mix/selfpost
1
0
Fork 0
Code Issues Pull Requests Actions 3 Packages Projects Releases Wiki Activity

Phase 2: SQLite persistence, admin setup-link, login/sessions

Browse Source 
Implements the secure single-admin panel entry (spec 7.6).

- internal/store: modernc.org/sqlite (pure Go, static build), WAL +
  foreign keys, embedded PRAGMA user_version migrations; schema 0001
  covers admin/settings/domains/applications/send_log/rate_limits (spec 9).
- Setup secret-link (spec 7.6.1): 128-bit crypto/rand token, printed to
  log + /data/setup-token (0600), 10-min TTL with regeneration, per-IP
  rate limit, subtle.ConstantTimeCompare, failures don't invalidate,
  one-time admin form, permanent invalidation once admin exists (/setup 404).
- bcrypt admin password; server-side username/password validation.
- Login + in-memory sessions, crypto-random token, cookie
  HttpOnly/Secure/SameSite (Secure toggleable for dev HTTP), login
  rate limit, auth middleware.
- html/template base layout + setup/login/dashboard, vendored htmx 2.0.4.
- build/entrypoint.sh: fix bind-mounted /data ownership as root before
  supervisord drops to the unprivileged panel user (found via container test).

Verified on selfpost.example.com: go vet/build/test/gofmt clean; e2e curl
of setup+login flows; docker build + run with -v ./data:/data creates the
DB and 0600 token owned by panel.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
This commit is contained in:
Микс
2026-07-11 21:24:09 +03:00
parent 85f3374ce1
commit d72a383904
25 changed files with 1248 additions and 50 deletions
Download Patch File Download Diff File Expand all files Collapse all files
cmd/panel/httpserver.go
+26 -39
View File
@@ -6,19 +6,35 @@ import (
"log"
"net/http"
"time"
"codeberg.org/mix/selfpost/internal/store"
"codeberg.org/mix/selfpost/internal/web"
)
// serveHTTP runs the panel's HTTP server until ctx is cancelled. Phase 1 serves
// only a placeholder page and a health check; the login flow and real UI arrive
// in Phase 2.
func serveHTTP(ctx context.Context, addr string) error {
mux := http.NewServeMux()
mux.HandleFunc("/healthz", handleHealth)
mux.HandleFunc("/", handleIndex)
// serveHTTP opens the panel database and runs the control-panel HTTP server
// until ctx is cancelled. From Phase 2 this serves the real setup, login and
// authenticated panel surface (spec 7.6).
func serveHTTP(ctx context.Context, cfg config) error {
st, err := store.Open(cfg.dbPath)
if err != nil {
return err
}
defer st.Close()
srvApp, err := web.New(st, web.Config{
Hostname: cfg.hostname,
CookieSecure: cfg.cookieSecure,
}, cfg.setupTokenPath)
if err != nil {
return err
}
if err := srvApp.Start(); err != nil {
return err
}
srv := &http.Server{
Addr: addr,
Handler: mux,
Addr: cfg.httpAddr,
Handler: srvApp.Handler(),
ReadHeaderTimeout: 10 * time.Second,
}
@@ -30,38 +46,9 @@ func serveHTTP(ctx context.Context, addr string) error {
_ = srv.Shutdown(shutdownCtx)
}()
log.Printf("http panel listening on %s", addr)
log.Printf("http panel listening on %s", cfg.httpAddr)
if err := srv.ListenAndServe(); err != nil && !errors.Is(err, http.ErrServerClosed) {
return err
}
return nil
}
func handleHealth(w http.ResponseWriter, _ *http.Request) {
w.Header().Set("Content-Type", "text/plain; charset=utf-8")
w.WriteHeader(http.StatusOK)
_, _ = w.Write([]byte("ok\n"))
}
func handleIndex(w http.ResponseWriter, r *http.Request) {
if r.URL.Path != "/" {
http.NotFound(w, r)
return
}
w.Header().Set("Content-Type", "text/html; charset=utf-8")
_, _ = w.Write([]byte(indexHTML))
}
const indexHTML = `<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<title>SelfPost</title>
</head>
<body>
<h1>SelfPost</h1>
<p>The control panel is starting up. Administrator setup and login arrive in a later build.</p>
</body>
</html>
`