#591 - firewall

app/Actions/FirewallRule/ManageRule.php

@@ -8,6 +8,7 @@
 use App\Models\Service;
 use App\SSH\Services\Firewall\Firewall;
 use Exception;
+use Illuminate\Support\Facades\Validator;
 
 class ManageRule
 {
@@ -17,6 +18,8 @@ class ManageRule
      */
     public function create(Server $server, array $input): FirewallRule
     {
+        Validator::make($input, self::rules($input))->validate();
+
         $sourceAny = $input['source_any'] ?? empty($input['source'] ?? null);
         $rule = new FirewallRule([
             'name' => $input['name'],
@@ -42,6 +45,8 @@ public function create(Server $server, array $input): FirewallRule
      */
     public function update(FirewallRule $rule, array $input): FirewallRule
     {
+        Validator::make($input, self::rules($input))->validate();
+
         $sourceAny = $input['source_any'] ?? empty($input['source'] ?? null);
         $rule->update([
             'name' => $input['name'],
@@ -93,11 +98,12 @@ protected function applyRule(FirewallRule $rule): void
     }
 
     /**
+     * @param  array<string, mixed>  $input
      * @return array<string, array<string>>
      */
-    public static function rules(): array
+    public static function rules(array $input): array
     {
-        return [
+        $rules = [
             'name' => [
                 'required',
                 'string',
@@ -117,16 +123,13 @@ public static function rules(): array
                 'min:1',
                 'max:65535',
             ],
-            'source' => [
-                'nullable',
-                'ip',
-            ],
-            'mask' => [
-                'nullable',
-                'numeric',
-                'min:1',
-                'max:32',
-            ],
         ];
+
+        if (! ($input['source_any'] ?? false)) {
+            $rules['source'] = ['required', 'ip'];
+            $rules['mask'] = ['required', 'numeric', 'min:1', 'max:32'];
+        }
+
+        return $rules;
     }
 }

app/Http/Controllers/API/FirewallRuleController.php

@@ -54,8 +54,6 @@ public function create(Request $request, Project $project, Server $server): Fire
 
         $this->validateRoute($project, $server);
 
-        $this->validate($request, ManageRule::rules());
-
         $firewallRule = app(ManageRule::class)->create($server, $request->all());
 
         return new FirewallRuleResource($firewallRule);
@@ -76,8 +74,6 @@ public function edit(Request $request, Project $project, Server $server, Firewal
 
         $this->validateRoute($project, $server);
 
-        $this->validate($request, ManageRule::rules());
-
         $firewallRule = app(ManageRule::class)->update($firewallRule, $request->all());
 
         return new FirewallRuleResource($firewallRule);

app/Http/Controllers/FirewallController.php

@@ -0,0 +1,66 @@
+<?php
+
+namespace App\Http\Controllers;
+
+use App\Actions\FirewallRule\ManageRule;
+use App\Http\Resources\FirewallRuleResource;
+use App\Models\FirewallRule;
+use App\Models\Server;
+use Illuminate\Http\RedirectResponse;
+use Illuminate\Http\Request;
+use Inertia\Inertia;
+use Inertia\Response;
+use Spatie\RouteAttributes\Attributes\Delete;
+use Spatie\RouteAttributes\Attributes\Get;
+use Spatie\RouteAttributes\Attributes\Middleware;
+use Spatie\RouteAttributes\Attributes\Post;
+use Spatie\RouteAttributes\Attributes\Prefix;
+use Spatie\RouteAttributes\Attributes\Put;
+
+#[Prefix('servers/{server}/firewall')]
+#[Middleware(['auth', 'has-project'])]
+class FirewallController extends Controller
+{
+    #[Get('/', name: 'firewall')]
+    public function index(Server $server): Response
+    {
+        $this->authorize('viewAny', [FirewallRule::class, $server]);
+
+        return Inertia::render('firewall/index', [
+            'rules' => FirewallRuleResource::collection($server->firewallRules()->latest()->simplePaginate(config('web.pagination_size'))),
+        ]);
+    }
+
+    #[Post('/', name: 'firewall.store')]
+    public function store(Request $request, Server $server): RedirectResponse
+    {
+        $this->authorize('create', [FirewallRule::class, $server]);
+
+        app(ManageRule::class)->create($server, $request->all());
+
+        return back()
+            ->with('info', 'Firewall rule is being created.');
+    }
+
+    #[Put('/{firewallRule}', name: 'firewall.update')]
+    public function update(Request $request, Server $server, FirewallRule $firewallRule): RedirectResponse
+    {
+        $this->authorize('update', $firewallRule);
+
+        app(ManageRule::class)->update($firewallRule, $request->all());
+
+        return back()
+            ->with('info', 'Firewall rule is being updated.');
+    }
+
+    #[Delete('/{firewallRule}', name: 'firewall.destroy')]
+    public function destroy(Server $server, FirewallRule $firewallRule): RedirectResponse
+    {
+        $this->authorize('delete', $firewallRule);
+
+        app(ManageRule::class)->delete($firewallRule);
+
+        return back()
+            ->with('info', 'Firewall rule is being deleted.');
+    }
+}

app/Http/Controllers/ServerController.php

@@ -18,6 +18,7 @@
 use Spatie\RouteAttributes\Attributes\Delete;
 use Spatie\RouteAttributes\Attributes\Get;
 use Spatie\RouteAttributes\Attributes\Middleware;
+use Spatie\RouteAttributes\Attributes\Patch;
 use Spatie\RouteAttributes\Attributes\Post;
 use Spatie\RouteAttributes\Attributes\Prefix;
 
@@ -104,6 +105,21 @@ public function switch(Server $server): RedirectResponse
         return redirect()->route('servers.show', ['server' => $server->id]);
     }
 
+    #[Patch('/{server}/status', name: 'servers.status')]
+    public function status(Server $server): RedirectResponse
+    {
+        $this->authorize('view', $server);
+
+        $server->checkConnection();
+
+        $server->refresh();
+
+        return back()
+            ->with($server->getStatusColor(), __('Server status is :status', [
+                'status' => $server->status,
+            ]));
+    }
+
     #[Delete('/{server}', name: 'servers.destroy')]
     public function destroy(Server $server, Request $request): RedirectResponse
     {

app/Http/Middleware/HandleInertiaRequests.php

@@ -93,8 +93,10 @@ public function share(Request $request): array
             'flash' => [
                 'success' => fn () => $request->session()->get('success'),
                 'error' => fn () => $request->session()->get('error'),
+                'danger' => fn () => $request->session()->get('danger'),
                 'warning' => fn () => $request->session()->get('warning'),
                 'info' => fn () => $request->session()->get('info'),
+                'gray' => fn () => $request->session()->get('gray'),
                 'data' => fn () => $request->session()->get('data'),
             ],
         ];

app/Http/Resources/FirewallRuleResource.php

@@ -25,6 +25,7 @@ public function toArray(Request $request): array
             'mask' => $this->mask,
             'note' => $this->note,
             'status' => $this->status,
+            'status_color' => FirewallRule::$statusColors[$this->status] ?? 'gray',
             'created_at' => $this->created_at,
             'updated_at' => $this->updated_at,
         ];

app/Models/FirewallRule.php

@@ -3,6 +3,7 @@
 namespace App\Models;
 
 use App\Enums\FirewallRuleStatus;
+use Database\Factories\FirewallRuleFactory;
 use Illuminate\Database\Eloquent\Factories\HasFactory;
 use Illuminate\Database\Eloquent\Relations\BelongsTo;
 
@@ -20,7 +21,7 @@
  */
 class FirewallRule extends AbstractModel
 {
-    /** @use HasFactory<\Database\Factories\FirewallRuleFactory> */
+    /** @use HasFactory<FirewallRuleFactory> */
     use HasFactory;
 
     protected $fillable = [
@@ -40,17 +41,16 @@ class FirewallRule extends AbstractModel
         'port' => 'integer',
     ];
 
-    public function getStatusColor(): string
-    {
-        return match ($this->status) {
-            FirewallRuleStatus::CREATING,
-            FirewallRuleStatus::UPDATING,
-            FirewallRuleStatus::DELETING => 'warning',
-            FirewallRuleStatus::READY => 'success',
-            FirewallRuleStatus::FAILED => 'danger',
-            default => 'secondary',
-        };
-    }
+    /**
+     * @var array<string, string>
+     */
+    public static array $statusColors = [
+        FirewallRuleStatus::CREATING => 'info',
+        FirewallRuleStatus::UPDATING => 'warning',
+        FirewallRuleStatus::DELETING => 'danger',
+        FirewallRuleStatus::READY => 'success',
+        FirewallRuleStatus::FAILED => 'danger',
+    ];
 
     /**
      * @return BelongsTo<Server, covariant $this>