Implements a comprehensive virtual host management system for OpenWrt with
nginx reverse proxy and Let's Encrypt SSL certificate integration.
Features:
- Virtual host management with nginx reverse proxy configuration
- Backend connectivity testing before deployment
- SSL/TLS certificate provisioning via acme.sh and Let's Encrypt
- Certificate expiry monitoring with color-coded warnings
- HTTP Basic Authentication support
- WebSocket protocol support with upgrade headers
- Real-time nginx access log viewer per domain
- Automatic nginx configuration generation and reload
Components:
- RPCD backend (luci.vhost-manager): 11 ubus methods for vhost and cert management
* status, list_vhosts, get_vhost, add_vhost, update_vhost, delete_vhost
* test_backend, request_cert, list_certs, reload_nginx, get_access_logs
- 4 JavaScript views: overview, vhosts, certificates, logs
- ACL with read/write permissions for all ubus methods
- UCI config with global settings and vhost sections
- Comprehensive README with API docs, examples, and troubleshooting
Configuration:
- Nginx vhost configs generated in /etc/nginx/conf.d/vhosts/
- SSL certificates managed via ACME in /etc/acme/{domain}/
- Access logs per domain: /var/log/nginx/{domain}.access.log
- HTTP Basic Auth htpasswd files in /etc/nginx/htpasswd/
Architecture follows SecuBox standards:
- RPCD naming convention (luci. prefix)
- Menu paths match view file structure
- All JavaScript in strict mode
- Backend connectivity validation
- Comprehensive error handling
Dependencies: nginx-ssl, acme, curl
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
40 lines
737 B
JSON
40 lines
737 B
JSON
{
|
|
"luci-app-vhost-manager": {
|
|
"description": "Grant access to LuCI VHost Manager",
|
|
"read": {
|
|
"ubus": {
|
|
"luci.vhost-manager": [
|
|
"status",
|
|
"list_vhosts",
|
|
"get_vhost",
|
|
"test_backend",
|
|
"list_certs",
|
|
"get_access_logs"
|
|
]
|
|
},
|
|
"uci": ["vhost_manager", "nginx"],
|
|
"file": {
|
|
"/etc/nginx/conf.d/*": ["read"],
|
|
"/etc/acme/*": ["read"],
|
|
"/var/log/nginx/*": ["read"]
|
|
}
|
|
},
|
|
"write": {
|
|
"ubus": {
|
|
"luci.vhost-manager": [
|
|
"add_vhost",
|
|
"update_vhost",
|
|
"delete_vhost",
|
|
"request_cert",
|
|
"reload_nginx"
|
|
]
|
|
},
|
|
"uci": ["vhost_manager", "nginx"],
|
|
"file": {
|
|
"/etc/nginx/conf.d/*": ["write"],
|
|
"/etc/nginx/.htpasswd_*": ["write"]
|
|
}
|
|
}
|
|
}
|
|
}
|