From c649f055d831cdbaf1bf92d789fdd2feb3baf059 Mon Sep 17 00:00:00 2001
From: I-Fun
Date: Tue, 7 Apr 2026 20:29:32 +0700
Subject: [PATCH] feat: initialize Infra Manager with React, Tailwind CSS, and
Inertia.js
- Added main application entry point (app.jsx) and bootstrap file for React setup.
- Created Wiki index page (Index.jsx) for documentation and file management.
- Implemented utility functions for formatting and status handling in utils.js.
- Set up Blade template (app.blade.php) for Inertia.js integration.
- Defined API routes for metrics and terminal access in api.php.
- Established console commands for scheduled tasks in console.php.
- Created web routes for various application features including authentication, hypervisors, containers, cloud accounts, security, backups, and wiki management in web.php.
- Developed setup scripts for Windows (setup.ps1) and Linux (setup.sh) environments.
- Configured Tailwind CSS for styling with custom themes and animations in tailwind.config.js.
- Set up Vite for asset bundling and development server in vite.config.js.
---
.env.example | 69 +++++
.gitignore | 20 ++
app/Http/Controllers/Acl/RoleController.php | 58 ++++
app/Http/Controllers/Acl/UserController.php | 93 +++++++
.../Controllers/Admin/AdminController.php | 108 ++++++++
app/Http/Controllers/Admin/LdapController.php | 83 ++++++
.../Controllers/Admin/SettingsController.php | 27 ++
.../Controllers/Api/MetricsController.php | 21 ++
.../Controllers/Api/WebSocketController.php | 15 ++
app/Http/Controllers/Auth/AuthController.php | 83 ++++++
.../Controllers/Backup/BackupController.php | 52 ++++
.../Controllers/Backup/RestoreController.php | 19 ++
.../Cloud/CloudAccountController.php | 69 +++++
.../Cloud/CloudResourceController.php | 22 ++
.../Container/ContainerController.php | 54 ++++
.../Controllers/Container/StackController.php | 68 +++++
app/Http/Controllers/DashboardController.php | 68 +++++
.../Hypervisor/HypervisorController.php | 121 +++++++++
.../Hypervisor/TemplateController.php | 77 ++++++
.../Hypervisor/VirtualMachineController.php | 60 +++++
.../Identity/CertificateController.php | 69 +++++
.../Identity/PasswordController.php | 60 +++++
.../Monitoring/MonitoringController.php | 58 ++++
.../Controllers/Security/ScanController.php | 44 +++
.../Security/SecurityDashboardController.php | 39 +++
.../Controllers/Wiki/DocumentController.php | 96 +++++++
app/Http/Controllers/Wiki/WikiController.php | 54 ++++
app/Http/Middleware/HandleInertiaRequests.php | 74 +++++
app/Models/Alert.php | 22 ++
app/Models/AlertRule.php | 14 +
app/Models/Backup.php | 16 ++
app/Models/BackupPolicy.php | 15 ++
app/Models/Certificate.php | 34 +++
app/Models/CloudAccount.php | 40 +++
app/Models/CloudResource.php | 15 ++
app/Models/Container.php | 23 ++
app/Models/DockerEndpoint.php | 29 ++
app/Models/Hypervisor.php | 70 +++++
app/Models/LdapConfig.php | 35 +++
app/Models/PasswordEntry.php | 40 +++
app/Models/SecurityScan.php | 19 ++
app/Models/SecurityScore.php | 11 +
app/Models/Setting.php | 57 ++++
app/Models/Stack.php | 15 ++
app/Models/User.php | 58 ++++
app/Models/VirtualMachine.php | 23 ++
app/Models/VmTemplate.php | 19 ++
app/Models/WikiPage.php | 25 ++
app/Models/WikiPageRevision.php | 12 +
app/Models/WikiSpace.php | 18 ++
app/Providers/AppServiceProvider.php | 42 +++
app/Providers/AuthServiceProvider.php | 25 ++
app/Services/Container/DockerManager.php | 114 ++++++++
app/Services/Hypervisor/HyperVDriver.php | 32 +++
.../Hypervisor/HypervisorDriverInterface.php | 19 ++
app/Services/Hypervisor/HypervisorManager.php | 53 ++++
app/Services/Hypervisor/ProxmoxDriver.php | 179 +++++++++++++
app/Services/Hypervisor/VCenterDriver.php | 163 +++++++++++
bootstrap/app.php | 41 +++
bootstrap/providers.php | 8 +
composer.json | 77 ++++++
config/activitylog.php | 12 +
config/app.php | 45 ++++
config/auth.php | 20 ++
config/cache.php | 11 +
config/database.php | 47 ++++
config/ldap.php | 36 +++
config/permission.php | 33 +++
config/queue.php | 12 +
config/session.php | 20 ++
.../0001_01_01_000000_create_users_table.php | 55 ++++
.../0001_01_01_000001_create_cache_table.php | 29 ++
.../0001_01_01_000002_create_jobs_table.php | 51 ++++
...024_01_01_000001_create_settings_table.php | 26 ++
..._01_01_000002_create_hypervisors_table.php | 102 +++++++
...4_01_01_000003_create_containers_table.php | 80 ++++++
.../2024_01_01_000004_create_cloud_table.php | 50 ++++
...024_01_01_000005_create_security_table.php | 64 +++++
...2024_01_01_000006_create_backups_table.php | 69 +++++
...4_01_01_000007_create_monitoring_table.php | 75 ++++++
...024_01_01_000008_create_identity_table.php | 72 +++++
.../2024_01_01_000009_create_wiki_table.php | 73 +++++
.../2024_01_01_000010_create_ldap_table.php | 37 +++
database/seeders/DatabaseSeeder.php | 96 +++++++
docker-compose.yml | 119 ++++++++
docker/nginx/default.conf | 97 +++++++
docker/php/Dockerfile | 92 +++++++
docker/php/opcache.ini | 8 +
docker/php/php.ini | 7 +
docker/supervisor/supervisord.conf | 32 +++
package.json | 50 ++++
resources/css/app.css | 112 ++++++++
resources/js/Components/ui/Button.jsx | 42 +++
resources/js/Components/ui/DataTable.jsx | 137 ++++++++++
resources/js/Components/ui/GlassCard.jsx | 59 ++++
resources/js/Components/ui/Modal.jsx | 54 ++++
resources/js/Components/ui/ProgressBar.jsx | 40 +++
resources/js/Components/ui/StatusBadge.jsx | 34 +++
resources/js/Layouts/AppLayout.jsx | 253 ++++++++++++++++++
resources/js/Pages/Acl/Index.jsx | 120 +++++++++
resources/js/Pages/Admin/Index.jsx | 93 +++++++
resources/js/Pages/Admin/Ldap.jsx | 146 ++++++++++
resources/js/Pages/Admin/Settings.jsx | 115 ++++++++
resources/js/Pages/Auth/Login.jsx | 154 +++++++++++
resources/js/Pages/Backup/Index.jsx | 114 ++++++++
resources/js/Pages/Cloud/Index.jsx | 150 +++++++++++
resources/js/Pages/Container/Index.jsx | 131 +++++++++
resources/js/Pages/Dashboard/Index.jsx | 238 ++++++++++++++++
resources/js/Pages/Error.jsx | 39 +++
resources/js/Pages/Hypervisor/Create.jsx | 163 +++++++++++
resources/js/Pages/Hypervisor/Index.jsx | 114 ++++++++
resources/js/Pages/Identity/Index.jsx | 161 +++++++++++
resources/js/Pages/Monitoring/Index.jsx | 131 +++++++++
resources/js/Pages/Security/Index.jsx | 138 ++++++++++
resources/js/Pages/Wiki/Index.jsx | 113 ++++++++
resources/js/app.jsx | 24 ++
resources/js/bootstrap.js | 4 +
resources/js/lib/utils.js | 71 +++++
resources/views/app.blade.php | 24 ++
routes/api.php | 10 +
routes/console.php | 16 ++
routes/web.php | 205 ++++++++++++++
setup.ps1 | 73 +++++
setup.sh | 102 +++++++
tailwind.config.js | 149 +++++++++++
vite.config.js | 29 ++
126 files changed, 8122 insertions(+)
create mode 100644 .env.example
create mode 100644 .gitignore
create mode 100644 app/Http/Controllers/Acl/RoleController.php
create mode 100644 app/Http/Controllers/Acl/UserController.php
create mode 100644 app/Http/Controllers/Admin/AdminController.php
create mode 100644 app/Http/Controllers/Admin/LdapController.php
create mode 100644 app/Http/Controllers/Admin/SettingsController.php
create mode 100644 app/Http/Controllers/Api/MetricsController.php
create mode 100644 app/Http/Controllers/Api/WebSocketController.php
create mode 100644 app/Http/Controllers/Auth/AuthController.php
create mode 100644 app/Http/Controllers/Backup/BackupController.php
create mode 100644 app/Http/Controllers/Backup/RestoreController.php
create mode 100644 app/Http/Controllers/Cloud/CloudAccountController.php
create mode 100644 app/Http/Controllers/Cloud/CloudResourceController.php
create mode 100644 app/Http/Controllers/Container/ContainerController.php
create mode 100644 app/Http/Controllers/Container/StackController.php
create mode 100644 app/Http/Controllers/DashboardController.php
create mode 100644 app/Http/Controllers/Hypervisor/HypervisorController.php
create mode 100644 app/Http/Controllers/Hypervisor/TemplateController.php
create mode 100644 app/Http/Controllers/Hypervisor/VirtualMachineController.php
create mode 100644 app/Http/Controllers/Identity/CertificateController.php
create mode 100644 app/Http/Controllers/Identity/PasswordController.php
create mode 100644 app/Http/Controllers/Monitoring/MonitoringController.php
create mode 100644 app/Http/Controllers/Security/ScanController.php
create mode 100644 app/Http/Controllers/Security/SecurityDashboardController.php
create mode 100644 app/Http/Controllers/Wiki/DocumentController.php
create mode 100644 app/Http/Controllers/Wiki/WikiController.php
create mode 100644 app/Http/Middleware/HandleInertiaRequests.php
create mode 100644 app/Models/Alert.php
create mode 100644 app/Models/AlertRule.php
create mode 100644 app/Models/Backup.php
create mode 100644 app/Models/BackupPolicy.php
create mode 100644 app/Models/Certificate.php
create mode 100644 app/Models/CloudAccount.php
create mode 100644 app/Models/CloudResource.php
create mode 100644 app/Models/Container.php
create mode 100644 app/Models/DockerEndpoint.php
create mode 100644 app/Models/Hypervisor.php
create mode 100644 app/Models/LdapConfig.php
create mode 100644 app/Models/PasswordEntry.php
create mode 100644 app/Models/SecurityScan.php
create mode 100644 app/Models/SecurityScore.php
create mode 100644 app/Models/Setting.php
create mode 100644 app/Models/Stack.php
create mode 100644 app/Models/User.php
create mode 100644 app/Models/VirtualMachine.php
create mode 100644 app/Models/VmTemplate.php
create mode 100644 app/Models/WikiPage.php
create mode 100644 app/Models/WikiPageRevision.php
create mode 100644 app/Models/WikiSpace.php
create mode 100644 app/Providers/AppServiceProvider.php
create mode 100644 app/Providers/AuthServiceProvider.php
create mode 100644 app/Services/Container/DockerManager.php
create mode 100644 app/Services/Hypervisor/HyperVDriver.php
create mode 100644 app/Services/Hypervisor/HypervisorDriverInterface.php
create mode 100644 app/Services/Hypervisor/HypervisorManager.php
create mode 100644 app/Services/Hypervisor/ProxmoxDriver.php
create mode 100644 app/Services/Hypervisor/VCenterDriver.php
create mode 100644 bootstrap/app.php
create mode 100644 bootstrap/providers.php
create mode 100644 composer.json
create mode 100644 config/activitylog.php
create mode 100644 config/app.php
create mode 100644 config/auth.php
create mode 100644 config/cache.php
create mode 100644 config/database.php
create mode 100644 config/ldap.php
create mode 100644 config/permission.php
create mode 100644 config/queue.php
create mode 100644 config/session.php
create mode 100644 database/migrations/0001_01_01_000000_create_users_table.php
create mode 100644 database/migrations/0001_01_01_000001_create_cache_table.php
create mode 100644 database/migrations/0001_01_01_000002_create_jobs_table.php
create mode 100644 database/migrations/2024_01_01_000001_create_settings_table.php
create mode 100644 database/migrations/2024_01_01_000002_create_hypervisors_table.php
create mode 100644 database/migrations/2024_01_01_000003_create_containers_table.php
create mode 100644 database/migrations/2024_01_01_000004_create_cloud_table.php
create mode 100644 database/migrations/2024_01_01_000005_create_security_table.php
create mode 100644 database/migrations/2024_01_01_000006_create_backups_table.php
create mode 100644 database/migrations/2024_01_01_000007_create_monitoring_table.php
create mode 100644 database/migrations/2024_01_01_000008_create_identity_table.php
create mode 100644 database/migrations/2024_01_01_000009_create_wiki_table.php
create mode 100644 database/migrations/2024_01_01_000010_create_ldap_table.php
create mode 100644 database/seeders/DatabaseSeeder.php
create mode 100644 docker-compose.yml
create mode 100644 docker/nginx/default.conf
create mode 100644 docker/php/Dockerfile
create mode 100644 docker/php/opcache.ini
create mode 100644 docker/php/php.ini
create mode 100644 docker/supervisor/supervisord.conf
create mode 100644 package.json
create mode 100644 resources/css/app.css
create mode 100644 resources/js/Components/ui/Button.jsx
create mode 100644 resources/js/Components/ui/DataTable.jsx
create mode 100644 resources/js/Components/ui/GlassCard.jsx
create mode 100644 resources/js/Components/ui/Modal.jsx
create mode 100644 resources/js/Components/ui/ProgressBar.jsx
create mode 100644 resources/js/Components/ui/StatusBadge.jsx
create mode 100644 resources/js/Layouts/AppLayout.jsx
create mode 100644 resources/js/Pages/Acl/Index.jsx
create mode 100644 resources/js/Pages/Admin/Index.jsx
create mode 100644 resources/js/Pages/Admin/Ldap.jsx
create mode 100644 resources/js/Pages/Admin/Settings.jsx
create mode 100644 resources/js/Pages/Auth/Login.jsx
create mode 100644 resources/js/Pages/Backup/Index.jsx
create mode 100644 resources/js/Pages/Cloud/Index.jsx
create mode 100644 resources/js/Pages/Container/Index.jsx
create mode 100644 resources/js/Pages/Dashboard/Index.jsx
create mode 100644 resources/js/Pages/Error.jsx
create mode 100644 resources/js/Pages/Hypervisor/Create.jsx
create mode 100644 resources/js/Pages/Hypervisor/Index.jsx
create mode 100644 resources/js/Pages/Identity/Index.jsx
create mode 100644 resources/js/Pages/Monitoring/Index.jsx
create mode 100644 resources/js/Pages/Security/Index.jsx
create mode 100644 resources/js/Pages/Wiki/Index.jsx
create mode 100644 resources/js/app.jsx
create mode 100644 resources/js/bootstrap.js
create mode 100644 resources/js/lib/utils.js
create mode 100644 resources/views/app.blade.php
create mode 100644 routes/api.php
create mode 100644 routes/console.php
create mode 100644 routes/web.php
create mode 100644 setup.ps1
create mode 100644 setup.sh
create mode 100644 tailwind.config.js
create mode 100644 vite.config.js
diff --git a/.env.example b/.env.example
new file mode 100644
index 0000000..a677acd
--- /dev/null
+++ b/.env.example
@@ -0,0 +1,69 @@
+APP_NAME="Infra Manager"
+APP_ENV=local
+APP_KEY=
+APP_DEBUG=true
+APP_VERSION=1.0.0
+APP_URL=http://localhost:8080
+APP_PORT=8080
+APP_HTTPS_PORT=8443
+
+LOG_CHANNEL=stack
+LOG_DEPRECATIONS_CHANNEL=null
+LOG_LEVEL=debug
+
+# ─── Database ─────────────────────────────────────────────────
+# SQLite (default — ready to use, no setup needed)
+DB_CONNECTION=sqlite
+DB_DATABASE=/var/www/html/database/database.sqlite
+
+# MySQL (uncomment to switch — run: docker compose --profile mysql up)
+# DB_CONNECTION=mysql
+# DB_HOST=mysql
+# DB_PORT=3306
+# DB_DATABASE=infra_manager
+# DB_USERNAME=infra_user
+# DB_PASSWORD=infra_secret
+
+# ─── Redis ────────────────────────────────────────────────────
+REDIS_HOST=redis
+REDIS_PASSWORD=infra_redis_secret
+REDIS_PORT=6379
+
+# ─── Cache & Queue ────────────────────────────────────────────
+CACHE_STORE=redis
+QUEUE_CONNECTION=redis
+SESSION_DRIVER=redis
+SESSION_LIFETIME=480
+
+# ─── Mail ─────────────────────────────────────────────────────
+MAIL_MAILER=log
+MAIL_HOST=mailpit
+MAIL_PORT=1025
+MAIL_USERNAME=null
+MAIL_PASSWORD=null
+MAIL_ENCRYPTION=null
+MAIL_FROM_ADDRESS="noreply@infra.local"
+MAIL_FROM_NAME="${APP_NAME}"
+
+# ─── Security ─────────────────────────────────────────────────
+# Generate with: php artisan key:generate
+APP_KEY=
+
+# ─── Docker Config ────────────────────────────────────────────
+USER_ID=1000
+GROUP_ID=1000
+MYSQL_ROOT_PASSWORD=root_secret_change_me
+MYSQL_DATABASE=infra_manager
+MYSQL_USER=infra_user
+MYSQL_PASSWORD=infra_secret_change_me
+
+# ─── LDAP (optional) ─────────────────────────────────────────
+LDAP_HOST=
+LDAP_PORT=389
+LDAP_BASE_DN=
+LDAP_USERNAME=
+LDAP_PASSWORD=
+LDAP_AUTH_ENABLED=false
+
+# ─── Vite ─────────────────────────────────────────────────────
+VITE_APP_NAME="${APP_NAME}"
diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..ee1ae57
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1,20 @@
+/node_modules
+/public/build
+/public/hot
+/public/storage
+/storage/*.key
+/vendor
+.env
+.env.backup
+.phpunit.result.cache
+database/database.sqlite
+Homestead.json
+Homestead.yaml
+auth.json
+npm-debug.log
+yarn-error.log
+/.fleet
+/.idea
+/.vscode
+docker/nginx/ssl/
+/bootstrap/cache/*.php
diff --git a/app/Http/Controllers/Acl/RoleController.php b/app/Http/Controllers/Acl/RoleController.php
new file mode 100644
index 0000000..6325368
--- /dev/null
+++ b/app/Http/Controllers/Acl/RoleController.php
@@ -0,0 +1,58 @@
+ \App\Models\User::with('roles')->paginate(30),
+ 'roles' => Role::withCount('permissions', 'users')->get(),
+ ]);
+ }
+
+ public function create()
+ {
+ return Inertia::render('Acl/RoleCreate', ['permissions' => Permission::all()->groupBy(fn($p) => explode('.', $p->name)[0])]);
+ }
+
+ public function store(Request $request)
+ {
+ $validated = $request->validate(['name' => 'required|string|unique:roles', 'permissions' => 'array']);
+ $role = Role::create(['name' => $validated['name']]);
+ if ($validated['permissions'] ?? false) {
+ $role->syncPermissions($validated['permissions']);
+ }
+ return redirect()->route('acl.index')->with('success', 'Role created.');
+ }
+
+ public function edit(Role $role)
+ {
+ return Inertia::render('Acl/RoleEdit', [
+ 'role' => $role->load('permissions'),
+ 'permissions' => Permission::all()->groupBy(fn($p) => explode('.', $p->name)[0]),
+ ]);
+ }
+
+ public function update(Request $request, Role $role)
+ {
+ $role->syncPermissions($request->input('permissions', []));
+ return back()->with('success', 'Role updated.');
+ }
+
+ public function destroy(Role $role)
+ {
+ if (in_array($role->name, ['super-admin', 'admin'])) {
+ return back()->with('error', 'Cannot delete system roles.');
+ }
+ $role->delete();
+ return back()->with('success', 'Role deleted.');
+ }
+}
diff --git a/app/Http/Controllers/Acl/UserController.php b/app/Http/Controllers/Acl/UserController.php
new file mode 100644
index 0000000..bff1b6d
--- /dev/null
+++ b/app/Http/Controllers/Acl/UserController.php
@@ -0,0 +1,93 @@
+route('acl.index');
+ }
+
+ public function create()
+ {
+ return \Inertia\Inertia::render('Acl/UserCreate', ['roles' => Role::all()]);
+ }
+
+ public function store(Request $request)
+ {
+ $validated = $request->validate([
+ 'name' => 'required|string',
+ 'email' => 'required|email|unique:users',
+ 'password' => 'required|string|min:8',
+ 'roles' => 'array',
+ ]);
+
+ $user = User::create([
+ 'name' => $validated['name'],
+ 'email' => $validated['email'],
+ 'password' => Hash::make($validated['password']),
+ ]);
+
+ if ($validated['roles'] ?? false) {
+ $user->assignRole($validated['roles']);
+ }
+
+ return redirect()->route('acl.index')->with('success', 'User created.');
+ }
+
+ public function edit(User $user)
+ {
+ return \Inertia\Inertia::render('Acl/UserEdit', [
+ 'user' => $user->load('roles'),
+ 'roles' => Role::all(),
+ ]);
+ }
+
+ public function update(Request $request, User $user)
+ {
+ $data = $request->validate([
+ 'name' => 'required|string',
+ 'email' => "required|email|unique:users,email,{$user->id}",
+ 'password' => 'nullable|string|min:8',
+ 'is_active' => 'boolean',
+ 'roles' => 'array',
+ ]);
+
+ if (!empty($data['password'])) {
+ $data['password'] = Hash::make($data['password']);
+ } else {
+ unset($data['password']);
+ }
+
+ $user->update($data);
+
+ if (isset($data['roles'])) {
+ $user->syncRoles($data['roles']);
+ }
+
+ return back()->with('success', 'User updated.');
+ }
+
+ public function destroy(User $user)
+ {
+ if ($user->id === auth()->id()) {
+ return back()->with('error', 'Cannot delete your own account.');
+ }
+ $user->delete();
+ return back()->with('success', 'User deleted.');
+ }
+
+ public function assignRole(Request $request, User $user)
+ {
+ $roles = $request->validate(['roles' => 'required|array'])['roles'];
+ $user->syncRoles($roles);
+ return back()->with('success', 'Roles updated.');
+ }
+}
diff --git a/app/Http/Controllers/Admin/AdminController.php b/app/Http/Controllers/Admin/AdminController.php
new file mode 100644
index 0000000..015ae7f
--- /dev/null
+++ b/app/Http/Controllers/Admin/AdminController.php
@@ -0,0 +1,108 @@
+ [
+ 'users' => User::count(),
+ 'sessions' => DB::table('sessions')->count(),
+ 'queued' => DB::table('jobs')->count(),
+ 'db_size' => $this->dbSize(),
+ ],
+ 'recent_activity' => Activity::with('causer')
+ ->orderByDesc('created_at')
+ ->limit(10)
+ ->get(),
+ ]);
+ }
+
+ public function auditLog()
+ {
+ return Inertia::render('Admin/AuditLog', [
+ 'logs' => Activity::with('causer', 'subject')
+ ->orderByDesc('created_at')
+ ->paginate(50),
+ ]);
+ }
+
+ public function systemHealth()
+ {
+ return Inertia::render('Admin/SystemHealth', [
+ 'health' => [
+ 'database' => $this->checkDatabase(),
+ 'cache' => $this->checkCache(),
+ 'queue' => $this->checkQueue(),
+ 'storage' => $this->checkStorage(),
+ ],
+ ]);
+ }
+
+ private function checkDatabase(): array
+ {
+ try {
+ DB::connection()->getPdo();
+ return ['status' => 'ok', 'driver' => config('database.default')];
+ } catch (\Throwable $e) {
+ return ['status' => 'error', 'message' => $e->getMessage()];
+ }
+ }
+
+ private function checkCache(): array
+ {
+ try {
+ cache()->set('health_check', true, 1);
+ return ['status' => 'ok', 'driver' => config('cache.default')];
+ } catch (\Throwable $e) {
+ return ['status' => 'error', 'message' => $e->getMessage()];
+ }
+ }
+
+ private function checkQueue(): array
+ {
+ return [
+ 'status' => 'ok',
+ 'pending' => DB::table('jobs')->count(),
+ 'failed' => DB::table('failed_jobs')->count(),
+ ];
+ }
+
+ private function checkStorage(): array
+ {
+ $path = storage_path();
+ return [
+ 'status' => 'ok',
+ 'writable' => is_writable($path),
+ 'free_bytes' => disk_free_space($path),
+ ];
+ }
+
+ private function dbSize(): string
+ {
+ try {
+ if (config('database.default') === 'sqlite') {
+ $size = filesize(database_path('database.sqlite'));
+ return $this->formatBytes($size);
+ }
+ return '—';
+ } catch (\Throwable) {
+ return '—';
+ }
+ }
+
+ private function formatBytes(int $bytes): string
+ {
+ $units = ['B', 'KB', 'MB', 'GB'];
+ $i = floor(log($bytes, 1024));
+ return round($bytes / (1024 ** $i), 2) . ' ' . $units[$i];
+ }
+}
diff --git a/app/Http/Controllers/Admin/LdapController.php b/app/Http/Controllers/Admin/LdapController.php
new file mode 100644
index 0000000..958731c
--- /dev/null
+++ b/app/Http/Controllers/Admin/LdapController.php
@@ -0,0 +1,83 @@
+ LdapConfig::first(),
+ ]);
+ }
+
+ public function update(Request $request)
+ {
+ $validated = $request->validate([
+ 'host' => 'required|string',
+ 'port' => 'required|integer',
+ 'use_ssl' => 'boolean',
+ 'use_tls' => 'boolean',
+ 'base_dn' => 'required|string',
+ 'bind_dn' => 'nullable|string',
+ 'bind_password' => 'nullable|string',
+ 'user_search_base' => 'nullable|string',
+ 'user_filter' => 'required|string',
+ 'admin_group_dn' => 'nullable|string',
+ 'is_active' => 'boolean',
+ ]);
+
+ $config = LdapConfig::firstOrNew([]);
+ $config->fill($validated);
+
+ if (empty($validated['bind_password'])) {
+ unset($config->bind_password);
+ }
+
+ $config->save();
+ activity()->causedBy(auth()->user())->log('LDAP configuration updated');
+
+ return back()->with('success', 'LDAP configuration saved.');
+ }
+
+ public function test(Request $request)
+ {
+ try {
+ $config = $request->validate([
+ 'host' => 'required', 'port' => 'required',
+ 'bind_dn' => 'nullable', 'bind_password' => 'nullable',
+ 'base_dn' => 'required',
+ ]);
+
+ $conn = ldap_connect("ldap://{$config['host']}:{$config['port']}");
+ ldap_set_option($conn, LDAP_OPT_PROTOCOL_VERSION, 3);
+ ldap_set_option($conn, LDAP_OPT_REFERRALS, 0);
+ ldap_set_option($conn, LDAP_OPT_TIMELIMIT, 5);
+
+ $bound = $config['bind_dn']
+ ? @ldap_bind($conn, $config['bind_dn'], $config['bind_password'])
+ : @ldap_bind($conn);
+
+ ldap_close($conn);
+
+ if (!$bound) {
+ return response()->json(['success' => false, 'message' => 'Bind failed. Check credentials.']);
+ }
+
+ return response()->json(['success' => true, 'message' => 'LDAP connection and bind successful!']);
+ } catch (\Throwable $e) {
+ return response()->json(['success' => false, 'message' => $e->getMessage()]);
+ }
+ }
+
+ public function sync()
+ {
+ // Sync LDAP users to local database
+ return back()->with('success', 'LDAP sync started.');
+ }
+}
diff --git a/app/Http/Controllers/Admin/SettingsController.php b/app/Http/Controllers/Admin/SettingsController.php
new file mode 100644
index 0000000..53ceac2
--- /dev/null
+++ b/app/Http/Controllers/Admin/SettingsController.php
@@ -0,0 +1,27 @@
+mapWithKeys(fn($s) => [$s->key => $s->value]);
+ return Inertia::render('Admin/Settings', ['settings' => $settings]);
+ }
+
+ public function update(Request $request)
+ {
+ foreach ($request->except('_token') as $key => $value) {
+ Setting::set($key, $value);
+ }
+
+ activity()->causedBy(auth()->user())->log('Settings updated');
+ return back()->with('success', 'Settings saved.');
+ }
+}
diff --git a/app/Http/Controllers/Api/MetricsController.php b/app/Http/Controllers/Api/MetricsController.php
new file mode 100644
index 0000000..dae1d03
--- /dev/null
+++ b/app/Http/Controllers/Api/MetricsController.php
@@ -0,0 +1,21 @@
+json([
+ 'cpu' => rand(10, 90),
+ 'memory' => rand(20, 85),
+ 'disk' => rand(5, 70),
+ 'net_rx' => rand(0, 500),
+ 'net_tx' => rand(0, 200),
+ 'ts' => now()->toIso8601String(),
+ ]);
+ }
+}
diff --git a/app/Http/Controllers/Api/WebSocketController.php b/app/Http/Controllers/Api/WebSocketController.php
new file mode 100644
index 0000000..9cc9d3d
--- /dev/null
+++ b/app/Http/Controllers/Api/WebSocketController.php
@@ -0,0 +1,15 @@
+json(['ticket' => base64_encode(random_bytes(32))]);
+ }
+}
diff --git a/app/Http/Controllers/Auth/AuthController.php b/app/Http/Controllers/Auth/AuthController.php
new file mode 100644
index 0000000..47b5c0d
--- /dev/null
+++ b/app/Http/Controllers/Auth/AuthController.php
@@ -0,0 +1,83 @@
+ config('ldap.auth.enabled', false),
+ ]);
+ }
+
+ public function login(Request $request)
+ {
+ $request->validate([
+ 'email' => 'required|string',
+ 'password' => 'required|string',
+ ]);
+
+ // Rate limiting
+ $key = 'login:' . $request->ip();
+ if (RateLimiter::tooManyAttempts($key, 5)) {
+ $seconds = RateLimiter::availableIn($key);
+ return back()->withErrors([
+ 'email' => "Too many login attempts. Please try again in {$seconds} seconds.",
+ ]);
+ }
+
+ $credentials = [
+ 'email' => $request->email,
+ 'password' => $request->password,
+ ];
+
+ if (!Auth::attempt($credentials, $request->boolean('remember'))) {
+ RateLimiter::hit($key, 300);
+ return back()->withErrors(['email' => 'Invalid credentials.']);
+ }
+
+ RateLimiter::clear($key);
+
+ $user = Auth::user();
+ if (!$user->is_active) {
+ Auth::logout();
+ return back()->withErrors(['email' => 'Your account has been disabled.']);
+ }
+
+ $user->update([
+ 'last_login_at' => now(),
+ 'last_login_ip' => $request->ip(),
+ ]);
+
+ activity()
+ ->causedBy($user)
+ ->log('User logged in from ' . $request->ip());
+
+ $request->session()->regenerate();
+
+ return redirect()->intended('/');
+ }
+
+ public function logout(Request $request)
+ {
+ activity()
+ ->causedBy(Auth::user())
+ ->log('User logged out');
+
+ Auth::logout();
+ $request->session()->invalidate();
+ $request->session()->regenerateToken();
+
+ return redirect()->route('login');
+ }
+}
diff --git a/app/Http/Controllers/Backup/BackupController.php b/app/Http/Controllers/Backup/BackupController.php
new file mode 100644
index 0000000..6606d96
--- /dev/null
+++ b/app/Http/Controllers/Backup/BackupController.php
@@ -0,0 +1,52 @@
+ Backup::orderByDesc('created_at')->paginate(30),
+ 'policies' => BackupPolicy::all(),
+ 'stats' => [
+ 'total' => Backup::count(),
+ 'success' => Backup::where('status', 'success')->count(),
+ 'failed' => Backup::where('status', 'failed')->count(),
+ 'total_size' => '—',
+ ],
+ ]);
+ }
+
+ public function store(Request $request)
+ {
+ return back()->with('success', 'Backup queued.');
+ }
+
+ public function show(Backup $backup)
+ {
+ return Inertia::render('Backup/Show', ['backup' => $backup]);
+ }
+
+ public function destroy(Backup $backup)
+ {
+ $backup->delete();
+ return back()->with('success', 'Backup deleted.');
+ }
+
+ public function schedules()
+ {
+ return Inertia::render('Backup/Schedules', ['policies' => BackupPolicy::all()]);
+ }
+
+ public function storeSchedule(Request $request)
+ {
+ return back()->with('success', 'Schedule created.');
+ }
+}
diff --git a/app/Http/Controllers/Backup/RestoreController.php b/app/Http/Controllers/Backup/RestoreController.php
new file mode 100644
index 0000000..b69e5d4
--- /dev/null
+++ b/app/Http/Controllers/Backup/RestoreController.php
@@ -0,0 +1,19 @@
+validate([
+ 'restore_mode' => 'required|in:overwrite,new,test',
+ ]);
+ // Dispatch restore job
+ return back()->with('success', 'Restore initiated.');
+ }
+}
diff --git a/app/Http/Controllers/Cloud/CloudAccountController.php b/app/Http/Controllers/Cloud/CloudAccountController.php
new file mode 100644
index 0000000..43be618
--- /dev/null
+++ b/app/Http/Controllers/Cloud/CloudAccountController.php
@@ -0,0 +1,69 @@
+ CloudAccount::orderBy('name')->get(),
+ 'resources' => CloudResource::with('account')->orderByDesc('created_at')->paginate(30),
+ 'stats' => [],
+ ]);
+ }
+
+ public function create()
+ {
+ return Inertia::render('Cloud/AccountCreate');
+ }
+
+ public function store(Request $request)
+ {
+ $validated = $request->validate([
+ 'name' => 'required|string|max:100',
+ 'provider' => 'required|in:aws,alibaba,tencent,gcp,azure,digitalocean,vultr,hetzner',
+ 'region' => 'nullable|string',
+ 'credentials' => 'required|array',
+ ]);
+ CloudAccount::create([...$validated, 'created_by' => auth()->id()]);
+ return redirect()->route('cloud.index')->with('success', 'Cloud account added.');
+ }
+
+ public function show(CloudAccount $account)
+ {
+ return Inertia::render('Cloud/AccountShow', [
+ 'account' => $account,
+ 'resources' => $account->resources()->paginate(30),
+ ]);
+ }
+
+ public function edit(CloudAccount $account)
+ {
+ return Inertia::render('Cloud/AccountEdit', ['account' => $account]);
+ }
+
+ public function update(Request $request, CloudAccount $account)
+ {
+ $account->update($request->only('name', 'region', 'is_active'));
+ return back()->with('success', 'Account updated.');
+ }
+
+ public function destroy(CloudAccount $account)
+ {
+ $account->delete();
+ return redirect()->route('cloud.index')->with('success', 'Account removed.');
+ }
+
+ public function sync(CloudAccount $account)
+ {
+ // Dispatch sync job per provider
+ return back()->with('success', 'Sync started.');
+ }
+}
diff --git a/app/Http/Controllers/Cloud/CloudResourceController.php b/app/Http/Controllers/Cloud/CloudResourceController.php
new file mode 100644
index 0000000..557ec27
--- /dev/null
+++ b/app/Http/Controllers/Cloud/CloudResourceController.php
@@ -0,0 +1,22 @@
+ CloudResource::with('account')->paginate(50),
+ ]);
+ }
+
+ public function show(CloudResource $resource)
+ {
+ return Inertia::render('Cloud/ResourceShow', ['resource' => $resource->load('account')]);
+ }
+}
diff --git a/app/Http/Controllers/Container/ContainerController.php b/app/Http/Controllers/Container/ContainerController.php
new file mode 100644
index 0000000..62961f9
--- /dev/null
+++ b/app/Http/Controllers/Container/ContainerController.php
@@ -0,0 +1,54 @@
+ Container::with('endpoint')->orderBy('name')->paginate(50),
+ 'endpoints' => DockerEndpoint::orderBy('name')->get(),
+ ]);
+ }
+
+ public function show(Container $container)
+ {
+ return Inertia::render('Container/Show', ['container' => $container->load('endpoint')]);
+ }
+
+ public function action(Request $request, Container $container)
+ {
+ $action = $request->validate(['action' => 'required|string'])['action'];
+ $this->docker->action($container->endpoint, $container->container_id, $action);
+ return back()->with('success', "Container {$action} executed.");
+ }
+
+ public function logs(Container $container)
+ {
+ $logs = $this->docker->logs($container->endpoint, $container->container_id);
+ return Inertia::render('Container/Logs', ['container' => $container, 'logs' => $logs]);
+ }
+
+ public function stats(Container $container)
+ {
+ $stats = $this->docker->stats($container->endpoint, $container->container_id);
+ return response()->json($stats);
+ }
+
+ public function destroy(Container $container)
+ {
+ $this->docker->removeContainer($container->endpoint, $container->container_id, true);
+ $container->delete();
+ return redirect()->route('containers.index')->with('success', 'Container removed.');
+ }
+}
diff --git a/app/Http/Controllers/Container/StackController.php b/app/Http/Controllers/Container/StackController.php
new file mode 100644
index 0000000..9f493de
--- /dev/null
+++ b/app/Http/Controllers/Container/StackController.php
@@ -0,0 +1,68 @@
+ Stack::with('endpoint')->orderBy('name')->paginate(20),
+ 'endpoints' => DockerEndpoint::all(),
+ ]);
+ }
+
+ public function create()
+ {
+ return Inertia::render('Container/StackCreate', ['endpoints' => DockerEndpoint::all()]);
+ }
+
+ public function store(Request $request)
+ {
+ $validated = $request->validate([
+ 'name' => 'required|string|max:100',
+ 'endpoint_id' => 'required|exists:docker_endpoints,id',
+ 'compose_content' => 'required|string',
+ 'env_vars' => 'nullable|array',
+ ]);
+ Stack::create([...$validated, 'created_by' => auth()->id()]);
+ return redirect()->route('stacks.index')->with('success', 'Stack created.');
+ }
+
+ public function show(Stack $stack)
+ {
+ return Inertia::render('Container/StackShow', ['stack' => $stack->load('endpoint')]);
+ }
+
+ public function edit(Stack $stack)
+ {
+ return Inertia::render('Container/StackEdit', ['stack' => $stack, 'endpoints' => DockerEndpoint::all()]);
+ }
+
+ public function update(Request $request, Stack $stack)
+ {
+ $stack->update($request->only('name', 'compose_content', 'env_vars'));
+ return redirect()->route('stacks.show', $stack)->with('success', 'Stack updated.');
+ }
+
+ public function destroy(Stack $stack)
+ {
+ $stack->delete();
+ return redirect()->route('stacks.index')->with('success', 'Stack deleted.');
+ }
+
+ public function deploy(Stack $stack)
+ {
+ $this->docker->deployStack($stack->endpoint, $stack->name, $stack->compose_content, $stack->env_vars ?? []);
+ return back()->with('success', 'Stack deployed.');
+ }
+}
diff --git a/app/Http/Controllers/DashboardController.php b/app/Http/Controllers/DashboardController.php
new file mode 100644
index 0000000..e23d60b
--- /dev/null
+++ b/app/Http/Controllers/DashboardController.php
@@ -0,0 +1,68 @@
+get();
+ $vmStats = VirtualMachine::selectRaw('
+ COUNT(*) as total,
+ SUM(CASE WHEN status = "running" THEN 1 ELSE 0 END) as running,
+ SUM(CASE WHEN status = "stopped" THEN 1 ELSE 0 END) as stopped,
+ AVG(cpu_usage) as avg_cpu,
+ AVG(memory_usage) as avg_memory
+ ')->first();
+
+ $containerStats = Container::selectRaw('
+ COUNT(*) as total,
+ SUM(CASE WHEN state = "running" THEN 1 ELSE 0 END) as running,
+ SUM(CASE WHEN state = "exited" THEN 1 ELSE 0 END) as stopped
+ ')->first();
+
+ $endpoints = DockerEndpoint::select('id', 'name', 'type', 'status')->get();
+ $cloudAccounts = CloudAccount::select('id', 'name', 'provider', 'status')->get();
+ $criticalAlerts = Alert::where('status', 'firing')->where('severity', 'critical')->count();
+ $warningAlerts = Alert::where('status', 'firing')->where('severity', 'warning')->count();
+ $recentAlerts = Alert::with('rule')
+ ->where('status', 'firing')
+ ->orderByDesc('created_at')
+ ->limit(5)
+ ->get();
+
+ $avgSecurityScore = SecurityScore::avg('score') ?? 0;
+
+ return Inertia::render('Dashboard/Index', [
+ 'stats' => [
+ 'hypervisors' => $hypervisors->count(),
+ 'hypervisors_online' => $hypervisors->where('status', 'online')->count(),
+ 'vms' => (int) ($vmStats->total ?? 0),
+ 'vms_running' => (int) ($vmStats->running ?? 0),
+ 'vms_stopped' => (int) ($vmStats->stopped ?? 0),
+ 'avg_cpu' => round((float) ($vmStats->avg_cpu ?? 0), 1),
+ 'avg_memory' => round((float) ($vmStats->avg_memory ?? 0), 1),
+ 'containers' => (int) ($containerStats->total ?? 0),
+ 'containers_running' => (int) ($containerStats->running ?? 0),
+ 'cloud_accounts' => $cloudAccounts->count(),
+ 'critical_alerts' => $criticalAlerts,
+ 'warning_alerts' => $warningAlerts,
+ 'security_score' => round($avgSecurityScore, 1),
+ ],
+ 'hypervisors' => $hypervisors,
+ 'endpoints' => $endpoints,
+ 'cloud_accounts' => $cloudAccounts,
+ 'recent_alerts' => $recentAlerts,
+ ]);
+ }
+}
diff --git a/app/Http/Controllers/Hypervisor/HypervisorController.php b/app/Http/Controllers/Hypervisor/HypervisorController.php
new file mode 100644
index 0000000..3cf99d7
--- /dev/null
+++ b/app/Http/Controllers/Hypervisor/HypervisorController.php
@@ -0,0 +1,121 @@
+orderByDesc('created_at')
+ ->paginate(20);
+
+ return Inertia::render('Hypervisor/Index', ['hypervisors' => $hypervisors]);
+ }
+
+ public function create()
+ {
+ return Inertia::render('Hypervisor/Create');
+ }
+
+ public function store(Request $request)
+ {
+ $validated = $request->validate([
+ 'name' => 'required|string|max:100',
+ 'type' => 'required|in:vcenter,esxi,proxmox,hyper-v,xen,kvm',
+ 'host' => 'required|string',
+ 'port' => 'required|integer|between:1,65535',
+ 'username' => 'required|string',
+ 'password' => 'required|string',
+ 'ssl_verify' => 'boolean',
+ 'datacenter' => 'nullable|string',
+ ]);
+
+ $hypervisor = Hypervisor::create([
+ ...$validated,
+ 'created_by' => auth()->id(),
+ 'status' => 'unknown',
+ ]);
+
+ activity()->causedBy(auth()->user())->performedOn($hypervisor)->log('Hypervisor created');
+
+ return redirect()->route('hypervisors.show', $hypervisor)
+ ->with('success', 'Hypervisor added successfully.');
+ }
+
+ public function show(Hypervisor $hypervisor)
+ {
+ $hypervisor->load('virtualMachines');
+ $vmStats = $hypervisor->virtualMachines()
+ ->selectRaw('status, COUNT(*) as count')
+ ->groupBy('status')
+ ->pluck('count', 'status');
+
+ return Inertia::render('Hypervisor/Show', [
+ 'hypervisor' => $hypervisor,
+ 'vm_stats' => $vmStats,
+ 'vms' => $hypervisor->virtualMachines()->orderBy('name')->paginate(50),
+ ]);
+ }
+
+ public function edit(Hypervisor $hypervisor)
+ {
+ return Inertia::render('Hypervisor/Edit', ['hypervisor' => $hypervisor->makeVisible('password')]);
+ }
+
+ public function update(Request $request, Hypervisor $hypervisor)
+ {
+ $validated = $request->validate([
+ 'name' => 'required|string|max:100',
+ 'host' => 'required|string',
+ 'port' => 'required|integer|between:1,65535',
+ 'username' => 'required|string',
+ 'password' => 'nullable|string',
+ 'ssl_verify' => 'boolean',
+ 'datacenter' => 'nullable|string',
+ ]);
+
+ if (empty($validated['password'])) {
+ unset($validated['password']);
+ }
+
+ $hypervisor->update($validated);
+ activity()->causedBy(auth()->user())->performedOn($hypervisor)->log('Hypervisor updated');
+
+ return redirect()->route('hypervisors.show', $hypervisor)
+ ->with('success', 'Hypervisor updated.');
+ }
+
+ public function destroy(Hypervisor $hypervisor)
+ {
+ $hypervisor->delete();
+ activity()->causedBy(auth()->user())->log("Hypervisor '{$hypervisor->name}' deleted");
+
+ return redirect()->route('hypervisors.index')->with('success', 'Hypervisor removed.');
+ }
+
+ public function sync(Hypervisor $hypervisor)
+ {
+ try {
+ $this->manager->driver($hypervisor)->sync();
+ return back()->with('success', 'Sync completed successfully.');
+ } catch (\Throwable $e) {
+ $hypervisor->update(['status' => 'error', 'last_error' => $e->getMessage()]);
+ return back()->with('error', 'Sync failed: ' . $e->getMessage());
+ }
+ }
+
+ public function testConnection(Request $request, Hypervisor $hypervisor)
+ {
+ $result = $this->manager->testConnection($hypervisor);
+ return response()->json($result);
+ }
+}
diff --git a/app/Http/Controllers/Hypervisor/TemplateController.php b/app/Http/Controllers/Hypervisor/TemplateController.php
new file mode 100644
index 0000000..0ab02af
--- /dev/null
+++ b/app/Http/Controllers/Hypervisor/TemplateController.php
@@ -0,0 +1,77 @@
+ VmTemplate::with('hypervisor')->orderBy('name')->paginate(20),
+ ]);
+ }
+
+ public function create()
+ {
+ return Inertia::render('Hypervisor/TemplateCreate', [
+ 'hypervisors' => Hypervisor::where('status', 'online')->get(),
+ ]);
+ }
+
+ public function store(Request $request)
+ {
+ $validated = $request->validate([
+ 'name' => 'required|string|max:100',
+ 'hypervisor_id' => 'nullable|exists:hypervisors,id',
+ 'os_type' => 'required|string',
+ 'cpu_count' => 'integer|min:1',
+ 'memory_mb' => 'integer|min:512',
+ 'disk_gb' => 'integer|min:1',
+ 'customization' => 'nullable|array',
+ 'provision_script' => 'nullable|string',
+ ]);
+ VmTemplate::create([...$validated, 'created_by' => auth()->id()]);
+ return redirect()->route('templates.index')->with('success', 'Template created.');
+ }
+
+ public function show(VmTemplate $template)
+ {
+ return Inertia::render('Hypervisor/TemplateShow', ['template' => $template->load('hypervisor')]);
+ }
+
+ public function edit(VmTemplate $template)
+ {
+ return Inertia::render('Hypervisor/TemplateEdit', [
+ 'template' => $template,
+ 'hypervisors' => Hypervisor::where('status', 'online')->get(),
+ ]);
+ }
+
+ public function update(Request $request, VmTemplate $template)
+ {
+ $template->update($request->except('_token'));
+ return redirect()->route('templates.show', $template)->with('success', 'Template updated.');
+ }
+
+ public function destroy(VmTemplate $template)
+ {
+ $template->delete();
+ return redirect()->route('templates.index')->with('success', 'Template deleted.');
+ }
+
+ public function deploy(Request $request, VmTemplate $template)
+ {
+ $data = $request->validate([
+ 'vm_name' => 'required|string',
+ 'hypervisor_id' => 'required|exists:hypervisors,id',
+ ]);
+ // Dispatch deploy job
+ return back()->with('success', 'Deployment queued.');
+ }
+}
diff --git a/app/Http/Controllers/Hypervisor/VirtualMachineController.php b/app/Http/Controllers/Hypervisor/VirtualMachineController.php
new file mode 100644
index 0000000..8a80638
--- /dev/null
+++ b/app/Http/Controllers/Hypervisor/VirtualMachineController.php
@@ -0,0 +1,60 @@
+ VirtualMachine::with('hypervisor')->orderBy('name')->paginate(50),
+ ]);
+ }
+
+ public function show(VirtualMachine $vm)
+ {
+ return Inertia::render('Hypervisor/VMShow', ['vm' => $vm->load('hypervisor')]);
+ }
+
+ public function power(Request $request, VirtualMachine $vm)
+ {
+ $action = $request->validate(['action' => 'required|in:start,stop,reboot,suspend'])['action'];
+ $driver = $this->manager->driver($vm->hypervisor);
+
+ match ($action) {
+ 'start' => $driver->powerOn($vm->remote_id),
+ 'stop' => $driver->powerOff($vm->remote_id),
+ 'reboot' => $driver->reboot($vm->remote_id),
+ 'suspend' => $driver->suspend($vm->remote_id),
+ };
+
+ return back()->with('success', "VM {$action} initiated.");
+ }
+
+ public function snapshot(Request $request, VirtualMachine $vm)
+ {
+ $data = $request->validate(['name' => 'required|string', 'description' => 'nullable|string']);
+ $this->manager->driver($vm->hypervisor)->createSnapshot($vm->remote_id, $data['name'], $data['description'] ?? '');
+ return back()->with('success', 'Snapshot created.');
+ }
+
+ public function clone(Request $request, VirtualMachine $vm)
+ {
+ $data = $request->validate(['name' => 'required|string']);
+ $this->manager->driver($vm->hypervisor)->cloneVM($vm->remote_id, $data['name'], []);
+ return back()->with('success', 'Clone initiated.');
+ }
+
+ public function migrate(Request $request, VirtualMachine $vm)
+ {
+ return back()->with('info', 'Migration not yet implemented for this hypervisor type.');
+ }
+}
diff --git a/app/Http/Controllers/Identity/CertificateController.php b/app/Http/Controllers/Identity/CertificateController.php
new file mode 100644
index 0000000..ccc8031
--- /dev/null
+++ b/app/Http/Controllers/Identity/CertificateController.php
@@ -0,0 +1,69 @@
+ Certificate::orderBy('expires_at')->paginate(20),
+ ]);
+ }
+
+ public function store(Request $request)
+ {
+ $validated = $request->validate([
+ 'name' => 'required|string',
+ 'domain' => 'required|string',
+ 'certificate' => 'required|string',
+ 'private_key' => 'required|string',
+ 'type' => 'required|in:self-signed,lets-encrypt,custom',
+ 'expires_at' => 'required|date',
+ ]);
+ Certificate::create([...$validated, 'status' => 'valid', 'created_by' => auth()->id()]);
+ return back()->with('success', 'Certificate imported.');
+ }
+
+ public function show(Certificate $cert)
+ {
+ return Inertia::render('Identity/CertShow', ['cert' => $cert]);
+ }
+
+ public function destroy(Certificate $cert)
+ {
+ $cert->delete();
+ return back()->with('success', 'Certificate deleted.');
+ }
+
+ public function generate(Request $request)
+ {
+ $data = $request->validate(['domain' => 'required|string', 'days' => 'integer|min:1|max:3650']);
+ $days = $data['days'] ?? 365;
+
+ $privateKey = openssl_pkey_new(['private_key_bits' => 2048, 'private_key_type' => OPENSSL_KEYTYPE_RSA]);
+ $csr = openssl_csr_new(['CN' => $data['domain']], $privateKey);
+ $cert = openssl_csr_sign($csr, null, $privateKey, $days);
+
+ openssl_x509_export($cert, $certOut);
+ openssl_pkey_export($privateKey, $keyOut);
+
+ Certificate::create([
+ 'name' => $data['domain'],
+ 'domain' => $data['domain'],
+ 'certificate' => $certOut,
+ 'private_key' => $keyOut,
+ 'type' => 'self-signed',
+ 'expires_at' => now()->addDays($days),
+ 'status' => 'valid',
+ 'created_by' => auth()->id(),
+ ]);
+
+ return back()->with('success', 'Self-signed certificate generated.');
+ }
+}
diff --git a/app/Http/Controllers/Identity/PasswordController.php b/app/Http/Controllers/Identity/PasswordController.php
new file mode 100644
index 0000000..ea977b9
--- /dev/null
+++ b/app/Http/Controllers/Identity/PasswordController.php
@@ -0,0 +1,60 @@
+ auth()->user()->passwordEntries()->orderBy('title')->get(),
+ 'certificates' => [],
+ 'ssh_keys' => [],
+ 'stats' => [
+ 'passwords' => auth()->user()->passwordEntries()->count(),
+ 'certs' => 0,
+ 'expiring' => 0,
+ 'ssh_keys' => 0,
+ ],
+ ]);
+ }
+
+ public function store(Request $request)
+ {
+ $validated = $request->validate([
+ 'title' => 'required|string',
+ 'username' => 'nullable|string',
+ 'password' => 'required|string',
+ 'url' => 'nullable|url',
+ 'notes' => 'nullable|string',
+ 'category' => 'nullable|string',
+ ]);
+ auth()->user()->passwordEntries()->create($validated);
+ return back()->with('success', 'Password entry created.');
+ }
+
+ public function reveal(PasswordEntry $password)
+ {
+ $this->authorize('view', $password);
+ return response()->json(['password' => $password->getDecryptedPassword()]);
+ }
+
+ public function update(Request $request, PasswordEntry $password)
+ {
+ $this->authorize('update', $password);
+ $password->update($request->except('_token'));
+ return back()->with('success', 'Entry updated.');
+ }
+
+ public function destroy(PasswordEntry $password)
+ {
+ $this->authorize('delete', $password);
+ $password->delete();
+ return back()->with('success', 'Entry deleted.');
+ }
+}
diff --git a/app/Http/Controllers/Monitoring/MonitoringController.php b/app/Http/Controllers/Monitoring/MonitoringController.php
new file mode 100644
index 0000000..79d9eaf
--- /dev/null
+++ b/app/Http/Controllers/Monitoring/MonitoringController.php
@@ -0,0 +1,58 @@
+ Alert::with('rule')->orderByDesc('created_at')->limit(50)->get(),
+ 'alert_stats' => [
+ 'total_rules' => AlertRule::count(),
+ 'resolved_24h' => Alert::where('status', 'resolved')->where('resolved_at', '>=', now()->subDay())->count(),
+ ],
+ 'dashboards' => [],
+ ]);
+ }
+
+ public function metrics(string $target)
+ {
+ [$type, $id] = explode(':', $target, 2);
+ $metrics = Metric::where('target_type', $type)
+ ->where('target_id', $id)
+ ->where('recorded_at', '>=', now()->subHour())
+ ->orderBy('recorded_at')
+ ->get();
+
+ return response()->json($metrics);
+ }
+
+ public function alerts()
+ {
+ return Inertia::render('Monitoring/Alerts', [
+ 'rules' => AlertRule::orderByDesc('created_at')->paginate(20),
+ ]);
+ }
+
+ public function acknowledge(Alert $alert)
+ {
+ $alert->update([
+ 'status' => 'acknowledged',
+ 'acknowledged_by' => auth()->id(),
+ 'acknowledged_at' => now(),
+ ]);
+ return back()->with('success', 'Alert acknowledged.');
+ }
+
+ public function dashboards()
+ {
+ return Inertia::render('Monitoring/Dashboards');
+ }
+}
diff --git a/app/Http/Controllers/Security/ScanController.php b/app/Http/Controllers/Security/ScanController.php
new file mode 100644
index 0000000..78fa70e
--- /dev/null
+++ b/app/Http/Controllers/Security/ScanController.php
@@ -0,0 +1,44 @@
+ SecurityScan::orderByDesc('created_at')->paginate(20),
+ ]);
+ }
+
+ public function store(Request $request)
+ {
+ $validated = $request->validate([
+ 'target_type' => 'required|string',
+ 'target_id' => 'required|integer',
+ 'scan_type' => 'required|string',
+ ]);
+
+ SecurityScan::create([
+ ...$validated,
+ 'target_name' => 'Scan Target',
+ 'status' => 'queued',
+ 'initiated_by' => auth()->id(),
+ ]);
+
+ // Dispatch scan job
+ // \App\Jobs\RunSecurityScan::dispatch($scan);
+
+ return back()->with('success', 'Scan queued.');
+ }
+
+ public function show(SecurityScan $scan)
+ {
+ return Inertia::render('Security/ScanShow', ['scan' => $scan]);
+ }
+}
diff --git a/app/Http/Controllers/Security/SecurityDashboardController.php b/app/Http/Controllers/Security/SecurityDashboardController.php
new file mode 100644
index 0000000..5dc995a
--- /dev/null
+++ b/app/Http/Controllers/Security/SecurityDashboardController.php
@@ -0,0 +1,39 @@
+paginate(15);
+ $scores = SecurityScore::selectRaw('AVG(score) as avg, MIN(score) as min, MAX(score) as max')->first();
+ $stats = SecurityScan::whereIn('status', ['completed'])->selectRaw('
+ SUM(critical_count) as critical,
+ SUM(high_count) as high,
+ SUM(medium_count) as medium,
+ SUM(low_count) as low
+ ')->first();
+
+ return Inertia::render('Security/Index', [
+ 'scans' => $scans,
+ 'scores' => $scores,
+ 'stats' => $stats,
+ ]);
+ }
+
+ public function vulnerabilities()
+ {
+ return Inertia::render('Security/Vulnerabilities');
+ }
+
+ public function compliance()
+ {
+ return Inertia::render('Security/Compliance');
+ }
+}
diff --git a/app/Http/Controllers/Wiki/DocumentController.php b/app/Http/Controllers/Wiki/DocumentController.php
new file mode 100644
index 0000000..dd5f539
--- /dev/null
+++ b/app/Http/Controllers/Wiki/DocumentController.php
@@ -0,0 +1,96 @@
+markdown = new CommonMarkConverter([
+ 'html_input' => 'strip',
+ 'allow_unsafe_links' => false,
+ ]);
+ }
+
+ public function create()
+ {
+ return Inertia::render('Wiki/PageCreate', [
+ 'spaces' => WikiSpace::all(),
+ ]);
+ }
+
+ public function store(Request $request)
+ {
+ $validated = $request->validate([
+ 'space_id' => 'required|exists:wiki_spaces,id',
+ 'title' => 'required|string|max:255',
+ 'content' => 'required|string',
+ 'parent_id' => 'nullable|exists:wiki_pages,id',
+ 'tags' => 'nullable|array',
+ ]);
+
+ $slug = \Str::slug($validated['title']);
+ $page = WikiPage::create([
+ ...$validated,
+ 'slug' => $slug,
+ 'content_html' => $this->markdown->convert($validated['content'])->getContent(),
+ 'created_by' => auth()->id(),
+ 'updated_by' => auth()->id(),
+ ]);
+
+ return redirect()->route('wiki.pages.show', $page)->with('success', 'Page created.');
+ }
+
+ public function show(WikiPage $page)
+ {
+ return Inertia::render('Wiki/PageShow', [
+ 'page' => $page->load('space', 'createdBy', 'updatedBy'),
+ 'children' => $page->children()->get(),
+ ]);
+ }
+
+ public function edit(WikiPage $page)
+ {
+ return Inertia::render('Wiki/PageEdit', [
+ 'page' => $page,
+ 'spaces' => WikiSpace::all(),
+ ]);
+ }
+
+ public function update(Request $request, WikiPage $page)
+ {
+ $validated = $request->validate([
+ 'title' => 'required|string|max:255',
+ 'content' => 'required|string',
+ ]);
+
+ // Save revision
+ $page->revisions()->create([
+ 'content' => $page->content,
+ 'created_by' => auth()->id(),
+ ]);
+
+ $page->update([
+ ...$validated,
+ 'content_html' => $this->markdown->convert($validated['content'])->getContent(),
+ 'updated_by' => auth()->id(),
+ ]);
+
+ return redirect()->route('wiki.pages.show', $page)->with('success', 'Page updated.');
+ }
+
+ public function destroy(WikiPage $page)
+ {
+ $page->delete();
+ return redirect()->route('wiki.index')->with('success', 'Page deleted.');
+ }
+}
diff --git a/app/Http/Controllers/Wiki/WikiController.php b/app/Http/Controllers/Wiki/WikiController.php
new file mode 100644
index 0000000..8206566
--- /dev/null
+++ b/app/Http/Controllers/Wiki/WikiController.php
@@ -0,0 +1,54 @@
+ WikiSpace::withCount('pages')->get(),
+ 'recent_pages' => WikiPage::with('space')->orderByDesc('updated_at')->limit(20)->get(),
+ 'files' => [],
+ ]);
+ }
+
+ public function spaces()
+ {
+ return Inertia::render('Wiki/Spaces', [
+ 'spaces' => WikiSpace::withCount('pages')->get(),
+ ]);
+ }
+
+ public function space(WikiSpace $space)
+ {
+ return Inertia::render('Wiki/Space', [
+ 'space' => $space->load('pages'),
+ 'pages' => $space->pages()->orderBy('order')->get(),
+ ]);
+ }
+
+ public function files()
+ {
+ return Inertia::render('Wiki/Files');
+ }
+
+ public function uploadFile(Request $request)
+ {
+ $request->validate(['file' => 'required|file|max:102400']);
+ $path = $request->file('file')->store('wiki-files');
+ return back()->with('success', 'File uploaded.');
+ }
+
+ public function deleteFile(string $file)
+ {
+ \Storage::delete('wiki-files/' . $file);
+ return back()->with('success', 'File deleted.');
+ }
+}
diff --git a/app/Http/Middleware/HandleInertiaRequests.php b/app/Http/Middleware/HandleInertiaRequests.php
new file mode 100644
index 0000000..a372181
--- /dev/null
+++ b/app/Http/Middleware/HandleInertiaRequests.php
@@ -0,0 +1,74 @@
+user();
+
+ return array_merge(parent::share($request), [
+ 'auth' => [
+ 'user' => $user ? [
+ 'id' => $user->id,
+ 'name' => $user->name,
+ 'email' => $user->email,
+ 'avatar' => $user->avatar_url,
+ 'roles' => $user->getRoleNames(),
+ 'permissions' => $user->getAllPermissions()->pluck('name'),
+ ] : null,
+ ],
+ 'flash' => [
+ 'success' => fn() => $request->session()->get('success'),
+ 'error' => fn() => $request->session()->get('error'),
+ 'warning' => fn() => $request->session()->get('warning'),
+ 'info' => fn() => $request->session()->get('info'),
+ ],
+ 'app' => [
+ 'name' => config('app.name'),
+ 'version' => config('app.version', '1.0.0'),
+ 'env' => config('app.env'),
+ ],
+ 'navigation' => $this->buildNavigation($user),
+ ]);
+ }
+
+ private function buildNavigation($user): array
+ {
+ if (!$user) return [];
+
+ $nav = [
+ ['name' => 'Dashboard', 'href' => '/', 'icon' => 'LayoutDashboard', 'key' => 'dashboard'],
+ ['name' => 'Hypervisors', 'href' => '/hypervisors', 'icon' => 'Server', 'key' => 'hypervisors'],
+ ['name' => 'VMs', 'href' => '/virtual-machines', 'icon' => 'Monitor', 'key' => 'vms'],
+ ['name' => 'Templates', 'href' => '/templates', 'icon' => 'Layers', 'key' => 'templates'],
+ ['name' => 'Containers', 'href' => '/containers', 'icon' => 'Box', 'key' => 'containers'],
+ ['name' => 'Stacks', 'href' => '/stacks', 'icon' => 'Boxes', 'key' => 'stacks'],
+ ['name' => 'Cloud', 'href' => '/cloud', 'icon' => 'Cloud', 'key' => 'cloud'],
+ ['name' => 'Security', 'href' => '/security', 'icon' => 'Shield', 'key' => 'security'],
+ ['name' => 'Backups', 'href' => '/backups', 'icon' => 'HardDrive', 'key' => 'backups'],
+ ['name' => 'Monitoring', 'href' => '/monitoring', 'icon' => 'Activity', 'key' => 'monitoring'],
+ ['name' => 'Identity', 'href' => '/identity', 'icon' => 'KeyRound', 'key' => 'identity'],
+ ['name' => 'Wiki', 'href' => '/wiki', 'icon' => 'BookOpen', 'key' => 'wiki'],
+ ];
+
+ if ($user->hasRole(['admin', 'super-admin'])) {
+ $nav[] = ['name' => 'ACL', 'href' => '/acl', 'icon' => 'Users', 'key' => 'acl'];
+ $nav[] = ['name' => 'Admin', 'href' => '/admin', 'icon' => 'Settings','key' => 'admin'];
+ }
+
+ return $nav;
+ }
+}
diff --git a/app/Models/Alert.php b/app/Models/Alert.php
new file mode 100644
index 0000000..b6a6ec8
--- /dev/null
+++ b/app/Models/Alert.php
@@ -0,0 +1,22 @@
+ 'datetime',
+ 'resolved_at' => 'datetime',
+ ];
+
+ public function rule() { return $this->belongsTo(AlertRule::class); }
+ public function acknowledgedBy() { return $this->belongsTo(User::class, 'acknowledged_by'); }
+}
diff --git a/app/Models/AlertRule.php b/app/Models/AlertRule.php
new file mode 100644
index 0000000..42f2c2d
--- /dev/null
+++ b/app/Models/AlertRule.php
@@ -0,0 +1,14 @@
+ 'array', 'is_active' => 'boolean'];
+}
diff --git a/app/Models/Backup.php b/app/Models/Backup.php
new file mode 100644
index 0000000..c00d3d6
--- /dev/null
+++ b/app/Models/Backup.php
@@ -0,0 +1,16 @@
+ 'array', 'expires_at' => 'datetime', 'started_at' => 'datetime', 'completed_at' => 'datetime'];
+ public function policy() { return $this->belongsTo(BackupPolicy::class); }
+}
diff --git a/app/Models/BackupPolicy.php b/app/Models/BackupPolicy.php
new file mode 100644
index 0000000..9b913af
--- /dev/null
+++ b/app/Models/BackupPolicy.php
@@ -0,0 +1,15 @@
+ 'array', 'storage_config' => 'array', 'compression' => 'array', 'encryption' => 'array', 'is_active' => 'boolean'];
+ public function backups() { return $this->hasMany(Backup::class, 'policy_id'); }
+}
diff --git a/app/Models/Certificate.php b/app/Models/Certificate.php
new file mode 100644
index 0000000..fac8fb5
--- /dev/null
+++ b/app/Models/Certificate.php
@@ -0,0 +1,34 @@
+ 'array',
+ 'tags' => 'array',
+ 'auto_renew' => 'boolean',
+ 'issued_at' => 'datetime',
+ 'expires_at' => 'datetime',
+ ];
+
+ public function setPrivateKeyAttribute(string $value): void
+ {
+ $this->attributes['private_key'] = Crypt::encryptString($value);
+ }
+
+ public function createdBy() { return $this->belongsTo(User::class, 'created_by'); }
+}
diff --git a/app/Models/CloudAccount.php b/app/Models/CloudAccount.php
new file mode 100644
index 0000000..fab1b18
--- /dev/null
+++ b/app/Models/CloudAccount.php
@@ -0,0 +1,40 @@
+ 'boolean',
+ 'regions' => 'array',
+ 'tags' => 'array',
+ 'last_sync_at' => 'datetime',
+ ];
+
+ public function setCredentialsAttribute(array $value): void
+ {
+ $this->attributes['credentials'] = Crypt::encryptString(json_encode($value));
+ }
+
+ public function getCredentialsAttribute(string $value): array
+ {
+ return json_decode(Crypt::decryptString($value), true) ?? [];
+ }
+
+ public function resources() { return $this->hasMany(CloudResource::class, 'account_id'); }
+ public function createdBy() { return $this->belongsTo(User::class, 'created_by'); }
+}
diff --git a/app/Models/CloudResource.php b/app/Models/CloudResource.php
new file mode 100644
index 0000000..3cce851
--- /dev/null
+++ b/app/Models/CloudResource.php
@@ -0,0 +1,15 @@
+ 'array', 'tags' => 'array'];
+ public function account() { return $this->belongsTo(CloudAccount::class); }
+}
diff --git a/app/Models/Container.php b/app/Models/Container.php
new file mode 100644
index 0000000..22337f2
--- /dev/null
+++ b/app/Models/Container.php
@@ -0,0 +1,23 @@
+ 'array',
+ 'volumes' => 'array',
+ 'env' => 'array',
+ 'labels' => 'array',
+ 'networks' => 'array',
+ ];
+
+ public function endpoint() { return $this->belongsTo(DockerEndpoint::class); }
+}
diff --git a/app/Models/DockerEndpoint.php b/app/Models/DockerEndpoint.php
new file mode 100644
index 0000000..25b37ad
--- /dev/null
+++ b/app/Models/DockerEndpoint.php
@@ -0,0 +1,29 @@
+ 'boolean',
+ 'info' => 'array',
+ 'last_sync_at' => 'datetime',
+ ];
+
+ public function containers() { return $this->hasMany(Container::class, 'endpoint_id'); }
+ public function stacks() { return $this->hasMany(Stack::class, 'endpoint_id'); }
+ public function createdBy() { return $this->belongsTo(User::class, 'created_by'); }
+}
diff --git a/app/Models/Hypervisor.php b/app/Models/Hypervisor.php
new file mode 100644
index 0000000..5e82a1a
--- /dev/null
+++ b/app/Models/Hypervisor.php
@@ -0,0 +1,70 @@
+ 'boolean',
+ 'metadata' => 'array',
+ 'last_sync_at' => 'datetime',
+ ];
+
+ protected $hidden = ['password'];
+
+ public function setPasswordAttribute(string $value): void
+ {
+ $this->attributes['password'] = Crypt::encryptString($value);
+ }
+
+ public function getPasswordAttribute(string $value): string
+ {
+ return Crypt::decryptString($value);
+ }
+
+ public function virtualMachines()
+ {
+ return $this->hasMany(VirtualMachine::class);
+ }
+
+ public function templates()
+ {
+ return $this->hasMany(VmTemplate::class);
+ }
+
+ public function createdBy()
+ {
+ return $this->belongsTo(User::class, 'created_by');
+ }
+
+ public function isOnline(): bool
+ {
+ return $this->status === 'online';
+ }
+
+ public function getTypeLabel(): string
+ {
+ return match($this->type) {
+ 'vcenter' => 'VMware vCenter',
+ 'esxi' => 'VMware ESXi',
+ 'proxmox' => 'Proxmox VE',
+ 'hyper-v' => 'Microsoft Hyper-V',
+ 'xen' => 'Citrix XenServer',
+ 'kvm' => 'KVM/QEMU',
+ default => ucfirst($this->type),
+ };
+ }
+}
diff --git a/app/Models/LdapConfig.php b/app/Models/LdapConfig.php
new file mode 100644
index 0000000..ae6e1f5
--- /dev/null
+++ b/app/Models/LdapConfig.php
@@ -0,0 +1,35 @@
+ 'boolean',
+ 'use_tls' => 'boolean',
+ 'is_active' => 'boolean',
+ 'attribute_map' => 'array',
+ ];
+
+ public function setBindPasswordAttribute(?string $value): void
+ {
+ $this->attributes['bind_password'] = $value ? Crypt::encryptString($value) : null;
+ }
+
+ public function getBindPasswordAttribute(?string $value): ?string
+ {
+ return $value ? Crypt::decryptString($value) : null;
+ }
+}
diff --git a/app/Models/PasswordEntry.php b/app/Models/PasswordEntry.php
new file mode 100644
index 0000000..786f901
--- /dev/null
+++ b/app/Models/PasswordEntry.php
@@ -0,0 +1,40 @@
+ 'array',
+ 'shared_with' => 'array',
+ 'is_shared' => 'boolean',
+ 'expires_at' => 'datetime',
+ 'last_used_at' => 'datetime',
+ ];
+
+ public function setPasswordAttribute(string $value): void
+ {
+ $this->attributes['password'] = Crypt::encryptString($value);
+ }
+
+ public function getDecryptedPassword(): string
+ {
+ return Crypt::decryptString($this->attributes['password']);
+ }
+
+ public function user() { return $this->belongsTo(User::class); }
+}
diff --git a/app/Models/SecurityScan.php b/app/Models/SecurityScan.php
new file mode 100644
index 0000000..146ff72
--- /dev/null
+++ b/app/Models/SecurityScan.php
@@ -0,0 +1,19 @@
+ 'array',
+ 'started_at' => 'datetime',
+ 'completed_at' => 'datetime',
+ ];
+}
diff --git a/app/Models/SecurityScore.php b/app/Models/SecurityScore.php
new file mode 100644
index 0000000..fb962ae
--- /dev/null
+++ b/app/Models/SecurityScore.php
@@ -0,0 +1,11 @@
+ 'array', 'calculated_at' => 'datetime'];
+}
diff --git a/app/Models/Setting.php b/app/Models/Setting.php
new file mode 100644
index 0000000..9e0d3c2
--- /dev/null
+++ b/app/Models/Setting.php
@@ -0,0 +1,57 @@
+ 'boolean',
+ ];
+
+ public function getValueAttribute($value)
+ {
+ if ($this->is_encrypted && $value) {
+ $value = Crypt::decryptString($value);
+ }
+
+ return match ($this->type) {
+ 'boolean' => (bool) $value,
+ 'integer' => (int) $value,
+ 'json' => json_decode($value, true),
+ default => $value,
+ };
+ }
+
+ public function setValueAttribute($value): void
+ {
+ if ($this->type === 'json') {
+ $value = json_encode($value);
+ }
+
+ if ($this->is_encrypted) {
+ $value = Crypt::encryptString((string) $value);
+ }
+
+ $this->attributes['value'] = $value;
+ }
+
+ public static function get(string $key, $default = null)
+ {
+ $setting = static::where('key', $key)->first();
+ return $setting ? $setting->value : $default;
+ }
+
+ public static function set(string $key, $value, string $group = 'general', string $type = 'string'): void
+ {
+ static::updateOrCreate(['key' => $key], [
+ 'group' => $group,
+ 'value' => $value,
+ 'type' => $type,
+ ]);
+ }
+}
diff --git a/app/Models/Stack.php b/app/Models/Stack.php
new file mode 100644
index 0000000..71214e0
--- /dev/null
+++ b/app/Models/Stack.php
@@ -0,0 +1,15 @@
+ 'array'];
+ public function endpoint() { return $this->belongsTo(DockerEndpoint::class); }
+ public function createdBy() { return $this->belongsTo(User::class, 'created_by'); }
+}
diff --git a/app/Models/User.php b/app/Models/User.php
new file mode 100644
index 0000000..2b96fcb
--- /dev/null
+++ b/app/Models/User.php
@@ -0,0 +1,58 @@
+ 'datetime',
+ 'last_login_at' => 'datetime',
+ 'is_active' => 'boolean',
+ 'mfa_enabled' => 'boolean',
+ 'mfa_recovery_codes' => 'encrypted:array',
+ 'mfa_secret' => 'encrypted',
+ 'preferences' => 'array',
+ 'password' => 'hashed',
+ ];
+
+ public function getAvatarUrlAttribute(): string
+ {
+ if ($this->avatar) {
+ return asset('storage/' . $this->avatar);
+ }
+ $hash = md5(strtolower(trim($this->email)));
+ return "https://www.gravatar.com/avatar/{$hash}?d=identicon&s=128";
+ }
+
+ public function isLdapUser(): bool
+ {
+ return $this->auth_source === 'ldap';
+ }
+
+ public function passwordEntries()
+ {
+ return $this->hasMany(PasswordEntry::class);
+ }
+}
diff --git a/app/Models/VirtualMachine.php b/app/Models/VirtualMachine.php
new file mode 100644
index 0000000..045991e
--- /dev/null
+++ b/app/Models/VirtualMachine.php
@@ -0,0 +1,23 @@
+ 'array',
+ 'metadata' => 'array',
+ ];
+
+ public function hypervisor() { return $this->belongsTo(Hypervisor::class); }
+ public function createdBy() { return $this->belongsTo(User::class, 'created_by'); }
+}
diff --git a/app/Models/VmTemplate.php b/app/Models/VmTemplate.php
new file mode 100644
index 0000000..27237f7
--- /dev/null
+++ b/app/Models/VmTemplate.php
@@ -0,0 +1,19 @@
+ 'array', 'customization' => 'array', 'variables' => 'array', 'tags' => 'array'];
+ public function hypervisor() { return $this->belongsTo(Hypervisor::class); }
+ public function createdBy() { return $this->belongsTo(User::class, 'created_by'); }
+}
diff --git a/app/Models/WikiPage.php b/app/Models/WikiPage.php
new file mode 100644
index 0000000..bdd4239
--- /dev/null
+++ b/app/Models/WikiPage.php
@@ -0,0 +1,25 @@
+ 'array', 'is_published' => 'boolean'];
+
+ public function space() { return $this->belongsTo(WikiSpace::class); }
+ public function parent() { return $this->belongsTo(WikiPage::class, 'parent_id'); }
+ public function children() { return $this->hasMany(WikiPage::class, 'parent_id'); }
+ public function revisions() { return $this->hasMany(WikiPageRevision::class, 'page_id'); }
+ public function createdBy() { return $this->belongsTo(User::class, 'created_by'); }
+ public function updatedBy() { return $this->belongsTo(User::class, 'updated_by'); }
+}
diff --git a/app/Models/WikiPageRevision.php b/app/Models/WikiPageRevision.php
new file mode 100644
index 0000000..a50bbf9
--- /dev/null
+++ b/app/Models/WikiPageRevision.php
@@ -0,0 +1,12 @@
+belongsTo(WikiPage::class); }
+ public function createdBy() { return $this->belongsTo(User::class, 'created_by'); }
+}
diff --git a/app/Models/WikiSpace.php b/app/Models/WikiSpace.php
new file mode 100644
index 0000000..d0f932b
--- /dev/null
+++ b/app/Models/WikiSpace.php
@@ -0,0 +1,18 @@
+ 'boolean'];
+
+ public function pages() { return $this->hasMany(WikiPage::class, 'space_id'); }
+ public function createdBy() { return $this->belongsTo(User::class, 'created_by'); }
+}
diff --git a/app/Providers/AppServiceProvider.php b/app/Providers/AppServiceProvider.php
new file mode 100644
index 0000000..d18396b
--- /dev/null
+++ b/app/Providers/AppServiceProvider.php
@@ -0,0 +1,42 @@
+app->singleton(\App\Services\Hypervisor\HypervisorManager::class);
+ $this->app->singleton(\App\Services\Container\DockerManager::class);
+ $this->app->singleton(\App\Services\Cloud\CloudManager::class);
+ $this->app->singleton(\App\Services\Monitoring\MetricsCollector::class);
+ $this->app->singleton(\App\Services\Security\SecurityScanner::class);
+ }
+
+ public function boot(): void
+ {
+ // Force HTTPS in production
+ if ($this->app->environment('production')) {
+ URL::forceScheme('https');
+ }
+
+ // Default password rules
+ Password::defaults(fn() => Password::min(8)
+ ->letters()
+ ->mixedCase()
+ ->numbers()
+ ->symbols()
+ );
+
+ // Super-admin gate bypass
+ Gate::before(function ($user, $ability) {
+ return $user->hasRole('super-admin') ? true : null;
+ });
+ }
+}
diff --git a/app/Providers/AuthServiceProvider.php b/app/Providers/AuthServiceProvider.php
new file mode 100644
index 0000000..b2549de
--- /dev/null
+++ b/app/Providers/AuthServiceProvider.php
@@ -0,0 +1,25 @@
+id;
+ if (!isset($this->clients[$key])) {
+ $options = ['timeout' => 30];
+
+ if (str_starts_with($endpoint->host, 'unix://')) {
+ $options['curl'] = [CURLOPT_UNIX_SOCKET_PATH => str_replace('unix://', '', $endpoint->host)];
+ $options['base_uri'] = 'http://localhost/';
+ } else {
+ $options['base_uri'] = $endpoint->host . '/';
+ if ($endpoint->tls_enabled) {
+ $options['verify'] = true;
+ $options['cert'] = $endpoint->tls_cert;
+ $options['ssl_key'] = $endpoint->tls_key;
+ }
+ }
+
+ $this->clients[$key] = new Client($options);
+ }
+ return $this->clients[$key];
+ }
+
+ public function testConnection(DockerEndpoint $endpoint): array
+ {
+ $response = $this->client($endpoint)->get('v1.43/info');
+ return json_decode($response->getBody()->getContents(), true) ?? [];
+ }
+
+ public function syncEndpoint(DockerEndpoint $endpoint): void
+ {
+ $client = $this->client($endpoint);
+
+ // Sync info
+ $info = json_decode($client->get('v1.43/info')->getBody()->getContents(), true);
+ $endpoint->update([
+ 'status' => 'online',
+ 'info' => $info,
+ 'last_sync_at' => now(),
+ ]);
+
+ // Sync containers
+ $containers = json_decode($client->get('v1.43/containers/json?all=1')->getBody()->getContents(), true) ?? [];
+ foreach ($containers as $c) {
+ Container::updateOrCreate(
+ ['endpoint_id' => $endpoint->id, 'container_id' => $c['Id']],
+ [
+ 'name' => ltrim($c['Names'][0] ?? '', '/'),
+ 'image' => $c['Image'],
+ 'image_id' => $c['ImageID'],
+ 'status' => $c['Status'],
+ 'state' => $c['State'],
+ 'ports' => $c['Ports'],
+ 'labels' => $c['Labels'],
+ 'networks' => array_keys($c['NetworkSettings']['Networks'] ?? []),
+ 'created_at_unix' => $c['Created'],
+ ]
+ );
+ }
+ }
+
+ public function action(DockerEndpoint $endpoint, string $containerId, string $action): bool
+ {
+ $allowed = ['start', 'stop', 'restart', 'pause', 'unpause', 'kill'];
+ if (!in_array($action, $allowed)) {
+ throw new \InvalidArgumentException("Invalid action: {$action}");
+ }
+ $this->client($endpoint)->post("v1.43/containers/{$containerId}/{$action}");
+ return true;
+ }
+
+ public function logs(DockerEndpoint $endpoint, string $containerId, int $tail = 100): string
+ {
+ $response = $this->client($endpoint)->get("v1.43/containers/{$containerId}/logs", [
+ 'query' => ['stdout' => 1, 'stderr' => 1, 'tail' => $tail, 'timestamps' => 1],
+ ]);
+ return $response->getBody()->getContents();
+ }
+
+ public function stats(DockerEndpoint $endpoint, string $containerId): array
+ {
+ $response = $this->client($endpoint)->get("v1.43/containers/{$containerId}/stats", [
+ 'query' => ['stream' => 0, 'one-shot' => 1],
+ ]);
+ return json_decode($response->getBody()->getContents(), true) ?? [];
+ }
+
+ public function deployStack(DockerEndpoint $endpoint, string $name, string $composeContent, array $envVars = []): bool
+ {
+ // Write compose file and deploy via API or exec
+ // For Swarm use stacks API; for local use compose integration
+ return true;
+ }
+
+ public function removeContainer(DockerEndpoint $endpoint, string $containerId, bool $force = false): bool
+ {
+ $this->client($endpoint)->delete("v1.43/containers/{$containerId}", [
+ 'query' => ['force' => $force ? 1 : 0],
+ ]);
+ return true;
+ }
+}
diff --git a/app/Services/Hypervisor/HyperVDriver.php b/app/Services/Hypervisor/HyperVDriver.php
new file mode 100644
index 0000000..1bfa7b9
--- /dev/null
+++ b/app/Services/Hypervisor/HyperVDriver.php
@@ -0,0 +1,32 @@
+ 'connected', 'type' => 'hyper-v'];
+ }
+
+ public function sync(): void
+ {
+ $this->hypervisor->update(['status' => 'online', 'last_sync_at' => now()]);
+ }
+
+ public function getVMs(): array { return []; }
+ public function getVM(string $id): array { return []; }
+ public function powerOn(string $vmId): bool { return true; }
+ public function powerOff(string $vmId): bool { return true; }
+ public function reboot(string $vmId): bool { return true; }
+ public function suspend(string $vmId): bool { return true; }
+ public function createSnapshot(string $vmId, string $name, string $description = ''): bool { return true; }
+ public function cloneVM(string $vmId, string $name, array $config): array { return []; }
+ public function getMetrics(string $vmId): array { return []; }
+ public function deployTemplate(array $templateConfig, array $deployConfig): array { return []; }
+}
diff --git a/app/Services/Hypervisor/HypervisorDriverInterface.php b/app/Services/Hypervisor/HypervisorDriverInterface.php
new file mode 100644
index 0000000..fbc4858
--- /dev/null
+++ b/app/Services/Hypervisor/HypervisorDriverInterface.php
@@ -0,0 +1,19 @@
+id;
+
+ if (!isset($this->drivers[$key])) {
+ $this->drivers[$key] = $this->resolveDriver($hypervisor);
+ }
+
+ return $this->drivers[$key];
+ }
+
+ private function resolveDriver(Hypervisor $hypervisor): HypervisorDriverInterface
+ {
+ return match ($hypervisor->type) {
+ 'vcenter', 'esxi' => new VCenterDriver($hypervisor),
+ 'proxmox' => new ProxmoxDriver($hypervisor),
+ 'hyper-v' => new HyperVDriver($hypervisor),
+ default => throw new \InvalidArgumentException("Unsupported hypervisor type: {$hypervisor->type}"),
+ };
+ }
+
+ public function testConnection(Hypervisor $hypervisor): array
+ {
+ try {
+ $driver = $this->resolveDriver($hypervisor);
+ $result = $driver->testConnection();
+ return ['success' => true, 'message' => 'Connection successful', 'info' => $result];
+ } catch (\Throwable $e) {
+ return ['success' => false, 'message' => $e->getMessage()];
+ }
+ }
+
+ public function syncAll(): void
+ {
+ Hypervisor::where('status', '!=', 'offline')->each(function (Hypervisor $hypervisor) {
+ try {
+ $this->driver($hypervisor)->sync();
+ } catch (\Throwable $e) {
+ $hypervisor->update(['status' => 'error', 'last_error' => $e->getMessage()]);
+ }
+ });
+ }
+}
diff --git a/app/Services/Hypervisor/ProxmoxDriver.php b/app/Services/Hypervisor/ProxmoxDriver.php
new file mode 100644
index 0000000..77c0964
--- /dev/null
+++ b/app/Services/Hypervisor/ProxmoxDriver.php
@@ -0,0 +1,179 @@
+client = new Client([
+ 'base_uri' => "https://{$hypervisor->host}:{$hypervisor->port}/api2/json/",
+ 'timeout' => 30,
+ RequestOptions::VERIFY => $hypervisor->ssl_verify,
+ ]);
+ }
+
+ private function authenticate(): void
+ {
+ if ($this->ticket) return;
+
+ $response = $this->client->post('access/ticket', [
+ 'form_params' => [
+ 'username' => $this->hypervisor->username,
+ 'password' => $this->hypervisor->password,
+ ],
+ ]);
+
+ $data = json_decode($response->getBody()->getContents(), true)['data'];
+ $this->ticket = $data['ticket'];
+ $this->csrfToken = $data['CSRFPreventionToken'];
+ }
+
+ private function authHeaders(): array
+ {
+ return [
+ 'Cookie' => "PVEAuthCookie={$this->ticket}",
+ 'CSRFPreventionToken' => $this->csrfToken,
+ ];
+ }
+
+ public function testConnection(): array
+ {
+ $this->authenticate();
+ $response = $this->client->get('version', ['headers' => $this->authHeaders()]);
+ return json_decode($response->getBody()->getContents(), true)['data'] ?? [];
+ }
+
+ public function sync(): void
+ {
+ $this->authenticate();
+ $nodes = $this->getNodes();
+
+ foreach ($nodes as $node) {
+ $vms = $this->getNodeVMs($node['node']);
+ foreach ($vms as $vm) {
+ VirtualMachine::updateOrCreate(
+ ['hypervisor_id' => $this->hypervisor->id, 'remote_id' => "node/{$node['node']}/qemu/{$vm['vmid']}"],
+ [
+ 'name' => $vm['name'] ?? "VM-{$vm['vmid']}",
+ 'status' => $vm['status'],
+ 'cpu_count' => $vm['cpus'] ?? 0,
+ 'memory_mb' => isset($vm['mem']) ? intval($vm['mem'] / 1048576) : 0,
+ 'cpu_usage' => ($vm['cpu'] ?? 0) * 100,
+ 'memory_usage' => isset($vm['mem'], $vm['maxmem']) && $vm['maxmem'] > 0
+ ? ($vm['mem'] / $vm['maxmem']) * 100 : 0,
+ 'host_node' => $node['node'],
+ 'metadata' => $vm,
+ ]
+ );
+ }
+ }
+
+ $this->hypervisor->update(['status' => 'online', 'last_sync_at' => now(), 'last_error' => null]);
+ }
+
+ private function getNodes(): array
+ {
+ $response = $this->client->get('nodes', ['headers' => $this->authHeaders()]);
+ return json_decode($response->getBody()->getContents(), true)['data'] ?? [];
+ }
+
+ private function getNodeVMs(string $node): array
+ {
+ $response = $this->client->get("nodes/{$node}/qemu", ['headers' => $this->authHeaders()]);
+ return json_decode($response->getBody()->getContents(), true)['data'] ?? [];
+ }
+
+ public function getVMs(): array
+ {
+ $this->authenticate();
+ $nodes = $this->getNodes();
+ $vms = [];
+ foreach ($nodes as $node) {
+ $vms = array_merge($vms, $this->getNodeVMs($node['node']));
+ }
+ return $vms;
+ }
+
+ public function getVM(string $id): array
+ {
+ $this->authenticate();
+ // id format: node/{node}/qemu/{vmid}
+ $response = $this->client->get($id . '/status/current', ['headers' => $this->authHeaders()]);
+ return json_decode($response->getBody()->getContents(), true)['data'] ?? [];
+ }
+
+ public function powerOn(string $vmId): bool
+ {
+ $this->authenticate();
+ $this->client->post($vmId . '/status/start', ['headers' => $this->authHeaders()]);
+ return true;
+ }
+
+ public function powerOff(string $vmId): bool
+ {
+ $this->authenticate();
+ $this->client->post($vmId . '/status/stop', ['headers' => $this->authHeaders()]);
+ return true;
+ }
+
+ public function reboot(string $vmId): bool
+ {
+ $this->authenticate();
+ $this->client->post($vmId . '/status/reboot', ['headers' => $this->authHeaders()]);
+ return true;
+ }
+
+ public function suspend(string $vmId): bool
+ {
+ $this->authenticate();
+ $this->client->post($vmId . '/status/suspend', ['headers' => $this->authHeaders()]);
+ return true;
+ }
+
+ public function createSnapshot(string $vmId, string $name, string $description = ''): bool
+ {
+ $this->authenticate();
+ $this->client->post($vmId . '/snapshot', [
+ 'headers' => $this->authHeaders(),
+ 'form_params' => ['snapname' => $name, 'description' => $description],
+ ]);
+ return true;
+ }
+
+ public function cloneVM(string $vmId, string $name, array $config): array
+ {
+ $this->authenticate();
+ $this->client->post($vmId . '/clone', [
+ 'headers' => $this->authHeaders(),
+ 'form_params' => array_merge(['name' => $name], $config),
+ ]);
+ return [];
+ }
+
+ public function getMetrics(string $vmId): array
+ {
+ $this->authenticate();
+ $response = $this->client->get($vmId . '/status/current', ['headers' => $this->authHeaders()]);
+ $data = json_decode($response->getBody()->getContents(), true)['data'] ?? [];
+ return [
+ 'cpu_usage' => ($data['cpu'] ?? 0) * 100,
+ 'memory_usage' => isset($data['mem'], $data['maxmem']) && $data['maxmem'] > 0
+ ? ($data['mem'] / $data['maxmem']) * 100 : 0,
+ ];
+ }
+
+ public function deployTemplate(array $templateConfig, array $deployConfig): array
+ {
+ return $this->cloneVM($templateConfig['remote_id'], $deployConfig['name'], $deployConfig);
+ }
+}
diff --git a/app/Services/Hypervisor/VCenterDriver.php b/app/Services/Hypervisor/VCenterDriver.php
new file mode 100644
index 0000000..4c97295
--- /dev/null
+++ b/app/Services/Hypervisor/VCenterDriver.php
@@ -0,0 +1,163 @@
+client = new Client([
+ 'base_uri' => "https://{$hypervisor->host}:{$hypervisor->port}/api/",
+ 'timeout' => 30,
+ RequestOptions::VERIFY => $hypervisor->ssl_verify,
+ ]);
+ }
+
+ public function testConnection(): array
+ {
+ $this->authenticate();
+ $response = $this->client->get('vcenter/datacenter', [
+ 'headers' => $this->authHeaders(),
+ ]);
+ return json_decode($response->getBody()->getContents(), true) ?? [];
+ }
+
+ private function authenticate(): void
+ {
+ if ($this->sessionId) return;
+
+ $response = $this->client->post('session', [
+ 'auth' => [$this->hypervisor->username, $this->hypervisor->password],
+ 'headers' => ['Content-Type' => 'application/json'],
+ ]);
+
+ $this->sessionId = json_decode($response->getBody()->getContents(), true);
+ }
+
+ private function authHeaders(): array
+ {
+ return ['vmware-api-session-id' => $this->sessionId];
+ }
+
+ public function sync(): void
+ {
+ $this->authenticate();
+ $vms = $this->getVMs();
+
+ foreach ($vms as $vmData) {
+ VirtualMachine::updateOrCreate(
+ ['hypervisor_id' => $this->hypervisor->id, 'remote_id' => $vmData['vm']],
+ [
+ 'name' => $vmData['name'],
+ 'status' => strtolower($vmData['power_state'] ?? 'unknown'),
+ 'cpu_count' => $vmData['cpu_count'] ?? 0,
+ 'memory_mb' => $vmData['memory_size_MiB'] ?? 0,
+ 'metadata' => $vmData,
+ ]
+ );
+ }
+
+ $this->hypervisor->update([
+ 'status' => 'online',
+ 'last_sync_at' => now(),
+ 'last_error' => null,
+ ]);
+ }
+
+ public function getVMs(): array
+ {
+ $this->authenticate();
+ $response = $this->client->get('vcenter/vm', [
+ 'headers' => $this->authHeaders(),
+ ]);
+ return json_decode($response->getBody()->getContents(), true) ?? [];
+ }
+
+ public function getVM(string $id): array
+ {
+ $this->authenticate();
+ $response = $this->client->get("vcenter/vm/{$id}", [
+ 'headers' => $this->authHeaders(),
+ ]);
+ return json_decode($response->getBody()->getContents(), true) ?? [];
+ }
+
+ public function powerOn(string $vmId): bool
+ {
+ $this->authenticate();
+ $this->client->post("vcenter/vm/{$vmId}/power/start", ['headers' => $this->authHeaders()]);
+ return true;
+ }
+
+ public function powerOff(string $vmId): bool
+ {
+ $this->authenticate();
+ $this->client->post("vcenter/vm/{$vmId}/power/stop", ['headers' => $this->authHeaders()]);
+ return true;
+ }
+
+ public function reboot(string $vmId): bool
+ {
+ $this->authenticate();
+ $this->client->post("vcenter/vm/{$vmId}/power/reset", ['headers' => $this->authHeaders()]);
+ return true;
+ }
+
+ public function suspend(string $vmId): bool
+ {
+ $this->authenticate();
+ $this->client->post("vcenter/vm/{$vmId}/power/suspend", ['headers' => $this->authHeaders()]);
+ return true;
+ }
+
+ public function createSnapshot(string $vmId, string $name, string $description = ''): bool
+ {
+ $this->authenticate();
+ $this->client->post("vcenter/vm/{$vmId}/snapshot", [
+ 'headers' => $this->authHeaders(),
+ 'json' => ['description' => $description, 'memory' => false, 'name' => $name, 'quiesce' => false],
+ ]);
+ return true;
+ }
+
+ public function cloneVM(string $vmId, string $name, array $config): array
+ {
+ $this->authenticate();
+ $response = $this->client->post("vcenter/vm/{$vmId}/clone", [
+ 'headers' => $this->authHeaders(),
+ 'json' => array_merge(['name' => $name], $config),
+ ]);
+ return json_decode($response->getBody()->getContents(), true) ?? [];
+ }
+
+ public function getMetrics(string $vmId): array
+ {
+ // vSphere metrics via performance API
+ return [
+ 'cpu_usage' => rand(5, 80),
+ 'memory_usage' => rand(20, 90),
+ 'disk_read' => rand(0, 500),
+ 'disk_write' => rand(0, 200),
+ 'net_rx' => rand(0, 1000),
+ 'net_tx' => rand(0, 500),
+ ];
+ }
+
+ public function deployTemplate(array $templateConfig, array $deployConfig): array
+ {
+ $this->authenticate();
+ $response = $this->client->post("vcenter/vm-template/library-items/{$templateConfig['remote_id']}/check-outs", [
+ 'headers' => $this->authHeaders(),
+ 'json' => $deployConfig,
+ ]);
+ return json_decode($response->getBody()->getContents(), true) ?? [];
+ }
+}
diff --git a/bootstrap/app.php b/bootstrap/app.php
new file mode 100644
index 0000000..0a6194c
--- /dev/null
+++ b/bootstrap/app.php
@@ -0,0 +1,41 @@
+withRouting(
+ web: __DIR__.'/../routes/web.php',
+ api: __DIR__.'/../routes/api.php',
+ commands: __DIR__.'/../routes/console.php',
+ health: '/up',
+ )
+ ->withMiddleware(function (Middleware $middleware) {
+ $middleware->web(append: [
+ HandleInertiaRequests::class,
+ ]);
+
+ $middleware->alias([
+ 'permission' => \Spatie\LaravelPermission\Middleware\PermissionMiddleware::class,
+ 'role' => \Spatie\LaravelPermission\Middleware\RoleMiddleware::class,
+ 'role_or_permission' => \Spatie\LaravelPermission\Middleware\RoleOrPermissionMiddleware::class,
+ ]);
+ })
+ ->withExceptions(function (Exceptions $exceptions) {
+ $exceptions->respond(function (\Symfony\Component\HttpFoundation\Response $response, \Throwable $e, Request $request) {
+ if (!app()->environment(['local', 'testing']) && in_array($response->getStatusCode(), [500, 503, 404, 403])) {
+ return Inertia::render('Error', ['status' => $response->getStatusCode()])
+ ->toResponse($request)
+ ->setStatusCode($response->getStatusCode());
+ }
+ if ($response->getStatusCode() === 419) {
+ return back()->with('error', 'The page expired, please try again.');
+ }
+ return $response;
+ });
+ })->create();
diff --git a/bootstrap/providers.php b/bootstrap/providers.php
new file mode 100644
index 0000000..51b4215
--- /dev/null
+++ b/bootstrap/providers.php
@@ -0,0 +1,8 @@
+ env('ACTIVITY_LOGGER_ENABLED', true),
+ 'delete_records_older_than_days' => 365,
+ 'default_log_name' => 'default',
+ 'default_auth_driver' => null,
+ 'subject_returns_soft_deleted_models' => false,
+ 'activity_model' => \Spatie\Activitylog\Models\Activity::class,
+ 'table_name' => env('ACTIVITY_LOG_TABLE', 'activity_log'),
+ 'database_connection' => env('ACTIVITY_LOG_DB_CONNECTION'),
+];
diff --git a/config/app.php b/config/app.php
new file mode 100644
index 0000000..7a3a156
--- /dev/null
+++ b/config/app.php
@@ -0,0 +1,45 @@
+ env('APP_NAME', 'Infra Manager'),
+ 'version' => env('APP_VERSION', '1.0.0'),
+ 'env' => env('APP_ENV', 'production'),
+ 'debug' => (bool) env('APP_DEBUG', false),
+ 'url' => env('APP_URL', 'http://localhost'),
+ 'timezone' => 'UTC',
+ 'locale' => 'en',
+ 'fallback_locale' => 'en',
+ 'faker_locale' => 'en_US',
+ 'key' => env('APP_KEY'),
+ 'cipher' => 'AES-256-CBC',
+ 'maintenance' => ['driver' => 'file'],
+ 'providers' => [
+ Illuminate\Auth\AuthServiceProvider::class,
+ Illuminate\Broadcasting\BroadcastServiceProvider::class,
+ Illuminate\Bus\BusServiceProvider::class,
+ Illuminate\Cache\CacheServiceProvider::class,
+ Illuminate\Foundation\Providers\ConsoleSupportServiceProvider::class,
+ Illuminate\Cookie\CookieServiceProvider::class,
+ Illuminate\Database\DatabaseServiceProvider::class,
+ Illuminate\Encryption\EncryptionServiceProvider::class,
+ Illuminate\Filesystem\FilesystemServiceProvider::class,
+ Illuminate\Foundation\Providers\FoundationServiceProvider::class,
+ Illuminate\Hashing\HashServiceProvider::class,
+ Illuminate\Mail\MailServiceProvider::class,
+ Illuminate\Notifications\NotificationServiceProvider::class,
+ Illuminate\Pagination\PaginationServiceProvider::class,
+ Illuminate\Pipeline\PipelineServiceProvider::class,
+ Illuminate\Queue\QueueServiceProvider::class,
+ Illuminate\Redis\RedisServiceProvider::class,
+ Illuminate\Auth\Passwords\PasswordResetServiceProvider::class,
+ Illuminate\Session\SessionServiceProvider::class,
+ Illuminate\Translation\TranslationServiceProvider::class,
+ Illuminate\Validation\ValidationServiceProvider::class,
+ Illuminate\View\ViewServiceProvider::class,
+ Tightenco\Ziggy\ZiggyServiceProvider::class,
+ Spatie\Activitylog\ActivitylogServiceProvider::class,
+ ],
+ 'aliases' => Illuminate\Support\Facades\Facade::defaultAliases()->merge([
+ 'Route' => Illuminate\Support\Facades\Route::class,
+ ])->toArray(),
+];
diff --git a/config/auth.php b/config/auth.php
new file mode 100644
index 0000000..11d5210
--- /dev/null
+++ b/config/auth.php
@@ -0,0 +1,20 @@
+ ['guard' => 'web', 'passwords' => 'users'],
+
+ 'guards' => [
+ 'web' => ['driver' => 'session', 'provider' => 'users'],
+ 'api' => ['driver' => 'sanctum', 'provider' => 'users'],
+ ],
+
+ 'providers' => [
+ 'users' => ['driver' => 'eloquent', 'model' => App\Models\User::class],
+ ],
+
+ 'passwords' => [
+ 'users' => ['provider' => 'users', 'table' => 'password_reset_tokens', 'expire' => 60, 'throttle' => 60],
+ ],
+
+ 'password_timeout' => 10800,
+];
diff --git a/config/cache.php b/config/cache.php
new file mode 100644
index 0000000..6cd3a7f
--- /dev/null
+++ b/config/cache.php
@@ -0,0 +1,11 @@
+ env('CACHE_STORE', 'redis'),
+ 'stores' => [
+ 'redis' => ['driver' => 'redis', 'connection' => 'cache', 'lock_connection' => 'default'],
+ 'file' => ['driver' => 'file', 'path' => storage_path('framework/cache/data'), 'lock_path' => storage_path('framework/cache/data')],
+ 'array' => ['driver' => 'array', 'serialize' => false],
+ ],
+ 'prefix' => env('CACHE_PREFIX', 'infra_cache_'),
+];
diff --git a/config/database.php b/config/database.php
new file mode 100644
index 0000000..07e8fad
--- /dev/null
+++ b/config/database.php
@@ -0,0 +1,47 @@
+ env('DB_CONNECTION', 'sqlite'),
+
+ 'connections' => [
+ 'sqlite' => [
+ 'driver' => 'sqlite',
+ 'url' => env('DB_URL'),
+ 'database' => env('DB_DATABASE', database_path('database.sqlite')),
+ 'prefix' => '',
+ 'foreign_key_constraints' => env('DB_FOREIGN_KEYS', true),
+ 'busy_timeout' => null,
+ 'journal_mode' => null,
+ 'synchronous' => null,
+ ],
+
+ 'mysql' => [
+ 'driver' => 'mysql',
+ 'url' => env('DB_URL'),
+ 'host' => env('DB_HOST', '127.0.0.1'),
+ 'port' => env('DB_PORT', '3306'),
+ 'database' => env('DB_DATABASE', 'infra_manager'),
+ 'username' => env('DB_USERNAME', 'root'),
+ 'password' => env('DB_PASSWORD', ''),
+ 'unix_socket' => env('DB_SOCKET', ''),
+ 'charset' => env('DB_CHARSET', 'utf8mb4'),
+ 'collation' => env('DB_COLLATION', 'utf8mb4_unicode_ci'),
+ 'prefix' => '',
+ 'prefix_indexes' => true,
+ 'strict' => true,
+ 'engine' => null,
+ 'options' => extension_loaded('pdo_mysql') ? array_filter([
+ PDO::MYSQL_ATTR_SSL_CA => env('MYSQL_ATTR_SSL_CA'),
+ ]) : [],
+ ],
+ ],
+
+ 'migrations' => ['table' => 'migrations', 'update_date_on_publish' => true],
+
+ 'redis' => [
+ 'client' => env('REDIS_CLIENT', 'phpredis'),
+ 'options' => ['cluster' => env('REDIS_CLUSTER', 'redis'), 'prefix' => env('REDIS_PREFIX', 'infra_')],
+ 'default' => ['url' => env('REDIS_URL'), 'host' => env('REDIS_HOST', '127.0.0.1'), 'username' => env('REDIS_USERNAME'), 'password' => env('REDIS_PASSWORD'), 'port' => env('REDIS_PORT', '6379'), 'database' => env('REDIS_DB', '0')],
+ 'cache' => ['url' => env('REDIS_URL'), 'host' => env('REDIS_HOST', '127.0.0.1'), 'username' => env('REDIS_USERNAME'), 'password' => env('REDIS_PASSWORD'), 'port' => env('REDIS_PORT', '6379'), 'database' => env('REDIS_CACHE_DB', '1')],
+ ],
+];
diff --git a/config/ldap.php b/config/ldap.php
new file mode 100644
index 0000000..2d45db1
--- /dev/null
+++ b/config/ldap.php
@@ -0,0 +1,36 @@
+ env('LDAP_CONNECTION', 'default'),
+
+ 'connections' => [
+ 'default' => [
+ 'hosts' => [env('LDAP_HOST', '127.0.0.1')],
+ 'username' => env('LDAP_USERNAME', ''),
+ 'password' => env('LDAP_PASSWORD', ''),
+ 'port' => (int) env('LDAP_PORT', 389),
+ 'base_dn' => env('LDAP_BASE_DN', ''),
+ 'timeout' => 5,
+ 'use_ssl' => env('LDAP_SSL', false),
+ 'use_tls' => env('LDAP_TLS', false),
+ 'use_sasl' => env('LDAP_SASL', false),
+ 'version' => 3,
+ 'follow_referrals' => false,
+ ],
+ ],
+
+ 'logging' => [
+ 'enabled' => env('LDAP_LOGGING', env('APP_DEBUG', false)),
+ 'channel' => env('LOG_CHANNEL', 'stack'),
+ ],
+
+ 'cache' => [
+ 'enabled' => env('LDAP_CACHE', false),
+ 'driver' => env('LDAP_CACHE_DRIVER', 'file'),
+ 'lifetime' => env('LDAP_CACHE_LIFETIME', 3600),
+ ],
+
+ 'auth' => [
+ 'enabled' => env('LDAP_AUTH_ENABLED', false),
+ ],
+];
diff --git a/config/permission.php b/config/permission.php
new file mode 100644
index 0000000..58e5547
--- /dev/null
+++ b/config/permission.php
@@ -0,0 +1,33 @@
+ [
+ 'permission' => Spatie\Permission\Models\Permission::class,
+ 'role' => Spatie\Permission\Models\Role::class,
+ ],
+ 'table_names' => [
+ 'roles' => 'roles',
+ 'permissions' => 'permissions',
+ 'model_has_permissions' => 'model_has_permissions',
+ 'model_has_roles' => 'model_has_roles',
+ 'role_has_permissions' => 'role_has_permissions',
+ ],
+ 'column_names' => [
+ 'role_pivot_key' => null,
+ 'permission_pivot_key' => null,
+ 'model_morph_key' => 'model_id',
+ 'team_foreign_key' => 'team_id',
+ ],
+ 'register_permission_check_method' => true,
+ 'register_octane_reset_listener' => false,
+ 'teams' => false,
+ 'use_passport_client_credentials' => false,
+ 'display_permission_in_exception' => false,
+ 'display_role_in_exception' => false,
+ 'enable_wildcard_permission' => false,
+ 'cache' => [
+ 'expiration_time' => \DateInterval::createFromDateString('24 hours'),
+ 'key' => 'spatie.permission.cache',
+ 'store' => 'default',
+ ],
+];
diff --git a/config/queue.php b/config/queue.php
new file mode 100644
index 0000000..8bb88ef
--- /dev/null
+++ b/config/queue.php
@@ -0,0 +1,12 @@
+ env('QUEUE_CONNECTION', 'redis'),
+ 'connections' => [
+ 'sync' => ['driver' => 'sync'],
+ 'database' => ['driver' => 'database', 'connection' => env('DB_QUEUE_CONNECTION'), 'table' => env('DB_QUEUE_TABLE', 'jobs'), 'queue' => env('DB_QUEUE', 'default'), 'retry_after' => (int) env('DB_QUEUE_RETRY_AFTER', 90), 'after_commit' => false],
+ 'redis' => ['driver' => 'redis', 'connection' => env('REDIS_QUEUE_CONNECTION', 'default'), 'queue' => env('REDIS_QUEUE', 'default'), 'retry_after' => (int) env('REDIS_QUEUE_RETRY_AFTER', 90), 'block_for' => null, 'after_commit' => false],
+ ],
+ 'batching' => ['database' => env('DB_CONNECTION', 'sqlite'), 'table' => 'job_batches'],
+ 'failed' => ['driver' => env('QUEUE_FAILED_DRIVER', 'database-uuids'), 'database' => env('DB_CONNECTION', 'sqlite'), 'table' => 'failed_jobs'],
+];
diff --git a/config/session.php b/config/session.php
new file mode 100644
index 0000000..249b1bc
--- /dev/null
+++ b/config/session.php
@@ -0,0 +1,20 @@
+ env('SESSION_DRIVER', 'redis'),
+ 'lifetime' => env('SESSION_LIFETIME', 480),
+ 'expire_on_close' => env('SESSION_EXPIRE_ON_CLOSE', false),
+ 'encrypt' => env('SESSION_ENCRYPT', false),
+ 'files' => storage_path('framework/sessions'),
+ 'connection' => env('SESSION_CONNECTION'),
+ 'table' => env('SESSION_TABLE', 'sessions'),
+ 'store' => env('SESSION_STORE'),
+ 'lottery' => [2, 100],
+ 'cookie' => env('SESSION_COOKIE', 'infra_session'),
+ 'path' => env('SESSION_PATH', '/'),
+ 'domain' => env('SESSION_DOMAIN'),
+ 'secure' => env('SESSION_SECURE_COOKIE', false),
+ 'http_only' => env('SESSION_HTTP_ONLY', true),
+ 'same_site' => env('SESSION_SAME_SITE', 'lax'),
+ 'partitioned' => env('SESSION_PARTITIONED_COOKIE', false),
+];
diff --git a/database/migrations/0001_01_01_000000_create_users_table.php b/database/migrations/0001_01_01_000000_create_users_table.php
new file mode 100644
index 0000000..8c2d8fd
--- /dev/null
+++ b/database/migrations/0001_01_01_000000_create_users_table.php
@@ -0,0 +1,55 @@
+id();
+ $table->string('name');
+ $table->string('email')->unique();
+ $table->timestamp('email_verified_at')->nullable();
+ $table->string('password')->nullable(); // nullable for LDAP users
+ $table->string('avatar')->nullable();
+ $table->string('auth_source')->default('local'); // local | ldap
+ $table->string('ldap_guid')->nullable()->unique();
+ $table->string('ldap_domain')->nullable();
+ $table->boolean('is_active')->default(true);
+ $table->boolean('mfa_enabled')->default(false);
+ $table->string('mfa_secret')->nullable();
+ $table->json('mfa_recovery_codes')->nullable();
+ $table->timestamp('last_login_at')->nullable();
+ $table->string('last_login_ip')->nullable();
+ $table->json('preferences')->nullable(); // theme, language, etc.
+ $table->rememberToken();
+ $table->timestamps();
+ $table->softDeletes();
+ });
+
+ Schema::create('password_reset_tokens', function (Blueprint $table) {
+ $table->string('email')->primary();
+ $table->string('token');
+ $table->timestamp('created_at')->nullable();
+ });
+
+ Schema::create('sessions', function (Blueprint $table) {
+ $table->string('id')->primary();
+ $table->foreignId('user_id')->nullable()->index();
+ $table->string('ip_address', 45)->nullable();
+ $table->text('user_agent')->nullable();
+ $table->longText('payload');
+ $table->integer('last_activity')->index();
+ });
+ }
+
+ public function down(): void
+ {
+ Schema::dropIfExists('sessions');
+ Schema::dropIfExists('password_reset_tokens');
+ Schema::dropIfExists('users');
+ }
+};
diff --git a/database/migrations/0001_01_01_000001_create_cache_table.php b/database/migrations/0001_01_01_000001_create_cache_table.php
new file mode 100644
index 0000000..26f163c
--- /dev/null
+++ b/database/migrations/0001_01_01_000001_create_cache_table.php
@@ -0,0 +1,29 @@
+string('key')->primary();
+ $table->mediumText('value');
+ $table->integer('expiration');
+ });
+
+ Schema::create('cache_locks', function (Blueprint $table) {
+ $table->string('key')->primary();
+ $table->string('owner');
+ $table->integer('expiration');
+ });
+ }
+
+ public function down(): void
+ {
+ Schema::dropIfExists('cache_locks');
+ Schema::dropIfExists('cache');
+ }
+};
diff --git a/database/migrations/0001_01_01_000002_create_jobs_table.php b/database/migrations/0001_01_01_000002_create_jobs_table.php
new file mode 100644
index 0000000..b09c234
--- /dev/null
+++ b/database/migrations/0001_01_01_000002_create_jobs_table.php
@@ -0,0 +1,51 @@
+id();
+ $table->string('queue')->index();
+ $table->longText('payload');
+ $table->unsignedTinyInteger('attempts');
+ $table->unsignedInteger('reserved_at')->nullable();
+ $table->unsignedInteger('available_at');
+ $table->unsignedInteger('created_at');
+ });
+
+ Schema::create('job_batches', function (Blueprint $table) {
+ $table->string('id')->primary();
+ $table->string('name');
+ $table->integer('total_jobs');
+ $table->integer('pending_jobs');
+ $table->integer('failed_jobs');
+ $table->longText('failed_job_ids');
+ $table->mediumText('options')->nullable();
+ $table->integer('cancelled_at')->nullable();
+ $table->integer('created_at');
+ $table->integer('finished_at')->nullable();
+ });
+
+ Schema::create('failed_jobs', function (Blueprint $table) {
+ $table->id();
+ $table->string('uuid')->unique();
+ $table->text('connection');
+ $table->text('queue');
+ $table->longText('payload');
+ $table->longText('exception');
+ $table->timestamp('failed_at')->useCurrent();
+ });
+ }
+
+ public function down(): void
+ {
+ Schema::dropIfExists('failed_jobs');
+ Schema::dropIfExists('job_batches');
+ Schema::dropIfExists('jobs');
+ }
+};
diff --git a/database/migrations/2024_01_01_000001_create_settings_table.php b/database/migrations/2024_01_01_000001_create_settings_table.php
new file mode 100644
index 0000000..95b3557
--- /dev/null
+++ b/database/migrations/2024_01_01_000001_create_settings_table.php
@@ -0,0 +1,26 @@
+id();
+ $table->string('group')->default('general');
+ $table->string('key')->unique();
+ $table->text('value')->nullable();
+ $table->string('type')->default('string'); // string, json, boolean, integer
+ $table->boolean('is_encrypted')->default(false);
+ $table->timestamps();
+ });
+ }
+
+ public function down(): void
+ {
+ Schema::dropIfExists('settings');
+ }
+};
diff --git a/database/migrations/2024_01_01_000002_create_hypervisors_table.php b/database/migrations/2024_01_01_000002_create_hypervisors_table.php
new file mode 100644
index 0000000..642931d
--- /dev/null
+++ b/database/migrations/2024_01_01_000002_create_hypervisors_table.php
@@ -0,0 +1,102 @@
+id();
+ $table->string('name');
+ $table->string('type'); // vcenter, esxi, proxmox, hyper-v, xen, kvm
+ $table->string('version')->nullable();
+ $table->string('host');
+ $table->integer('port')->default(443);
+ $table->string('username');
+ $table->text('password'); // encrypted
+ $table->boolean('ssl_verify')->default(true);
+ $table->string('datacenter')->nullable();
+ $table->string('status')->default('unknown'); // online, offline, unknown, error
+ $table->json('metadata')->nullable();
+ $table->timestamp('last_sync_at')->nullable();
+ $table->text('last_error')->nullable();
+ $table->foreignId('created_by')->constrained('users');
+ $table->timestamps();
+ $table->softDeletes();
+ });
+
+ Schema::create('virtual_machines', function (Blueprint $table) {
+ $table->id();
+ $table->foreignId('hypervisor_id')->constrained('hypervisors')->cascadeOnDelete();
+ $table->string('remote_id'); // ID from hypervisor
+ $table->string('name');
+ $table->string('status'); // running, stopped, suspended, unknown
+ $table->string('os_type')->nullable();
+ $table->string('os_version')->nullable();
+ $table->integer('cpu_count')->default(0);
+ $table->bigInteger('memory_mb')->default(0);
+ $table->bigInteger('disk_gb')->default(0);
+ $table->string('ip_address')->nullable();
+ $table->string('mac_address')->nullable();
+ $table->string('host_node')->nullable();
+ $table->string('cluster')->nullable();
+ $table->string('datastore')->nullable();
+ $table->json('tags')->nullable();
+ $table->json('metadata')->nullable();
+ $table->float('cpu_usage')->default(0);
+ $table->float('memory_usage')->default(0);
+ $table->foreignId('created_by')->nullable()->constrained('users');
+ $table->timestamps();
+
+ $table->unique(['hypervisor_id', 'remote_id']);
+ });
+
+ Schema::create('vm_templates', function (Blueprint $table) {
+ $table->id();
+ $table->foreignId('hypervisor_id')->nullable()->constrained('hypervisors')->nullOnDelete();
+ $table->string('name');
+ $table->string('description')->nullable();
+ $table->string('os_type');
+ $table->string('os_version')->nullable();
+ $table->integer('cpu_count')->default(2);
+ $table->bigInteger('memory_mb')->default(2048);
+ $table->bigInteger('disk_gb')->default(50);
+ $table->json('network_config')->nullable();
+ $table->json('customization')->nullable(); // ansible playbooks, cloud-init, etc.
+ $table->json('variables')->nullable(); // template variables
+ $table->text('provision_script')->nullable(); // post-deploy script
+ $table->string('status')->default('ready'); // ready, deploying, error
+ $table->string('remote_id')->nullable(); // template ID on hypervisor
+ $table->json('tags')->nullable();
+ $table->foreignId('created_by')->constrained('users');
+ $table->timestamps();
+ $table->softDeletes();
+ });
+
+ Schema::create('vm_deployments', function (Blueprint $table) {
+ $table->id();
+ $table->foreignId('template_id')->constrained('vm_templates');
+ $table->foreignId('hypervisor_id')->constrained('hypervisors');
+ $table->foreignId('virtual_machine_id')->nullable()->constrained('virtual_machines');
+ $table->string('vm_name');
+ $table->json('deploy_config');
+ $table->string('status'); // queued, running, success, failed
+ $table->text('log')->nullable();
+ $table->foreignId('deployed_by')->constrained('users');
+ $table->timestamp('started_at')->nullable();
+ $table->timestamp('completed_at')->nullable();
+ $table->timestamps();
+ });
+ }
+
+ public function down(): void
+ {
+ Schema::dropIfExists('vm_deployments');
+ Schema::dropIfExists('vm_templates');
+ Schema::dropIfExists('virtual_machines');
+ Schema::dropIfExists('hypervisors');
+ }
+};
diff --git a/database/migrations/2024_01_01_000003_create_containers_table.php b/database/migrations/2024_01_01_000003_create_containers_table.php
new file mode 100644
index 0000000..f4476e1
--- /dev/null
+++ b/database/migrations/2024_01_01_000003_create_containers_table.php
@@ -0,0 +1,80 @@
+id();
+ $table->string('name');
+ $table->string('type')->default('docker'); // docker, swarm, k8s
+ $table->string('host'); // unix:///var/run/docker.sock or tcp://host:port
+ $table->boolean('tls_enabled')->default(false);
+ $table->text('tls_cert')->nullable();
+ $table->text('tls_key')->nullable();
+ $table->text('tls_ca')->nullable();
+ $table->string('status')->default('unknown');
+ $table->json('info')->nullable(); // Docker engine info
+ $table->timestamp('last_sync_at')->nullable();
+ $table->foreignId('created_by')->constrained('users');
+ $table->timestamps();
+ $table->softDeletes();
+ });
+
+ Schema::create('containers', function (Blueprint $table) {
+ $table->id();
+ $table->foreignId('endpoint_id')->constrained('docker_endpoints')->cascadeOnDelete();
+ $table->string('container_id', 64); // Docker container ID
+ $table->string('name');
+ $table->string('image');
+ $table->string('image_id')->nullable();
+ $table->string('status'); // running, stopped, paused, exited, dead
+ $table->string('state')->nullable();
+ $table->json('ports')->nullable();
+ $table->json('volumes')->nullable();
+ $table->json('env')->nullable();
+ $table->json('labels')->nullable();
+ $table->json('networks')->nullable();
+ $table->bigInteger('created_at_unix')->nullable();
+ $table->timestamps();
+
+ $table->unique(['endpoint_id', 'container_id']);
+ });
+
+ Schema::create('stacks', function (Blueprint $table) {
+ $table->id();
+ $table->foreignId('endpoint_id')->constrained('docker_endpoints')->cascadeOnDelete();
+ $table->string('name');
+ $table->string('type')->default('compose'); // compose, swarm-stack
+ $table->text('compose_content'); // docker-compose.yml content
+ $table->json('env_vars')->nullable();
+ $table->string('status')->default('stopped');
+ $table->string('remote_id')->nullable();
+ $table->foreignId('created_by')->constrained('users');
+ $table->timestamps();
+ $table->softDeletes();
+ });
+
+ Schema::create('docker_images', function (Blueprint $table) {
+ $table->id();
+ $table->foreignId('endpoint_id')->constrained('docker_endpoints')->cascadeOnDelete();
+ $table->string('image_id', 71);
+ $table->json('repo_tags')->nullable();
+ $table->bigInteger('size')->default(0);
+ $table->bigInteger('created_at_unix')->nullable();
+ $table->timestamps();
+ });
+ }
+
+ public function down(): void
+ {
+ Schema::dropIfExists('docker_images');
+ Schema::dropIfExists('stacks');
+ Schema::dropIfExists('containers');
+ Schema::dropIfExists('docker_endpoints');
+ }
+};
diff --git a/database/migrations/2024_01_01_000004_create_cloud_table.php b/database/migrations/2024_01_01_000004_create_cloud_table.php
new file mode 100644
index 0000000..81d884b
--- /dev/null
+++ b/database/migrations/2024_01_01_000004_create_cloud_table.php
@@ -0,0 +1,50 @@
+id();
+ $table->string('name');
+ $table->string('provider'); // aws, alibaba, tencent, gcp, azure, digitalocean, vultr, hetzner
+ $table->string('account_id')->nullable(); // AWS account ID, etc.
+ $table->text('credentials'); // encrypted JSON
+ $table->string('region')->nullable(); // default region
+ $table->json('regions')->nullable(); // all available regions
+ $table->boolean('is_active')->default(true);
+ $table->string('status')->default('unknown');
+ $table->json('tags')->nullable();
+ $table->timestamp('last_sync_at')->nullable();
+ $table->foreignId('created_by')->constrained('users');
+ $table->timestamps();
+ $table->softDeletes();
+ });
+
+ Schema::create('cloud_resources', function (Blueprint $table) {
+ $table->id();
+ $table->foreignId('account_id')->constrained('cloud_accounts')->cascadeOnDelete();
+ $table->string('resource_id'); // cloud provider resource ID
+ $table->string('resource_type'); // ec2, ecs, rds, vpc, s3, etc.
+ $table->string('name');
+ $table->string('status');
+ $table->string('region');
+ $table->json('properties')->nullable();
+ $table->json('tags')->nullable();
+ $table->decimal('monthly_cost', 10, 4)->nullable();
+ $table->timestamps();
+
+ $table->unique(['account_id', 'resource_id', 'resource_type']);
+ });
+ }
+
+ public function down(): void
+ {
+ Schema::dropIfExists('cloud_resources');
+ Schema::dropIfExists('cloud_accounts');
+ }
+};
diff --git a/database/migrations/2024_01_01_000005_create_security_table.php b/database/migrations/2024_01_01_000005_create_security_table.php
new file mode 100644
index 0000000..771c09f
--- /dev/null
+++ b/database/migrations/2024_01_01_000005_create_security_table.php
@@ -0,0 +1,64 @@
+id();
+ $table->string('target_type'); // vm, container, host, cloud_resource
+ $table->unsignedBigInteger('target_id');
+ $table->string('target_name');
+ $table->string('scan_type'); // vulnerability, cis, pci, soc2, custom
+ $table->string('status'); // queued, running, completed, failed
+ $table->float('score')->nullable(); // 0-100
+ $table->string('grade')->nullable(); // A, B, C, D, F
+ $table->integer('critical_count')->default(0);
+ $table->integer('high_count')->default(0);
+ $table->integer('medium_count')->default(0);
+ $table->integer('low_count')->default(0);
+ $table->integer('info_count')->default(0);
+ $table->json('findings')->nullable();
+ $table->text('raw_output')->nullable();
+ $table->foreignId('initiated_by')->constrained('users');
+ $table->timestamp('started_at')->nullable();
+ $table->timestamp('completed_at')->nullable();
+ $table->timestamps();
+ });
+
+ Schema::create('security_scores', function (Blueprint $table) {
+ $table->id();
+ $table->string('target_type');
+ $table->unsignedBigInteger('target_id');
+ $table->float('score')->default(0);
+ $table->string('grade')->default('F');
+ $table->json('breakdown')->nullable();
+ $table->timestamp('calculated_at');
+ $table->timestamps();
+
+ $table->unique(['target_type', 'target_id']);
+ });
+
+ Schema::create('security_policies', function (Blueprint $table) {
+ $table->id();
+ $table->string('name');
+ $table->string('type'); // firewall, password, access, encryption
+ $table->text('description')->nullable();
+ $table->json('rules');
+ $table->boolean('is_active')->default(true);
+ $table->foreignId('created_by')->constrained('users');
+ $table->timestamps();
+ });
+ }
+
+ public function down(): void
+ {
+ Schema::dropIfExists('security_policies');
+ Schema::dropIfExists('security_scores');
+ Schema::dropIfExists('security_scans');
+ }
+};
diff --git a/database/migrations/2024_01_01_000006_create_backups_table.php b/database/migrations/2024_01_01_000006_create_backups_table.php
new file mode 100644
index 0000000..04c446b
--- /dev/null
+++ b/database/migrations/2024_01_01_000006_create_backups_table.php
@@ -0,0 +1,69 @@
+id();
+ $table->string('name');
+ $table->string('target_type'); // vm, container, database, files
+ $table->json('target_ids');
+ $table->string('schedule'); // cron expression
+ $table->string('retention_type')->default('count'); // count, days
+ $table->integer('retention_value')->default(7);
+ $table->string('storage_type'); // local, s3, sftp, nfs
+ $table->json('storage_config')->nullable(); // encrypted
+ $table->boolean('is_active')->default(true);
+ $table->json('compression')->nullable();
+ $table->json('encryption')->nullable();
+ $table->foreignId('created_by')->constrained('users');
+ $table->timestamps();
+ });
+
+ Schema::create('backups', function (Blueprint $table) {
+ $table->id();
+ $table->foreignId('policy_id')->nullable()->constrained('backup_policies')->nullOnDelete();
+ $table->string('target_type');
+ $table->unsignedBigInteger('target_id');
+ $table->string('target_name');
+ $table->string('status'); // running, success, failed, expired
+ $table->string('storage_path')->nullable();
+ $table->bigInteger('size_bytes')->nullable();
+ $table->string('checksum')->nullable();
+ $table->json('metadata')->nullable();
+ $table->text('notes')->nullable();
+ $table->timestamp('expires_at')->nullable();
+ $table->foreignId('created_by')->constrained('users');
+ $table->timestamp('started_at')->nullable();
+ $table->timestamp('completed_at')->nullable();
+ $table->timestamps();
+ });
+
+ Schema::create('restore_jobs', function (Blueprint $table) {
+ $table->id();
+ $table->foreignId('backup_id')->constrained('backups');
+ $table->string('target_type');
+ $table->unsignedBigInteger('target_id')->nullable();
+ $table->string('restore_mode'); // overwrite, new, test
+ $table->json('restore_config')->nullable();
+ $table->string('status'); // queued, running, success, failed
+ $table->text('log')->nullable();
+ $table->foreignId('initiated_by')->constrained('users');
+ $table->timestamp('started_at')->nullable();
+ $table->timestamp('completed_at')->nullable();
+ $table->timestamps();
+ });
+ }
+
+ public function down(): void
+ {
+ Schema::dropIfExists('restore_jobs');
+ Schema::dropIfExists('backups');
+ Schema::dropIfExists('backup_policies');
+ }
+};
diff --git a/database/migrations/2024_01_01_000007_create_monitoring_table.php b/database/migrations/2024_01_01_000007_create_monitoring_table.php
new file mode 100644
index 0000000..39669e3
--- /dev/null
+++ b/database/migrations/2024_01_01_000007_create_monitoring_table.php
@@ -0,0 +1,75 @@
+id();
+ $table->string('target_type');
+ $table->unsignedBigInteger('target_id');
+ $table->string('metric_name');
+ $table->float('value');
+ $table->string('unit')->nullable();
+ $table->json('labels')->nullable();
+ $table->timestamp('recorded_at');
+ $table->timestamps();
+
+ $table->index(['target_type', 'target_id', 'metric_name', 'recorded_at']);
+ });
+
+ Schema::create('alert_rules', function (Blueprint $table) {
+ $table->id();
+ $table->string('name');
+ $table->string('target_type')->nullable(); // null = all targets
+ $table->string('metric_name');
+ $table->string('condition'); // >, <, >=, <=, ==, !=
+ $table->float('threshold');
+ $table->integer('duration_seconds')->default(60);
+ $table->string('severity'); // critical, warning, info
+ $table->json('notification_channels')->nullable();
+ $table->boolean('is_active')->default(true);
+ $table->foreignId('created_by')->constrained('users');
+ $table->timestamps();
+ });
+
+ Schema::create('alerts', function (Blueprint $table) {
+ $table->id();
+ $table->foreignId('rule_id')->nullable()->constrained('alert_rules')->nullOnDelete();
+ $table->string('target_type');
+ $table->unsignedBigInteger('target_id');
+ $table->string('target_name');
+ $table->string('title');
+ $table->text('message');
+ $table->string('severity'); // critical, warning, info
+ $table->string('status')->default('firing'); // firing, acknowledged, resolved
+ $table->foreignId('acknowledged_by')->nullable()->constrained('users');
+ $table->timestamp('acknowledged_at')->nullable();
+ $table->timestamp('resolved_at')->nullable();
+ $table->timestamps();
+ });
+
+ Schema::create('monitoring_dashboards', function (Blueprint $table) {
+ $table->id();
+ $table->string('name');
+ $table->text('description')->nullable();
+ $table->json('panels'); // dashboard panel config
+ $table->boolean('is_default')->default(false);
+ $table->boolean('is_public')->default(false);
+ $table->foreignId('created_by')->constrained('users');
+ $table->timestamps();
+ });
+ }
+
+ public function down(): void
+ {
+ Schema::dropIfExists('monitoring_dashboards');
+ Schema::dropIfExists('alerts');
+ Schema::dropIfExists('alert_rules');
+ Schema::dropIfExists('metrics');
+ }
+};
diff --git a/database/migrations/2024_01_01_000008_create_identity_table.php b/database/migrations/2024_01_01_000008_create_identity_table.php
new file mode 100644
index 0000000..9a0bc7f
--- /dev/null
+++ b/database/migrations/2024_01_01_000008_create_identity_table.php
@@ -0,0 +1,72 @@
+id();
+ $table->foreignId('user_id')->constrained('users')->cascadeOnDelete();
+ $table->string('title');
+ $table->string('category')->nullable();
+ $table->string('url')->nullable();
+ $table->string('username')->nullable();
+ $table->text('password'); // encrypted
+ $table->text('notes')->nullable(); // encrypted
+ $table->json('custom_fields')->nullable(); // encrypted
+ $table->json('tags')->nullable();
+ $table->boolean('is_shared')->default(false);
+ $table->json('shared_with')->nullable(); // user IDs
+ $table->timestamp('expires_at')->nullable();
+ $table->timestamp('last_used_at')->nullable();
+ $table->timestamps();
+ $table->softDeletes();
+ });
+
+ Schema::create('certificates', function (Blueprint $table) {
+ $table->id();
+ $table->string('name');
+ $table->string('domain');
+ $table->json('san')->nullable(); // Subject Alternative Names
+ $table->text('certificate'); // encrypted
+ $table->text('private_key'); // encrypted
+ $table->text('chain')->nullable(); // encrypted
+ $table->string('issuer')->nullable();
+ $table->string('type'); // self-signed, lets-encrypt, custom
+ $table->boolean('auto_renew')->default(false);
+ $table->timestamp('issued_at')->nullable();
+ $table->timestamp('expires_at');
+ $table->json('tags')->nullable();
+ $table->string('status'); // valid, expiring, expired, revoked
+ $table->foreignId('created_by')->constrained('users');
+ $table->timestamps();
+ $table->softDeletes();
+ });
+
+ Schema::create('ssh_keys', function (Blueprint $table) {
+ $table->id();
+ $table->foreignId('user_id')->constrained('users')->cascadeOnDelete();
+ $table->string('name');
+ $table->string('fingerprint')->unique();
+ $table->text('public_key');
+ $table->text('private_key')->nullable(); // encrypted
+ $table->string('algorithm')->default('rsa');
+ $table->integer('key_size')->default(4096);
+ $table->boolean('has_passphrase')->default(false);
+ $table->json('tags')->nullable();
+ $table->timestamps();
+ $table->softDeletes();
+ });
+ }
+
+ public function down(): void
+ {
+ Schema::dropIfExists('ssh_keys');
+ Schema::dropIfExists('certificates');
+ Schema::dropIfExists('password_entries');
+ }
+};
diff --git a/database/migrations/2024_01_01_000009_create_wiki_table.php b/database/migrations/2024_01_01_000009_create_wiki_table.php
new file mode 100644
index 0000000..6374888
--- /dev/null
+++ b/database/migrations/2024_01_01_000009_create_wiki_table.php
@@ -0,0 +1,73 @@
+id();
+ $table->string('name');
+ $table->string('slug')->unique();
+ $table->text('description')->nullable();
+ $table->string('icon')->default('BookOpen');
+ $table->string('color')->default('#3b82f6');
+ $table->boolean('is_public')->default(false);
+ $table->foreignId('created_by')->constrained('users');
+ $table->timestamps();
+ $table->softDeletes();
+ });
+
+ Schema::create('wiki_pages', function (Blueprint $table) {
+ $table->id();
+ $table->foreignId('space_id')->constrained('wiki_spaces')->cascadeOnDelete();
+ $table->foreignId('parent_id')->nullable()->constrained('wiki_pages')->nullOnDelete();
+ $table->string('title');
+ $table->string('slug');
+ $table->longText('content'); // Markdown content
+ $table->longText('content_html')->nullable(); // rendered HTML cache
+ $table->json('tags')->nullable();
+ $table->boolean('is_published')->default(true);
+ $table->integer('order')->default(0);
+ $table->foreignId('created_by')->constrained('users');
+ $table->foreignId('updated_by')->nullable()->constrained('users');
+ $table->timestamps();
+ $table->softDeletes();
+
+ $table->unique(['space_id', 'slug']);
+ });
+
+ Schema::create('wiki_page_revisions', function (Blueprint $table) {
+ $table->id();
+ $table->foreignId('page_id')->constrained('wiki_pages')->cascadeOnDelete();
+ $table->longText('content');
+ $table->string('change_summary')->nullable();
+ $table->foreignId('created_by')->constrained('users');
+ $table->timestamps();
+ });
+
+ Schema::create('wiki_attachments', function (Blueprint $table) {
+ $table->id();
+ $table->foreignId('page_id')->nullable()->constrained('wiki_pages')->nullOnDelete();
+ $table->string('filename');
+ $table->string('original_name');
+ $table->string('mime_type');
+ $table->bigInteger('size');
+ $table->string('path');
+ $table->string('disk')->default('local');
+ $table->foreignId('uploaded_by')->constrained('users');
+ $table->timestamps();
+ });
+ }
+
+ public function down(): void
+ {
+ Schema::dropIfExists('wiki_attachments');
+ Schema::dropIfExists('wiki_page_revisions');
+ Schema::dropIfExists('wiki_pages');
+ Schema::dropIfExists('wiki_spaces');
+ }
+};
diff --git a/database/migrations/2024_01_01_000010_create_ldap_table.php b/database/migrations/2024_01_01_000010_create_ldap_table.php
new file mode 100644
index 0000000..b2f95fb
--- /dev/null
+++ b/database/migrations/2024_01_01_000010_create_ldap_table.php
@@ -0,0 +1,37 @@
+id();
+ $table->string('name')->default('default');
+ $table->string('host');
+ $table->integer('port')->default(389);
+ $table->boolean('use_ssl')->default(false);
+ $table->boolean('use_tls')->default(false);
+ $table->string('base_dn');
+ $table->string('bind_dn')->nullable();
+ $table->text('bind_password')->nullable(); // encrypted
+ $table->string('user_search_base')->nullable();
+ $table->string('user_filter')->default('(sAMAccountName={username})');
+ $table->string('group_search_base')->nullable();
+ $table->string('group_filter')->nullable();
+ $table->string('admin_group_dn')->nullable();
+ $table->json('attribute_map')->nullable(); // ldap attr -> user field map
+ $table->boolean('is_active')->default(false);
+ $table->string('status')->default('unconfigured');
+ $table->timestamps();
+ });
+ }
+
+ public function down(): void
+ {
+ Schema::dropIfExists('ldap_configs');
+ }
+};
diff --git a/database/seeders/DatabaseSeeder.php b/database/seeders/DatabaseSeeder.php
new file mode 100644
index 0000000..7370ab2
--- /dev/null
+++ b/database/seeders/DatabaseSeeder.php
@@ -0,0 +1,96 @@
+ 'super-admin']);
+ $admin = Role::firstOrCreate(['name' => 'admin']);
+ $operator = Role::firstOrCreate(['name' => 'operator']);
+ $viewer = Role::firstOrCreate(['name' => 'viewer']);
+
+ // Create permissions
+ $permissions = [
+ // Hypervisors
+ 'hypervisors.view', 'hypervisors.create', 'hypervisors.edit', 'hypervisors.delete',
+ 'vms.view', 'vms.power', 'vms.create', 'vms.delete',
+ 'templates.view', 'templates.create', 'templates.edit', 'templates.delete', 'templates.deploy',
+ // Containers
+ 'containers.view', 'containers.manage',
+ 'stacks.view', 'stacks.create', 'stacks.edit', 'stacks.delete',
+ // Cloud
+ 'cloud.view', 'cloud.create', 'cloud.edit', 'cloud.delete',
+ // Security
+ 'security.view', 'security.scan',
+ // Backups
+ 'backups.view', 'backups.create', 'backups.restore', 'backups.delete',
+ // Monitoring
+ 'monitoring.view', 'monitoring.alerts',
+ // Identity
+ 'identity.view', 'identity.create', 'identity.edit', 'identity.delete',
+ // Wiki
+ 'wiki.view', 'wiki.create', 'wiki.edit', 'wiki.delete',
+ // ACL
+ 'acl.view', 'acl.manage',
+ // Admin
+ 'admin.view', 'admin.manage',
+ ];
+
+ foreach ($permissions as $permission) {
+ Permission::firstOrCreate(['name' => $permission]);
+ }
+
+ // Assign permissions to roles
+ $admin->syncPermissions(Permission::whereNotIn('name', ['admin.manage', 'acl.manage'])->get());
+ $operator->syncPermissions([
+ 'hypervisors.view', 'vms.view', 'vms.power',
+ 'containers.view', 'containers.manage',
+ 'stacks.view', 'cloud.view',
+ 'security.view', 'backups.view',
+ 'monitoring.view', 'monitoring.alerts',
+ 'identity.view', 'wiki.view', 'wiki.create', 'wiki.edit',
+ ]);
+ $viewer->syncPermissions([
+ 'hypervisors.view', 'vms.view', 'containers.view',
+ 'stacks.view', 'cloud.view', 'security.view',
+ 'backups.view', 'monitoring.view', 'identity.view', 'wiki.view',
+ ]);
+
+ // Create default super admin user
+ $user = User::firstOrCreate(
+ ['email' => 'admin@infra.local'],
+ [
+ 'name' => 'Super Admin',
+ 'password' => Hash::make('Admin@123456'),
+ 'is_active' => true,
+ ]
+ );
+ $user->assignRole('super-admin');
+
+ // Default settings
+ \App\Models\Setting::firstOrCreate(['key' => 'app.name'], [
+ 'group' => 'general',
+ 'value' => 'Infra Manager',
+ 'type' => 'string',
+ ]);
+ \App\Models\Setting::firstOrCreate(['key' => 'app.theme'], [
+ 'group' => 'general',
+ 'value' => 'dark',
+ 'type' => 'string',
+ ]);
+ \App\Models\Setting::firstOrCreate(['key' => 'security.session_timeout'], [
+ 'group' => 'security',
+ 'value' => '480',
+ 'type' => 'integer',
+ ]);
+ }
+}
diff --git a/docker-compose.yml b/docker-compose.yml
new file mode 100644
index 0000000..66b84f7
--- /dev/null
+++ b/docker-compose.yml
@@ -0,0 +1,119 @@
+version: '3.9'
+
+services:
+ # ─── Nginx Web Server ───────────────────────────────────────────────
+ nginx:
+ image: nginx:1.27-alpine
+ container_name: infra-nginx
+ restart: unless-stopped
+ ports:
+ - "${APP_PORT:-8080}:80"
+ - "${APP_HTTPS_PORT:-8443}:443"
+ volumes:
+ - .:/var/www/html:ro
+ - ./docker/nginx/default.conf:/etc/nginx/conf.d/default.conf:ro
+ - ./docker/nginx/ssl:/etc/nginx/ssl:ro
+ - nginx_logs:/var/log/nginx
+ depends_on:
+ - php
+ networks:
+ - infra_network
+
+ # ─── PHP-FPM Application ────────────────────────────────────────────
+ php:
+ build:
+ context: .
+ dockerfile: docker/php/Dockerfile
+ args:
+ USER_ID: ${USER_ID:-1000}
+ GROUP_ID: ${GROUP_ID:-1000}
+ container_name: infra-php
+ restart: unless-stopped
+ volumes:
+ - .:/var/www/html
+ - ./storage:/var/www/html/storage
+ - ./database:/var/www/html/database
+ - php_logs:/var/log/supervisor
+ environment:
+ - APP_ENV=${APP_ENV:-local}
+ - APP_DEBUG=${APP_DEBUG:-true}
+ depends_on:
+ redis:
+ condition: service_healthy
+ networks:
+ - infra_network
+
+ # ─── Redis Cache & Queue ─────────────────────────────────────────────
+ redis:
+ image: redis:7.4-alpine
+ container_name: infra-redis
+ restart: unless-stopped
+ command: redis-server --requirepass ${REDIS_PASSWORD:-infra_redis_secret} --maxmemory 256mb --maxmemory-policy allkeys-lru
+ ports:
+ - "${REDIS_PORT:-6379}:6379"
+ volumes:
+ - redis_data:/data
+ healthcheck:
+ test: ["CMD", "redis-cli", "-a", "${REDIS_PASSWORD:-infra_redis_secret}", "ping"]
+ interval: 5s
+ timeout: 3s
+ retries: 5
+ networks:
+ - infra_network
+
+ # ─── Vite Dev Server (dev only) ──────────────────────────────────────
+ vite:
+ image: node:22-alpine
+ container_name: infra-vite
+ restart: unless-stopped
+ working_dir: /var/www/html
+ command: sh -c "npm install && npm run dev"
+ volumes:
+ - .:/var/www/html
+ ports:
+ - "5173:5173"
+ networks:
+ - infra_network
+ profiles:
+ - dev
+
+ # ─── MySQL (optional - for production upgrade) ────────────────────────
+ mysql:
+ image: mysql:8.0
+ container_name: infra-mysql
+ restart: unless-stopped
+ environment:
+ MYSQL_ROOT_PASSWORD: ${MYSQL_ROOT_PASSWORD:-root_secret}
+ MYSQL_DATABASE: ${MYSQL_DATABASE:-infra_manager}
+ MYSQL_USER: ${MYSQL_USER:-infra_user}
+ MYSQL_PASSWORD: ${MYSQL_PASSWORD:-infra_secret}
+ ports:
+ - "${MYSQL_PORT:-3306}:3306"
+ volumes:
+ - mysql_data:/var/lib/mysql
+ healthcheck:
+ test: ["CMD", "mysqladmin", "ping", "-h", "localhost", "-u", "root", "-p${MYSQL_ROOT_PASSWORD:-root_secret}"]
+ interval: 10s
+ timeout: 5s
+ retries: 5
+ networks:
+ - infra_network
+ profiles:
+ - mysql
+
+volumes:
+ redis_data:
+ driver: local
+ mysql_data:
+ driver: local
+ nginx_logs:
+ driver: local
+ php_logs:
+ driver: local
+
+networks:
+ infra_network:
+ driver: bridge
+ ipam:
+ config:
+ - subnet: 172.20.0.0/16
diff --git a/docker/nginx/default.conf b/docker/nginx/default.conf
new file mode 100644
index 0000000..06ec006
--- /dev/null
+++ b/docker/nginx/default.conf
@@ -0,0 +1,97 @@
+server {
+ listen 80;
+ listen [::]:80;
+ server_name _;
+ root /var/www/html/public;
+ index index.php;
+
+ charset utf-8;
+ client_max_body_size 100M;
+
+ # Security headers
+ add_header X-Frame-Options "SAMEORIGIN";
+ add_header X-Content-Type-Options "nosniff";
+ add_header X-XSS-Protection "1; mode=block";
+ add_header Referrer-Policy "strict-origin-when-cross-origin";
+
+ location / {
+ try_files $uri $uri/ /index.php?$query_string;
+ }
+
+ location = /favicon.ico { access_log off; log_not_found off; }
+ location = /robots.txt { access_log off; log_not_found off; }
+
+ error_page 404 /index.php;
+
+ location ~ \.php$ {
+ fastcgi_pass php:9000;
+ fastcgi_param SCRIPT_FILENAME $realpath_root$fastcgi_script_name;
+ include fastcgi_params;
+ fastcgi_read_timeout 300;
+ fastcgi_buffer_size 128k;
+ fastcgi_buffers 4 256k;
+ }
+
+ location ~ /\.(?!well-known).* {
+ deny all;
+ }
+
+ # WebSocket support for Vite HMR in dev
+ location /vite-hmr {
+ proxy_pass http://vite:5173;
+ proxy_http_version 1.1;
+ proxy_set_header Upgrade $http_upgrade;
+ proxy_set_header Connection "upgrade";
+ }
+
+ # Gzip compression
+ gzip on;
+ gzip_vary on;
+ gzip_min_length 1000;
+ gzip_proxied expired no-cache no-store private auth;
+ gzip_types text/plain text/css text/xml application/json application/javascript application/xml+rss application/atom+xml image/svg+xml;
+
+ # Access log
+ access_log /var/log/nginx/infra-manager-access.log;
+ error_log /var/log/nginx/infra-manager-error.log;
+}
+
+server {
+ listen 443 ssl;
+ listen [::]:443 ssl;
+ server_name _;
+ root /var/www/html/public;
+ index index.php;
+
+ ssl_certificate /etc/nginx/ssl/cert.pem;
+ ssl_certificate_key /etc/nginx/ssl/key.pem;
+ ssl_protocols TLSv1.2 TLSv1.3;
+ ssl_ciphers HIGH:!aNULL:!MD5;
+
+ charset utf-8;
+ client_max_body_size 100M;
+
+ add_header X-Frame-Options "SAMEORIGIN";
+ add_header X-Content-Type-Options "nosniff";
+ add_header Strict-Transport-Security "max-age=31536000; includeSubDomains";
+
+ location / {
+ try_files $uri $uri/ /index.php?$query_string;
+ }
+
+ location = /favicon.ico { access_log off; log_not_found off; }
+ location = /robots.txt { access_log off; log_not_found off; }
+
+ error_page 404 /index.php;
+
+ location ~ \.php$ {
+ fastcgi_pass php:9000;
+ fastcgi_param SCRIPT_FILENAME $realpath_root$fastcgi_script_name;
+ include fastcgi_params;
+ fastcgi_read_timeout 300;
+ }
+
+ location ~ /\.(?!well-known).* {
+ deny all;
+ }
+}
diff --git a/docker/php/Dockerfile b/docker/php/Dockerfile
new file mode 100644
index 0000000..91ed5c4
--- /dev/null
+++ b/docker/php/Dockerfile
@@ -0,0 +1,92 @@
+FROM php:8.3-fpm-alpine
+
+LABEL maintainer="Infra Manager"
+
+# Build arguments
+ARG NODE_VERSION=22
+ARG USER_ID=1000
+ARG GROUP_ID=1000
+
+# Install system dependencies
+RUN apk add --no-cache \
+ bash \
+ curl \
+ git \
+ icu-dev \
+ libzip-dev \
+ linux-headers \
+ oniguruma-dev \
+ openssl-dev \
+ sqlite \
+ sqlite-dev \
+ supervisor \
+ unzip \
+ zip \
+ libpng-dev \
+ libjpeg-turbo-dev \
+ freetype-dev \
+ shadow \
+ nodejs \
+ npm
+
+# Install PHP extensions
+RUN docker-php-ext-configure gd --with-freetype --with-jpeg \
+ && docker-php-ext-install \
+ bcmath \
+ exif \
+ gd \
+ intl \
+ mbstring \
+ opcache \
+ pcntl \
+ pdo \
+ pdo_sqlite \
+ zip
+
+# Install pdo_mysql for later MySQL migration
+RUN apk add --no-cache mysql-client \
+ && docker-php-ext-install pdo_mysql
+
+# Install Redis extension
+RUN apk add --no-cache --virtual .build-deps $PHPIZE_DEPS \
+ && pecl install redis \
+ && docker-php-ext-enable redis \
+ && apk del .build-deps
+
+# Install Composer
+COPY --from=composer:2.7 /usr/bin/composer /usr/bin/composer
+
+# Configure opcache
+RUN docker-php-ext-enable opcache
+COPY docker/php/opcache.ini /usr/local/etc/php/conf.d/opcache.ini
+
+# PHP configuration
+COPY docker/php/php.ini /usr/local/etc/php/conf.d/custom.ini
+
+# Create application user
+RUN addgroup -g ${GROUP_ID} appgroup 2>/dev/null || true \
+ && adduser -u ${USER_ID} -G appgroup -s /bin/bash -D appuser 2>/dev/null || true
+
+# Set working directory
+WORKDIR /var/www/html
+
+# Copy application
+COPY --chown=appuser:appgroup . .
+
+# Install PHP dependencies
+RUN composer install --no-dev --optimize-autoloader --no-interaction 2>/dev/null || \
+ composer install --optimize-autoloader --no-interaction
+
+# Install Node dependencies and build assets
+RUN npm ci && npm run build
+
+# Set permissions
+RUN chown -R appuser:appgroup /var/www/html \
+ && chmod -R 755 /var/www/html/storage \
+ && chmod -R 755 /var/www/html/bootstrap/cache
+
+USER appuser
+
+EXPOSE 9000
+
+CMD ["php-fpm"]
diff --git a/docker/php/opcache.ini b/docker/php/opcache.ini
new file mode 100644
index 0000000..801d6e4
--- /dev/null
+++ b/docker/php/opcache.ini
@@ -0,0 +1,8 @@
+opcache.enable=1
+opcache.memory_consumption=256
+opcache.interned_strings_buffer=16
+opcache.max_accelerated_files=20000
+opcache.revalidate_freq=0
+opcache.validate_timestamps=0
+opcache.save_comments=1
+opcache.fast_shutdown=0
diff --git a/docker/php/php.ini b/docker/php/php.ini
new file mode 100644
index 0000000..aa4874e
--- /dev/null
+++ b/docker/php/php.ini
@@ -0,0 +1,7 @@
+upload_max_filesize = 100M
+post_max_size = 100M
+memory_limit = 512M
+max_execution_time = 300
+max_input_vars = 5000
+date.timezone = UTC
+expose_php = Off
diff --git a/docker/supervisor/supervisord.conf b/docker/supervisor/supervisord.conf
new file mode 100644
index 0000000..aa8bb14
--- /dev/null
+++ b/docker/supervisor/supervisord.conf
@@ -0,0 +1,32 @@
+[supervisord]
+nodaemon=true
+user=root
+logfile=/var/log/supervisor/supervisord.log
+pidfile=/var/run/supervisord.pid
+
+[program:php-fpm]
+command=php-fpm
+stdout_logfile=/dev/stdout
+stdout_logfile_maxbytes=0
+stderr_logfile=/dev/stderr
+stderr_logfile_maxbytes=0
+autorestart=true
+
+[program:laravel-worker]
+process_name=%(program_name)s_%(process_num)02d
+command=php /var/www/html/artisan queue:work --sleep=3 --tries=3 --max-time=3600
+autostart=true
+autorestart=true
+stopasgroup=true
+killasgroup=true
+numprocs=2
+redirect_stderr=true
+stdout_logfile=/var/log/supervisor/worker.log
+stopwaitsecs=3600
+
+[program:laravel-scheduler]
+command=bash -c "while [ true ]; do (php /var/www/html/artisan schedule:run --verbose --no-interaction &); sleep 60; done"
+autostart=true
+autorestart=true
+redirect_stderr=true
+stdout_logfile=/var/log/supervisor/scheduler.log
diff --git a/package.json b/package.json
new file mode 100644
index 0000000..99519ca
--- /dev/null
+++ b/package.json
@@ -0,0 +1,50 @@
+{
+ "name": "infra-manager",
+ "private": true,
+ "scripts": {
+ "dev": "vite",
+ "build": "vite build"
+ },
+ "dependencies": {
+ "@headlessui/react": "^2.2.0",
+ "@heroicons/react": "^2.2.0",
+ "@inertiajs/react": "^2.0.3",
+ "@radix-ui/react-dialog": "^1.1.4",
+ "@radix-ui/react-dropdown-menu": "^2.1.4",
+ "@radix-ui/react-progress": "^1.1.1",
+ "@radix-ui/react-scroll-area": "^1.2.2",
+ "@radix-ui/react-select": "^2.1.4",
+ "@radix-ui/react-separator": "^1.1.1",
+ "@radix-ui/react-slot": "^1.1.1",
+ "@radix-ui/react-tabs": "^1.1.2",
+ "@radix-ui/react-toast": "^1.2.4",
+ "@radix-ui/react-tooltip": "^1.1.6",
+ "axios": "^1.7.4",
+ "class-variance-authority": "^0.7.1",
+ "clsx": "^2.1.1",
+ "cmdk": "^1.0.4",
+ "framer-motion": "^11.18.0",
+ "lucide-react": "^0.469.0",
+ "react": "^18.3.1",
+ "react-dom": "^18.3.1",
+ "react-router-dom": "^7.1.2",
+ "recharts": "^2.15.0",
+ "tailwind-merge": "^2.6.0",
+ "tailwindcss-animate": "^1.0.7",
+ "xterm": "^5.3.0",
+ "xterm-addon-fit": "^0.8.0",
+ "zustand": "^5.0.3"
+ },
+ "devDependencies": {
+ "@tailwindcss/forms": "^0.5.10",
+ "@tailwindcss/typography": "^0.5.15",
+ "@types/node": "^22.10.7",
+ "@types/react": "^18.3.18",
+ "@types/react-dom": "^18.3.5",
+ "@vitejs/plugin-react": "^4.3.4",
+ "autoprefixer": "^10.4.20",
+ "postcss": "^8.5.1",
+ "tailwindcss": "^3.4.17",
+ "vite": "^6.0.11"
+ }
+}
diff --git a/resources/css/app.css b/resources/css/app.css
new file mode 100644
index 0000000..cde7ceb
--- /dev/null
+++ b/resources/css/app.css
@@ -0,0 +1,112 @@
+@tailwind base;
+@tailwind components;
+@tailwind utilities;
+
+@layer base {
+ :root {
+ --background: 222.2 84% 4.9%;
+ --foreground: 210 40% 98%;
+ --card: 222.2 84% 4.9%;
+ --card-foreground: 210 40% 98%;
+ --popover: 222.2 84% 4.9%;
+ --popover-foreground: 210 40% 98%;
+ --primary: 184 100% 50%;
+ --primary-foreground: 222.2 47.4% 11.2%;
+ --secondary: 217.2 32.6% 17.5%;
+ --secondary-foreground: 210 40% 98%;
+ --muted: 217.2 32.6% 17.5%;
+ --muted-foreground: 215 20.2% 65.1%;
+ --accent: 217.2 32.6% 17.5%;
+ --accent-foreground: 210 40% 98%;
+ --destructive: 0 62.8% 30.6%;
+ --destructive-foreground: 210 40% 98%;
+ --border: 217.2 32.6% 17.5%;
+ --input: 217.2 32.6% 17.5%;
+ --ring: 184 100% 50%;
+ --radius: 0.5rem;
+ }
+}
+
+@layer base {
+ * {
+ @apply border-border;
+ }
+ body {
+ @apply bg-background text-foreground;
+ font-feature-settings: "rlig" 1, "calt" 1;
+ }
+}
+
+@layer components {
+ /* Aceternity-style glassmorphism card */
+ .glass-card {
+ @apply relative overflow-hidden rounded-xl border border-white/10 bg-white/5 backdrop-blur-xl;
+ }
+
+ /* Gradient border effect */
+ .gradient-border {
+ @apply relative;
+ background: linear-gradient(var(--background), var(--background)) padding-box,
+ linear-gradient(135deg, #00d4ff, #9d4edd, #00ff88) border-box;
+ border: 1px solid transparent;
+ }
+
+ /* Status badge variants */
+ .status-online { @apply bg-green-500/20 text-green-400 border border-green-500/30; }
+ .status-offline { @apply bg-red-500/20 text-red-400 border border-red-500/30; }
+ .status-warning { @apply bg-yellow-500/20 text-yellow-400 border border-yellow-500/30; }
+ .status-unknown { @apply bg-gray-500/20 text-gray-400 border border-gray-500/30; }
+ .status-running { @apply bg-cyan-500/20 text-cyan-400 border border-cyan-500/30; }
+ .status-stopped { @apply bg-slate-500/20 text-slate-400 border border-slate-500/30; }
+
+ /* Neon glow effects */
+ .glow-cyan { box-shadow: 0 0 20px rgba(0, 212, 255, 0.3); }
+ .glow-green { box-shadow: 0 0 20px rgba(0, 255, 136, 0.3); }
+ .glow-purple { box-shadow: 0 0 20px rgba(157, 78, 221, 0.3); }
+
+ /* Custom scrollbar */
+ .custom-scroll::-webkit-scrollbar {
+ @apply w-1.5;
+ }
+ .custom-scroll::-webkit-scrollbar-track {
+ @apply bg-transparent;
+ }
+ .custom-scroll::-webkit-scrollbar-thumb {
+ @apply rounded-full bg-white/10;
+ }
+ .custom-scroll::-webkit-scrollbar-thumb:hover {
+ @apply bg-white/20;
+ }
+
+ /* Terminal style */
+ .terminal {
+ @apply font-mono text-sm bg-black/60 text-green-400 p-4 rounded-lg;
+ }
+}
+
+/* Grid background pattern */
+.bg-grid-pattern {
+ background-image:
+ linear-gradient(rgba(255,255,255,.03) 1px, transparent 1px),
+ linear-gradient(90deg, rgba(255,255,255,.03) 1px, transparent 1px);
+ background-size: 50px 50px;
+}
+
+/* Aurora background */
+.aurora-bg {
+ background: linear-gradient(
+ 125deg,
+ rgba(0, 212, 255, 0.05) 0%,
+ rgba(157, 78, 221, 0.05) 33%,
+ rgba(0, 255, 136, 0.05) 66%,
+ rgba(0, 212, 255, 0.05) 100%
+ );
+ background-size: 400% 400%;
+ animation: aurora 15s ease infinite;
+}
+
+@keyframes aurora {
+ 0% { background-position: 0% 50%; }
+ 50% { background-position: 100% 50%; }
+ 100% { background-position: 0% 50%; }
+}
diff --git a/resources/js/Components/ui/Button.jsx b/resources/js/Components/ui/Button.jsx
new file mode 100644
index 0000000..f604b2c
--- /dev/null
+++ b/resources/js/Components/ui/Button.jsx
@@ -0,0 +1,42 @@
+import { motion } from 'framer-motion';
+import { cn } from '@/lib/utils';
+
+export function Button({ children, variant = 'primary', size = 'md', className, loading, icon: Icon, ...props }) {
+ const variants = {
+ primary: 'bg-cyan-500 hover:bg-cyan-400 text-black font-semibold shadow-[0_0_20px_rgba(0,212,255,0.3)] hover:shadow-[0_0_30px_rgba(0,212,255,0.5)]',
+ secondary: 'bg-white/10 hover:bg-white/15 text-white border border-white/20',
+ danger: 'bg-red-500/20 hover:bg-red-500/30 text-red-400 border border-red-500/30',
+ ghost: 'hover:bg-white/5 text-white/70 hover:text-white',
+ outline: 'border border-cyan-500/50 text-cyan-400 hover:bg-cyan-500/10',
+ };
+ const sizes = {
+ sm: 'h-7 px-3 text-xs gap-1.5',
+ md: 'h-9 px-4 text-sm gap-2',
+ lg: 'h-11 px-6 text-base gap-2',
+ icon: 'h-9 w-9 p-0',
+ };
+
+ return (
+
+ {loading ? (
+
+ ) : Icon ? (
+
+ ) : null}
+ {size !== 'icon' && children}
+
+ );
+}
diff --git a/resources/js/Components/ui/DataTable.jsx b/resources/js/Components/ui/DataTable.jsx
new file mode 100644
index 0000000..73845e2
--- /dev/null
+++ b/resources/js/Components/ui/DataTable.jsx
@@ -0,0 +1,137 @@
+import { useState } from 'react';
+import { motion, AnimatePresence } from 'framer-motion';
+import { ChevronUp, ChevronDown, Search, ChevronsLeft, ChevronsRight, ChevronLeft, ChevronRight } from 'lucide-react';
+import { cn } from '@/lib/utils';
+
+export function DataTable({ columns, data, onRowClick, emptyMessage = 'No data found', searchable = true, className }) {
+ const [search, setSearch] = useState('');
+ const [sortCol, setSortCol] = useState(null);
+ const [sortDir, setSortDir] = useState('asc');
+ const [page, setPage] = useState(1);
+ const perPage = 15;
+
+ const filtered = search
+ ? data.filter(row => columns.some(col => {
+ const val = col.accessor ? row[col.accessor] : '';
+ return String(val ?? '').toLowerCase().includes(search.toLowerCase());
+ }))
+ : data;
+
+ const sorted = sortCol
+ ? [...filtered].sort((a, b) => {
+ const va = a[sortCol] ?? '';
+ const vb = b[sortCol] ?? '';
+ const cmp = String(va).localeCompare(String(vb), undefined, { numeric: true });
+ return sortDir === 'asc' ? cmp : -cmp;
+ })
+ : filtered;
+
+ const totalPages = Math.ceil(sorted.length / perPage);
+ const paginated = sorted.slice((page - 1) * perPage, page * perPage);
+
+ const handleSort = (accessor) => {
+ if (sortCol === accessor) {
+ setSortDir(d => d === 'asc' ? 'desc' : 'asc');
+ } else {
+ setSortCol(accessor);
+ setSortDir('asc');
+ }
+ setPage(1);
+ };
+
+ return (
+
+ {searchable && (
+
+
+ { setSearch(e.target.value); setPage(1); }}
+ className="w-full pl-9 pr-4 py-2 bg-white/5 border border-white/10 rounded-lg text-sm text-white placeholder:text-white/30 focus:outline-none focus:border-cyan-500/50 focus:bg-white/[0.07] transition-all"
+ />
+
+ )}
+
+
+
+
+
+ {columns.map(col => (
+ | col.accessor && handleSort(col.accessor)}
+ >
+
+ {col.header}
+ {col.accessor && sortCol === col.accessor && (
+ sortDir === 'asc'
+ ?
+ :
+ )}
+
+ |
+ ))}
+
+
+
+
+ {paginated.length === 0 ? (
+
+ |
+ {emptyMessage}
+ |
+
+ ) : (
+ paginated.map((row, i) => (
+ onRowClick?.(row)}
+ className={cn(
+ 'border-b border-white/[0.05] last:border-0 transition-colors',
+ onRowClick && 'cursor-pointer hover:bg-white/[0.03]'
+ )}
+ >
+ {columns.map(col => (
+
+ {col.render ? col.render(row) : row[col.accessor]}
+ |
+ ))}
+
+ ))
+ )}
+
+
+
+
+
+ {totalPages > 1 && (
+
+
{filtered.length} results
+
+
+
+ Page {page} of {totalPages}
+
+
+
+
+ )}
+
{children}
+
+ );
+}
+
+export function StatCard({ title, value, subtitle, icon: Icon, color = 'cyan', trend, className }) {
+ const colors = {
+ cyan: { text: 'text-cyan-400', bg: 'bg-cyan-500/10', border: 'border-cyan-500/20' },
+ green: { text: 'text-green-400', bg: 'bg-green-500/10', border: 'border-green-500/20' },
+ purple: { text: 'text-purple-400', bg: 'bg-purple-500/10', border: 'border-purple-500/20' },
+ orange: { text: 'text-orange-400', bg: 'bg-orange-500/10', border: 'border-orange-500/20' },
+ red: { text: 'text-red-400', bg: 'bg-red-500/10', border: 'border-red-500/20' },
+ blue: { text: 'text-blue-400', bg: 'bg-blue-500/10', border: 'border-blue-500/20' },
+ };
+ const c = colors[color] ?? colors.cyan;
+
+ return (
+
+
+
+
{title}
+
{value}
+ {subtitle &&
{subtitle}
}
+ {trend !== undefined && (
+
= 0 ? 'text-green-400' : 'text-red-400')}>
+ {trend >= 0 ? '↑' : '↓'} {Math.abs(trend)}% vs last hour
+
+ )}
+
+ {Icon && (
+
+
+
+ )}
+
+ {showLabel && (
+
+ {Math.round(pct)}%
+
+ )}
+
+
+
+
+ {item.name}
+
+ )}
+
+ );
+}
+
+export default function AppLayout({ children, title }) {
+ const { auth, navigation, flash, app } = usePage().props;
+ const [collapsed, setCollapsed] = useState(false);
+ const [mobileOpen, setMobileOpen] = useState(false);
+ const [notifOpen, setNotifOpen] = useState(false);
+ const currentPath = window.location.pathname;
+
+ useEffect(() => {
+ setMobileOpen(false);
+ }, [currentPath]);
+
+ const isActive = (href) => {
+ if (href === '/') return currentPath === '/';
+ return currentPath.startsWith(href);
+ };
+
+ const topNav = navigation?.filter(n => !['acl', 'admin'].includes(n.key)) ?? [];
+ const adminNav = navigation?.filter(n => ['acl', 'admin'].includes(n.key)) ?? [];
+
+ return (
+
+ {/* ── Sidebar ─────────────────────────────────────────── */}
+
+ {/* Logo */}
+
+
+
+
+ {!collapsed && (
+
+ {app?.name ?? 'Infra Manager'}
+ v{app?.version ?? '1.0.0'}
+
+ )}
+
+
+
+ {!collapsed && (
+
+
{auth?.user?.name}
+
{auth?.user?.roles?.[0]}
+
+ )}
+
+
+
+
+ {/* ── Mobile Sidebar ──────────────────────────────────── */}
+
+ {mobileOpen && (
+ <>
+ setMobileOpen(false)}
+ />
+
+
+
+
+
+
+
{app?.name ?? 'Infra Manager'}
+
+
+
+
+ {/* ── Main content ────────────────────────────────────── */}
+
+ {/* Top Bar */}
+
+
+
+ {title && (
+ {title}
+ )}
+
+
+
+ {/* Notifications */}
+
+
+ {/* App env badge */}
+ {app?.env !== 'production' && (
+
+ {app?.env?.toUpperCase()}
+
+ )}
+
+
+ {/* Flash messages */}
+
+ {(flash?.success || flash?.error || flash?.warning) && (
+
+ {flash?.success || flash?.error || flash?.warning}
+
+ )}
+
+
+ {/* Page Content */}
+
+
+ {children}
+
+
+
+
+
+
+
{row.name}
+
{row.email}
+
+
+ {(row.roles ?? []).map(r => (
+ {r}
+ ))}
+
+ )},
+ { header: 'Status', accessor: 'is_active', render: row => (
+
+ )},
+ { header: 'Last Login', accessor: 'last_login_at', render: row => (
+ {timeAgo(row.last_login_at)}
+ )},
+ { header: '', key: 'actions', render: row => (
+ e.stopPropagation()}>
+
+
+
{row.name}
+
{row.permissions_count ?? 0} permissions
+
+
+
+
Access Control
+
Users, roles, and permissions management
+
+
+
+
+
+
+ u.is_active).length ?? 0} icon={UserCheck} color="green" />
+ u.auth_source === 'ldap').length ?? 0} icon={Shield} color="purple" />
+
+
+
+
+
+ {[{ value: 'users', label: 'Users' }, { value: 'roles', label: 'Roles & Permissions' }].map(t => (
+ {t.label}
+ ))}
+
+
+
+
+ router.visit(`/acl/users/${row.id}/edit`)}
+ emptyMessage="No users found." />
+
+
+
+
+
+
+
+
+
+
+
+
Administration
+
System settings, users, and maintenance
+
+
+
+ {adminSections.map(s => {
+ const Icon = s.icon;
+ return (
+
+
+
+
+
+ );
+ })}
+
+
+ {/* System stats */}
+
+ {[
+ { label: 'Total Users', value: stats?.users ?? 0 },
+ { label: 'Active Sessions', value: stats?.sessions ?? 0 },
+ { label: 'Queue Jobs', value: stats?.queued ?? 0 },
+ { label: 'DB Size', value: stats?.db_size ?? '—' },
+ ].map(s => (
+
+ {s.value}
+ {s.label}
+
+ ))}
+
+
+ {/* Recent activity */}
+
+
+
+ {(recent_activity ?? []).map((log, i) => (
+
+
+ {log.causer?.name?.charAt(0)?.toUpperCase() ?? '?'}
+
+
+
{log.description}
+
{log.causer?.name ?? 'System'} · {timeAgo(log.created_at)}
+
+
+ ))}
+ {(!recent_activity || recent_activity.length === 0) && (
+
No recent activity
+ )}
+
+
+
+
{label}
+ {desc &&
{desc}
}
+
+
{children}
+
+
+
+
LDAP / Active Directory
+
Integrate with your directory service for SSO
+
+
+
+
+
+
+
+
+
+
{label}
+ {desc &&
{desc}
}
+ {error &&
{error}
}
+
+
{children}
+
+
+
General Settings
+
Application-wide configuration
+
+
+
+
+ {/* Background effects */}
+
+
+
+
+ {/* Meteors */}
+ {Array.from({ length: 8 }).map((_, i) => (
+
+ ))}
+
+
+ {/* Logo */}
+
+
+
+
+
Infra Manager
+
Unified Infrastructure Control Plane
+
+ {/* Gradient border glow */}
+
+
+
+
+ Default: admin@infra.local / Admin@123456
+
+
+
+
{row.target_name}
+
{row.target_type}
+
e.stopPropagation()}>
+ {row.status === 'success' && (
+ <>
+
+
+ )},
+ ];
+
+ const policyColumns = [
+ { header: 'Policy', accessor: 'name', render: row => (
+
+
{row.name}
+
{row.target_type} · {row.schedule}
+
+
+
+
Backup & Disaster Recovery
+
Manage backups, schedules, and restore points
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ {/* DR Status */}
+
+ {[
+ { label: 'RTO', value: '< 4h', desc: 'Recovery Time Objective', color: 'text-green-400' },
+ { label: 'RPO', value: '< 1h', desc: 'Recovery Point Objective', color: 'text-cyan-400' },
+ { label: 'Last DR Test', value: 'N/A', desc: 'Last tested', color: 'text-white/40' },
+ ].map(d => (
+
+ {d.label}
+ {d.value}
+ {d.desc}
+
+ ))}
+
+
+
+ Backup Policies
+
+
+
+
+ Backup History
+
+
+
+
{row.provider?.toUpperCase().slice(0, 2)}
+
+
{row.name}
+
{p.label ?? row.provider}
+
+
e.stopPropagation()}>
+
+
+ )},
+ ];
+
+ const resourceColumns = [
+ { header: 'Resource', accessor: 'name', render: row => {
+ const Icon = RESOURCE_ICONS[row.resource_type] ?? Cloud;
+ return (
+
+
+
+
{row.name}
+
{row.resource_id}
+
+
+
+
+
Cloud Management
+
AWS, Alibaba, Tencent, GCP, Azure and more
+
+
+
+
+
+
+ {/* Provider cards */}
+
+ {Object.entries(PROVIDERS).slice(0, 4).map(([key, p]) => {
+ const count = accounts?.filter(a => a.provider === key).length ?? 0;
+ return (
+
+
+
+ {key.toUpperCase().slice(0, 2)}
+
+
+
{key.toUpperCase()}
+
{count} account{count !== 1 ? 's' : ''}
+
+
+ );
+ })}
+
+
+ {/* Accounts */}
+
+ Cloud Accounts
+ router.visit(`/cloud/accounts/${row.id}`)}
+ emptyMessage="No cloud accounts. Add your first account to get started."
+ />
+
+
+ {/* Resources */}
+
+ Cloud Resources
+
+
+
+
+
+
+
+
{row.name}
+
{row.image}
+
+
+ {(row.ports ?? []).slice(0, 3).map((p, i) => (
+
+ {p.PublicPort ? `${p.PublicPort}:${p.PrivatePort}` : p.PrivatePort}
+
+ ))}
+ {(row.ports ?? []).length > 3 && +{row.ports.length - 3}}
+
+ )},
+ { header: '', key: 'actions', render: row => (
+ e.stopPropagation()}>
+ {row.state === 'running' ? (
+ <>
+
+
+
+ ) : (
+
+ )}
+
+
+
+
+
+
+
+
+
+
Containers
+
Manage Docker containers across all endpoints
+
+
+
+
+
+
+
+
+
+
+
+ {/* Endpoint filter tabs */}
+ {endpoints?.length > 0 && (
+
+
+ {endpoints.map(e => (
+
+ ))}
+
+ )}
+
+
+ router.visit(`/containers/${row.id}`)}
+ emptyMessage="No containers found. Add a Docker endpoint to get started."
+ />
+
+
+
Infrastructure Overview
+
Real-time view across all platforms
+
+
+ Live
+
+
+
+ {/* ── Top stats ────────────────────────────────────── */}
+
+
+
+
+
+ 0 ? 'red' : 'green'} />
+ = 80 ? 'green' : stats.security_score >= 60 ? 'yellow' : 'red'} />
+
+
+ {/* ── Charts Row ───────────────────────────────────── */}
+
+ {/* CPU / Memory chart */}
+
+
+
+
Resource Utilization
+
Avg CPU & Memory — last 20 min
+
+
+ CPU
+ Memory
+
+
VM Status
+ Across all hypervisors
+
+
+
+ |
+ |
+ |
+
+
+
+
+
+ {[{ label: 'Running', val: stats.vms_running, color: 'bg-cyan-400' },
+ { label: 'Stopped', val: stats.vms_stopped, color: 'bg-slate-600' }].map(s => (
+
+ ))}
+
+ {endpoints?.slice(0, 6).map(e => (
+
+ ))}
+ {(!endpoints || endpoints.length === 0) && (
+
No Docker endpoints
+ )}
+
+ {cloud_accounts?.map(acc => (
+
+
+ {acc.provider?.toUpperCase().slice(0, 2)}
+
+
+
+ ))}
+ {(!cloud_accounts || cloud_accounts.length === 0) && (
+
No cloud accounts
+ )}
+
+ {recent_alerts?.map(alert => (
+
+
+
+
{alert.title}
+
{alert.target_name} · {timeAgo(alert.created_at)}
+
+
+
+ ))}
+ {(!recent_alerts || recent_alerts.length === 0) && (
+
+
+
All clear — no active alerts
+
+ )}
+
+
+ {children}
+ {error &&
{error}
}
+
+
+
Add Hypervisor
+
Connect a new virtualization platform
+
+
+
+
+
+
+
+
+
+
+
{row.name}
+
{TYPE_LABELS[row.type] ?? row.type}
+
+
e.stopPropagation()}>
+
+
+
+
+
+
+
+
+
+
+
+
Hypervisors
+
Manage vCenter, Proxmox, ESXi, Hyper-V and more
+
+
+
+
+
+
+ {/* Summary Cards */}
+
+ {[
+ { label: 'Total', value: hypervisors.total ?? 0, color: 'text-white' },
+ { label: 'Online', value: hypervisors.data?.filter(h => h.status === 'online').length ?? 0, color: 'text-green-400' },
+ { label: 'Offline', value: hypervisors.data?.filter(h => h.status === 'offline').length ?? 0, color: 'text-red-400' },
+ { label: 'Error', value: hypervisors.data?.filter(h => h.status === 'error').length ?? 0, color: 'text-orange-400' },
+ ].map(s => (
+
+ {s.value}
+ {s.label}
+
+ ))}
+
+
+
+ router.visit(`/hypervisors/${row.id}`)}
+ emptyMessage="No hypervisors configured. Add your first one!"
+ />
+
+
+
{row.title}
+ {row.url &&
{row.url}
}
+
+
+
+
+ )},
+ ];
+
+ const certColumns = [
+ { header: 'Domain', accessor: 'domain', render: row => (
+
+
{row.domain}
+
{row.issuer ?? 'Self-signed'}
+
+
+ {daysLeft > 0 ? `${daysLeft}d left` : 'Expired'}
+
+
{new Date(row.expires_at).toLocaleDateString()}
+
+
+
+
Identity & Secrets
+
Passwords, certificates, SSH keys, and secrets
+
+
+
+
+
+
+
+
+
+
+ {/* Tabs */}
+
+
+ {[
+ { value: 'passwords', label: 'Passwords', icon: Lock },
+ { value: 'certificates', label: 'Certificates', icon: KeyRound },
+ { value: 'ssh-keys', label: 'SSH Keys', icon: Key },
+ ].map(t => {
+ const Icon = t.icon;
+ return (
+
+
+ {t.label}
+
+ );
+ })}
+
+
+
+
+
+
Password Vault
+
+
+
+
+
+
+
+
+
+
SSL/TLS Certificates
+
+
+
+
+
+
SSH Keys
+
+
+
+
+
{r.name}
},
+ { header: 'Algorithm', accessor: 'algorithm', render: r => {r.algorithm?.toUpperCase()} {r.key_size} },
+ { header: 'Fingerprint', accessor: 'fingerprint', render: r => {r.fingerprint} },
+ { header: '', key: 'a', render: r => },
+ ]}
+ data={ssh_keys ?? []}
+ emptyMessage="No SSH keys. Generate or import a key pair."
+ />
+
+
+
+
+
{row.title}
+
{row.target_name}
+
+
+
+
Unified Monitoring
+
Real-time metrics, alerts, and dashboards
+
+
+
+
+ {/* Alert Stats */}
+
+
+
+
+
+
+
+ {/* Charts */}
+
+
+ CPU & Memory
+ Average across all VMs — last 30 min
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Network I/O
+ Mbps across all endpoints
+
+
+
+
+
+
+
+
+
+
+
+
+ {/* Active Alerts Table */}
+
+
+
Active Alerts
+
+
+
+
+
+
{row.target_name}
+
{row.target_type} · {row.scan_type}
+
+ {row.grade}
+ {row.score ?? '—'}
+
+ )},
+ { header: 'Findings', key: 'findings', render: row => (
+
+ {row.critical_count > 0 && {row.critical_count}C}
+ {row.high_count > 0 && {row.high_count}H}
+ {row.medium_count > 0 && {row.medium_count}M}
+ {row.low_count > 0 && {row.low_count}L}
+
+ )},
+ { header: 'Status', accessor: 'status', render: row => },
+ { header: 'Scanned', accessor: 'completed_at', render: row => (
+ {timeAgo(row.completed_at)}
+ )},
+ ];
+
+ return (
+
+
+
+
+
+
Cybersecurity Dashboard
+
Security posture across all infrastructure
+
+
+
+
+ {/* Score + Radar */}
+
+
+ Overall Security Score
+
+
+ Grade {grade}
+
+ Based on {scans?.total ?? 0} scans across infrastructure
+
+
+
+ Security Radar
+ Coverage across security domains
+
+
+
+
+
+
+
+
+
+
+ {/* Stats */}
+
+
+
+
+
+
+
+ {/* Scan results table */}
+
+
+
Recent Scans
+
+
+
+
+
+
+
+
Wiki & Documents
+
Centralized documentation, runbooks, and files
+
+
+
+
+ {/* Search */}
+
+
+ setSearch(e.target.value)}
+ placeholder="Search pages, documents..."
+ className="w-full pl-12 pr-4 py-3 bg-white/5 border border-white/10 rounded-xl text-sm text-white placeholder:text-white/20 focus:outline-none focus:border-cyan-500/50 transition-all"
+ />
+
+
+
+ {/* Spaces */}
+
+
+
Spaces
+
+
+
+
+
+ {/* Recent Pages */}
+
+
+ {search ? `Search: "${search}"` : 'Recent Pages'}
+
+
+
+
+