roof/pic

Fork 0

Files

T

History

roof 82a0c0e9bd

Unit Tests / test (push) Successful in 12m25s

Details

fix: overhaul backup/restore — full secrets coverage, ordered reapply, optional passphrase encryption

P0 — backups previously omitted peers/keys/vault(CA+fernet)/auth/cell-links/ddns/connectivity
configs (a restore lost everything incl admin login + CA) and included logs/trash; restore did
file-copies only with no reapply.

Changes:
- api/config_manager.py: backup_config now includes auth_users.json, .flask_secret_key,
  peers.json, peer_service_credentials.json, WireGuard keys + wg_confs + api/wireguard/keys,
  vault/** (incl fernet.key), api/services + service configs, cell_links.json, ddns_token,
  caddy/**; new _is_excluded() drops logs/config_backups/.test_admin_pass/.gitkeep/*.tmp/
  *.partial/__pycache__; restore_config reordered (vault/fernet → config → wg keys/peers →
  cell_links → caddy/dns → service configs → auth/ddns → volumes) + new _reapply_runtime_state()
  (regenerate Caddyfile/Corefile, reapply services, connectivity apply_routes, replay cell pushes)
- api/backup_crypto.py (new): optional passphrase encryption via scrypt-derived key + Fernet;
  encrypted archives written 0600
- api/routes/config.py: backup/restore accept optional {passphrase}; wrong/missing passphrase
  returns 400; backup response warns it contains secrets
- Makefile: backup target applies same excludes + chmod 0600 + secrets warning
- webui/src/services/api.js + webui/src/pages/Settings.jsx: passphrase field on create backup,
  restore prompt, "contains secrets" banner
- tests/test_config_backup_overhaul.py (new, 18 tests) + tests/test_config_backup_restore_http.py
  (2 assertions updated)

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-06-10 15:41:10 -04:00

public

init

2025-09-12 23:04:52 +03:00

src

fix: overhaul backup/restore — full secrets coverage, ordered reapply, optional passphrase encryption

2026-06-10 15:41:10 -04:00

.gitignore

init

2025-09-12 23:04:52 +03:00

Dockerfile

harden containers: drop WG privileged, slim images, digest pins; fix WG path + empty chrony.conf

2026-06-10 14:07:54 -04:00

eslint.config.js

init

2025-09-12 23:04:52 +03:00

index.html

wip: peers

2025-09-13 18:56:00 +03:00

nginx.conf

harden containers: drop WG privileged, slim images, digest pins; fix WG path + empty chrony.conf

2026-06-10 14:07:54 -04:00

package-lock.json

chore: add webui package-lock.json

2026-05-01 23:25:27 -04:00

package.json

feat(webui): internet sharing UI — exit-offer toggle + peer route-via selector

2026-05-01 23:07:50 -04:00

postcss.config.js

init

2025-09-12 23:04:52 +03:00

README.md

wip: make work Services Status

2025-09-13 14:23:31 +03:00

tailwind.config.js

init

2025-09-12 23:04:52 +03:00

vite.config.js

feat(webui): internet sharing UI — exit-offer toggle + peer route-via selector

2026-05-01 23:07:50 -04:00

README.md

Personal Internet Cell - Web UI

A modern React-based web interface for managing your Personal Internet Cell.

Features

Dashboard: Overview of cell status and services
Peer Management: Add, remove, and configure WireGuard peers
Network Services: DNS, DHCP, and NTP management
WireGuard: VPN configuration and status
Email Services: Postfix and Dovecot management
Calendar Services: Radicale CalDAV/CardDAV management
File Storage: WebDAV file storage management
Routing: Advanced VPN gateway and routing configuration
Logs: System logs and monitoring
Settings: Cell configuration and security settings

Tech Stack

React 19: Modern React with hooks
Vite: Fast build tool and dev server
Tailwind CSS: Utility-first CSS framework
Lucide React: Beautiful icons
React Router: Client-side routing
Axios: HTTP client for API communication

Development

Prerequisites

Node.js 18+ and npm
Personal Internet Cell backend running on port 3000

Setup

Install dependencies:
```
bun install
```
Start the development server:
```
npm run dev
```
Open your browser to http://localhost:5173

Development Features

Hot Reload: Changes reflect immediately
API Proxy: Requests to /api/* are proxied to http://localhost:3000
TypeScript Support: Full TypeScript support available
ESLint: Code linting and formatting

Building for Production

Build

npm run build

This creates a dist/ directory with optimized production files.

Preview

npm run preview

This serves the built files locally for testing.

API Integration

The Web UI communicates with the Personal Internet Cell backend API:

Base URL: http://localhost:3000 (development)
Health Check: /health
API Endpoints: /api/*

Environment Variables

Create a .env file to customize the API URL:

VITE_API_URL=http://localhost:3000

Project Structure

src/
├── components/          # Reusable UI components
│   └── Sidebar.jsx     # Navigation sidebar
├── pages/              # Page components
│   ├── Dashboard.jsx   # Main dashboard
│   ├── Peers.jsx       # Peer management
│   ├── NetworkServices.jsx
│   ├── WireGuard.jsx   # VPN configuration
│   ├── Email.jsx       # Email services
│   ├── Calendar.jsx    # Calendar services
│   ├── Files.jsx       # File storage
│   ├── Routing.jsx     # Routing configuration
│   ├── Logs.jsx        # System logs
│   └── Settings.jsx    # Cell settings
├── services/           # API services
│   └── api.js         # API client and endpoints
├── App.jsx            # Main app component
├── main.jsx           # App entry point
└── index.css          # Global styles

Styling

The Web UI uses Tailwind CSS with custom components:

Cards: .card for content containers
Buttons: .btn, .btn-primary, .btn-secondary, etc.
Inputs: .input for form fields
Status Indicators: .status-indicator, .status-online, etc.

Browser Support

Chrome 90+
Firefox 88+
Safari 14+
Edge 90+

Contributing

Follow the existing code style
Use TypeScript for new components
Add tests for new features
Update documentation as needed

License

Part of the Personal Internet Cell project.