e8c414aa12
fix: ch migrate
2026-08-09 08:47:56 +08:00
7e8aa5fa0f
Merge branch 'codex/log-database-decoupling'
...
# Conflicts:
# docs/changelog/index.md
# frontend/app/(main)/error-pages/page.tsx
# internal/infra/persistence/migrator/migrator_test.go
2026-08-09 08:37:37 +08:00
c4be34b214
fix(frontend): fallback empty offline page html to default template in preview
2026-08-08 21:52:02 +08:00
fda727cf53
docs: rename contact page references to offline page in changelog
...
refactor(frontend): rename contact page to offline page and update routes/components
feat(frontend): add preset templates suite for offline contact page
2026-08-08 21:36:58 +08:00
f083da20f2
feat(frontend): add dedicated edit and preview routes for response pages and sync tab state to url
2026-08-08 21:18:53 +08:00
b675038bba
refactor(frontend): unify error pages into responses page and remove error-pages route
2026-08-08 20:43:58 +08:00
ca21ff3a5b
feat(option): add sw offline
...
fix(openresty): scope sw injection per cert partition
fix(lint): satisfy revive and biome format for sw offline feature
docs: sw offline scope changelog
fix(frontend): use scoped query key for sw scope zones
fix(frontend): hide preview link in sw contact page editor
feat(frontend): add sw scope domain picker and contact page fields
refactor(frontend): generalize html editor workspace for reuse
feat(openresty): scope sw offline injection by route domains
feat(openresty): add sw offline domains snapshot field
feat(option): add sw offline domains scope option
docs: fill html editor workspace generalization detail
docs: sw offline scope implementation plan
docs: sw offline scope design
test(openresty): assert single merged access block in sw enabled servers
fix(openresty): restrict sw intercept to https server blocks
fix(openresty): version sw offline cache by html content
fix(agent): escape redir in sw challenge page to prevent xss
fix(agent): return sw.runtime module table and add lua spec
docs: sw offline fallback changelog
fix(frontend): memoize option map to preserve unsaved contact page edits
feat(frontend): add response pages module with contact page tab
feat(agent): ship sw offline lua assets and placeholder substitution
feat(config): wire sw offline options into config snapshot
feat(openresty): render sw offline assets and challenge intercept
feat(openresty): add sw offline ConfigSnapshot fields and placeholder
feat(db): seed sw offline options
feat(option): add sw offline config keys and validation
docs: add service worker offline fallback implementation plan
docs: adopt global-option pattern for SW offline fallback (matches origin error page)
docs: unify offline contact page with error pages as response pages
docs: service worker offline fallback design (issue #23 )
2026-08-08 20:14:28 +08:00
7d71f1e4e1
feat(log): decouple log storage from ClickHouse with switchable logstore
...
- New internal/repository/logstore abstraction: exported domain interfaces
(AccessLogStore/ObservabilityStore/UserAccessLogStore/StatusStore),
config-driven provider (Active/Build/Migrating/SetConfigReader), GORM
implementation for PostgreSQL/SQLite (incl. hourly rollups computed in
real time, migration listers, PG partition maintenance), and a ClickHouse
wrapper preserving the native batch path; repository facade delegates to
logstore; import-lint test enforces apps never import analyticsrepo.
- ClickHouse is now optional: the log DB is either the main DB (postgres
when database.enabled, else sqlite) or clickhouse; boot validation +
first-run seed; log_database / log_db_migration are protected keys.
- New user task 切换日志数据库 (of_log_db_switch): freeze log writes,
drain batch writers, copy all 6 raw log tables by id (preserving IDs)
with target-partition pre-creation for PG, flip log_database on success,
clear the freeze flag on failure.
- Per-store retention (log_retention_days_*) with expiry cleanup folded
into the daily system_cleanup task; legacy database_auto_cleanup_* and
of_database_auto_cleanup decommissioned.
- goose migrations: 6 log tables in PG (2 monthly-partitioned) + SQLite,
retention config seeds, schedule cleanup; GET
/api/v1/admin/status/log-database endpoint; frontend retention settings,
switch-task UI and status badge; changelog and docs updated.
docs(plan): log database decoupling implementation plan
docs(design): log database decoupling design (ClickHouse optional)
2026-08-08 19:43:01 +08:00
d17d8457f3
chore: upgrade dependence
2026-08-06 17:41:06 +08:00
ba1c9222c2
refactor(error-pages): preset templates with OpenFlare branding
2026-08-06 15:25:39 +08:00
42f7f47716
feat(frontend): add origin error page settings under websites
2026-08-06 14:05:21 +08:00
4eced2b721
feat(cloudflare): add DNS pointing integration
2026-08-04 13:30:40 +08:00
3edcdb9e9f
feat(cloudflare): add DNS pointing integration
...
Implement Cloudflare connection management, pointing groups and members, asynchronous A-record reconciliation, node IP triggers, admin APIs, management pages, migrations, tests, and documentation.
2026-08-04 12:32:37 +08:00
23a5488203
refactor(http): remove dead internal/util HTTP client wrapper
...
Drop internal/util (unused httppool wrapper and dead StringArray) and
rely on pkg/httppool plus oauth context injection for HTTP clients.
2026-07-24 15:49:52 +08:00
33a1c32cf8
refactor(structure): group platform, infra, and shared packages
...
Reorganize internal packages into platform/infra/shared layers and update
imports, docs, and seed-count tests to match current system configs.
2026-07-24 15:41:59 +08:00
5b1e27d0a3
feat(frontend): biome
2026-07-22 22:25:30 +08:00
d58b4b6b0e
feat(waf): 自动 IP 组 lookback 支持 60m/1h 时长写法
...
将 lookback_minutes 替换为 lookback，移除最小 5 分钟回看限制，并兼容旧字段。
2026-07-20 15:48:16 +08:00
80c47f6ff3
feat(rate-limit): 站点级请求频率限制支持继承与自定义
...
在站点详情流量限制中配置 limit_req_per_ip；渲染按 effective rate 生成多 limit_req_zone，并以站点+IP 隔离计数。
2026-07-20 15:02:38 +08:00
abe8fb8268
refactor(pages): 精简部署源模型并重构详情页交互
...
将 Remote 网络策略收敛为 allow_insecure，去掉脱敏与无用字段；
Pages 详情拆为部署/设置 Tab，统一卡片样式与来源信息展示。
2026-07-19 20:23:31 +08:00
c92f986978
merge: 合并 PR #22 Pages 部署源 V2 到 feat/pages-source-sync-v2
...
基于最新 main 合并 deqiying/feat/pages-source-sync-v2，
解决 docs/changelog/index.md 与限流相关条目的冲突。
2026-07-19 19:36:48 +08:00
b56290d79d
feat(rate-limits): use 5m trend buckets and 24h/7d ranges
...
Overview API accepts bucket_minutes (5|60); rate-limit analysis uses
5-minute buckets and drops 15d/30d presets. Widen rank value column.
2026-07-19 19:18:15 +08:00
67b051c2bc
feat(frontend): 支持 Pages 自动更新交互
...
在 GitHub latest 来源中提供自动更新开关、检查间隔和运行状态。\n页面按来源到期时间低频刷新，并在自动发布或人工回滚后同步项目与部署历史。
2026-07-19 19:09:57 +08:00
c39a3edcc3
feat(pages): 支持 GitHub Release 部署源
...
增加 latest/tag 手动检查与同步、ETag 与限流退避、资源替换确认，以及对应的前端来源管理和部署来源展示。
2026-07-19 18:31:42 +08:00
39cba821d5
feat(frontend): add security rate-limits page and inherit UI
2026-07-19 18:17:16 +08:00
38b0516937
feat(pages): 支持 Remote 部署源同步
...
新增部署源配置与运行态模型、安全下载、租约续期、原子激活和失败补偿。
接入内部任务与脱敏前端交互，并阻止数据库 Trace 和日志展开敏感查询参数。
2026-07-19 17:36:51 +08:00
b75f985815
feat(waf): 新增安全防护节点 security_check
...
基础特征检测九项可开关；默认开启路径穿越与文件包含；命中任意规则走 false。
2026-07-19 12:33:13 +08:00
d47ceb9971
feat(waf): UA 非正常不含爬虫，并支持自定义正则屏蔽
...
block_abnormal_ua 仅 Other/Unknown；新增 block_custom_ua 与 custom_ua_patterns。
2026-07-19 11:43:45 +08:00
28eef0bbcd
feat(waf): 新增 UA 检查节点 ua_check
...
支持要求携带 UA、浏览器/OS 白名单 and-or 匹配，以及优先屏蔽爬虫与非正常 UA。
2026-07-19 11:35:31 +08:00
b5e27fabde
feat(waf): 规则编辑器节点自定义命名与拖放添加
...
对齐后端 label 字段；属性栏可编辑显示名称；节点库改为拖到画布落点创建。
2026-07-19 11:01:24 +08:00
920a530aa7
feat(access-logs): 新增 IP 明细 Tab 并完善日志详情字段
...
按时间窗聚合 IP 请求数/2xx 比例/入出站流量，支持排序与详情分析；
日志明细详情仅展示请求业务字段，IP 情报迁至独立详情弹窗。
2026-07-19 00:42:59 +08:00
bfd9de69af
fix(access-logs): 修复概览域名筛选参数 hosts[] 被 Gin 忽略
...
Axios 默认序列化为 hosts[]=，Gin QueryArray("hosts") 读不到导致筛选失效；
后端兼容 hosts/hosts[]，前端改为重复键序列化。
2026-07-19 00:28:37 +08:00
0bb6830047
feat(access-logs): 概览支持 Zone/域名多选筛选
...
概览可按 Zone→Domain 层级多选域名并折叠展开；明细列表 IP 旁展示地区。
后端 overview 支持 hosts 多域名精确匹配。
2026-07-18 23:07:19 +08:00
fb5a4e5b59
feat(access-logs): 上报并展示边缘缓存状态 cache_status
...
OpenResty 日志输出 $upstream_cache_status；Agent/协议/ClickHouse 贯通入库。
明细列表与详情按 HIT/MISS 等推导命中、回源、未缓存三态标签。
2026-07-18 22:50:46 +08:00
9aec984bee
feat(access-logs): 明细详情支持 IP 分析与 URL Tab 记忆
...
- 新增单 IP 分析接口，趋势时间范围支持至 30 天
- 明细详情弹窗展示趋势、汇总与 Top 分布，可快捷管理 IP 组
- 访问日志页签改为 URL 参数记忆，筛选后保持当前 Tab
2026-07-18 22:40:21 +08:00
e49078ac3b
feat(access-logs): 接入 User-Agent 与设备/浏览器/状态码分布
...
- Agent 访问日志上报 user_agent，OpenResty log_format 输出 http_user_agent
- of_node_access_logs 新增 user_agent 列并写入 ClickHouse
- 访问日志概览新增：设备类型饼图、状态码饼图、浏览器/OS/User-Agent 排行
- 日志明细列表增加 User-Agent 列
- 扩展 UA 解析工具（browser/os/device）并支持 CLI 识别
2026-07-18 21:18:59 +08:00
177578ef4e
feat(access-logs): 重构访问日志为概览与明细双 Tab
...
新增访问日志概览 API 与前端页面：汇总请求量/访问量/带宽趋势与 Top 排行，
明细列表保留检索；排行榜改为紧凑列表样式。
2026-07-18 20:58:32 +08:00
26057514a1
feat(obs): 去掉宿主机网卡趋势，磁盘读写改按速率展示
...
Agent 不再采集网卡累计字节，看板与节点网络图仅保留访问日志已提供/接收。
磁盘 IO 按小时换算为 B/s 曲线，摘要为近 24 小时平均速率，并同步 Swagger。
2026-07-18 13:17:13 +08:00
802d516f5b
docs: 观测重构 changelog 与 Swagger 同步
...
补充 unreleased 变更说明，并重新生成 Swagger 以匹配去兼容层后的 API。
2026-07-18 11:53:11 +08:00
71ce028f91
feat(frontend): 观测网络字节字段与 UV 文案对齐
...
网络图仅使用 bytes_provided/received；看板与节点 UV 改为 24h/查询窗口
独立访客；清理 traffic_reports 与 openresty 吞吐兼容字段；运维清理目标
改为 node_edge_health。
2026-07-18 11:53:11 +08:00
285f127d48
feat(proxy-routes): align create form with upstream type selection
...
Let new proxy rules choose direct, tunnel, or Pages origin the same way as the detail reverse-proxy section, instead of only accepting a single upstream URL.
2026-07-17 18:20:35 +08:00
79820b33eb
feat(pages): import deployment packages from URL
...
Add upload-from-url so admins can paste an HTTP(S) link and let the control
plane download the archive with browser-like headers. Private/LAN hosts and
insecure TLS certificates are allowed for internal artifact stores; package
size and format checks reuse the existing local-upload pipeline.
2026-07-17 17:55:12 +08:00
26be762c3a
prettier
2026-07-13 15:44:03 +08:00
9dc3983e0f
fix(frontend): WAF 规则编辑器缩小编排区高度和首次适配缩放比例，默认显示更多画布上下文
2026-07-13 15:39:48 +08:00
1eff7878a1
prettier
2026-07-13 15:10:28 +08:00
a1a997bcda
feat(waf): complete composable rule orchestration
...
Add the React Flow rule editor, ordered graph APIs and runtime DAG execution.\n\nPublish rules only on OpenResty reload and reconcile checksum-driven IP group snapshots in bounded shared memory.
2026-07-13 14:17:15 +08:00
4000366856
feat(frontend): create orchestrated waf rules
2026-07-13 12:00:24 +08:00
439ac41da8
fix(frontend): correct Pages deployment files route
...
Align the Pages deployment file-list request with the backend route and add a regression test.
2026-07-13 09:29:22 +08:00
31b4886a14
feat(zone): add Cloudflare-style traffic overview charts
...
Expose Zone stats API with multi-host access-log aggregates and time
series, and render unique visitors, requests and data served on the
Zone overview with 24h/7d/30d range controls.
2026-07-12 16:38:35 +08:00
d615d85a26
refactor: remove unused remarks and add quick domain create
...
Drop remark fields from Zone, Zone domains, proxy routes, WAF rule
groups and IP groups across models, APIs, UI and DB columns (keep
certificate/origin remarks). Add quick-create domain input for short
labels, @ apex and full FQDNs when binding domains.
2026-07-12 16:16:56 +08:00
5b52acdd6c
refactor(zone): remove legacy route domain storage
...
第二阶段清理：删除 of_managed_domains 与 of_proxy_routes 冗余域名/证书列，
移除 ManagedDomain 模型与 API、路由侧 legacy 字段维护，以及前端 WebsiteService。
ImportLegacy 在旧列/旧表缺失时跳过对应源，保持幂等。
2026-07-12 15:31:01 +08:00
ryan