ysk-server-core 1.0.0

package/dist/hosting/mysql-provision.js

@@ -0,0 +1,91 @@
+import { tl } from 'ysk-server-shared';
+import { renderMysqlProvisionSql, validateMysqlIdent } from './db-client.js';
+import { binPresent } from './software-probe/index.js';
+/**
+ * Provision database + user.
+ * - Without YSK_EXECUTE or without mysql client: ok=false, executed=false, returns SQL to copy.
+ * - With EXECUTE + mysql client: runs SQL via `mysql -e`.
+ */
+export async function provisionMysqlDatabase(input) {
+    validateMysqlIdent(input.dbName, 'dbName');
+    validateMysqlIdent(input.username, 'username');
+    if (!input.password || input.password.length < 8) {
+        return {
+            ok: false,
+            executed: false,
+            requiresExecute: true,
+            requiresRoot: false,
+            mysqlClient: false,
+            sql: [],
+            connectionHint: {},
+            notes: [tl('notes.auto.n1418')],
+            commandResults: []
+        };
+    }
+    const { sql, connectionHint } = renderMysqlProvisionSql({
+        dbName: input.dbName,
+        username: input.username,
+        password: input.password,
+        host: input.host ?? 'localhost'
+    });
+    const mysqlClient = await binPresent(input.hostExec, 'mysql');
+    const wantsExecute = input.execute === true;
+    const canExecute = wantsExecute && input.hostExec.executeEnabled() && mysqlClient;
+    const notes = [];
+    if (!mysqlClient)
+        notes.push(tl('notes.auto.n0521'));
+    if (!input.hostExec.executeEnabled())
+        notes.push(tl('notes.db.needExecuteCreate'));
+    if (!wantsExecute) {
+        return {
+            ok: true,
+            dryRun: true,
+            executed: false,
+            requiresExecute: !input.hostExec.executeEnabled(),
+            requiresRoot: false,
+            mysqlClient,
+            sql,
+            connectionHint,
+            notes: [
+                ...notes,
+                tl('notes.db.dryRunMysql'),
+            ],
+            commandResults: []
+        };
+    }
+    if (!canExecute) {
+        return {
+            ok: false,
+            executed: false,
+            blocked: !input.hostExec.executeEnabled(),
+            requiresExecute: !input.hostExec.executeEnabled(),
+            requiresRoot: false,
+            mysqlClient,
+            sql,
+            connectionHint,
+            notes: [
+                ...notes,
+                tl('notes.auto.n1449'),
+            ],
+            commandResults: []
+        };
+    }
+    // Run as single multi-statement via mysql
+    const script = sql.join('\n');
+    const r = await input.hostExec.runCommand(['mysql', '-e', script], { timeoutMs: 30_000 });
+    const ok = r.exitCode === 0;
+    return {
+        ok,
+        executed: true,
+        requiresExecute: false,
+        requiresRoot: false,
+        mysqlClient: true,
+        sql: sql.map((s) => s.replace(input.password, '***')),
+        connectionHint,
+        notes: ok
+            ? ['MySQL provision executed successfully']
+            : [`mysql failed: ${r.stderr || r.stdout}`],
+        commandResults: [{ argv: ['mysql', '-e', '(redacted)'], exitCode: r.exitCode, stderr: r.stderr }]
+    };
+}
+//# sourceMappingURL=mysql-provision.js.map

package/dist/hosting/mysql-provision.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mysql-provision.js","sourceRoot":"","sources":["../../src/hosting/mysql-provision.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,mBAAmB,CAAC;AAOvC,OAAO,EAAE,uBAAuB,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAC7E,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAiBvD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,KAO5C;IACC,kBAAkB,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC3C,kBAAkB,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC/C,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,QAAQ,EAAE,KAAK;YACf,eAAe,EAAE,IAAI;YACrB,YAAY,EAAE,KAAK;YACnB,WAAW,EAAE,KAAK;YAClB,GAAG,EAAE,EAAE;YACP,cAAc,EAAE,EAAE;YAClB,KAAK,EAAE,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC;YAC/B,cAAc,EAAE,EAAE;SAAE,CAAC;IACzB,CAAC;IAED,MAAM,EAAE,GAAG,EAAE,cAAc,EAAE,GAAG,uBAAuB,CAAC;QACtD,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,WAAW;KAAE,CAAC,CAAC;IAErC,MAAM,WAAW,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC9D,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,KAAK,IAAI,CAAC;IAC5C,MAAM,UAAU,GAAG,YAAY,IAAI,KAAK,CAAC,QAAQ,CAAC,cAAc,EAAE,IAAI,WAAW,CAAC;IAElF,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,CAAC,WAAW;QAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACrD,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,cAAc,EAAE;QAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,4BAA4B,CAAC,CAAC,CAAC;IAEnF,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO;YACL,EAAE,EAAE,IAAI;YACR,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,KAAK;YACf,eAAe,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,cAAc,EAAE;YACjD,YAAY,EAAE,KAAK;YACnB,WAAW;YACX,GAAG;YACH,cAAc;YACd,KAAK,EAAE;gBACL,GAAG,KAAK;gBACR,EAAE,CAAC,sBAAsB,CAAC;aAC3B;YACD,cAAc,EAAE,EAAE;SAAE,CAAC;IACzB,CAAC;IAED,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,QAAQ,EAAE,KAAK;YACf,OAAO,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,cAAc,EAAE;YACzC,eAAe,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,cAAc,EAAE;YACjD,YAAY,EAAE,KAAK;YACnB,WAAW;YACX,GAAG;YACH,cAAc;YACd,KAAK,EAAE;gBACL,GAAG,KAAK;gBACR,EAAE,CAAC,kBAAkB,CAAC;aACvB;YACD,cAAc,EAAE,EAAE;SAAE,CAAC;IACzB,CAAC;IAED,0CAA0C;IAC1C,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9B,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,UAAU,CACvC,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,EACvB,EAAE,SAAS,EAAE,MAAM,EAAE,CACtB,CAAC;IACF,MAAM,EAAE,GAAG,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC;IAC5B,OAAO;QACL,EAAE;QACF,QAAQ,EAAE,IAAI;QACd,eAAe,EAAE,KAAK;QACtB,YAAY,EAAE,KAAK;QACnB,WAAW,EAAE,IAAI;QACjB,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACrD,cAAc;QACd,KAAK,EAAE,EAAE;YACP,CAAC,CAAC,CAAC,uCAAuC,CAAC;YAC3C,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;QAC7C,cAAc,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,YAAY,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;KAAE,CAAC;AACxG,CAAC"}

package/dist/hosting/nginx-settings.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Nginx global settings (control plane + conf.d snippet).
+ */
+import type { HostExecutor } from '../host/executor.js';
+export type NginxBodySize = '1m' | '10m' | '50m' | '100m' | '500m';
+export type NginxKeepalive = '15' | '65' | '120';
+export type NginxAccessLog = 'off' | 'on' | 'buffered';
+export type NginxGlobalSettings = {
+    gzip: boolean;
+    serverTokens: boolean;
+    /** false = hide version (server_tokens off) */
+    clientMaxBody: NginxBodySize;
+    keepalive: NginxKeepalive;
+    http2: boolean;
+    accessLog: NginxAccessLog;
+};
+export declare const DEFAULT_NGINX_SETTINGS: NginxGlobalSettings;
+export type NginxSiteSettings = {
+    ssl?: boolean;
+    forceHttps?: boolean;
+    hsts?: boolean;
+    clientMaxBody?: NginxBodySize | 'inherit';
+    websocket?: boolean;
+    cloudflareRealIp?: boolean;
+    indexes?: boolean;
+};
+export declare function normalizeNginxGlobal(raw: Partial<NginxGlobalSettings> | null | undefined): NginxGlobalSettings;
+export declare function loadNginxSettings(dataDir: string): NginxGlobalSettings;
+export declare function saveNginxSettings(dataDir: string, patch: Partial<NginxGlobalSettings>): NginxGlobalSettings;
+/** http-context snippet under conf.d (included inside http{} on Debian/Ubuntu). */
+export declare function renderNginxGlobalSnippet(s: NginxGlobalSettings): string;
+export declare function writeNginxGlobalSnippet(dataDir: string, settings?: NginxGlobalSettings): string;
+export declare function applyNginxSettings(opts: {
+    dataDir: string;
+    host: HostExecutor;
+    patch?: Partial<NginxGlobalSettings>;
+}): Promise<{
+    ok: boolean;
+    settings: NginxGlobalSettings;
+    notes: string[];
+    blocked?: boolean;
+    requiresExecute?: boolean;
+    written: string[];
+}>;
+/** Extra server{} lines from site settings. */
+export declare function siteExtraDirectives(s: NginxSiteSettings | undefined, global?: NginxGlobalSettings): string;
+//# sourceMappingURL=nginx-settings.d.ts.map

package/dist/hosting/nginx-settings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nginx-settings.d.ts","sourceRoot":"","sources":["../../src/hosting/nginx-settings.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAIxD,MAAM,MAAM,aAAa,GAAG,IAAI,GAAG,KAAK,GAAG,KAAK,GAAG,MAAM,GAAG,MAAM,CAAC;AACnE,MAAM,MAAM,cAAc,GAAG,IAAI,GAAG,IAAI,GAAG,KAAK,CAAC;AACjD,MAAM,MAAM,cAAc,GAAG,KAAK,GAAG,IAAI,GAAG,UAAU,CAAC;AAEvD,MAAM,MAAM,mBAAmB,GAAG;IAChC,IAAI,EAAE,OAAO,CAAC;IACd,YAAY,EAAE,OAAO,CAAC;IACtB,+CAA+C;IAC/C,aAAa,EAAE,aAAa,CAAC;IAC7B,SAAS,EAAE,cAAc,CAAC;IAC1B,KAAK,EAAE,OAAO,CAAC;IACf,SAAS,EAAE,cAAc,CAAC;CAC3B,CAAC;AAEF,eAAO,MAAM,sBAAsB,EAAE,mBAOpC,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,aAAa,CAAC,EAAE,aAAa,GAAG,SAAS,CAAC;IAC1C,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,CAAC;AAKF,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,OAAO,CAAC,mBAAmB,CAAC,GAAG,IAAI,GAAG,SAAS,GACnD,mBAAmB,CAoBrB;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,mBAAmB,CAQtE;AAED,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,OAAO,CAAC,mBAAmB,CAAC,GAClC,mBAAmB,CAOrB;AAED,mFAAmF;AACnF,wBAAgB,wBAAwB,CAAC,CAAC,EAAE,mBAAmB,GAAG,MAAM,CAkBvE;AAED,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,MAAM,EACf,QAAQ,CAAC,EAAE,mBAAmB,GAC7B,MAAM,CAOR;AAED,wBAAsB,kBAAkB,CAAC,IAAI,EAAE;IAC7C,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,YAAY,CAAC;IACnB,KAAK,CAAC,EAAE,OAAO,CAAC,mBAAmB,CAAC,CAAC;CACtC,GAAG,OAAO,CAAC;IACV,EAAE,EAAE,OAAO,CAAC;IACZ,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB,CAAC,CA0CD;AAED,+CAA+C;AAC/C,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,iBAAiB,GAAG,SAAS,EAAE,MAAM,CAAC,EAAE,mBAAmB,GAAG,MAAM,CAY1G"}

package/dist/hosting/nginx-settings.js

@@ -0,0 +1,147 @@
+/**
+ * Nginx global settings (control plane + conf.d snippet).
+ */
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { syncNginxConfigs } from './nginx-sync.js';
+import { tl } from 'ysk-server-shared';
+export const DEFAULT_NGINX_SETTINGS = {
+    gzip: true,
+    serverTokens: false,
+    clientMaxBody: '10m',
+    keepalive: '65',
+    http2: true,
+    accessLog: 'on',
+};
+const BODY_SIZES = ['1m', '10m', '50m', '100m', '500m'];
+const KEEPALIVES = ['15', '65', '120'];
+export function normalizeNginxGlobal(raw) {
+    const d = DEFAULT_NGINX_SETTINGS;
+    const body = BODY_SIZES.includes(raw?.clientMaxBody)
+        ? raw.clientMaxBody
+        : d.clientMaxBody;
+    const ka = KEEPALIVES.includes(raw?.keepalive)
+        ? raw.keepalive
+        : d.keepalive;
+    const access = raw?.accessLog === 'off' || raw?.accessLog === 'buffered' || raw?.accessLog === 'on'
+        ? raw.accessLog
+        : d.accessLog;
+    return {
+        gzip: raw?.gzip ?? d.gzip,
+        serverTokens: raw?.serverTokens ?? d.serverTokens,
+        clientMaxBody: body,
+        keepalive: ka,
+        http2: raw?.http2 ?? d.http2,
+        accessLog: access,
+    };
+}
+export function loadNginxSettings(dataDir) {
+    const p = join(dataDir, 'nginx', 'settings.json');
+    if (!existsSync(p))
+        return { ...DEFAULT_NGINX_SETTINGS };
+    try {
+        return normalizeNginxGlobal(JSON.parse(readFileSync(p, 'utf8')));
+    }
+    catch {
+        return { ...DEFAULT_NGINX_SETTINGS };
+    }
+}
+export function saveNginxSettings(dataDir, patch) {
+    const next = normalizeNginxGlobal({ ...loadNginxSettings(dataDir), ...patch });
+    const dir = join(dataDir, 'nginx');
+    mkdirSync(dir, { recursive: true });
+    writeFileSync(join(dir, 'settings.json'), JSON.stringify(next, null, 2) + '\n', 'utf8');
+    writeNginxGlobalSnippet(dataDir, next);
+    return next;
+}
+/** http-context snippet under conf.d (included inside http{} on Debian/Ubuntu). */
+export function renderNginxGlobalSnippet(s) {
+    const lines = [
+        '# YSK nginx global defaults — do not edit by hand',
+        `server_tokens ${s.serverTokens ? 'on' : 'off'};`,
+        `client_max_body_size ${s.clientMaxBody};`,
+        `keepalive_timeout ${s.keepalive};`,
+        s.gzip
+            ? 'gzip on;\ngzip_types text/plain text/css application/json application/javascript text/xml application/xml;'
+            : 'gzip off;',
+        s.accessLog === 'off'
+            ? 'access_log off;'
+            : s.accessLog === 'buffered'
+                ? 'access_log /var/log/nginx/access.log combined buffer=32k flush=5s;'
+                : '# access_log: use distro default',
+        s.http2 ? '# http2: enabled on SSL listen in site conf when supported' : '# http2: off (site conf may still set)',
+        '',
+    ];
+    return lines.join('\n');
+}
+export function writeNginxGlobalSnippet(dataDir, settings) {
+    const s = settings ?? loadNginxSettings(dataDir);
+    const dir = join(dataDir, 'nginx', 'conf.d');
+    mkdirSync(dir, { recursive: true });
+    const path = join(dir, 'ysk-http-defaults.conf');
+    writeFileSync(path, renderNginxGlobalSnippet(s), 'utf8');
+    return path;
+}
+export async function applyNginxSettings(opts) {
+    const settings = opts.patch
+        ? saveNginxSettings(opts.dataDir, opts.patch)
+        : (() => {
+            const s = loadNginxSettings(opts.dataDir);
+            writeNginxGlobalSnippet(opts.dataDir, s);
+            return s;
+        })();
+    const written = [writeNginxGlobalSnippet(opts.dataDir, settings)];
+    const notes = [tl('notes.nginx.settingsWritten')];
+    if (!opts.host.executeEnabled()) {
+        notes.push(tl('notes.nginx.settingsNeedExecute'));
+        return {
+            ok: false,
+            settings,
+            notes,
+            blocked: true,
+            requiresExecute: true,
+            written,
+        };
+    }
+    const sync = await syncNginxConfigs({
+        dataDir: opts.dataDir,
+        systemConfDir: '/etc/nginx/conf.d',
+        host: opts.host,
+    });
+    notes.push(...(sync.notes ?? []).slice(0, 4));
+    if (sync.ok && opts.host.executeEnabled()) {
+        const rel = await opts.host.runCommand(['systemctl', 'reload', 'nginx'], {
+            timeoutMs: 30_000,
+        });
+        if (rel.exitCode === 0)
+            notes.push(tl('notes.nginx.reloaded'));
+        else
+            notes.push(tl('notes.nginx.reloadFailed'));
+    }
+    return {
+        ok: Boolean(sync.ok),
+        settings,
+        notes,
+        written: [...written, ...(sync.copied ?? [])],
+        blocked: sync.blocked,
+        requiresExecute: sync.requiresExecute,
+    };
+}
+/** Extra server{} lines from site settings. */
+export function siteExtraDirectives(s, global) {
+    if (!s)
+        return '';
+    const lines = [];
+    const body = s.clientMaxBody && s.clientMaxBody !== 'inherit'
+        ? s.clientMaxBody
+        : undefined;
+    if (body)
+        lines.push(`client_max_body_size ${body};`);
+    if (s.indexes)
+        lines.push('autoindex on;');
+    else if (s.indexes === false)
+        lines.push('autoindex off;');
+    void global;
+    return lines.length ? lines.join('\n  ') + '\n  ' : '';
+}
+//# sourceMappingURL=nginx-settings.js.map

package/dist/hosting/nginx-settings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nginx-settings.js","sourceRoot":"","sources":["../../src/hosting/nginx-settings.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,EAAE,EAAE,MAAM,mBAAmB,CAAC;AAgBvC,MAAM,CAAC,MAAM,sBAAsB,GAAwB;IACzD,IAAI,EAAE,IAAI;IACV,YAAY,EAAE,KAAK;IACnB,aAAa,EAAE,KAAK;IACpB,SAAS,EAAE,IAAI;IACf,KAAK,EAAE,IAAI;IACX,SAAS,EAAE,IAAI;CAChB,CAAC;AAYF,MAAM,UAAU,GAAoB,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AACzE,MAAM,UAAU,GAAqB,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;AAEzD,MAAM,UAAU,oBAAoB,CAClC,GAAoD;IAEpD,MAAM,CAAC,GAAG,sBAAsB,CAAC;IACjC,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,GAAG,EAAE,aAA8B,CAAC;QACnE,CAAC,CAAE,GAAI,CAAC,aAA+B;QACvC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;IACpB,MAAM,EAAE,GAAG,UAAU,CAAC,QAAQ,CAAC,GAAG,EAAE,SAA2B,CAAC;QAC9D,CAAC,CAAE,GAAI,CAAC,SAA4B;QACpC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,MAAM,GACV,GAAG,EAAE,SAAS,KAAK,KAAK,IAAI,GAAG,EAAE,SAAS,KAAK,UAAU,IAAI,GAAG,EAAE,SAAS,KAAK,IAAI;QAClF,CAAC,CAAC,GAAG,CAAC,SAAS;QACf,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAClB,OAAO;QACL,IAAI,EAAE,GAAG,EAAE,IAAI,IAAI,CAAC,CAAC,IAAI;QACzB,YAAY,EAAE,GAAG,EAAE,YAAY,IAAI,CAAC,CAAC,YAAY;QACjD,aAAa,EAAE,IAAI;QACnB,SAAS,EAAE,EAAE;QACb,KAAK,EAAE,GAAG,EAAE,KAAK,IAAI,CAAC,CAAC,KAAK;QAC5B,SAAS,EAAE,MAAM;KAClB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAC/C,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,eAAe,CAAC,CAAC;IAClD,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,GAAG,sBAAsB,EAAE,CAAC;IACzD,IAAI,CAAC;QACH,OAAO,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAiC,CAAC,CAAC;IACnG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,GAAG,sBAAsB,EAAE,CAAC;IACvC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,OAAe,EACf,KAAmC;IAEnC,MAAM,IAAI,GAAG,oBAAoB,CAAC,EAAE,GAAG,iBAAiB,CAAC,OAAO,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;IAC/E,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACnC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;IACxF,uBAAuB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACvC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,wBAAwB,CAAC,CAAsB;IAC7D,MAAM,KAAK,GAAG;QACZ,mDAAmD;QACnD,iBAAiB,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG;QACjD,wBAAwB,CAAC,CAAC,aAAa,GAAG;QAC1C,qBAAqB,CAAC,CAAC,SAAS,GAAG;QACnC,CAAC,CAAC,IAAI;YACJ,CAAC,CAAC,4GAA4G;YAC9G,CAAC,CAAC,WAAW;QACf,CAAC,CAAC,SAAS,KAAK,KAAK;YACnB,CAAC,CAAC,iBAAiB;YACnB,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,UAAU;gBAC1B,CAAC,CAAC,oEAAoE;gBACtE,CAAC,CAAC,kCAAkC;QACxC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,4DAA4D,CAAC,CAAC,CAAC,wCAAwC;QACjH,EAAE;KACH,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,OAAe,EACf,QAA8B;IAE9B,MAAM,CAAC,GAAG,QAAQ,IAAI,iBAAiB,CAAC,OAAO,CAAC,CAAC;IACjD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC7C,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,wBAAwB,CAAC,CAAC;IACjD,aAAa,CAAC,IAAI,EAAE,wBAAwB,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACzD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAIxC;IAQC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK;QACzB,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC;QAC7C,CAAC,CAAC,CAAC,GAAG,EAAE;YACJ,MAAM,CAAC,GAAG,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC1C,uBAAuB,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YACzC,OAAO,CAAC,CAAC;QACX,CAAC,CAAC,EAAE,CAAC;IACT,MAAM,OAAO,GAAG,CAAC,uBAAuB,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IAClE,MAAM,KAAK,GAAG,CAAC,EAAE,CAAC,6BAA6B,CAAC,CAAC,CAAC;IAClD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QAChC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,iCAAiC,CAAC,CAAC,CAAC;QAClD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,QAAQ;YACR,KAAK;YACL,OAAO,EAAE,IAAI;YACb,eAAe,EAAE,IAAI;YACrB,OAAO;SACR,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC;QAClC,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,aAAa,EAAE,mBAAmB;QAClC,IAAI,EAAE,IAAI,CAAC,IAAI;KAChB,CAAC,CAAC;IACH,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9C,IAAI,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QAC1C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,QAAQ,EAAE,OAAO,CAAC,EAAE;YACvE,SAAS,EAAE,MAAM;SAClB,CAAC,CAAC;QACH,IAAI,GAAG,CAAC,QAAQ,KAAK,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,sBAAsB,CAAC,CAAC,CAAC;;YAC1D,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,0BAA0B,CAAC,CAAC,CAAC;IAClD,CAAC;IACD,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACpB,QAAQ;QACR,KAAK;QACL,OAAO,EAAE,CAAC,GAAG,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QAC7C,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,eAAe,EAAE,IAAI,CAAC,eAAe;KACtC,CAAC;AACJ,CAAC;AAED,+CAA+C;AAC/C,MAAM,UAAU,mBAAmB,CAAC,CAAgC,EAAE,MAA4B;IAChG,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAClB,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,IAAI,GACR,CAAC,CAAC,aAAa,IAAI,CAAC,CAAC,aAAa,KAAK,SAAS;QAC9C,CAAC,CAAC,CAAC,CAAC,aAAa;QACjB,CAAC,CAAC,SAAS,CAAC;IAChB,IAAI,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,wBAAwB,IAAI,GAAG,CAAC,CAAC;IACtD,IAAI,CAAC,CAAC,OAAO;QAAE,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;SACtC,IAAI,CAAC,CAAC,OAAO,KAAK,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC3D,KAAK,MAAM,CAAC;IACZ,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;AACzD,CAAC"}

package/dist/hosting/nginx-sites-list.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Merged Nginx site list: project edge + standalone managed nginx_sites.
+ */
+import type { JsonStore } from '../db/store.js';
+export type NginxSiteSource = 'project' | 'standalone';
+export type NginxSiteKind = 'proxy' | 'static' | 'php';
+export type NginxSiteRow = {
+    id: string;
+    source: NginxSiteSource;
+    projectId?: string;
+    projectName?: string;
+    serverName: string;
+    kind: NginxSiteKind;
+    target: string;
+    ssl: boolean;
+    forceHttps?: boolean;
+    hsts?: boolean;
+    confPath?: string | null;
+    apply_status?: string | null;
+    runtime?: string | null;
+    port?: number | null;
+};
+/**
+ * Unified rows for Nginx page (one table).
+ */
+export declare function listMergedNginxSites(input: {
+    db: JsonStore;
+    projects: Array<Record<string, unknown>>;
+}): NginxSiteRow[];
+export declare function readNginxSiteConf(confPath: string | null | undefined): string;
+//# sourceMappingURL=nginx-sites-list.d.ts.map

package/dist/hosting/nginx-sites-list.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nginx-sites-list.d.ts","sourceRoot":"","sources":["../../src/hosting/nginx-sites-list.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAGhD,MAAM,MAAM,eAAe,GAAG,SAAS,GAAG,YAAY,CAAC;AAEvD,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,QAAQ,GAAG,KAAK,CAAC;AAEvD,MAAM,MAAM,YAAY,GAAG;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,eAAe,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,aAAa,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,OAAO,CAAC;IACb,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB,CAAC;AAmBF;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAC1C,EAAE,EAAE,SAAS,CAAC;IACd,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CAC1C,GAAG,YAAY,EAAE,CAqDjB;AAED,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,CAO7E"}

package/dist/hosting/nginx-sites-list.js

@@ -0,0 +1,86 @@
+/**
+ * Merged Nginx site list: project edge + standalone managed nginx_sites.
+ */
+import { existsSync, readFileSync } from 'node:fs';
+import { listResources } from './managed-resources.js';
+function kindFromRuntime(runtime) {
+    const r = String(runtime ?? '').toLowerCase();
+    if (r === 'static')
+        return 'static';
+    if (r === 'php')
+        return 'php';
+    return 'proxy';
+}
+function projectTarget(p) {
+    const kind = kindFromRuntime(p.runtime);
+    if (kind === 'static' || kind === 'php') {
+        return String(p.docRoot ?? p.home_dir ?? p.homeDir ?? '—');
+    }
+    const port = p.port != null ? Number(p.port) : null;
+    if (port && Number.isFinite(port))
+        return `127.0.0.1:${port}`;
+    return '—';
+}
+/**
+ * Unified rows for Nginx page (one table).
+ */
+export function listMergedNginxSites(input) {
+    const rows = [];
+    for (const p of input.projects) {
+        const domain = String(p.domain ?? '').trim();
+        if (!domain && !String(p.nginxConfigPath ?? p.nginx_config_path ?? '').trim()) {
+            continue;
+        }
+        const id = String(p.id ?? '');
+        if (!id)
+            continue;
+        const confPath = (p.nginxConfigPath ?? p.nginx_config_path);
+        rows.push({
+            id: `project:${id}`,
+            source: 'project',
+            projectId: id,
+            projectName: String(p.name ?? id),
+            serverName: domain || '—',
+            kind: kindFromRuntime(p.runtime),
+            target: projectTarget(p),
+            ssl: Boolean(p.ssl ?? p.force_https ?? p.forceHttps),
+            forceHttps: Boolean(p.force_https ?? p.forceHttps),
+            hsts: Boolean(p.hsts),
+            confPath: confPath ?? null,
+            apply_status: confPath ? 'written' : 'draft',
+            runtime: p.runtime ?? null,
+            port: p.port != null ? Number(p.port) : null,
+        });
+    }
+    for (const s of listResources(input.db, 'nginx_sites')) {
+        const kind = String(s.kind ?? 'proxy');
+        const target = kind === 'proxy'
+            ? String(s.upstream ?? '—')
+            : String(s.root ?? '—');
+        rows.push({
+            id: String(s.id),
+            source: 'standalone',
+            serverName: String(s.serverName ?? s.server_name ?? '—'),
+            kind: kind === 'static' || kind === 'php' ? kind : 'proxy',
+            target,
+            ssl: Boolean(s.ssl),
+            forceHttps: Boolean(s.forceHttps ?? s.force_https),
+            hsts: Boolean(s.hsts),
+            confPath: s.confPath ?? null,
+            apply_status: s.apply_status ?? null,
+        });
+    }
+    rows.sort((a, b) => a.serverName.localeCompare(b.serverName, undefined, { sensitivity: 'base' }));
+    return rows;
+}
+export function readNginxSiteConf(confPath) {
+    if (!confPath || !existsSync(confPath))
+        return '';
+    try {
+        return readFileSync(confPath, 'utf8');
+    }
+    catch {
+        return '';
+    }
+}
+//# sourceMappingURL=nginx-sites-list.js.map

package/dist/hosting/nginx-sites-list.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nginx-sites-list.js","sourceRoot":"","sources":["../../src/hosting/nginx-sites-list.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEnD,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAuBvD,SAAS,eAAe,CAAC,OAAuB;IAC9C,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC9C,IAAI,CAAC,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAC;IACpC,IAAI,CAAC,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IAC9B,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,aAAa,CAAC,CAA0B;IAC/C,MAAM,IAAI,GAAG,eAAe,CAAC,CAAC,CAAC,OAAiB,CAAC,CAAC;IAClD,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;QACxC,OAAO,MAAM,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,OAAO,IAAI,GAAG,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACpD,IAAI,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,aAAa,IAAI,EAAE,CAAC;IAC9D,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAGpC;IACC,MAAM,IAAI,GAAmB,EAAE,CAAC;IAEhC,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7C,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YAC9E,SAAS;QACX,CAAC;QACD,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9B,IAAI,CAAC,EAAE;YAAE,SAAS;QAClB,MAAM,QAAQ,GAAG,CAAC,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC,iBAAiB,CAAuB,CAAC;QAClF,IAAI,CAAC,IAAI,CAAC;YACR,EAAE,EAAE,WAAW,EAAE,EAAE;YACnB,MAAM,EAAE,SAAS;YACjB,SAAS,EAAE,EAAE;YACb,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;YACjC,UAAU,EAAE,MAAM,IAAI,GAAG;YACzB,IAAI,EAAE,eAAe,CAAC,CAAC,CAAC,OAAiB,CAAC;YAC1C,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC;YACxB,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,UAAU,CAAC;YACpD,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,UAAU,CAAC;YAClD,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;YACrB,QAAQ,EAAE,QAAQ,IAAI,IAAI;YAC1B,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO;YAC5C,OAAO,EAAG,CAAC,CAAC,OAAkB,IAAI,IAAI;YACtC,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;SAC7C,CAAC,CAAC;IACL,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,aAAa,CAAC,KAAK,CAAC,EAAE,EAAE,aAAa,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,OAAO,CAAkB,CAAC;QACxD,MAAM,MAAM,GACV,IAAI,KAAK,OAAO;YACd,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,IAAI,GAAG,CAAC;YAC3B,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC;QAC5B,IAAI,CAAC,IAAI,CAAC;YACR,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;YAChB,MAAM,EAAE,YAAY;YACpB,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,WAAW,IAAI,GAAG,CAAC;YACxD,IAAI,EAAE,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO;YAC1D,MAAM;YACN,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;YACnB,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,WAAW,CAAC;YAClD,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;YACrB,QAAQ,EAAG,CAAC,CAAC,QAAmB,IAAI,IAAI;YACxC,YAAY,EAAG,CAAC,CAAC,YAAuB,IAAI,IAAI;SACjD,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACjB,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAC7E,CAAC;IACF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,QAAmC;IACnE,IAAI,CAAC,QAAQ,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,CAAC;IAClD,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/hosting/nginx-ssl.d.ts

@@ -0,0 +1,84 @@
+/**
+ * Nginx reverse proxy + Let’s Encrypt SSL config generation.
+ */
+import type { NginxProxyConfig, SslCertPlan } from 'ysk-server-shared';
+import { type RealIpHostConfig, type RealIpProviderId } from './real-ip/index.js';
+/** Options for multi-CDN real client IP (see hosting/real-ip). */
+export type NginxRealIpOpts = {
+    /** @deprecated use realIpProvider; true → cloudflare when host default is none */
+    cloudflareRealIp?: boolean;
+    realIpProvider?: RealIpProviderId | 'inherit';
+    realIpHost?: RealIpHostConfig;
+};
+/** Build space-separated server_name from primary + aliases. */
+export declare function buildServerNameList(primary?: string, aliases?: string[]): string;
+/** listen directives with optional bind IP (dual-stack when unbound). */
+export declare function nginxListenLines(opts: {
+    ssl?: boolean;
+    bindIp?: string;
+}): string;
+/**
+ * Render an Nginx server block for reverse proxy.
+ */
+export declare function renderNginxProxy(config: NginxProxyConfig): string;
+export declare function renderNginxStatic(opts: {
+    serverName: string;
+    docRoot: string;
+    ssl?: boolean;
+    cloudflareRealIp?: boolean;
+    sslCertificate?: string;
+    sslCertificateKey?: string;
+    forceHttps?: boolean;
+    hsts?: boolean;
+    siteRedirectUrl?: string;
+    authBasicUserFile?: string;
+    authBasicRealm?: string;
+    bindIp?: string;
+    /** Static asset cache max-age (default 7d) */
+    staticCache?: boolean;
+} & NginxRealIpOpts): string;
+/**
+ * Render Nginx server block for PHP projects.
+ * Topology (required): Internet → Nginx → Apache backend → PHP-FPM.
+ * Does NOT fastcgi directly to FPM — Apache owns DocumentRoot + .php handler.
+ */
+export declare function renderNginxPhpFpm(opts: {
+    serverName: string;
+    /** Docroot is served by Apache; kept for API/compat (optional notes). */
+    docRoot?: string;
+    /** @deprecated Nginx no longer fastcgi to FPM; Apache uses the pool sock. */
+    fpmSocket?: string;
+    /** e.g. http://127.0.0.1:8080 — default from YSK_APACHE_BACKEND_* */
+    apacheUpstream?: string;
+    ssl?: boolean;
+    cloudflareRealIp?: boolean;
+    sslCertificate?: string;
+    sslCertificateKey?: string;
+    forceHttps?: boolean;
+    hsts?: boolean;
+    siteRedirectUrl?: string;
+    authBasicUserFile?: string;
+    authBasicRealm?: string;
+    bindIp?: string;
+} & NginxRealIpOpts): string;
+/**
+ * Best-effort purge of common nginx cache dirs + reload.
+ * Honest: needs EXECUTE; may no-op if dirs empty.
+ */
+export declare function purgeNginxCache(input: {
+    host: import('../host/executor.js').HostExecutor;
+}): Promise<{
+    ok: boolean;
+    notes: string[];
+    blocked?: boolean;
+}>;
+/** Suspended site: refuse traffic with 503. */
+export declare function renderNginxSuspended(serverName: string): string;
+/**
+ * Build certbot command plan for Let’s Encrypt.
+ */
+export declare function planLetsEncrypt(plan: SslCertPlan): {
+    commands: string[];
+    notes: string[];
+};
+//# sourceMappingURL=nginx-ssl.d.ts.map

package/dist/hosting/nginx-ssl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nginx-ssl.d.ts","sourceRoot":"","sources":["../../src/hosting/nginx-ssl.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEvE,OAAO,EAEL,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACtB,MAAM,oBAAoB,CAAC;AAE5B,kEAAkE;AAClE,MAAM,MAAM,eAAe,GAAG;IAC5B,kFAAkF;IAClF,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,cAAc,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAAC;IAC9C,UAAU,CAAC,EAAE,gBAAgB,CAAC;CAC/B,CAAC;AAUF,gEAAgE;AAChE,wBAAgB,mBAAmB,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,MAAM,CAMhF;AAuBD,yEAAyE;AACzE,wBAAgB,gBAAgB,CAAC,IAAI,EAAE;IACrC,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GAAG,MAAM,CAsBT;AAYD;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,CA8EjE;AA2CD,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE;IACJ,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,8CAA8C;IAC9C,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB,GAAG,eAAe,GAClB,MAAM,CA2DR;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE;IACJ,UAAU,EAAE,MAAM,CAAC;IACnB,yEAAyE;IACzE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,6EAA6E;IAC7E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,qEAAqE;IACrE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GAAG,eAAe,GAClB,MAAM,CA4BR;AAED;;;GAGG;AACH,wBAAsB,eAAe,CAAC,KAAK,EAAE;IAC3C,IAAI,EAAE,OAAO,qBAAqB,EAAE,YAAY,CAAC;CAClD,GAAG,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC,CA2B/D;AAED,+CAA+C;AAC/C,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAO/D;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,WAAW,GAAG;IAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,CAkC1F"}