clusev

Commit Graph

Author	SHA1	Message	Date
boban	5691051ad8	feat(i18n): bilingual foundation (DE/EN) + localize auth/dashboard/servers/fleet/account Adds user-selectable German (default) + English, per new rule R16. Foundation: - config locale=de + fallback=de; User.locale column (+migration); SetLocale middleware (user → session → default; SUPPORTED=[de,en]); public /locale/{code} route; DE/EN switcher (x-lang-switch) in topbar + auth layout; <html lang> dynamic. - Translation structure: lang/{de,en}/<group>.php (one group per feature + shared common), identical keys across both languages, :placeholder interpolation. Documented as R16 in rules.md + CLAUDE.md (R9 reconciled). - Removed the "Warum Caddy" rationale block from the System page (per feedback). Localized this pass (views + Livewire components, keys de↔en at parity): - common, auth, dashboard, servers, services, files, audit, settings, system, versions. - #[Title] attributes → dynamic title() (attributes can't call __()). Remaining (next commit): modals components + a few modal views, shell (command palette, nav-item, server-item, toaster), and backend service messages (app/Services/*, OsProfile). App is fully functional in German throughout; English covers the groups above. Boot-verified: /login HTTP 200 in DE + EN, titles + <html lang> localized, locale switch works. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-13 22:36:16 +02:00
boban	e792e9a3af	feat(fail2ban): jail status, banned-IP list + unban, manual ban, whitelist Addresses "ich sehe nicht welche IPs gebannt sind / entsperren / whitelist". The server-detail page gains a "fail2ban-Status" panel. New Fail2banService (owns all fail2ban I/O): - status(): jails with currently/total failed+banned + the banned IP list, plus the whitelist; sentinel-guarded, and a CLIENT_OK marker so an active service whose fail2ban-client query fails is reported as a read error, not "0 jails". - unban() (idempotent: "not banned" = success), manual ban() GUARDED against loopback (whole 127.0.0.0/8 + ::1) and Clusev's own SSH source (canonical inet_pton compare). - readConfig()/writeTuning()/writeIgnoreip(): tuning and whitelist live in SEPARATE zz- drop-ins and each writes only its own keys, so a whitelist change can never rewrite the ban policy (and vice-versa). The legacy single-file zz-clusev.local is removed on tuning save (migration). ignoreip is preserved VERBATIM (hostnames/CIDRs, continuation lines) — loopback always re-seeded; add/remove report no-ops so the audit only records real changes. UI: jails + banned IPs each with "Entsperren" (direct, audited), whitelist editor (add/remove, audited), "IP sperren" via an R5 modal (modals.fail2ban-ban). Jail/IP args are Js::from()-encoded (remote-sourced, injection-safe). Direct handlers catch SSH failures. Tuning modal migrated to Fail2banService.writeTuning. MaintenanceService slimmed to package updates only (fail2ban moved out). Pint clean; Codex review clean (IPv6 guard, verbatim ignoreip, decoupled drop-ins, legacy migration, read-error detection all hardened); R12 — server-detail HTTP 200, 0 console errors, fail2ban panel + jail + whitelist render. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-13 20:27:55 +02:00

Author

SHA1

Message

Date

boban

5691051ad8

feat(i18n): bilingual foundation (DE/EN) + localize auth/dashboard/servers/fleet/account

Adds user-selectable German (default) + English, per new rule R16.

Foundation:
- config locale=de + fallback=de; User.locale column (+migration); SetLocale middleware
  (user → session → default; SUPPORTED=[de,en]); public /locale/{code} route; DE/EN
  switcher (x-lang-switch) in topbar + auth layout; <html lang> dynamic.
- Translation structure: lang/{de,en}/<group>.php (one group per feature + shared common),
  identical keys across both languages, :placeholder interpolation. Documented as R16 in
  rules.md + CLAUDE.md (R9 reconciled).
- Removed the "Warum Caddy" rationale block from the System page (per feedback).

Localized this pass (views + Livewire components, keys de↔en at parity):
- common, auth, dashboard, servers, services, files, audit, settings, system, versions.
- #[Title] attributes → dynamic title() (attributes can't call __()).

Remaining (next commit): modals components + a few modal views, shell (command palette,
nav-item, server-item, toaster), and backend service messages (app/Services/*, OsProfile).
App is fully functional in German throughout; English covers the groups above.

Boot-verified: /login HTTP 200 in DE + EN, titles + <html lang> localized, locale switch works.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-13 22:36:16 +02:00

boban

e792e9a3af

feat(fail2ban): jail status, banned-IP list + unban, manual ban, whitelist

Addresses "ich sehe nicht welche IPs gebannt sind / entsperren / whitelist". The
server-detail page gains a "fail2ban-Status" panel.

New Fail2banService (owns all fail2ban I/O):
- status(): jails with currently/total failed+banned + the banned IP list, plus the
  whitelist; sentinel-guarded, and a CLIENT_OK marker so an active service whose
  fail2ban-client query fails is reported as a read error, not "0 jails".
- unban() (idempotent: "not banned" = success), manual ban() GUARDED against loopback
  (whole 127.0.0.0/8 + ::1) and Clusev's own SSH source (canonical inet_pton compare).
- readConfig()/writeTuning()/writeIgnoreip(): tuning and whitelist live in SEPARATE
  zz- drop-ins and each writes only its own keys, so a whitelist change can never
  rewrite the ban policy (and vice-versa). The legacy single-file zz-clusev.local is
  removed on tuning save (migration). ignoreip is preserved VERBATIM (hostnames/CIDRs,
  continuation lines) — loopback always re-seeded; add/remove report no-ops so the
  audit only records real changes.

UI: jails + banned IPs each with "Entsperren" (direct, audited), whitelist editor
(add/remove, audited), "IP sperren" via an R5 modal (modals.fail2ban-ban). Jail/IP
args are Js::from()-encoded (remote-sourced, injection-safe). Direct handlers catch
SSH failures. Tuning modal migrated to Fail2banService.writeTuning.

MaintenanceService slimmed to package updates only (fail2ban moved out).

Pint clean; Codex review clean (IPv6 guard, verbatim ignoreip, decoupled drop-ins,
legacy migration, read-error detection all hardened); R12 — server-detail HTTP 200,
0 console errors, fail2ban panel + jail + whitelist render.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-13 20:27:55 +02:00

2 Commits (25271717c2eda6ee68fdf92d656da00a2f96bb18)