steve
c8ead66f08
Cohesive batch from a smoke-test session against a real rest-server.
Themed bullets:
* Agent runs as root, sandboxed via systemd. CapabilityBoundingSet
drops to CAP_DAC_READ_SEARCH + restore caps; ProtectSystem=strict
with ReadWritePaths confined to /etc + /var/lib/restic-manager;
NoNewPrivileges blocks escalation. Install script no longer
creates a service user. spec.md §4.2 / §14.1 / §14.3 explain the
rationale (matches UrBackup / Veeam / Bareos defaults; trying to
back up "everything" as an unprivileged user creates silent skips
on /home, /root, /var/lib/* with no upside vs the threat model
the agent already implies).
* Init-repo end-to-end. New JobKind="init" wired through agent
runner, restic.Env.RunInit, server dispatcher, and a UI button
(red "Initialise repo" in the run-now panel). hosts.repo_initialised_at
flips on init success, on backup success, or on a non-empty
snapshots.report. The "Run now" / "Init" / "Retry" branching now
drives both the dashboard host row and the host-detail panel.
Migrations 0004 (column), 0005 (jobs.kind CHECK widened — using
the safe create-new-then-rename pattern; first version corrupted
job_logs.job_id FK), 0006 (cleans up job_logs FK on already-
affected DBs).
* rest-server creds embedded at exec time only. restic.Env gains
RepoUsername; mergeRestCreds() builds the user:pass@-prefixed URL
inside envSlice() and never assigns it back to the struct, so
nothing slog-able ever sees the cleartext form. RedactURL helper
for any future surface that needs to log a URL safely. Both
helpers tested.
* Add-host UX. Repo password is now optional — server mints a
24-byte URL-safe random one and surfaces it once, alongside an
htpasswd snippet ("echo PASS | htpasswd -B -i ... USERNAME") so
the operator pastes one command on the rest-server host and one
on the endpoint. Result page also links the install snippet at
/install/install.sh (was /install.sh — 404'd before) and pipes
to bash (not sh — script uses set -o pipefail and other
bashisms; on Debian/Ubuntu sh is dash).
* Late-subscriber race in JobHub. A fast-failing job could finish
(DB write + Broadcast) before the browser's HX-Redirect → page
load → WS-connect path completed, so the JS sat forever waiting
on a job.finished that already passed. JobHub split into
Register + Send + Run; handleJobStream now subscribes first,
re-fetches the job, and sends a synthetic job.finished if the
state is already terminal.
* HTMX error visibility. New toast partial listens to
htmx:responseError and surfaces the response body as a
bottom-right toast — every server-side validation error now
becomes visible without per-handler JS wiring. Also handles
custom rm:toast events for future server-pushed notifications
via the HX-Trigger header. Themed via existing CSS vars.
* Dashboard rows are now whole-row clickable to host detail
(CSS card-link pattern: absolute-positioned anchor + .row-action
z-index restoration so the action button stays clickable).
"View →" on a running job links to /jobs/<id> rather than
/hosts/<id> since the row click already covers the host page.
* "Run first" / "Run first backup" → "Run now" everywhere for
consistency.
* runbook (docs/e2e-smoke.md) updated — live-log streaming step
now reflects P1-26; mentions the browser-driven Run-now flow.
* _diag/dump-creds — moved out of cmd/ so go build doesn't pick
it up; .gitignore now excludes /_diag/ entirely.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
212 lines
10 KiB
HTML
212 lines
10 KiB
HTML
{{define "title"}}{{.Title}}{{end}}
|
|
|
|
{{define "content"}}
|
|
{{$page := .Page}}
|
|
{{$host := $page.Host}}
|
|
<div class="max-w-[1280px] mx-auto px-8 pt-7">
|
|
|
|
<div class="crumbs"><a href="/">Dashboard</a><span class="sep">/</span><span class="text-ink-mid">{{$host.Name}}</span></div>
|
|
|
|
{{/* ---------- header ---------- */}}
|
|
<div class="flex items-start justify-between mt-3.5">
|
|
<div>
|
|
<div class="flex items-center gap-3">
|
|
{{if eq $host.Status "online"}}
|
|
<span class="dot dot-online{{if $host.CurrentJobID}} pulse{{end}}"></span>
|
|
{{else if eq $host.Status "degraded"}}
|
|
<span class="dot dot-degraded"></span>
|
|
{{else if eq $host.Status "offline"}}
|
|
<span class="dot dot-offline"></span>
|
|
{{else}}
|
|
<span class="dot dot-failed"></span>
|
|
{{end}}
|
|
<h1 class="mono text-[26px] font-medium tracking-[0.005em] text-ink">{{$host.Name}}</h1>
|
|
<div class="flex gap-1.5">{{range $host.Tags}}<span class="tag">{{.}}</span>{{end}}</div>
|
|
</div>
|
|
<div class="flex items-center gap-3 mt-3 text-[13px] text-ink-mute">
|
|
<span class="mono text-ink-mid">{{$host.OS}}/{{$host.Arch}}</span>
|
|
<span class="text-ink-fade">·</span>
|
|
<span>agent <span class="mono text-ink-mid">{{if $host.AgentVersion}}{{$host.AgentVersion}}{{else}}—{{end}}</span></span>
|
|
<span class="text-ink-fade">·</span>
|
|
<span>restic <span class="mono text-ink-mid">{{if $host.ResticVersion}}{{$host.ResticVersion}}{{else}}—{{end}}</span></span>
|
|
<span class="text-ink-fade">·</span>
|
|
{{if eq $host.Status "offline"}}
|
|
<span>last seen <span class="mono text-ink-mid">{{relTime $host.LastSeenAt}}</span></span>
|
|
{{else}}
|
|
<span>online · last heartbeat <span class="mono text-ink-mid">{{relTime $host.LastSeenAt}}</span></span>
|
|
{{end}}
|
|
</div>
|
|
</div>
|
|
<div class="flex items-center gap-2">
|
|
{{if eq $host.Status "offline"}}
|
|
<button class="btn" disabled title="agent is offline">Run backup now</button>
|
|
{{else if not $host.RepoInitialisedAt}}
|
|
<button class="btn btn-danger"
|
|
hx-post="/hosts/{{$host.ID}}/init-repo"
|
|
hx-swap="none"
|
|
hx-disabled-elt="this"
|
|
title="restic repo not yet initialised — run this once before the first backup">Initialise repo</button>
|
|
{{else}}
|
|
<button class="btn btn-primary"
|
|
hx-post="/hosts/{{$host.ID}}/run-backup"
|
|
hx-swap="none"
|
|
hx-disabled-elt="this">Run backup now</button>
|
|
{{end}}
|
|
<button class="btn">Edit credentials</button>
|
|
<button class="btn btn-ghost text-base px-2.5">⋯</button>
|
|
</div>
|
|
</div>
|
|
|
|
{{/* ---------- vitals strip ---------- */}}
|
|
<div class="grid grid-cols-12 gap-6 mt-6 py-5 border-y border-line-soft">
|
|
<div class="col-span-3">
|
|
<div class="text-[11px] text-ink-fade uppercase tracking-[0.08em]">Last backup</div>
|
|
<div class="mono text-[18px] text-ink mt-1">
|
|
{{if eq (deref $host.LastBackupStatus) "succeeded"}}
|
|
<span class="text-ok">succeeded</span>
|
|
{{else if eq (deref $host.LastBackupStatus) "failed"}}
|
|
<span class="text-bad">failed</span>
|
|
{{else if eq (deref $host.LastBackupStatus) "cancelled"}}
|
|
<span class="text-warn">cancelled</span>
|
|
{{else}}
|
|
<span class="text-ink-fade italic">never run</span>
|
|
{{end}}
|
|
{{if $host.LastBackupAt}} · {{relTime $host.LastBackupAt}}{{end}}
|
|
</div>
|
|
</div>
|
|
<div class="col-span-3">
|
|
<div class="text-[11px] text-ink-fade uppercase tracking-[0.08em]">Repo size</div>
|
|
<div class="mono text-[18px] text-ink mt-1">{{bytes $host.RepoSizeBytes}}</div>
|
|
</div>
|
|
<div class="col-span-3">
|
|
<div class="text-[11px] text-ink-fade uppercase tracking-[0.08em]">Snapshots</div>
|
|
<div class="mono text-[18px] text-ink mt-1">{{comma $host.SnapshotCount}}</div>
|
|
</div>
|
|
<div class="col-span-3">
|
|
<div class="text-[11px] text-ink-fade uppercase tracking-[0.08em]">Open alerts</div>
|
|
<div class="mono text-[18px] mt-1 {{if gt $host.OpenAlertCount 0}}text-bad{{else}}text-ok{{end}}">
|
|
{{if eq $host.OpenAlertCount 0}}0 · all clear{{else}}{{$host.OpenAlertCount}} · review →{{end}}
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
{{/* ---------- secondary tabs ---------- */}}
|
|
<div class="flex items-end mt-1.5">
|
|
<div class="sub-tab active">Snapshots <span class="mono text-ink-fade text-[11px] ml-1">{{comma $host.SnapshotCount}}</span></div>
|
|
<div class="sub-tab">Jobs</div>
|
|
<div class="sub-tab">Repo</div>
|
|
<div class="sub-tab">Settings</div>
|
|
</div>
|
|
|
|
{{/* ---------- snapshots tab ---------- */}}
|
|
<div class="grid grid-cols-12 gap-6 pt-6 pb-14 items-start">
|
|
|
|
<div class="col-span-9">
|
|
<div class="flex items-center justify-between mb-3">
|
|
<div class="flex items-center gap-3">
|
|
<h2 class="text-[13px] font-semibold tracking-[0.01em]">Snapshots</h2>
|
|
<div class="text-xs text-ink-fade">showing {{$page.SnapshotsShown}} of {{comma $host.SnapshotCount}}</div>
|
|
</div>
|
|
</div>
|
|
|
|
<div class="panel rounded-[7px] overflow-hidden">
|
|
|
|
{{if eq (len $page.Snapshots) 0}}
|
|
<div class="empty-state" style="border: none; background: var(--panel);">
|
|
<h3 class="text-base font-medium tracking-[-0.005em]">No snapshots yet.</h3>
|
|
<p class="text-pretty text-ink-mute text-[13px] mt-2 mx-auto max-w-[440px] leading-[1.65]">
|
|
Once a backup completes, the agent will refresh this list automatically.
|
|
</p>
|
|
{{if ne $host.Status "offline"}}
|
|
<div class="mt-5">
|
|
{{if not $host.RepoInitialisedAt}}
|
|
<button class="btn btn-danger"
|
|
hx-post="/hosts/{{$host.ID}}/init-repo"
|
|
hx-swap="none"
|
|
hx-disabled-elt="this">Initialise repo</button>
|
|
{{else}}
|
|
<button class="btn btn-primary"
|
|
hx-post="/hosts/{{$host.ID}}/run-backup"
|
|
hx-swap="none"
|
|
hx-disabled-elt="this">Run now</button>
|
|
{{end}}
|
|
</div>
|
|
{{end}}
|
|
</div>
|
|
{{else}}
|
|
<div class="hairline grid items-baseline px-4 py-2.5 text-[11px] text-ink-fade uppercase tracking-[0.08em]"
|
|
style="grid-template-columns: 0.8fr 1fr 2fr 0.7fr 0.7fr 0.7fr; column-gap: 18px;">
|
|
<div>Snapshot id</div>
|
|
<div>Time</div>
|
|
<div>Paths</div>
|
|
<div class="text-right">Size</div>
|
|
<div class="text-right">Files</div>
|
|
<div></div>
|
|
</div>
|
|
|
|
{{range $i, $s := $page.Snapshots}}
|
|
<div class="grid items-center px-4 py-2.5 text-[13px] hairline"
|
|
style="grid-template-columns: 0.8fr 1fr 2fr 0.7fr 0.7fr 0.7fr; column-gap: 18px;">
|
|
<div class="mono text-ink font-medium">{{$s.ShortID}}</div>
|
|
<div class="mono text-ink-mid text-[12px]">{{absTime $s.Time}}</div>
|
|
<div class="mono text-ink-mid text-[12px] truncate" title="{{joinDot $s.Paths}}">{{joinDot $s.Paths}}</div>
|
|
<div class="text-right mono text-ink">{{bytes $s.SizeBytes}}</div>
|
|
<div class="text-right mono text-ink-mid">
|
|
{{if eq $s.FileCount 0}}<span class="text-ink-fade">—</span>{{else}}{{comma $s.FileCount}}{{end}}
|
|
</div>
|
|
<div class="text-right">
|
|
<button class="btn btn-ghost" disabled title="restore wizard lands in P3">Restore →</button>
|
|
</div>
|
|
</div>
|
|
{{end}}
|
|
{{end}}
|
|
|
|
</div>
|
|
|
|
{{if eq $host.SnapshotCount 0}}
|
|
{{else if gt $host.SnapshotCount $page.SnapshotsShown}}
|
|
<div class="text-xs text-ink-mute mt-3 px-1">showing the {{$page.SnapshotsShown}} most-recent snapshots — full pagination lands later</div>
|
|
{{end}}
|
|
</div>
|
|
|
|
{{/* ---------- right rail ---------- */}}
|
|
<aside class="col-span-3 flex flex-col gap-4">
|
|
|
|
<div class="panel rounded-[7px] px-4 py-3.5">
|
|
<div class="text-[11px] text-ink-fade uppercase tracking-[0.1em] mb-2.5">Run-now</div>
|
|
<div class="flex flex-col gap-1.5">
|
|
{{if not $host.RepoInitialisedAt}}
|
|
<button class="btn justify-start w-full text-bad font-medium {{if eq $host.Status "offline"}}opacity-50 cursor-not-allowed pointer-events-none{{end}}"
|
|
hx-post="/hosts/{{$host.ID}}/init-repo"
|
|
hx-swap="none"
|
|
hx-disabled-elt="this"
|
|
title="restic repo not yet initialised — click to run `restic init` once">init</button>
|
|
{{end}}
|
|
<button class="btn justify-start w-full {{if or (eq $host.Status "offline") (not $host.RepoInitialisedAt)}}opacity-50 cursor-not-allowed pointer-events-none{{end}}"
|
|
hx-post="/hosts/{{$host.ID}}/run-backup"
|
|
hx-swap="none"
|
|
hx-disabled-elt="this"
|
|
{{if not $host.RepoInitialisedAt}}title="initialise the repo first"{{end}}>backup</button>
|
|
<button class="btn justify-start w-full" disabled title="lands with P2-05">forget <span class="text-[10px] text-ink-fade ml-1.5">P2</span></button>
|
|
<button class="btn justify-start w-full" disabled title="lands with P2-06">prune <span class="text-[10px] text-ink-fade ml-1.5">admin</span></button>
|
|
<button class="btn justify-start w-full" disabled title="lands with P2-07">check <span class="text-[10px] text-ink-fade ml-1.5">P2</span></button>
|
|
<button class="btn justify-start w-full" disabled title="lands with P2-08">unlock <span class="text-[10px] text-ink-fade ml-1.5">P2</span></button>
|
|
</div>
|
|
</div>
|
|
|
|
<div class="panel rounded-[7px] px-4 py-3.5">
|
|
<div class="text-[11px] text-bad uppercase tracking-[0.1em] font-semibold mb-2.5">Danger zone</div>
|
|
<p class="text-pretty text-[12px] text-ink-mute leading-[1.55] mb-3">
|
|
Removes the host record. The repo data on the rest-server is left intact —
|
|
you delete that yourself.
|
|
</p>
|
|
<button class="btn btn-danger w-full justify-center" disabled title="lands later in Phase 1">Remove host…</button>
|
|
</div>
|
|
|
|
</aside>
|
|
|
|
</div>
|
|
|
|
</div>
|
|
{{end}}
|