mirror of
https://github.com/myronblair/novacpx
synced 2026-06-30 17:50:41 -05:00
myron
dbc5a01de9
#4: Postfix virtual mailbox config (virtual_mailbox_domains/maps, vmail user, maildir at /var/mail/vhosts/%d/%n). Dovecot SQL backend pointed at novacpx.email_accounts with SHA512-CRYPT passdb and per-domain Maildir userdb. #5: BIND9 confirmed working — dig @localhost resolves testdomain1.com correctly. #6: Certbot 2.9.0 confirmed installed; domains.document_root wired; infrastructure ready for live domain issuance (testdomain1.com not publicly resolvable so dry-run expected to fail). #7: Fixed all broken user-panel API queries — missing tables (databases, ftp_accounts, ssl_certs, cron_jobs, php_configs, notifications) created; `databases` reserved-word backtick-quoted across DatabaseManager+endpoints; domains.php is_primary→type=main, doc_root→document_root column fixes; DNSManager::createZone call signature fixed; stats/account auto-resolves account_id for user role. #8: assert_account_access() helper added to api/index.php; reseller ownership check wired into email, ftp, databases, domains, dns, ssl endpoints. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
66 lines
3.1 KiB
PHP
66 lines
3.1 KiB
PHP
<?php
|
|
$db = DB::getInstance();
|
|
$body = json_decode(file_get_contents('php://input'), true) ?? [];
|
|
require_once NOVACPX_LIB . '/SSLManager.php';
|
|
require_once NOVACPX_LIB . '/VhostManager.php';
|
|
|
|
$user = Auth::getInstance()->user();
|
|
if ($user['role'] === 'user') {
|
|
$accountId = (int)($db->fetchOne("SELECT id FROM accounts WHERE user_id = ?", [$user['uid']])['id'] ?? 0);
|
|
} else {
|
|
$accountId = (int)($body['account_id'] ?? $_GET['account_id'] ?? 0);
|
|
if ($accountId && $user['role'] === 'reseller') assert_account_access($accountId);
|
|
}
|
|
|
|
match ($action) {
|
|
'list' => (function() use ($db, $accountId) {
|
|
$rows = $db->fetchAll("SELECT id, domain, type, issued_at, expires_at, auto_renew, status FROM ssl_certs WHERE account_id = ? ORDER BY domain", [$accountId]);
|
|
foreach ($rows as &$r) {
|
|
$r['days_remaining'] = $r['expires_at'] ? (int)floor((strtotime($r['expires_at']) - time()) / 86400) : null;
|
|
}
|
|
Response::success($rows);
|
|
})(),
|
|
|
|
'issue' => (function() use ($body, $accountId) {
|
|
$domain = trim($body['domain'] ?? '');
|
|
$email = trim($body['email'] ?? '');
|
|
if (!$domain) Response::error("domain required");
|
|
if (!$accountId) Response::error("account_id required");
|
|
$result = SSLManager::issueLetsEncrypt($accountId, $domain, $email);
|
|
audit('ssl.issue', $domain);
|
|
Response::success($result, "SSL certificate issued for $domain");
|
|
})(),
|
|
|
|
'install-custom' => (function() use ($body, $accountId) {
|
|
$domain = trim($body['domain'] ?? '');
|
|
$cert = trim($body['cert'] ?? '');
|
|
$key = trim($body['key'] ?? '');
|
|
$chain = trim($body['chain'] ?? '');
|
|
if (!$domain || !$cert || !$key) Response::error("domain, cert, and key required");
|
|
$id = SSLManager::installCustom($accountId, $domain, $cert, $key, $chain);
|
|
audit('ssl.install-custom', $domain);
|
|
Response::success(['id' => $id], 'Custom certificate installed');
|
|
})(),
|
|
|
|
'renew' => (function() use ($db, $body, $accountId) {
|
|
$certId = (int)($body['cert_id'] ?? 0);
|
|
$cert = $db->fetchOne("SELECT * FROM ssl_certs WHERE id = ? AND account_id = ?", [$certId, $accountId]);
|
|
if (!$cert) Response::error("Certificate not found", 404);
|
|
$result = SSLManager::issueLetsEncrypt($accountId, $cert['domain']);
|
|
audit('ssl.renew', $cert['domain']);
|
|
Response::success($result, 'Certificate renewed');
|
|
})(),
|
|
|
|
'delete' => (function() use ($db, $body, $accountId) {
|
|
$certId = (int)($body['cert_id'] ?? 0);
|
|
$cert = $db->fetchOne("SELECT * FROM ssl_certs WHERE id = ? AND account_id = ?", [$certId, $accountId]);
|
|
if (!$cert) Response::error("Certificate not found", 404);
|
|
$db->execute("DELETE FROM ssl_certs WHERE id = ?", [$certId]);
|
|
$db->execute("UPDATE domains SET ssl_enabled = 0 WHERE domain = ?", [$cert['domain']]);
|
|
audit('ssl.delete', $cert['domain']);
|
|
Response::success(null, 'Certificate removed');
|
|
})(),
|
|
|
|
default => Response::error("Unknown ssl action: $action", 404),
|
|
};
|