Major structural reorganization and feature additions: ## Folder Reorganization - Move 17 luci-app-* packages to package/secubox/ (except luci-app-secubox core hub) - Update all tooling to support new structure: - secubox-tools/quick-deploy.sh: search both locations - secubox-tools/validate-modules.sh: validate both directories - secubox-tools/fix-permissions.sh: fix permissions in both locations - .github/workflows/test-validate.yml: build from both paths - Update README.md links to new package/secubox/ paths ## AppStore Migration (Complete) - Add catalog entries for all remaining luci-app packages: - network-tweaks.json: Network optimization tools - secubox-bonus.json: Documentation & demos hub - Total: 24 apps in AppStore catalog (22 existing + 2 new) - New category: 'documentation' for docs/demos/tutorials ## VHost Manager v2.0 Enhancements - Add profile activation system for Internal Services and Redirects - Implement createVHost() API wrapper for template-based deployment - Fix Virtual Hosts view rendering with proper LuCI patterns - Fix RPCD backend shell script errors (remove invalid local declarations) - Extend backend validation for nginx return directives (redirect support) - Add section_id parameter for named VHost profiles - Add Remove button to Redirects page for feature parity - Update README to v2.0 with comprehensive feature documentation ## Network Tweaks Dashboard - Close button added to component details modal Files changed: 340+ (336 renames with preserved git history) Packages affected: 19 luci-app, 2 secubox-app, 1 theme, 4 tools 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
265 lines
8.4 KiB
JavaScript
265 lines
8.4 KiB
JavaScript
'use strict';
|
|
'require view';
|
|
'require secubox-theme/theme as Theme';
|
|
'require poll';
|
|
'require ui';
|
|
'require ksm-manager/api as KSM';
|
|
|
|
return view.extend({
|
|
load: function() {
|
|
return Promise.all([
|
|
KSM.getStatus(),
|
|
KSM.getInfo(),
|
|
KSM.listHsmDevices(),
|
|
KSM.listCertificates(),
|
|
KSM.getAuditLogs(10, 0, '')
|
|
]);
|
|
},
|
|
|
|
pollStatus: function() {
|
|
return Promise.all([
|
|
KSM.getStatus(),
|
|
KSM.listHsmDevices()
|
|
]).then(function(data) {
|
|
var status = data[0];
|
|
var hsmDevices = data[1];
|
|
|
|
// Update status cards
|
|
var statusCard = document.getElementById('ksm-status');
|
|
if (statusCard) {
|
|
statusCard.innerHTML = '';
|
|
|
|
var cards = [
|
|
{
|
|
title: _('Keystore Status'),
|
|
value: status.keystore_unlocked ? _('Unlocked') : _('Locked'),
|
|
color: status.keystore_unlocked ? 'green' : 'red'
|
|
},
|
|
{
|
|
title: _('Total Keys'),
|
|
value: status.keys_count || 0,
|
|
color: 'blue'
|
|
},
|
|
{
|
|
title: _('HSM Connected'),
|
|
value: status.hsm_connected ? _('Yes') : _('No'),
|
|
color: status.hsm_connected ? 'green' : 'gray'
|
|
},
|
|
{
|
|
title: _('HSM Devices'),
|
|
value: hsmDevices.devices ? hsmDevices.devices.length : 0,
|
|
color: 'purple'
|
|
}
|
|
];
|
|
|
|
cards.forEach(function(card) {
|
|
var cardDiv = E('div', { 'class': 'cbi-value' }, [
|
|
E('label', { 'class': 'cbi-value-title' }, card.title + ':'),
|
|
E('div', { 'class': 'cbi-value-field' }, [
|
|
E('strong', { 'style': 'color: ' + card.color }, String(card.value))
|
|
])
|
|
]);
|
|
statusCard.appendChild(cardDiv);
|
|
});
|
|
}
|
|
});
|
|
},
|
|
|
|
render: function(data) {
|
|
var status = data[0];
|
|
var info = data[1];
|
|
var hsmDevices = data[2];
|
|
var certificates = data[3];
|
|
var auditLogs = data[4];
|
|
|
|
// Setup auto-refresh
|
|
poll.add(L.bind(this.pollStatus, this), 10);
|
|
|
|
var view = E([], [
|
|
E('h2', {}, _('Key Storage Manager - Dashboard')),
|
|
E('p', {}, _('Centralized cryptographic key management with hardware security module support.')),
|
|
|
|
// Status Cards
|
|
E('div', { 'class': 'cbi-section' }, [
|
|
E('h3', {}, _('System Status')),
|
|
E('div', { 'id': 'ksm-status', 'class': 'cbi-section-node' }, [
|
|
E('div', { 'class': 'cbi-value' }, [
|
|
E('label', { 'class': 'cbi-value-title' }, _('Service Status') + ':'),
|
|
E('div', { 'class': 'cbi-value-field' }, [
|
|
E('strong', { 'style': 'color: ' + (status.running ? 'green' : 'red') },
|
|
status.running ? _('Running') : _('Stopped'))
|
|
])
|
|
]),
|
|
E('div', { 'class': 'cbi-value' }, [
|
|
E('label', { 'class': 'cbi-value-title' }, _('Keystore Status') + ':'),
|
|
E('div', { 'class': 'cbi-value-field' }, [
|
|
E('strong', { 'style': 'color: ' + (status.keystore_unlocked ? 'green' : 'red') },
|
|
status.keystore_unlocked ? _('Unlocked') : _('Locked'))
|
|
])
|
|
]),
|
|
E('div', { 'class': 'cbi-value' }, [
|
|
E('label', { 'class': 'cbi-value-title' }, _('Total Keys') + ':'),
|
|
E('div', { 'class': 'cbi-value-field' }, [
|
|
E('strong', { 'style': 'color: blue' }, String(status.keys_count || 0))
|
|
])
|
|
]),
|
|
E('div', { 'class': 'cbi-value' }, [
|
|
E('label', { 'class': 'cbi-value-title' }, _('HSM Connected') + ':'),
|
|
E('div', { 'class': 'cbi-value-field' }, [
|
|
E('strong', { 'style': 'color: ' + (status.hsm_connected ? 'green' : 'gray') },
|
|
status.hsm_connected ? _('Yes') : _('No'))
|
|
])
|
|
])
|
|
])
|
|
]),
|
|
|
|
// System Information
|
|
E('div', { 'class': 'cbi-section' }, [
|
|
E('h3', {}, _('System Information')),
|
|
E('div', { 'class': 'cbi-section-node' }, [
|
|
E('div', { 'class': 'cbi-value' }, [
|
|
E('label', { 'class': 'cbi-value-title' }, _('OpenSSL Version') + ':'),
|
|
E('div', { 'class': 'cbi-value-field' }, info.openssl_version || _('Unknown'))
|
|
]),
|
|
E('div', { 'class': 'cbi-value' }, [
|
|
E('label', { 'class': 'cbi-value-title' }, _('GPG Version') + ':'),
|
|
E('div', { 'class': 'cbi-value-field' }, info.gpg_version || _('Unknown'))
|
|
]),
|
|
E('div', { 'class': 'cbi-value' }, [
|
|
E('label', { 'class': 'cbi-value-title' }, _('HSM Support') + ':'),
|
|
E('div', { 'class': 'cbi-value-field' }, info.hsm_support ? _('Enabled') : _('Disabled'))
|
|
])
|
|
])
|
|
]),
|
|
|
|
// HSM Devices
|
|
E('div', { 'class': 'cbi-section' }, [
|
|
E('h3', {}, _('Hardware Security Modules')),
|
|
E('div', { 'class': 'cbi-section-node' },
|
|
hsmDevices.devices && hsmDevices.devices.length > 0 ?
|
|
hsmDevices.devices.map(function(device) {
|
|
var typeIcon = device.type === 'nitrokey' ? '🔐' : '🔑';
|
|
return E('div', { 'class': 'cbi-value' }, [
|
|
E('link', { 'rel': 'stylesheet', 'href': L.resource('secubox-theme/secubox-theme.css') }),
|
|
E('label', { 'class': 'cbi-value-title' }, typeIcon + ' ' + device.serial + ':'),
|
|
E('div', { 'class': 'cbi-value-field' }, [
|
|
E('span', {}, device.type.toUpperCase() + ' '),
|
|
E('span', { 'style': 'color: gray' }, 'v' + device.version)
|
|
])
|
|
]);
|
|
}) :
|
|
E('div', { 'class': 'cbi-value' }, [
|
|
E('em', {}, _('No HSM devices detected. Connect a Nitrokey or YubiKey device.'))
|
|
])
|
|
)
|
|
]),
|
|
|
|
// Expiring Certificates
|
|
E('div', { 'class': 'cbi-section' }, [
|
|
E('h3', {}, _('Certificate Expiration Alerts')),
|
|
E('div', { 'class': 'cbi-section-node' },
|
|
this.renderExpiringCertificates(certificates.certificates || [])
|
|
)
|
|
]),
|
|
|
|
// Recent Activity
|
|
E('div', { 'class': 'cbi-section' }, [
|
|
E('h3', {}, _('Recent Activity')),
|
|
E('div', { 'class': 'cbi-section-node' },
|
|
this.renderRecentActivity(auditLogs.logs || [])
|
|
)
|
|
]),
|
|
|
|
// Quick Actions
|
|
E('div', { 'class': 'cbi-section' }, [
|
|
E('h3', {}, _('Quick Actions')),
|
|
E('div', { 'class': 'cbi-section-node' }, [
|
|
E('button', {
|
|
'class': 'cbi-button cbi-button-apply',
|
|
'click': function() { window.location.href = L.url('admin/security/ksm-manager/keys'); }
|
|
}, _('Manage Keys')),
|
|
' ',
|
|
E('button', {
|
|
'class': 'cbi-button cbi-button-action',
|
|
'click': function() { window.location.href = L.url('admin/security/ksm-manager/hsm'); }
|
|
}, _('Configure HSM')),
|
|
' ',
|
|
E('button', {
|
|
'class': 'cbi-button cbi-button-action',
|
|
'click': function() { window.location.href = L.url('admin/security/ksm-manager/certificates'); }
|
|
}, _('Manage Certificates')),
|
|
' ',
|
|
E('button', {
|
|
'class': 'cbi-button cbi-button-action',
|
|
'click': function() { window.location.href = L.url('admin/security/ksm-manager/secrets'); }
|
|
}, _('Manage Secrets'))
|
|
])
|
|
])
|
|
]);
|
|
|
|
return view;
|
|
},
|
|
|
|
renderExpiringCertificates: function(certificates) {
|
|
var expiring = certificates.filter(function(cert) {
|
|
// Simple check - in production would parse dates properly
|
|
return cert.valid_until;
|
|
}).slice(0, 5);
|
|
|
|
if (expiring.length === 0) {
|
|
return E('div', { 'class': 'cbi-value' }, [
|
|
E('em', {}, _('No expiring certificates'))
|
|
]);
|
|
}
|
|
|
|
return E('div', { 'class': 'table' }, [
|
|
E('div', { 'class': 'tr table-titles' }, [
|
|
E('div', { 'class': 'th' }, _('Subject')),
|
|
E('div', { 'class': 'th' }, _('Issuer')),
|
|
E('div', { 'class': 'th' }, _('Expires'))
|
|
]),
|
|
expiring.map(function(cert) {
|
|
return E('div', { 'class': 'tr' }, [
|
|
E('div', { 'class': 'td' }, cert.subject || _('Unknown')),
|
|
E('div', { 'class': 'td' }, cert.issuer || _('Unknown')),
|
|
E('div', { 'class': 'td' }, cert.valid_until || _('Unknown'))
|
|
]);
|
|
})
|
|
]);
|
|
},
|
|
|
|
renderRecentActivity: function(logs) {
|
|
if (!logs || logs.length === 0) {
|
|
return E('div', { 'class': 'cbi-value' }, [
|
|
E('em', {}, _('No recent activity'))
|
|
]);
|
|
}
|
|
|
|
return E('div', { 'class': 'table' }, [
|
|
E('div', { 'class': 'tr table-titles' }, [
|
|
E('div', { 'class': 'th' }, _('Time')),
|
|
E('div', { 'class': 'th' }, _('User')),
|
|
E('div', { 'class': 'th' }, _('Action')),
|
|
E('div', { 'class': 'th' }, _('Resource')),
|
|
E('div', { 'class': 'th' }, _('Status'))
|
|
]),
|
|
logs.slice(0, 10).map(function(log) {
|
|
var statusColor = log.status === 'success' ? 'green' : 'red';
|
|
return E('div', { 'class': 'tr' }, [
|
|
E('div', { 'class': 'td' }, KSM.formatTimestamp(log.timestamp)),
|
|
E('div', { 'class': 'td' }, log.user || _('Unknown')),
|
|
E('div', { 'class': 'td' }, log.action || _('Unknown')),
|
|
E('div', { 'class': 'td' }, log.resource || _('Unknown')),
|
|
E('div', { 'class': 'td' }, [
|
|
E('span', { 'style': 'color: ' + statusColor }, log.status || _('Unknown'))
|
|
])
|
|
]);
|
|
})
|
|
]);
|
|
},
|
|
|
|
handleSaveApply: null,
|
|
handleSave: null,
|
|
handleReset: null
|
|
});
|