clusev

Commit Graph

Author	SHA1	Message	Date
boban	ec1516184e	i18n: complete DE/EN localization (modals, shell, backend) + v0.3.0 - modals: wire 5 hard-coded views + 10 components to lang/{de,en}/modals.php - shell: command-palette (incl. app.js cmdk(nav,actions) refactor), server-item, toaster fallback - backend: new lang/{de,en}/backend.php; localize Hardening/Firewall/Fail2ban/ Maintenance services, OsProfile, plus FleetService + CredentialVault errors - fix: localized page <title> on Dashboard/Servers index+show (->title(), the Livewire-3 way; the stray title() methods were never auto-called) - fix: topbar inline @php() was swallowed by Blade's raw-block precompiler up to a later @endphp -> 500 on every authed page; converted to block @php ... @endphp - versions: localize changelog section labels via a canonical heading map - translation-quality pass: Unlock, Add credentials, clearer auth/notify copy Bump 0.2.1 -> 0.3.0; CHANGELOG. Verified: Pint clean; npm build OK; R12 all routes HTTP 200 + 0 console errors in BOTH locales (titles/nav/labels switch language); 589 used keys resolve in de+en with full group parity; Codex review clean; adversarial DE/EN audit (0 high). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-13 23:27:42 +02:00
boban	4bfa367ccf	feat(os): OS abstraction — manage updates/hardening/firewall across apt, dnf & zypper Foundation so Clusev no longer assumes Debian/apt/ufw/systemd. A host's OS is resolved once (cached) and every package/firewall/service decision asks it. New app/Support/Os/: - OsProfile — family + package manager + firewall tool + service manager, plus supports(feature) returning NULL or a German reason (graceful degradation). - OsDetector — one unprivileged probe (/etc/os-release + `command -v` with sbin on PATH + which firewall is RUNNING); family from ID/ID_LIKE cross-checked against installed binaries; cached 1h (60s when nothing detected). Readability-guards the `.` source so a host without /etc/os-release still falls back by package manager. - PackageManager — apt/dnf/zypper command strings (pending count, apply, install, is-installed); zypper exit 102/103 normalized to success. - FirewallTool — ufw + firewalld enable/disable. firewalld opens ssh/80/443 in the PERMANENT config BEFORE the daemon starts filtering (handles running + stopped), preserving the no-lockout guard for custom SSH ports. Integration: - FirewallService enable/disable now OS-aware (ufw or firewalld) with a support gate. - MaintenanceService: hasApt -> updateSupport(); pendingUpdates() + applyUpgrades() across managers (dnf check-update exit 100 handled). - HardeningService: state()/commandFor() per-OS (dpkg vs rpm, ufw vs firewalld, apt periodic vs dnf-automatic; yum-only hosts gate auto-updates). Each row carries supported/reason; unsupported features render muted with a German note instead of a toggle. apply() refuses unsupported features gracefully. - Server-Details surfaces the detected System / package manager / firewall. - SystemUpdate modal + view: OS-neutral copy; audit action system.package_upgrade. Arch (pacman) & Alpine (apk/OpenRC) are detected and gracefully disabled where unsupported. Debian/ufw/systemd path verified behaviourally identical on the live fleet. Pint clean; Codex review clean (fixed firewalld lockout + os-release guard + yum/dual-firewall/zypper edge cases); R12 — 9 routes 200, 0 console errors. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-13 18:30:25 +02:00

Author

SHA1

Message

Date

boban

ec1516184e

i18n: complete DE/EN localization (modals, shell, backend) + v0.3.0

- modals: wire 5 hard-coded views + 10 components to lang/{de,en}/modals.php
- shell: command-palette (incl. app.js cmdk(nav,actions) refactor), server-item,
  toaster fallback
- backend: new lang/{de,en}/backend.php; localize Hardening/Firewall/Fail2ban/
  Maintenance services, OsProfile, plus FleetService + CredentialVault errors
- fix: localized page <title> on Dashboard/Servers index+show (->title(), the
  Livewire-3 way; the stray title() methods were never auto-called)
- fix: topbar inline @php() was swallowed by Blade's raw-block precompiler up to a
  later @endphp -> 500 on every authed page; converted to block @php ... @endphp
- versions: localize changelog section labels via a canonical heading map
- translation-quality pass: Unlock, Add credentials, clearer auth/notify copy

Bump 0.2.1 -> 0.3.0; CHANGELOG.

Verified: Pint clean; npm build OK; R12 all routes HTTP 200 + 0 console errors in
BOTH locales (titles/nav/labels switch language); 589 used keys resolve in de+en
with full group parity; Codex review clean; adversarial DE/EN audit (0 high).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-13 23:27:42 +02:00

boban

4bfa367ccf

feat(os): OS abstraction — manage updates/hardening/firewall across apt, dnf & zypper

Foundation so Clusev no longer assumes Debian/apt/ufw/systemd. A host's OS is
resolved once (cached) and every package/firewall/service decision asks it.

New app/Support/Os/:
- OsProfile  — family + package manager + firewall tool + service manager, plus
  supports(feature) returning NULL or a German reason (graceful degradation).
- OsDetector — one unprivileged probe (/etc/os-release + `command -v` with sbin on
  PATH + which firewall is RUNNING); family from ID/ID_LIKE cross-checked against
  installed binaries; cached 1h (60s when nothing detected). Readability-guards the
  `.` source so a host without /etc/os-release still falls back by package manager.
- PackageManager — apt/dnf/zypper command strings (pending count, apply, install,
  is-installed); zypper exit 102/103 normalized to success.
- FirewallTool   — ufw + firewalld enable/disable. firewalld opens ssh/80/443 in the
  PERMANENT config BEFORE the daemon starts filtering (handles running + stopped),
  preserving the no-lockout guard for custom SSH ports.

Integration:
- FirewallService enable/disable now OS-aware (ufw or firewalld) with a support gate.
- MaintenanceService: hasApt -> updateSupport(); pendingUpdates() + applyUpgrades()
  across managers (dnf check-update exit 100 handled).
- HardeningService: state()/commandFor() per-OS (dpkg vs rpm, ufw vs firewalld, apt
  periodic vs dnf-automatic; yum-only hosts gate auto-updates). Each row carries
  supported/reason; unsupported features render muted with a German note instead of
  a toggle. apply() refuses unsupported features gracefully.
- Server-Details surfaces the detected System / package manager / firewall.
- SystemUpdate modal + view: OS-neutral copy; audit action system.package_upgrade.

Arch (pacman) & Alpine (apk/OpenRC) are detected and gracefully disabled where
unsupported. Debian/ufw/systemd path verified behaviourally identical on the live
fleet. Pint clean; Codex review clean (fixed firewalld lockout + os-release guard +
yum/dual-firewall/zypper edge cases); R12 — 9 routes 200, 0 console errors.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-13 18:30:25 +02:00

2 Commits (3cab72bf462eafef439a469aecd56ab6a2e00a12)