENUM('full','files','database') DEFAULT 'full', - retain_count INT DEFAULT 7, - last_run TIMESTAMP NULL, - created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP, - INDEX (account_id) + id INT AUTO_INCREMENT PRIMARY KEY,account_id INT NOT NULL UNIQUE, + frequency ENUM('hourly','daily','weekly','monthly') DEFAULT 'daily', + type ENUM('full','files','database') DEFAULT 'full',retain_count INT DEFAULT 7, + last_run TIMESTAMP NULL,created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,INDEX (account_id) ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci; diff --git a/panel/api/index.php b/panel/api/index.php index 1b7839e..7b84ec6 100644 --- a/panel/api/index.php +++ b/panel/api/index.php @@ -56,4 +56,38 @@ if (!file_exists($endpointFile)) { Response::error("Unknown endpoint: $endpoint", 404); } + + +// #28 Rate limiting — per-IP, per-endpoint bucket +(function() use ($endpoint) { + $db = DB::getInstance(); + $ip = $_SERVER["REMOTE_ADDR"] ?? "0.0.0.0"; + $now = time(); + $window = 60; + $limit = $endpoint === "auth" ? 10 : 120; + $bucket = $endpoint === "auth" ? "auth" : "api"; + try { + $row = $db->fetchOne("SELECT hits, window_start FROM api_rate_limits WHERE ip=? AND endpoint=?", [$ip, $bucket]); + if ($row && ($now - (int)$row["window_start"]) < $window) { + $hits = (int)$row["hits"] + 1; + $db->execute("UPDATE api_rate_limits SET hits=? WHERE ip=? AND endpoint=?", [$hits, $ip, $bucket]); + } else { + $hits = 1; + $db->execute("INSERT INTO api_rate_limits (ip, endpoint, hits, window_start) VALUES (?,?,1,?) ON DUPLICATE KEY UPDATE hits=1, window_start=VALUES(window_start)", [$ip, $bucket, $now]); + } + $reset = ($row ? (int)$row["window_start"] : $now) + $window; + $remaining = max(0, $limit - $hits); + header("X-RateLimit-Limit: {$limit}"); + header("X-RateLimit-Remaining: {$remaining}"); + header("X-RateLimit-Reset: {$reset}"); + if ($hits > $limit) { + http_response_code(429); + echo json_encode(["success"=>false,"message"=>"Too many requests. Try again in " . ($reset - $now) . " seconds.","errors"=>[]]); + exit; + } + } catch (Throwable $e) { + novacpx_log("warn", "rate limit error: " . $e->getMessage()); + } +})(); + require $endpointFile; diff --git a/panel/lib/AccountManager.php b/panel/lib/AccountManager.php index 1f56c35..b20f0de 100644 --- a/panel/lib/AccountManager.php +++ b/panel/lib/AccountManager.php @@ -28,9 +28,9 @@ class AccountManager { // Create Linux user self::shell("useradd -m -d {$homeDir} -s /sbin/nologin -G www-data " . escapeshellarg($username)); self::shell("echo " . escapeshellarg("{$username}:{$password}") . " | chpasswd"); - self::shell("mkdir -p {$docRoot} {$homeDir}/logs {$homeDir}/tmp"); - self::shell("chown -R {$username}:www-data {$homeDir}"); - self::shell("chmod 750 {$homeDir}; chmod 755 {$docRoot}"); + self::shell("sudo mkdir -p {$docRoot} {$homeDir}/logs {$homeDir}/tmp"); + self::shell("sudo chown -R {$username}:www-data {$homeDir}"); + self::shell("sudo chmod 750 {$homeDir}"); self::shell("sudo chmod 775 {$docRoot}"); // Default index page file_put_contents("{$docRoot}/index.html", @@ -116,9 +116,9 @@ class AccountManager { public static function provisionEmailDNS(int $acctId, string $domain): void { // Generate DKIM keypair $keyDir = "/etc/opendkim/keys/{$domain}"; - self::shell("mkdir -p " . escapeshellarg($keyDir)); + self::shell("sudo mkdir -p " . escapeshellarg($keyDir)); self::shell("opendkim-genkey -b 2048 -s mail -d " . escapeshellarg($domain) . " -D " . escapeshellarg($keyDir)); - self::shell("chown -R opendkim:opendkim " . escapeshellarg($keyDir)); + self::shell("sudo chown -R opendkim:opendkim " . escapeshellarg($keyDir)); // Parse public key from .txt file $keyTxt = @file_get_contents("{$keyDir}/mail.txt") ?: ''; @@ -139,13 +139,17 @@ class AccountManager { ); // DKIM TXT record - DNSManager::addRecord($acctId, $domain, 'TXT', "mail._domainkey", "v=DKIM1; k=rsa; p={$pubKey}", 300); + $zoneRow = DB::getInstance()->fetchOne("SELECT id FROM dns_zones WHERE account_id=? AND domain=?", [$acctId, $domain]); + if ($zoneRow) DNSManager::addRecord((int)$zoneRow['id'], 'mail._domainkey', 'TXT', "v=DKIM1; k=rsa; p={$pubKey}", 300); } - // SPF - DNSManager::addRecord($acctId, $domain, 'TXT', '@', "v=spf1 mx a ~all", 300); - // DMARC - DNSManager::addRecord($acctId, $domain, 'TXT', '_dmarc', "v=DMARC1; p=quarantine; rua=mailto:dmarc@{$domain}", 300); + // SPF + DMARC — look up zone once + $db2 = DB::getInstance(); + $zoneRow = $zoneRow ?? $db2->fetchOne("SELECT id FROM dns_zones WHERE account_id=? AND domain=?", [$acctId, $domain]); + if ($zoneRow) { + DNSManager::addRecord((int)$zoneRow['id'], '@', 'TXT', "v=spf1 mx a ~all", 3600); + DNSManager::addRecord((int)$zoneRow['id'], '_dmarc', 'TXT', "v=DMARC1; p=quarantine; rua=mailto:dmarc@{$domain}", 3600); + } novacpx_log('info', "Email DNS provisioned for $domain"); } @@ -154,9 +158,9 @@ class AccountManager { $db = DB::getInstance(); $selector = 'mail' . date('Ym'); $keyDir = "/etc/opendkim/keys/{$domain}"; - self::shell("mkdir -p " . escapeshellarg($keyDir)); + self::shell("sudo mkdir -p " . escapeshellarg($keyDir)); self::shell("opendkim-genkey -b 2048 -s {$selector} -d " . escapeshellarg($domain) . " -D " . escapeshellarg($keyDir)); - self::shell("chown -R opendkim:opendkim " . escapeshellarg($keyDir)); + self::shell("sudo chown -R opendkim:opendkim " . escapeshellarg($keyDir)); $keyTxt = @file_get_contents("{$keyDir}/{$selector}.txt") ?: ''; preg_match('/p=([A-Za-z0-9+\/=]+)/', $keyTxt, $m); @@ -174,7 +178,8 @@ class AccountManager { ); // Add new TXT record, remove old mail._domainkey - DNSManager::addRecord($acctId, $domain, 'TXT', "{$selector}._domainkey", "v=DKIM1; k=rsa; p={$pubKey}", 300); + $zoneRow = $db->fetchOne("SELECT id FROM dns_zones WHERE account_id=? AND domain=?", [$acctId, $domain]); + if ($zoneRow) DNSManager::addRecord((int)$zoneRow['id'], "{$selector}._domainkey", 'TXT', "v=DKIM1; k=rsa; p={$pubKey}", 300); novacpx_log('info', "DKIM rotated for $domain, new selector: $selector"); return $selector; } @@ -185,6 +190,12 @@ class AccountManager { } private static function shell(string $cmd): string { + // Prefix privileged commands with sudo so www-data can run them + $privileged = ['useradd','userdel','usermod','chpasswd','a2ensite','a2dissite','apache2ctl','certbot','opendkim-genkey','rndc','named-checkzone','systemctl']; + $cmdBase = explode(' ', ltrim($cmd))[0]; + foreach ($privileged as $p) { + if (str_ends_with($cmdBase, $p) || $cmdBase === $p) { $cmd = 'sudo ' . $cmd; break; } + } $out = shell_exec($cmd . ' 2>&1'); novacpx_log('debug', "shell: $cmd"); return $out ?: ''; diff --git a/panel/lib/Auth.php b/panel/lib/Auth.php index 76614eb..5c4769a 100644 --- a/panel/lib/Auth.php +++ b/panel/lib/Auth.php @@ -1,8 +1,13 @@ fetchOne( "SELECT * FROM users WHERE (username = ? OR email = ?) AND status = 'active'", [$username, $username] ); if (!$user || !password_verify($password, $user['password'])) return null; + // TOTP check + if (!empty($user['totp_enabled'])) { + if ($totpCode === null) { + $this->user = $user; + return self::TOTP_REQUIRED; + } + $verified = TOTP::verify($user['totp_secret'] ?? '', $totpCode); + if (!$verified && !empty($user['totp_backup_codes'])) { + $verified = TOTP::verifyBackupCode($totpCode, $user['totp_backup_codes']); + if ($verified) { + // Consume used backup code + $hashes = json_decode($user['totp_backup_codes'], true) ?? []; + $hashes = array_values(array_filter($hashes, fn($h) => !password_verify(strtoupper($totpCode), $h))); + $db->execute("UPDATE users SET totp_backup_codes=? WHERE id=?", [json_encode($hashes), $user['id']]); + } + } + if (!$verified) return null; + } + // Create session $token = bin2hex(random_bytes(32)); $sessionId = hash('sha256', $token); diff --git a/panel/lib/DNSManager.php b/panel/lib/DNSManager.php index 0694a7e..48e626f 100644 --- a/panel/lib/DNSManager.php +++ b/panel/lib/DNSManager.php @@ -26,7 +26,6 @@ class DNSManager { ['www', 'A', $ip, 3600, null], ['mail', 'A', $ip, 3600, null], ['@', 'MX', "mail.{$domain}.", 3600, 10], - ['@', 'TXT', "v=spf1 a mx ~all", 3600, null], ]; foreach ($defaults as [$name, $type, $content, $ttl, $prio]) { $db->execute( @@ -127,13 +126,14 @@ class DNSManager { // Include in main named.conf if not already there $mainConf = '/etc/bind/named.conf'; - if (file_exists($mainConf) && !str_contains(file_get_contents($mainConf), 'named.conf.novacpx')) { - file_put_contents($mainConf, "\ninclude \"" . self::$namedConf . "\";\n", FILE_APPEND); + if (file_exists($mainConf) && !str_contains(file_get_contents($mainConf) ?: '', 'named.conf.novacpx')) { + $line = "\ninclude \"" . self::$namedConf . "\";\n"; + shell_exec("echo " . escapeshellarg($line) . " | sudo tee -a {$mainConf} > /dev/null 2>&1"); } } private static function reloadBind(): void { - shell_exec("rndc reload 2>/dev/null || systemctl reload named 2>/dev/null || true"); + shell_exec("sudo rndc reload 2>/dev/null || sudo systemctl reload named 2>/dev/null || sudo systemctl reload bind9 2>/dev/null || true"); } private static function serverIp(): string { diff --git a/panel/public/admin/index.php b/panel/public/admin/index.php index ab85db1..3461378 100644 --- a/panel/public/admin/index.php +++ b/panel/public/admin/index.php @@ -14,6 +14,7 @@ $_v = fn($f) => '?v=' . @filemtime(dirname(__DIR__) . $f);
@@ -113,6 +122,14 @@ $_v = fn($f) => '?v=' . @filemtime(dirname(__DIR__) . $f); Audit Log + + + 2FA Manager + + + + Sessions +
@@ -125,6 +142,10 @@ $_v = fn($f) => '?v=' . @filemtime(dirname(__DIR__) . $f); Backups + + + Cloudflare + Settings @@ -149,7 +170,8 @@ $_v = fn($f) => '?v=' . @filemtime(dirname(__DIR__) . $f);
- + +
Dashboard
diff --git a/panel/public/assets/css/nova.css b/panel/public/assets/css/nova.css index 04254cf..0c49803 100644 --- a/panel/public/assets/css/nova.css +++ b/panel/public/assets/css/nova.css @@ -300,3 +300,84 @@ code { font-family: 'JetBrains Mono', 'Fira Code', monospace; font-size: .85em; .text-muted { color: var(--text-muted); } .text-sm { font-size: .82rem; } .text-right { text-align: right; } .font-bold { font-weight: 700; } .w-full { width: 100%; } .hidden { display: none; } + +/* ── #26 Mobile Responsive Additions ────────────────────────────────────────── */ +#sidebar-toggle { display: none; } + +.sidebar-overlay { + display: none; position: fixed; inset: 0; + background: rgba(0,0,0,.5); z-index: 99; +} +.sidebar-overlay.open { display: block; } + +/* page-header layout */ +.page-header { + display: flex; align-items: center; justify-content: space-between; + margin-bottom: 1.5rem; flex-wrap: wrap; gap: .75rem; +} +.page-title { font-size: 1.2rem; font-weight: 700; } +.page-actions { display: flex; gap: .5rem; flex-wrap: wrap; align-items: center; } + +/* panel utility */ +.panel { + background: var(--bg2); border: 1px solid var(--border); + border-radius: var(--radius); margin-bottom: 1.5rem; +} +.panel-header { + padding: 1rem 1.25rem; border-bottom: 1px solid var(--border); + display: flex; align-items: center; justify-content: space-between; + flex-wrap: wrap; gap: .5rem; +} +.panel-title { font-size: .95rem; font-weight: 600; } +.panel-body { padding: 1.25rem; } + +/* table alias */ +.table { width: 100%; border-collapse: collapse; font-size: .88rem; } +.table th { text-align: left; font-size: .75rem; text-transform: uppercase; letter-spacing: .05em; color: var(--text-muted); padding: .65rem 1rem; border-bottom: 1px solid var(--border); white-space: nowrap; } +.table td { padding: .75rem 1rem; border-bottom: 1px solid var(--border); } +.table tr:last-child td { border-bottom: none; } +.table tr:hover td { background: var(--bg3); } + +/* btn variants */ +.btn-success { background: var(--green); color: #fff; } +.btn-success:hover { background: #0da271; } +.btn-warning { background: var(--yellow); color: #000; } +.btn-warning:hover { background: #d97706; } +.btn-danger { background: var(--red); color: #fff; } +.btn-danger:hover { background: #dc2626; } +.btn-secondary { background: var(--bg3); border: 1px solid var(--border); color: var(--text); } +.btn-secondary:hover { border-color: var(--primary); color: var(--primary); } +.btn-xs { padding: .2rem .55rem; font-size: .75rem; border-radius: 6px; } + +/* badge alias */ +.badge-muted { background: rgba(148,163,184,.15); color: #94a3b8; } + +@media (max-width: 768px) { + #sidebar-toggle { display: flex; } + + .sidebar { + transform: translateX(-100%); + transition: transform .25s ease; + z-index: 200; + } + .sidebar.open { transform: translateX(0); } + + .main-content { margin-left: 0; } + + .page-header { flex-direction: column; align-items: flex-start; } + .page-actions { width: 100%; } + + .stats-grid { grid-template-columns: repeat(auto-fill, minmax(140px, 1fr)); } + + .modal { max-width: calc(100vw - 2rem); margin: 1rem; } + + .panel-header { flex-direction: column; align-items: flex-start; } + + .topbar { padding: .65rem 1rem; } + + /* hide non-essential table columns on mobile */ + .table th:nth-child(n+4), + .table td:nth-child(n+4) { display: none; } + + .grid-2, .grid-3, .grid-4 { grid-template-columns: 1fr; } +} diff --git a/panel/public/assets/js/admin.js b/panel/public/assets/js/admin.js index 4203a23..8218b72 100644 --- a/panel/public/assets/js/admin.js +++ b/panel/public/assets/js/admin.js @@ -4,19 +4,49 @@ (async () => { // ── Auth guard ───────────────────────────────────────────────────────────── // Inline login handler on port 8882 + let _loginCredentials = null; const loginForm = document.getElementById('login-form'); if (loginForm) { loginForm.addEventListener('submit', async e => { e.preventDefault(); const btn = document.getElementById('l-btn'); const err = document.getElementById('login-err'); - btn.disabled = true; btn.textContent = 'Signing in…'; err.style.display = 'none'; - const res = await Nova.api('auth', 'login', { - method: 'POST', - body: { username: document.getElementById('l-user').value, password: document.getElementById('l-pass').value } - }); + btn.disabled = true; err.style.display = 'none'; + + // Step 2: TOTP code entry + const totpInput = document.getElementById('l-totp'); + if (totpInput && _loginCredentials) { + btn.textContent = 'Verifying…'; + const res = await Nova.api('auth', 'login', { + method: 'POST', + body: { ..._loginCredentials, totp_code: totpInput.value.trim() } + }); + if (res?.success && res.data?.user?.role === 'admin') { + location.reload(); + } else { + err.textContent = res?.message || 'Invalid 2FA code'; + err.style.display = ''; + btn.disabled = false; btn.textContent = 'Verify'; + } + return; + } + + // Step 1: username + password + btn.textContent = 'Signing in…'; + const creds = { username: document.getElementById('l-user').value, password: document.getElementById('l-pass').value }; + const res = await Nova.api('auth', 'login', { method: 'POST', body: creds }); if (res?.success && res.data?.user?.role === 'admin') { location.reload(); + } else if (res?.totp_required) { + // Show TOTP step + _loginCredentials = creds; + document.getElementById('l-user').closest('.form-group').style.display = 'none'; + document.getElementById('l-pass').closest('.form-group').style.display = 'none'; + const totpGroup = document.createElement('div'); + totpGroup.className = 'form-group'; + totpGroup.innerHTML = ''; + loginForm.insertBefore(totpGroup, btn.parentNode || btn); + btn.textContent = 'Verify'; btn.disabled = false; } else { err.textContent = res?.message || 'Invalid credentials or insufficient role'; err.style.display = ''; @@ -57,14 +87,20 @@ 'mysql-manager': mysqlManager, 'mail-server': mailServer, 'ftp-server': ftpServer, + 'nginx-proxy': nginxProxy, + sessions, + wordpress, 'ssl-manager': sslManager, firewall, 'audit-log': auditLog, + twofa, updates, backups, + cloudflare, settings, }; + window._novaPages = pages; Nova.initNav(pages); await Nova.loadPage('dashboard', pages); checkUpdates(); @@ -1301,43 +1337,15 @@ ${ips.length ? `
`; } - // ── Backups ──────────────────────────────────────────────────────────────── - async function backups() { - const res = await Nova.api('accounts','list',{params:{limit:1000}}); - const accts = res?.data?.accounts || []; - return ` -
-
- Backup Manager - -
-
-
-
- -
-
- -
-
- - ${accts.slice(0,20).map(a => ` - - - - `).join('')} -
AccountDomainActions
${a.username}${a.domain} - -
-
-
`; - } - window.adminBackupAll = () => Nova.toast('Full backup queued — this may take several minutes.','info',6000); - window.adminBackupAccount = (id, user) => Nova.toast(`Backup queued for ${user}…`,'info'); + // ── Backups — delegates to backupsFull() defined in additions ───────────── + async function backups() { return backupsFull(); } + + // ── Stubs for new pages — implementations in additions block below ───────── + async function wordpress() { return `

Loading…

`; } + async function cloudflare() { return `

Loading…

`; } + async function twofa() { return `

Loading…

`; } + async function nginxProxy() { return `

Loading...

`; } + async function sessions() { return `

Loading...

`; } // ── Global action helpers ────────────────────────────────────────────────── window.adminPage = (page) => Nova.loadPage(page, pages); @@ -1406,3 +1414,825 @@ ${ips.length ? ` if (badge && total > 0) { badge.textContent = total; badge.style.display = ''; } } })(); +// ── ADDITIONS: appended by features #14-17 ──────────────────────────────── + +// ── WordPress Manager (#14) ──────────────────────────────────────────────── +async function wordpress() { + const [acctRes, wpRes] = await Promise.all([ + Nova.api('accounts','list',{params:{limit:500}}), + Nova.api('wordpress','list'), + ]); + const accts = acctRes?.data?.accounts || []; + const installs = wpRes?.data?.installs || []; + window._adminAcctsWP = accts; + + return ` +
+

WordPress Manager

+ +
+ +
+
+ WordPress Installs + ${installs.length} install${installs.length!==1?'s':''} + +
+ ${installs.length ? ` +
+ + + + ${installs.map(w => ` + + + + + + + `).join('')} + +
DomainPathAccountVersionStatusActions
${Nova.escHtml(w.domain)}${Nova.escHtml(w.path||'/')}${Nova.escHtml(w.username||'—')}${w.wp_version ? `${Nova.escHtml(w.wp_version)}` : '—'}${Nova.badge(w.status||'active', w.status==='active'?'green':w.status==='updating'?'yellow':'red')} + + + + + ${!w.staging_of ? `` : `staging`} + +
+
` : `
No WordPress installs yet. Click "Install WordPress" to get started.
`} +
`; +} + +window.wpInstallModal = () => { + const accts = window._adminAcctsWP || []; + const opts = accts.map(a => ``).join(''); + Nova.modal('Install WordPress', ` +
+
+
+
+
+
+
+

wp-cli will be downloaded automatically if not installed. This may take 1-2 minutes.

`, + ` + `); +}; + +window.wpSubmitInstall = async () => { + const btn = document.getElementById('wp-install-btn'); + if (btn) { btn.disabled = true; btn.textContent = 'Installing…'; } + Nova.toast('Installing WordPress — this may take 1-2 minutes…', 'info', 90000); + const res = await Nova.api('wordpress','install',{method:'POST',body:{ + account_id: +document.getElementById('wp-acct')?.value, + domain: document.getElementById('wp-domain')?.value, + path: document.getElementById('wp-path')?.value || '/', + site_title: document.getElementById('wp-title')?.value, + admin_user: document.getElementById('wp-admin')?.value, + admin_pass: document.getElementById('wp-adminpass')?.value, + admin_email:document.getElementById('wp-email')?.value, + }}); + document.querySelector('.modal-overlay')?.remove(); + if (res?.success) { Nova.toast('WordPress installed!','success'); adminPage('wordpress'); } + else Nova.toast(res?.message || 'Install failed','error'); +}; + +window.wpUpdate = async (id, type) => { + const action = type === 'core' ? 'update-core' : type === 'plugins' ? 'update-plugins' : 'update-themes'; + Nova.toast(`Updating ${type}…`,'info',15000); + const r = await Nova.api('wordpress', action, {method:'POST',body:{install_id:id}}); + Nova.toast(r?.message || (r?.success ? 'Updated' : 'Failed'), r?.success ? 'success' : 'error'); + if (r?.success) adminPage('wordpress'); +}; + +window.wpInfo = async (id, domain) => { + Nova.toast('Loading info…','info',5000); + const r = await Nova.api('wordpress','info',{params:{install_id:id}}); + if (!r?.success) { Nova.toast(r?.message,'error'); return; } + const d = r.data || {}; + const plugins = (d.plugins||[]).map(p => `${Nova.escHtml(p.name)}${Nova.escHtml(p.version||'')}${Nova.badge(p.status||'inactive',p.status==='active'?'green':'muted')}`).join(''); + const themes = (d.themes||[]).map(t => `${Nova.escHtml(t.name)}${Nova.escHtml(t.version||'')}${Nova.badge(t.status||'inactive',t.status==='active'?'green':'muted')}`).join(''); + Nova.modal(`WordPress: ${domain}`,` +
+

Core Version

${Nova.escHtml(d.version||'—')}

+

Site URL

${Nova.escHtml(d.siteurl||'—')}

+
+

Plugins (${(d.plugins||[]).length})

+ ${plugins ? `${plugins}
PluginVersionStatus
` : '

None

'} +

Themes (${(d.themes||[]).length})

+ ${themes ? `${themes}
ThemeVersionStatus
` : '

None

'}`); +}; + +window.wpCloneStaging = (id, domain) => { + Nova.confirm(`Clone ${domain} to a staging environment? This copies all files and the database.`, async () => { + Nova.toast('Cloning to staging…','info',30000); + const r = await Nova.api('wordpress','clone-staging',{method:'POST',body:{install_id:id}}); + Nova.toast(r?.message || (r?.success ? 'Staging created' : 'Failed'), r?.success ? 'success' : 'error'); + if (r?.success) adminPage('wordpress'); + }); +}; + +window.wpDelete = (id, domain) => { + Nova.confirm(`DELETE WordPress install on ${domain}? This removes all files AND drops the database. IRREVERSIBLE.`, async () => { + const r = await Nova.api('wordpress','delete',{method:'POST',body:{install_id:id}}); + Nova.toast(r?.message || (r?.success ? 'Deleted' : 'Failed'), r?.success ? 'success' : 'error'); + if (r?.success) adminPage('wordpress'); + }, true); +}; + +// ── Backup Manager — full implementation (#15) ───────────────────────────── +async function backupsFull() { + const [acctRes, bkRes] = await Promise.all([ + Nova.api('accounts','list',{params:{limit:500}}), + Nova.api('backup','list'), + ]); + const accts = acctRes?.data?.accounts || []; + const backupList = bkRes?.data?.backups || []; + const diskUsed = bkRes?.data?.disk_used || 0; + window._adminAcctsBK = accts; + + return ` +
+

Backup Manager

+
+ + +
+
+ +
+
+
Total Backups
+
${backupList.length}
+
+
+
Disk Used
+
${Nova.bytes(diskUsed)}
+
+
+
Accounts
+
${accts.length}
+
+
+ +
+
+ Backup Schedules + +
+
+

Set per-account backup schedules. Cron runs backups automatically based on the configured frequency.

+
+ ${accts.slice(0,8).map(a => ``).join('')} + ${accts.length>8?`+${accts.length-8} more`:''} +
+
+
+ +
+
All Backups
+ ${backupList.length ? ` +
+ + + + ${backupList.map(b => ` + + + + + + + + `).join('')} + +
AccountTypeSizeStatusStorageCreatedActions
${Nova.escHtml(b.username||b.account_id||'—')}${Nova.badge(b.type,'default')}${Nova.bytes(b.size||0)}${Nova.badge(b.status, b.status==='complete'?'green':b.status==='failed'?'red':'yellow')}${b.remote_path ? Nova.badge('remote','blue') : Nova.badge('local','muted')}${Nova.relTime(b.created_at)} + ${b.status==='complete'?`Download`:''} + + +
+
` : `
No backups yet.
`} +
`; +} + +window.bkCreateModal = () => { + const accts = window._adminAcctsBK || []; + const opts = accts.map(a => ``).join(''); + Nova.modal('Create Backup', ` +
+
+ +
`, + ` + `); +}; + +window.bkSubmitCreate = async () => { + const id = +document.getElementById('bk-acct')?.value; + const type = document.getElementById('bk-type')?.value; + document.querySelector('.modal-overlay')?.remove(); + Nova.toast('Creating backup…','info',30000); + const r = await Nova.api('backup','create',{method:'POST',body:{account_id:id,type}}); + Nova.toast(r?.message||(r?.success?'Backup complete':'Failed'), r?.success?'success':'error'); + if (r?.success) adminPage('backups'); +}; + +window.bkRestore = (id) => { + Nova.confirm('Restore this backup? Current files and databases will be overwritten. IRREVERSIBLE.', async () => { + Nova.toast('Restoring…','info',30000); + const r = await Nova.api('backup','restore',{method:'POST',body:{id}}); + Nova.toast(r?.message||(r?.success?'Restored':'Failed'), r?.success?'success':'error'); + }, true); +}; + +window.bkDelete = (id) => { + Nova.confirm('Delete this backup?', async () => { + const r = await Nova.api('backup','delete',{method:'POST',body:{id}}); + Nova.toast(r?.message||(r?.success?'Deleted':'Failed'), r?.success?'success':'error'); + if (r?.success) adminPage('backups'); + }, true); +}; + +window.bkScheduleModal = () => { + const accts = window._adminAcctsBK || []; + const opts = accts.map(a => ``).join(''); + Nova.modal('Configure Backup Schedule', ` +
+
+ +
+
+ +
+
`, + ` + `); +}; + +window.bkScheduleForAccount = async (id, user) => { + const r = await Nova.api('backup','get-schedule',{params:{account_id:id}}); + const s = r?.data || {}; + Nova.modal(`Schedule: ${user}`, ` +
+ +
+
+ +
+
`, + ` + `); +}; + +window.bkSaveSchedule = async () => { + const id = +document.getElementById('bks-acct')?.value; + await bkSaveScheduleFor(id); +}; + +window.bkSaveScheduleFor = async (id) => { + const r = await Nova.api('backup','schedule',{method:'POST',body:{ + account_id: id, + frequency: document.getElementById('bks-freq')?.value, + type: document.getElementById('bks-type')?.value, + retain: +document.getElementById('bks-retain')?.value, + }}); + document.querySelector('.modal-overlay')?.remove(); + Nova.toast(r?.message||(r?.success?'Schedule saved':'Failed'), r?.success?'success':'error'); +}; + +// ── Cloudflare Integration (#16) ────────────────────────────────────────── +async function cloudflare() { + const acctRes = await Nova.api('accounts','list',{params:{limit:500}}); + const accts = acctRes?.data?.accounts || []; + window._adminAcctsCF = accts; + + return ` +
+

Cloudflare Integration

+

Manage Cloudflare API credentials and DNS sync per account.

+
+ +
+
Account Credentials
+
+

Select an account to configure or view its Cloudflare API key.

+
+
+ + +
+
+
+
+
+ +`; +} + +window.cfLoadAccount = async (id) => { + if (!id) { document.getElementById('cf-acct-panel').innerHTML=''; return; } + const r = await Nova.api('cloudflare','get-credentials',{params:{account_id:id}}); + const c = r?.data || {}; + document.getElementById('cf-acct-panel').innerHTML = ` +
+
+
+
+
+
+
+ + +
+ ${c.cf_api_key ? `

Key on file: ${Nova.escHtml(c.cf_api_key)}

` : ''}`; + document.getElementById('cf-zones-panel').style.display = ''; + window._cfCurrentAcct = id; +}; + +window.cfSaveCredentials = async (id) => { + const r = await Nova.api('cloudflare','save-credentials',{method:'POST',body:{ + account_id: id, + api_key: document.getElementById('cf-apikey')?.value, + email: document.getElementById('cf-email')?.value, + }}); + Nova.toast(r?.message||(r?.success?'Saved':'Failed'), r?.success?'success':'error'); +}; + +window.cfTestKey = async (id) => { + const r = await Nova.api('cloudflare','test-key',{method:'POST',body:{ + account_id: id, + api_key: document.getElementById('cf-apikey')?.value, + email: document.getElementById('cf-email')?.value, + }}); + Nova.toast(r?.message||(r?.data?.valid?'API key is valid':'Invalid key'), r?.data?.valid?'success':'error'); +}; + +window.cfRefreshZones = async () => { + const id = window._cfCurrentAcct; + if (!id) { Nova.toast('Select an account first','error'); return; } + const r = await Nova.api('cloudflare','list-zones',{params:{account_id:id}}); + const zones = r?.data?.zones || r?.data || []; + const body = document.getElementById('cf-zones-body'); + if (!body) return; + if (!r?.success) { body.innerHTML=`

${Nova.escHtml(r?.message||'Failed to load zones')}

`; return; } + if (!zones.length) { body.innerHTML='

No zones found for these credentials.

'; return; } + body.innerHTML = ` + + + + ${zones.map(z=>` + + + + + `).join('')} + +
ZoneStatusPlanActions
${Nova.escHtml(z.name)}
${Nova.escHtml(z.id)}		${Nova.badge(z.status,z.status==='active'?'green':'yellow')}${Nova.escHtml(z.plan?.name||'—')} + + + + +
`; +}; + +window.cfViewRecords = async (zoneId, domain, acctId) => { + const r = await Nova.api('cloudflare','list-records',{method:'POST',body:{zone_id:zoneId,account_id:acctId}}); + const records = r?.data?.records || r?.data || []; + Nova.modal(`CF DNS: ${domain}`, !records.length ? '

No records.

' : ` + + + + ${records.map(rec=>` + + + + + `).join('')} + +
NameTypeValueProxy
${Nova.escHtml(rec.name)}${Nova.badge(rec.type,'default')}${Nova.escHtml(rec.content)} + +
`); +}; + +window.cfToggleProxy = async (zoneId, recordId, proxied, acctId) => { + const r = await Nova.api('cloudflare','toggle-proxy',{method:'POST',body:{zone_id:zoneId,record_id:recordId,proxied,account_id:acctId}}); + Nova.toast(r?.message||(r?.success?'Updated':'Failed'), r?.success?'success':'error'); +}; + +window.cfSync = async (zoneId, domain, dir, acctId) => { + const action = dir==='to' ? 'sync-to-cf' : 'sync-from-cf'; + const label = dir==='to' ? 'Pushing to Cloudflare' : 'Pulling from Cloudflare'; + Nova.toast(`${label}…`,'info',10000); + const r = await Nova.api('cloudflare',action,{method:'POST',body:{zone_id:zoneId,domain,account_id:acctId}}); + Nova.toast(r?.message||(r?.success?'Done':'Failed'), r?.success?'success':'error'); +}; + +window.cfPurge = async (zoneId, acctId) => { + Nova.confirm('Purge all Cloudflare cache for this zone?', async () => { + const r = await Nova.api('cloudflare','purge-cache',{method:'POST',body:{zone_id:zoneId,account_id:acctId}}); + Nova.toast(r?.message||(r?.success?'Cache purged':'Failed'), r?.success?'success':'error'); + }); +}; + +// ── TOTP / 2FA Admin (#17) ──────────────────────────────────────────────── +async function twofa() { + const res = await Nova.api('accounts','list',{params:{limit:500}}); + const users = res?.data?.accounts || []; + return ` +
+

Two-Factor Authentication

+

View 2FA status for all users. Force-disable for account recovery.

+
+ +
+
+ User 2FA Status + +
+
+ + + + ${users.map(u=>` + + + + + + `).join('')} + +
UsernameEmailRole2FA StatusActions
${Nova.escHtml(u.username)}${Nova.escHtml(u.email||'—')}${Nova.badge(u.role||'user','default')} + — + + + +
+
+
`; +} + +window.totpCheckStatus = async (userId) => { + const r = await Nova.api('totp','admin-status',{method:'POST',body:{user_id:userId}}); + const el = document.getElementById(`totp-status-${userId}`); + if (!el) return; + const enabled = r?.data?.totp_enabled; + el.innerHTML = enabled + ? Nova.badge('Enabled','green') + : Nova.badge('Disabled','muted'); +}; + +window.totpAdminDisable = (userId, username) => { + Nova.confirm(`Force-disable 2FA for ${username}? Use only for account recovery when user cannot log in.`, async () => { + const r = await Nova.api('totp','admin-disable',{method:'POST',body:{user_id:userId}}); + Nova.toast(r?.message||(r?.success?'2FA disabled':'Failed'), r?.success?'success':'error'); + if (r?.success) { + const el = document.getElementById(`totp-status-${userId}`); + if (el) el.innerHTML = Nova.badge('Disabled','muted'); + } + }, true); +}; + +// ── Nginx Proxy Manager ─────────────────────────────────────────────────────── +async function nginxProxy() { + const [statusR, hostsR] = await Promise.all([ + Nova.api('proxy', 'status'), + Nova.api('proxy', 'hosts'), + ]); + const s = statusR?.data || {}; + const hosts = hostsR?.data || (Array.isArray(hostsR) ? hostsR : []); + const run = s.running; + const inst = s.installed; + + return ` +
+

Nginx Proxy Manager

+
+ ${inst ? ` + + + + ` : ''} +
+
+ +
+
+
Nginx Status
+
${inst ? (run ? 'Running' : 'Stopped') : 'Not Installed'}
+
${s.version || (inst ? 'nginx' : 'click Install to set up')}
+
+
+
Proxy Hosts
+
${hosts.length}
+
${hosts.filter(h => h.enabled).length} active
+
+
+
SSL Enabled
+
${hosts.filter(h => h.ssl_enabled).length}
+
of ${hosts.length} hosts
+
+
+ +${!inst ? ` +
+ +

Nginx Not Installed

+

Install Nginx on this VM to use it as a reverse proxy in front of Apache, or use a separate proxy VM (see Setup Guide).

+
+ + +
+
+` : ` +
+
+

Service Controls

+
+ + + + +
+
+
+ +
+
+

Proxy Hosts

+ ${hosts.length} total +
+ ${hosts.length === 0 ? ` +
+ No proxy hosts yet. Click Sync Accounts to auto-add all hosted domains, or + Add Host to add manually. +
+ ` : ` +
+ + + + + + + + + + ${hosts.map(h => ` + + + + + + + `).join('')} + +
DomainUpstreamSSLStatusActions
${Nova.escHtml(h.domain)}${Nova.escHtml(h.upstream)}${h.ssl_enabled ? Nova.badge('SSL','green') : Nova.badge('HTTP','muted')}${h.enabled ? Nova.badge('Active','green') : Nova.badge('Disabled','red')} + + + +
+
+ `} +
+`}`; +} + +window.proxyInstall = async () => { + if (!confirm('Install Nginx on this VM? This will run apt-get install nginx.')) return; + Nova.toast('Installing nginx...', 'info'); + const r = await Nova.api('proxy', 'install', { method: 'POST' }); + Nova.toast(r?.data?.result || r?.message || 'Done', r?.data?.result === 'installed' ? 'success' : 'info'); + Nova.loadPage('nginx-proxy', window._novaPages); +}; + +window.proxyControl = async (action) => { + const r = await Nova.api('proxy', 'control', { method: 'POST', body: { action } }); + Nova.toast(r?.data?.result || r?.message || action + ' done', 'success'); + setTimeout(() => Nova.loadPage('nginx-proxy', window._novaPages), 800); +}; + +window.proxySync = async () => { + const r = await Nova.api('proxy', 'sync', { method: 'POST' }); + Nova.toast(`Synced: ${r?.data?.added ?? 0} new hosts added`, 'success'); + Nova.loadPage('nginx-proxy', window._novaPages); +}; + +window.proxyAddHost = () => { + Nova.modal('Add Proxy Host', ` +
+
+
+ + e.g. http://127.0.0.1:80 or http://10.0.0.2:8080
+
+
+
+
+ `, async () => { + const domain = document.getElementById('ph-domain')?.value?.trim(); + const upstream = document.getElementById('ph-upstream')?.value?.trim(); + if (!domain || !upstream) { Nova.toast('Domain and upstream required', 'error'); return; } + const r = await Nova.api('proxy', 'hosts', { + method: 'POST', + body: { domain, upstream, ssl_enabled: document.getElementById('ph-ssl')?.checked ? 1 : 0 } + }); + Nova.toast(r?.success ? 'Host added' : (r?.message || 'Failed'), r?.success ? 'success' : 'error'); + if (r?.success) Nova.loadPage('nginx-proxy', window._novaPages); + }); +}; + +window.proxyEditHost = async (id) => { + const hostsR = await Nova.api('proxy', 'hosts'); + const hosts = hostsR?.data || (Array.isArray(hostsR) ? hostsR : []); + const h = hosts.find(x => x.id == id); + if (!h) return; + Nova.modal('Edit Proxy Host', ` +
+
+
+
+
+
+
+ + Leave blank to use auto-generated config
+ `, async () => { + const r = await Nova.api('proxy', 'host', { + method: 'PUT', + body: { id, + domain: document.getElementById('phe-domain')?.value?.trim(), + upstream: document.getElementById('phe-upstream')?.value?.trim(), + ssl_enabled: document.getElementById('phe-ssl')?.checked ? 1 : 0, + custom_config: document.getElementById('phe-custom')?.value?.trim() || null, + } + }); + Nova.toast(r?.success ? 'Updated' : (r?.message || 'Failed'), r?.success ? 'success' : 'error'); + if (r?.success) Nova.loadPage('nginx-proxy', window._novaPages); + }); +}; + +window.proxyToggle = async (id, enable) => { + const r = await Nova.api('proxy', 'toggle', { method: 'POST', body: { id, enabled: enable } }); + Nova.toast(r?.success ? (enable ? 'Enabled' : 'Disabled') : 'Failed', r?.success ? 'success' : 'error'); + if (r?.success) Nova.loadPage('nginx-proxy', window._novaPages); +}; + +window.proxyDeleteHost = (id, domain) => { + Nova.confirm(`Delete proxy host for ${domain}?`, async () => { + const r = await Nova.api('proxy', 'host', { method: 'DELETE', body: { id } }); + Nova.toast(r?.success ? 'Deleted' : 'Failed', r?.success ? 'success' : 'error'); + if (r?.success) Nova.loadPage('nginx-proxy', window._novaPages); + }, true); +}; + +window.proxySetupInstructions = async () => { + const scriptUrl = '/api/proxy/setup-script'; + Nova.modal('Nginx Proxy Setup Guide', ` +
+

Option A — Local (Nginx on this VM)

+

Install Nginx alongside Apache on this VM. Nginx listens on ports 80/443 and forwards to Apache. Best for SSL termination and caching.

+
    +
  1. Click Install Nginx Locally on the main Nginx Proxy page
    2. +
  2. Move Apache to port 8080: edit /etc/apache2/ports.conf → change Listen 80 to Listen 8080
    3. +
  3. Update upstream in all proxy hosts to http://127.0.0.1:8080
    4. +
  4. Click Sync Accounts to auto-populate proxy hosts from your hosted accounts
    5. +
  5. Click Reload Config to apply changes
    6. +
+ +

Option B — Remote Proxy VM (Recommended for production)

+

Run a dedicated Nginx proxy VM in front of this NovaCPX VM. Traffic flows: Internet → FortiGate → Nginx Proxy VM → NovaCPX VM (Apache).

+
    +
  1. Create a new VM on Proxmox (Ubuntu 22.04, 1 vCPU, 1GB RAM)
    2. +
  2. Run the setup script below on the new VM as root
    3. +
  3. Point FortiGate VIPs to the proxy VM IP (ports 80/443)
    4. +
  4. Set the proxy upstream to this NovaCPX VM IP (http://10.48.200.110:80)
    5. +
  5. Add proxy hosts for each domain from your NovaCPX admin panel
    6. +
+ +

Automated Setup Script

+

Run this on the target VM (local or remote) as root:

+
+ curl -sk https://YOUR_NOVACPX_IP:8882/api/proxy/setup-script | bash +
+

Or download and review before running:

+
+ curl -sk https://YOUR_NOVACPX_IP:8882/api/proxy/setup-script -o proxy-setup.sh
+ cat proxy-setup.sh # review
+ bash proxy-setup.sh +
+ +

Integration with VirtualHost Manager

+

When proxy mode is active, NovaCPX automatically:

+
    +
  • Creates a proxy host entry for every new account
    • +
  • Removes the proxy host when an account is terminated
    • +
  • Re-generates Nginx config on every account change
    • +
  • Uses account SSL certs automatically if SSL is enabled on the proxy host
    • +
+
+ `, null, { cancelLabel: 'Close', showConfirm: false }); +}; + +// ── #29 Session Manager ─────────────────────────────────────────────────────── +async function sessions() { + const r = await Nova.api('sessions', 'list'); + const rows = r?.data || []; + const fmt = d => new Date(d.replace(' ','T')+'Z').toLocaleString(); + const ua = s => { + if (!s) return '—'; + const m = s.match(/\(([^)]+)\)/); + return m ? m[1].split(';')[0].slice(0,50) : s.slice(0,50); + }; + return ` +
+

Session Manager

+
+ +
+
+
+
Active Sessions
${rows.length}
+
Unique Users
${new Set(rows.map(r=>r.user_id)).size}
+
Unique IPs
${new Set(rows.map(r=>r.ip_address)).size}
+
+
+

Active Sessions

${rows.length} total
+ ${rows.length === 0 + ? '
No active sessions
' + : `
+ + + ${rows.map(s=>` + + + + + + + `).join('')} +
UserRoleIPBrowserCreatedExpiresActions
${Nova.escHtml(s.username)}
${Nova.escHtml(s.email)}		${Nova.badge(s.role, s.role==='admin'?'red':s.role==='reseller'?'yellow':'blue')}${Nova.escHtml(s.ip_address)}${Nova.escHtml(ua(s.user_agent||''))}${fmt(s.created_at)}${fmt(s.expires_at)} + + +
`} +
`; +} + +window.sessionsRevoke = async (id) => { + const r = await Nova.api('sessions','revoke',{method:'DELETE',body:{session_id:id}}); + Nova.toast(r?.success?'Session revoked':'Failed',r?.success?'success':'error'); + if (r?.success) Nova.loadPage('sessions',window._novaPages); +}; + +window.sessionsRevokeUser = (uid,name) => { + Nova.confirm(`Revoke all sessions for ${name}? They will be logged out everywhere.`,async()=>{ + const r=await Nova.api('sessions','revoke-user',{method:'DELETE',body:{user_id:uid}}); + Nova.toast(r?.success?`${r.data?.revoked??'?'} sessions revoked`:'Failed',r?.success?'success':'error'); + if(r?.success) Nova.loadPage('sessions',window._novaPages); + },true); +}; + +window.sessionsRevokeAll = () => { + Nova.confirm('Revoke ALL sessions? Everyone including you will be logged out.',async()=>{ + const r=await Nova.api('sessions','revoke-all',{method:'DELETE',body:{}}); + Nova.toast(r?.success?'All sessions revoked — logging out...':'Failed',r?.success?'success':'error'); + if(r?.success) setTimeout(()=>location.reload(),1500); + },true); +}; diff --git a/panel/public/assets/js/nova.js b/panel/public/assets/js/nova.js index 242a819..2ce64c5 100644 --- a/panel/public/assets/js/nova.js +++ b/panel/public/assets/js/nova.js @@ -144,3 +144,22 @@ window.Nova = (() => { return { api, toast, modal, confirm, initNav, loadPage, progressBar, bytes, relTime, badge, serviceDot, escHtml }; })(); + +// #26 Mobile sidebar toggle — shared across all panels +document.addEventListener('DOMContentLoaded', () => { + const toggle = document.getElementById('sidebar-toggle'); + const sidebar = document.getElementById('sidebar'); + const overlay = document.getElementById('sidebar-overlay'); + if (!toggle || !sidebar) return; + + const open = () => { sidebar.classList.add('open'); overlay?.classList.add('open'); document.body.style.overflow = 'hidden'; }; + const close = () => { sidebar.classList.remove('open'); overlay?.classList.remove('open'); document.body.style.overflow = ''; }; + + toggle.addEventListener('click', () => sidebar.classList.contains('open') ? close() : open()); + overlay?.addEventListener('click', close); + + // Close when a nav link is clicked on mobile + sidebar.querySelectorAll('.sidebar-link').forEach(link => + link.addEventListener('click', () => { if (window.innerWidth <= 768) close(); }) + ); +}); diff --git a/panel/public/errors/404.php b/panel/public/errors/404.php new file mode 100644 index 0000000..7ffc2c8 --- /dev/null +++ b/panel/public/errors/404.php @@ -0,0 +1,39 @@ + + + + + +404 — Page Not Found · NovaCPX + + + +
+ +
404
+

Page Not Found

+

The page you're looking for doesn't exist or has been moved.

+ + + Go Back + +
+ + diff --git a/panel/public/errors/500.php b/panel/public/errors/500.php new file mode 100644 index 0000000..ce2d702 --- /dev/null +++ b/panel/public/errors/500.php @@ -0,0 +1,39 @@ + + + + + +500 — Server Error · NovaCPX + + + +
+ +
500
+

Internal Server Error

+

Something went wrong on our end. The issue has been logged. Please try again in a moment.

+ + + Go Back + +
+ + diff --git a/panel/public/reseller/index.php b/panel/public/reseller/index.php index 67ce061..95143f4 100644 --- a/panel/public/reseller/index.php +++ b/panel/public/reseller/index.php @@ -41,6 +41,7 @@ $_v = fn($f) => '?v=' . @filemtime(dirname(__DIR__) . $f);
+
Reseller Dashboard
diff --git a/panel/public/user/index.php b/panel/public/user/index.php index 48080c7..df4ae2d 100644 --- a/panel/public/user/index.php +++ b/panel/public/user/index.php @@ -158,6 +158,7 @@ svg.ring circle { transition: stroke-dashoffset .5s; }
+
My Hosting