secubox-openwrt/package/secubox/luci-app-crowdsec-dashboard/htdocs/luci-static/resources/crowdsec-dashboard/api.js
CyberMind-FR 24383006aa feat: Add Firewall Bouncer management API to CrowdSec dashboard
Add comprehensive backend support for managing the CrowdSec Firewall Bouncer
through the dashboard with full control and monitoring capabilities.

RPC Backend Enhancements (luci.crowdsec-dashboard):
- get_firewall_bouncer_status: Detailed status (running, enabled, UCI config, nftables)
- control_firewall_bouncer: Service control (start/stop/restart/enable/disable)
- get_firewall_bouncer_config: Read UCI configuration
- update_firewall_bouncer_config: Modify UCI settings
- get_nftables_stats: nftables statistics (blocked IPs, rules count)

API Methods Added (api.js):
- getFirewallBouncerStatus(): Get bouncer status and health
- controlFirewallBouncer(action): Control service lifecycle
- getFirewallBouncerConfig(): Read configuration
- updateFirewallBouncerConfig(key, value): Update settings
- getNftablesStats(): Get firewall statistics

Features:
- Real-time service status monitoring
- nftables table detection (IPv4/IPv6)
- Blocked IP counting
- UCI configuration management
- Service lifecycle control
- Comprehensive error handling

Status Information Provided:
- Service running state
- Init script enabled state
- UCI configuration status
- nftables tables active (crowdsec, crowdsec6)
- Blocked IPv4/IPv6 count
- Rules count per table

Configuration Options Supported:
- enabled, ipv4, ipv6 (boolean)
- api_url, update_frequency, deny_action, log_level (string)
- deny_log, filter_input, filter_forward (boolean)
- interfaces list

Next: Frontend UI enhancements for bouncer management panel

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
2026-01-06 20:19:11 +01:00

257 lines
5.7 KiB
JavaScript

'use strict';
'require baseclass';
'require rpc';
/**
* CrowdSec Dashboard API
* Package: luci-app-crowdsec-dashboard
* RPCD object: luci.crowdsec-dashboard
* CrowdSec Core: 1.7.4+
*/
// Version: 0.5.0
var callStatus = rpc.declare({
object: 'luci.crowdsec-dashboard',
method: 'status',
expect: { }
});
var callDecisions = rpc.declare({
object: 'luci.crowdsec-dashboard',
method: 'decisions',
expect: { decisions: [] }
});
var callAlerts = rpc.declare({
object: 'luci.crowdsec-dashboard',
method: 'alerts',
expect: { alerts: [] }
});
var callBouncers = rpc.declare({
object: 'luci.crowdsec-dashboard',
method: 'bouncers',
expect: { bouncers: [] }
});
var callMetrics = rpc.declare({
object: 'luci.crowdsec-dashboard',
method: 'metrics',
expect: { }
});
var callMachines = rpc.declare({
object: 'luci.crowdsec-dashboard',
method: 'machines',
expect: { machines: [] }
});
var callHub = rpc.declare({
object: 'luci.crowdsec-dashboard',
method: 'hub',
expect: { }
});
var callStats = rpc.declare({
object: 'luci.crowdsec-dashboard',
method: 'stats',
expect: { }
});
var callSecuboxLogs = rpc.declare({
object: 'luci.crowdsec-dashboard',
method: 'seccubox_logs',
expect: { }
});
var callCollectDebug = rpc.declare({
object: 'luci.crowdsec-dashboard',
method: 'collect_debug',
expect: { success: false }
});
var callBan = rpc.declare({
object: 'luci.crowdsec-dashboard',
method: 'ban',
params: ['ip', 'duration', 'reason'],
expect: { success: false }
});
var callUnban = rpc.declare({
object: 'luci.crowdsec-dashboard',
method: 'unban',
params: ['ip'],
expect: { success: false }
});
// CrowdSec v1.7.4+ features
var callWAFStatus = rpc.declare({
object: 'luci.crowdsec-dashboard',
method: 'waf_status',
expect: { }
});
var callMetricsConfig = rpc.declare({
object: 'luci.crowdsec-dashboard',
method: 'metrics_config',
expect: { }
});
var callConfigureMetrics = rpc.declare({
object: 'luci.crowdsec-dashboard',
method: 'configure_metrics',
params: ['enable'],
expect: { success: false }
});
var callCollections = rpc.declare({
object: 'luci.crowdsec-dashboard',
method: 'collections',
expect: { }
});
var callInstallCollection = rpc.declare({
object: 'luci.crowdsec-dashboard',
method: 'install_collection',
params: ['collection'],
expect: { success: false }
});
var callRemoveCollection = rpc.declare({
object: 'luci.crowdsec-dashboard',
method: 'remove_collection',
params: ['collection'],
expect: { success: false }
});
var callUpdateHub = rpc.declare({
object: 'luci.crowdsec-dashboard',
method: 'update_hub',
expect: { success: false }
});
var callRegisterBouncer = rpc.declare({
object: 'luci.crowdsec-dashboard',
method: 'register_bouncer',
params: ['bouncer_name'],
expect: { success: false }
});
var callDeleteBouncer = rpc.declare({
object: 'luci.crowdsec-dashboard',
method: 'delete_bouncer',
params: ['bouncer_name'],
expect: { success: false }
});
// Firewall Bouncer Management
var callFirewallBouncerStatus = rpc.declare({
object: 'luci.crowdsec-dashboard',
method: 'firewall_bouncer_status',
expect: { }
});
var callControlFirewallBouncer = rpc.declare({
object: 'luci.crowdsec-dashboard',
method: 'control_firewall_bouncer',
params: ['action'],
expect: { success: false }
});
var callFirewallBouncerConfig = rpc.declare({
object: 'luci.crowdsec-dashboard',
method: 'firewall_bouncer_config',
expect: { }
});
var callUpdateFirewallBouncerConfig = rpc.declare({
object: 'luci.crowdsec-dashboard',
method: 'update_firewall_bouncer_config',
params: ['key', 'value'],
expect: { success: false }
});
var callNftablesStats = rpc.declare({
object: 'luci.crowdsec-dashboard',
method: 'nftables_stats',
expect: { }
});
function formatDuration(seconds) {
if (!seconds) return 'N/A';
if (seconds < 60) return seconds + 's';
if (seconds < 3600) return Math.floor(seconds / 60) + 'm';
if (seconds < 86400) return Math.floor(seconds / 3600) + 'h';
return Math.floor(seconds / 86400) + 'd';
}
function formatDate(dateStr) {
if (!dateStr) return 'N/A';
try {
var date = new Date(dateStr);
return date.toLocaleString();
} catch(e) {
return dateStr;
}
}
return baseclass.extend({
getStatus: callStatus,
getDecisions: callDecisions,
getAlerts: callAlerts,
getBouncers: callBouncers,
getMetrics: callMetrics,
getMachines: callMachines,
getHub: callHub,
getStats: callStats,
getSecuboxLogs: callSecuboxLogs,
collectDebugSnapshot: callCollectDebug,
addBan: callBan,
removeBan: callUnban,
// CrowdSec v1.7.4+ features
getWAFStatus: callWAFStatus,
getMetricsConfig: callMetricsConfig,
configureMetrics: callConfigureMetrics,
getCollections: callCollections,
installCollection: callInstallCollection,
removeCollection: callRemoveCollection,
updateHub: callUpdateHub,
registerBouncer: callRegisterBouncer,
deleteBouncer: callDeleteBouncer,
// Firewall Bouncer Management
getFirewallBouncerStatus: callFirewallBouncerStatus,
controlFirewallBouncer: callControlFirewallBouncer,
getFirewallBouncerConfig: callFirewallBouncerConfig,
updateFirewallBouncerConfig: callUpdateFirewallBouncerConfig,
getNftablesStats: callNftablesStats,
formatDuration: formatDuration,
formatDate: formatDate,
getDashboardData: function() {
return Promise.all([
callStatus(),
callStats(),
callDecisions(),
callAlerts()
]).then(function(results) {
// Check if any result has an error (service not running)
var status = results[0] || {};
var stats = results[1] || {};
var decisions = results[2] || {};
var alerts = results[3] || {};
return {
status: status,
stats: (stats.error) ? {} : stats,
decisions: (decisions.error) ? [] : (decisions.decisions || []),
alerts: (alerts.error) ? [] : (alerts.alerts || []),
error: stats.error || decisions.error || alerts.error || null
};
});
}
});