clusev

Commit Graph

Author	SHA1	Message	Date
boban	ec1516184e	i18n: complete DE/EN localization (modals, shell, backend) + v0.3.0 - modals: wire 5 hard-coded views + 10 components to lang/{de,en}/modals.php - shell: command-palette (incl. app.js cmdk(nav,actions) refactor), server-item, toaster fallback - backend: new lang/{de,en}/backend.php; localize Hardening/Firewall/Fail2ban/ Maintenance services, OsProfile, plus FleetService + CredentialVault errors - fix: localized page <title> on Dashboard/Servers index+show (->title(), the Livewire-3 way; the stray title() methods were never auto-called) - fix: topbar inline @php() was swallowed by Blade's raw-block precompiler up to a later @endphp -> 500 on every authed page; converted to block @php ... @endphp - versions: localize changelog section labels via a canonical heading map - translation-quality pass: Unlock, Add credentials, clearer auth/notify copy Bump 0.2.1 -> 0.3.0; CHANGELOG. Verified: Pint clean; npm build OK; R12 all routes HTTP 200 + 0 console errors in BOTH locales (titles/nav/labels switch language); 589 used keys resolve in de+en with full group parity; Codex review clean; adversarial DE/EN audit (0 high). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-13 23:27:42 +02:00
boban	e792e9a3af	feat(fail2ban): jail status, banned-IP list + unban, manual ban, whitelist Addresses "ich sehe nicht welche IPs gebannt sind / entsperren / whitelist". The server-detail page gains a "fail2ban-Status" panel. New Fail2banService (owns all fail2ban I/O): - status(): jails with currently/total failed+banned + the banned IP list, plus the whitelist; sentinel-guarded, and a CLIENT_OK marker so an active service whose fail2ban-client query fails is reported as a read error, not "0 jails". - unban() (idempotent: "not banned" = success), manual ban() GUARDED against loopback (whole 127.0.0.0/8 + ::1) and Clusev's own SSH source (canonical inet_pton compare). - readConfig()/writeTuning()/writeIgnoreip(): tuning and whitelist live in SEPARATE zz- drop-ins and each writes only its own keys, so a whitelist change can never rewrite the ban policy (and vice-versa). The legacy single-file zz-clusev.local is removed on tuning save (migration). ignoreip is preserved VERBATIM (hostnames/CIDRs, continuation lines) — loopback always re-seeded; add/remove report no-ops so the audit only records real changes. UI: jails + banned IPs each with "Entsperren" (direct, audited), whitelist editor (add/remove, audited), "IP sperren" via an R5 modal (modals.fail2ban-ban). Jail/IP args are Js::from()-encoded (remote-sourced, injection-safe). Direct handlers catch SSH failures. Tuning modal migrated to Fail2banService.writeTuning. MaintenanceService slimmed to package updates only (fail2ban moved out). Pint clean; Codex review clean (IPv6 guard, verbatim ignoreip, decoupled drop-ins, legacy migration, read-error detection all hardened); R12 — server-detail HTTP 200, 0 console errors, fail2ban panel + jail + whitelist render. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-13 20:27:55 +02:00

Author

SHA1

Message

Date

boban

ec1516184e

i18n: complete DE/EN localization (modals, shell, backend) + v0.3.0

- modals: wire 5 hard-coded views + 10 components to lang/{de,en}/modals.php
- shell: command-palette (incl. app.js cmdk(nav,actions) refactor), server-item,
  toaster fallback
- backend: new lang/{de,en}/backend.php; localize Hardening/Firewall/Fail2ban/
  Maintenance services, OsProfile, plus FleetService + CredentialVault errors
- fix: localized page <title> on Dashboard/Servers index+show (->title(), the
  Livewire-3 way; the stray title() methods were never auto-called)
- fix: topbar inline @php() was swallowed by Blade's raw-block precompiler up to a
  later @endphp -> 500 on every authed page; converted to block @php ... @endphp
- versions: localize changelog section labels via a canonical heading map
- translation-quality pass: Unlock, Add credentials, clearer auth/notify copy

Bump 0.2.1 -> 0.3.0; CHANGELOG.

Verified: Pint clean; npm build OK; R12 all routes HTTP 200 + 0 console errors in
BOTH locales (titles/nav/labels switch language); 589 used keys resolve in de+en
with full group parity; Codex review clean; adversarial DE/EN audit (0 high).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-13 23:27:42 +02:00

boban

e792e9a3af

feat(fail2ban): jail status, banned-IP list + unban, manual ban, whitelist

Addresses "ich sehe nicht welche IPs gebannt sind / entsperren / whitelist". The
server-detail page gains a "fail2ban-Status" panel.

New Fail2banService (owns all fail2ban I/O):
- status(): jails with currently/total failed+banned + the banned IP list, plus the
  whitelist; sentinel-guarded, and a CLIENT_OK marker so an active service whose
  fail2ban-client query fails is reported as a read error, not "0 jails".
- unban() (idempotent: "not banned" = success), manual ban() GUARDED against loopback
  (whole 127.0.0.0/8 + ::1) and Clusev's own SSH source (canonical inet_pton compare).
- readConfig()/writeTuning()/writeIgnoreip(): tuning and whitelist live in SEPARATE
  zz- drop-ins and each writes only its own keys, so a whitelist change can never
  rewrite the ban policy (and vice-versa). The legacy single-file zz-clusev.local is
  removed on tuning save (migration). ignoreip is preserved VERBATIM (hostnames/CIDRs,
  continuation lines) — loopback always re-seeded; add/remove report no-ops so the
  audit only records real changes.

UI: jails + banned IPs each with "Entsperren" (direct, audited), whitelist editor
(add/remove, audited), "IP sperren" via an R5 modal (modals.fail2ban-ban). Jail/IP
args are Js::from()-encoded (remote-sourced, injection-safe). Direct handlers catch
SSH failures. Tuning modal migrated to Fail2banService.writeTuning.

MaintenanceService slimmed to package updates only (fail2ban moved out).

Pint clean; Codex review clean (IPv6 guard, verbatim ignoreip, decoupled drop-ins,
legacy migration, read-error detection all hardened); R12 — server-detail HTTP 200,
0 console errors, fail2ban panel + jail + whitelist render.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-13 20:27:55 +02:00

2 Commits (e6f6e7f8a46a0f9bdf2d2cfbbd616ab540878eaf)