roof/pic

Files

T

roof 53c7661812 feat: per-peer access enforcement, live peer status, auto IP assignment

Server-side access control:
- firewall_manager.py: per-peer iptables FORWARD rules in WireGuard container;
  virtual IPs on Caddy (172.20.0.21-24) for per-service DROP/ACCEPT targeting
- CoreDNS Corefile regenerated with ACL blocks for blocked services per peer
- POST /api/wireguard/apply-enforcement re-applies rules after WireGuard restart;
  wg0.conf PostUp calls it via curl so rules restore automatically on container start

WireGuard fixes:
- _syncconf uses `wg set peer` instead of `wg syncconf` to avoid resetting ListenPort
- add_peer validates AllowedIPs must be /32 — rejects full/split tunnel CIDRs that
  would route internet or LAN traffic to that peer
- _config_file() checks for linuxserver wg_confs/ subdirectory first

UI:
- Peers page fetches /api/wireguard/peers/statuses for live handshake data;
  status badge now shows real Online/Offline + seconds since last handshake
- IP field removed from Add Peer form (auto-assigned from 10.0.0.0/24)

Tests (246 pass):
- test_firewall_manager.py: 22 tests for ACL generation, iptables rule correctness,
  comment tagging, clear_peer_rules filter logic
- test_peer_wg_integration.py: 10 tests for /32 enforcement, IP auto-assignment,
  syncconf called on add/remove
- test_wireguard_manager.py: updated to reflect correct IPs and /32 requirement

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-04-21 01:01:07 -04:00

public

init

2025-09-12 23:04:52 +03:00

src

feat: per-peer access enforcement, live peer status, auto IP assignment

2026-04-21 01:01:07 -04:00

.gitignore

init

2025-09-12 23:04:52 +03:00

Dockerfile

wip: Fix ContainerDashboard

2025-09-13 15:49:32 +03:00

eslint.config.js

init

2025-09-12 23:04:52 +03:00

index.html

wip: peers

2025-09-13 18:56:00 +03:00

nginx.conf

feat: external IP detection, port status, fix peer config generation

2026-04-20 02:41:50 -04:00

package.json

wip: peer make work with qr code

2025-09-13 12:08:28 -05:00

postcss.config.js

init

2025-09-12 23:04:52 +03:00

README.md

wip: make work Services Status

2025-09-13 14:23:31 +03:00

tailwind.config.js

init

2025-09-12 23:04:52 +03:00

vite.config.js

init

2025-09-12 23:04:52 +03:00

README.md

Personal Internet Cell - Web UI

A modern React-based web interface for managing your Personal Internet Cell.

Features

Dashboard: Overview of cell status and services
Peer Management: Add, remove, and configure WireGuard peers
Network Services: DNS, DHCP, and NTP management
WireGuard: VPN configuration and status
Email Services: Postfix and Dovecot management
Calendar Services: Radicale CalDAV/CardDAV management
File Storage: WebDAV file storage management
Routing: Advanced VPN gateway and routing configuration
Logs: System logs and monitoring
Settings: Cell configuration and security settings

Tech Stack

React 19: Modern React with hooks
Vite: Fast build tool and dev server
Tailwind CSS: Utility-first CSS framework
Lucide React: Beautiful icons
React Router: Client-side routing
Axios: HTTP client for API communication

Development

Prerequisites

Node.js 18+ and npm
Personal Internet Cell backend running on port 3000

Setup

Install dependencies:
```
bun install
```
Start the development server:
```
npm run dev
```
Open your browser to http://localhost:5173

Development Features

Hot Reload: Changes reflect immediately
API Proxy: Requests to /api/* are proxied to http://localhost:3000
TypeScript Support: Full TypeScript support available
ESLint: Code linting and formatting

Building for Production

Build

npm run build

This creates a dist/ directory with optimized production files.

Preview

npm run preview

This serves the built files locally for testing.

API Integration

The Web UI communicates with the Personal Internet Cell backend API:

Base URL: http://localhost:3000 (development)
Health Check: /health
API Endpoints: /api/*

Environment Variables

Create a .env file to customize the API URL:

VITE_API_URL=http://localhost:3000

Project Structure

src/
├── components/          # Reusable UI components
│   └── Sidebar.jsx     # Navigation sidebar
├── pages/              # Page components
│   ├── Dashboard.jsx   # Main dashboard
│   ├── Peers.jsx       # Peer management
│   ├── NetworkServices.jsx
│   ├── WireGuard.jsx   # VPN configuration
│   ├── Email.jsx       # Email services
│   ├── Calendar.jsx    # Calendar services
│   ├── Files.jsx       # File storage
│   ├── Routing.jsx     # Routing configuration
│   ├── Logs.jsx        # System logs
│   └── Settings.jsx    # Cell settings
├── services/           # API services
│   └── api.js         # API client and endpoints
├── App.jsx            # Main app component
├── main.jsx           # App entry point
└── index.css          # Global styles

Styling

The Web UI uses Tailwind CSS with custom components:

Cards: .card for content containers
Buttons: .btn, .btn-primary, .btn-secondary, etc.
Inputs: .input for form fields
Status Indicators: .status-indicator, .status-online, etc.

Browser Support

Chrome 90+
Firefox 88+
Safari 14+
Edge 90+

Contributing

Follow the existing code style
Use TypeScript for new components
Add tests for new features
Update documentation as needed

License

Part of the Personal Internet Cell project.