diff --git a/API.md b/API.md
index 9dbda36..bf36722 100644
--- a/API.md
+++ b/API.md
@@ -17,6 +17,7 @@ Complete API reference for the Web CLI application. All endpoints return JSON re
- [Environment Variables Management](#environment-variables-management)
- [Bash Scripts Management](#bash-scripts-management)
- [Script Presets Management](#script-presets-management)
+- [Vault Integration](#vault-integration)
- [Interactive Terminal](#interactive-terminal-websocket)
- [Error Responses](#error-responses)
- [Security Considerations](#security-considerations)
@@ -76,6 +77,19 @@ Default port is `7777`, configurable via `-port` flag or `PORT` environment vari
| `/script-presets/{id}` | GET | Get single script preset |
| `/script-presets/{id}` | PUT | Update script preset |
| `/script-presets/{id}` | DELETE | Delete script preset |
+| `/vault/config` | GET | Get Vault configuration |
+| `/vault/config` | POST | Create/update Vault configuration |
+| `/vault/config` | DELETE | Delete Vault configuration |
+| `/vault/status` | GET | Get Vault connection status |
+| `/vault/test` | POST | Test Vault connection |
+| `/vault/ssh-keys` | GET | List SSH keys from Vault |
+| `/vault/ssh-keys` | POST | Create SSH key in Vault |
+| `/vault/servers` | GET | List servers from Vault |
+| `/vault/servers` | POST | Create server in Vault |
+| `/vault/env-variables` | GET | List environment variables from Vault |
+| `/vault/env-variables` | POST | Create environment variable in Vault |
+| `/vault/bash-scripts` | GET | List bash scripts from Vault |
+| `/vault/bash-scripts` | POST | Create bash script in Vault |
## Authentication
@@ -2022,6 +2036,534 @@ curl -X DELETE http://localhost:7777/api/script-presets/1
---
+## Vault Integration
+
+HashiCorp Vault integration allows you to store and retrieve secrets (SSH keys, servers, environment variables, and bash scripts) from an external Vault server. This provides centralized secrets management with additional security features.
+
+### Get Vault Configuration
+
+Retrieve the current Vault configuration (token is never returned).
+
+**Endpoint**: `GET /vault/config`
+
+**Response**: `200 OK`
+
+```json
+{
+ "id": 1,
+ "address": "https://vault.example.com:8200",
+ "namespace": "admin",
+ "mount_path": "secret",
+ "enabled": true,
+ "has_token": true,
+ "created_at": "2025-01-15T10:00:00Z",
+ "updated_at": "2025-01-15T10:00:00Z"
+}
+```
+
+**Fields**:
+- `address` (string): Vault server URL
+- `namespace` (string): Optional Vault namespace
+- `mount_path` (string): KV secrets engine mount path (default: "secret")
+- `enabled` (boolean): Whether Vault integration is active
+- `has_token` (boolean): Indicates if a token is configured (token value never exposed)
+
+**Example**:
+
+```bash
+curl http://localhost:7777/api/vault/config
+```
+
+---
+
+### Create/Update Vault Configuration
+
+Configure or update the Vault connection settings.
+
+**Endpoint**: `POST /vault/config`
+
+**Request Headers**:
+- `Content-Type: application/json`
+
+**Request Body**:
+
+```json
+{
+ "address": "https://vault.example.com:8200",
+ "token": "hvs.your-vault-token",
+ "namespace": "admin",
+ "mount_path": "secret",
+ "enabled": true
+}
+```
+
+**Fields**:
+- `address` (string, required): Vault server URL
+- `token` (string, required for new config): Vault authentication token (encrypted with AES-256-GCM before storage)
+- `namespace` (string, optional): Vault namespace for enterprise deployments
+- `mount_path` (string, optional): KV secrets engine mount path (default: "secret")
+- `enabled` (boolean, optional): Enable/disable Vault integration
+
+**Response**: `200 OK`
+
+```json
+{
+ "id": 1,
+ "address": "https://vault.example.com:8200",
+ "namespace": "admin",
+ "mount_path": "secret",
+ "enabled": true,
+ "has_token": true,
+ "created_at": "2025-01-15T10:00:00Z",
+ "updated_at": "2025-01-15T10:00:00Z"
+}
+```
+
+**Error Responses**:
+- `400 Bad Request`: Missing required fields (address or token)
+
+**Example**:
+
+```bash
+curl -X POST http://localhost:7777/api/vault/config \
+ -H "Content-Type: application/json" \
+ -d '{
+ "address": "https://vault.example.com:8200",
+ "token": "hvs.your-vault-token",
+ "mount_path": "secret",
+ "enabled": true
+ }'
+```
+
+---
+
+### Delete Vault Configuration
+
+Remove the Vault configuration.
+
+**Endpoint**: `DELETE /vault/config`
+
+**Response**: `204 No Content`
+
+**Example**:
+
+```bash
+curl -X DELETE http://localhost:7777/api/vault/config
+```
+
+---
+
+### Get Vault Status
+
+Check the current Vault connection status.
+
+**Endpoint**: `GET /vault/status`
+
+**Response**: `200 OK`
+
+```json
+{
+ "configured": true,
+ "enabled": true,
+ "connected": true,
+ "address": "https://vault.example.com:8200",
+ "vault_sealed": false
+}
+```
+
+**Fields**:
+- `configured` (boolean): Whether Vault settings exist
+- `enabled` (boolean): Whether Vault integration is enabled
+- `connected` (boolean): Whether connection test passed
+- `address` (string): Vault server URL
+- `error` (string, optional): Error message if connection failed
+- `vault_sealed` (boolean, optional): Whether Vault is sealed
+
+**Example**:
+
+```bash
+curl http://localhost:7777/api/vault/status
+```
+
+---
+
+### Test Vault Connection
+
+Test the connection to Vault and initialize the secrets structure.
+
+**Endpoint**: `POST /vault/test`
+
+**Response**: `200 OK`
+
+```json
+{
+ "configured": true,
+ "enabled": true,
+ "connected": true,
+ "address": "https://vault.example.com:8200",
+ "vault_sealed": false
+}
+```
+
+**Note**: On successful connection, this endpoint automatically initializes the Vault secrets structure (`webcli/ssh-keys`, `webcli/servers`, `webcli/env-variables`, `webcli/bash-scripts`).
+
+**Example**:
+
+```bash
+curl -X POST http://localhost:7777/api/vault/test
+```
+
+---
+
+### List SSH Keys from Vault
+
+Retrieve all SSH keys stored in Vault.
+
+**Endpoint**: `GET /vault/ssh-keys`
+
+**Response**: `200 OK`
+
+```json
+[
+ {
+ "name": "production-key",
+ "private_key": "-----BEGIN OPENSSH PRIVATE KEY-----\n...\n-----END OPENSSH PRIVATE KEY-----",
+ "group": "production",
+ "created_at": "2025-01-15T10:00:00Z"
+ }
+]
+```
+
+**Error Responses**:
+- `400 Bad Request`: Vault not configured or disabled
+
+**Example**:
+
+```bash
+curl http://localhost:7777/api/vault/ssh-keys
+```
+
+---
+
+### Create SSH Key in Vault
+
+Store a new SSH key in Vault.
+
+**Endpoint**: `POST /vault/ssh-keys`
+
+**Request Headers**:
+- `Content-Type: application/json`
+
+**Request Body**:
+
+```json
+{
+ "name": "production-key",
+ "private_key": "-----BEGIN OPENSSH PRIVATE KEY-----\n...\n-----END OPENSSH PRIVATE KEY-----",
+ "group": "production"
+}
+```
+
+**Fields**:
+- `name` (string, required): Key identifier
+- `private_key` (string, required): PEM-encoded SSH private key
+- `group` (string, optional): Group for organization (default: "default")
+
+**Response**: `201 Created`
+
+```json
+{
+ "name": "production-key",
+ "group": "production",
+ "created_at": "2025-01-15T10:00:00Z",
+ "source": "vault"
+}
+```
+
+**Error Responses**:
+- `400 Bad Request`: Missing required fields or Vault not configured
+
+**Example**:
+
+```bash
+curl -X POST http://localhost:7777/api/vault/ssh-keys \
+ -H "Content-Type: application/json" \
+ -d '{
+ "name": "production-key",
+ "private_key": "-----BEGIN OPENSSH PRIVATE KEY-----\n...\n-----END OPENSSH PRIVATE KEY-----",
+ "group": "production"
+ }'
+```
+
+---
+
+### List Servers from Vault
+
+Retrieve all server configurations stored in Vault.
+
+**Endpoint**: `GET /vault/servers`
+
+**Response**: `200 OK`
+
+```json
+[
+ {
+ "name": "prod-web-01",
+ "ip_address": "10.0.0.50",
+ "port": 22,
+ "username": "deploy",
+ "group": "production"
+ }
+]
+```
+
+**Error Responses**:
+- `400 Bad Request`: Vault not configured or disabled
+
+**Example**:
+
+```bash
+curl http://localhost:7777/api/vault/servers
+```
+
+---
+
+### Create Server in Vault
+
+Store a new server configuration in Vault.
+
+**Endpoint**: `POST /vault/servers`
+
+**Request Headers**:
+- `Content-Type: application/json`
+
+**Request Body**:
+
+```json
+{
+ "name": "prod-web-01",
+ "ip_address": "10.0.0.50",
+ "port": 22,
+ "username": "deploy",
+ "group": "production"
+}
+```
+
+**Fields**:
+- `name` (string, optional): Server name/alias (at least one of name or ip_address required)
+- `ip_address` (string, optional): Server IP address or hostname
+- `port` (integer, optional): SSH port (default: 22)
+- `username` (string, optional): SSH username (default: "root")
+- `group` (string, optional): Group for organization (default: "default")
+
+**Response**: `201 Created`
+
+```json
+{
+ "name": "prod-web-01",
+ "ip_address": "10.0.0.50",
+ "port": 22,
+ "username": "deploy",
+ "group": "production",
+ "source": "vault"
+}
+```
+
+**Error Responses**:
+- `400 Bad Request`: Missing required fields or Vault not configured
+
+**Example**:
+
+```bash
+curl -X POST http://localhost:7777/api/vault/servers \
+ -H "Content-Type: application/json" \
+ -d '{
+ "name": "prod-web-01",
+ "ip_address": "10.0.0.50",
+ "port": 22,
+ "username": "deploy",
+ "group": "production"
+ }'
+```
+
+---
+
+### List Environment Variables from Vault
+
+Retrieve all environment variables stored in Vault.
+
+**Endpoint**: `GET /vault/env-variables`
+
+**Response**: `200 OK`
+
+```json
+[
+ {
+ "name": "API_SECRET",
+ "value": "super-secret-value",
+ "description": "External API authentication secret",
+ "group": "production"
+ }
+]
+```
+
+**Note**: Unlike local environment variables, Vault env variables are returned with full values (not masked).
+
+**Error Responses**:
+- `400 Bad Request`: Vault not configured or disabled
+
+**Example**:
+
+```bash
+curl http://localhost:7777/api/vault/env-variables
+```
+
+---
+
+### Create Environment Variable in Vault
+
+Store a new environment variable in Vault.
+
+**Endpoint**: `POST /vault/env-variables`
+
+**Request Headers**:
+- `Content-Type: application/json`
+
+**Request Body**:
+
+```json
+{
+ "name": "API_SECRET",
+ "value": "super-secret-value",
+ "description": "External API authentication secret",
+ "group": "production"
+}
+```
+
+**Fields**:
+- `name` (string, required): Variable name
+- `value` (string, required): Variable value
+- `description` (string, optional): Description
+- `group` (string, optional): Group for organization (default: "default")
+
+**Response**: `201 Created`
+
+```json
+{
+ "name": "API_SECRET",
+ "description": "External API authentication secret",
+ "group": "production",
+ "source": "vault"
+}
+```
+
+**Error Responses**:
+- `400 Bad Request`: Missing required fields or Vault not configured
+
+**Example**:
+
+```bash
+curl -X POST http://localhost:7777/api/vault/env-variables \
+ -H "Content-Type: application/json" \
+ -d '{
+ "name": "API_SECRET",
+ "value": "super-secret-value",
+ "description": "External API authentication secret",
+ "group": "production"
+ }'
+```
+
+---
+
+### List Bash Scripts from Vault
+
+Retrieve all bash scripts stored in Vault.
+
+**Endpoint**: `GET /vault/bash-scripts`
+
+**Response**: `200 OK`
+
+```json
+[
+ {
+ "name": "deploy-script",
+ "description": "Production deployment script",
+ "content": "#!/bin/bash\necho \"Deploying...\"",
+ "filename": "deploy.sh",
+ "group": "production"
+ }
+]
+```
+
+**Error Responses**:
+- `400 Bad Request`: Vault not configured or disabled
+
+**Example**:
+
+```bash
+curl http://localhost:7777/api/vault/bash-scripts
+```
+
+---
+
+### Create Bash Script in Vault
+
+Store a new bash script in Vault.
+
+**Endpoint**: `POST /vault/bash-scripts`
+
+**Request Headers**:
+- `Content-Type: application/json`
+
+**Request Body**:
+
+```json
+{
+ "name": "deploy-script",
+ "description": "Production deployment script",
+ "content": "#!/bin/bash\nset -e\necho \"Deploying...\"\ncd /opt/app\ngit pull\nsystemctl restart app",
+ "filename": "deploy.sh",
+ "group": "production"
+}
+```
+
+**Fields**:
+- `name` (string, required): Script name
+- `content` (string, required): Bash script content
+- `description` (string, optional): Description
+- `filename` (string, optional): Original filename
+- `group` (string, optional): Group for organization (default: "default")
+
+**Response**: `201 Created`
+
+```json
+{
+ "name": "deploy-script",
+ "description": "Production deployment script",
+ "filename": "deploy.sh",
+ "group": "production",
+ "source": "vault"
+}
+```
+
+**Error Responses**:
+- `400 Bad Request`: Missing required fields or Vault not configured
+
+**Example**:
+
+```bash
+curl -X POST http://localhost:7777/api/vault/bash-scripts \
+ -H "Content-Type: application/json" \
+ -d '{
+ "name": "deploy-script",
+ "description": "Production deployment script",
+ "content": "#!/bin/bash\necho \"Deploying...\"",
+ "group": "production"
+ }'
+```
+
+---
+
## Error Responses
All API endpoints use standard HTTP status codes and return JSON error responses.
diff --git a/README.md b/README.md
index 67b2708..a91402a 100644
--- a/README.md
+++ b/README.md
@@ -9,699 +9,23 @@
A powerful web-based interface for executing commands on local and remote Linux servers. Built with Go and React with Material-UI for a professional, modern user experience.
-*Main dashboard with feature cards for easy navigation*
-
-## 📋 Table of Contents
-
-- [Features](#-features)
-- [Tech Stack](#-tech-stack)
-- [Screenshots](#-screenshots)
-- [Prerequisites](#-prerequisites)
-- [Installation](#-installation)
-- [Quick Start](#-quick-start)
-- [Usage](#-usage)
-- [API Documentation](#-api-documentation)
-- [Configuration](#-configuration)
-- [Security](#-security)
-- [Deployment](#-deployment)
-- [Development](#-development)
-- [Contributing](#-contributing)
-- [License](#-license)
-
-## ✨ Features
-
-### Core Functionality
-- **Web-Based Interface**: Professional Material-UI dashboard accessible from any browser
-- **Theme Support**: Dark and light mode toggle with preferences saved locally
-- **Multi-Platform**: Compiled binaries for Linux x64, macOS Intel, and macOS Apple Silicon
-
-### Interactive Terminal
-- **Full Browser-Based Terminal**: Real-time terminal emulator powered by xterm.js with WebSocket backend
-- **Multiple Shell Support**: Choose between Bash, Zsh, or Sh shells
-- **SSH Key Integration**: Select SSH keys from the dropdown - automatically injected into terminal sessions
-- **Server Name Resolution**: Servers from Admin Panel automatically available as SSH hostname aliases
-- **Dynamic Resize**: Terminal automatically resizes with proper 256-color support
-- **Fullscreen Mode**: Toggle fullscreen for distraction-free terminal access
-
-### Command Execution
-- **Local Commands**: Execute bash commands on your local server with real-time output
-- **Remote Commands**: Connect and execute commands on remote servers via SSH
-- **User Selection**: Run commands as different users (current, root, or custom)
-- **Sudo Support**: Secure password dialog for root command execution
-
-### Server & SSH Management
-- **Admin Panel**: Full management interface with tabbed sections
-- **SSH Key Management**: CRUD operations for SSH private keys
-- **Server Management**: Manage remote servers with hostname, IP, port, and username
-- **Hostname Validation**: Automatic validation according to hostname conventions
-
-### Command Templates & History
-- **Command Templates**: Save frequently-used commands for quick re-execution
-- **Command Type Management**: Visual indicators (Local/Remote) with type switching
-- **Smart Navigation**: Execute button routes to appropriate page based on command type
-- **Command History**: Complete execution history with output, exit codes, and timing
-
-### Environment Variables
-- **Secure Storage**: Store sensitive environment variables with AES-256-GCM encryption
-- **Masked Display**: Values masked by default in API responses
-- **Script Injection**: Inject stored env vars into script executions
-
-### Bash Scripts
-- **Script Library**: Store and manage reusable bash scripts
-- **Local & Remote Execution**: Execute scripts on local or remote servers
-- **Script Presets**: Save execution configurations (server, SSH key, user, env vars)
-- **Environment Integration**: Inject stored environment variables into scripts
-
-### Developer Tools
-- **YAML Validator**: Validate, format, and auto-fix YAML documents with Monaco Editor
-- **JSON Validator**: Validate, format, and auto-fix JSON data with Monaco Editor
-- **Auto-Fix**: Automatic repair of common issues (tabs, indentation, trailing commas, etc.)
-- **Diff View**: Side-by-side comparison showing exactly what was changed by auto-fix
-- **Syntax Highlighting**: Full VS Code-style editing experience
-
-### Security
-- **Authentication**: HTTP Basic Auth and Bearer token support (configurable)
-- **TLS/HTTPS Support**: Native TLS support with optional HTTPS enforcement
-- **Security Headers**: X-Frame-Options, X-Content-Type-Options, X-XSS-Protection, Referrer-Policy
-- **SSH Host Key Verification**: Proper host key checking against known_hosts with TOFU support
-- **Input Validation**: Comprehensive validation for all user inputs
-- **Encrypted Database**: SQLite with AES-256-GCM encryption for sensitive data
-- **bcrypt Password Hashing**: Secure password hashing with cost factor 12
-- **HTTP Timeouts**: Protection against slowloris and DoS attacks
-- **CORS Policy**: Restrictive CORS with configurable origins
-- **Secure Password Handling**: SSH passwords never stored in command history
-- **Automatic Encryption**: All SSH keys, scripts, and env variables encrypted at rest
-- **Entropy Verification**: System entropy check before cryptographic key generation (Linux)
-- **Database Migrations**: Automatic schema versioning and migration system
-
-## 🛠 Tech Stack
-
-### Backend
-- **[Go 1.21+](https://golang.org/)**: High-performance backend server
-- **[Gorilla Mux](https://github.com/gorilla/mux)**: HTTP router for API endpoints
-- **[Gorilla WebSocket](https://github.com/gorilla/websocket)**: WebSocket support for interactive terminal
-- **[creack/pty](https://github.com/creack/pty)**: PTY (pseudo-terminal) handling for terminal emulation
-- **[Viper](https://github.com/spf13/viper)**: Configuration management with env, file, and flag support
-- **[Swaggo/swag](https://github.com/swaggo/swag)**: Swagger API documentation generator
-- **[SQLite](https://www.sqlite.org/)**: Embedded database with migration support
-- **[golang.org/x/crypto/ssh](https://pkg.go.dev/golang.org/x/crypto/ssh)**: SSH client with host key verification
-- **[golang.org/x/crypto/bcrypt](https://pkg.go.dev/golang.org/x/crypto/bcrypt)**: Secure password hashing
-- **AES-256-GCM**: Military-grade encryption for sensitive data
-- **Authentication Middleware**: HTTP Basic Auth and Bearer token support
-- **Security Middleware**: HTTPS enforcement and security headers
-- **Input Validation**: Comprehensive validation for security
-
-### Frontend
-- **[React 18](https://react.dev/)**: Modern UI library
-- **[React Router v6](https://reactrouter.com/)**: Client-side routing
-- **[Material-UI (MUI) v5](https://mui.com/)**: Professional component library
-- **[xterm.js](https://xtermjs.org/)**: Terminal emulator for the browser
-- **[Monaco Editor](https://microsoft.github.io/monaco-editor/)**: VS Code editor for YAML/JSON tools
-- **[Vite](https://vitejs.dev/)**: Fast build tool and dev server
-- **[Emotion](https://emotion.sh/)**: CSS-in-JS styling
-- **[Swagger UI](https://swagger.io/tools/swagger-ui/)**: Interactive API documentation
-- **[js-yaml](https://github.com/nodeca/js-yaml)**: YAML parsing and formatting
-- **[jsonrepair](https://github.com/josdejong/jsonrepair)**: JSON auto-fix and repair
-
-## 📸 Screenshots
-
-### Dashboard
-
-*Main dashboard with feature cards for easy navigation*
-
-### Local Command Execution
-
-*Execute commands on your local server with real-time output*
-
-### Remote Command Execution
-
-*Connect to remote servers via SSH and execute commands*
-
-### Remote Script Execution
-
-*Connect to remote servers via SSH and execute script*
-
-### Interactive Terminal
-
-*Full browser-based terminal with SSH key integration and server aliases*
-
-### Admin Panel - SSH Keys
-
-*Manage SSH private keys for server authentication*
-
-### Admin Panel - Servers
-
-*Configure and manage remote servers*
-
-### Saved Commands
-
-*Save and reuse frequently-used command templates with type indicators*
-
-### Command History
-
-*View complete execution history with output and timing*
-
-## 📦 Prerequisites
-
-- **Go**: Version 1.21 or higher ([Download](https://golang.org/dl/))
-- **Node.js**: Version 18 or higher ([Download](https://nodejs.org/))
-- **npm**: Version 8 or higher (comes with Node.js)
-
-## 🚀 Installation
-
-### Clone the Repository
-
-```bash
-git clone https://github.com/pozgo/web-cli.git
-cd web-cli
-```
-
-### Install Dependencies
-
-#### Backend
-```bash
-go mod download
-```
-
-#### Frontend
-```bash
-cd frontend
-npm install
-cd ..
-```
-
-## ⚡ Quick Start
-
-### Build and Run
-
-```bash
-# Build the application
-./build.sh
-
-# Run the server
-./web-cli
-```
-
-Access the application at `http://localhost:7777`
-
-### Using Management Script
-
-```bash
-# Start the server
-./manage.sh start
-
-# Stop the server
-./manage.sh stop
-
-# Check status
-./manage.sh status
-```
-
-## 📖 Usage
-
-### Interactive Terminal
-
-1. Navigate to **Interactive Terminal** from the dashboard
-2. Select your preferred shell (Bash, Zsh, or Sh)
-3. Optionally select an SSH key from the dropdown
-4. Use the terminal like a native terminal - full PTY support
-5. SSH to servers using aliases: `ssh myserver` (servers from Admin Panel)
-6. Toggle fullscreen with the fullscreen button
-
-**SSH Server Aliases:**
-When you add servers in the Admin Panel, they become available as SSH aliases in the terminal:
-```bash
-# If you added a server named "prod" with IP 10.0.0.5 and user "deploy"
-ssh prod # Automatically connects to deploy@10.0.0.5
-```
-
-### Local Command Execution
-
-1. Navigate to **Local Commands** from the dashboard
-2. Enter your bash command
-3. Select the user to run as (current, root, or custom)
-4. Click **Execute Command**
-5. View real-time output
-
-### Remote Command Execution
-
-1. First, add SSH keys and servers in the **Admin Panel**
-2. Navigate to **Remote Execution**
-3. Select a server from the dropdown
-4. Choose an SSH key (optional, password fallback available)
-5. Enter your command and click **Execute**
-
-### Saved Command Templates
-
-1. Execute any command and check "Save command as template"
-2. Access saved commands from the **Saved Commands** page
-3. Edit command type (Local/Remote) and details
-4. Execute saved commands with one click
-
-## 📚 API Documentation
-
-Web CLI provides a comprehensive RESTful API for programmatic access to all features. Perfect for automation, CI/CD pipelines, and integration with other tools.
-
-### 🚀 Quick Start
-
-**Base URL**: `http://localhost:7777/api`
-
-**Example Request**:
-```bash
-curl http://localhost:7777/api/health
-# Response: {"status":"ok"}
-```
-
-### 📋 API Endpoints Overview
-
-| Category | Endpoints | Description |
-|----------|-----------|-------------|
-| **Health** | 1 endpoint | Server health check |
-| **Terminal** | 1 WebSocket | Interactive terminal sessions |
-| **SSH Keys** | 5 endpoints | Manage SSH private keys |
-| **Servers** | 5 endpoints | Manage remote servers |
-| **Local Users** | 5 endpoints | Manage local user accounts |
-| **System Info** | 1 endpoint | Get current system user |
-| **Commands** | 1 endpoint | Execute local/remote commands |
-| **Saved Commands** | 5 endpoints | Manage command templates |
-| **History** | 2 endpoints | View execution history |
-| **Environment Variables** | 5 endpoints | Manage encrypted env variables |
-| **Bash Scripts** | 6 endpoints | Manage and execute scripts |
-| **Script Presets** | 5 endpoints | Manage execution presets |
-
-**Total: 43 endpoints (42 REST + 1 WebSocket)**
-
-### 📘 Swagger UI
-
-Interactive API documentation is available at `/swagger/` when the server is running.
-
-Access: `http://localhost:7777/swagger/`
-
-### 📖 Complete Documentation
-
-For detailed API documentation including:
-- ✅ All 41 endpoints with full descriptions
-- ✅ Request/response examples with cURL commands
-- ✅ Field descriptions and validation rules
-- ✅ Error response formats and status codes
-- ✅ Security considerations and best practices
-- ✅ Authentication guidance for production
-- ✅ Quick reference table for all endpoints
-
-**👉 See [API.md](API.md) for complete API reference**
-
-### 💡 Common Use Cases
-
-**Note:** If authentication is enabled, add `-u username:password` or `-H "Authorization: Bearer token"` to all requests.
-
-**Execute a local command**:
-```bash
-curl -u admin:password -X POST http://localhost:7777/api/commands/execute \
- -H "Content-Type: application/json" \
- -d '{"command": "df -h", "user": "root"}'
-```
-
-**Execute a remote command via SSH**:
-```bash
-curl -u admin:password -X POST http://localhost:7777/api/commands/execute \
- -H "Content-Type: application/json" \
- -d '{
- "command": "uptime",
- "is_remote": true,
- "server_id": 1,
- "ssh_key_id": 2
- }'
-```
-
-**List command history**:
-```bash
-curl -u admin:password "http://localhost:7777/api/history?limit=10&server=local"
-```
-
-**Using Bearer Token**:
-```bash
-curl -H "Authorization: Bearer your-api-token" \
- -X POST http://localhost:7777/api/commands/execute \
- -H "Content-Type: application/json" \
- -d '{"command": "uptime", "user": "current"}'
-```
-
-## ⚙️ Configuration
-
-### Command-Line Flags
-
-```bash
-./web-cli [options]
-
-Options:
- -port int Port to listen on (default: 7777)
- -host string Host to bind to (default: 0.0.0.0)
- -frontend string Path to frontend build files (default: ./frontend/dist)
- -db string Path to database file (default: ./data/web-cli.db)
- -encryption-key string Path to encryption key file (default: ./.encryption_key)
- -tls-cert string Path to TLS certificate file (enables HTTPS)
- -tls-key string Path to TLS private key file
- -require-https Require HTTPS when auth is enabled (reject HTTP requests)
-```
-
-### Environment Variables
-
-All configuration options can be set via environment variables:
-
-```bash
-# Standard environment variables
-PORT=8080 HOST=localhost ./web-cli
-
-# WEBCLI-prefixed variables (recommended)
-WEBCLI_PORT=8080
-WEBCLI_HOST=localhost
-WEBCLI_DATABASE_PATH=/var/lib/web-cli/web-cli.db
-WEBCLI_ENCRYPTION_KEY_PATH=/etc/web-cli/encryption.key
-WEBCLI_TLS_CERT_PATH=/etc/ssl/certs/web-cli.crt
-WEBCLI_TLS_KEY_PATH=/etc/ssl/private/web-cli.key
-WEBCLI_REQUIRE_HTTPS=true
-```
-
-### Configuration File
-
-Web CLI supports configuration files in YAML, JSON, or TOML format. Configuration files are searched in the following locations (first found is used):
-
-1. `./config.yaml` (current directory)
-2. `./config/config.yaml` (config subdirectory)
-3. `/etc/web-cli/config.yaml` (system config)
-4. `~/.config/web-cli/config.yaml` (user config)
-
-**Example config.yaml:**
-
-```yaml
-port: 7777
-host: "0.0.0.0"
-frontend_path: "./assets/frontend"
-database_path: "./data/web-cli.db"
-encryption_key_path: "./.encryption_key"
-tls_cert_path: "/etc/ssl/certs/web-cli.crt"
-tls_key_path: "/etc/ssl/private/web-cli.key"
-require_https: true
-```
-
-### Configuration Priority
-
-1. Command-line flags (highest priority)
-2. Environment variables
-3. Configuration file
-4. Default values (lowest priority)
-
-## 🔒 Security
-
-### Authentication (Production Ready)
-
-**Important: Authentication is disabled by default for development convenience.**
-
-For production deployments, enable authentication:
-
-```bash
-# Enable authentication
-export AUTH_ENABLED=true
-
-# Option 1: HTTP Basic Authentication
-export AUTH_USERNAME="admin"
-export AUTH_PASSWORD="your-secure-password"
-
-# Option 2: API Token (Bearer)
-export AUTH_API_TOKEN="your-api-token-here"
-```
-
-**Features:**
-- HTTP Basic Authentication support
-- Bearer token (API token) support
-- Constant-time credential comparison (prevents timing attacks)
-- Supports both methods simultaneously (token takes precedence)
-
-**Usage Examples:**
-
-```bash
-# Basic Auth
-curl -u admin:password http://localhost:7777/api/health
-
-# Bearer Token
-curl -H "Authorization: Bearer your-token" http://localhost:7777/api/health
-```
-
-### TLS/HTTPS Support
-
-**Native TLS support for encrypted connections:**
-
-```bash
-# Enable TLS with certificate and key
-./web-cli -tls-cert /path/to/cert.pem -tls-key /path/to/key.pem
-
-# Or via environment variables
-WEBCLI_TLS_CERT_PATH=/path/to/cert.pem \
-WEBCLI_TLS_KEY_PATH=/path/to/key.pem \
-./web-cli
-
-# Enforce HTTPS when authentication is enabled
-./web-cli -tls-cert cert.pem -tls-key key.pem -require-https
-```
-
-**Features:**
-- Native Go TLS implementation (no reverse proxy required)
-- Automatic HTTPS when certificate and key are provided
-- Optional HTTPS enforcement (rejects HTTP requests)
-- Works with any TLS certificate (self-signed, Let's Encrypt, etc.)
-
-**Generate self-signed certificate for testing:**
-
-```bash
-openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.pem \
- -days 365 -nodes -subj "/CN=localhost"
-```
-
-### SSH Host Key Verification
-
-**Proper host key verification for secure SSH connections:**
-
-- Verifies SSH host keys against `~/.ssh/known_hosts`
-- Supports "trust on first use" mode for development
-- Detects man-in-the-middle attacks (host key mismatch)
-- Automatically saves new trusted host keys
-- Thread-safe implementation
-
-**Configuration:**
-- **Strict Mode** (production): Rejects unknown hosts
-- **Trust-on-First-Use** (development): Automatically trusts new hosts
-
-### Input Validation
-
-**All user inputs are validated before processing:**
-
-- IP addresses (IPv4/IPv6)
-- Hostnames (RFC 1123 compliant)
-- Port numbers (1-65535)
-- SSH private keys (format validation)
-- Unix usernames (alphanumeric, dash, underscore)
-- Command names (no null bytes or newlines)
-
-### HTTP Security
-
-**Server configured with proper timeouts:**
-
-```go
-ReadTimeout: 15 * time.Second // Prevents slowloris attacks
-WriteTimeout: 15 * time.Second // Prevents slow writes
-IdleTimeout: 60 * time.Second // Prevents idle connections
-```
-
-**CORS Policy:**
-
-- Default: localhost only
-- Production: Configure via `CORS_ALLOWED_ORIGINS` environment variable
-
-```bash
-# Single origin
-export CORS_ALLOWED_ORIGINS="https://web-cli.example.com"
-# Multiple origins (comma-separated)
-export CORS_ALLOWED_ORIGINS="https://web-cli.example.com,https://admin.example.com"
-```
-
-### Database Encryption
-
-All sensitive data is encrypted using **AES-256-GCM**:
-- SSH private keys encrypted at rest
-- Command history (commands and output) encrypted
-- Encryption key auto-generated on first run
-- Key stored in `.encryption_key` with 600 permissions
+## Features
-### Encryption Key Management
+- **Interactive Terminal** - Full browser-based terminal with xterm.js, multi-tab support, SSH key integration
+- **Command Execution** - Execute commands locally or remotely via SSH with real-time output
+- **Server Management** - Manage SSH keys, servers, and connection settings
+- **Script Library** - Store and execute bash scripts with environment variable injection
+- **Command Templates** - Save frequently-used commands for quick re-execution
+- **Developer Tools** - YAML/JSON validators with Monaco Editor (VS Code engine)
+- **HashiCorp Vault** - Optional integration for external secrets management
+- **Security** - AES-256 encryption, TLS support, authentication, audit logging
-**Important:**
-- Backup your `.encryption_key` file - data cannot be recovered without it
-- For production, use environment variable instead of file
+## Quick Start
-**Generate a new encryption key:**
-
-```bash
-# macOS/Linux
-openssl rand -base64 32
+### Docker Compose (Recommended)
-# Or using dd and base64
-dd if=/dev/urandom bs=32 count=1 2>/dev/null | base64
-
-# Output example: 7xK9mP2vQ8nL4wR6tY5uE3sA1zD0cF8bG7hJ9kM6nP4=
-```
-
-**Use the generated key:**
-
-```bash
-# Option 1: Environment variable (recommended for production)
-export ENCRYPTION_KEY="7xK9mP2vQ8nL4wR6tY5uE3sA1zD0cF8bG7hJ9kM6nP4="
-./web-cli
-
-# Option 2: Save to file (auto-generated on first run if not exists)
-echo "7xK9mP2vQ8nL4wR6tY5uE3sA1zD0cF8bG7hJ9kM6nP4=" > .encryption_key
-chmod 600 .encryption_key
-./web-cli
-```
-
-### Password Security
-
-- Sudo passwords only used for command execution
-- SSH passwords used for authentication fallback
-- **Passwords are never stored** in command history
-- Passwords cleared from memory after use
-
-### Database Migrations
-
-- Automatic schema versioning
-- Migrations run on startup
-- Safe to restart - migrations only run once
-- Current schema version: **14**
-
-## 🌐 Deployment
-
-### Linux Server
-
-```bash
-# Build for Linux
-./build.sh all
-
-# Copy to server
-scp bin/web-cli-linux-x64 user@server:/opt/web-cli/web-cli
-
-# Run on server
-ssh user@server
-cd /opt/web-cli
-./web-cli
-```
-
-### systemd Service
-
-Create `/etc/systemd/system/web-cli.service`:
-
-```ini
-[Unit]
-Description=Web CLI Service
-After=network.target
-
-[Service]
-Type=simple
-User=www-data
-WorkingDirectory=/opt/web-cli
-ExecStart=/opt/web-cli/web-cli
-Restart=on-failure
-
-# Security Configuration (REQUIRED for production)
-Environment=AUTH_ENABLED=true
-Environment=AUTH_USERNAME=admin
-Environment=AUTH_PASSWORD=your-secure-password-here
-Environment=CORS_ALLOWED_ORIGINS=https://web-cli.yourdomain.com
-Environment=ENCRYPTION_KEY=your-encryption-key-here
-
-[Install]
-WantedBy=multi-user.target
-```
-
-Enable and start:
-
-```bash
-sudo systemctl enable web-cli
-sudo systemctl start web-cli
-sudo systemctl status web-cli
-```
-
-### Production Deployment Checklist
-
-Before deploying to production, ensure:
-
-**Security Configuration:**
-- ✅ **Authentication enabled**: Set `AUTH_ENABLED=true`
-- ✅ **Strong credentials**: Configure `AUTH_USERNAME` and `AUTH_PASSWORD` (or `AUTH_API_TOKEN`)
-- ✅ **SSH host key verification**: Enabled by default (uses `~/.ssh/known_hosts`)
-- ✅ **CORS restricted**: Set `CORS_ALLOWED_ORIGINS` to your domain(s)
-- ✅ **HTTP timeouts**: Configured automatically (prevents DoS attacks)
-- ✅ **Input validation**: All inputs validated automatically
-
-**Additional Requirements:**
-- [ ] **HTTPS enabled**: Use native TLS (`-tls-cert`, `-tls-key`) or reverse proxy
-- [ ] **Encryption key backup**: Backup `.encryption_key` - data cannot be recovered without it
-- [ ] **Security scan**: Run `gosec ./...` or similar security scanner
-- [ ] **Monitor logs**: Check for authentication failures and errors
-- [ ] **Firewall configured**: Restrict access to authorized IPs if possible
-
-**Production Environment Variables:**
-
-```bash
-# Authentication (REQUIRED for production)
-AUTH_ENABLED=true
-AUTH_USERNAME=admin
-AUTH_PASSWORD=$(openssl rand -base64 32) # Or your secure password
-# OR use API token
-AUTH_API_TOKEN=$(openssl rand -base64 32)
-
-# CORS Policy (REQUIRED for production)
-CORS_ALLOWED_ORIGINS=https://web-cli.yourdomain.com
-
-# Encryption (REQUIRED)
-ENCRYPTION_KEY=$(openssl rand -base64 32)
-
-# TLS/HTTPS (RECOMMENDED for production)
-WEBCLI_TLS_CERT_PATH=/etc/ssl/certs/web-cli.crt
-WEBCLI_TLS_KEY_PATH=/etc/ssl/private/web-cli.key
-WEBCLI_REQUIRE_HTTPS=true
-
-# Server Config (Optional)
-WEBCLI_PORT=7777
-WEBCLI_HOST=0.0.0.0
-```
-
-**Testing Authentication:**
-
-```bash
-# Should fail (no auth)
-curl http://localhost:7777/api/health
-
-# Should succeed with Basic Auth
-curl -u admin:password http://localhost:7777/api/health
-
-# Should succeed with Bearer token
-curl -H "Authorization: Bearer your-token" http://localhost:7777/api/health
-```
-
-### Docker
-
-Web CLI is available as a Docker image for easy deployment.
-
-**Image Details:**
-- **Registry:** Docker Hub ([`polinux/web-cli`](https://hub.docker.com/r/polinux/web-cli))
-- **Base Image:** Debian Bookworm (slim) - provides full bash support for script execution
-- **Platforms:** `linux/amd64`, `linux/arm64`
-- **Size:** ~100MB compressed
-- **Tags:** `latest`, `dev`, `main`, version tags (e.g., `v0.2.3`)
-
-**Quick Start - Standalone Docker Compose:**
-
-Create a `docker-compose.yml` file anywhere on your system:
+Create a `docker-compose.yml`:
```yaml
services:
@@ -722,246 +46,141 @@ volumes:
web-cli-data:
```
-Then run:
+Run:
```bash
-# Start the container
docker compose up -d
+```
+
+Access at: **http://localhost:7777**
-# View logs
-docker compose logs -f
+### Docker Run
-# Access at http://localhost:7777
+```bash
+docker run -d \
+ --name web-cli \
+ -p 7777:7777 \
+ -v web-cli-data:/data \
+ -e AUTH_ENABLED=true \
+ -e AUTH_USERNAME=admin \
+ -e AUTH_PASSWORD=your-password \
+ polinux/web-cli:latest
```
-**Quick Start with Repository:**
+### From Source
```bash
-# Clone the repository
+# Clone and build
git clone https://github.com/pozgo/web-cli.git
cd web-cli
+./build.sh
-# Start with default settings
-docker compose up -d
-
-# View logs
-docker compose logs -f
+# Run
+./web-cli
```
-**Access:** `http://localhost:7777`
+## Screenshots
-**Build Locally:**
+| Interactive Terminal | Remote Commands |
+|:---:|:---:|
+|  |  |
-```bash
-# Build the image
-docker compose build
+| Admin Panel | Vault Integration |
+|:---:|:---:|
+|  |  |
-# Or build directly
-docker build -t web-cli .
-```
+## Documentation
-**Run with Custom Configuration:**
+| Document | Description |
+|----------|-------------|
+| **[API.md](API.md)** | Complete REST API reference (55 endpoints) |
+| **[docs/CONFIGURATION.md](docs/CONFIGURATION.md)** | Configuration options, env vars, config files |
+| **[docs/SECURITY.md](docs/SECURITY.md)** | Security features, authentication, TLS, audit logging |
+| **[docs/DEPLOYMENT.md](docs/DEPLOYMENT.md)** | Docker, systemd, production deployment guides |
+| **[docs/DEVELOPMENT.md](docs/DEVELOPMENT.md)** | Development setup, project structure, contributing |
-```bash
-# Copy example environment file
-cp .env.example .env
+## API
-# Edit .env with your settings
-nano .env
+Swagger UI available at `/swagger/` when the server is running.
-# Start with custom configuration
-docker compose up -d
+```bash
+# Health check
+curl http://localhost:7777/api/health
+
+# Execute command (with auth)
+curl -u admin:password -X POST http://localhost:7777/api/commands/execute \
+ -H "Content-Type: application/json" \
+ -d '{"command": "uptime", "user": "current"}'
```
-**Production Deployment:**
+See [API.md](API.md) for complete documentation.
-```bash
-# Create .env with production settings
-cat > .env << 'EOF'
-AUTH_ENABLED=true
-AUTH_USERNAME=admin
-AUTH_PASSWORD=$(openssl rand -base64 24)
-WEBCLI_PORT=7777
-EOF
+## Configuration
-# Start the container
-docker compose up -d
+### Essential Environment Variables
-# Check credentials
-cat .env | grep AUTH_
-```
-
-**Docker Run (without Compose):**
+| Variable | Default | Description |
+|----------|---------|-------------|
+| `AUTH_ENABLED` | `false` | Enable authentication |
+| `AUTH_USERNAME` | - | Basic auth username |
+| `AUTH_PASSWORD` | - | Basic auth password |
+| `WEBCLI_PORT` | `7777` | Server port |
+| `WEBCLI_TLS_CERT_PATH` | - | TLS certificate (enables HTTPS) |
+| `WEBCLI_TLS_KEY_PATH` | - | TLS private key |
-```bash
-docker run -d \
- --name web-cli \
- -p 7777:7777 \
- -v web-cli-data:/data \
- -e AUTH_ENABLED=true \
- -e AUTH_USERNAME=admin \
- -e AUTH_PASSWORD=your-secure-password \
- polinux/web-cli:latest
-```
+See [docs/CONFIGURATION.md](docs/CONFIGURATION.md) for all options.
-**With TLS/HTTPS:**
+## Production Deployment
```bash
+# Generate secure credentials
+AUTH_PASSWORD=$(openssl rand -base64 24)
+ENCRYPTION_KEY=$(openssl rand -base64 32)
+
+# Run with TLS and authentication
docker run -d \
--name web-cli \
-p 7777:7777 \
-v web-cli-data:/data \
-v ./certs:/certs:ro \
- -e WEBCLI_TLS_CERT_PATH=/certs/cert.pem \
- -e WEBCLI_TLS_KEY_PATH=/certs/key.pem \
-e AUTH_ENABLED=true \
-e AUTH_USERNAME=admin \
- -e AUTH_PASSWORD=your-secure-password \
+ -e AUTH_PASSWORD="$AUTH_PASSWORD" \
+ -e ENCRYPTION_KEY="$ENCRYPTION_KEY" \
+ -e WEBCLI_TLS_CERT_PATH=/certs/cert.pem \
+ -e WEBCLI_TLS_KEY_PATH=/certs/key.pem \
+ -e CORS_ALLOWED_ORIGINS=https://web-cli.yourdomain.com \
polinux/web-cli:latest
```
-**Docker Environment Variables:**
-
-| Variable | Default | Description |
-|----------|---------|-------------|
-| `WEBCLI_PORT` | `7777` | Port to listen on |
-| `WEBCLI_HOST` | `0.0.0.0` | Host to bind to |
-| `WEBCLI_DATABASE_PATH` | `/data/web-cli.db` | Database file path |
-| `WEBCLI_ENCRYPTION_KEY_PATH` | `/data/.encryption_key` | Encryption key file path |
-| `ENCRYPTION_KEY` | (auto-generated) | Base64 encryption key |
-| `AUTH_ENABLED` | `false` | Enable authentication |
-| `AUTH_USERNAME` | `admin` | Basic auth username |
-| `AUTH_PASSWORD` | (none) | Basic auth password |
-| `AUTH_API_TOKEN` | (none) | Bearer token |
-| `WEBCLI_TLS_CERT_PATH` | (none) | TLS certificate path |
-| `WEBCLI_TLS_KEY_PATH` | (none) | TLS private key path |
-| `WEBCLI_REQUIRE_HTTPS` | `false` | Require HTTPS |
-| `CORS_ALLOWED_ORIGINS` | (localhost) | Allowed CORS origins |
-
-**Volumes:**
-
-| Path | Description |
-|------|-------------|
-| `/data` | Persistent data (database, encryption key) |
-| `/config` | Configuration files (optional) |
-| `/certs` | TLS certificates (optional) |
-
-## 💻 Development
-
-### Backend Development
-
-```bash
-# Run with hot reload (use air or similar)
-go run cmd/web-cli/main.go
-
-# Run tests
-go test ./...
-
-# Run tests with coverage
-go test -cover ./...
-
-# Format code
-go fmt ./...
-
-# Lint code
-go vet ./...
-```
-
-### Frontend Development
-
-```bash
-cd frontend
-
-# Start dev server with hot reload
-npm run dev
-
-# Run tests
-npm test
-
-# Lint code
-npm run lint
-
-# Build for production
-npm run build
-```
-
-### Development Workflow
-
-1. Start backend:
- ```bash
- go run cmd/web-cli/main.go
- ```
+See [docs/DEPLOYMENT.md](docs/DEPLOYMENT.md) for systemd service, production checklist, and more.
-2. Start frontend (new terminal):
- ```bash
- cd frontend && npm run dev
- ```
+## Tech Stack
-3. Open `http://localhost:3000` for hot-reload development
+**Backend:** Go 1.21+, Gorilla Mux, SQLite, AES-256-GCM encryption
-### Project Structure
+**Frontend:** React 18, Material-UI v5, xterm.js, Monaco Editor, Vite
-```
-web-cli/
-├── cmd/web-cli/ # Application entry point
-├── internal/ # Private application code
-│ ├── config/ # Configuration management
-│ ├── database/ # Database, migrations, encryption
-│ ├── executor/ # Command execution (local & remote)
-│ │ └── hostkeys.go # SSH host key verification
-│ ├── middleware/ # HTTP middleware (authentication)
-│ ├── models/ # Data models
-│ ├── repository/ # Data access layer
-│ ├── server/ # HTTP server and handlers
-│ ├── terminal/ # Interactive terminal (PTY + WebSocket)
-│ └── validation/ # Input validation functions
-├── frontend/ # React application
-│ ├── src/
-│ │ ├── components/ # React components
-│ │ │ └── Terminal.jsx # xterm.js terminal component
-│ │ ├── theme/ # MUI theme configuration
-│ │ └── App.jsx # Main app with routing
-│ └── vite.config.js # Vite configuration
-├── build.sh # Build script (all platforms)
-├── manage.sh # Server management script
-├── API.md # Complete API documentation
-└── go.mod # Go dependencies
-```
-
-## 🤝 Contributing
-
-Contributions are welcome! Please follow these steps:
+## Contributing
1. Fork the repository
2. Create a feature branch (`git checkout -b feature/amazing-feature`)
-3. Commit your changes (`git commit -m 'Add some amazing feature'`)
+3. Commit your changes (`git commit -m 'Add amazing feature'`)
4. Push to the branch (`git push origin feature/amazing-feature`)
5. Open a Pull Request
-### Development Guidelines
-
-- Follow Go best practices and conventions
-- Write tests for new features
-- Update documentation as needed
-- Ensure all tests pass before submitting PR
-- Keep commits atomic and well-described
-
-## 📝 License
+See [docs/DEVELOPMENT.md](docs/DEVELOPMENT.md) for development setup.
-This project is licensed under the MIT License - see the [LICENSE](LICENSE) file for details.
+## License
-## 🆘 Support
+MIT License - see [LICENSE](LICENSE) for details.
-For issues and questions:
-- 📫 Open an issue on [GitHub Issues](https://github.com/pozgo/web-cli/issues)
-- 📖 Check the [API Documentation](API.md)
-- 🔒 Review [Security Improvements](SECURITY_IMPROVEMENTS.md) for security features
+## Support
-## 🙏 Acknowledgments
+- [GitHub Issues](https://github.com/pozgo/web-cli/issues)
+- [API Documentation](API.md)
+- [Security Guide](docs/SECURITY.md)
-- Built with [Go](https://golang.org/) - Fast, reliable, and efficient
-- UI powered by [React](https://react.dev/) and [Material-UI](https://mui.com/)
-- Build tool: [Vite](https://vitejs.dev/) - Next generation frontend tooling
-- SSH implementation: [golang.org/x/crypto/ssh](https://pkg.go.dev/golang.org/x/crypto/ssh)
+---
**Made with ❤️ by [Pozgo](https://github.com/pozgo)**
diff --git a/cmd/web-cli/main.go b/cmd/web-cli/main.go
index a4a9784..c9d4f94 100644
--- a/cmd/web-cli/main.go
+++ b/cmd/web-cli/main.go
@@ -4,6 +4,7 @@ import (
"log"
"github.com/pozgo/web-cli/assets"
+ "github.com/pozgo/web-cli/internal/audit"
"github.com/pozgo/web-cli/internal/config"
"github.com/pozgo/web-cli/internal/database"
"github.com/pozgo/web-cli/internal/server"
@@ -93,11 +94,27 @@ func main() {
log.Printf("Database schema version: %d", version)
}
+ // Initialize audit logging
+ if cfg.AuditLogPath != "" {
+ auditLogger, err := audit.Initialize(cfg.AuditLogPath)
+ if err != nil {
+ log.Printf("Warning: Failed to initialize audit logging: %v", err)
+ } else {
+ log.Printf("Audit logging enabled: %s", cfg.AuditLogPath)
+ defer auditLogger.Close()
+ }
+ } else {
+ log.Println("Audit logging is disabled (set AUDIT_LOG_PATH to enable)")
+ }
+
// Set embedded frontend
server.EmbeddedFrontend = assets.FrontendFS
// Create and start server
- srv := server.New(cfg, db)
+ srv, err := server.New(cfg, db)
+ if err != nil {
+ log.Fatalf("Failed to initialize server: %v", err)
+ }
log.Fatal(srv.Start())
}
diff --git a/docs/CONFIGURATION.md b/docs/CONFIGURATION.md
new file mode 100644
index 0000000..ffe0eff
--- /dev/null
+++ b/docs/CONFIGURATION.md
@@ -0,0 +1,312 @@
+# Configuration Guide
+
+Web CLI supports multiple configuration methods with the following priority order:
+
+1. **Command-line flags** (highest priority)
+2. **Environment variables**
+3. **Configuration file**
+4. **Default values** (lowest priority)
+
+## Table of Contents
+
+- [Command-Line Flags](#command-line-flags)
+- [Environment Variables](#environment-variables)
+- [Configuration File](#configuration-file)
+- [Timeout Configuration](#timeout-configuration)
+- [Audit Logging](#audit-logging)
+- [TLS/HTTPS Configuration](#tlshttps-configuration)
+- [CORS Configuration](#cors-configuration)
+
+---
+
+## Command-Line Flags
+
+```bash
+./web-cli [options]
+
+Options:
+ -port int Port to listen on (default: 7777)
+ -host string Host to bind to (default: 0.0.0.0)
+ -frontend string Path to frontend build files (default: ./frontend/dist)
+ -db string Path to database file (default: ./data/web-cli.db)
+ -encryption-key string Path to encryption key file (default: ./.encryption_key)
+ -tls-cert string Path to TLS certificate file (enables HTTPS)
+ -tls-key string Path to TLS private key file
+ -require-https Require HTTPS when auth is enabled (reject HTTP requests)
+```
+
+---
+
+## Environment Variables
+
+All configuration options can be set via environment variables. Both standard and `WEBCLI_`-prefixed variables are supported (prefixed is recommended).
+
+### Server Configuration
+
+| Variable | WEBCLI Prefix | Default | Description |
+|----------|---------------|---------|-------------|
+| `PORT` | `WEBCLI_PORT` | `7777` | Port to listen on |
+| `HOST` | `WEBCLI_HOST` | `0.0.0.0` | Host to bind to |
+| `FRONTEND_PATH` | `WEBCLI_FRONTEND_PATH` | `./frontend/dist` | Frontend build files |
+| `DATABASE_PATH` | `WEBCLI_DATABASE_PATH` | `./data/web-cli.db` | SQLite database path |
+| `ENCRYPTION_KEY_PATH` | `WEBCLI_ENCRYPTION_KEY_PATH` | `./.encryption_key` | Encryption key file |
+
+### Authentication
+
+| Variable | Default | Description |
+|----------|---------|-------------|
+| `AUTH_ENABLED` | `false` | Enable authentication |
+| `AUTH_USERNAME` | (none) | Basic auth username |
+| `AUTH_PASSWORD` | (none) | Basic auth password |
+| `AUTH_API_TOKEN` | (none) | Bearer token for API access |
+
+### TLS/HTTPS
+
+| Variable | WEBCLI Prefix | Default | Description |
+|----------|---------------|---------|-------------|
+| `TLS_CERT_PATH` | `WEBCLI_TLS_CERT_PATH` | (none) | TLS certificate file |
+| `TLS_KEY_PATH` | `WEBCLI_TLS_KEY_PATH` | (none) | TLS private key file |
+| `REQUIRE_HTTPS` | `WEBCLI_REQUIRE_HTTPS` | `false` | Reject HTTP when auth enabled |
+
+### Example Usage
+
+```bash
+# Standard environment variables
+PORT=8080 HOST=localhost ./web-cli
+
+# WEBCLI-prefixed variables (recommended)
+WEBCLI_PORT=8080 \
+WEBCLI_HOST=localhost \
+WEBCLI_DATABASE_PATH=/var/lib/web-cli/web-cli.db \
+./web-cli
+
+# Production example with authentication
+AUTH_ENABLED=true \
+AUTH_USERNAME=admin \
+AUTH_PASSWORD="secure-password" \
+WEBCLI_TLS_CERT_PATH=/etc/ssl/certs/web-cli.crt \
+WEBCLI_TLS_KEY_PATH=/etc/ssl/private/web-cli.key \
+./web-cli
+```
+
+---
+
+## Configuration File
+
+Web CLI supports configuration files in YAML, JSON, or TOML format.
+
+### Search Locations
+
+Configuration files are searched in the following order (first found is used):
+
+1. `./config.yaml` (current directory)
+2. `./config/config.yaml` (config subdirectory)
+3. `/etc/web-cli/config.yaml` (system config)
+4. `~/.config/web-cli/config.yaml` (user config)
+
+### Example config.yaml
+
+```yaml
+# Server Configuration
+port: 7777
+host: "0.0.0.0"
+frontend_path: "./assets/frontend"
+database_path: "./data/web-cli.db"
+encryption_key_path: "./.encryption_key"
+
+# TLS/HTTPS Configuration
+tls_cert_path: "/etc/ssl/certs/web-cli.crt"
+tls_key_path: "/etc/ssl/private/web-cli.key"
+require_https: true
+
+# Timeout Configuration (in seconds)
+read_timeout: 30
+write_timeout: 600
+idle_timeout: 60
+vault_timeout: 30
+command_timeout: 300
+ssh_connect_timeout: 30
+
+# Audit Logging (optional)
+audit_log_path: "/var/log/web-cli/audit.log"
+```
+
+### Example config.json
+
+```json
+{
+ "port": 7777,
+ "host": "0.0.0.0",
+ "database_path": "./data/web-cli.db",
+ "encryption_key_path": "./.encryption_key",
+ "read_timeout": 30,
+ "write_timeout": 600,
+ "command_timeout": 300
+}
+```
+
+---
+
+## Timeout Configuration
+
+All timeout values are configurable via environment variables (values in seconds):
+
+| Timeout | Default | Environment Variable | Description |
+|---------|---------|---------------------|-------------|
+| Read Timeout | 30s | `READ_TIMEOUT` or `WEBCLI_READ_TIMEOUT` | Time to read request headers |
+| Write Timeout | 600s (10m) | `WRITE_TIMEOUT` or `WEBCLI_WRITE_TIMEOUT` | Time to write response (high for streaming) |
+| Idle Timeout | 60s | `IDLE_TIMEOUT` or `WEBCLI_IDLE_TIMEOUT` | Keep-alive connection timeout |
+| Vault Timeout | 30s | `VAULT_TIMEOUT` or `WEBCLI_VAULT_TIMEOUT` | HashiCorp Vault operations |
+| Command Timeout | 300s (5m) | `COMMAND_TIMEOUT` or `WEBCLI_COMMAND_TIMEOUT` | Command execution timeout |
+| SSH Connect Timeout | 30s | `SSH_CONNECT_TIMEOUT` or `WEBCLI_SSH_CONNECT_TIMEOUT` | SSH connection establishment |
+
+### Example
+
+```bash
+# Increase command timeout to 10 minutes
+export COMMAND_TIMEOUT=600
+
+# Increase Vault timeout for slow connections
+export VAULT_TIMEOUT=60
+
+./web-cli
+```
+
+---
+
+## Audit Logging
+
+Enable comprehensive audit logging for security compliance and monitoring.
+
+### Enable Audit Logging
+
+```bash
+# Via environment variable
+export AUDIT_LOG_PATH=/var/log/web-cli/audit.log
+./web-cli
+
+# Or via WEBCLI prefix
+export WEBCLI_AUDIT_LOG_PATH=/var/log/web-cli/audit.log
+./web-cli
+```
+
+### Logged Events
+
+- Command executions (local and remote)
+- Script executions
+- Terminal sessions (start/end)
+- Authentication attempts
+
+### Log Format
+
+JSON Lines (JSONL) - one JSON object per line:
+
+```json
+{
+ "timestamp": "2025-01-19T10:30:00Z",
+ "event_type": "command_execution",
+ "outcome": "success",
+ "actor": "admin",
+ "source_ip": "192.168.1.100",
+ "target": "local",
+ "command": "df -h",
+ "user": "root",
+ "exit_code": 0,
+ "duration_ms": 150
+}
+```
+
+### Log Rotation
+
+Use logrotate to manage log file size:
+
+```bash
+# /etc/logrotate.d/web-cli
+/var/log/web-cli/audit.log {
+ daily
+ rotate 30
+ compress
+ delaycompress
+ missingok
+ notifempty
+ create 640 www-data www-data
+}
+```
+
+---
+
+## TLS/HTTPS Configuration
+
+### Enable TLS
+
+```bash
+# Using command-line flags
+./web-cli -tls-cert /path/to/cert.pem -tls-key /path/to/key.pem
+
+# Using environment variables
+WEBCLI_TLS_CERT_PATH=/path/to/cert.pem \
+WEBCLI_TLS_KEY_PATH=/path/to/key.pem \
+./web-cli
+
+# Enforce HTTPS (reject HTTP requests)
+./web-cli -tls-cert cert.pem -tls-key key.pem -require-https
+```
+
+### Generate Self-Signed Certificate (Testing)
+
+```bash
+openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.pem \
+ -days 365 -nodes -subj "/CN=localhost"
+```
+
+### Features
+
+- Native Go TLS implementation (no reverse proxy required)
+- Automatic HTTPS when certificate and key are provided
+- Optional HTTPS enforcement (rejects HTTP requests)
+- Works with any TLS certificate (self-signed, Let's Encrypt, etc.)
+
+---
+
+## CORS Configuration
+
+Configure Cross-Origin Resource Sharing for frontend access.
+
+### Default Behavior
+
+By default, only localhost origins are allowed:
+- `http://localhost:7777`
+- `http://127.0.0.1:7777`
+
+### Custom Origins
+
+```bash
+# Single origin
+export CORS_ALLOWED_ORIGINS="https://web-cli.example.com"
+
+# Multiple origins (comma-separated)
+export CORS_ALLOWED_ORIGINS="https://web-cli.example.com,https://admin.example.com"
+
+./web-cli
+```
+
+---
+
+## Complete Production Example
+
+```bash
+# /etc/systemd/system/web-cli.service environment
+AUTH_ENABLED=true
+AUTH_USERNAME=admin
+AUTH_PASSWORD=your-secure-password
+ENCRYPTION_KEY=your-base64-encryption-key
+CORS_ALLOWED_ORIGINS=https://web-cli.yourdomain.com
+WEBCLI_TLS_CERT_PATH=/etc/ssl/certs/web-cli.crt
+WEBCLI_TLS_KEY_PATH=/etc/ssl/private/web-cli.key
+WEBCLI_REQUIRE_HTTPS=true
+WEBCLI_AUDIT_LOG_PATH=/var/log/web-cli/audit.log
+WEBCLI_DATABASE_PATH=/var/lib/web-cli/web-cli.db
+```
+
+For more information on security configuration, see [SECURITY.md](SECURITY.md).
+For deployment instructions, see [DEPLOYMENT.md](DEPLOYMENT.md).
diff --git a/docs/DEPLOYMENT.md b/docs/DEPLOYMENT.md
new file mode 100644
index 0000000..82aaf4b
--- /dev/null
+++ b/docs/DEPLOYMENT.md
@@ -0,0 +1,339 @@
+# Deployment Guide
+
+This document covers various deployment options for Web CLI.
+
+## Table of Contents
+
+- [Docker (Recommended)](#docker-recommended)
+- [Docker Compose](#docker-compose)
+- [Linux Server (Binary)](#linux-server-binary)
+- [systemd Service](#systemd-service)
+- [Production Checklist](#production-checklist)
+
+---
+
+## Docker (Recommended)
+
+Web CLI is available as a Docker image for easy deployment.
+
+### Image Details
+
+| Property | Value |
+|----------|-------|
+| Registry | Docker Hub ([`polinux/web-cli`](https://hub.docker.com/r/polinux/web-cli)) |
+| Base Image | Debian Bookworm (slim) |
+| Platforms | `linux/amd64`, `linux/arm64` |
+| Size | ~100MB compressed |
+| Tags | `latest`, `dev`, `main`, version tags (e.g., `v0.2.3`) |
+
+### Quick Start
+
+```bash
+docker run -d \
+ --name web-cli \
+ -p 7777:7777 \
+ -v web-cli-data:/data \
+ -e AUTH_ENABLED=true \
+ -e AUTH_USERNAME=admin \
+ -e AUTH_PASSWORD=your-secure-password \
+ polinux/web-cli:latest
+```
+
+Access at: `http://localhost:7777`
+
+### With TLS/HTTPS
+
+```bash
+docker run -d \
+ --name web-cli \
+ -p 7777:7777 \
+ -v web-cli-data:/data \
+ -v ./certs:/certs:ro \
+ -e WEBCLI_TLS_CERT_PATH=/certs/cert.pem \
+ -e WEBCLI_TLS_KEY_PATH=/certs/key.pem \
+ -e AUTH_ENABLED=true \
+ -e AUTH_USERNAME=admin \
+ -e AUTH_PASSWORD=your-secure-password \
+ polinux/web-cli:latest
+```
+
+### Docker Volumes
+
+| Path | Description |
+|------|-------------|
+| `/data` | Persistent data (database, encryption key) |
+| `/config` | Configuration files (optional) |
+| `/certs` | TLS certificates (optional) |
+
+### Docker Environment Variables
+
+| Variable | Default | Description |
+|----------|---------|-------------|
+| `WEBCLI_PORT` | `7777` | Port to listen on |
+| `WEBCLI_HOST` | `0.0.0.0` | Host to bind to |
+| `WEBCLI_DATABASE_PATH` | `/data/web-cli.db` | Database file path |
+| `WEBCLI_ENCRYPTION_KEY_PATH` | `/data/.encryption_key` | Encryption key path |
+| `ENCRYPTION_KEY` | (auto-generated) | Base64 encryption key |
+| `AUTH_ENABLED` | `false` | Enable authentication |
+| `AUTH_USERNAME` | `admin` | Basic auth username |
+| `AUTH_PASSWORD` | (none) | Basic auth password |
+| `AUTH_API_TOKEN` | (none) | Bearer token |
+| `WEBCLI_TLS_CERT_PATH` | (none) | TLS certificate path |
+| `WEBCLI_TLS_KEY_PATH` | (none) | TLS private key path |
+| `WEBCLI_REQUIRE_HTTPS` | `false` | Require HTTPS |
+| `CORS_ALLOWED_ORIGINS` | (localhost) | Allowed CORS origins |
+| `WEBCLI_AUDIT_LOG_PATH` | (none) | Audit log file path |
+
+---
+
+## Docker Compose
+
+### Standalone docker-compose.yml
+
+Create a `docker-compose.yml` file anywhere on your system:
+
+```yaml
+services:
+ web-cli:
+ image: polinux/web-cli:latest
+ container_name: web-cli
+ restart: unless-stopped
+ ports:
+ - "7777:7777"
+ volumes:
+ - web-cli-data:/data
+ environment:
+ - AUTH_ENABLED=true
+ - AUTH_USERNAME=admin
+ - AUTH_PASSWORD=changeme123
+
+volumes:
+ web-cli-data:
+```
+
+### Run
+
+```bash
+# Start the container
+docker compose up -d
+
+# View logs
+docker compose logs -f
+
+# Stop
+docker compose down
+```
+
+### Production docker-compose.yml
+
+```yaml
+services:
+ web-cli:
+ image: polinux/web-cli:latest
+ container_name: web-cli
+ restart: unless-stopped
+ ports:
+ - "7777:7777"
+ volumes:
+ - web-cli-data:/data
+ - ./certs:/certs:ro
+ environment:
+ # Authentication
+ - AUTH_ENABLED=true
+ - AUTH_USERNAME=admin
+ - AUTH_PASSWORD=${WEB_CLI_PASSWORD}
+
+ # TLS/HTTPS
+ - WEBCLI_TLS_CERT_PATH=/certs/cert.pem
+ - WEBCLI_TLS_KEY_PATH=/certs/key.pem
+ - WEBCLI_REQUIRE_HTTPS=true
+
+ # CORS
+ - CORS_ALLOWED_ORIGINS=https://web-cli.yourdomain.com
+
+ # Audit Logging
+ - WEBCLI_AUDIT_LOG_PATH=/data/audit.log
+
+volumes:
+ web-cli-data:
+```
+
+### With .env File
+
+Create `.env` file:
+
+```bash
+WEB_CLI_PASSWORD=your-secure-password-here
+ENCRYPTION_KEY=your-base64-encryption-key
+```
+
+---
+
+## Linux Server (Binary)
+
+### Build and Deploy
+
+```bash
+# Build for Linux
+./build.sh all
+
+# Copy to server
+scp bin/web-cli-linux-x64 user@server:/opt/web-cli/web-cli
+
+# Run on server
+ssh user@server
+cd /opt/web-cli
+./web-cli
+```
+
+### Directory Structure
+
+```
+/opt/web-cli/
+├── web-cli # Binary
+├── data/
+│ └── web-cli.db # Database
+├── .encryption_key # Encryption key
+└── config.yaml # Configuration (optional)
+```
+
+### Permissions
+
+```bash
+# Create web-cli user
+sudo useradd -r -s /bin/false web-cli
+
+# Set ownership
+sudo chown -R web-cli:web-cli /opt/web-cli
+
+# Secure encryption key
+chmod 600 /opt/web-cli/.encryption_key
+```
+
+---
+
+## systemd Service
+
+Create `/etc/systemd/system/web-cli.service`:
+
+```ini
+[Unit]
+Description=Web CLI Service
+After=network.target
+
+[Service]
+Type=simple
+User=www-data
+WorkingDirectory=/opt/web-cli
+ExecStart=/opt/web-cli/web-cli
+Restart=on-failure
+RestartSec=5
+
+# Security Configuration (REQUIRED for production)
+Environment=AUTH_ENABLED=true
+Environment=AUTH_USERNAME=admin
+Environment=AUTH_PASSWORD=your-secure-password-here
+Environment=CORS_ALLOWED_ORIGINS=https://web-cli.yourdomain.com
+Environment=ENCRYPTION_KEY=your-encryption-key-here
+
+# Audit Logging (recommended)
+Environment=AUDIT_LOG_PATH=/var/log/web-cli/audit.log
+
+# TLS/HTTPS (recommended)
+# Environment=WEBCLI_TLS_CERT_PATH=/etc/ssl/certs/web-cli.crt
+# Environment=WEBCLI_TLS_KEY_PATH=/etc/ssl/private/web-cli.key
+# Environment=WEBCLI_REQUIRE_HTTPS=true
+
+# Custom timeouts (optional, values in seconds)
+# Environment=COMMAND_TIMEOUT=600
+# Environment=VAULT_TIMEOUT=60
+
+[Install]
+WantedBy=multi-user.target
+```
+
+### Enable and Start
+
+```bash
+# Create log directory
+sudo mkdir -p /var/log/web-cli
+sudo chown www-data:www-data /var/log/web-cli
+
+# Enable and start service
+sudo systemctl daemon-reload
+sudo systemctl enable web-cli
+sudo systemctl start web-cli
+
+# Check status
+sudo systemctl status web-cli
+
+# View logs
+sudo journalctl -u web-cli -f
+```
+
+---
+
+## Production Checklist
+
+### Before Deployment
+
+- [ ] Generate strong password: `openssl rand -base64 32`
+- [ ] Generate encryption key: `openssl rand -base64 32`
+- [ ] Obtain TLS certificate (Let's Encrypt or similar)
+- [ ] Configure firewall rules
+
+### Environment Variables
+
+```bash
+# Required
+AUTH_ENABLED=true
+AUTH_USERNAME=admin
+AUTH_PASSWORD=$(openssl rand -base64 32)
+ENCRYPTION_KEY=$(openssl rand -base64 32)
+CORS_ALLOWED_ORIGINS=https://web-cli.yourdomain.com
+
+# Recommended
+WEBCLI_TLS_CERT_PATH=/etc/ssl/certs/web-cli.crt
+WEBCLI_TLS_KEY_PATH=/etc/ssl/private/web-cli.key
+WEBCLI_REQUIRE_HTTPS=true
+WEBCLI_AUDIT_LOG_PATH=/var/log/web-cli/audit.log
+```
+
+### Post-Deployment
+
+- [ ] Verify authentication is working
+- [ ] Test HTTPS certificate
+- [ ] Configure log rotation
+- [ ] Set up monitoring/alerting
+- [ ] Backup encryption key securely
+- [ ] Document admin credentials securely
+
+### Backup Strategy
+
+Critical files to backup:
+
+| File | Importance | Description |
+|------|------------|-------------|
+| `.encryption_key` | **Critical** | Cannot recover data without it |
+| `web-cli.db` | Important | All configuration and history |
+| `config.yaml` | Optional | Configuration file |
+
+### Log Rotation
+
+```bash
+# /etc/logrotate.d/web-cli
+/var/log/web-cli/audit.log {
+ daily
+ rotate 30
+ compress
+ delaycompress
+ missingok
+ notifempty
+ create 640 www-data www-data
+}
+```
+
+---
+
+For more configuration options, see [CONFIGURATION.md](CONFIGURATION.md).
+For security information, see [SECURITY.md](SECURITY.md).
diff --git a/docs/DEVELOPMENT.md b/docs/DEVELOPMENT.md
new file mode 100644
index 0000000..0eb8906
--- /dev/null
+++ b/docs/DEVELOPMENT.md
@@ -0,0 +1,375 @@
+# Development Guide
+
+This document covers the development setup and workflow for Web CLI.
+
+## Table of Contents
+
+- [Prerequisites](#prerequisites)
+- [Quick Setup](#quick-setup)
+- [Development Workflow](#development-workflow)
+- [Project Structure](#project-structure)
+- [Backend Development](#backend-development)
+- [Frontend Development](#frontend-development)
+- [Testing](#testing)
+- [Building](#building)
+- [Contributing](#contributing)
+
+---
+
+## Prerequisites
+
+- **Go**: Version 1.21 or higher ([Download](https://golang.org/dl/))
+- **Node.js**: Version 18 or higher ([Download](https://nodejs.org/))
+- **npm**: Version 8 or higher (comes with Node.js)
+
+---
+
+## Quick Setup
+
+```bash
+# Clone the repository
+git clone https://github.com/pozgo/web-cli.git
+cd web-cli
+
+# Install Go dependencies
+go mod download
+
+# Install frontend dependencies
+cd frontend
+npm install
+cd ..
+
+# Build and run
+./build.sh
+./web-cli
+```
+
+Access at: `http://localhost:7777`
+
+---
+
+## Development Workflow
+
+### Recommended: Two Terminal Setup
+
+**Terminal 1 - Backend:**
+
+```bash
+go run cmd/web-cli/main.go
+```
+
+**Terminal 2 - Frontend (with hot reload):**
+
+```bash
+cd frontend && npm run dev
+```
+
+Access frontend dev server at: `http://localhost:3000`
+(API calls are proxied to the Go backend on port 7777)
+
+### Using Management Script
+
+```bash
+# Start the server
+./manage.sh start
+
+# Stop the server
+./manage.sh stop
+
+# Check status
+./manage.sh status
+
+# Restart
+./manage.sh restart
+```
+
+---
+
+## Project Structure
+
+```
+web-cli/
+├── cmd/web-cli/ # Application entry point
+│ └── main.go # Main function
+├── internal/ # Private application code
+│ ├── audit/ # Audit logging
+│ ├── config/ # Configuration management
+│ ├── database/ # Database, migrations, encryption
+│ ├── executor/ # Command execution (local & remote)
+│ │ └── hostkeys.go # SSH host key verification
+│ ├── middleware/ # HTTP middleware (auth, security)
+│ ├── models/ # Data models
+│ ├── repository/ # Data access layer
+│ ├── server/ # HTTP server and handlers
+│ ├── terminal/ # Interactive terminal (PTY + WebSocket)
+│ ├── validation/ # Input validation
+│ └── vault/ # HashiCorp Vault client
+├── frontend/ # React application
+│ ├── src/
+│ │ ├── components/ # React components
+│ │ │ ├── Terminal.jsx # xterm.js terminal
+│ │ │ ├── AdminPanel.jsx # Admin interface
+│ │ │ ├── Dashboard.jsx # Main dashboard
+│ │ │ └── ...
+│ │ ├── theme/ # MUI theme configuration
+│ │ └── App.jsx # Main app with routing
+│ ├── public/ # Static assets
+│ ├── package.json # npm dependencies
+│ └── vite.config.js # Vite configuration
+├── docs/ # Documentation
+│ ├── images/ # Screenshots
+│ ├── CONFIGURATION.md # Configuration guide
+│ ├── SECURITY.md # Security guide
+│ ├── DEPLOYMENT.md # Deployment guide
+│ └── DEVELOPMENT.md # This file
+├── assets/ # Embedded frontend (production)
+├── build.sh # Build script (all platforms)
+├── manage.sh # Server management script
+├── API.md # Complete API documentation
+├── Dockerfile # Docker build file
+├── docker-compose.yml # Docker Compose configuration
+└── go.mod # Go dependencies
+```
+
+---
+
+## Backend Development
+
+### Running
+
+```bash
+# Run with go run
+go run cmd/web-cli/main.go
+
+# Run with custom options
+go run cmd/web-cli/main.go -port 8080 -host localhost
+
+# Run with air (hot reload)
+air
+```
+
+### Testing
+
+```bash
+# Run all tests
+go test ./...
+
+# Run tests with coverage
+go test -cover ./...
+
+# Run tests for a specific package
+go test ./internal/validation/...
+
+# Verbose output
+go test -v ./...
+```
+
+### Linting
+
+```bash
+# Format code
+go fmt ./...
+
+# Run vet
+go vet ./...
+
+# Run golangci-lint (if installed)
+golangci-lint run
+```
+
+### Generate Swagger Docs
+
+```bash
+# Install swag CLI
+go install github.com/swaggo/swag/cmd/swag@latest
+
+# Generate documentation
+swag init -g cmd/web-cli/main.go -o docs/
+```
+
+---
+
+## Frontend Development
+
+### Running
+
+```bash
+cd frontend
+
+# Start dev server with hot reload
+npm run dev
+
+# Build for production
+npm run build
+
+# Preview production build
+npm run preview
+```
+
+### Testing
+
+```bash
+cd frontend
+
+# Run tests
+npm test
+
+# Run tests with coverage
+npm test -- --coverage
+```
+
+### Linting
+
+```bash
+cd frontend
+
+# Run ESLint
+npm run lint
+
+# Fix auto-fixable issues
+npm run lint -- --fix
+```
+
+### Dependencies
+
+Key frontend dependencies:
+
+| Package | Purpose |
+|---------|---------|
+| `react` | UI library |
+| `react-router-dom` | Client-side routing |
+| `@mui/material` | Material-UI components |
+| `@emotion/react` | CSS-in-JS styling |
+| `xterm` | Terminal emulator |
+| `@monaco-editor/react` | Code editor for YAML/JSON tools |
+| `js-yaml` | YAML parsing |
+
+---
+
+## Testing
+
+### Backend Tests
+
+```bash
+# All tests
+go test ./...
+
+# With coverage report
+go test -coverprofile=coverage.out ./...
+go tool cover -html=coverage.out
+
+# Specific package
+go test ./internal/validation/
+
+# With race detection
+go test -race ./...
+```
+
+### Frontend Tests
+
+```bash
+cd frontend
+npm test
+```
+
+### Integration Testing
+
+```bash
+# Build and run
+./build.sh
+./web-cli &
+
+# Test API endpoints
+curl http://localhost:7777/api/health
+
+# Test with authentication
+curl -u admin:password http://localhost:7777/api/health
+```
+
+---
+
+## Building
+
+### Development Build
+
+```bash
+# Quick build for current platform
+go build -o web-cli cmd/web-cli/main.go
+```
+
+### Production Build (All Platforms)
+
+```bash
+# Build for all platforms
+./build.sh all
+
+# Outputs:
+# bin/web-cli-linux-x64
+# bin/web-cli-darwin-x64
+# bin/web-cli-darwin-arm64
+```
+
+### Docker Build
+
+```bash
+# Build Docker image
+docker build -t web-cli .
+
+# Or using docker compose
+docker compose build
+```
+
+### Build Script Options
+
+```bash
+./build.sh # Build for current platform
+./build.sh all # Build for all platforms
+./build.sh linux # Build for Linux only
+./build.sh darwin # Build for macOS only
+```
+
+---
+
+## Contributing
+
+### Getting Started
+
+1. Fork the repository
+2. Create a feature branch: `git checkout -b feature/amazing-feature`
+3. Make your changes
+4. Write/update tests
+5. Commit: `git commit -m 'Add some amazing feature'`
+6. Push: `git push origin feature/amazing-feature`
+7. Open a Pull Request
+
+### Code Style
+
+- **Go**: Follow standard Go formatting (`go fmt`)
+- **JavaScript/React**: Follow ESLint rules
+- Write tests for new features
+- Update documentation as needed
+
+### Commit Messages
+
+Use clear, descriptive commit messages:
+
+```
+feat: Add new feature X
+fix: Fix bug in component Y
+docs: Update README
+refactor: Restructure module Z
+test: Add tests for feature X
+```
+
+### Pull Request Guidelines
+
+- Ensure all tests pass
+- Update documentation if needed
+- Keep PRs focused (one feature/fix per PR)
+- Provide clear description of changes
+
+---
+
+For configuration options, see [CONFIGURATION.md](CONFIGURATION.md).
+For security information, see [SECURITY.md](SECURITY.md).
+For deployment instructions, see [DEPLOYMENT.md](DEPLOYMENT.md).
diff --git a/docs/SECURITY.md b/docs/SECURITY.md
new file mode 100644
index 0000000..785dcad
--- /dev/null
+++ b/docs/SECURITY.md
@@ -0,0 +1,418 @@
+# Security Guide
+
+This document describes Web CLI's security features and best practices for secure deployment.
+
+## Table of Contents
+
+- [Authentication](#authentication)
+- [TLS/HTTPS](#tlshttps)
+- [SSH Host Key Verification](#ssh-host-key-verification)
+- [Input Validation](#input-validation)
+- [Database Encryption](#database-encryption)
+- [Encryption Key Management](#encryption-key-management)
+- [Password Security](#password-security)
+- [SSRF Protection](#ssrf-protection)
+- [Path Traversal Protection](#path-traversal-protection)
+- [HTTP Security](#http-security)
+- [Audit Logging](#audit-logging)
+- [Error Information Leakage Prevention](#error-information-leakage-prevention)
+- [Security Headers](#security-headers)
+- [Production Security Checklist](#production-security-checklist)
+
+---
+
+## Authentication
+
+**Important: Authentication is disabled by default for development convenience.**
+
+### Enable Authentication
+
+```bash
+# Enable authentication
+export AUTH_ENABLED=true
+
+# Option 1: HTTP Basic Authentication
+export AUTH_USERNAME="admin"
+export AUTH_PASSWORD="your-secure-password"
+
+# Option 2: API Token (Bearer)
+export AUTH_API_TOKEN="your-api-token-here"
+```
+
+### Features
+
+- HTTP Basic Authentication support
+- Bearer token (API token) support
+- Constant-time credential comparison (prevents timing attacks)
+- Supports both methods simultaneously (token takes precedence)
+- **Startup validation**: Server fails fast if auth is enabled but credentials are missing
+
+### Usage Examples
+
+```bash
+# Basic Auth
+curl -u admin:password http://localhost:7777/api/health
+
+# Bearer Token
+curl -H "Authorization: Bearer your-token" http://localhost:7777/api/health
+```
+
+### Testing Authentication
+
+```bash
+# Should fail (401 Unauthorized)
+curl http://localhost:7777/api/health
+
+# Should succeed with Basic Auth
+curl -u admin:password http://localhost:7777/api/health
+
+# Should succeed with Bearer token
+curl -H "Authorization: Bearer your-token" http://localhost:7777/api/health
+```
+
+---
+
+## TLS/HTTPS
+
+Native TLS support for encrypted connections without requiring a reverse proxy.
+
+### Enable TLS
+
+```bash
+# Using command-line flags
+./web-cli -tls-cert /path/to/cert.pem -tls-key /path/to/key.pem
+
+# Using environment variables
+WEBCLI_TLS_CERT_PATH=/path/to/cert.pem \
+WEBCLI_TLS_KEY_PATH=/path/to/key.pem \
+./web-cli
+
+# Enforce HTTPS when authentication is enabled
+./web-cli -tls-cert cert.pem -tls-key key.pem -require-https
+```
+
+### Generate Self-Signed Certificate (Testing)
+
+```bash
+openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.pem \
+ -days 365 -nodes -subj "/CN=localhost"
+```
+
+### Features
+
+- Native Go TLS implementation
+- Automatic HTTPS when certificate and key are provided
+- Optional HTTPS enforcement (rejects HTTP requests)
+- Works with any TLS certificate (self-signed, Let's Encrypt, etc.)
+
+---
+
+## SSH Host Key Verification
+
+Proper host key verification for secure SSH connections.
+
+### Features
+
+- Verifies SSH host keys against `~/.ssh/known_hosts`
+- Supports "trust on first use" (TOFU) mode for development
+- Detects man-in-the-middle attacks (host key mismatch)
+- Automatically saves new trusted host keys
+- Thread-safe implementation
+
+### Configuration
+
+- **Strict Mode** (production): Rejects unknown hosts
+- **Trust-on-First-Use** (development): Automatically trusts new hosts
+
+---
+
+## Input Validation
+
+All user inputs are validated before processing to prevent injection attacks.
+
+### Validated Inputs
+
+| Input Type | Validation |
+|------------|------------|
+| IP addresses | IPv4/IPv6 format validation |
+| Hostnames | RFC 1123 compliant |
+| Port numbers | 1-65535 range |
+| SSH private keys | PEM format validation |
+| Unix usernames | Alphanumeric, dash, underscore |
+| Command names | No null bytes or newlines |
+| Vault addresses | SSRF protection |
+| Vault secret paths | Path traversal protection |
+| Vault secret names | Alphanumeric, dash, underscore, dot |
+| Environment variable names | Unix standards |
+| Script content | Size limits, no null bytes |
+
+---
+
+## Database Encryption
+
+All sensitive data is encrypted using **AES-256-GCM** (military-grade encryption).
+
+### Encrypted Data
+
+- SSH private keys
+- Command history (commands and output)
+- Environment variable values
+- Vault tokens
+
+### Key Generation
+
+Encryption key is auto-generated on first run and stored with 600 permissions.
+
+---
+
+## Encryption Key Management
+
+### Generate a New Encryption Key
+
+```bash
+# macOS/Linux
+openssl rand -base64 32
+
+# Or using dd and base64
+dd if=/dev/urandom bs=32 count=1 2>/dev/null | base64
+
+# Output example: 7xK9mP2vQ8nL4wR6tY5uE3sA1zD0cF8bG7hJ9kM6nP4=
+```
+
+### Use the Generated Key
+
+```bash
+# Option 1: Environment variable (recommended for production)
+export ENCRYPTION_KEY="7xK9mP2vQ8nL4wR6tY5uE3sA1zD0cF8bG7hJ9kM6nP4="
+./web-cli
+
+# Option 2: Save to file (auto-generated on first run)
+echo "7xK9mP2vQ8nL4wR6tY5uE3sA1zD0cF8bG7hJ9kM6nP4=" > .encryption_key
+chmod 600 .encryption_key
+./web-cli
+```
+
+### Important
+
+- **Backup your `.encryption_key` file** - data cannot be recovered without it
+- For production, use environment variable instead of file
+- System entropy is verified before key generation (Linux)
+
+---
+
+## Password Security
+
+- Sudo passwords only used for command execution
+- SSH passwords used for authentication fallback
+- **Passwords are never stored** in command history
+- Passwords cleared from memory after use
+- bcrypt password hashing with cost factor 12
+
+---
+
+## SSRF Protection
+
+When using HashiCorp Vault integration, the application includes SSRF (Server-Side Request Forgery) protection.
+
+### Allowed Addresses
+
+- Public IP addresses
+- Private IPs (10.x.x.x, 172.16.x.x, 192.168.x.x) for self-hosted Vault
+- Localhost (127.0.0.1) for local development
+- Valid hostnames
+
+### Blocked Addresses (Attack Vectors)
+
+- Link-local addresses (169.254.x.x) - used by cloud metadata services
+- Unspecified addresses (0.0.0.0)
+- Cloud metadata hostnames:
+ - `metadata.google.internal`
+ - `metadata.goog`
+ - `metadata`
+ - `instance-data`
+
+This allows you to use self-hosted Vault on private networks while preventing attacks against cloud metadata endpoints.
+
+---
+
+## Path Traversal Protection
+
+All Vault secret paths are validated to prevent path traversal attacks.
+
+### Blocked Patterns
+
+- Path traversal sequences (`..`)
+- Absolute paths starting with `/`
+- Backslashes (`\`)
+- URL-encoded characters (`%`)
+- Consecutive slashes (`//`)
+
+### Allowed Characters
+
+Only alphanumeric, dash, underscore, dot, and forward slash are allowed.
+
+---
+
+## HTTP Security
+
+### Configurable Timeouts
+
+Protection against slowloris and DoS attacks with customizable values:
+
+| Timeout | Default | Environment Variable | Description |
+|---------|---------|---------------------|-------------|
+| Read Timeout | 30s | `READ_TIMEOUT` | Time to read request headers |
+| Write Timeout | 600s | `WRITE_TIMEOUT` | Time to write response |
+| Idle Timeout | 60s | `IDLE_TIMEOUT` | Keep-alive connection timeout |
+| Command Timeout | 300s | `COMMAND_TIMEOUT` | Command execution timeout |
+| SSH Connect Timeout | 30s | `SSH_CONNECT_TIMEOUT` | SSH connection establishment |
+| Vault Timeout | 30s | `VAULT_TIMEOUT` | HashiCorp Vault operations |
+
+### CORS Policy
+
+- Default: localhost only
+- Production: Configure via `CORS_ALLOWED_ORIGINS`
+
+```bash
+# Single origin
+export CORS_ALLOWED_ORIGINS="https://web-cli.example.com"
+
+# Multiple origins (comma-separated)
+export CORS_ALLOWED_ORIGINS="https://web-cli.example.com,https://admin.example.com"
+```
+
+---
+
+## Audit Logging
+
+Comprehensive audit logging for security compliance and monitoring.
+
+### Enable Audit Logging
+
+```bash
+export AUDIT_LOG_PATH=/var/log/web-cli/audit.log
+./web-cli
+```
+
+### Logged Events
+
+- Command executions (local and remote)
+- Script executions
+- Terminal sessions (start/end)
+- Authentication attempts
+
+### Log Format
+
+JSON Lines (JSONL) - one JSON object per line:
+
+```json
+{
+ "timestamp": "2025-01-19T10:30:00Z",
+ "event_type": "command_execution",
+ "outcome": "success",
+ "actor": "admin",
+ "source_ip": "192.168.1.100",
+ "target": "local",
+ "command": "df -h",
+ "user": "root",
+ "exit_code": 0,
+ "duration_ms": 150
+}
+```
+
+### Log Rotation
+
+```bash
+# /etc/logrotate.d/web-cli
+/var/log/web-cli/audit.log {
+ daily
+ rotate 30
+ compress
+ delaycompress
+ missingok
+ notifempty
+ create 640 www-data www-data
+}
+```
+
+---
+
+## Error Information Leakage Prevention
+
+API error responses are sanitized to prevent information leakage:
+
+- Internal error details (IP addresses, paths, stack traces) are not exposed
+- Validation errors are returned with safe, descriptive messages
+- Generic "operation failed" messages for unexpected errors
+- Sensitive configuration details are never included in responses
+
+---
+
+## Security Headers
+
+The following security headers are set on all responses:
+
+| Header | Value | Purpose |
+|--------|-------|---------|
+| `X-Frame-Options` | `DENY` | Prevent clickjacking |
+| `X-Content-Type-Options` | `nosniff` | Prevent MIME sniffing |
+| `X-XSS-Protection` | `1; mode=block` | Enable XSS filter |
+| `Referrer-Policy` | `strict-origin-when-cross-origin` | Control referrer information |
+
+---
+
+## Production Security Checklist
+
+### Automatic (Built-in)
+
+- ✅ Authentication validated at startup (fails fast if misconfigured)
+- ✅ SSH host key verification enabled
+- ✅ Input validation for all user inputs
+- ✅ SSRF protection for Vault addresses
+- ✅ Path traversal protection for Vault paths
+- ✅ Error sanitization (no internal details leaked)
+- ✅ Security headers on all responses
+
+### Required Configuration
+
+- [ ] **Enable authentication**: Set `AUTH_ENABLED=true` with credentials
+- [ ] **Strong credentials**: Use secure `AUTH_USERNAME` and `AUTH_PASSWORD`
+- [ ] **CORS restricted**: Set `CORS_ALLOWED_ORIGINS` to your domain(s)
+- [ ] **Encryption key backup**: Backup `.encryption_key` file
+
+### Recommended
+
+- [ ] **HTTPS enabled**: Use native TLS or reverse proxy
+- [ ] **Audit logging enabled**: Set `AUDIT_LOG_PATH`
+- [ ] **Log rotation configured**: Use logrotate for audit logs
+- [ ] **Security scan**: Run `gosec ./...` or similar
+- [ ] **Monitor logs**: Check for authentication failures
+- [ ] **Firewall configured**: Restrict access to authorized IPs
+
+### Production Environment Variables
+
+```bash
+# Authentication (REQUIRED)
+AUTH_ENABLED=true
+AUTH_USERNAME=admin
+AUTH_PASSWORD=$(openssl rand -base64 32)
+
+# CORS Policy (REQUIRED)
+CORS_ALLOWED_ORIGINS=https://web-cli.yourdomain.com
+
+# Encryption (REQUIRED)
+ENCRYPTION_KEY=$(openssl rand -base64 32)
+
+# TLS/HTTPS (RECOMMENDED)
+WEBCLI_TLS_CERT_PATH=/etc/ssl/certs/web-cli.crt
+WEBCLI_TLS_KEY_PATH=/etc/ssl/private/web-cli.key
+WEBCLI_REQUIRE_HTTPS=true
+
+# Audit Logging (RECOMMENDED)
+WEBCLI_AUDIT_LOG_PATH=/var/log/web-cli/audit.log
+```
+
+---
+
+For more configuration options, see [CONFIGURATION.md](CONFIGURATION.md).
+For deployment instructions, see [DEPLOYMENT.md](DEPLOYMENT.md).
diff --git a/docs/docs.go b/docs/docs.go
index 294f798..ee2df02 100644
--- a/docs/docs.go
+++ b/docs/docs.go
@@ -42,20 +42,28 @@ const docTemplate = `{
"Bash Scripts"
],
"summary": "List all bash scripts",
+ "parameters": [
+ {
+ "type": "string",
+ "description": "Filter by group name",
+ "name": "group",
+ "in": "query"
+ }
+ ],
"responses": {
"200": {
"description": "OK",
"schema": {
"type": "array",
"items": {
- "$ref": "#/definitions/models.BashScriptResponse"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.BashScriptResponse"
}
}
},
"500": {
"description": "Internal Server Error",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -84,7 +92,7 @@ const docTemplate = `{
"in": "body",
"required": true,
"schema": {
- "$ref": "#/definitions/models.BashScriptCreate"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.BashScriptCreate"
}
}
],
@@ -92,19 +100,19 @@ const docTemplate = `{
"201": {
"description": "Created",
"schema": {
- "$ref": "#/definitions/models.BashScriptResponse"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.BashScriptResponse"
}
},
"400": {
"description": "Bad Request",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
},
"500": {
"description": "Internal Server Error",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -135,7 +143,64 @@ const docTemplate = `{
"in": "body",
"required": true,
"schema": {
- "$ref": "#/definitions/models.ScriptExecution"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.ScriptExecution"
+ }
+ }
+ ],
+ "responses": {
+ "200": {
+ "description": "OK",
+ "schema": {
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.ScriptResult"
+ }
+ },
+ "400": {
+ "description": "Bad Request",
+ "schema": {
+ "$ref": "#/definitions/internal_server.ErrorResponse"
+ }
+ },
+ "404": {
+ "description": "Not Found",
+ "schema": {
+ "$ref": "#/definitions/internal_server.ErrorResponse"
+ }
+ },
+ "500": {
+ "description": "Internal Server Error",
+ "schema": {
+ "$ref": "#/definitions/internal_server.ErrorResponse"
+ }
+ }
+ }
+ }
+ },
+ "/bash-scripts/execute/stream": {
+ "post": {
+ "security": [
+ {
+ "BasicAuth": []
+ }
+ ],
+ "description": "Execute a stored bash script locally or remotely with real-time output streaming via SSE",
+ "consumes": [
+ "application/json"
+ ],
+ "produces": [
+ "text/event-stream"
+ ],
+ "tags": [
+ "Bash Scripts"
+ ],
+ "summary": "Execute a bash script with streaming output",
+ "parameters": [
+ {
+ "description": "Script execution request",
+ "name": "execution",
+ "in": "body",
+ "required": true,
+ "schema": {
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.ScriptExecution"
}
}
],
@@ -143,25 +208,62 @@ const docTemplate = `{
"200": {
"description": "OK",
"schema": {
- "$ref": "#/definitions/models.ScriptResult"
+ "$ref": "#/definitions/internal_server.StreamMessage"
}
},
"400": {
"description": "Bad Request",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
},
"404": {
"description": "Not Found",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
+ }
+ },
+ "500": {
+ "description": "Internal Server Error",
+ "schema": {
+ "$ref": "#/definitions/internal_server.ErrorResponse"
+ }
+ }
+ }
+ }
+ },
+ "/bash-scripts/groups": {
+ "get": {
+ "security": [
+ {
+ "BasicAuth": []
+ }
+ ],
+ "description": "Get a list of all distinct group names for bash scripts",
+ "consumes": [
+ "application/json"
+ ],
+ "produces": [
+ "application/json"
+ ],
+ "tags": [
+ "Bash Scripts"
+ ],
+ "summary": "List all bash script groups",
+ "responses": {
+ "200": {
+ "description": "OK",
+ "schema": {
+ "type": "array",
+ "items": {
+ "type": "string"
+ }
}
},
"500": {
"description": "Internal Server Error",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -205,19 +307,19 @@ const docTemplate = `{
"200": {
"description": "OK",
"schema": {
- "$ref": "#/definitions/models.BashScriptResponse"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.BashScriptResponse"
}
},
"400": {
"description": "Bad Request",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
},
"404": {
"description": "Not Found",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -253,7 +355,7 @@ const docTemplate = `{
"in": "body",
"required": true,
"schema": {
- "$ref": "#/definitions/models.BashScriptUpdate"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.BashScriptUpdate"
}
}
],
@@ -261,19 +363,19 @@ const docTemplate = `{
"200": {
"description": "OK",
"schema": {
- "$ref": "#/definitions/models.BashScriptResponse"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.BashScriptResponse"
}
},
"400": {
"description": "Bad Request",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
},
"500": {
"description": "Internal Server Error",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -311,13 +413,13 @@ const docTemplate = `{
"400": {
"description": "Bad Request",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
},
"500": {
"description": "Internal Server Error",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -356,26 +458,26 @@ const docTemplate = `{
"schema": {
"type": "array",
"items": {
- "$ref": "#/definitions/models.ScriptPresetResponse"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.ScriptPresetResponse"
}
}
},
"400": {
"description": "Bad Request",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
},
"404": {
"description": "Not Found",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
},
"500": {
"description": "Internal Server Error",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -406,7 +508,7 @@ const docTemplate = `{
"in": "body",
"required": true,
"schema": {
- "$ref": "#/definitions/models.CommandExecution"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.CommandExecution"
}
}
],
@@ -414,25 +516,25 @@ const docTemplate = `{
"200": {
"description": "OK",
"schema": {
- "$ref": "#/definitions/models.CommandResult"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.CommandResult"
}
},
"400": {
"description": "Bad Request",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
},
"404": {
"description": "Not Found",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
},
"500": {
"description": "Internal Server Error",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -462,6 +564,12 @@ const docTemplate = `{
"description": "Show actual values instead of masked values",
"name": "show_values",
"in": "query"
+ },
+ {
+ "type": "string",
+ "description": "Filter by group name",
+ "name": "group",
+ "in": "query"
}
],
"responses": {
@@ -470,14 +578,14 @@ const docTemplate = `{
"schema": {
"type": "array",
"items": {
- "$ref": "#/definitions/models.EnvVariableResponse"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.EnvVariableResponse"
}
}
},
"500": {
"description": "Internal Server Error",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -506,7 +614,7 @@ const docTemplate = `{
"in": "body",
"required": true,
"schema": {
- "$ref": "#/definitions/models.EnvVariableCreate"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.EnvVariableCreate"
}
}
],
@@ -514,19 +622,56 @@ const docTemplate = `{
"201": {
"description": "Created",
"schema": {
- "$ref": "#/definitions/models.EnvVariableResponse"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.EnvVariableResponse"
}
},
"400": {
"description": "Bad Request",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
+ }
+ },
+ "500": {
+ "description": "Internal Server Error",
+ "schema": {
+ "$ref": "#/definitions/internal_server.ErrorResponse"
+ }
+ }
+ }
+ }
+ },
+ "/env-variables/groups": {
+ "get": {
+ "security": [
+ {
+ "BasicAuth": []
+ }
+ ],
+ "description": "Get a list of all distinct group names for environment variables",
+ "consumes": [
+ "application/json"
+ ],
+ "produces": [
+ "application/json"
+ ],
+ "tags": [
+ "Environment Variables"
+ ],
+ "summary": "List all environment variable groups",
+ "responses": {
+ "200": {
+ "description": "OK",
+ "schema": {
+ "type": "array",
+ "items": {
+ "type": "string"
+ }
}
},
"500": {
"description": "Internal Server Error",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -569,19 +714,19 @@ const docTemplate = `{
"200": {
"description": "OK",
"schema": {
- "$ref": "#/definitions/models.EnvVariableResponse"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.EnvVariableResponse"
}
},
"400": {
"description": "Bad Request",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
},
"404": {
"description": "Not Found",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -617,7 +762,7 @@ const docTemplate = `{
"in": "body",
"required": true,
"schema": {
- "$ref": "#/definitions/models.EnvVariableUpdate"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.EnvVariableUpdate"
}
}
],
@@ -625,19 +770,19 @@ const docTemplate = `{
"200": {
"description": "OK",
"schema": {
- "$ref": "#/definitions/models.EnvVariableResponse"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.EnvVariableResponse"
}
},
"400": {
"description": "Bad Request",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
},
"500": {
"description": "Internal Server Error",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -675,13 +820,13 @@ const docTemplate = `{
"400": {
"description": "Bad Request",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
},
"500": {
"description": "Internal Server Error",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -726,14 +871,14 @@ const docTemplate = `{
"schema": {
"type": "array",
"items": {
- "$ref": "#/definitions/models.CommandHistory"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.CommandHistory"
}
}
},
"500": {
"description": "Internal Server Error",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -770,19 +915,19 @@ const docTemplate = `{
"200": {
"description": "OK",
"schema": {
- "$ref": "#/definitions/models.CommandHistory"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.CommandHistory"
}
},
"400": {
"description": "Bad Request",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
},
"404": {
"description": "Not Found",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -806,20 +951,28 @@ const docTemplate = `{
"SSH Keys"
],
"summary": "List all SSH keys",
+ "parameters": [
+ {
+ "type": "string",
+ "description": "Filter by group name",
+ "name": "group",
+ "in": "query"
+ }
+ ],
"responses": {
"200": {
"description": "OK",
"schema": {
"type": "array",
"items": {
- "$ref": "#/definitions/models.SSHKey"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.SSHKey"
}
}
},
"500": {
"description": "Internal Server Error",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -848,7 +1001,7 @@ const docTemplate = `{
"in": "body",
"required": true,
"schema": {
- "$ref": "#/definitions/models.SSHKeyCreate"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.SSHKeyCreate"
}
}
],
@@ -856,19 +1009,56 @@ const docTemplate = `{
"201": {
"description": "Created",
"schema": {
- "$ref": "#/definitions/models.SSHKey"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.SSHKey"
}
},
"400": {
"description": "Bad Request",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
},
"500": {
"description": "Internal Server Error",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
+ }
+ }
+ }
+ }
+ },
+ "/keys/groups": {
+ "get": {
+ "security": [
+ {
+ "BasicAuth": []
+ }
+ ],
+ "description": "Get a list of all distinct group names for SSH keys",
+ "consumes": [
+ "application/json"
+ ],
+ "produces": [
+ "application/json"
+ ],
+ "tags": [
+ "SSH Keys"
+ ],
+ "summary": "List all SSH key groups",
+ "responses": {
+ "200": {
+ "description": "OK",
+ "schema": {
+ "type": "array",
+ "items": {
+ "type": "string"
+ }
+ }
+ },
+ "500": {
+ "description": "Internal Server Error",
+ "schema": {
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -905,19 +1095,19 @@ const docTemplate = `{
"200": {
"description": "OK",
"schema": {
- "$ref": "#/definitions/models.SSHKey"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.SSHKey"
}
},
"400": {
"description": "Bad Request",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
},
"404": {
"description": "Not Found",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -953,7 +1143,7 @@ const docTemplate = `{
"in": "body",
"required": true,
"schema": {
- "$ref": "#/definitions/models.SSHKeyUpdate"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.SSHKeyUpdate"
}
}
],
@@ -961,19 +1151,19 @@ const docTemplate = `{
"200": {
"description": "OK",
"schema": {
- "$ref": "#/definitions/models.SSHKey"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.SSHKey"
}
},
"400": {
"description": "Bad Request",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
},
"500": {
"description": "Internal Server Error",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -1011,13 +1201,13 @@ const docTemplate = `{
"400": {
"description": "Bad Request",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
},
"500": {
"description": "Internal Server Error",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -1047,14 +1237,14 @@ const docTemplate = `{
"schema": {
"type": "array",
"items": {
- "$ref": "#/definitions/models.LocalUser"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.LocalUser"
}
}
},
"500": {
"description": "Internal Server Error",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -1083,7 +1273,7 @@ const docTemplate = `{
"in": "body",
"required": true,
"schema": {
- "$ref": "#/definitions/models.LocalUserCreate"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.LocalUserCreate"
}
}
],
@@ -1091,19 +1281,19 @@ const docTemplate = `{
"201": {
"description": "Created",
"schema": {
- "$ref": "#/definitions/models.LocalUser"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.LocalUser"
}
},
"400": {
"description": "Bad Request",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
},
"500": {
"description": "Internal Server Error",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -1140,19 +1330,19 @@ const docTemplate = `{
"200": {
"description": "OK",
"schema": {
- "$ref": "#/definitions/models.LocalUser"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.LocalUser"
}
},
"400": {
"description": "Bad Request",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
},
"404": {
"description": "Not Found",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -1188,7 +1378,7 @@ const docTemplate = `{
"in": "body",
"required": true,
"schema": {
- "$ref": "#/definitions/models.LocalUserUpdate"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.LocalUserUpdate"
}
}
],
@@ -1196,19 +1386,19 @@ const docTemplate = `{
"200": {
"description": "OK",
"schema": {
- "$ref": "#/definitions/models.LocalUser"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.LocalUser"
}
},
"400": {
"description": "Bad Request",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
},
"500": {
"description": "Internal Server Error",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -1246,13 +1436,13 @@ const docTemplate = `{
"400": {
"description": "Bad Request",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
},
"500": {
"description": "Internal Server Error",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -1282,14 +1472,14 @@ const docTemplate = `{
"schema": {
"type": "array",
"items": {
- "$ref": "#/definitions/models.SavedCommand"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.SavedCommand"
}
}
},
"500": {
"description": "Internal Server Error",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -1318,7 +1508,7 @@ const docTemplate = `{
"in": "body",
"required": true,
"schema": {
- "$ref": "#/definitions/models.SavedCommandCreate"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.SavedCommandCreate"
}
}
],
@@ -1326,19 +1516,19 @@ const docTemplate = `{
"201": {
"description": "Created",
"schema": {
- "$ref": "#/definitions/models.SavedCommand"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.SavedCommand"
}
},
"400": {
"description": "Bad Request",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
},
"500": {
"description": "Internal Server Error",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -1375,19 +1565,19 @@ const docTemplate = `{
"200": {
"description": "OK",
"schema": {
- "$ref": "#/definitions/models.SavedCommand"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.SavedCommand"
}
},
"400": {
"description": "Bad Request",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
},
"404": {
"description": "Not Found",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -1423,7 +1613,7 @@ const docTemplate = `{
"in": "body",
"required": true,
"schema": {
- "$ref": "#/definitions/models.SavedCommandUpdate"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.SavedCommandUpdate"
}
}
],
@@ -1431,19 +1621,19 @@ const docTemplate = `{
"200": {
"description": "OK",
"schema": {
- "$ref": "#/definitions/models.SavedCommand"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.SavedCommand"
}
},
"400": {
"description": "Bad Request",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
},
"500": {
"description": "Internal Server Error",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -1481,13 +1671,13 @@ const docTemplate = `{
"400": {
"description": "Bad Request",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
},
"500": {
"description": "Internal Server Error",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -1517,14 +1707,14 @@ const docTemplate = `{
"schema": {
"type": "array",
"items": {
- "$ref": "#/definitions/models.ScriptPresetResponse"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.ScriptPresetResponse"
}
}
},
"500": {
"description": "Internal Server Error",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -1553,7 +1743,7 @@ const docTemplate = `{
"in": "body",
"required": true,
"schema": {
- "$ref": "#/definitions/models.ScriptPresetCreate"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.ScriptPresetCreate"
}
}
],
@@ -1561,19 +1751,19 @@ const docTemplate = `{
"201": {
"description": "Created",
"schema": {
- "$ref": "#/definitions/models.ScriptPresetResponse"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.ScriptPresetResponse"
}
},
"400": {
"description": "Bad Request",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
},
"500": {
"description": "Internal Server Error",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -1610,19 +1800,19 @@ const docTemplate = `{
"200": {
"description": "OK",
"schema": {
- "$ref": "#/definitions/models.ScriptPresetResponse"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.ScriptPresetResponse"
}
},
"400": {
"description": "Bad Request",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
},
"404": {
"description": "Not Found",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -1658,7 +1848,7 @@ const docTemplate = `{
"in": "body",
"required": true,
"schema": {
- "$ref": "#/definitions/models.ScriptPresetUpdate"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.ScriptPresetUpdate"
}
}
],
@@ -1666,19 +1856,19 @@ const docTemplate = `{
"200": {
"description": "OK",
"schema": {
- "$ref": "#/definitions/models.ScriptPresetResponse"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.ScriptPresetResponse"
}
},
"400": {
"description": "Bad Request",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
},
"500": {
"description": "Internal Server Error",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -1716,13 +1906,13 @@ const docTemplate = `{
"400": {
"description": "Bad Request",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
},
"500": {
"description": "Internal Server Error",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -1746,20 +1936,28 @@ const docTemplate = `{
"Servers"
],
"summary": "List all servers",
+ "parameters": [
+ {
+ "type": "string",
+ "description": "Filter by group name",
+ "name": "group",
+ "in": "query"
+ }
+ ],
"responses": {
"200": {
"description": "OK",
"schema": {
"type": "array",
"items": {
- "$ref": "#/definitions/models.Server"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.Server"
}
}
},
"500": {
"description": "Internal Server Error",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -1788,7 +1986,7 @@ const docTemplate = `{
"in": "body",
"required": true,
"schema": {
- "$ref": "#/definitions/models.ServerCreate"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.ServerCreate"
}
}
],
@@ -1796,19 +1994,56 @@ const docTemplate = `{
"201": {
"description": "Created",
"schema": {
- "$ref": "#/definitions/models.Server"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.Server"
}
},
"400": {
"description": "Bad Request",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
+ }
+ },
+ "500": {
+ "description": "Internal Server Error",
+ "schema": {
+ "$ref": "#/definitions/internal_server.ErrorResponse"
+ }
+ }
+ }
+ }
+ },
+ "/servers/groups": {
+ "get": {
+ "security": [
+ {
+ "BasicAuth": []
+ }
+ ],
+ "description": "Get a list of all distinct group names for servers",
+ "consumes": [
+ "application/json"
+ ],
+ "produces": [
+ "application/json"
+ ],
+ "tags": [
+ "Servers"
+ ],
+ "summary": "List all server groups",
+ "responses": {
+ "200": {
+ "description": "OK",
+ "schema": {
+ "type": "array",
+ "items": {
+ "type": "string"
+ }
}
},
"500": {
"description": "Internal Server Error",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -1845,19 +2080,19 @@ const docTemplate = `{
"200": {
"description": "OK",
"schema": {
- "$ref": "#/definitions/models.Server"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.Server"
}
},
"400": {
"description": "Bad Request",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
},
"404": {
"description": "Not Found",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -1893,7 +2128,7 @@ const docTemplate = `{
"in": "body",
"required": true,
"schema": {
- "$ref": "#/definitions/models.ServerUpdate"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.ServerUpdate"
}
}
],
@@ -1901,19 +2136,19 @@ const docTemplate = `{
"200": {
"description": "OK",
"schema": {
- "$ref": "#/definitions/models.Server"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.Server"
}
},
"400": {
"description": "Bad Request",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
},
"500": {
"description": "Internal Server Error",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -1951,13 +2186,13 @@ const docTemplate = `{
"400": {
"description": "Bad Request",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
},
"500": {
"description": "Internal Server Error",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -1985,13 +2220,13 @@ const docTemplate = `{
"200": {
"description": "OK",
"schema": {
- "$ref": "#/definitions/server.CurrentUserResponse"
+ "$ref": "#/definitions/internal_server.CurrentUserResponse"
}
},
"500": {
"description": "Internal Server Error",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -2021,81 +2256,714 @@ const docTemplate = `{
"schema": {
"type": "array",
"items": {
- "$ref": "#/definitions/server.ShellInfo"
+ "$ref": "#/definitions/internal_server.ShellInfo"
}
}
}
}
}
- }
- },
- "definitions": {
- "models.BashScriptCreate": {
- "type": "object",
- "required": [
- "content",
- "name"
- ],
- "properties": {
- "content": {
- "type": "string"
- },
- "description": {
- "type": "string"
- },
- "filename": {
- "type": "string"
- },
- "name": {
- "type": "string"
- }
- }
- },
- "models.BashScriptResponse": {
- "type": "object",
- "properties": {
- "content": {
- "description": "Only included when specifically requested",
- "type": "string"
- },
- "created_at": {
- "type": "string"
- },
- "description": {
- "type": "string"
- },
- "filename": {
- "type": "string"
- },
- "id": {
- "type": "integer"
- },
- "name": {
- "type": "string"
- },
- "updated_at": {
- "type": "string"
- }
- }
},
- "models.BashScriptUpdate": {
- "type": "object",
- "properties": {
- "content": {
- "type": "string"
- },
- "description": {
- "type": "string"
- },
- "filename": {
- "type": "string"
+ "/vault/bash-scripts": {
+ "get": {
+ "security": [
+ {
+ "BasicAuth": []
+ }
+ ],
+ "description": "Retrieve all bash scripts stored in Vault",
+ "produces": [
+ "application/json"
+ ],
+ "tags": [
+ "Vault"
+ ],
+ "summary": "List bash scripts from Vault",
+ "responses": {
+ "200": {
+ "description": "OK",
+ "schema": {
+ "type": "array",
+ "items": {
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_vault.BashScript"
+ }
+ }
+ },
+ "400": {
+ "description": "Bad Request",
+ "schema": {
+ "$ref": "#/definitions/internal_server.ErrorResponse"
+ }
+ },
+ "500": {
+ "description": "Internal Server Error",
+ "schema": {
+ "$ref": "#/definitions/internal_server.ErrorResponse"
+ }
+ }
+ }
+ },
+ "post": {
+ "security": [
+ {
+ "BasicAuth": []
+ }
+ ],
+ "description": "Create a new bash script in HashiCorp Vault storage",
+ "consumes": [
+ "application/json"
+ ],
+ "produces": [
+ "application/json"
+ ],
+ "tags": [
+ "Vault"
+ ],
+ "summary": "Store bash script in Vault",
+ "parameters": [
+ {
+ "description": "Bash script data",
+ "name": "script",
+ "in": "body",
+ "required": true,
+ "schema": {
+ "type": "object"
+ }
+ }
+ ],
+ "responses": {
+ "201": {
+ "description": "Created script info with source field",
+ "schema": {
+ "type": "object",
+ "additionalProperties": true
+ }
+ },
+ "400": {
+ "description": "Invalid request or Vault not configured",
+ "schema": {
+ "type": "string"
+ }
+ },
+ "500": {
+ "description": "Failed to store script",
+ "schema": {
+ "type": "string"
+ }
+ }
+ }
+ }
+ },
+ "/vault/config": {
+ "get": {
+ "security": [
+ {
+ "BasicAuth": []
+ }
+ ],
+ "description": "Retrieve the current Vault configuration (token is never returned)",
+ "produces": [
+ "application/json"
+ ],
+ "tags": [
+ "Vault"
+ ],
+ "summary": "Get Vault configuration",
+ "responses": {
+ "200": {
+ "description": "OK",
+ "schema": {
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.VaultConfigResponse"
+ }
+ },
+ "500": {
+ "description": "Internal Server Error",
+ "schema": {
+ "$ref": "#/definitions/internal_server.ErrorResponse"
+ }
+ }
+ }
+ },
+ "post": {
+ "security": [
+ {
+ "BasicAuth": []
+ }
+ ],
+ "description": "Configure or update the Vault connection settings",
+ "consumes": [
+ "application/json"
+ ],
+ "produces": [
+ "application/json"
+ ],
+ "tags": [
+ "Vault"
+ ],
+ "summary": "Create or update Vault configuration",
+ "parameters": [
+ {
+ "description": "Vault configuration",
+ "name": "config",
+ "in": "body",
+ "required": true,
+ "schema": {
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.VaultConfigCreate"
+ }
+ }
+ ],
+ "responses": {
+ "200": {
+ "description": "OK",
+ "schema": {
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.VaultConfigResponse"
+ }
+ },
+ "400": {
+ "description": "Bad Request",
+ "schema": {
+ "$ref": "#/definitions/internal_server.ErrorResponse"
+ }
+ },
+ "500": {
+ "description": "Internal Server Error",
+ "schema": {
+ "$ref": "#/definitions/internal_server.ErrorResponse"
+ }
+ }
+ }
+ },
+ "delete": {
+ "security": [
+ {
+ "BasicAuth": []
+ }
+ ],
+ "description": "Remove the Vault configuration",
+ "tags": [
+ "Vault"
+ ],
+ "summary": "Delete Vault configuration",
+ "responses": {
+ "204": {
+ "description": "No Content"
+ },
+ "500": {
+ "description": "Internal Server Error",
+ "schema": {
+ "$ref": "#/definitions/internal_server.ErrorResponse"
+ }
+ }
+ }
+ }
+ },
+ "/vault/env-variables": {
+ "get": {
+ "security": [
+ {
+ "BasicAuth": []
+ }
+ ],
+ "description": "Retrieve all environment variables stored in Vault",
+ "produces": [
+ "application/json"
+ ],
+ "tags": [
+ "Vault"
+ ],
+ "summary": "List environment variables from Vault",
+ "responses": {
+ "200": {
+ "description": "OK",
+ "schema": {
+ "type": "array",
+ "items": {
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_vault.EnvVariable"
+ }
+ }
+ },
+ "400": {
+ "description": "Bad Request",
+ "schema": {
+ "$ref": "#/definitions/internal_server.ErrorResponse"
+ }
+ },
+ "500": {
+ "description": "Internal Server Error",
+ "schema": {
+ "$ref": "#/definitions/internal_server.ErrorResponse"
+ }
+ }
+ }
+ },
+ "post": {
+ "security": [
+ {
+ "BasicAuth": []
+ }
+ ],
+ "description": "Store a new environment variable in Vault",
+ "consumes": [
+ "application/json"
+ ],
+ "produces": [
+ "application/json"
+ ],
+ "tags": [
+ "Vault"
+ ],
+ "summary": "Create environment variable in Vault",
+ "parameters": [
+ {
+ "description": "Environment Variable",
+ "name": "envVar",
+ "in": "body",
+ "required": true,
+ "schema": {
+ "type": "object",
+ "properties": {
+ "description": {
+ "type": "string"
+ },
+ "group": {
+ "type": "string"
+ },
+ "name": {
+ "type": "string"
+ },
+ "value": {
+ "type": "string"
+ }
+ }
+ }
+ }
+ ],
+ "responses": {
+ "201": {
+ "description": "Created",
+ "schema": {
+ "type": "object",
+ "properties": {
+ "description": {
+ "type": "string"
+ },
+ "group": {
+ "type": "string"
+ },
+ "name": {
+ "type": "string"
+ },
+ "source": {
+ "type": "string"
+ }
+ }
+ }
+ },
+ "400": {
+ "description": "Bad Request",
+ "schema": {
+ "$ref": "#/definitions/internal_server.ErrorResponse"
+ }
+ },
+ "500": {
+ "description": "Internal Server Error",
+ "schema": {
+ "$ref": "#/definitions/internal_server.ErrorResponse"
+ }
+ }
+ }
+ }
+ },
+ "/vault/servers": {
+ "get": {
+ "security": [
+ {
+ "BasicAuth": []
+ }
+ ],
+ "description": "Retrieve all server configurations stored in Vault",
+ "produces": [
+ "application/json"
+ ],
+ "tags": [
+ "Vault"
+ ],
+ "summary": "List servers from Vault",
+ "responses": {
+ "200": {
+ "description": "OK",
+ "schema": {
+ "type": "array",
+ "items": {
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_vault.Server"
+ }
+ }
+ },
+ "400": {
+ "description": "Bad Request",
+ "schema": {
+ "$ref": "#/definitions/internal_server.ErrorResponse"
+ }
+ },
+ "500": {
+ "description": "Internal Server Error",
+ "schema": {
+ "$ref": "#/definitions/internal_server.ErrorResponse"
+ }
+ }
+ }
+ },
+ "post": {
+ "security": [
+ {
+ "BasicAuth": []
+ }
+ ],
+ "description": "Store a new server configuration in Vault",
+ "consumes": [
+ "application/json"
+ ],
+ "produces": [
+ "application/json"
+ ],
+ "tags": [
+ "Vault"
+ ],
+ "summary": "Create server in Vault",
+ "parameters": [
+ {
+ "description": "Server",
+ "name": "server",
+ "in": "body",
+ "required": true,
+ "schema": {
+ "type": "object",
+ "properties": {
+ "group": {
+ "type": "string"
+ },
+ "ip_address": {
+ "type": "string"
+ },
+ "name": {
+ "type": "string"
+ },
+ "port": {
+ "type": "integer"
+ },
+ "username": {
+ "type": "string"
+ }
+ }
+ }
+ }
+ ],
+ "responses": {
+ "201": {
+ "description": "Created",
+ "schema": {
+ "type": "object",
+ "properties": {
+ "group": {
+ "type": "string"
+ },
+ "ip_address": {
+ "type": "string"
+ },
+ "name": {
+ "type": "string"
+ },
+ "port": {
+ "type": "integer"
+ },
+ "source": {
+ "type": "string"
+ },
+ "username": {
+ "type": "string"
+ }
+ }
+ }
+ },
+ "400": {
+ "description": "Bad Request",
+ "schema": {
+ "$ref": "#/definitions/internal_server.ErrorResponse"
+ }
+ },
+ "500": {
+ "description": "Internal Server Error",
+ "schema": {
+ "$ref": "#/definitions/internal_server.ErrorResponse"
+ }
+ }
+ }
+ }
+ },
+ "/vault/ssh-keys": {
+ "get": {
+ "security": [
+ {
+ "BasicAuth": []
+ }
+ ],
+ "description": "Retrieve all SSH keys stored in Vault",
+ "produces": [
+ "application/json"
+ ],
+ "tags": [
+ "Vault"
+ ],
+ "summary": "List SSH keys from Vault",
+ "responses": {
+ "200": {
+ "description": "OK",
+ "schema": {
+ "type": "array",
+ "items": {
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_vault.SSHKey"
+ }
+ }
+ },
+ "400": {
+ "description": "Bad Request",
+ "schema": {
+ "$ref": "#/definitions/internal_server.ErrorResponse"
+ }
+ },
+ "500": {
+ "description": "Internal Server Error",
+ "schema": {
+ "$ref": "#/definitions/internal_server.ErrorResponse"
+ }
+ }
+ }
+ },
+ "post": {
+ "security": [
+ {
+ "BasicAuth": []
+ }
+ ],
+ "description": "Store a new SSH key in Vault",
+ "consumes": [
+ "application/json"
+ ],
+ "produces": [
+ "application/json"
+ ],
+ "tags": [
+ "Vault"
+ ],
+ "summary": "Create SSH key in Vault",
+ "parameters": [
+ {
+ "description": "SSH Key",
+ "name": "key",
+ "in": "body",
+ "required": true,
+ "schema": {
+ "type": "object",
+ "properties": {
+ "group": {
+ "type": "string"
+ },
+ "name": {
+ "type": "string"
+ },
+ "private_key": {
+ "type": "string"
+ }
+ }
+ }
+ }
+ ],
+ "responses": {
+ "201": {
+ "description": "Created",
+ "schema": {
+ "type": "object",
+ "properties": {
+ "created_at": {
+ "type": "string"
+ },
+ "group": {
+ "type": "string"
+ },
+ "name": {
+ "type": "string"
+ },
+ "source": {
+ "type": "string"
+ }
+ }
+ }
+ },
+ "400": {
+ "description": "Bad Request",
+ "schema": {
+ "$ref": "#/definitions/internal_server.ErrorResponse"
+ }
+ },
+ "500": {
+ "description": "Internal Server Error",
+ "schema": {
+ "$ref": "#/definitions/internal_server.ErrorResponse"
+ }
+ }
+ }
+ }
+ },
+ "/vault/status": {
+ "get": {
+ "security": [
+ {
+ "BasicAuth": []
+ }
+ ],
+ "description": "Check the current Vault connection status",
+ "produces": [
+ "application/json"
+ ],
+ "tags": [
+ "Vault"
+ ],
+ "summary": "Get Vault connection status",
+ "responses": {
+ "200": {
+ "description": "OK",
+ "schema": {
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.VaultStatus"
+ }
+ },
+ "500": {
+ "description": "Internal Server Error",
+ "schema": {
+ "$ref": "#/definitions/internal_server.ErrorResponse"
+ }
+ }
+ }
+ }
+ },
+ "/vault/test": {
+ "post": {
+ "security": [
+ {
+ "BasicAuth": []
+ }
+ ],
+ "description": "Test the connection to Vault and initialize the secrets structure",
+ "produces": [
+ "application/json"
+ ],
+ "tags": [
+ "Vault"
+ ],
+ "summary": "Test Vault connection",
+ "responses": {
+ "200": {
+ "description": "OK",
+ "schema": {
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.VaultStatus"
+ }
+ },
+ "400": {
+ "description": "Bad Request",
+ "schema": {
+ "$ref": "#/definitions/internal_server.ErrorResponse"
+ }
+ },
+ "500": {
+ "description": "Internal Server Error",
+ "schema": {
+ "$ref": "#/definitions/internal_server.ErrorResponse"
+ }
+ }
+ }
+ }
+ }
+ },
+ "definitions": {
+ "github_com_pozgo_web-cli_internal_models.BashScriptCreate": {
+ "type": "object",
+ "required": [
+ "content",
+ "name"
+ ],
+ "properties": {
+ "content": {
+ "type": "string"
+ },
+ "description": {
+ "type": "string"
+ },
+ "filename": {
+ "type": "string"
+ },
+ "group": {
+ "description": "Optional, defaults to \"default\"",
+ "type": "string"
+ },
+ "name": {
+ "type": "string"
+ }
+ }
+ },
+ "github_com_pozgo_web-cli_internal_models.BashScriptResponse": {
+ "type": "object",
+ "properties": {
+ "content": {
+ "description": "Only included when specifically requested",
+ "type": "string"
+ },
+ "created_at": {
+ "type": "string"
+ },
+ "description": {
+ "type": "string"
+ },
+ "filename": {
+ "type": "string"
+ },
+ "group": {
+ "description": "Group/category for organization",
+ "type": "string"
+ },
+ "id": {
+ "type": "integer"
+ },
+ "name": {
+ "type": "string"
+ },
+ "source": {
+ "description": "\"sqlite\" or \"vault\"",
+ "type": "string"
+ },
+ "updated_at": {
+ "type": "string"
+ }
+ }
+ },
+ "github_com_pozgo_web-cli_internal_models.BashScriptUpdate": {
+ "type": "object",
+ "properties": {
+ "content": {
+ "type": "string"
+ },
+ "description": {
+ "type": "string"
+ },
+ "filename": {
+ "type": "string"
+ },
+ "group": {
+ "type": "string"
},
"name": {
"type": "string"
}
}
},
- "models.CommandExecution": {
+ "github_com_pozgo_web-cli_internal_models.CommandExecution": {
"type": "object",
"required": [
"command"
@@ -2113,14 +2981,30 @@ const docTemplate = `{
"description": "Optional: save as template with this name",
"type": "string"
},
+ "server_group": {
+ "description": "Server group for remote execution (Vault)",
+ "type": "string"
+ },
"server_id": {
- "description": "Server ID for remote execution",
+ "description": "Server ID for remote execution (SQLite)",
"type": "integer"
},
+ "server_name": {
+ "description": "Server name for remote execution (Vault)",
+ "type": "string"
+ },
+ "ssh_key_group": {
+ "description": "SSH key group for remote execution (Vault)",
+ "type": "string"
+ },
"ssh_key_id": {
- "description": "SSH key ID for remote execution",
+ "description": "SSH key ID for remote execution (SQLite)",
"type": "integer"
},
+ "ssh_key_name": {
+ "description": "SSH key name for remote execution (Vault)",
+ "type": "string"
+ },
"ssh_password": {
"description": "SSH password (for remote, if key auth fails)",
"type": "string"
@@ -2135,7 +3019,7 @@ const docTemplate = `{
}
}
},
- "models.CommandHistory": {
+ "github_com_pozgo_web-cli_internal_models.CommandHistory": {
"type": "object",
"properties": {
"command": {
@@ -2168,7 +3052,7 @@ const docTemplate = `{
}
}
},
- "models.CommandResult": {
+ "github_com_pozgo_web-cli_internal_models.CommandResult": {
"type": "object",
"properties": {
"command": {
@@ -2192,7 +3076,7 @@ const docTemplate = `{
}
}
},
- "models.EnvVariableCreate": {
+ "github_com_pozgo_web-cli_internal_models.EnvVariableCreate": {
"type": "object",
"required": [
"name",
@@ -2202,6 +3086,10 @@ const docTemplate = `{
"description": {
"type": "string"
},
+ "group": {
+ "description": "Optional, defaults to \"default\"",
+ "type": "string"
+ },
"name": {
"type": "string"
},
@@ -2210,7 +3098,7 @@ const docTemplate = `{
}
}
},
- "models.EnvVariableResponse": {
+ "github_com_pozgo_web-cli_internal_models.EnvVariableResponse": {
"type": "object",
"properties": {
"created_at": {
@@ -2219,12 +3107,20 @@ const docTemplate = `{
"description": {
"type": "string"
},
+ "group": {
+ "description": "Group/category for organization",
+ "type": "string"
+ },
"id": {
"type": "integer"
},
"name": {
"type": "string"
},
+ "source": {
+ "description": "\"sqlite\" or \"vault\"",
+ "type": "string"
+ },
"updated_at": {
"type": "string"
},
@@ -2234,12 +3130,15 @@ const docTemplate = `{
}
}
},
- "models.EnvVariableUpdate": {
+ "github_com_pozgo_web-cli_internal_models.EnvVariableUpdate": {
"type": "object",
"properties": {
"description": {
"type": "string"
},
+ "group": {
+ "type": "string"
+ },
"name": {
"type": "string"
},
@@ -2248,7 +3147,7 @@ const docTemplate = `{
}
}
},
- "models.LocalUser": {
+ "github_com_pozgo_web-cli_internal_models.LocalUser": {
"type": "object",
"properties": {
"created_at": {
@@ -2266,7 +3165,7 @@ const docTemplate = `{
}
}
},
- "models.LocalUserCreate": {
+ "github_com_pozgo_web-cli_internal_models.LocalUserCreate": {
"type": "object",
"required": [
"name"
@@ -2278,7 +3177,7 @@ const docTemplate = `{
}
}
},
- "models.LocalUserUpdate": {
+ "github_com_pozgo_web-cli_internal_models.LocalUserUpdate": {
"type": "object",
"properties": {
"name": {
@@ -2287,12 +3186,16 @@ const docTemplate = `{
}
}
},
- "models.SSHKey": {
+ "github_com_pozgo_web-cli_internal_models.SSHKey": {
"type": "object",
"properties": {
"created_at": {
"type": "string"
},
+ "group": {
+ "description": "Group/category for organization",
+ "type": "string"
+ },
"id": {
"type": "integer"
},
@@ -2303,18 +3206,26 @@ const docTemplate = `{
"description": "Decrypted value",
"type": "string"
},
+ "source": {
+ "description": "\"sqlite\" or \"vault\"",
+ "type": "string"
+ },
"updated_at": {
"type": "string"
}
}
},
- "models.SSHKeyCreate": {
+ "github_com_pozgo_web-cli_internal_models.SSHKeyCreate": {
"type": "object",
"required": [
"name",
"private_key"
],
"properties": {
+ "group": {
+ "description": "Optional, defaults to \"default\"",
+ "type": "string"
+ },
"name": {
"type": "string"
},
@@ -2323,9 +3234,12 @@ const docTemplate = `{
}
}
},
- "models.SSHKeyUpdate": {
+ "github_com_pozgo_web-cli_internal_models.SSHKeyUpdate": {
"type": "object",
"properties": {
+ "group": {
+ "type": "string"
+ },
"name": {
"type": "string"
},
@@ -2334,7 +3248,7 @@ const docTemplate = `{
}
}
},
- "models.SavedCommand": {
+ "github_com_pozgo_web-cli_internal_models.SavedCommand": {
"type": "object",
"properties": {
"command": {
@@ -2376,7 +3290,7 @@ const docTemplate = `{
}
}
},
- "models.SavedCommandCreate": {
+ "github_com_pozgo_web-cli_internal_models.SavedCommandCreate": {
"type": "object",
"required": [
"command",
@@ -2410,7 +3324,7 @@ const docTemplate = `{
}
}
},
- "models.SavedCommandUpdate": {
+ "github_com_pozgo_web-cli_internal_models.SavedCommandUpdate": {
"type": "object",
"properties": {
"command": {
@@ -2436,19 +3350,30 @@ const docTemplate = `{
}
}
},
- "models.ScriptExecution": {
+ "github_com_pozgo_web-cli_internal_models.ScriptExecution": {
"type": "object",
- "required": [
- "script_id"
- ],
"properties": {
+ "env_var_groups": {
+ "description": "Groups of env vars to include (Vault, paired with EnvVarNames)",
+ "type": "array",
+ "items": {
+ "type": "string"
+ }
+ },
"env_var_ids": {
- "description": "Specific env var IDs to include",
+ "description": "Specific env var IDs to include (SQLite)",
"type": "array",
"items": {
"type": "integer"
}
},
+ "env_var_names": {
+ "description": "Names of env vars to include (Vault)",
+ "type": "array",
+ "items": {
+ "type": "string"
+ }
+ },
"include_env_vars": {
"description": "Deprecated: use EnvVarIDs instead",
"type": "boolean"
@@ -2457,18 +3382,42 @@ const docTemplate = `{
"description": "True if remote execution",
"type": "boolean"
},
+ "script_group": {
+ "description": "Script group for execution (Vault)",
+ "type": "string"
+ },
"script_id": {
- "description": "ID of the script to execute",
+ "description": "ID of the script to execute (SQLite)",
"type": "integer"
},
+ "script_name": {
+ "description": "Name of the script to execute (Vault)",
+ "type": "string"
+ },
+ "server_group": {
+ "description": "Server group for remote execution (Vault)",
+ "type": "string"
+ },
"server_id": {
- "description": "Server ID for remote execution",
+ "description": "Server ID for remote execution (SQLite)",
"type": "integer"
},
+ "server_name": {
+ "description": "Server name for remote execution (Vault)",
+ "type": "string"
+ },
+ "ssh_key_group": {
+ "description": "SSH key group for remote execution (Vault)",
+ "type": "string"
+ },
"ssh_key_id": {
- "description": "SSH key ID for remote execution",
+ "description": "SSH key ID for remote execution (SQLite)",
"type": "integer"
},
+ "ssh_key_name": {
+ "description": "SSH key name for remote execution (Vault)",
+ "type": "string"
+ },
"ssh_password": {
"description": "SSH password (for remote, if key auth fails)",
"type": "string"
@@ -2483,7 +3432,7 @@ const docTemplate = `{
}
}
},
- "models.ScriptPresetCreate": {
+ "github_com_pozgo_web-cli_internal_models.ScriptPresetCreate": {
"type": "object",
"required": [
"name",
@@ -2519,7 +3468,7 @@ const docTemplate = `{
}
}
},
- "models.ScriptPresetResponse": {
+ "github_com_pozgo_web-cli_internal_models.ScriptPresetResponse": {
"type": "object",
"properties": {
"created_at": {
@@ -2560,7 +3509,7 @@ const docTemplate = `{
}
}
},
- "models.ScriptPresetUpdate": {
+ "github_com_pozgo_web-cli_internal_models.ScriptPresetUpdate": {
"type": "object",
"properties": {
"description": {
@@ -2592,7 +3541,7 @@ const docTemplate = `{
}
}
},
- "models.ScriptResult": {
+ "github_com_pozgo_web-cli_internal_models.ScriptResult": {
"type": "object",
"properties": {
"env_vars_injected": {
@@ -2624,12 +3573,16 @@ const docTemplate = `{
}
}
},
- "models.Server": {
+ "github_com_pozgo_web-cli_internal_models.Server": {
"type": "object",
"properties": {
"created_at": {
"type": "string"
},
+ "group": {
+ "description": "Group/category for organization",
+ "type": "string"
+ },
"id": {
"type": "integer"
},
@@ -2645,6 +3598,10 @@ const docTemplate = `{
"description": "SSH port (default: 22)",
"type": "integer"
},
+ "source": {
+ "description": "\"sqlite\" or \"vault\"",
+ "type": "string"
+ },
"updated_at": {
"type": "string"
},
@@ -2654,9 +3611,13 @@ const docTemplate = `{
}
}
},
- "models.ServerCreate": {
+ "github_com_pozgo_web-cli_internal_models.ServerCreate": {
"type": "object",
"properties": {
+ "group": {
+ "description": "Optional, defaults to \"default\"",
+ "type": "string"
+ },
"ip_address": {
"type": "string"
},
@@ -2673,9 +3634,162 @@ const docTemplate = `{
}
}
},
- "models.ServerUpdate": {
+ "github_com_pozgo_web-cli_internal_models.ServerUpdate": {
+ "type": "object",
+ "properties": {
+ "group": {
+ "type": "string"
+ },
+ "ip_address": {
+ "type": "string"
+ },
+ "name": {
+ "type": "string"
+ },
+ "port": {
+ "type": "integer"
+ },
+ "username": {
+ "type": "string"
+ }
+ }
+ },
+ "github_com_pozgo_web-cli_internal_models.VaultConfigCreate": {
+ "type": "object",
+ "properties": {
+ "address": {
+ "type": "string"
+ },
+ "enabled": {
+ "type": "boolean"
+ },
+ "mount_path": {
+ "type": "string"
+ },
+ "namespace": {
+ "type": "string"
+ },
+ "token": {
+ "type": "string"
+ }
+ }
+ },
+ "github_com_pozgo_web-cli_internal_models.VaultConfigResponse": {
+ "type": "object",
+ "properties": {
+ "address": {
+ "type": "string"
+ },
+ "created_at": {
+ "type": "string"
+ },
+ "enabled": {
+ "type": "boolean"
+ },
+ "has_token": {
+ "description": "Indicates if a token is configured",
+ "type": "boolean"
+ },
+ "id": {
+ "type": "integer"
+ },
+ "mount_path": {
+ "type": "string"
+ },
+ "namespace": {
+ "type": "string"
+ },
+ "updated_at": {
+ "type": "string"
+ }
+ }
+ },
+ "github_com_pozgo_web-cli_internal_models.VaultStatus": {
+ "type": "object",
+ "properties": {
+ "address": {
+ "type": "string"
+ },
+ "configured": {
+ "description": "Whether Vault is configured",
+ "type": "boolean"
+ },
+ "connected": {
+ "description": "Whether connection test passed",
+ "type": "boolean"
+ },
+ "enabled": {
+ "description": "Whether Vault is enabled",
+ "type": "boolean"
+ },
+ "error": {
+ "type": "string"
+ },
+ "vault_sealed": {
+ "type": "boolean"
+ }
+ }
+ },
+ "github_com_pozgo_web-cli_internal_vault.BashScript": {
+ "type": "object",
+ "properties": {
+ "content": {
+ "type": "string"
+ },
+ "description": {
+ "type": "string"
+ },
+ "filename": {
+ "type": "string"
+ },
+ "group": {
+ "type": "string"
+ },
+ "name": {
+ "type": "string"
+ }
+ }
+ },
+ "github_com_pozgo_web-cli_internal_vault.EnvVariable": {
+ "type": "object",
+ "properties": {
+ "description": {
+ "type": "string"
+ },
+ "group": {
+ "type": "string"
+ },
+ "name": {
+ "type": "string"
+ },
+ "value": {
+ "type": "string"
+ }
+ }
+ },
+ "github_com_pozgo_web-cli_internal_vault.SSHKey": {
+ "type": "object",
+ "properties": {
+ "created_at": {
+ "type": "string"
+ },
+ "group": {
+ "type": "string"
+ },
+ "name": {
+ "type": "string"
+ },
+ "private_key": {
+ "type": "string"
+ }
+ }
+ },
+ "github_com_pozgo_web-cli_internal_vault.Server": {
"type": "object",
"properties": {
+ "group": {
+ "type": "string"
+ },
"ip_address": {
"type": "string"
},
@@ -2690,7 +3804,7 @@ const docTemplate = `{
}
}
},
- "server.CurrentUserResponse": {
+ "internal_server.CurrentUserResponse": {
"description": "Current system user information",
"type": "object",
"properties": {
@@ -2716,7 +3830,7 @@ const docTemplate = `{
}
}
},
- "server.ErrorResponse": {
+ "internal_server.ErrorResponse": {
"description": "Error response returned by the API",
"type": "object",
"properties": {
@@ -2726,7 +3840,7 @@ const docTemplate = `{
}
}
},
- "server.ShellInfo": {
+ "internal_server.ShellInfo": {
"description": "Information about an available shell",
"type": "object",
"properties": {
@@ -2739,6 +3853,27 @@ const docTemplate = `{
"example": "/bin/bash"
}
}
+ },
+ "internal_server.StreamMessage": {
+ "type": "object",
+ "properties": {
+ "data": {
+ "description": "output chunk or error message",
+ "type": "string"
+ },
+ "result": {
+ "description": "final result",
+ "allOf": [
+ {
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.ScriptResult"
+ }
+ ]
+ },
+ "type": {
+ "description": "\"output\", \"result\", \"error\"",
+ "type": "string"
+ }
+ }
}
},
"securityDefinitions": {
diff --git a/docs/images/admin-servers.png b/docs/images/admin-servers.png
index b97f364..63a6bb5 100644
Binary files a/docs/images/admin-servers.png and b/docs/images/admin-servers.png differ
diff --git a/docs/images/admin-ssh-keys.png b/docs/images/admin-ssh-keys.png
index 2a9fa1d..b31e7c0 100644
Binary files a/docs/images/admin-ssh-keys.png and b/docs/images/admin-ssh-keys.png differ
diff --git a/docs/images/admin-vault-integration.png b/docs/images/admin-vault-integration.png
new file mode 100644
index 0000000..ef72c0c
Binary files /dev/null and b/docs/images/admin-vault-integration.png differ
diff --git a/docs/images/command-history.png b/docs/images/command-history.png
index 9b42044..23d9328 100644
Binary files a/docs/images/command-history.png and b/docs/images/command-history.png differ
diff --git a/docs/images/dashboard.png b/docs/images/dashboard.png
index bf11c37..4c217b3 100644
Binary files a/docs/images/dashboard.png and b/docs/images/dashboard.png differ
diff --git a/docs/images/interactive-terminal-dropdown.png b/docs/images/interactive-terminal-dropdown.png
new file mode 100644
index 0000000..3799294
Binary files /dev/null and b/docs/images/interactive-terminal-dropdown.png differ
diff --git a/docs/images/interactive-terminal.png b/docs/images/interactive-terminal.png
index 0be6783..40f0b32 100644
Binary files a/docs/images/interactive-terminal.png and b/docs/images/interactive-terminal.png differ
diff --git a/docs/images/local-commands.png b/docs/images/local-commands.png
index ec9f9b3..801e473 100644
Binary files a/docs/images/local-commands.png and b/docs/images/local-commands.png differ
diff --git a/docs/images/remote-commands.png b/docs/images/remote-commands.png
index 9d1a9ae..28a8700 100644
Binary files a/docs/images/remote-commands.png and b/docs/images/remote-commands.png differ
diff --git a/docs/images/remote-script.png b/docs/images/remote-script.png
index 72255d0..8ee01f3 100644
Binary files a/docs/images/remote-script.png and b/docs/images/remote-script.png differ
diff --git a/docs/images/saved-commands.png b/docs/images/saved-commands.png
index b63ae06..582fa7f 100644
Binary files a/docs/images/saved-commands.png and b/docs/images/saved-commands.png differ
diff --git a/docs/swagger.json b/docs/swagger.json
index 5ab8c04..0914d0d 100644
--- a/docs/swagger.json
+++ b/docs/swagger.json
@@ -36,20 +36,28 @@
"Bash Scripts"
],
"summary": "List all bash scripts",
+ "parameters": [
+ {
+ "type": "string",
+ "description": "Filter by group name",
+ "name": "group",
+ "in": "query"
+ }
+ ],
"responses": {
"200": {
"description": "OK",
"schema": {
"type": "array",
"items": {
- "$ref": "#/definitions/models.BashScriptResponse"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.BashScriptResponse"
}
}
},
"500": {
"description": "Internal Server Error",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -78,7 +86,7 @@
"in": "body",
"required": true,
"schema": {
- "$ref": "#/definitions/models.BashScriptCreate"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.BashScriptCreate"
}
}
],
@@ -86,19 +94,19 @@
"201": {
"description": "Created",
"schema": {
- "$ref": "#/definitions/models.BashScriptResponse"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.BashScriptResponse"
}
},
"400": {
"description": "Bad Request",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
},
"500": {
"description": "Internal Server Error",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -129,7 +137,64 @@
"in": "body",
"required": true,
"schema": {
- "$ref": "#/definitions/models.ScriptExecution"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.ScriptExecution"
+ }
+ }
+ ],
+ "responses": {
+ "200": {
+ "description": "OK",
+ "schema": {
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.ScriptResult"
+ }
+ },
+ "400": {
+ "description": "Bad Request",
+ "schema": {
+ "$ref": "#/definitions/internal_server.ErrorResponse"
+ }
+ },
+ "404": {
+ "description": "Not Found",
+ "schema": {
+ "$ref": "#/definitions/internal_server.ErrorResponse"
+ }
+ },
+ "500": {
+ "description": "Internal Server Error",
+ "schema": {
+ "$ref": "#/definitions/internal_server.ErrorResponse"
+ }
+ }
+ }
+ }
+ },
+ "/bash-scripts/execute/stream": {
+ "post": {
+ "security": [
+ {
+ "BasicAuth": []
+ }
+ ],
+ "description": "Execute a stored bash script locally or remotely with real-time output streaming via SSE",
+ "consumes": [
+ "application/json"
+ ],
+ "produces": [
+ "text/event-stream"
+ ],
+ "tags": [
+ "Bash Scripts"
+ ],
+ "summary": "Execute a bash script with streaming output",
+ "parameters": [
+ {
+ "description": "Script execution request",
+ "name": "execution",
+ "in": "body",
+ "required": true,
+ "schema": {
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.ScriptExecution"
}
}
],
@@ -137,25 +202,62 @@
"200": {
"description": "OK",
"schema": {
- "$ref": "#/definitions/models.ScriptResult"
+ "$ref": "#/definitions/internal_server.StreamMessage"
}
},
"400": {
"description": "Bad Request",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
},
"404": {
"description": "Not Found",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
+ }
+ },
+ "500": {
+ "description": "Internal Server Error",
+ "schema": {
+ "$ref": "#/definitions/internal_server.ErrorResponse"
+ }
+ }
+ }
+ }
+ },
+ "/bash-scripts/groups": {
+ "get": {
+ "security": [
+ {
+ "BasicAuth": []
+ }
+ ],
+ "description": "Get a list of all distinct group names for bash scripts",
+ "consumes": [
+ "application/json"
+ ],
+ "produces": [
+ "application/json"
+ ],
+ "tags": [
+ "Bash Scripts"
+ ],
+ "summary": "List all bash script groups",
+ "responses": {
+ "200": {
+ "description": "OK",
+ "schema": {
+ "type": "array",
+ "items": {
+ "type": "string"
+ }
}
},
"500": {
"description": "Internal Server Error",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -199,19 +301,19 @@
"200": {
"description": "OK",
"schema": {
- "$ref": "#/definitions/models.BashScriptResponse"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.BashScriptResponse"
}
},
"400": {
"description": "Bad Request",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
},
"404": {
"description": "Not Found",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -247,7 +349,7 @@
"in": "body",
"required": true,
"schema": {
- "$ref": "#/definitions/models.BashScriptUpdate"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.BashScriptUpdate"
}
}
],
@@ -255,19 +357,19 @@
"200": {
"description": "OK",
"schema": {
- "$ref": "#/definitions/models.BashScriptResponse"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.BashScriptResponse"
}
},
"400": {
"description": "Bad Request",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
},
"500": {
"description": "Internal Server Error",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -305,13 +407,13 @@
"400": {
"description": "Bad Request",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
},
"500": {
"description": "Internal Server Error",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -350,26 +452,26 @@
"schema": {
"type": "array",
"items": {
- "$ref": "#/definitions/models.ScriptPresetResponse"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.ScriptPresetResponse"
}
}
},
"400": {
"description": "Bad Request",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
},
"404": {
"description": "Not Found",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
},
"500": {
"description": "Internal Server Error",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -400,7 +502,7 @@
"in": "body",
"required": true,
"schema": {
- "$ref": "#/definitions/models.CommandExecution"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.CommandExecution"
}
}
],
@@ -408,25 +510,25 @@
"200": {
"description": "OK",
"schema": {
- "$ref": "#/definitions/models.CommandResult"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.CommandResult"
}
},
"400": {
"description": "Bad Request",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
},
"404": {
"description": "Not Found",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
},
"500": {
"description": "Internal Server Error",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -456,6 +558,12 @@
"description": "Show actual values instead of masked values",
"name": "show_values",
"in": "query"
+ },
+ {
+ "type": "string",
+ "description": "Filter by group name",
+ "name": "group",
+ "in": "query"
}
],
"responses": {
@@ -464,14 +572,14 @@
"schema": {
"type": "array",
"items": {
- "$ref": "#/definitions/models.EnvVariableResponse"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.EnvVariableResponse"
}
}
},
"500": {
"description": "Internal Server Error",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -500,7 +608,7 @@
"in": "body",
"required": true,
"schema": {
- "$ref": "#/definitions/models.EnvVariableCreate"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.EnvVariableCreate"
}
}
],
@@ -508,19 +616,56 @@
"201": {
"description": "Created",
"schema": {
- "$ref": "#/definitions/models.EnvVariableResponse"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.EnvVariableResponse"
}
},
"400": {
"description": "Bad Request",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
+ }
+ },
+ "500": {
+ "description": "Internal Server Error",
+ "schema": {
+ "$ref": "#/definitions/internal_server.ErrorResponse"
+ }
+ }
+ }
+ }
+ },
+ "/env-variables/groups": {
+ "get": {
+ "security": [
+ {
+ "BasicAuth": []
+ }
+ ],
+ "description": "Get a list of all distinct group names for environment variables",
+ "consumes": [
+ "application/json"
+ ],
+ "produces": [
+ "application/json"
+ ],
+ "tags": [
+ "Environment Variables"
+ ],
+ "summary": "List all environment variable groups",
+ "responses": {
+ "200": {
+ "description": "OK",
+ "schema": {
+ "type": "array",
+ "items": {
+ "type": "string"
+ }
}
},
"500": {
"description": "Internal Server Error",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -563,19 +708,19 @@
"200": {
"description": "OK",
"schema": {
- "$ref": "#/definitions/models.EnvVariableResponse"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.EnvVariableResponse"
}
},
"400": {
"description": "Bad Request",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
},
"404": {
"description": "Not Found",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -611,7 +756,7 @@
"in": "body",
"required": true,
"schema": {
- "$ref": "#/definitions/models.EnvVariableUpdate"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.EnvVariableUpdate"
}
}
],
@@ -619,19 +764,19 @@
"200": {
"description": "OK",
"schema": {
- "$ref": "#/definitions/models.EnvVariableResponse"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.EnvVariableResponse"
}
},
"400": {
"description": "Bad Request",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
},
"500": {
"description": "Internal Server Error",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -669,13 +814,13 @@
"400": {
"description": "Bad Request",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
},
"500": {
"description": "Internal Server Error",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -720,14 +865,14 @@
"schema": {
"type": "array",
"items": {
- "$ref": "#/definitions/models.CommandHistory"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.CommandHistory"
}
}
},
"500": {
"description": "Internal Server Error",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -764,19 +909,19 @@
"200": {
"description": "OK",
"schema": {
- "$ref": "#/definitions/models.CommandHistory"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.CommandHistory"
}
},
"400": {
"description": "Bad Request",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
},
"404": {
"description": "Not Found",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -800,20 +945,28 @@
"SSH Keys"
],
"summary": "List all SSH keys",
+ "parameters": [
+ {
+ "type": "string",
+ "description": "Filter by group name",
+ "name": "group",
+ "in": "query"
+ }
+ ],
"responses": {
"200": {
"description": "OK",
"schema": {
"type": "array",
"items": {
- "$ref": "#/definitions/models.SSHKey"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.SSHKey"
}
}
},
"500": {
"description": "Internal Server Error",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -842,7 +995,7 @@
"in": "body",
"required": true,
"schema": {
- "$ref": "#/definitions/models.SSHKeyCreate"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.SSHKeyCreate"
}
}
],
@@ -850,19 +1003,56 @@
"201": {
"description": "Created",
"schema": {
- "$ref": "#/definitions/models.SSHKey"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.SSHKey"
}
},
"400": {
"description": "Bad Request",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
},
"500": {
"description": "Internal Server Error",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
+ }
+ }
+ }
+ }
+ },
+ "/keys/groups": {
+ "get": {
+ "security": [
+ {
+ "BasicAuth": []
+ }
+ ],
+ "description": "Get a list of all distinct group names for SSH keys",
+ "consumes": [
+ "application/json"
+ ],
+ "produces": [
+ "application/json"
+ ],
+ "tags": [
+ "SSH Keys"
+ ],
+ "summary": "List all SSH key groups",
+ "responses": {
+ "200": {
+ "description": "OK",
+ "schema": {
+ "type": "array",
+ "items": {
+ "type": "string"
+ }
+ }
+ },
+ "500": {
+ "description": "Internal Server Error",
+ "schema": {
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -899,19 +1089,19 @@
"200": {
"description": "OK",
"schema": {
- "$ref": "#/definitions/models.SSHKey"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.SSHKey"
}
},
"400": {
"description": "Bad Request",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
},
"404": {
"description": "Not Found",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -947,7 +1137,7 @@
"in": "body",
"required": true,
"schema": {
- "$ref": "#/definitions/models.SSHKeyUpdate"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.SSHKeyUpdate"
}
}
],
@@ -955,19 +1145,19 @@
"200": {
"description": "OK",
"schema": {
- "$ref": "#/definitions/models.SSHKey"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.SSHKey"
}
},
"400": {
"description": "Bad Request",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
},
"500": {
"description": "Internal Server Error",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -1005,13 +1195,13 @@
"400": {
"description": "Bad Request",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
},
"500": {
"description": "Internal Server Error",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -1041,14 +1231,14 @@
"schema": {
"type": "array",
"items": {
- "$ref": "#/definitions/models.LocalUser"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.LocalUser"
}
}
},
"500": {
"description": "Internal Server Error",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -1077,7 +1267,7 @@
"in": "body",
"required": true,
"schema": {
- "$ref": "#/definitions/models.LocalUserCreate"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.LocalUserCreate"
}
}
],
@@ -1085,19 +1275,19 @@
"201": {
"description": "Created",
"schema": {
- "$ref": "#/definitions/models.LocalUser"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.LocalUser"
}
},
"400": {
"description": "Bad Request",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
},
"500": {
"description": "Internal Server Error",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -1134,19 +1324,19 @@
"200": {
"description": "OK",
"schema": {
- "$ref": "#/definitions/models.LocalUser"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.LocalUser"
}
},
"400": {
"description": "Bad Request",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
},
"404": {
"description": "Not Found",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -1182,7 +1372,7 @@
"in": "body",
"required": true,
"schema": {
- "$ref": "#/definitions/models.LocalUserUpdate"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.LocalUserUpdate"
}
}
],
@@ -1190,19 +1380,19 @@
"200": {
"description": "OK",
"schema": {
- "$ref": "#/definitions/models.LocalUser"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.LocalUser"
}
},
"400": {
"description": "Bad Request",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
},
"500": {
"description": "Internal Server Error",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -1240,13 +1430,13 @@
"400": {
"description": "Bad Request",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
},
"500": {
"description": "Internal Server Error",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -1276,14 +1466,14 @@
"schema": {
"type": "array",
"items": {
- "$ref": "#/definitions/models.SavedCommand"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.SavedCommand"
}
}
},
"500": {
"description": "Internal Server Error",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -1312,7 +1502,7 @@
"in": "body",
"required": true,
"schema": {
- "$ref": "#/definitions/models.SavedCommandCreate"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.SavedCommandCreate"
}
}
],
@@ -1320,19 +1510,19 @@
"201": {
"description": "Created",
"schema": {
- "$ref": "#/definitions/models.SavedCommand"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.SavedCommand"
}
},
"400": {
"description": "Bad Request",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
},
"500": {
"description": "Internal Server Error",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -1369,19 +1559,19 @@
"200": {
"description": "OK",
"schema": {
- "$ref": "#/definitions/models.SavedCommand"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.SavedCommand"
}
},
"400": {
"description": "Bad Request",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
},
"404": {
"description": "Not Found",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -1417,7 +1607,7 @@
"in": "body",
"required": true,
"schema": {
- "$ref": "#/definitions/models.SavedCommandUpdate"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.SavedCommandUpdate"
}
}
],
@@ -1425,19 +1615,19 @@
"200": {
"description": "OK",
"schema": {
- "$ref": "#/definitions/models.SavedCommand"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.SavedCommand"
}
},
"400": {
"description": "Bad Request",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
},
"500": {
"description": "Internal Server Error",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -1475,13 +1665,13 @@
"400": {
"description": "Bad Request",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
},
"500": {
"description": "Internal Server Error",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -1511,14 +1701,14 @@
"schema": {
"type": "array",
"items": {
- "$ref": "#/definitions/models.ScriptPresetResponse"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.ScriptPresetResponse"
}
}
},
"500": {
"description": "Internal Server Error",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -1547,7 +1737,7 @@
"in": "body",
"required": true,
"schema": {
- "$ref": "#/definitions/models.ScriptPresetCreate"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.ScriptPresetCreate"
}
}
],
@@ -1555,19 +1745,19 @@
"201": {
"description": "Created",
"schema": {
- "$ref": "#/definitions/models.ScriptPresetResponse"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.ScriptPresetResponse"
}
},
"400": {
"description": "Bad Request",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
},
"500": {
"description": "Internal Server Error",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -1604,19 +1794,19 @@
"200": {
"description": "OK",
"schema": {
- "$ref": "#/definitions/models.ScriptPresetResponse"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.ScriptPresetResponse"
}
},
"400": {
"description": "Bad Request",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
},
"404": {
"description": "Not Found",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -1652,7 +1842,7 @@
"in": "body",
"required": true,
"schema": {
- "$ref": "#/definitions/models.ScriptPresetUpdate"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.ScriptPresetUpdate"
}
}
],
@@ -1660,19 +1850,19 @@
"200": {
"description": "OK",
"schema": {
- "$ref": "#/definitions/models.ScriptPresetResponse"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.ScriptPresetResponse"
}
},
"400": {
"description": "Bad Request",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
},
"500": {
"description": "Internal Server Error",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -1710,13 +1900,13 @@
"400": {
"description": "Bad Request",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
},
"500": {
"description": "Internal Server Error",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -1740,20 +1930,28 @@
"Servers"
],
"summary": "List all servers",
+ "parameters": [
+ {
+ "type": "string",
+ "description": "Filter by group name",
+ "name": "group",
+ "in": "query"
+ }
+ ],
"responses": {
"200": {
"description": "OK",
"schema": {
"type": "array",
"items": {
- "$ref": "#/definitions/models.Server"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.Server"
}
}
},
"500": {
"description": "Internal Server Error",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -1782,7 +1980,7 @@
"in": "body",
"required": true,
"schema": {
- "$ref": "#/definitions/models.ServerCreate"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.ServerCreate"
}
}
],
@@ -1790,19 +1988,56 @@
"201": {
"description": "Created",
"schema": {
- "$ref": "#/definitions/models.Server"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.Server"
}
},
"400": {
"description": "Bad Request",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
+ }
+ },
+ "500": {
+ "description": "Internal Server Error",
+ "schema": {
+ "$ref": "#/definitions/internal_server.ErrorResponse"
+ }
+ }
+ }
+ }
+ },
+ "/servers/groups": {
+ "get": {
+ "security": [
+ {
+ "BasicAuth": []
+ }
+ ],
+ "description": "Get a list of all distinct group names for servers",
+ "consumes": [
+ "application/json"
+ ],
+ "produces": [
+ "application/json"
+ ],
+ "tags": [
+ "Servers"
+ ],
+ "summary": "List all server groups",
+ "responses": {
+ "200": {
+ "description": "OK",
+ "schema": {
+ "type": "array",
+ "items": {
+ "type": "string"
+ }
}
},
"500": {
"description": "Internal Server Error",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -1839,19 +2074,19 @@
"200": {
"description": "OK",
"schema": {
- "$ref": "#/definitions/models.Server"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.Server"
}
},
"400": {
"description": "Bad Request",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
},
"404": {
"description": "Not Found",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -1887,7 +2122,7 @@
"in": "body",
"required": true,
"schema": {
- "$ref": "#/definitions/models.ServerUpdate"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.ServerUpdate"
}
}
],
@@ -1895,19 +2130,19 @@
"200": {
"description": "OK",
"schema": {
- "$ref": "#/definitions/models.Server"
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.Server"
}
},
"400": {
"description": "Bad Request",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
},
"500": {
"description": "Internal Server Error",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -1945,13 +2180,13 @@
"400": {
"description": "Bad Request",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
},
"500": {
"description": "Internal Server Error",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -1979,13 +2214,13 @@
"200": {
"description": "OK",
"schema": {
- "$ref": "#/definitions/server.CurrentUserResponse"
+ "$ref": "#/definitions/internal_server.CurrentUserResponse"
}
},
"500": {
"description": "Internal Server Error",
"schema": {
- "$ref": "#/definitions/server.ErrorResponse"
+ "$ref": "#/definitions/internal_server.ErrorResponse"
}
}
}
@@ -2015,81 +2250,714 @@
"schema": {
"type": "array",
"items": {
- "$ref": "#/definitions/server.ShellInfo"
+ "$ref": "#/definitions/internal_server.ShellInfo"
}
}
}
}
}
- }
- },
- "definitions": {
- "models.BashScriptCreate": {
- "type": "object",
- "required": [
- "content",
- "name"
- ],
- "properties": {
- "content": {
- "type": "string"
- },
- "description": {
- "type": "string"
- },
- "filename": {
- "type": "string"
- },
- "name": {
- "type": "string"
- }
- }
- },
- "models.BashScriptResponse": {
- "type": "object",
- "properties": {
- "content": {
- "description": "Only included when specifically requested",
- "type": "string"
- },
- "created_at": {
- "type": "string"
- },
- "description": {
- "type": "string"
- },
- "filename": {
- "type": "string"
- },
- "id": {
- "type": "integer"
- },
- "name": {
- "type": "string"
- },
- "updated_at": {
- "type": "string"
- }
- }
},
- "models.BashScriptUpdate": {
- "type": "object",
- "properties": {
- "content": {
- "type": "string"
- },
- "description": {
- "type": "string"
- },
- "filename": {
- "type": "string"
+ "/vault/bash-scripts": {
+ "get": {
+ "security": [
+ {
+ "BasicAuth": []
+ }
+ ],
+ "description": "Retrieve all bash scripts stored in Vault",
+ "produces": [
+ "application/json"
+ ],
+ "tags": [
+ "Vault"
+ ],
+ "summary": "List bash scripts from Vault",
+ "responses": {
+ "200": {
+ "description": "OK",
+ "schema": {
+ "type": "array",
+ "items": {
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_vault.BashScript"
+ }
+ }
+ },
+ "400": {
+ "description": "Bad Request",
+ "schema": {
+ "$ref": "#/definitions/internal_server.ErrorResponse"
+ }
+ },
+ "500": {
+ "description": "Internal Server Error",
+ "schema": {
+ "$ref": "#/definitions/internal_server.ErrorResponse"
+ }
+ }
+ }
+ },
+ "post": {
+ "security": [
+ {
+ "BasicAuth": []
+ }
+ ],
+ "description": "Create a new bash script in HashiCorp Vault storage",
+ "consumes": [
+ "application/json"
+ ],
+ "produces": [
+ "application/json"
+ ],
+ "tags": [
+ "Vault"
+ ],
+ "summary": "Store bash script in Vault",
+ "parameters": [
+ {
+ "description": "Bash script data",
+ "name": "script",
+ "in": "body",
+ "required": true,
+ "schema": {
+ "type": "object"
+ }
+ }
+ ],
+ "responses": {
+ "201": {
+ "description": "Created script info with source field",
+ "schema": {
+ "type": "object",
+ "additionalProperties": true
+ }
+ },
+ "400": {
+ "description": "Invalid request or Vault not configured",
+ "schema": {
+ "type": "string"
+ }
+ },
+ "500": {
+ "description": "Failed to store script",
+ "schema": {
+ "type": "string"
+ }
+ }
+ }
+ }
+ },
+ "/vault/config": {
+ "get": {
+ "security": [
+ {
+ "BasicAuth": []
+ }
+ ],
+ "description": "Retrieve the current Vault configuration (token is never returned)",
+ "produces": [
+ "application/json"
+ ],
+ "tags": [
+ "Vault"
+ ],
+ "summary": "Get Vault configuration",
+ "responses": {
+ "200": {
+ "description": "OK",
+ "schema": {
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.VaultConfigResponse"
+ }
+ },
+ "500": {
+ "description": "Internal Server Error",
+ "schema": {
+ "$ref": "#/definitions/internal_server.ErrorResponse"
+ }
+ }
+ }
+ },
+ "post": {
+ "security": [
+ {
+ "BasicAuth": []
+ }
+ ],
+ "description": "Configure or update the Vault connection settings",
+ "consumes": [
+ "application/json"
+ ],
+ "produces": [
+ "application/json"
+ ],
+ "tags": [
+ "Vault"
+ ],
+ "summary": "Create or update Vault configuration",
+ "parameters": [
+ {
+ "description": "Vault configuration",
+ "name": "config",
+ "in": "body",
+ "required": true,
+ "schema": {
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.VaultConfigCreate"
+ }
+ }
+ ],
+ "responses": {
+ "200": {
+ "description": "OK",
+ "schema": {
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.VaultConfigResponse"
+ }
+ },
+ "400": {
+ "description": "Bad Request",
+ "schema": {
+ "$ref": "#/definitions/internal_server.ErrorResponse"
+ }
+ },
+ "500": {
+ "description": "Internal Server Error",
+ "schema": {
+ "$ref": "#/definitions/internal_server.ErrorResponse"
+ }
+ }
+ }
+ },
+ "delete": {
+ "security": [
+ {
+ "BasicAuth": []
+ }
+ ],
+ "description": "Remove the Vault configuration",
+ "tags": [
+ "Vault"
+ ],
+ "summary": "Delete Vault configuration",
+ "responses": {
+ "204": {
+ "description": "No Content"
+ },
+ "500": {
+ "description": "Internal Server Error",
+ "schema": {
+ "$ref": "#/definitions/internal_server.ErrorResponse"
+ }
+ }
+ }
+ }
+ },
+ "/vault/env-variables": {
+ "get": {
+ "security": [
+ {
+ "BasicAuth": []
+ }
+ ],
+ "description": "Retrieve all environment variables stored in Vault",
+ "produces": [
+ "application/json"
+ ],
+ "tags": [
+ "Vault"
+ ],
+ "summary": "List environment variables from Vault",
+ "responses": {
+ "200": {
+ "description": "OK",
+ "schema": {
+ "type": "array",
+ "items": {
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_vault.EnvVariable"
+ }
+ }
+ },
+ "400": {
+ "description": "Bad Request",
+ "schema": {
+ "$ref": "#/definitions/internal_server.ErrorResponse"
+ }
+ },
+ "500": {
+ "description": "Internal Server Error",
+ "schema": {
+ "$ref": "#/definitions/internal_server.ErrorResponse"
+ }
+ }
+ }
+ },
+ "post": {
+ "security": [
+ {
+ "BasicAuth": []
+ }
+ ],
+ "description": "Store a new environment variable in Vault",
+ "consumes": [
+ "application/json"
+ ],
+ "produces": [
+ "application/json"
+ ],
+ "tags": [
+ "Vault"
+ ],
+ "summary": "Create environment variable in Vault",
+ "parameters": [
+ {
+ "description": "Environment Variable",
+ "name": "envVar",
+ "in": "body",
+ "required": true,
+ "schema": {
+ "type": "object",
+ "properties": {
+ "description": {
+ "type": "string"
+ },
+ "group": {
+ "type": "string"
+ },
+ "name": {
+ "type": "string"
+ },
+ "value": {
+ "type": "string"
+ }
+ }
+ }
+ }
+ ],
+ "responses": {
+ "201": {
+ "description": "Created",
+ "schema": {
+ "type": "object",
+ "properties": {
+ "description": {
+ "type": "string"
+ },
+ "group": {
+ "type": "string"
+ },
+ "name": {
+ "type": "string"
+ },
+ "source": {
+ "type": "string"
+ }
+ }
+ }
+ },
+ "400": {
+ "description": "Bad Request",
+ "schema": {
+ "$ref": "#/definitions/internal_server.ErrorResponse"
+ }
+ },
+ "500": {
+ "description": "Internal Server Error",
+ "schema": {
+ "$ref": "#/definitions/internal_server.ErrorResponse"
+ }
+ }
+ }
+ }
+ },
+ "/vault/servers": {
+ "get": {
+ "security": [
+ {
+ "BasicAuth": []
+ }
+ ],
+ "description": "Retrieve all server configurations stored in Vault",
+ "produces": [
+ "application/json"
+ ],
+ "tags": [
+ "Vault"
+ ],
+ "summary": "List servers from Vault",
+ "responses": {
+ "200": {
+ "description": "OK",
+ "schema": {
+ "type": "array",
+ "items": {
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_vault.Server"
+ }
+ }
+ },
+ "400": {
+ "description": "Bad Request",
+ "schema": {
+ "$ref": "#/definitions/internal_server.ErrorResponse"
+ }
+ },
+ "500": {
+ "description": "Internal Server Error",
+ "schema": {
+ "$ref": "#/definitions/internal_server.ErrorResponse"
+ }
+ }
+ }
+ },
+ "post": {
+ "security": [
+ {
+ "BasicAuth": []
+ }
+ ],
+ "description": "Store a new server configuration in Vault",
+ "consumes": [
+ "application/json"
+ ],
+ "produces": [
+ "application/json"
+ ],
+ "tags": [
+ "Vault"
+ ],
+ "summary": "Create server in Vault",
+ "parameters": [
+ {
+ "description": "Server",
+ "name": "server",
+ "in": "body",
+ "required": true,
+ "schema": {
+ "type": "object",
+ "properties": {
+ "group": {
+ "type": "string"
+ },
+ "ip_address": {
+ "type": "string"
+ },
+ "name": {
+ "type": "string"
+ },
+ "port": {
+ "type": "integer"
+ },
+ "username": {
+ "type": "string"
+ }
+ }
+ }
+ }
+ ],
+ "responses": {
+ "201": {
+ "description": "Created",
+ "schema": {
+ "type": "object",
+ "properties": {
+ "group": {
+ "type": "string"
+ },
+ "ip_address": {
+ "type": "string"
+ },
+ "name": {
+ "type": "string"
+ },
+ "port": {
+ "type": "integer"
+ },
+ "source": {
+ "type": "string"
+ },
+ "username": {
+ "type": "string"
+ }
+ }
+ }
+ },
+ "400": {
+ "description": "Bad Request",
+ "schema": {
+ "$ref": "#/definitions/internal_server.ErrorResponse"
+ }
+ },
+ "500": {
+ "description": "Internal Server Error",
+ "schema": {
+ "$ref": "#/definitions/internal_server.ErrorResponse"
+ }
+ }
+ }
+ }
+ },
+ "/vault/ssh-keys": {
+ "get": {
+ "security": [
+ {
+ "BasicAuth": []
+ }
+ ],
+ "description": "Retrieve all SSH keys stored in Vault",
+ "produces": [
+ "application/json"
+ ],
+ "tags": [
+ "Vault"
+ ],
+ "summary": "List SSH keys from Vault",
+ "responses": {
+ "200": {
+ "description": "OK",
+ "schema": {
+ "type": "array",
+ "items": {
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_vault.SSHKey"
+ }
+ }
+ },
+ "400": {
+ "description": "Bad Request",
+ "schema": {
+ "$ref": "#/definitions/internal_server.ErrorResponse"
+ }
+ },
+ "500": {
+ "description": "Internal Server Error",
+ "schema": {
+ "$ref": "#/definitions/internal_server.ErrorResponse"
+ }
+ }
+ }
+ },
+ "post": {
+ "security": [
+ {
+ "BasicAuth": []
+ }
+ ],
+ "description": "Store a new SSH key in Vault",
+ "consumes": [
+ "application/json"
+ ],
+ "produces": [
+ "application/json"
+ ],
+ "tags": [
+ "Vault"
+ ],
+ "summary": "Create SSH key in Vault",
+ "parameters": [
+ {
+ "description": "SSH Key",
+ "name": "key",
+ "in": "body",
+ "required": true,
+ "schema": {
+ "type": "object",
+ "properties": {
+ "group": {
+ "type": "string"
+ },
+ "name": {
+ "type": "string"
+ },
+ "private_key": {
+ "type": "string"
+ }
+ }
+ }
+ }
+ ],
+ "responses": {
+ "201": {
+ "description": "Created",
+ "schema": {
+ "type": "object",
+ "properties": {
+ "created_at": {
+ "type": "string"
+ },
+ "group": {
+ "type": "string"
+ },
+ "name": {
+ "type": "string"
+ },
+ "source": {
+ "type": "string"
+ }
+ }
+ }
+ },
+ "400": {
+ "description": "Bad Request",
+ "schema": {
+ "$ref": "#/definitions/internal_server.ErrorResponse"
+ }
+ },
+ "500": {
+ "description": "Internal Server Error",
+ "schema": {
+ "$ref": "#/definitions/internal_server.ErrorResponse"
+ }
+ }
+ }
+ }
+ },
+ "/vault/status": {
+ "get": {
+ "security": [
+ {
+ "BasicAuth": []
+ }
+ ],
+ "description": "Check the current Vault connection status",
+ "produces": [
+ "application/json"
+ ],
+ "tags": [
+ "Vault"
+ ],
+ "summary": "Get Vault connection status",
+ "responses": {
+ "200": {
+ "description": "OK",
+ "schema": {
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.VaultStatus"
+ }
+ },
+ "500": {
+ "description": "Internal Server Error",
+ "schema": {
+ "$ref": "#/definitions/internal_server.ErrorResponse"
+ }
+ }
+ }
+ }
+ },
+ "/vault/test": {
+ "post": {
+ "security": [
+ {
+ "BasicAuth": []
+ }
+ ],
+ "description": "Test the connection to Vault and initialize the secrets structure",
+ "produces": [
+ "application/json"
+ ],
+ "tags": [
+ "Vault"
+ ],
+ "summary": "Test Vault connection",
+ "responses": {
+ "200": {
+ "description": "OK",
+ "schema": {
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.VaultStatus"
+ }
+ },
+ "400": {
+ "description": "Bad Request",
+ "schema": {
+ "$ref": "#/definitions/internal_server.ErrorResponse"
+ }
+ },
+ "500": {
+ "description": "Internal Server Error",
+ "schema": {
+ "$ref": "#/definitions/internal_server.ErrorResponse"
+ }
+ }
+ }
+ }
+ }
+ },
+ "definitions": {
+ "github_com_pozgo_web-cli_internal_models.BashScriptCreate": {
+ "type": "object",
+ "required": [
+ "content",
+ "name"
+ ],
+ "properties": {
+ "content": {
+ "type": "string"
+ },
+ "description": {
+ "type": "string"
+ },
+ "filename": {
+ "type": "string"
+ },
+ "group": {
+ "description": "Optional, defaults to \"default\"",
+ "type": "string"
+ },
+ "name": {
+ "type": "string"
+ }
+ }
+ },
+ "github_com_pozgo_web-cli_internal_models.BashScriptResponse": {
+ "type": "object",
+ "properties": {
+ "content": {
+ "description": "Only included when specifically requested",
+ "type": "string"
+ },
+ "created_at": {
+ "type": "string"
+ },
+ "description": {
+ "type": "string"
+ },
+ "filename": {
+ "type": "string"
+ },
+ "group": {
+ "description": "Group/category for organization",
+ "type": "string"
+ },
+ "id": {
+ "type": "integer"
+ },
+ "name": {
+ "type": "string"
+ },
+ "source": {
+ "description": "\"sqlite\" or \"vault\"",
+ "type": "string"
+ },
+ "updated_at": {
+ "type": "string"
+ }
+ }
+ },
+ "github_com_pozgo_web-cli_internal_models.BashScriptUpdate": {
+ "type": "object",
+ "properties": {
+ "content": {
+ "type": "string"
+ },
+ "description": {
+ "type": "string"
+ },
+ "filename": {
+ "type": "string"
+ },
+ "group": {
+ "type": "string"
},
"name": {
"type": "string"
}
}
},
- "models.CommandExecution": {
+ "github_com_pozgo_web-cli_internal_models.CommandExecution": {
"type": "object",
"required": [
"command"
@@ -2107,14 +2975,30 @@
"description": "Optional: save as template with this name",
"type": "string"
},
+ "server_group": {
+ "description": "Server group for remote execution (Vault)",
+ "type": "string"
+ },
"server_id": {
- "description": "Server ID for remote execution",
+ "description": "Server ID for remote execution (SQLite)",
"type": "integer"
},
+ "server_name": {
+ "description": "Server name for remote execution (Vault)",
+ "type": "string"
+ },
+ "ssh_key_group": {
+ "description": "SSH key group for remote execution (Vault)",
+ "type": "string"
+ },
"ssh_key_id": {
- "description": "SSH key ID for remote execution",
+ "description": "SSH key ID for remote execution (SQLite)",
"type": "integer"
},
+ "ssh_key_name": {
+ "description": "SSH key name for remote execution (Vault)",
+ "type": "string"
+ },
"ssh_password": {
"description": "SSH password (for remote, if key auth fails)",
"type": "string"
@@ -2129,7 +3013,7 @@
}
}
},
- "models.CommandHistory": {
+ "github_com_pozgo_web-cli_internal_models.CommandHistory": {
"type": "object",
"properties": {
"command": {
@@ -2162,7 +3046,7 @@
}
}
},
- "models.CommandResult": {
+ "github_com_pozgo_web-cli_internal_models.CommandResult": {
"type": "object",
"properties": {
"command": {
@@ -2186,7 +3070,7 @@
}
}
},
- "models.EnvVariableCreate": {
+ "github_com_pozgo_web-cli_internal_models.EnvVariableCreate": {
"type": "object",
"required": [
"name",
@@ -2196,6 +3080,10 @@
"description": {
"type": "string"
},
+ "group": {
+ "description": "Optional, defaults to \"default\"",
+ "type": "string"
+ },
"name": {
"type": "string"
},
@@ -2204,7 +3092,7 @@
}
}
},
- "models.EnvVariableResponse": {
+ "github_com_pozgo_web-cli_internal_models.EnvVariableResponse": {
"type": "object",
"properties": {
"created_at": {
@@ -2213,12 +3101,20 @@
"description": {
"type": "string"
},
+ "group": {
+ "description": "Group/category for organization",
+ "type": "string"
+ },
"id": {
"type": "integer"
},
"name": {
"type": "string"
},
+ "source": {
+ "description": "\"sqlite\" or \"vault\"",
+ "type": "string"
+ },
"updated_at": {
"type": "string"
},
@@ -2228,12 +3124,15 @@
}
}
},
- "models.EnvVariableUpdate": {
+ "github_com_pozgo_web-cli_internal_models.EnvVariableUpdate": {
"type": "object",
"properties": {
"description": {
"type": "string"
},
+ "group": {
+ "type": "string"
+ },
"name": {
"type": "string"
},
@@ -2242,7 +3141,7 @@
}
}
},
- "models.LocalUser": {
+ "github_com_pozgo_web-cli_internal_models.LocalUser": {
"type": "object",
"properties": {
"created_at": {
@@ -2260,7 +3159,7 @@
}
}
},
- "models.LocalUserCreate": {
+ "github_com_pozgo_web-cli_internal_models.LocalUserCreate": {
"type": "object",
"required": [
"name"
@@ -2272,7 +3171,7 @@
}
}
},
- "models.LocalUserUpdate": {
+ "github_com_pozgo_web-cli_internal_models.LocalUserUpdate": {
"type": "object",
"properties": {
"name": {
@@ -2281,12 +3180,16 @@
}
}
},
- "models.SSHKey": {
+ "github_com_pozgo_web-cli_internal_models.SSHKey": {
"type": "object",
"properties": {
"created_at": {
"type": "string"
},
+ "group": {
+ "description": "Group/category for organization",
+ "type": "string"
+ },
"id": {
"type": "integer"
},
@@ -2297,18 +3200,26 @@
"description": "Decrypted value",
"type": "string"
},
+ "source": {
+ "description": "\"sqlite\" or \"vault\"",
+ "type": "string"
+ },
"updated_at": {
"type": "string"
}
}
},
- "models.SSHKeyCreate": {
+ "github_com_pozgo_web-cli_internal_models.SSHKeyCreate": {
"type": "object",
"required": [
"name",
"private_key"
],
"properties": {
+ "group": {
+ "description": "Optional, defaults to \"default\"",
+ "type": "string"
+ },
"name": {
"type": "string"
},
@@ -2317,9 +3228,12 @@
}
}
},
- "models.SSHKeyUpdate": {
+ "github_com_pozgo_web-cli_internal_models.SSHKeyUpdate": {
"type": "object",
"properties": {
+ "group": {
+ "type": "string"
+ },
"name": {
"type": "string"
},
@@ -2328,7 +3242,7 @@
}
}
},
- "models.SavedCommand": {
+ "github_com_pozgo_web-cli_internal_models.SavedCommand": {
"type": "object",
"properties": {
"command": {
@@ -2370,7 +3284,7 @@
}
}
},
- "models.SavedCommandCreate": {
+ "github_com_pozgo_web-cli_internal_models.SavedCommandCreate": {
"type": "object",
"required": [
"command",
@@ -2404,7 +3318,7 @@
}
}
},
- "models.SavedCommandUpdate": {
+ "github_com_pozgo_web-cli_internal_models.SavedCommandUpdate": {
"type": "object",
"properties": {
"command": {
@@ -2430,19 +3344,30 @@
}
}
},
- "models.ScriptExecution": {
+ "github_com_pozgo_web-cli_internal_models.ScriptExecution": {
"type": "object",
- "required": [
- "script_id"
- ],
"properties": {
+ "env_var_groups": {
+ "description": "Groups of env vars to include (Vault, paired with EnvVarNames)",
+ "type": "array",
+ "items": {
+ "type": "string"
+ }
+ },
"env_var_ids": {
- "description": "Specific env var IDs to include",
+ "description": "Specific env var IDs to include (SQLite)",
"type": "array",
"items": {
"type": "integer"
}
},
+ "env_var_names": {
+ "description": "Names of env vars to include (Vault)",
+ "type": "array",
+ "items": {
+ "type": "string"
+ }
+ },
"include_env_vars": {
"description": "Deprecated: use EnvVarIDs instead",
"type": "boolean"
@@ -2451,18 +3376,42 @@
"description": "True if remote execution",
"type": "boolean"
},
+ "script_group": {
+ "description": "Script group for execution (Vault)",
+ "type": "string"
+ },
"script_id": {
- "description": "ID of the script to execute",
+ "description": "ID of the script to execute (SQLite)",
"type": "integer"
},
+ "script_name": {
+ "description": "Name of the script to execute (Vault)",
+ "type": "string"
+ },
+ "server_group": {
+ "description": "Server group for remote execution (Vault)",
+ "type": "string"
+ },
"server_id": {
- "description": "Server ID for remote execution",
+ "description": "Server ID for remote execution (SQLite)",
"type": "integer"
},
+ "server_name": {
+ "description": "Server name for remote execution (Vault)",
+ "type": "string"
+ },
+ "ssh_key_group": {
+ "description": "SSH key group for remote execution (Vault)",
+ "type": "string"
+ },
"ssh_key_id": {
- "description": "SSH key ID for remote execution",
+ "description": "SSH key ID for remote execution (SQLite)",
"type": "integer"
},
+ "ssh_key_name": {
+ "description": "SSH key name for remote execution (Vault)",
+ "type": "string"
+ },
"ssh_password": {
"description": "SSH password (for remote, if key auth fails)",
"type": "string"
@@ -2477,7 +3426,7 @@
}
}
},
- "models.ScriptPresetCreate": {
+ "github_com_pozgo_web-cli_internal_models.ScriptPresetCreate": {
"type": "object",
"required": [
"name",
@@ -2513,7 +3462,7 @@
}
}
},
- "models.ScriptPresetResponse": {
+ "github_com_pozgo_web-cli_internal_models.ScriptPresetResponse": {
"type": "object",
"properties": {
"created_at": {
@@ -2554,7 +3503,7 @@
}
}
},
- "models.ScriptPresetUpdate": {
+ "github_com_pozgo_web-cli_internal_models.ScriptPresetUpdate": {
"type": "object",
"properties": {
"description": {
@@ -2586,7 +3535,7 @@
}
}
},
- "models.ScriptResult": {
+ "github_com_pozgo_web-cli_internal_models.ScriptResult": {
"type": "object",
"properties": {
"env_vars_injected": {
@@ -2618,12 +3567,16 @@
}
}
},
- "models.Server": {
+ "github_com_pozgo_web-cli_internal_models.Server": {
"type": "object",
"properties": {
"created_at": {
"type": "string"
},
+ "group": {
+ "description": "Group/category for organization",
+ "type": "string"
+ },
"id": {
"type": "integer"
},
@@ -2639,6 +3592,10 @@
"description": "SSH port (default: 22)",
"type": "integer"
},
+ "source": {
+ "description": "\"sqlite\" or \"vault\"",
+ "type": "string"
+ },
"updated_at": {
"type": "string"
},
@@ -2648,9 +3605,13 @@
}
}
},
- "models.ServerCreate": {
+ "github_com_pozgo_web-cli_internal_models.ServerCreate": {
"type": "object",
"properties": {
+ "group": {
+ "description": "Optional, defaults to \"default\"",
+ "type": "string"
+ },
"ip_address": {
"type": "string"
},
@@ -2667,9 +3628,162 @@
}
}
},
- "models.ServerUpdate": {
+ "github_com_pozgo_web-cli_internal_models.ServerUpdate": {
+ "type": "object",
+ "properties": {
+ "group": {
+ "type": "string"
+ },
+ "ip_address": {
+ "type": "string"
+ },
+ "name": {
+ "type": "string"
+ },
+ "port": {
+ "type": "integer"
+ },
+ "username": {
+ "type": "string"
+ }
+ }
+ },
+ "github_com_pozgo_web-cli_internal_models.VaultConfigCreate": {
+ "type": "object",
+ "properties": {
+ "address": {
+ "type": "string"
+ },
+ "enabled": {
+ "type": "boolean"
+ },
+ "mount_path": {
+ "type": "string"
+ },
+ "namespace": {
+ "type": "string"
+ },
+ "token": {
+ "type": "string"
+ }
+ }
+ },
+ "github_com_pozgo_web-cli_internal_models.VaultConfigResponse": {
+ "type": "object",
+ "properties": {
+ "address": {
+ "type": "string"
+ },
+ "created_at": {
+ "type": "string"
+ },
+ "enabled": {
+ "type": "boolean"
+ },
+ "has_token": {
+ "description": "Indicates if a token is configured",
+ "type": "boolean"
+ },
+ "id": {
+ "type": "integer"
+ },
+ "mount_path": {
+ "type": "string"
+ },
+ "namespace": {
+ "type": "string"
+ },
+ "updated_at": {
+ "type": "string"
+ }
+ }
+ },
+ "github_com_pozgo_web-cli_internal_models.VaultStatus": {
+ "type": "object",
+ "properties": {
+ "address": {
+ "type": "string"
+ },
+ "configured": {
+ "description": "Whether Vault is configured",
+ "type": "boolean"
+ },
+ "connected": {
+ "description": "Whether connection test passed",
+ "type": "boolean"
+ },
+ "enabled": {
+ "description": "Whether Vault is enabled",
+ "type": "boolean"
+ },
+ "error": {
+ "type": "string"
+ },
+ "vault_sealed": {
+ "type": "boolean"
+ }
+ }
+ },
+ "github_com_pozgo_web-cli_internal_vault.BashScript": {
+ "type": "object",
+ "properties": {
+ "content": {
+ "type": "string"
+ },
+ "description": {
+ "type": "string"
+ },
+ "filename": {
+ "type": "string"
+ },
+ "group": {
+ "type": "string"
+ },
+ "name": {
+ "type": "string"
+ }
+ }
+ },
+ "github_com_pozgo_web-cli_internal_vault.EnvVariable": {
+ "type": "object",
+ "properties": {
+ "description": {
+ "type": "string"
+ },
+ "group": {
+ "type": "string"
+ },
+ "name": {
+ "type": "string"
+ },
+ "value": {
+ "type": "string"
+ }
+ }
+ },
+ "github_com_pozgo_web-cli_internal_vault.SSHKey": {
+ "type": "object",
+ "properties": {
+ "created_at": {
+ "type": "string"
+ },
+ "group": {
+ "type": "string"
+ },
+ "name": {
+ "type": "string"
+ },
+ "private_key": {
+ "type": "string"
+ }
+ }
+ },
+ "github_com_pozgo_web-cli_internal_vault.Server": {
"type": "object",
"properties": {
+ "group": {
+ "type": "string"
+ },
"ip_address": {
"type": "string"
},
@@ -2684,7 +3798,7 @@
}
}
},
- "server.CurrentUserResponse": {
+ "internal_server.CurrentUserResponse": {
"description": "Current system user information",
"type": "object",
"properties": {
@@ -2710,7 +3824,7 @@
}
}
},
- "server.ErrorResponse": {
+ "internal_server.ErrorResponse": {
"description": "Error response returned by the API",
"type": "object",
"properties": {
@@ -2720,7 +3834,7 @@
}
}
},
- "server.ShellInfo": {
+ "internal_server.ShellInfo": {
"description": "Information about an available shell",
"type": "object",
"properties": {
@@ -2733,6 +3847,27 @@
"example": "/bin/bash"
}
}
+ },
+ "internal_server.StreamMessage": {
+ "type": "object",
+ "properties": {
+ "data": {
+ "description": "output chunk or error message",
+ "type": "string"
+ },
+ "result": {
+ "description": "final result",
+ "allOf": [
+ {
+ "$ref": "#/definitions/github_com_pozgo_web-cli_internal_models.ScriptResult"
+ }
+ ]
+ },
+ "type": {
+ "description": "\"output\", \"result\", \"error\"",
+ "type": "string"
+ }
+ }
}
},
"securityDefinitions": {
diff --git a/docs/swagger.yaml b/docs/swagger.yaml
index 0c5b5ea..07906ae 100644
--- a/docs/swagger.yaml
+++ b/docs/swagger.yaml
@@ -1,6 +1,6 @@
basePath: /api
definitions:
- models.BashScriptCreate:
+ github_com_pozgo_web-cli_internal_models.BashScriptCreate:
properties:
content:
type: string
@@ -8,13 +8,16 @@ definitions:
type: string
filename:
type: string
+ group:
+ description: Optional, defaults to "default"
+ type: string
name:
type: string
required:
- content
- name
type: object
- models.BashScriptResponse:
+ github_com_pozgo_web-cli_internal_models.BashScriptResponse:
properties:
content:
description: Only included when specifically requested
@@ -25,14 +28,20 @@ definitions:
type: string
filename:
type: string
+ group:
+ description: Group/category for organization
+ type: string
id:
type: integer
name:
type: string
+ source:
+ description: '"sqlite" or "vault"'
+ type: string
updated_at:
type: string
type: object
- models.BashScriptUpdate:
+ github_com_pozgo_web-cli_internal_models.BashScriptUpdate:
properties:
content:
type: string
@@ -40,10 +49,12 @@ definitions:
type: string
filename:
type: string
+ group:
+ type: string
name:
type: string
type: object
- models.CommandExecution:
+ github_com_pozgo_web-cli_internal_models.CommandExecution:
properties:
command:
description: Command to execute
@@ -54,12 +65,24 @@ definitions:
save_as:
description: 'Optional: save as template with this name'
type: string
+ server_group:
+ description: Server group for remote execution (Vault)
+ type: string
server_id:
- description: Server ID for remote execution
+ description: Server ID for remote execution (SQLite)
type: integer
+ server_name:
+ description: Server name for remote execution (Vault)
+ type: string
+ ssh_key_group:
+ description: SSH key group for remote execution (Vault)
+ type: string
ssh_key_id:
- description: SSH key ID for remote execution
+ description: SSH key ID for remote execution (SQLite)
type: integer
+ ssh_key_name:
+ description: SSH key name for remote execution (Vault)
+ type: string
ssh_password:
description: SSH password (for remote, if key auth fails)
type: string
@@ -72,7 +95,7 @@ definitions:
required:
- command
type: object
- models.CommandHistory:
+ github_com_pozgo_web-cli_internal_models.CommandHistory:
properties:
command:
description: Decrypted value
@@ -95,7 +118,7 @@ definitions:
description: User who executed the command (for local commands)
type: string
type: object
- models.CommandResult:
+ github_com_pozgo_web-cli_internal_models.CommandResult:
properties:
command:
type: string
@@ -111,10 +134,13 @@ definitions:
user:
type: string
type: object
- models.EnvVariableCreate:
+ github_com_pozgo_web-cli_internal_models.EnvVariableCreate:
properties:
description:
type: string
+ group:
+ description: Optional, defaults to "default"
+ type: string
name:
type: string
value:
@@ -123,32 +149,40 @@ definitions:
- name
- value
type: object
- models.EnvVariableResponse:
+ github_com_pozgo_web-cli_internal_models.EnvVariableResponse:
properties:
created_at:
type: string
description:
type: string
+ group:
+ description: Group/category for organization
+ type: string
id:
type: integer
name:
type: string
+ source:
+ description: '"sqlite" or "vault"'
+ type: string
updated_at:
type: string
value:
description: Will be masked unless explicitly requested
type: string
type: object
- models.EnvVariableUpdate:
+ github_com_pozgo_web-cli_internal_models.EnvVariableUpdate:
properties:
description:
type: string
+ group:
+ type: string
name:
type: string
value:
type: string
type: object
- models.LocalUser:
+ github_com_pozgo_web-cli_internal_models.LocalUser:
properties:
created_at:
type: string
@@ -160,7 +194,7 @@ definitions:
updated_at:
type: string
type: object
- models.LocalUserCreate:
+ github_com_pozgo_web-cli_internal_models.LocalUserCreate:
properties:
name:
description: Unix username
@@ -168,16 +202,19 @@ definitions:
required:
- name
type: object
- models.LocalUserUpdate:
+ github_com_pozgo_web-cli_internal_models.LocalUserUpdate:
properties:
name:
description: Unix username
type: string
type: object
- models.SSHKey:
+ github_com_pozgo_web-cli_internal_models.SSHKey:
properties:
created_at:
type: string
+ group:
+ description: Group/category for organization
+ type: string
id:
type: integer
name:
@@ -185,11 +222,17 @@ definitions:
private_key:
description: Decrypted value
type: string
+ source:
+ description: '"sqlite" or "vault"'
+ type: string
updated_at:
type: string
type: object
- models.SSHKeyCreate:
+ github_com_pozgo_web-cli_internal_models.SSHKeyCreate:
properties:
+ group:
+ description: Optional, defaults to "default"
+ type: string
name:
type: string
private_key:
@@ -198,14 +241,16 @@ definitions:
- name
- private_key
type: object
- models.SSHKeyUpdate:
+ github_com_pozgo_web-cli_internal_models.SSHKeyUpdate:
properties:
+ group:
+ type: string
name:
type: string
private_key:
type: string
type: object
- models.SavedCommand:
+ github_com_pozgo_web-cli_internal_models.SavedCommand:
properties:
command:
description: The actual command to execute
@@ -235,7 +280,7 @@ definitions:
description: 'User to run as (default: root)'
type: string
type: object
- models.SavedCommandCreate:
+ github_com_pozgo_web-cli_internal_models.SavedCommandCreate:
properties:
command:
type: string
@@ -259,7 +304,7 @@ definitions:
- command
- name
type: object
- models.SavedCommandUpdate:
+ github_com_pozgo_web-cli_internal_models.SavedCommandUpdate:
properties:
command:
type: string
@@ -276,28 +321,56 @@ definitions:
user:
type: string
type: object
- models.ScriptExecution:
+ github_com_pozgo_web-cli_internal_models.ScriptExecution:
properties:
+ env_var_groups:
+ description: Groups of env vars to include (Vault, paired with EnvVarNames)
+ items:
+ type: string
+ type: array
env_var_ids:
- description: Specific env var IDs to include
+ description: Specific env var IDs to include (SQLite)
items:
type: integer
type: array
+ env_var_names:
+ description: Names of env vars to include (Vault)
+ items:
+ type: string
+ type: array
include_env_vars:
description: 'Deprecated: use EnvVarIDs instead'
type: boolean
is_remote:
description: True if remote execution
type: boolean
+ script_group:
+ description: Script group for execution (Vault)
+ type: string
script_id:
- description: ID of the script to execute
+ description: ID of the script to execute (SQLite)
type: integer
+ script_name:
+ description: Name of the script to execute (Vault)
+ type: string
+ server_group:
+ description: Server group for remote execution (Vault)
+ type: string
server_id:
- description: Server ID for remote execution
+ description: Server ID for remote execution (SQLite)
type: integer
+ server_name:
+ description: Server name for remote execution (Vault)
+ type: string
+ ssh_key_group:
+ description: SSH key group for remote execution (Vault)
+ type: string
ssh_key_id:
- description: SSH key ID for remote execution
+ description: SSH key ID for remote execution (SQLite)
type: integer
+ ssh_key_name:
+ description: SSH key name for remote execution (Vault)
+ type: string
ssh_password:
description: SSH password (for remote, if key auth fails)
type: string
@@ -307,10 +380,8 @@ definitions:
user:
description: 'User to run as (default: root)'
type: string
- required:
- - script_id
type: object
- models.ScriptPresetCreate:
+ github_com_pozgo_web-cli_internal_models.ScriptPresetCreate:
properties:
description:
type: string
@@ -334,7 +405,7 @@ definitions:
- name
- script_id
type: object
- models.ScriptPresetResponse:
+ github_com_pozgo_web-cli_internal_models.ScriptPresetResponse:
properties:
created_at:
type: string
@@ -361,7 +432,7 @@ definitions:
user:
type: string
type: object
- models.ScriptPresetUpdate:
+ github_com_pozgo_web-cli_internal_models.ScriptPresetUpdate:
properties:
description:
type: string
@@ -382,7 +453,7 @@ definitions:
user:
type: string
type: object
- models.ScriptResult:
+ github_com_pozgo_web-cli_internal_models.ScriptResult:
properties:
env_vars_injected:
description: Number of env vars injected
@@ -404,10 +475,13 @@ definitions:
user:
type: string
type: object
- models.Server:
+ github_com_pozgo_web-cli_internal_models.Server:
properties:
created_at:
type: string
+ group:
+ description: Group/category for organization
+ type: string
id:
type: integer
ip_address:
@@ -419,14 +493,20 @@ definitions:
port:
description: 'SSH port (default: 22)'
type: integer
+ source:
+ description: '"sqlite" or "vault"'
+ type: string
updated_at:
type: string
username:
description: SSH username for remote connections
type: string
type: object
- models.ServerCreate:
+ github_com_pozgo_web-cli_internal_models.ServerCreate:
properties:
+ group:
+ description: Optional, defaults to "default"
+ type: string
ip_address:
type: string
name:
@@ -438,8 +518,10 @@ definitions:
description: SSH username for remote connections
type: string
type: object
- models.ServerUpdate:
+ github_com_pozgo_web-cli_internal_models.ServerUpdate:
properties:
+ group:
+ type: string
ip_address:
type: string
name:
@@ -449,7 +531,106 @@ definitions:
username:
type: string
type: object
- server.CurrentUserResponse:
+ github_com_pozgo_web-cli_internal_models.VaultConfigCreate:
+ properties:
+ address:
+ type: string
+ enabled:
+ type: boolean
+ mount_path:
+ type: string
+ namespace:
+ type: string
+ token:
+ type: string
+ type: object
+ github_com_pozgo_web-cli_internal_models.VaultConfigResponse:
+ properties:
+ address:
+ type: string
+ created_at:
+ type: string
+ enabled:
+ type: boolean
+ has_token:
+ description: Indicates if a token is configured
+ type: boolean
+ id:
+ type: integer
+ mount_path:
+ type: string
+ namespace:
+ type: string
+ updated_at:
+ type: string
+ type: object
+ github_com_pozgo_web-cli_internal_models.VaultStatus:
+ properties:
+ address:
+ type: string
+ configured:
+ description: Whether Vault is configured
+ type: boolean
+ connected:
+ description: Whether connection test passed
+ type: boolean
+ enabled:
+ description: Whether Vault is enabled
+ type: boolean
+ error:
+ type: string
+ vault_sealed:
+ type: boolean
+ type: object
+ github_com_pozgo_web-cli_internal_vault.BashScript:
+ properties:
+ content:
+ type: string
+ description:
+ type: string
+ filename:
+ type: string
+ group:
+ type: string
+ name:
+ type: string
+ type: object
+ github_com_pozgo_web-cli_internal_vault.EnvVariable:
+ properties:
+ description:
+ type: string
+ group:
+ type: string
+ name:
+ type: string
+ value:
+ type: string
+ type: object
+ github_com_pozgo_web-cli_internal_vault.SSHKey:
+ properties:
+ created_at:
+ type: string
+ group:
+ type: string
+ name:
+ type: string
+ private_key:
+ type: string
+ type: object
+ github_com_pozgo_web-cli_internal_vault.Server:
+ properties:
+ group:
+ type: string
+ ip_address:
+ type: string
+ name:
+ type: string
+ port:
+ type: integer
+ username:
+ type: string
+ type: object
+ internal_server.CurrentUserResponse:
description: Current system user information
properties:
gid:
@@ -468,14 +649,14 @@ definitions:
example: root
type: string
type: object
- server.ErrorResponse:
+ internal_server.ErrorResponse:
description: Error response returned by the API
properties:
error:
example: Invalid request body
type: string
type: object
- server.ShellInfo:
+ internal_server.ShellInfo:
description: Information about an available shell
properties:
name:
@@ -485,6 +666,19 @@ definitions:
example: /bin/bash
type: string
type: object
+ internal_server.StreamMessage:
+ properties:
+ data:
+ description: output chunk or error message
+ type: string
+ result:
+ allOf:
+ - $ref: '#/definitions/github_com_pozgo_web-cli_internal_models.ScriptResult'
+ description: final result
+ type:
+ description: '"output", "result", "error"'
+ type: string
+ type: object
host: localhost:7777
info:
contact:
@@ -504,6 +698,11 @@ paths:
consumes:
- application/json
description: Get a list of all bash scripts (without content by default)
+ parameters:
+ - description: Filter by group name
+ in: query
+ name: group
+ type: string
produces:
- application/json
responses:
@@ -511,12 +710,12 @@ paths:
description: OK
schema:
items:
- $ref: '#/definitions/models.BashScriptResponse'
+ $ref: '#/definitions/github_com_pozgo_web-cli_internal_models.BashScriptResponse'
type: array
"500":
description: Internal Server Error
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
security:
- BasicAuth: []
summary: List all bash scripts
@@ -532,22 +731,22 @@ paths:
name: script
required: true
schema:
- $ref: '#/definitions/models.BashScriptCreate'
+ $ref: '#/definitions/github_com_pozgo_web-cli_internal_models.BashScriptCreate'
produces:
- application/json
responses:
"201":
description: Created
schema:
- $ref: '#/definitions/models.BashScriptResponse'
+ $ref: '#/definitions/github_com_pozgo_web-cli_internal_models.BashScriptResponse'
"400":
description: Bad Request
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
"500":
description: Internal Server Error
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
security:
- BasicAuth: []
summary: Create a bash script
@@ -572,11 +771,11 @@ paths:
"400":
description: Bad Request
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
"500":
description: Internal Server Error
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
security:
- BasicAuth: []
summary: Delete a bash script
@@ -603,15 +802,15 @@ paths:
"200":
description: OK
schema:
- $ref: '#/definitions/models.BashScriptResponse'
+ $ref: '#/definitions/github_com_pozgo_web-cli_internal_models.BashScriptResponse'
"400":
description: Bad Request
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
"404":
description: Not Found
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
security:
- BasicAuth: []
summary: Get a bash script by ID
@@ -632,22 +831,22 @@ paths:
name: script
required: true
schema:
- $ref: '#/definitions/models.BashScriptUpdate'
+ $ref: '#/definitions/github_com_pozgo_web-cli_internal_models.BashScriptUpdate'
produces:
- application/json
responses:
"200":
description: OK
schema:
- $ref: '#/definitions/models.BashScriptResponse'
+ $ref: '#/definitions/github_com_pozgo_web-cli_internal_models.BashScriptResponse'
"400":
description: Bad Request
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
"500":
description: Internal Server Error
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
security:
- BasicAuth: []
summary: Update a bash script
@@ -671,20 +870,20 @@ paths:
description: OK
schema:
items:
- $ref: '#/definitions/models.ScriptPresetResponse'
+ $ref: '#/definitions/github_com_pozgo_web-cli_internal_models.ScriptPresetResponse'
type: array
"400":
description: Bad Request
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
"404":
description: Not Found
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
"500":
description: Internal Server Error
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
security:
- BasicAuth: []
summary: Get presets for a script
@@ -701,31 +900,91 @@ paths:
name: execution
required: true
schema:
- $ref: '#/definitions/models.ScriptExecution'
+ $ref: '#/definitions/github_com_pozgo_web-cli_internal_models.ScriptExecution'
produces:
- application/json
responses:
"200":
description: OK
schema:
- $ref: '#/definitions/models.ScriptResult'
+ $ref: '#/definitions/github_com_pozgo_web-cli_internal_models.ScriptResult'
"400":
description: Bad Request
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
"404":
description: Not Found
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
"500":
description: Internal Server Error
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
security:
- BasicAuth: []
summary: Execute a bash script
tags:
- Bash Scripts
+ /bash-scripts/execute/stream:
+ post:
+ consumes:
+ - application/json
+ description: Execute a stored bash script locally or remotely with real-time
+ output streaming via SSE
+ parameters:
+ - description: Script execution request
+ in: body
+ name: execution
+ required: true
+ schema:
+ $ref: '#/definitions/github_com_pozgo_web-cli_internal_models.ScriptExecution'
+ produces:
+ - text/event-stream
+ responses:
+ "200":
+ description: OK
+ schema:
+ $ref: '#/definitions/internal_server.StreamMessage'
+ "400":
+ description: Bad Request
+ schema:
+ $ref: '#/definitions/internal_server.ErrorResponse'
+ "404":
+ description: Not Found
+ schema:
+ $ref: '#/definitions/internal_server.ErrorResponse'
+ "500":
+ description: Internal Server Error
+ schema:
+ $ref: '#/definitions/internal_server.ErrorResponse'
+ security:
+ - BasicAuth: []
+ summary: Execute a bash script with streaming output
+ tags:
+ - Bash Scripts
+ /bash-scripts/groups:
+ get:
+ consumes:
+ - application/json
+ description: Get a list of all distinct group names for bash scripts
+ produces:
+ - application/json
+ responses:
+ "200":
+ description: OK
+ schema:
+ items:
+ type: string
+ type: array
+ "500":
+ description: Internal Server Error
+ schema:
+ $ref: '#/definitions/internal_server.ErrorResponse'
+ security:
+ - BasicAuth: []
+ summary: List all bash script groups
+ tags:
+ - Bash Scripts
/commands/execute:
post:
consumes:
@@ -737,26 +996,26 @@ paths:
name: command
required: true
schema:
- $ref: '#/definitions/models.CommandExecution'
+ $ref: '#/definitions/github_com_pozgo_web-cli_internal_models.CommandExecution'
produces:
- application/json
responses:
"200":
description: OK
schema:
- $ref: '#/definitions/models.CommandResult'
+ $ref: '#/definitions/github_com_pozgo_web-cli_internal_models.CommandResult'
"400":
description: Bad Request
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
"404":
description: Not Found
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
"500":
description: Internal Server Error
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
security:
- BasicAuth: []
summary: Execute a command
@@ -772,6 +1031,10 @@ paths:
in: query
name: show_values
type: boolean
+ - description: Filter by group name
+ in: query
+ name: group
+ type: string
produces:
- application/json
responses:
@@ -779,12 +1042,12 @@ paths:
description: OK
schema:
items:
- $ref: '#/definitions/models.EnvVariableResponse'
+ $ref: '#/definitions/github_com_pozgo_web-cli_internal_models.EnvVariableResponse'
type: array
"500":
description: Internal Server Error
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
security:
- BasicAuth: []
summary: List all environment variables
@@ -800,22 +1063,22 @@ paths:
name: envvar
required: true
schema:
- $ref: '#/definitions/models.EnvVariableCreate'
+ $ref: '#/definitions/github_com_pozgo_web-cli_internal_models.EnvVariableCreate'
produces:
- application/json
responses:
"201":
description: Created
schema:
- $ref: '#/definitions/models.EnvVariableResponse'
+ $ref: '#/definitions/github_com_pozgo_web-cli_internal_models.EnvVariableResponse'
"400":
description: Bad Request
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
"500":
description: Internal Server Error
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
security:
- BasicAuth: []
summary: Create an environment variable
@@ -840,11 +1103,11 @@ paths:
"400":
description: Bad Request
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
"500":
description: Internal Server Error
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
security:
- BasicAuth: []
summary: Delete an environment variable
@@ -870,15 +1133,15 @@ paths:
"200":
description: OK
schema:
- $ref: '#/definitions/models.EnvVariableResponse'
+ $ref: '#/definitions/github_com_pozgo_web-cli_internal_models.EnvVariableResponse'
"400":
description: Bad Request
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
"404":
description: Not Found
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
security:
- BasicAuth: []
summary: Get an environment variable by ID
@@ -899,27 +1162,50 @@ paths:
name: envvar
required: true
schema:
- $ref: '#/definitions/models.EnvVariableUpdate'
+ $ref: '#/definitions/github_com_pozgo_web-cli_internal_models.EnvVariableUpdate'
produces:
- application/json
responses:
"200":
description: OK
schema:
- $ref: '#/definitions/models.EnvVariableResponse'
+ $ref: '#/definitions/github_com_pozgo_web-cli_internal_models.EnvVariableResponse'
"400":
description: Bad Request
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
"500":
description: Internal Server Error
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
security:
- BasicAuth: []
summary: Update an environment variable
tags:
- Environment Variables
+ /env-variables/groups:
+ get:
+ consumes:
+ - application/json
+ description: Get a list of all distinct group names for environment variables
+ produces:
+ - application/json
+ responses:
+ "200":
+ description: OK
+ schema:
+ items:
+ type: string
+ type: array
+ "500":
+ description: Internal Server Error
+ schema:
+ $ref: '#/definitions/internal_server.ErrorResponse'
+ security:
+ - BasicAuth: []
+ summary: List all environment variable groups
+ tags:
+ - Environment Variables
/history:
get:
consumes:
@@ -942,12 +1228,12 @@ paths:
description: OK
schema:
items:
- $ref: '#/definitions/models.CommandHistory'
+ $ref: '#/definitions/github_com_pozgo_web-cli_internal_models.CommandHistory'
type: array
"500":
description: Internal Server Error
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
security:
- BasicAuth: []
summary: List command history
@@ -970,15 +1256,15 @@ paths:
"200":
description: OK
schema:
- $ref: '#/definitions/models.CommandHistory'
+ $ref: '#/definitions/github_com_pozgo_web-cli_internal_models.CommandHistory'
"400":
description: Bad Request
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
"404":
description: Not Found
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
security:
- BasicAuth: []
summary: Get a command history entry by ID
@@ -989,6 +1275,11 @@ paths:
consumes:
- application/json
description: Get a list of all SSH keys stored in the system
+ parameters:
+ - description: Filter by group name
+ in: query
+ name: group
+ type: string
produces:
- application/json
responses:
@@ -996,12 +1287,12 @@ paths:
description: OK
schema:
items:
- $ref: '#/definitions/models.SSHKey'
+ $ref: '#/definitions/github_com_pozgo_web-cli_internal_models.SSHKey'
type: array
"500":
description: Internal Server Error
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
security:
- BasicAuth: []
summary: List all SSH keys
@@ -1017,22 +1308,22 @@ paths:
name: key
required: true
schema:
- $ref: '#/definitions/models.SSHKeyCreate'
+ $ref: '#/definitions/github_com_pozgo_web-cli_internal_models.SSHKeyCreate'
produces:
- application/json
responses:
"201":
description: Created
schema:
- $ref: '#/definitions/models.SSHKey'
+ $ref: '#/definitions/github_com_pozgo_web-cli_internal_models.SSHKey'
"400":
description: Bad Request
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
"500":
description: Internal Server Error
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
security:
- BasicAuth: []
summary: Create a new SSH key
@@ -1057,11 +1348,11 @@ paths:
"400":
description: Bad Request
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
"500":
description: Internal Server Error
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
security:
- BasicAuth: []
summary: Delete an SSH key
@@ -1083,15 +1374,15 @@ paths:
"200":
description: OK
schema:
- $ref: '#/definitions/models.SSHKey'
+ $ref: '#/definitions/github_com_pozgo_web-cli_internal_models.SSHKey'
"400":
description: Bad Request
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
"404":
description: Not Found
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
security:
- BasicAuth: []
summary: Get an SSH key by ID
@@ -1112,27 +1403,50 @@ paths:
name: key
required: true
schema:
- $ref: '#/definitions/models.SSHKeyUpdate'
+ $ref: '#/definitions/github_com_pozgo_web-cli_internal_models.SSHKeyUpdate'
produces:
- application/json
responses:
"200":
description: OK
schema:
- $ref: '#/definitions/models.SSHKey'
+ $ref: '#/definitions/github_com_pozgo_web-cli_internal_models.SSHKey'
"400":
description: Bad Request
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
"500":
description: Internal Server Error
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
security:
- BasicAuth: []
summary: Update an SSH key
tags:
- SSH Keys
+ /keys/groups:
+ get:
+ consumes:
+ - application/json
+ description: Get a list of all distinct group names for SSH keys
+ produces:
+ - application/json
+ responses:
+ "200":
+ description: OK
+ schema:
+ items:
+ type: string
+ type: array
+ "500":
+ description: Internal Server Error
+ schema:
+ $ref: '#/definitions/internal_server.ErrorResponse'
+ security:
+ - BasicAuth: []
+ summary: List all SSH key groups
+ tags:
+ - SSH Keys
/local-users:
get:
consumes:
@@ -1145,12 +1459,12 @@ paths:
description: OK
schema:
items:
- $ref: '#/definitions/models.LocalUser'
+ $ref: '#/definitions/github_com_pozgo_web-cli_internal_models.LocalUser'
type: array
"500":
description: Internal Server Error
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
security:
- BasicAuth: []
summary: List all local users
@@ -1166,22 +1480,22 @@ paths:
name: user
required: true
schema:
- $ref: '#/definitions/models.LocalUserCreate'
+ $ref: '#/definitions/github_com_pozgo_web-cli_internal_models.LocalUserCreate'
produces:
- application/json
responses:
"201":
description: Created
schema:
- $ref: '#/definitions/models.LocalUser'
+ $ref: '#/definitions/github_com_pozgo_web-cli_internal_models.LocalUser'
"400":
description: Bad Request
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
"500":
description: Internal Server Error
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
security:
- BasicAuth: []
summary: Create a local user
@@ -1206,11 +1520,11 @@ paths:
"400":
description: Bad Request
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
"500":
description: Internal Server Error
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
security:
- BasicAuth: []
summary: Delete a local user
@@ -1232,15 +1546,15 @@ paths:
"200":
description: OK
schema:
- $ref: '#/definitions/models.LocalUser'
+ $ref: '#/definitions/github_com_pozgo_web-cli_internal_models.LocalUser'
"400":
description: Bad Request
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
"404":
description: Not Found
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
security:
- BasicAuth: []
summary: Get a local user by ID
@@ -1261,22 +1575,22 @@ paths:
name: user
required: true
schema:
- $ref: '#/definitions/models.LocalUserUpdate'
+ $ref: '#/definitions/github_com_pozgo_web-cli_internal_models.LocalUserUpdate'
produces:
- application/json
responses:
"200":
description: OK
schema:
- $ref: '#/definitions/models.LocalUser'
+ $ref: '#/definitions/github_com_pozgo_web-cli_internal_models.LocalUser'
"400":
description: Bad Request
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
"500":
description: Internal Server Error
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
security:
- BasicAuth: []
summary: Update a local user
@@ -1294,12 +1608,12 @@ paths:
description: OK
schema:
items:
- $ref: '#/definitions/models.SavedCommand'
+ $ref: '#/definitions/github_com_pozgo_web-cli_internal_models.SavedCommand'
type: array
"500":
description: Internal Server Error
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
security:
- BasicAuth: []
summary: List all saved commands
@@ -1315,22 +1629,22 @@ paths:
name: command
required: true
schema:
- $ref: '#/definitions/models.SavedCommandCreate'
+ $ref: '#/definitions/github_com_pozgo_web-cli_internal_models.SavedCommandCreate'
produces:
- application/json
responses:
"201":
description: Created
schema:
- $ref: '#/definitions/models.SavedCommand'
+ $ref: '#/definitions/github_com_pozgo_web-cli_internal_models.SavedCommand'
"400":
description: Bad Request
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
"500":
description: Internal Server Error
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
security:
- BasicAuth: []
summary: Create a saved command
@@ -1355,11 +1669,11 @@ paths:
"400":
description: Bad Request
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
"500":
description: Internal Server Error
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
security:
- BasicAuth: []
summary: Delete a saved command
@@ -1381,15 +1695,15 @@ paths:
"200":
description: OK
schema:
- $ref: '#/definitions/models.SavedCommand'
+ $ref: '#/definitions/github_com_pozgo_web-cli_internal_models.SavedCommand'
"400":
description: Bad Request
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
"404":
description: Not Found
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
security:
- BasicAuth: []
summary: Get a saved command by ID
@@ -1410,22 +1724,22 @@ paths:
name: command
required: true
schema:
- $ref: '#/definitions/models.SavedCommandUpdate'
+ $ref: '#/definitions/github_com_pozgo_web-cli_internal_models.SavedCommandUpdate'
produces:
- application/json
responses:
"200":
description: OK
schema:
- $ref: '#/definitions/models.SavedCommand'
+ $ref: '#/definitions/github_com_pozgo_web-cli_internal_models.SavedCommand'
"400":
description: Bad Request
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
"500":
description: Internal Server Error
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
security:
- BasicAuth: []
summary: Update a saved command
@@ -1443,12 +1757,12 @@ paths:
description: OK
schema:
items:
- $ref: '#/definitions/models.ScriptPresetResponse'
+ $ref: '#/definitions/github_com_pozgo_web-cli_internal_models.ScriptPresetResponse'
type: array
"500":
description: Internal Server Error
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
security:
- BasicAuth: []
summary: List all script presets
@@ -1464,22 +1778,22 @@ paths:
name: preset
required: true
schema:
- $ref: '#/definitions/models.ScriptPresetCreate'
+ $ref: '#/definitions/github_com_pozgo_web-cli_internal_models.ScriptPresetCreate'
produces:
- application/json
responses:
"201":
description: Created
schema:
- $ref: '#/definitions/models.ScriptPresetResponse'
+ $ref: '#/definitions/github_com_pozgo_web-cli_internal_models.ScriptPresetResponse'
"400":
description: Bad Request
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
"500":
description: Internal Server Error
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
security:
- BasicAuth: []
summary: Create a script preset
@@ -1504,11 +1818,11 @@ paths:
"400":
description: Bad Request
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
"500":
description: Internal Server Error
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
security:
- BasicAuth: []
summary: Delete a script preset
@@ -1530,15 +1844,15 @@ paths:
"200":
description: OK
schema:
- $ref: '#/definitions/models.ScriptPresetResponse'
+ $ref: '#/definitions/github_com_pozgo_web-cli_internal_models.ScriptPresetResponse'
"400":
description: Bad Request
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
"404":
description: Not Found
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
security:
- BasicAuth: []
summary: Get a script preset by ID
@@ -1559,22 +1873,22 @@ paths:
name: preset
required: true
schema:
- $ref: '#/definitions/models.ScriptPresetUpdate'
+ $ref: '#/definitions/github_com_pozgo_web-cli_internal_models.ScriptPresetUpdate'
produces:
- application/json
responses:
"200":
description: OK
schema:
- $ref: '#/definitions/models.ScriptPresetResponse'
+ $ref: '#/definitions/github_com_pozgo_web-cli_internal_models.ScriptPresetResponse'
"400":
description: Bad Request
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
"500":
description: Internal Server Error
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
security:
- BasicAuth: []
summary: Update a script preset
@@ -1585,6 +1899,11 @@ paths:
consumes:
- application/json
description: Get a list of all remote servers configured in the system
+ parameters:
+ - description: Filter by group name
+ in: query
+ name: group
+ type: string
produces:
- application/json
responses:
@@ -1592,12 +1911,12 @@ paths:
description: OK
schema:
items:
- $ref: '#/definitions/models.Server'
+ $ref: '#/definitions/github_com_pozgo_web-cli_internal_models.Server'
type: array
"500":
description: Internal Server Error
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
security:
- BasicAuth: []
summary: List all servers
@@ -1613,22 +1932,22 @@ paths:
name: server
required: true
schema:
- $ref: '#/definitions/models.ServerCreate'
+ $ref: '#/definitions/github_com_pozgo_web-cli_internal_models.ServerCreate'
produces:
- application/json
responses:
"201":
description: Created
schema:
- $ref: '#/definitions/models.Server'
+ $ref: '#/definitions/github_com_pozgo_web-cli_internal_models.Server'
"400":
description: Bad Request
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
"500":
description: Internal Server Error
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
security:
- BasicAuth: []
summary: Create a new server
@@ -1653,11 +1972,11 @@ paths:
"400":
description: Bad Request
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
"500":
description: Internal Server Error
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
security:
- BasicAuth: []
summary: Delete a server
@@ -1679,15 +1998,15 @@ paths:
"200":
description: OK
schema:
- $ref: '#/definitions/models.Server'
+ $ref: '#/definitions/github_com_pozgo_web-cli_internal_models.Server'
"400":
description: Bad Request
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
"404":
description: Not Found
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
security:
- BasicAuth: []
summary: Get a server by ID
@@ -1708,27 +2027,50 @@ paths:
name: server
required: true
schema:
- $ref: '#/definitions/models.ServerUpdate'
+ $ref: '#/definitions/github_com_pozgo_web-cli_internal_models.ServerUpdate'
produces:
- application/json
responses:
"200":
description: OK
schema:
- $ref: '#/definitions/models.Server'
+ $ref: '#/definitions/github_com_pozgo_web-cli_internal_models.Server'
"400":
description: Bad Request
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
"500":
description: Internal Server Error
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
security:
- BasicAuth: []
summary: Update a server
tags:
- Servers
+ /servers/groups:
+ get:
+ consumes:
+ - application/json
+ description: Get a list of all distinct group names for servers
+ produces:
+ - application/json
+ responses:
+ "200":
+ description: OK
+ schema:
+ items:
+ type: string
+ type: array
+ "500":
+ description: Internal Server Error
+ schema:
+ $ref: '#/definitions/internal_server.ErrorResponse'
+ security:
+ - BasicAuth: []
+ summary: List all server groups
+ tags:
+ - Servers
/system/current-user:
get:
consumes:
@@ -1740,11 +2082,11 @@ paths:
"200":
description: OK
schema:
- $ref: '#/definitions/server.CurrentUserResponse'
+ $ref: '#/definitions/internal_server.CurrentUserResponse'
"500":
description: Internal Server Error
schema:
- $ref: '#/definitions/server.ErrorResponse'
+ $ref: '#/definitions/internal_server.ErrorResponse'
security:
- BasicAuth: []
summary: Get current system user
@@ -1762,13 +2104,402 @@ paths:
description: OK
schema:
items:
- $ref: '#/definitions/server.ShellInfo'
+ $ref: '#/definitions/internal_server.ShellInfo'
type: array
security:
- BasicAuth: []
summary: List available shells
tags:
- System
+ /vault/bash-scripts:
+ get:
+ description: Retrieve all bash scripts stored in Vault
+ produces:
+ - application/json
+ responses:
+ "200":
+ description: OK
+ schema:
+ items:
+ $ref: '#/definitions/github_com_pozgo_web-cli_internal_vault.BashScript'
+ type: array
+ "400":
+ description: Bad Request
+ schema:
+ $ref: '#/definitions/internal_server.ErrorResponse'
+ "500":
+ description: Internal Server Error
+ schema:
+ $ref: '#/definitions/internal_server.ErrorResponse'
+ security:
+ - BasicAuth: []
+ summary: List bash scripts from Vault
+ tags:
+ - Vault
+ post:
+ consumes:
+ - application/json
+ description: Create a new bash script in HashiCorp Vault storage
+ parameters:
+ - description: Bash script data
+ in: body
+ name: script
+ required: true
+ schema:
+ type: object
+ produces:
+ - application/json
+ responses:
+ "201":
+ description: Created script info with source field
+ schema:
+ additionalProperties: true
+ type: object
+ "400":
+ description: Invalid request or Vault not configured
+ schema:
+ type: string
+ "500":
+ description: Failed to store script
+ schema:
+ type: string
+ security:
+ - BasicAuth: []
+ summary: Store bash script in Vault
+ tags:
+ - Vault
+ /vault/config:
+ delete:
+ description: Remove the Vault configuration
+ responses:
+ "204":
+ description: No Content
+ "500":
+ description: Internal Server Error
+ schema:
+ $ref: '#/definitions/internal_server.ErrorResponse'
+ security:
+ - BasicAuth: []
+ summary: Delete Vault configuration
+ tags:
+ - Vault
+ get:
+ description: Retrieve the current Vault configuration (token is never returned)
+ produces:
+ - application/json
+ responses:
+ "200":
+ description: OK
+ schema:
+ $ref: '#/definitions/github_com_pozgo_web-cli_internal_models.VaultConfigResponse'
+ "500":
+ description: Internal Server Error
+ schema:
+ $ref: '#/definitions/internal_server.ErrorResponse'
+ security:
+ - BasicAuth: []
+ summary: Get Vault configuration
+ tags:
+ - Vault
+ post:
+ consumes:
+ - application/json
+ description: Configure or update the Vault connection settings
+ parameters:
+ - description: Vault configuration
+ in: body
+ name: config
+ required: true
+ schema:
+ $ref: '#/definitions/github_com_pozgo_web-cli_internal_models.VaultConfigCreate'
+ produces:
+ - application/json
+ responses:
+ "200":
+ description: OK
+ schema:
+ $ref: '#/definitions/github_com_pozgo_web-cli_internal_models.VaultConfigResponse'
+ "400":
+ description: Bad Request
+ schema:
+ $ref: '#/definitions/internal_server.ErrorResponse'
+ "500":
+ description: Internal Server Error
+ schema:
+ $ref: '#/definitions/internal_server.ErrorResponse'
+ security:
+ - BasicAuth: []
+ summary: Create or update Vault configuration
+ tags:
+ - Vault
+ /vault/env-variables:
+ get:
+ description: Retrieve all environment variables stored in Vault
+ produces:
+ - application/json
+ responses:
+ "200":
+ description: OK
+ schema:
+ items:
+ $ref: '#/definitions/github_com_pozgo_web-cli_internal_vault.EnvVariable'
+ type: array
+ "400":
+ description: Bad Request
+ schema:
+ $ref: '#/definitions/internal_server.ErrorResponse'
+ "500":
+ description: Internal Server Error
+ schema:
+ $ref: '#/definitions/internal_server.ErrorResponse'
+ security:
+ - BasicAuth: []
+ summary: List environment variables from Vault
+ tags:
+ - Vault
+ post:
+ consumes:
+ - application/json
+ description: Store a new environment variable in Vault
+ parameters:
+ - description: Environment Variable
+ in: body
+ name: envVar
+ required: true
+ schema:
+ properties:
+ description:
+ type: string
+ group:
+ type: string
+ name:
+ type: string
+ value:
+ type: string
+ type: object
+ produces:
+ - application/json
+ responses:
+ "201":
+ description: Created
+ schema:
+ properties:
+ description:
+ type: string
+ group:
+ type: string
+ name:
+ type: string
+ source:
+ type: string
+ type: object
+ "400":
+ description: Bad Request
+ schema:
+ $ref: '#/definitions/internal_server.ErrorResponse'
+ "500":
+ description: Internal Server Error
+ schema:
+ $ref: '#/definitions/internal_server.ErrorResponse'
+ security:
+ - BasicAuth: []
+ summary: Create environment variable in Vault
+ tags:
+ - Vault
+ /vault/servers:
+ get:
+ description: Retrieve all server configurations stored in Vault
+ produces:
+ - application/json
+ responses:
+ "200":
+ description: OK
+ schema:
+ items:
+ $ref: '#/definitions/github_com_pozgo_web-cli_internal_vault.Server'
+ type: array
+ "400":
+ description: Bad Request
+ schema:
+ $ref: '#/definitions/internal_server.ErrorResponse'
+ "500":
+ description: Internal Server Error
+ schema:
+ $ref: '#/definitions/internal_server.ErrorResponse'
+ security:
+ - BasicAuth: []
+ summary: List servers from Vault
+ tags:
+ - Vault
+ post:
+ consumes:
+ - application/json
+ description: Store a new server configuration in Vault
+ parameters:
+ - description: Server
+ in: body
+ name: server
+ required: true
+ schema:
+ properties:
+ group:
+ type: string
+ ip_address:
+ type: string
+ name:
+ type: string
+ port:
+ type: integer
+ username:
+ type: string
+ type: object
+ produces:
+ - application/json
+ responses:
+ "201":
+ description: Created
+ schema:
+ properties:
+ group:
+ type: string
+ ip_address:
+ type: string
+ name:
+ type: string
+ port:
+ type: integer
+ source:
+ type: string
+ username:
+ type: string
+ type: object
+ "400":
+ description: Bad Request
+ schema:
+ $ref: '#/definitions/internal_server.ErrorResponse'
+ "500":
+ description: Internal Server Error
+ schema:
+ $ref: '#/definitions/internal_server.ErrorResponse'
+ security:
+ - BasicAuth: []
+ summary: Create server in Vault
+ tags:
+ - Vault
+ /vault/ssh-keys:
+ get:
+ description: Retrieve all SSH keys stored in Vault
+ produces:
+ - application/json
+ responses:
+ "200":
+ description: OK
+ schema:
+ items:
+ $ref: '#/definitions/github_com_pozgo_web-cli_internal_vault.SSHKey'
+ type: array
+ "400":
+ description: Bad Request
+ schema:
+ $ref: '#/definitions/internal_server.ErrorResponse'
+ "500":
+ description: Internal Server Error
+ schema:
+ $ref: '#/definitions/internal_server.ErrorResponse'
+ security:
+ - BasicAuth: []
+ summary: List SSH keys from Vault
+ tags:
+ - Vault
+ post:
+ consumes:
+ - application/json
+ description: Store a new SSH key in Vault
+ parameters:
+ - description: SSH Key
+ in: body
+ name: key
+ required: true
+ schema:
+ properties:
+ group:
+ type: string
+ name:
+ type: string
+ private_key:
+ type: string
+ type: object
+ produces:
+ - application/json
+ responses:
+ "201":
+ description: Created
+ schema:
+ properties:
+ created_at:
+ type: string
+ group:
+ type: string
+ name:
+ type: string
+ source:
+ type: string
+ type: object
+ "400":
+ description: Bad Request
+ schema:
+ $ref: '#/definitions/internal_server.ErrorResponse'
+ "500":
+ description: Internal Server Error
+ schema:
+ $ref: '#/definitions/internal_server.ErrorResponse'
+ security:
+ - BasicAuth: []
+ summary: Create SSH key in Vault
+ tags:
+ - Vault
+ /vault/status:
+ get:
+ description: Check the current Vault connection status
+ produces:
+ - application/json
+ responses:
+ "200":
+ description: OK
+ schema:
+ $ref: '#/definitions/github_com_pozgo_web-cli_internal_models.VaultStatus'
+ "500":
+ description: Internal Server Error
+ schema:
+ $ref: '#/definitions/internal_server.ErrorResponse'
+ security:
+ - BasicAuth: []
+ summary: Get Vault connection status
+ tags:
+ - Vault
+ /vault/test:
+ post:
+ description: Test the connection to Vault and initialize the secrets structure
+ produces:
+ - application/json
+ responses:
+ "200":
+ description: OK
+ schema:
+ $ref: '#/definitions/github_com_pozgo_web-cli_internal_models.VaultStatus'
+ "400":
+ description: Bad Request
+ schema:
+ $ref: '#/definitions/internal_server.ErrorResponse'
+ "500":
+ description: Internal Server Error
+ schema:
+ $ref: '#/definitions/internal_server.ErrorResponse'
+ security:
+ - BasicAuth: []
+ summary: Test Vault connection
+ tags:
+ - Vault
securityDefinitions:
BasicAuth:
type: basic
diff --git a/frontend/src/components/AddKeyDialog.jsx b/frontend/src/components/AddKeyDialog.jsx
index f0e9940..d6be1a6 100644
--- a/frontend/src/components/AddKeyDialog.jsx
+++ b/frontend/src/components/AddKeyDialog.jsx
@@ -9,6 +9,8 @@ import {
Alert,
Box,
} from '@mui/material';
+import StorageSelector from './shared/StorageSelector';
+import GroupInput from './shared/GroupInput';
/**
* AddKeyDialog component - dialog for adding new SSH keys
@@ -20,6 +22,8 @@ import {
const AddKeyDialog = ({ open, onClose, onKeyAdded }) => {
const [name, setName] = useState('');
const [privateKey, setPrivateKey] = useState('');
+ const [group, setGroup] = useState('default');
+ const [storage, setStorage] = useState('local');
const [error, setError] = useState(null);
const [loading, setLoading] = useState(false);
@@ -42,7 +46,10 @@ const AddKeyDialog = ({ open, onClose, onKeyAdded }) => {
setLoading(true);
setError(null);
- const response = await fetch('/api/keys', {
+ // Choose API endpoint based on storage selection
+ const endpoint = storage === 'vault' ? '/api/vault/ssh-keys' : '/api/keys';
+
+ const response = await fetch(endpoint, {
method: 'POST',
headers: {
'Content-Type': 'application/json',
@@ -50,6 +57,7 @@ const AddKeyDialog = ({ open, onClose, onKeyAdded }) => {
body: JSON.stringify({
name: name.trim(),
private_key: privateKey, // Don't trim - SSH keys need their newlines preserved
+ group: group.trim() || 'default',
}),
});
@@ -61,6 +69,8 @@ const AddKeyDialog = ({ open, onClose, onKeyAdded }) => {
// Success - reset form and notify parent
setName('');
setPrivateKey('');
+ setGroup('default');
+ setStorage('local');
setError(null);
onKeyAdded();
} catch (err) {
@@ -75,6 +85,8 @@ const AddKeyDialog = ({ open, onClose, onKeyAdded }) => {
if (!loading) {
setName('');
setPrivateKey('');
+ setGroup('default');
+ setStorage('local');
setError(null);
onClose();
}
@@ -129,6 +141,22 @@ b3BlbnNzaC1rZXktdjEAAAAABG5vbmUA..."
}}
/>
+
+
+
+
+
+
Security Note: Private keys are encrypted with AES-256-GCM before storage. Never share your private keys.
diff --git a/frontend/src/components/AddServerDialog.jsx b/frontend/src/components/AddServerDialog.jsx
index 7a609f3..f947e6c 100644
--- a/frontend/src/components/AddServerDialog.jsx
+++ b/frontend/src/components/AddServerDialog.jsx
@@ -9,6 +9,8 @@ import {
Alert,
Box,
} from '@mui/material';
+import StorageSelector from './shared/StorageSelector';
+import GroupInput from './shared/GroupInput';
/**
* AddServerDialog component - dialog for adding new servers
@@ -22,6 +24,8 @@ const AddServerDialog = ({ open, onClose, onServerAdded }) => {
const [ipAddress, setIPAddress] = useState('');
const [port, setPort] = useState('22');
const [username, setUsername] = useState('root');
+ const [group, setGroup] = useState('default');
+ const [storage, setStorage] = useState('local');
const [error, setError] = useState(null);
const [loading, setLoading] = useState(false);
@@ -67,7 +71,10 @@ const AddServerDialog = ({ open, onClose, onServerAdded }) => {
setLoading(true);
setError(null);
- const response = await fetch('/api/servers', {
+ // Choose API endpoint based on storage selection
+ const endpoint = storage === 'vault' ? '/api/vault/servers' : '/api/servers';
+
+ const response = await fetch(endpoint, {
method: 'POST',
headers: {
'Content-Type': 'application/json',
@@ -77,6 +84,7 @@ const AddServerDialog = ({ open, onClose, onServerAdded }) => {
ip_address: ipAddress.trim() || undefined,
port: portNum,
username: username.trim() || 'root',
+ group: group.trim() || 'default',
}),
});
@@ -90,6 +98,8 @@ const AddServerDialog = ({ open, onClose, onServerAdded }) => {
setIPAddress('');
setPort('22');
setUsername('root');
+ setGroup('default');
+ setStorage('local');
setError(null);
onServerAdded();
} catch (err) {
@@ -106,6 +116,8 @@ const AddServerDialog = ({ open, onClose, onServerAdded }) => {
setIPAddress('');
setPort('22');
setUsername('root');
+ setGroup('default');
+ setStorage('local');
setError(null);
onClose();
}
@@ -179,6 +191,22 @@ const AddServerDialog = ({ open, onClose, onServerAdded }) => {
disabled={loading}
/>
+
+
+
+
+
+
Note: At least one of Server Name or IP Address must be provided. Server names must follow hostname conventions (no spaces).
diff --git a/frontend/src/components/AdminPanel.jsx b/frontend/src/components/AdminPanel.jsx
index 28c2617..87017fa 100644
--- a/frontend/src/components/AdminPanel.jsx
+++ b/frontend/src/components/AdminPanel.jsx
@@ -1,4 +1,4 @@
-import React, { useState, useEffect } from 'react';
+import React, { useState, useEffect, Component } from 'react';
import {
Container,
Typography,
@@ -18,25 +18,59 @@ import {
Tab,
} from '@mui/material';
import { Add, Delete, Edit, ArrowBack } from '@mui/icons-material';
-import { useNavigate } from 'react-router-dom';
+import { useNavigate, useLocation } from 'react-router-dom';
import AddKeyDialog from './AddKeyDialog';
import EditKeyDialog from './EditKeyDialog';
import ServerList from './ServerList';
import LocalUserList from './LocalUserList';
import EnvVariableList from './EnvVariableList';
+import VaultSettings from './VaultSettings';
+import SourceChip from './shared/SourceChip';
+import GroupSelector from './shared/GroupSelector';
+
+/**
+ * Error Boundary for VaultSettings
+ */
+class VaultErrorBoundary extends Component {
+ constructor(props) {
+ super(props);
+ this.state = { hasError: false, error: null };
+ }
+
+ static getDerivedStateFromError(error) {
+ return { hasError: true, error };
+ }
+
+ componentDidCatch(error, errorInfo) {
+ console.error('VaultSettings error:', error, errorInfo);
+ }
+
+ render() {
+ if (this.state.hasError) {
+ return (
+
+ Error loading Vault Settings: {this.state.error?.message || 'Unknown error'}
+
+ );
+ }
+ return this.props.children;
+ }
+}
/**
* AdminPanel component - displays and manages SSH keys and servers
*/
const AdminPanel = () => {
const navigate = useNavigate();
- const [tabValue, setTabValue] = useState(0);
+ const location = useLocation();
+ const [tabValue, setTabValue] = useState(location.state?.tab || 0);
const [keys, setKeys] = useState([]);
const [loading, setLoading] = useState(true);
const [error, setError] = useState(null);
const [openDialog, setOpenDialog] = useState(false);
const [openEditDialog, setOpenEditDialog] = useState(false);
const [selectedKey, setSelectedKey] = useState(null);
+ const [selectedGroup, setSelectedGroup] = useState('all');
// Handle tab change
const handleTabChange = (event, newValue) => {
@@ -48,7 +82,10 @@ const AdminPanel = () => {
try {
setLoading(true);
setError(null);
- const response = await fetch('/api/keys');
+ const url = selectedGroup === 'all'
+ ? '/api/keys'
+ : `/api/keys?group=${encodeURIComponent(selectedGroup)}`;
+ const response = await fetch(url);
if (!response.ok) {
throw new Error('Failed to fetch SSH keys');
@@ -63,10 +100,17 @@ const AdminPanel = () => {
}
};
- // Load keys on component mount
+ // Update tab when navigating with state (e.g., from VaultIcon)
+ useEffect(() => {
+ if (location.state?.tab !== undefined) {
+ setTabValue(location.state.tab);
+ }
+ }, [location.state]);
+
+ // Load keys on component mount or when group changes
useEffect(() => {
fetchKeys();
- }, []);
+ }, [selectedGroup]);
// Handle key deletion
const handleDelete = async (id) => {
@@ -130,6 +174,7 @@ const AdminPanel = () => {
+
@@ -139,13 +184,20 @@ const AdminPanel = () => {
SSH Key Management
- }
- onClick={() => setOpenDialog(true)}
- >
- Add New Key
-
+
+
+ }
+ onClick={() => setOpenDialog(true)}
+ >
+ Add New Key
+
+
{error && (
@@ -171,13 +223,15 @@ const AdminPanel = () => {
Name
Private Key
+ Group
+ Source
Created At
Actions
{keys.map((key) => (
-
+
{key.name}
{
{key.private_key}
+ {key.group || 'default'}
+
+
+
{new Date(key.created_at).toLocaleString()}
@@ -202,6 +260,8 @@ const AdminPanel = () => {
onClick={() => handleEdit(key)}
aria-label="edit"
sx={{ mr: 1 }}
+ disabled={key.source === 'vault'}
+ title={key.source === 'vault' ? 'Vault items cannot be edited here' : 'Edit'}
>
@@ -209,6 +269,8 @@ const AdminPanel = () => {
color="error"
onClick={() => handleDelete(key.id)}
aria-label="delete"
+ disabled={key.source === 'vault'}
+ title={key.source === 'vault' ? 'Vault items cannot be deleted here' : 'Delete'}
>
@@ -227,6 +289,12 @@ const AdminPanel = () => {
{tabValue === 2 && }
{tabValue === 3 && }
+
+ {tabValue === 4 && (
+
+
+
+ )}
{
const [name, setName] = useState('');
const [privateKey, setPrivateKey] = useState('');
+ const [group, setGroup] = useState('default');
const [error, setError] = useState(null);
const [loading, setLoading] = useState(false);
@@ -29,6 +30,7 @@ const EditKeyDialog = ({ open, onClose, onKeyUpdated, keyData }) => {
if (keyData) {
setName(keyData.name || '');
setPrivateKey(keyData.private_key || '');
+ setGroup(keyData.group || 'default');
}
}, [keyData]);
@@ -59,6 +61,7 @@ const EditKeyDialog = ({ open, onClose, onKeyUpdated, keyData }) => {
body: JSON.stringify({
name: name.trim(),
private_key: privateKey, // Don't trim - SSH keys need their newlines preserved
+ group: group.trim() || 'default',
}),
});
@@ -134,6 +137,19 @@ b3BlbnNzaC1rZXktdjEAAAAABG5vbmUA..."
}}
/>
+ setGroup(e.target.value)}
+ placeholder="default"
+ helperText="Group for organizing SSH keys (default: default)"
+ disabled={loading}
+ />
+
Security Note: Private keys are encrypted with AES-256-GCM before storage. This will replace the existing key.
diff --git a/frontend/src/components/EditServerDialog.jsx b/frontend/src/components/EditServerDialog.jsx
index 82599bd..55d96b3 100644
--- a/frontend/src/components/EditServerDialog.jsx
+++ b/frontend/src/components/EditServerDialog.jsx
@@ -23,6 +23,7 @@ const EditServerDialog = ({ open, onClose, onServerUpdated, serverData }) => {
const [ipAddress, setIPAddress] = useState('');
const [port, setPort] = useState('22');
const [username, setUsername] = useState('root');
+ const [group, setGroup] = useState('default');
const [error, setError] = useState(null);
const [loading, setLoading] = useState(false);
@@ -33,6 +34,7 @@ const EditServerDialog = ({ open, onClose, onServerUpdated, serverData }) => {
setIPAddress(serverData.ip_address || '');
setPort(serverData.port ? String(serverData.port) : '22');
setUsername(serverData.username || 'root');
+ setGroup(serverData.group || 'default');
}
}, [serverData]);
@@ -88,6 +90,7 @@ const EditServerDialog = ({ open, onClose, onServerUpdated, serverData }) => {
ip_address: ipAddress.trim() || undefined,
port: portNum,
username: username.trim() || 'root',
+ group: group.trim() || 'default',
}),
});
@@ -182,6 +185,19 @@ const EditServerDialog = ({ open, onClose, onServerUpdated, serverData }) => {
disabled={loading}
/>
+ setGroup(e.target.value)}
+ placeholder="default"
+ helperText="Group for organizing servers (default: default)"
+ disabled={loading}
+ />
+
Note: At least one of Server Name or IP Address must be provided. Server names must follow hostname conventions (no spaces).
diff --git a/frontend/src/components/EnvVariableList.jsx b/frontend/src/components/EnvVariableList.jsx
index 16b75f7..5f3a15f 100644
--- a/frontend/src/components/EnvVariableList.jsx
+++ b/frontend/src/components/EnvVariableList.jsx
@@ -22,6 +22,10 @@ import {
Tooltip,
} from '@mui/material';
import { Add, Delete, Edit, Visibility, VisibilityOff, ContentCopy } from '@mui/icons-material';
+import SourceChip from './shared/SourceChip';
+import GroupSelector from './shared/GroupSelector';
+import StorageSelector from './shared/StorageSelector';
+import GroupInput from './shared/GroupInput';
/**
* EnvVariableList component - displays and manages encrypted environment variables
@@ -38,15 +42,21 @@ const EnvVariableList = () => {
name: '',
value: '',
description: '',
+ group: 'default',
+ storage: 'local',
});
const [showFormValue, setShowFormValue] = useState(false);
+ const [selectedGroup, setSelectedGroup] = useState('all');
// Fetch environment variables from API
const fetchEnvVars = async () => {
try {
setLoading(true);
setError(null);
- const response = await fetch('/api/env-variables');
+ const url = selectedGroup === 'all'
+ ? '/api/env-variables'
+ : `/api/env-variables?group=${encodeURIComponent(selectedGroup)}`;
+ const response = await fetch(url);
if (!response.ok) {
throw new Error('Failed to fetch environment variables');
@@ -76,10 +86,10 @@ const EnvVariableList = () => {
}
};
- // Load env vars on component mount
+ // Load env vars on component mount or when group changes
useEffect(() => {
fetchEnvVars();
- }, []);
+ }, [selectedGroup]);
// Toggle value visibility for a specific variable
const handleToggleVisibility = async (id) => {
@@ -140,6 +150,7 @@ const EnvVariableList = () => {
name: envVar.name,
value: value || '',
description: envVar.description || '',
+ group: envVar.group || 'default',
});
setShowFormValue(false);
setOpenDialog(true);
@@ -152,6 +163,8 @@ const EnvVariableList = () => {
name: '',
value: '',
description: '',
+ group: 'default',
+ storage: 'local',
});
setShowFormValue(false);
setOpenDialog(true);
@@ -165,17 +178,25 @@ const EnvVariableList = () => {
}
try {
+ // Choose base API endpoint based on storage selection (only for new env vars)
+ const baseEndpoint = !editingVar && formData.storage === 'vault'
+ ? '/api/vault/env-variables'
+ : '/api/env-variables';
+
const url = editingVar
? `/api/env-variables/${editingVar.id}`
- : '/api/env-variables';
+ : baseEndpoint;
const method = editingVar ? 'PUT' : 'POST';
+ // Don't send storage field to the API
+ const { storage, ...dataToSend } = formData;
+
const response = await fetch(url, {
method,
headers: {
'Content-Type': 'application/json',
},
- body: JSON.stringify(formData),
+ body: JSON.stringify(dataToSend),
});
if (!response.ok) {
@@ -198,13 +219,20 @@ const EnvVariableList = () => {
Environment Variables
- }
- onClick={handleAdd}
- >
- Add Variable
-
+
+
+ }
+ onClick={handleAdd}
+ >
+ Add Variable
+
+
{error && (
@@ -241,13 +269,15 @@ const EnvVariableList = () => {
Name
Value
Description
+ Group
+ Source
Created At
Actions
{envVars.map((envVar) => (
-
+
{
{envVar.description || '-'}
+ {envVar.group || 'default'}
+
+
+
{new Date(envVar.created_at).toLocaleString()}
@@ -299,6 +333,8 @@ const EnvVariableList = () => {
onClick={() => handleEdit(envVar)}
aria-label="edit"
sx={{ mr: 1 }}
+ disabled={envVar.source === 'vault'}
+ title={envVar.source === 'vault' ? 'Vault items cannot be edited here' : 'Edit'}
>
@@ -306,6 +342,8 @@ const EnvVariableList = () => {
color="error"
onClick={() => handleDelete(envVar.id)}
aria-label="delete"
+ disabled={envVar.source === 'vault'}
+ title={envVar.source === 'vault' ? 'Vault items cannot be deleted here' : 'Delete'}
>
@@ -371,6 +409,20 @@ const EnvVariableList = () => {
placeholder="Brief description of this variable"
sx={{ mb: 2 }}
/>
+ setFormData({ ...formData, group: value })}
+ resourceType="env-variables"
+ helperText="Select an existing group or type a new one"
+ />
+ {!editingVar && (
+
+ setFormData({ ...formData, storage: value })}
+ />
+
+ )}
diff --git a/frontend/src/components/Header.jsx b/frontend/src/components/Header.jsx
index 2e0a347..cbec7e0 100644
--- a/frontend/src/components/Header.jsx
+++ b/frontend/src/components/Header.jsx
@@ -1,9 +1,10 @@
-import React from 'react';
+import React, { useState, useEffect, useCallback } from 'react';
import { AppBar, Toolbar, Typography, Box, IconButton, Tooltip } from '@mui/material';
import { Terminal, Api } from '@mui/icons-material';
import GitHubIcon from '@mui/icons-material/GitHub';
import { useNavigate } from 'react-router-dom';
import ThemeToggle from './ThemeToggle';
+import VaultIcon from './shared/VaultIcon';
/**
* Header component - displays the application header with logo and theme toggle
@@ -22,7 +23,6 @@ const Header = ({ mode, toggleTheme }) => {
display: 'flex',
alignItems: 'center',
cursor: 'pointer',
- flexGrow: 1,
'&:hover': {
opacity: 0.8,
},
@@ -34,6 +34,8 @@ const Header = ({ mode, toggleTheme }) => {
Web CLI
+
+
{
if (response.ok) {
const data = await response.json();
setEnvVars(data || []);
- // Select all by default
- setSelectedEnvVarIds((data || []).map(v => v.id));
+ // Select all by default - use name for Vault items, ID for SQLite items
+ setSelectedEnvVarIds((data || []).map(v => v.source === 'vault' ? v.name : v.id));
}
} catch (err) {
console.error('Failed to fetch env vars:', err);
@@ -271,13 +271,49 @@ const LocalScripts = () => {
setSuccess(null);
setOutput('');
+ // Find the selected script object to determine its source
+ const selectedScriptObj = scripts.find(s =>
+ (s.source === 'vault' ? s.name === selectedScriptId : s.id === parseInt(selectedScriptId, 10))
+ );
+
const payload = {
- script_id: parseInt(selectedScriptId, 10),
user: user || 'root',
is_remote: false,
- env_var_ids: selectedEnvVarIds,
};
+ // For script: use name for Vault items, ID for SQLite items
+ if (selectedScriptObj) {
+ if (selectedScriptObj.source === 'vault') {
+ payload.script_name = selectedScriptObj.name;
+ payload.script_group = selectedScriptObj.group || 'default';
+ } else {
+ payload.script_id = selectedScriptObj.id;
+ }
+ }
+
+ // For env vars: separate SQLite IDs from Vault names (with groups)
+ const sqliteEnvVarIds = [];
+ const vaultEnvVarNames = [];
+ const vaultEnvVarGroups = [];
+ selectedEnvVarIds.forEach(id => {
+ const envVar = envVars.find(v => v.id === id || v.name === id);
+ if (envVar) {
+ if (envVar.source === 'vault') {
+ vaultEnvVarNames.push(envVar.name);
+ vaultEnvVarGroups.push(envVar.group || 'default');
+ } else if (envVar.id) {
+ sqliteEnvVarIds.push(envVar.id);
+ }
+ }
+ });
+ if (sqliteEnvVarIds.length > 0) {
+ payload.env_var_ids = sqliteEnvVarIds;
+ }
+ if (vaultEnvVarNames.length > 0) {
+ payload.env_var_names = vaultEnvVarNames;
+ payload.env_var_groups = vaultEnvVarGroups;
+ }
+
if (password) {
payload.sudo_password = password;
}
@@ -417,12 +453,21 @@ const LocalScripts = () => {
Choose a script...
{scripts.map((script) => (
-
@@ -301,6 +337,8 @@ const ScriptList = () => {
color="error"
onClick={() => handleDelete(script.id)}
aria-label="delete"
+ disabled={script.source === 'vault'}
+ title={script.source === 'vault' ? 'Vault items cannot be deleted here' : 'Delete'}
>
@@ -340,6 +378,20 @@ const ScriptList = () => {
placeholder="Brief description of what this script does"
sx={{ mb: 2 }}
/>
+ setFormData({ ...formData, group: value })}
+ resourceType="bash-scripts"
+ helperText="Select an existing group or type a new one"
+ />
+ {!editingScript && (
+
+ setFormData({ ...formData, storage: value })}
+ />
+
+ )}
{
const [openDialog, setOpenDialog] = useState(false);
const [openEditDialog, setOpenEditDialog] = useState(false);
const [selectedServer, setSelectedServer] = useState(null);
+ const [selectedGroup, setSelectedGroup] = useState('all');
// Fetch servers from API
const fetchServers = async () => {
try {
setLoading(true);
setError(null);
- const response = await fetch('/api/servers');
+ const url = selectedGroup === 'all'
+ ? '/api/servers'
+ : `/api/servers?group=${encodeURIComponent(selectedGroup)}`;
+ const response = await fetch(url);
if (!response.ok) {
throw new Error('Failed to fetch servers');
@@ -49,10 +55,10 @@ const ServerList = () => {
}
};
- // Load servers on component mount
+ // Load servers on component mount or when group changes
useEffect(() => {
fetchServers();
- }, []);
+ }, [selectedGroup]);
// Handle server deletion
const handleDelete = async (id) => {
@@ -101,13 +107,20 @@ const ServerList = () => {
Server Management
- }
- onClick={() => setOpenDialog(true)}
- >
- Add New Server
-
+
+
+ }
+ onClick={() => setOpenDialog(true)}
+ >
+ Add New Server
+
+
{error && (
@@ -135,17 +148,23 @@ const ServerList = () => {
IP Address / Hostname
Port
Username
+ Group
+ Source
Created At
Actions
{servers.map((server) => (
-
+
{server.name || '-'}
{server.ip_address || '-'}
{server.port || 22}
{server.username || 'root'}
+ {server.group || 'default'}
+
+
+
{new Date(server.created_at).toLocaleString()}
@@ -155,6 +174,8 @@ const ServerList = () => {
onClick={() => handleEdit(server)}
aria-label="edit"
sx={{ mr: 1 }}
+ disabled={server.source === 'vault'}
+ title={server.source === 'vault' ? 'Vault items cannot be edited here' : 'Edit'}
>
@@ -162,6 +183,8 @@ const ServerList = () => {
color="error"
onClick={() => handleDelete(server.id)}
aria-label="delete"
+ disabled={server.source === 'vault'}
+ title={server.source === 'vault' ? 'Vault items cannot be deleted here' : 'Delete'}
>
diff --git a/frontend/src/components/Terminal.jsx b/frontend/src/components/Terminal.jsx
index a74eea4..67f7bdd 100644
--- a/frontend/src/components/Terminal.jsx
+++ b/frontend/src/components/Terminal.jsx
@@ -10,6 +10,9 @@ import {
InputLabel,
Select,
MenuItem,
+ ListItemIcon,
+ ListItemText,
+ Chip,
} from '@mui/material';
import {
ArrowBack,
@@ -17,6 +20,8 @@ import {
FullscreenExit,
Refresh,
VpnKey,
+ Storage,
+ Lock,
} from '@mui/icons-material';
import { useNavigate } from 'react-router-dom';
import { TerminalProvider, useTerminal } from '../context/TerminalContext';
@@ -60,10 +65,22 @@ const TerminalContent = () => {
const fetchSshKeys = async () => {
try {
+ // /api/keys already returns merged local + vault keys with source field
const response = await fetch('/api/keys');
if (response.ok) {
const data = await response.json();
- setSshKeys(data || []);
+ const keysWithCompositeId = (data || []).map((key) => {
+ // Determine source: vault keys have source="vault", local have source="sqlite" or no source
+ const isVault = key.source === 'vault';
+ // Create composite ID: vault keys use name (no numeric id), local keys use id
+ const compositeId = isVault ? `vault:${key.name}` : `local:${key.id}`;
+ return {
+ ...key,
+ source: isVault ? 'vault' : 'local',
+ compositeId,
+ };
+ });
+ setSshKeys(keysWithCompositeId);
}
} catch (err) {
console.error('Failed to fetch SSH keys:', err);
@@ -103,7 +120,8 @@ const TerminalContent = () => {
// Handle SSH key change for active tab
const handleSshKeyChange = (e) => {
if (activeTab) {
- updateTabConfig(activeTab.id, { sshKeyId: e.target.value });
+ const compositeId = e.target.value;
+ updateTabConfig(activeTab.id, { sshKeyId: compositeId });
// Trigger reconnect
window.dispatchEvent(
new CustomEvent('terminal-reconnect', { detail: { tabId: activeTab.id } })
@@ -111,6 +129,12 @@ const TerminalContent = () => {
}
};
+ // Helper to get the selected key object from composite ID
+ const getSelectedKey = (compositeId) => {
+ if (!compositeId) return null;
+ return sshKeys.find((k) => k.compositeId === compositeId);
+ };
+
// Handle reconnect for active tab
const handleReconnect = () => {
if (activeTab) {
@@ -170,24 +194,46 @@ const TerminalContent = () => {
{/* SSH Key selector for active tab */}
-
+
SSH Key
- ) : null
- }
+ renderValue={(value) => {
+ if (!value) return None;
+ const key = getSelectedKey(value);
+ if (!key) return value;
+ return (
+
+
+ {key.name}
+ {key.source === 'vault' ? (
+
+ ) : (
+
+ )}
+
+ );
+ }}
>
{sshKeys.map((key) => (
-