clusev

Commit Graph

Author	SHA1	Message	Date
boban	8cf8c771c8	feat(files): image preview in the file manager; modal polish Opening an image now renders it (SFTP base64 data-URI, 5 MB cap, save disabled for images) instead of the text editor. Recovery-codes modal buttons realigned + the close button relabeled 'Schließen' (it only closes). All modal textareas resize-none. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-14 23:10:37 +02:00
boban	5691051ad8	feat(i18n): bilingual foundation (DE/EN) + localize auth/dashboard/servers/fleet/account Adds user-selectable German (default) + English, per new rule R16. Foundation: - config locale=de + fallback=de; User.locale column (+migration); SetLocale middleware (user → session → default; SUPPORTED=[de,en]); public /locale/{code} route; DE/EN switcher (x-lang-switch) in topbar + auth layout; <html lang> dynamic. - Translation structure: lang/{de,en}/<group>.php (one group per feature + shared common), identical keys across both languages, :placeholder interpolation. Documented as R16 in rules.md + CLAUDE.md (R9 reconciled). - Removed the "Warum Caddy" rationale block from the System page (per feedback). Localized this pass (views + Livewire components, keys de↔en at parity): - common, auth, dashboard, servers, services, files, audit, settings, system, versions. - #[Title] attributes → dynamic title() (attributes can't call __()). Remaining (next commit): modals components + a few modal views, shell (command palette, nav-item, server-item, toaster), and backend service messages (app/Services/*, OsProfile). App is fully functional in German throughout; English covers the groups above. Boot-verified: /login HTTP 200 in DE + EN, titles + <html lang> localized, locale switch works. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-13 22:36:16 +02:00
boban	05f8ce49b4	feat: add-server, apt updates, fail2ban config; clean modals; drop storage internals Operator feedback: no way to add servers; irrelevant storage-internals text; fail2ban only on/off; raw shell commands shown; no apt update/upgrade. - Add server: CreateServer modal (name, IP/host, SSH port, user, password\|key, optional label) on the Servers index → creates server + encrypted credential ATOMICALLY (DB transaction). Strict IP/hostname validation (filter_var + hostname; rejects 999.x, ':'). - System updates (Debian/Ubuntu only): MaintenanceService + SystemUpdate modal — shows the pending-update count (or "unbekannt" when undeterminable) and runs apt update && upgrade as root; gated to apt hosts. - fail2ban configuration: Fail2banConfig modal — Sperrdauer / Max. Fehlversuche / Zeitfenster, written to a Clusev-owned jail.d drop-in (zz-clusev.local, last-wins; never touches the operator's jail.local/jails). Durations kept verbatim in fail2ban's native grammar (600, 10m, 1h 30m, -1). Reads the EFFECTIVE [DEFAULT] across files; refuses to save when the current policy couldn't be read (no overwrite with unseen defaults); reloads fail2ban only when already active (never starts it). - Modals: removed the raw "Befehle (als root)" preview + raw stdout dumps from the hardening modal — clean German description + result only. - System page: dropped the .env/Datenbank storage-internals callout (irrelevant to the user). R15 — Codex gate: `codex review --uncommitted` run iteratively; fixed every finding across 9 rounds (fail2ban jail clobbering, section/precedence, composite/-1 durations, reload-starting- inactive, read-failure propagation, glob exit code, apt-count failure, atomic server create, IP validation) until clean — 0 security issues throughout. Live-verified on 10.10.90.162; R12: Servers/Detail/System 200 / 0 console errors, modals open, hardening modal shows no commands. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-13 12:19:55 +02:00

Author

SHA1

Message

Date

boban

8cf8c771c8

feat(files): image preview in the file manager; modal polish

Opening an image now renders it (SFTP base64 data-URI, 5 MB cap, save disabled for
images) instead of the text editor. Recovery-codes modal buttons realigned + the
close button relabeled 'Schließen' (it only closes). All modal textareas resize-none.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-14 23:10:37 +02:00

boban

5691051ad8

feat(i18n): bilingual foundation (DE/EN) + localize auth/dashboard/servers/fleet/account

Adds user-selectable German (default) + English, per new rule R16.

Foundation:
- config locale=de + fallback=de; User.locale column (+migration); SetLocale middleware
  (user → session → default; SUPPORTED=[de,en]); public /locale/{code} route; DE/EN
  switcher (x-lang-switch) in topbar + auth layout; <html lang> dynamic.
- Translation structure: lang/{de,en}/<group>.php (one group per feature + shared common),
  identical keys across both languages, :placeholder interpolation. Documented as R16 in
  rules.md + CLAUDE.md (R9 reconciled).
- Removed the "Warum Caddy" rationale block from the System page (per feedback).

Localized this pass (views + Livewire components, keys de↔en at parity):
- common, auth, dashboard, servers, services, files, audit, settings, system, versions.
- #[Title] attributes → dynamic title() (attributes can't call __()).

Remaining (next commit): modals components + a few modal views, shell (command palette,
nav-item, server-item, toaster), and backend service messages (app/Services/*, OsProfile).
App is fully functional in German throughout; English covers the groups above.

Boot-verified: /login HTTP 200 in DE + EN, titles + <html lang> localized, locale switch works.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-13 22:36:16 +02:00

boban

05f8ce49b4

feat: add-server, apt updates, fail2ban config; clean modals; drop storage internals

Operator feedback: no way to add servers; irrelevant storage-internals text; fail2ban
only on/off; raw shell commands shown; no apt update/upgrade.

- Add server: CreateServer modal (name, IP/host, SSH port, user, password|key, optional
  label) on the Servers index → creates server + encrypted credential ATOMICALLY (DB
  transaction). Strict IP/hostname validation (filter_var + hostname; rejects 999.x, ':').
- System updates (Debian/Ubuntu only): MaintenanceService + SystemUpdate modal — shows the
  pending-update count (or "unbekannt" when undeterminable) and runs apt update && upgrade
  as root; gated to apt hosts.
- fail2ban configuration: Fail2banConfig modal — Sperrdauer / Max. Fehlversuche / Zeitfenster,
  written to a Clusev-owned jail.d drop-in (zz-clusev.local, last-wins; never touches the
  operator's jail.local/jails). Durations kept verbatim in fail2ban's native grammar
  (600, 10m, 1h 30m, -1). Reads the EFFECTIVE [DEFAULT] across files; refuses to save when the
  current policy couldn't be read (no overwrite with unseen defaults); reloads fail2ban only
  when already active (never starts it).
- Modals: removed the raw "Befehle (als root)" preview + raw stdout dumps from the hardening
  modal — clean German description + result only.
- System page: dropped the .env/Datenbank storage-internals callout (irrelevant to the user).

R15 — Codex gate: `codex review --uncommitted` run iteratively; fixed every finding across 9
rounds (fail2ban jail clobbering, section/precedence, composite/-1 durations, reload-starting-
inactive, read-failure propagation, glob exit code, apt-count failure, atomic server create,
IP validation) until clean — 0 security issues throughout. Live-verified on 10.10.90.162;
R12: Servers/Detail/System 200 / 0 console errors, modals open, hardening modal shows no commands.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-13 12:19:55 +02:00

3 Commits (07fe404ce96eb3b52b409efcb373d2a8abcf0f3d)