mirror of
https://github.com/myronblair/novacpx
synced 2026-06-30 17:50:41 -05:00
myron
9bd78a81ea
- proxy.php: always set proxy_mode=disabled and clear remote_host/backend_ip on any uninstall, not just when nginx binary is removed - admin.js: show setup cards when mode==='disabled' regardless of whether nginx binary still exists on the remote VM - Status card shows 'Disabled' instead of 'Stopped' when mode is disabled Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
216 lines
9.9 KiB
PHP
216 lines
9.9 KiB
PHP
<?php
|
|
/**
|
|
* Proxy endpoint — manage Nginx reverse proxy
|
|
* Routes:
|
|
* GET /api/proxy/status — nginx status
|
|
* POST /api/proxy/install — install nginx (local only)
|
|
* POST /api/proxy/control — {action: start|stop|restart|reload}
|
|
* GET /api/proxy/hosts — list proxy hosts
|
|
* POST /api/proxy/hosts — add proxy host
|
|
* PUT /api/proxy/host — {id, ...fields} update host
|
|
* DELETE /api/proxy/host — {id} delete host
|
|
* POST /api/proxy/toggle — {id, enabled} toggle host
|
|
* POST /api/proxy/sync — sync hosts from accounts
|
|
* POST /api/proxy/write-configs — regenerate all nginx configs
|
|
* GET /api/proxy/setup-script — return bash install script
|
|
* GET /api/proxy/settings — get proxy settings (mode, remote host, etc.)
|
|
* POST /api/proxy/settings — save proxy settings
|
|
* POST /api/proxy/test-remote — test SSH connectivity to remote proxy VM
|
|
*/
|
|
|
|
Auth::getInstance()->require('admin');
|
|
$body = json_decode(file_get_contents('php://input'), true) ?? [];
|
|
|
|
require_once NOVACPX_LIB . '/ProxyManager.php';
|
|
|
|
try {
|
|
$method = $_SERVER['REQUEST_METHOD'];
|
|
|
|
match (true) {
|
|
|
|
// GET status
|
|
$action === 'status' && $method === 'GET' =>
|
|
Response::json(['success' => true, 'data' => ProxyManager::status()]),
|
|
|
|
// POST install
|
|
$action === 'install' && $method === 'POST' =>
|
|
Response::json(['success' => true, 'data' => ['result' => ProxyManager::install()]]),
|
|
|
|
// POST control
|
|
$action === 'control' && $method === 'POST' => (function() use ($body) {
|
|
$act = $body['action'] ?? '';
|
|
if (!in_array($act, ['start','stop','restart','reload'])) Response::error('Invalid action', 400);
|
|
$result = match($act) {
|
|
'start' => ProxyManager::start(),
|
|
'stop' => ProxyManager::stop(),
|
|
'restart' => ProxyManager::restart(),
|
|
'reload' => ProxyManager::reload(),
|
|
};
|
|
$running = ProxyManager::isRunning();
|
|
$success = match($act) {
|
|
'start', 'restart' => $running,
|
|
'stop' => !$running,
|
|
'reload' => !str_starts_with($result, 'Config test failed'),
|
|
};
|
|
Response::json(['success' => $success, 'data' => ['result' => $result, 'running' => $running]]);
|
|
})(),
|
|
|
|
// GET hosts list
|
|
$action === 'hosts' && $method === 'GET' =>
|
|
Response::json(['success' => true, 'data' => ProxyManager::listHosts()]),
|
|
|
|
// POST hosts — add
|
|
$action === 'hosts' && $method === 'POST' => (function() use ($body) {
|
|
if (empty($body['domain'])) Response::error('domain required', 400);
|
|
if (empty($body['upstream'])) Response::error('upstream required', 400);
|
|
$id = ProxyManager::addHost($body);
|
|
Response::json(['success' => true, 'data' => ['id' => $id]]);
|
|
})(),
|
|
|
|
// PUT host — update (body has id)
|
|
$action === 'host' && $method === 'PUT' => (function() use ($body) {
|
|
if (empty($body['id'])) Response::error('id required', 400);
|
|
ProxyManager::updateHost((int)$body['id'], $body);
|
|
Response::json(['success' => true]);
|
|
})(),
|
|
|
|
// DELETE host (body has id)
|
|
$action === 'host' && $method === 'DELETE' => (function() use ($body) {
|
|
$id = (int)($body['id'] ?? $_GET['id'] ?? 0);
|
|
if (!$id) Response::error('id required', 400);
|
|
ProxyManager::deleteHost($id);
|
|
Response::json(['success' => true]);
|
|
})(),
|
|
|
|
// POST toggle
|
|
$action === 'toggle' && $method === 'POST' => (function() use ($body) {
|
|
if (empty($body['id'])) Response::error('id required', 400);
|
|
ProxyManager::toggleHost((int)$body['id'], (bool)($body['enabled'] ?? true));
|
|
Response::json(['success' => true]);
|
|
})(),
|
|
|
|
// POST sync
|
|
$action === 'sync' && $method === 'POST' => (function() {
|
|
$added = ProxyManager::syncFromAccounts();
|
|
Response::json(['success' => true, 'data' => ['added' => $added]]);
|
|
})(),
|
|
|
|
// POST write-configs
|
|
($action === 'write-configs' || $action === 'write_configs') && $method === 'POST' => (function() {
|
|
ProxyManager::writeAllConfigs();
|
|
Response::json(['success' => true, 'data' => ['result' => 'configs written']]);
|
|
})(),
|
|
|
|
// GET setup-script
|
|
($action === 'setup-script' || $action === 'setup_script') && $method === 'GET' => (function() {
|
|
header('Content-Type: text/plain');
|
|
echo ProxyManager::setupScript();
|
|
exit;
|
|
})(),
|
|
|
|
// GET settings — return current proxy configuration
|
|
$action === 'settings' && $method === 'GET' => (function() {
|
|
$db = DB::getInstance();
|
|
$get = fn(string $k, string $d = '') => $db->fetchOne("SELECT value FROM settings WHERE `key`=?", [$k])['value'] ?? $d;
|
|
Response::json(['success' => true, 'data' => [
|
|
'mode' => $get('proxy_mode', 'disabled'),
|
|
'remote_host' => $get('proxy_remote_host'),
|
|
'remote_user' => $get('proxy_remote_user', 'root'),
|
|
'remote_pass' => $get('proxy_remote_pass') ? '••••••••' : '',
|
|
'backend_ip' => $get('proxy_backend_ip'),
|
|
]]);
|
|
})(),
|
|
|
|
// POST settings — save proxy configuration
|
|
$action === 'settings' && $method === 'POST' => (function() use ($body) {
|
|
$db = DB::getInstance();
|
|
$allowed = ['proxy_mode', 'proxy_remote_host', 'proxy_remote_user', 'proxy_remote_pass', 'proxy_backend_ip'];
|
|
$map = [
|
|
'mode' => 'proxy_mode',
|
|
'remote_host' => 'proxy_remote_host',
|
|
'remote_user' => 'proxy_remote_user',
|
|
'remote_pass' => 'proxy_remote_pass',
|
|
'backend_ip' => 'proxy_backend_ip',
|
|
];
|
|
foreach ($map as $field => $key) {
|
|
if (!array_key_exists($field, $body)) continue;
|
|
if ($field === 'remote_pass' && $body[$field] === '••••••••') continue; // unchanged placeholder
|
|
$db->execute(
|
|
"INSERT INTO settings (`key`, value) VALUES (?,?) ON DUPLICATE KEY UPDATE value=VALUES(value)",
|
|
[$key, $body[$field]]
|
|
);
|
|
}
|
|
Response::json(['success' => true, 'message' => 'Proxy settings saved']);
|
|
})(),
|
|
|
|
// POST test-remote — verify SSH connection to remote proxy VM
|
|
$action === 'test-remote' && $method === 'POST' =>
|
|
Response::json(['success' => true, 'data' => ProxyManager::testRemote()]),
|
|
|
|
// POST switch-local — migrate Apache to internal port, install nginx, enable local proxy mode
|
|
($action === 'switch-local') && $method === 'POST' => (function() use ($body) {
|
|
header('Content-Type: text/event-stream');
|
|
header('Cache-Control: no-cache');
|
|
header('X-Accel-Buffering: no');
|
|
ob_implicit_flush(true);
|
|
while (ob_get_level() > 0) ob_end_flush();
|
|
$port = (int)($body['apache_port'] ?? 8090);
|
|
foreach (ProxyManager::switchToLocalMode($port) as $line) {
|
|
echo 'data: ' . json_encode(['line' => $line]) . "\n\n";
|
|
flush();
|
|
}
|
|
echo "data: " . json_encode(['done' => true]) . "\n\n";
|
|
flush();
|
|
exit;
|
|
})(),
|
|
|
|
// POST disable-local — revert: Apache back to 80, stop nginx, disable proxy
|
|
($action === 'disable-local') && $method === 'POST' => (function() {
|
|
header('Content-Type: text/event-stream');
|
|
header('Cache-Control: no-cache');
|
|
header('X-Accel-Buffering: no');
|
|
ob_implicit_flush(true);
|
|
while (ob_get_level() > 0) ob_end_flush();
|
|
foreach (ProxyManager::disableLocalMode() as $line) {
|
|
echo 'data: ' . json_encode(['line' => $line]) . "\n\n";
|
|
flush();
|
|
}
|
|
echo "data: " . json_encode(['done' => true]) . "\n\n";
|
|
flush();
|
|
exit;
|
|
})(),
|
|
|
|
// POST setup-remote — run nginx setup on remote VM, stream output via SSE
|
|
($action === 'setup-remote') && $method === 'POST' => (function() {
|
|
header('Content-Type: text/event-stream');
|
|
header('Cache-Control: no-cache');
|
|
header('X-Accel-Buffering: no');
|
|
ob_implicit_flush(true);
|
|
while (ob_get_level() > 0) ob_end_flush();
|
|
foreach (ProxyManager::runSetupOnRemote() as $line) {
|
|
echo 'data: ' . json_encode(['line' => $line]) . "\n\n";
|
|
flush();
|
|
}
|
|
echo "data: " . json_encode(['done' => true]) . "\n\n";
|
|
flush();
|
|
exit;
|
|
})(),
|
|
|
|
// DELETE uninstall — remove proxy configs (and optionally nginx)
|
|
$action === 'uninstall' && $method === 'DELETE' => (function() use ($body) {
|
|
$removeNginx = !empty($body['remove_nginx']);
|
|
$result = ProxyManager::uninstall($removeNginx);
|
|
// Always reset to disabled — configs are gone regardless of whether nginx binary was removed
|
|
$db = DB::getInstance();
|
|
$db->execute("INSERT INTO settings (`key`, value) VALUES ('proxy_mode','disabled'),('proxy_remote_host',''),('proxy_backend_ip','') ON DUPLICATE KEY UPDATE value=VALUES(value)");
|
|
Response::json(['success' => true, 'data' => ['result' => $result]]);
|
|
})(),
|
|
|
|
default => Response::error('Not found', 404),
|
|
};
|
|
|
|
} catch (Throwable $e) {
|
|
novacpx_log('error', 'proxy endpoint: ' . $e->getMessage());
|
|
Response::error($e->getMessage(), 500);
|
|
}
|