admin
44ec06b50f
Hetzner storage-box provisioning against api.hetzner.com/v1 (NOT .cloud).
internal/hetznerapi (typed client + CloudAPI interface + Fake + WaitAction);
internal/offsite (Provisioner.ProvisionOffsite — idempotent by label, shared
sub-account/dedicated box, transient password, non-secret Descriptor,
fail-closed); one_time_secrets store (single-use Save/Consume); POST
/offsite/consume-password/{id} (customer-key auth, once); config-form Offsite
section → applyOffsite (502+no-save on error) → descriptor in ConfigJSON →
version bump. Token/passwords never logged/committed/in ConfigJSON. Tested vs a
faked Cloud API + fail-closed red-proof. NOT yet live-provisioned (needs the
dedicated-project scoped token; current token can delete ep0).
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01PSK5g6qYLknKj8u3QAFEr6
152 lines
8.7 KiB
HTML
152 lines
8.7 KiB
HTML
<!DOCTYPE html>
|
|
<html lang="en">
|
|
<head>
|
|
<meta charset="UTF-8">
|
|
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
|
<title>Felhom Hub — {{if .IsNew}}Add Customer{{else}}Edit {{.Config.CustomerID}}{{end}}</title>
|
|
<link rel="stylesheet" href="/style.css">
|
|
</head>
|
|
<body>
|
|
{{template "icon_sprite"}}
|
|
<div class="container">
|
|
<header>
|
|
<h1>Felhom <span>Hub</span></h1>
|
|
<nav class="nav-links">
|
|
<a href="/" class="nav-link">Dashboard</a>
|
|
<a href="/configs" class="nav-link active">Customers</a>
|
|
<a href="/apps" class="nav-link">Apps</a>
|
|
<a href="/hosts" class="nav-link">Hosts</a>
|
|
<a href="/offsite" class="nav-link">Offsite</a>
|
|
<a href="/configuration" class="nav-link">Configuration</a>
|
|
</nav>
|
|
</header>
|
|
|
|
<a href="{{if .IsNew}}/configs{{else}}/customers/{{.Config.CustomerID}}{{end}}" class="back-link">← Back</a>
|
|
<h2>{{if .IsNew}}Add Customer{{else}}Edit: {{.Config.CustomerID}}{{end}}</h2>
|
|
|
|
{{if .Error}}
|
|
<div class="flash flash-error">{{.Error}}</div>
|
|
{{end}}
|
|
|
|
<form method="POST" action="{{if .IsNew}}/configs/new{{else}}/configs/{{.Config.CustomerID}}/edit{{end}}" class="config-form">
|
|
{{.CSRFField}}
|
|
<div class="card">
|
|
<h2>Customer Identity</h2>
|
|
<div class="form-grid">
|
|
<div class="form-group">
|
|
<label for="customer_id">Customer ID *</label>
|
|
<input type="text" id="customer_id" name="customer_id"
|
|
value="{{.Config.CustomerID}}"
|
|
pattern="[a-zA-Z0-9.\-]+"
|
|
placeholder="e.g. customer-1"
|
|
{{if not .IsNew}}readonly{{end}}
|
|
required>
|
|
{{if .IsNew}}<span class="form-hint">Letters, numbers, dots, hyphens only</span>{{end}}
|
|
</div>
|
|
<div class="form-group">
|
|
<label for="customer_name">Display Name *</label>
|
|
<input type="text" id="customer_name" name="customer_name"
|
|
value="{{.Config.CustomerName}}"
|
|
placeholder="e.g. Kovács család"
|
|
required>
|
|
</div>
|
|
<div class="form-group">
|
|
<label for="domain">Domain *</label>
|
|
<input type="text" id="domain" name="domain"
|
|
value="{{.Config.Domain}}"
|
|
placeholder="e.g. kovacs.felhom.eu"
|
|
required>
|
|
</div>
|
|
<div class="form-group">
|
|
<label for="email">Email</label>
|
|
<input type="email" id="email" name="email"
|
|
value="{{.Config.Email}}"
|
|
placeholder="e.g. kovacs@example.com">
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
<details class="card" {{if index .Overrides "infrastructure"}}open{{end}}>
|
|
<summary><h2 style="display:inline">Infrastructure</h2></summary>
|
|
<div class="form-grid" style="margin-top: 1rem;">
|
|
<div class="form-group">
|
|
<label for="cf_tunnel_token">Cloudflare Tunnel Token</label>
|
|
<input type="text" id="cf_tunnel_token" name="cf_tunnel_token"
|
|
value="{{with .Overrides}}{{with index . "infrastructure"}}{{with index . "cf_tunnel_token"}}{{.}}{{end}}{{end}}{{end}}"
|
|
placeholder="Optional">
|
|
</div>
|
|
<div class="form-group">
|
|
<label for="cf_api_token">Cloudflare API Token</label>
|
|
<input type="text" id="cf_api_token" name="cf_api_token"
|
|
value="{{with .Overrides}}{{with index . "infrastructure"}}{{with index . "cf_api_token"}}{{.}}{{end}}{{end}}{{end}}"
|
|
placeholder="DNS-01 + WAF permissions">
|
|
<small class="form-hint">Szükséges jogosultságok: Zone DNS:Edit (ACME), Zone WAF:Edit (geo-korlátozás)</small>
|
|
</div>
|
|
</div>
|
|
</details>
|
|
|
|
<details class="card" {{if index .Overrides "git"}}open{{end}}>
|
|
<summary><h2 style="display:inline">Git Sync</h2></summary>
|
|
<div class="form-grid" style="margin-top: 1rem;">
|
|
<div class="form-group">
|
|
<label for="git_username">Git Username</label>
|
|
<input type="text" id="git_username" name="git_username"
|
|
value="{{with .Overrides}}{{with index . "git"}}{{with index . "username"}}{{.}}{{end}}{{end}}{{end}}"
|
|
placeholder="For private catalog">
|
|
</div>
|
|
<div class="form-group">
|
|
<label for="git_token">Git Token</label>
|
|
<input type="text" id="git_token" name="git_token"
|
|
value="{{with .Overrides}}{{with index . "git"}}{{with index . "token"}}{{.}}{{end}}{{end}}{{end}}"
|
|
placeholder="For private catalog">
|
|
</div>
|
|
</div>
|
|
</details>
|
|
|
|
<details class="card" {{if index .Overrides "offsite"}}open{{end}}>
|
|
<summary><h2 style="display:inline">Offsite backup</h2></summary>
|
|
<div class="form-grid" style="margin-top: 1rem;">
|
|
<div class="form-group">
|
|
<label><input type="checkbox" name="offsite_enabled"
|
|
{{with .Overrides}}{{with index . "offsite"}}{{if index . "enabled"}}checked{{end}}{{end}}{{end}}>
|
|
Enable offsite (provisions a Hetzner Storage Box on save)</label>
|
|
</div>
|
|
<div class="form-group">
|
|
<label for="offsite_type">Type</label>
|
|
<select id="offsite_type" name="offsite_type">
|
|
<option value="shared" {{with .Overrides}}{{with index . "offsite"}}{{if eq (index . "type") "shared"}}selected{{end}}{{end}}{{end}}>Shared (sub-account on the pool box)</option>
|
|
<option value="dedicated" {{with .Overrides}}{{with index . "offsite"}}{{if eq (index . "type") "dedicated"}}selected{{end}}{{end}}{{end}}>Dedicated (own box)</option>
|
|
</select>
|
|
</div>
|
|
<div class="form-group">
|
|
<label for="offsite_quota_gb">Soft-quota GB (shared)</label>
|
|
<input type="number" id="offsite_quota_gb" name="offsite_quota_gb"
|
|
value="{{with .Overrides}}{{with index . "offsite"}}{{with index . "quota_gb"}}{{.}}{{end}}{{end}}{{end}}" placeholder="e.g. 50">
|
|
</div>
|
|
<div class="form-group">
|
|
<label for="offsite_box_type">Box type (dedicated)</label>
|
|
<select id="offsite_box_type" name="offsite_box_type">
|
|
<option value="bx11" {{with .Overrides}}{{with index . "offsite"}}{{if eq (index . "box_type") "bx11"}}selected{{end}}{{end}}{{end}}>bx11 (1 TB)</option>
|
|
<option value="bx21" {{with .Overrides}}{{with index . "offsite"}}{{if eq (index . "box_type") "bx21"}}selected{{end}}{{end}}{{end}}>bx21 (5 TB)</option>
|
|
<option value="bx31" {{with .Overrides}}{{with index . "offsite"}}{{if eq (index . "box_type") "bx31"}}selected{{end}}{{end}}{{end}}>bx31 (10 TB)</option>
|
|
</select>
|
|
</div>
|
|
</div>
|
|
{{with .Overrides}}{{with index . "offsite"}}{{if index . "host"}}
|
|
<p class="form-hint" style="margin-top:.5rem">Provisioned: {{index . "user"}}@{{index . "host"}}:{{index . "repo_path"}} — the transient password is delivered to the controller once (never shown here).</p>
|
|
{{end}}{{end}}{{end}}
|
|
</details>
|
|
|
|
<div style="margin-top: 1.5rem; display: flex; gap: 1rem;">
|
|
<button type="submit" class="btn">{{if .IsNew}}Create Configuration{{else}}Save Changes{{end}}</button>
|
|
<a href="{{if .IsNew}}/configs{{else}}/customers/{{.Config.CustomerID}}{{end}}" class="btn btn-outline">Cancel</a>
|
|
</div>
|
|
</form>
|
|
|
|
<footer>
|
|
<p>Felhom Hub {{hubVersion}} — Configuration Management</p>
|
|
</footer>
|
|
</div>
|
|
</body>
|
|
</html>
|