@muhammedaksam/easiarr 1.4.0 → 1.6.0

package/src/compose/caddy-config.ts

@@ -1,130 +0,0 @@
-/**
- * Caddy Configuration Generator
- * Generates Caddyfile for automatic HTTPS reverse proxy
- */
-
-import { existsSync } from "node:fs"
-import { mkdir, writeFile } from "node:fs/promises"
-import { join } from "node:path"
-
-import type { EasiarrConfig } from "~/config/schema"
-import { getApp } from "~/apps/registry"
-import { debugLog } from "~/utils/debug"
-
-/**
- * Generate Caddyfile content for enabled apps
- */
-export function generateCaddyfile(config: EasiarrConfig): string {
-  const domain = config.caddy?.domain || "localhost"
-  const email = config.caddy?.email
-
-  let caddyfile = `# Caddyfile
-# Generated by easiarr - https://github.com/muhammedaksam/easiarr
-#
-# Caddy provides automatic HTTPS via Let's Encrypt.
-# For local dev, use 'localhost' or ':80' as domain.
-#
-# To manually reload: docker exec caddy caddy reload --config /etc/caddy/Caddyfile
-
-`
-
-  // Global options block (if email is set for ACME)
-  if (email) {
-    caddyfile += `{
-  email ${email}
-}
-
-`
-  }
-
-  // Get enabled apps that should be proxied
-  const proxyApps = config.apps.filter((app) => {
-    if (!app.enabled) return false
-    // Skip caddy itself and apps without ports
-    if (app.id === "caddy" || app.id === "cloudflared") return false
-    const def = getApp(app.id)
-    if (!def || def.defaultPort === 0) return false
-    return true
-  })
-
-  // Generate reverse proxy blocks for each app
-  for (const app of proxyApps) {
-    const def = getApp(app.id)
-    if (!def) continue
-
-    const port = app.port ?? def.defaultPort
-    const subdomain = app.id
-    const internalPort = def.internalPort ?? port
-
-    // Format: subdomain.domain.com
-    const host = domain === "localhost" ? `${subdomain}.localhost` : `${subdomain}.${domain}`
-
-    caddyfile += `# ${def.name}
-${host} {
-  reverse_proxy ${app.id}:${internalPort}
-}
-
-`
-  }
-
-  return caddyfile
-}
-
-/**
- * Save Caddyfile to the config directory
- */
-export async function saveCaddyConfig(config: EasiarrConfig): Promise<string> {
-  // Check if Caddy is enabled
-  const caddyApp = config.apps.find((a) => a.id === "caddy" && a.enabled)
-  if (!caddyApp) {
-    debugLog("Caddy", "Caddy not enabled, skipping config generation")
-    return ""
-  }
-
-  const caddyDir = join(config.rootDir, "config", "caddy")
-  const dataDir = join(caddyDir, "data")
-  const configDir = join(caddyDir, "config")
-
-  debugLog("Caddy", `Generating Caddyfile in ${caddyDir}`)
-
-  try {
-    // Create directories if they don't exist
-    if (!existsSync(caddyDir)) {
-      await mkdir(caddyDir, { recursive: true })
-    }
-    if (!existsSync(dataDir)) {
-      await mkdir(dataDir, { recursive: true })
-    }
-    if (!existsSync(configDir)) {
-      await mkdir(configDir, { recursive: true })
-    }
-
-    // Generate Caddyfile
-    const caddyfileContent = generateCaddyfile(config)
-    const caddyfilePath = join(caddyDir, "Caddyfile")
-
-    // Always overwrite Caddyfile to reflect current app config
-    await writeFile(caddyfilePath, caddyfileContent, "utf-8")
-    debugLog("Caddy", `Saved Caddyfile to ${caddyfilePath}`)
-
-    return caddyfilePath
-  } catch (error) {
-    const err = error as NodeJS.ErrnoException
-    if (err.code === "EACCES") {
-      console.warn(
-        `[WARN] Cannot write Caddy config files (permission denied). ` +
-          `Fix with: sudo chown -R $(id -u):$(id -g) ${caddyDir}`
-      )
-    } else {
-      throw error
-    }
-    return ""
-  }
-}
-
-/**
- * Get the path to the Caddyfile
- */
-export function getCaddyfilePath(config: EasiarrConfig): string {
-  return join(config.rootDir, "config", "caddy", "Caddyfile")
-}

package/src/compose/generator.ts

@@ -1,287 +0,0 @@
-/**
- * Docker Compose Generator
- * Generates docker-compose.yml from easiarr configuration
- */
-
-import { writeFile } from "node:fs/promises"
-
-import type { AppConfig, AppId, EasiarrConfig, TraefikConfig } from "~/config/schema"
-import { getApp } from "~/apps/registry"
-import { getComposePath } from "~/config/manager"
-import { debugLog } from "~/utils/debug"
-import { getLocalIp, updateEnv } from "~/utils/env"
-import { saveCaddyConfig } from "./caddy-config"
-import { generateServiceYaml } from "./templates"
-import { saveTraefikConfig } from "./traefik-config"
-
-export interface ComposeService {
-  image: string
-  container_name: string
-  environment: Record<string, string | number>
-  volumes: string[]
-  ports: string[]
-  restart: string
-  depends_on?: string[]
-  network_mode?: string
-  labels?: string[]
-  devices?: string[]
-  cap_add?: string[]
-  command?: string
-  /** Docker user directive (e.g., "1000:1000") for apps that don't support PUID/PGID */
-  user?: string
-}
-
-export interface ComposeFile {
-  services: Record<string, ComposeService>
-}
-
-export function generateCompose(config: EasiarrConfig): string {
-  debugLog(
-    "ComposeGenerator",
-    `Generating compose for ${config.apps.filter((a) => a.enabled).length} enabled apps`
-  )
-  const services: Record<string, ComposeService> = {}
-
-  // Track ports to move to Gluetun
-  const gluetunPorts: string[] = []
-  // Track routing decisions
-  const routedApps = new Set<string>()
-
-  // 1. Build all services first
-  for (const appConfig of config.apps) {
-    if (!appConfig.enabled) continue
-
-    const appDef = getApp(appConfig.id)
-    if (!appDef) continue
-
-    debugLog("ComposeGenerator", `Building service: ${appConfig.id}`)
-    const service = buildService(appDef, appConfig, config)
-    services[appConfig.id] = service
-  }
-
-  // 2. Apply VPN routing if enabled
-  if (config.vpn && config.vpn.mode !== "none" && services["gluetun"]) {
-    const vpnMode = config.vpn.mode
-
-    for (const [id, service] of Object.entries(services)) {
-      if (id === "gluetun") continue
-
-      const appDef = getApp(id as AppId)
-      if (!appDef) continue
-
-      // Determine if app should be routed
-      let shouldRoute = false
-
-      // Mini: Downloaders only
-      if (vpnMode === "mini" && appDef.category === "downloader") {
-        shouldRoute = true
-      }
-      // Full: Downloaders, Indexers, Requests, MediaServers, Servarr
-      else if (
-        vpnMode === "full" &&
-        ["downloader", "indexer", "request", "mediaserver", "servarr"].includes(appDef.category)
-      ) {
-        shouldRoute = true
-      }
-
-      if (shouldRoute) {
-        // Move ports to Gluetun
-        if (service.ports && service.ports.length > 0) {
-          gluetunPorts.push(...service.ports)
-          service.ports = []
-        }
-
-        // Set network mode
-        service.network_mode = "service:gluetun"
-        routedApps.add(id)
-
-        // Remove depends_on gluetun if it exists (circular check, though service:gluetun implies dependency)
-        // Actually docker-compose handles implied dependency for network_mode: service:xxx
-      }
-    }
-
-    // 3. Add ports to Gluetun
-    if (gluetunPorts.length > 0) {
-      services["gluetun"].ports = [
-        ...new Set([...(services["gluetun"].ports || []), ...gluetunPorts]),
-      ]
-    }
-  }
-
-  return formatComposeYaml({ services })
-}
-
-function buildService(
-  appDef: ReturnType<typeof getApp>,
-  appConfig: AppConfig,
-  config: EasiarrConfig
-): ComposeService {
-  if (!appDef) throw new Error("App definition not found")
-
-  const port = appConfig.port ?? appDef.defaultPort
-  // Use ${ROOT_DIR} for volumes
-  const volumes = [...appDef.volumes("${ROOT_DIR}"), ...(appConfig.customVolumes ?? [])]
-
-  // Add log volume mount if logMount is enabled and app has logVolume defined
-  if (config.logMount && appDef.logVolume) {
-    volumes.push(`\${ROOT_DIR}/logs/${appDef.id}:${appDef.logVolume}`)
-  }
-
-  // Build environment
-  const environment: Record<string, string | number> = {
-    TZ: "${TIMEZONE}",
-  }
-
-  // Add PUID/PGID (Use globals)
-  if (appDef.puid > 0 || appDef.pgid > 0 || ["jellyfin", "tautulli"].includes(appDef.id)) {
-    environment.PUID = "${PUID}"
-    environment.PGID = "${PGID}"
-    environment.UMASK = "${UMASK}"
-  }
-
-  // Add app-specific environment
-  if (appDef.environment) {
-    Object.assign(environment, appDef.environment)
-  }
-
-  // Add custom environment from config
-  if (appConfig.customEnv) {
-    Object.assign(environment, appConfig.customEnv)
-  }
-
-  // Build ports array
-  let ports: string[] = []
-  if (appDef.id !== "plex" && port !== 0 && appDef.defaultPort !== 0) {
-    ports.push(`"${port}:${appDef.internalPort ?? appDef.defaultPort}"`)
-  }
-  // Add secondary ports (e.g., dashboard ports)
-  if (appDef.secondaryPorts) {
-    ports = ports.concat(appDef.secondaryPorts.map((p) => `"${p}"`))
-  }
-
-  const service: ComposeService = {
-    image: appDef.image,
-    container_name: appDef.id,
-    environment,
-    volumes,
-    ports,
-    restart: "unless-stopped",
-  }
-
-  // Add devices/caps
-  if (appDef.devices) service.devices = [...appDef.devices]
-  if (appDef.cap_add) service.cap_add = [...appDef.cap_add]
-
-  // Add command (e.g., cloudflared)
-  if (appDef.command) service.command = appDef.command
-
-  // Use Docker user directive for apps that don't support PUID/PGID (e.g., slskd)
-  if (appDef.useDockerUser) {
-    service.user = "${PUID}:${PGID}"
-    // Remove PUID/PGID env vars since they're not used
-    delete service.environment.PUID
-    delete service.environment.PGID
-    delete service.environment.UMASK
-  }
-
-  // Plex uses network_mode: host
-  if (appDef.id === "plex") {
-    service.network_mode = "host"
-  }
-
-  // Add dependencies
-  if (appDef.dependsOn && appDef.dependsOn.length > 0) {
-    const enabledDeps = appDef.dependsOn.filter((dep) =>
-      config.apps.some((a) => a.id === dep && a.enabled)
-    )
-    if (enabledDeps.length > 0) {
-      service.depends_on = enabledDeps
-    }
-  }
-
-  if (
-    config.traefik?.enabled &&
-    appDef.id !== "plex" &&
-    appDef.id !== "cloudflared" &&
-    appDef.defaultPort !== 0
-  ) {
-    if (appDef.id === "traefik") {
-      // Special labels for Traefik dashboard (accessible via traefik.domain on port 8080)
-      service.labels = generateTraefikLabels("traefik", 8080, config.traefik)
-    } else {
-      service.labels = generateTraefikLabels(
-        appDef.id,
-        appDef.internalPort ?? appDef.defaultPort,
-        config.traefik
-      )
-    }
-  }
-
-  return service
-}
-
-function generateTraefikLabels(
-  serviceName: string,
-  port: number,
-  traefik: TraefikConfig
-): string[] {
-  const labels: string[] = [
-    "traefik.enable=true",
-    // Router
-    `traefik.http.routers.${serviceName}.service=${serviceName}`,
-    `traefik.http.routers.${serviceName}.rule=Host(\`${serviceName}.${traefik.domain}\`)`,
-    `traefik.http.routers.${serviceName}.entrypoints=${traefik.entrypoint}`,
-  ]
-
-  // Add middlewares if configured
-  if (traefik.middlewares.length > 0) {
-    labels.push(`traefik.http.routers.${serviceName}.middlewares=${traefik.middlewares.join(",")}`)
-  }
-
-  // Service/Load balancer
-  labels.push(
-    `traefik.http.services.${serviceName}.loadbalancer.server.scheme=http`,
-    `traefik.http.services.${serviceName}.loadbalancer.server.port=${port}`
-  )
-
-  return labels
-}
-
-function formatComposeYaml(compose: ComposeFile): string {
-  let yaml = "---\nservices:\n"
-
-  for (const [name, service] of Object.entries(compose.services)) {
-    yaml += generateServiceYaml(name, service)
-  }
-
-  return yaml
-}
-
-export async function saveCompose(config: EasiarrConfig): Promise<string> {
-  const yaml = generateCompose(config)
-  const path = getComposePath()
-  await writeFile(path, yaml, "utf-8")
-
-  // Update .env
-  await updateEnvFile(config)
-
-  // Generate Traefik config files if Traefik is enabled
-  await saveTraefikConfig(config)
-
-  // Generate Caddy config files if Caddy is enabled
-  await saveCaddyConfig(config)
-
-  return path
-}
-
-async function updateEnvFile(config: EasiarrConfig) {
-  // Update .env with global configuration values
-  await updateEnv({
-    ROOT_DIR: config.rootDir,
-    TIMEZONE: config.timezone,
-    PUID: config.uid.toString(),
-    PGID: config.gid.toString(),
-    UMASK: config.umask,
-    LOCAL_DOCKER_IP: getLocalIp(),
-  })
-}

package/src/compose/index.ts

@@ -1,7 +0,0 @@
-export { saveCompose } from "./generator"
-export {
-  generateTraefikStaticConfig,
-  generateTraefikDynamicConfig,
-  saveTraefikConfig,
-} from "./traefik-config"
-export { generateCaddyfile, saveCaddyConfig, getCaddyfilePath } from "./caddy-config"

package/src/compose/templates.ts

@@ -1,78 +0,0 @@
-/**
- * Docker Compose YAML Templates
- * Generates properly formatted YAML for services
- */
-
-import type { ComposeService } from "./generator"
-
-export function generateServiceYaml(name: string, service: ComposeService): string {
-  let yaml = `  ${name}:\n`
-  yaml += `    image: ${service.image}\n`
-  yaml += `    container_name: ${service.container_name}\n`
-
-  // Command (for cloudflared etc.)
-  if (service.command) {
-    yaml += `    command: ${service.command}\n`
-  }
-
-  // Network mode (for Plex)
-  if (service.network_mode) {
-    yaml += `    network_mode: ${service.network_mode}\n`
-  }
-
-  // Dependencies
-  if (service.depends_on && service.depends_on.length > 0) {
-    yaml += `    depends_on:\n`
-    for (const dep of service.depends_on) {
-      yaml += `      - ${dep}\n`
-    }
-  }
-
-  // Environment
-  if (Object.keys(service.environment).length > 0) {
-    yaml += `    environment:\n`
-    for (const [key, value] of Object.entries(service.environment)) {
-      yaml += `      - ${key}=${value}\n`
-    }
-  }
-
-  // Volumes
-  if (service.volumes.length > 0) {
-    yaml += `    volumes:\n`
-    for (const volume of service.volumes) {
-      yaml += `      - ${volume}\n`
-    }
-  }
-
-  // Ports (skip for network_mode: host)
-  if (service.ports.length > 0 && !service.network_mode) {
-    yaml += `    ports:\n`
-    for (const port of service.ports) {
-      yaml += `      - ${port}\n`
-    }
-  }
-
-  // Labels (for Traefik etc.)
-  if (service.labels && service.labels.length > 0) {
-    yaml += `    labels:\n`
-    for (const label of service.labels) {
-      yaml += `      - ${label}\n`
-    }
-  }
-
-  // User directive (for apps like slskd that don't support PUID/PGID)
-  if (service.user) {
-    yaml += `    user: ${service.user}\n`
-  }
-
-  yaml += `    restart: ${service.restart}\n\n`
-
-  return yaml
-}
-
-export function generateNetworkYaml(name: string, driver: string): string {
-  return `networks:
-  ${name}:
-    driver: ${driver}
-`
-}

package/src/compose/traefik-config.ts

@@ -1,187 +0,0 @@
-/**
- * Traefik Configuration Generator
- * Generates traefik.yml (static config) and dynamic.yml (middlewares)
- */
-
-import { existsSync } from "node:fs"
-import { mkdir, writeFile } from "node:fs/promises"
-import { join } from "node:path"
-
-import { hashSync } from "bcrypt"
-
-import type { EasiarrConfig } from "~/config/schema"
-import { debugLog } from "~/utils/debug"
-
-export interface TraefikStaticConfig {
-  entrypoints: {
-    web: { address: string }
-  }
-  api: {
-    dashboard: boolean
-    insecure: boolean
-  }
-  providers: {
-    docker: {
-      endpoint: string
-      exposedByDefault: boolean
-    }
-    file: {
-      directory: string
-      watch: boolean
-    }
-  }
-}
-
-/**
- * Generate traefik.yml static configuration
- */
-export function generateTraefikStaticConfig(): string {
-  return `# Traefik Static Configuration
-# Generated by easiarr
-
-api:
-  dashboard: true
-  insecure: true
-
-entryPoints:
-  web:
-    address: ":80"
-
-providers:
-  docker:
-    endpoint: "unix:///var/run/docker.sock"
-    exposedByDefault: false
-  file:
-    directory: "/etc/traefik"
-    watch: true
-`
-}
-
-/**
- * Generate dynamic.yml with security headers middleware
- */
-export function generateTraefikDynamicConfig(
-  _middlewares: string[],
-  basicAuth?: { username: string; passwordHash: string }
-): string {
-  let yaml = `# Traefik Dynamic Configuration
-# Generated by easiarr
-
-http:
-  middlewares:
-`
-
-  // Always include security-headers
-  yaml += `    security-headers:
-      headers:
-        browserXssFilter: true
-        contentTypeNosniff: true
-        forceSTSHeader: true
-        stsIncludeSubdomains: true
-        stsPreload: true
-        stsSeconds: 31536000
-        customFrameOptionsValue: "SAMEORIGIN"
-`
-
-  // Add basic-auth middleware if credentials provided
-  if (basicAuth?.username && basicAuth?.passwordHash) {
-    // Escape $ in password hash for YAML
-    const escapedHash = basicAuth.passwordHash.replace(/\$/g, "$$$$")
-    yaml += `
-    basic-auth:
-      basicAuth:
-        users:
-          - "${basicAuth.username}:${escapedHash}"
-`
-  }
-
-  return yaml
-}
-
-/**
- * Generate htpasswd-compatible hash for basic auth
- * Uses bcrypt for secure password hashing (Traefik supports bcrypt format)
- * Format: $2b$... (bcrypt hash compatible with htpasswd)
- */
-function generateHtpasswdHash(password: string): string {
-  // Use bcrypt with cost factor 10 (standard security level)
-  const hash = hashSync(password, 10)
-  // Traefik expects bcrypt hashes with $2y$ prefix (PHP-compatible)
-  // Node's bcrypt uses $2b$, which Traefik also accepts
-  return hash
-}
-
-/**
- * Save Traefik configuration files to the config directory
- */
-export async function saveTraefikConfig(config: EasiarrConfig): Promise<void> {
-  // Check if traefik is enabled
-  const traefikApp = config.apps.find((a) => a.id === "traefik" && a.enabled)
-  if (!traefikApp) {
-    debugLog("Traefik", "Traefik not enabled, skipping config generation")
-    return
-  }
-
-  const traefikConfigDir = join(config.rootDir, "config", "traefik")
-  const letsencryptDir = join(traefikConfigDir, "letsencrypt")
-  debugLog("Traefik", `Generating config in ${traefikConfigDir}`)
-
-  try {
-    // Create directories if they don't exist
-    if (!existsSync(traefikConfigDir)) {
-      await mkdir(traefikConfigDir, { recursive: true })
-      debugLog("Traefik", `Created directory: ${traefikConfigDir}`)
-    }
-    if (!existsSync(letsencryptDir)) {
-      await mkdir(letsencryptDir, { recursive: true })
-      debugLog("Traefik", `Created directory: ${letsencryptDir}`)
-    }
-
-    // Generate and save static config (traefik.yml)
-    const staticConfig = generateTraefikStaticConfig()
-    const staticPath = join(traefikConfigDir, "traefik.yml")
-
-    // Only write if file doesn't exist (don't overwrite user customizations)
-    if (!existsSync(staticPath)) {
-      await writeFile(staticPath, staticConfig, "utf-8")
-    }
-
-    // Check for basic auth credentials from config
-    let basicAuth: { username: string; passwordHash: string } | undefined
-    if (config.traefik?.basicAuth?.enabled) {
-      const username = config.traefik.basicAuth.username
-      const password = config.traefik.basicAuth.password
-      if (username && password) {
-        basicAuth = {
-          username,
-          passwordHash: generateHtpasswdHash(password),
-        }
-      }
-    }
-
-    // Generate and save dynamic config (dynamic.yml)
-    const dynamicConfig = generateTraefikDynamicConfig(config.traefik?.middlewares ?? [], basicAuth)
-    const dynamicPath = join(traefikConfigDir, "dynamic.yml")
-
-    // Always regenerate dynamic.yml as it contains auth settings
-    await writeFile(dynamicPath, dynamicConfig, "utf-8")
-
-    // Create acme.json with correct permissions if it doesn't exist
-    const acmePath = join(letsencryptDir, "acme.json")
-    if (!existsSync(acmePath)) {
-      await writeFile(acmePath, "{}", { mode: 0o600 })
-    }
-  } catch (error) {
-    // Permission denied - directory owned by root from Docker
-    // User needs to manually create configs or fix permissions
-    const err = error as NodeJS.ErrnoException
-    if (err.code === "EACCES") {
-      console.warn(
-        `[WARN] Cannot write Traefik config files (permission denied). ` +
-          `Fix with: sudo chown -R $(id -u):$(id -g) ${traefikConfigDir}`
-      )
-    } else {
-      throw error
-    }
-  }
-}