ns2 0.2.6__py3-none-any.whl

ns2/ui/firewalld_page.py

@@ -0,0 +1,375 @@
+from nicegui import ui, app, binding
+from ns.lib.networking import *
+from ns.lib.firewalld import *
+from dbus_next.signature import Variant
+from dbus_next.errors import DBusError
+from dbus_next.aio.proxy_object import ProxyInterface
+from ns.dbus import dbus
+
+from ns.lib.systemd import *
+
+async def interface_list(checks: dict):
+    for i in await GetInterfaces(dbus.AppBus):
+        checks[i] = False
+        ui.checkbox(i).props("flat color=accent align=left").bind_value(checks, i)
+
+async def service_list(services: dict):
+    for s in await getServices(dbus.AppBus):
+        with ui.row():
+            ui.checkbox(s).props("flat color=accent align=left").bind_value(services, s)
+
+            with ui.column():
+                ui.label().bind_text_from(s, "UDP")
+                ui.label().bind_text_from(s, "TCP")
+
+
+@ui.refreshable
+async def firewall_status(on_network_page: bool):
+
+    firewall = Firewall()
+    firewall.Enable = await isActive(dbus.AppBus, 'firewalld.service')
+    firewall.Status = (await getServiceState(dbus.AppBus, "firewalld.service")).capitalize()
+    numActiveZones = 0
+    if firewall.Enable:
+        zone = await GetFirewalldZone(dbus.AppBus)
+        numActiveZones = len(await zone.call_get_active_zones())
+        
+    
+    with ui.column().classes("w-full"):
+        with ui.row().classes("w-full items-center justify-between"):
+            with ui.row().classes( "items-center"):
+                ui.label("Firewall").classes("text-h6")
+                if on_network_page:
+                    ui.link(f'{numActiveZones} active zones', '/networking/firewall').classes('text-accent')
+            
+                async def fire_switch_cb(e):
+                    action = "enable" if  e.sender.value else "disable"
+                    with ui.dialog() as dialog, ui.card():
+                        ui.label(f'Are you sure you want to {action} firewalld?')
+                        with ui.row():
+                            ui.button('Cancel', on_click=lambda: dialog.submit("Cancel")).props("flat color=accent align=left")
+                            ui.button(f'{action}', on_click=lambda: dialog.submit(action)).props("flat color=accent align=left")
+                    result = await dialog
+                    active = await isActive(dbus.AppBus, "firewalld.service")
+                    if result == "enable" and not active:
+                        await systemd_start(dbus.AppBus, "firewalld.service")
+                    if result == "disable" and active:
+                        await systemd_stop(dbus.AppBus, "firewalld.service")
+                    await firewall_status.refresh()
+
+                ui.switch(f"Status: {firewall.Status}").on('click', lambda e: fire_switch_cb(e)
+                        ).props("flat color=accent align=left dense").bind_value(firewall, "Enable").bind_text
+
+            if on_network_page:
+                ui.button("Edit rules and zones", on_click=lambda e: ui.navigate.to('/networking/firewall')).props("flat color=accent align=left dense")
+
+            else:
+                zoneDialog = await addZoneDialog()
+                ui.button("add new zone", on_click=zoneDialog.open).props("color=accent align=left")
+        
+
+ 
+
+
+    
+    
+def InterfaceText(zoneSettings :ZoneSetting):
+    interfaces = zoneSettings.Interfaces
+    if len(interfaces) == 1:
+        l1 = ui.label("Interface:").classes("font-bold")
+    else:
+        l1= ui.label("Interfaces:").classes("font-bold")
+    l2 = ui.label(formatListToString(interfaces))
+    return (l1, l2)
+
+def AllowedAddressText(zoneSettings :ZoneSetting):
+    sources = zoneSettings.Sources
+    l1 = ui.label("Allowed Addresses:").classes("font-bold")
+    if len(sources) == 0:
+        l2 = ui.label("Entire subnet")
+    else:
+        l2 = ui.label(formatListToString(sources))
+    return (l1, l2)
+
+
+
+
+async def removeServiceFromZone(zoneName: str, serviceName:str):
+    
+    print(f'remove {serviceName} from {zoneName}')
+    zone = await GetFirewalldZone(dbus.AppBus)
+    
+    res = await zone.call_remove_service(zoneName, serviceName)
+    print("res1: ", res)
+    conf = await GetFirewalldConfig(dbus.AppBus)
+    
+    p = await conf.call_get_zone_by_name(zoneName)
+    
+    print(p)
+    
+    configZone = await GetFirewalldConfigZone(dbus.AppBus, p)
+    res = await configZone.call_remove_service(serviceName)
+    print(res)
+    return
+
+
+
+async def addZoneDialog():
+    with ui.dialog() as dialog:
+        with ui.card().props('flat'):
+            ui.label("Add zone").classes("text-h5")
+            ui.label("Interfaces").classes("text-h6")
+
+            with ui.row():
+                checks = {}
+                await interface_list(checks)
+
+            #selectedServices = ui.input_chips('Allowed services', new_value_mode='add-unique', clearable=True).props('disable-input')
+            with ui.scroll_area():
+                services = formatServicesInRows(await getServices(dbus.AppBus))
+                services_table = ui.table(
+                        rows=services,
+                        column_defaults={
+                            "align": "left",
+                            "headerClasses": "uppercase text-primary",
+                        },
+                        row_key='Service',
+                        selection='multiple',
+                        #on_select=lambda e: print(f'selected: {e.selection}'),                   
+                          ).props('dense')
+                
+              
+
+                services_table.props(f'visible-columns=["Service","UDP","TCP"]')
+#
+                services_table.add_slot('header', r'''
+                    <q-tr :props="props">
+                        <q-th auto-width />
+                        <q-th auto-width />
+
+                        <q-th v-for="col in props.cols" :key="col.name" :props="props"> {{ col.label }} </q-th>
+                    </q-tr>
+                ''')
+#
+                services_table.add_slot('body', r'''
+                    <q-tr :props="props">
+                                <!-- selection checkbox -->
+            <q-td auto-width>
+                <q-checkbox 
+                    :model-value="props.selected" 
+                    @update:model-value="props.selected = !props.selected"
+                    color="accent"
+                    dense 
+                />
+            </q-td>
+
+                        <!-- expand button -->
+                        <q-td auto-width @click.stop="">
+                            <q-btn size="sm" color="accent" round dense 
+                                   @click="props.expand = !props.expand" 
+                                   :icon="props.expand ? 'remove' : 'add'" />
+                        </q-td>
+                        <!-- normal columns -->
+                        <q-td v-for="col in props.cols" :key="col.name" :props="props" 
+                              style="white-space: normal; word-wrap: break-word; overflow-wrap: break-word; max-width: 200px;">
+                            {{ col.value }}
+                        </q-td>                 
+                    </q-tr>
+                    <!-- expanded description -->
+                    <q-tr v-show="props.expand" :props="props">
+                        <q-td colspan="100%" style="max-width: 0;">
+                            <div class="text-left"
+                                 style="word-wrap: break-word; overflow-wrap: break-word; white-space: normal;">
+                                {{ props.row.Description }}
+                            </div>
+                        </q-td>
+                    </q-tr>
+                ''')
+#
+            serviceFilter = ui.input('Search for services').bind_value(services_table, "filter")
+
+            def on_save_cb():
+                for c,v in checks.items():
+                    print(c, v)
+
+                # Get selected services when saving
+                selected = [row['Service'] for row in services if row.get('Select', False)]
+                print(f"Selected services: {selected}")
+            
+            with ui.row():
+                ui.button('Add zone', on_click=on_save_cb).props("color=accent align=left")
+                ui.button('Cancel', on_click=dialog.close).props("flat color=accent align=left")
+
+    return dialog
+
+async def addServiceDialog():
+    with ui.dialog() as dialog:
+        with ui.card():
+            ui.label("nothing")
+            ui.button('close', on_click=dialog.close)
+        
+    return dialog
+
+
+
+
+
+
+async def zone_list(firewall):
+    with ui.column():
+        for zoneName, zoneSetting in firewall.ZoneSettings.items():
+            with ui.card().classes("w-full").props('flat').classes("bg-secondary"):
+                with ui.column():
+                    with ui.row().classes("w-full items-baseline justify-between"):
+                        with ui.row().classes("items-baseline"):
+                            ui.label(f'{zoneName.capitalize()} zone')
+                            InterfaceText(zoneSetting)
+                            
+                        with ui.row():
+                            AllowedAddressText(zoneSetting)
+                            
+                        with ui.row():
+                            addDialog = await addServiceDialog()
+                            ui.button("add services", on_click=addDialog.open).props("color=accent align=left")
+                            ui.button(icon="more_vert").props("flat color=accent align=left")
+                    
+                    services = formatServicesInRows(firewall.ZoneSettings[zoneName].ServiceSettings)
+                    
+                    service_table = ui.table(
+                        rows=services,
+                        column_defaults={
+                            "align": "left",
+                            "headerClasses": "uppercase text-primary",
+                        },
+                        row_key='Service'
+                    ).props("flat")
+                    service_table.props(f'visible-columns={"Service,UDP,TCP"}')  # Only show these
+                    
+                    service_table.add_slot('header', r'''
+                        <q-tr :props="props">
+                            <q-th auto-width />
+                            <q-th v-for="col in props.cols" :key="col.name" :props="props"> {{ col.label }} </q-th>
+                            <q-th auto-width />
+                        </q-tr>
+                    ''')
+                    
+                    async def handle_remove_service(e, zone=zoneName):
+                        await removeServiceFromZone(zone, e.args)
+    
+                    service_table.on('remove-service', handle_remove_service)
+                    
+                    service_table.add_slot('body', r'''
+                    <q-tr :props="props">
+                        <!-- expand button -->
+                        <q-td auto-width>
+                            <q-btn size="sm" color="accent" round dense @click="props.expand = !props.expand" :icon="props.expand ? 'remove' : 'add'" />
+                        </q-td>
+                        <!-- normal columns -->
+                        <q-td v-for="col in props.cols" :key="col.name" :props="props">
+                            {{ col.value }}
+                        </q-td>
+                        <!-- 3-dot menu -->
+                        <q-td auto-width>
+                            <q-btn flat round dense icon="more_vert" color="accent">
+                                <q-menu auto-close>
+                                    <q-list style="min-width: 150px">
+                                        <q-item clickable
+                                            @click="$parent.$emit('remove-service', props.row.Service)">
+                                            <q-item-section class="text-negative">
+                                                Delete
+                                            </q-item-section>
+                                        </q-item>
+                                    </q-list>
+                                </q-menu>
+                            </q-btn>
+                        </q-td>
+                    </q-tr>
+                    <!-- expanded description -->
+                    <q-tr v-show="props.expand" :props="props">
+                        <q-td colspan="100%" style="max-width: 0;">
+                            <div class="text-left"
+                                 style="word-wrap: break-word; overflow-wrap: break-word; white-space: normal;">
+                                {{ props.row.Description }}
+                            </div>
+                        </q-td>
+                    </q-tr>
+                    ''')
+
+    pass # end of this... 
+
+
+
+
+@ui.refreshable
+async def firewall_table():
+    
+    firewall = Firewall()
+    #fire = await GetFirewall(dbus.AppBus)
+    firewall.Enable = await isActive(dbus.AppBus, "firewalld.service")
+    firewall.Status = (await getServiceState(dbus.AppBus, "firewalld.service")).capitalize()
+    
+    if firewall.Enable:
+        fire = await GetFirewalld(dbus.AppBus)
+        zone = await GetFirewalldZone(dbus.AppBus)
+        firewall.ActiveZones = await zone.call_get_active_zones()
+        
+        for az in firewall.ActiveZones:
+            
+            zs = ZoneSetting()
+            
+            zoneSettings = await zone.call_get_zone_settings2(az)
+            
+            zs.Description = zoneSettings.get('description', Variant('s', 'description not available')).value
+            zs.Interfaces = zoneSettings.get('interfaces', Variant('as', [])).value
+            zs.Services = zoneSettings.get('services', Variant('as', [])).value
+            zs.Short = zoneSettings.get('short', Variant('s', 'short not available')).value
+            zs.Sources = zoneSettings.get('sources', Variant('as', [])).value
+            
+            for s in zs.Services:
+                serSet = ServiceSetting()
+                serviceSettings = await fire.call_get_service_settings2(s)
+                                
+                includes = serviceSettings.get('includes', False)
+                if includes:
+                    for i in includes.value:
+                        ser_set = await fire.call_get_service_settings2(i)
+                        serSet.Ports.extend(ser_set.get('ports', Variant('a(ss)', [['port not available', 'protocol not available']])).value)
+        
+                                    
+                serSet.Name = serviceSettings.get('short', Variant('s', 'name not available')).value
+                serSet.Ports.extend(serviceSettings.get('ports', Variant('a(ss)', [['port not available', 'protocol not available']])).value)
+                serSet.Description = serviceSettings.get('description', Variant('s', 'Description not available')).value
+                zs.ServiceSettings[s] = serSet
+                #pprint(service_settings)
+                
+            firewall.ZoneSettings[az] = zs
+
+    await zone_list(firewall)
+    
+    
+    
+    
+    
+    
+
+
+
+
+
+#def daemon_cb(mystr):
+#    print(mystr)
+#    firewall_table.refresh()
+
+async def firewall_page():
+    
+    
+    #fire = await GetFirewall(dbus.AppBus)
+    #fire.on_daemon_changed(daemon_cb)
+
+    with ui.card():
+        with ui.row():
+            ui.link("Networking", "/networking").classes('text-accent')
+            ui.label(">")
+            ui.label('firewall')
+        await firewall_status(False)
+        await firewall_table()

ns2/ui/fpga_page.py

@@ -0,0 +1,24 @@
+import asyncio
+from nicegui import ui, app, background_tasks, events
+from ns.lib.commands import runAsyncCmd
+import os
+
+
+async def fpga_page():
+    with ui.column() as pageContainer:
+        ui.label("FPGA Bitstream flasher").classes("text-h5")
+        with ui.row():
+
+            with ui.card():
+                async def handle_upload(e: events.UploadEventArguments):
+                    ui.notify(f'Uploaded {e.file.name}', type='positive')
+                    file_path = os.path.join("bitstreams", e.file.name)
+                    await e.file.save(file_path)
+
+                    res = await runAsyncCmd(["sudo", "xc3sprog", "-c", "ftdi", file_path])
+                    ui.notify(f'Flashed {res}', type='positive')
+
+                ui.upload(label="FPGA Config Upload", on_upload=handle_upload).props("flat color=accent")
+            
+
+

ns2/ui/login.py

@@ -0,0 +1,65 @@
+import datetime
+from nicegui import ui, app
+
+from ns.ui.theme import init_colors
+import time
+
+import pam
+import os
+from ns.utils import ASSETS_DIR
+p = pam.pam()
+
+
+
+async def try_login(_username: str, _password: str) -> None:
+
+    if p.authenticate(_username, _password):
+        app.storage.user.update(
+            {
+                "username": _username,
+                "authenticated": True,
+                #"token": response["token"],
+                "login_time": time.time()
+            }
+        )
+        ui.notify(f"Welcome, {_username}!", color="positive")
+        ui.navigate.to("/root")
+    else:
+        ui.notify("Invalid username or password", color="negative")
+
+
+@ui.page("/login")
+def login_page():
+    init_colors()
+
+    with ui.dialog() as support_dialog, ui.card():
+        ui.label("Novus Power Products").classes("text-h5")
+        ui.label("novuspower.com")
+        ui.label("(816) 836-7446")
+        ui.label("support@novuspower.com")
+        ui.label(
+            "You can reset the administrator password using the maintenance port on the front of the unit: ns resetpw"
+        )
+        ui.button("Close", on_click=support_dialog.close).classes("bg-secondary")
+
+    with ui.column(align_items="center").classes("absolute-center gap-16"):
+        print(str(ASSETS_DIR / "NOVUS_LOGO.svg"))
+        ui.image(str(ASSETS_DIR / "NOVUS_LOGO.svg")).classes("w-128 max-w-128")
+
+        with ui.card():
+            username = ui.input("Username")
+            password = ui.input("Password", password=True, password_toggle_button=True)
+
+            async def on_login():
+                await try_login(username.value, password.value)
+
+            username.on("keydown.enter", on_login)
+            password.on("keydown.enter", on_login)
+
+            with ui.row():
+                ui.button("Log in", on_click=on_login).classes("bg-secondary")
+
+                ui.button(
+                    "Support",
+                    on_click=support_dialog.open,
+                ).classes("bg-secondary")

ns2/ui/main.py

@@ -0,0 +1,200 @@
+import asyncio
+from datetime import datetime
+import sys
+from nicegui import ui, app
+from multiprocessing import freeze_support
+
+from ns.lib.accounts import accounts_page, accounts_user_page
+from ns.lib.socket import socket_stream
+
+from ns.ui.networking_page import network_page, interface_page
+from ns.ui.terminal import terminal_page
+from ns.ui.theme import init_colors
+from ns.ui.login import login_page
+from ns.ui.root import root_page
+from ns.ui.snmp_page import snmp_page, snmp_user_page
+from ns.ui.ntp import ntp_page
+from ns.ui.fpga_page import fpga_page
+from ns.ui.tests_page import tests_page
+from ns.dbus import dbus
+from ns.ui.firewalld_page import firewall_page
+from ns.utils import ASSETS_DIR
+#
+production = False
+
+version = '0.0.1'
+
+sock_task = None
+
+def main():
+    freeze_support()
+    
+    @ui.page('/networking')
+    @ui.page('/networking/firewall')
+    @ui.page('/networking/{interface_name}')
+
+    @ui.page('/snmp')
+    @ui.page('/snmp/{version}/{user}')
+
+    @ui.page('/terminal')
+
+
+    #@ui.page('/ntp')
+    @ui.page('/accounts')
+    @ui.page('/accounts/{user}')
+    #@ui.page('/fpga')
+    #@ui.page('/tests')
+    @ui.page('/')
+
+    @ui.page('/root')
+    async def root():
+
+        init_colors()
+        if not app.storage.user.get("authenticated", False):
+            ui.navigate.to("/login")
+            return
+
+
+        with ui.header().classes("items-center justify-between").classes("bg-dark"):
+            ui.button(on_click=lambda: left_drawer.toggle(), icon="menu").props(
+                "flat color=white"
+            )
+            ui.image(str(ASSETS_DIR / "NOVUS_LOGO.svg")).classes("w-48")
+            ui.label(f'Welcome {app.storage.user["username"]}!')
+            #ui.button("Request Admin").classes("bg-secondary").props("flat color=accent")
+
+            label = ui.label()
+
+            def update_date():
+                label.set_text(datetime.now().astimezone().strftime('%m-%d-%Y %H:%M:%SZ'))
+
+            ui.timer(1.0, update_date)
+
+
+        async def nav(path :str):
+            ui.navigate.to(path)
+            width = await ui.run_javascript('window.innerWidth')
+            if width < 1024:  # Adjust this breakpoint as needed
+                left_drawer.hide()
+
+
+        with ui.left_drawer(bordered=True).classes("bg-dark") as left_drawer:
+
+
+            ui.button(
+                "Networking",
+                on_click=lambda:nav('/networking'),
+                icon="settings_ethernet",
+            ).props("flat color=white align=left").classes("full-width")
+
+
+            #ui.button(
+            #    "NTP",
+            #    on_click=lambda: nav('/ntp'),
+            #    icon="settings_ethernet",
+            #).props("flat color=white align=left").classes("full-width")
+
+            ui.button("Terminal",
+                      on_click=lambda: nav('/terminal'), 
+                      icon="terminal"
+                      ).props("flat color=white align=left").classes("full-width")
+
+            #ui.button(
+            #    "FPGA",
+            #    on_click=lambda: nav('/fpga'),
+            #    icon="settings_ethernet",
+            #).props("flat color=white align=left").classes("full-width")
+
+
+            ui.button(
+                "SNMP",
+                on_click=lambda: nav('/snmp'),
+                icon="settings_applications",
+            ).props("flat color=white align=left").classes("full-width")
+
+            ui.button(
+                "Accounts",
+                on_click=lambda: nav('/accounts'),
+                icon="group",
+            ).props("flat color=white align=left").classes("full-width")
+
+            #ui.button(
+            #    "Tests",
+            #    on_click=lambda: nav('/tests'),
+            #    icon="group",
+            #).props("flat color=white align=left").classes("full-width")
+
+            ui.separator()
+
+            ui.button(
+                "Logout",
+                on_click=lambda: (app.storage.user.clear(), nav("/login")),
+                icon="logout",
+            ).props("flat color=negative align=left").classes("full-width")
+
+        # Footer
+        with ui.footer().classes("bg-dark"):
+            ui.label(version)
+
+
+        ui.sub_pages({
+            '/': network_page,
+            '/networking': network_page, 
+            '/networking/firewall': firewall_page,
+            '/networking/{interface_name}': interface_page,
+            '/ntp' : ntp_page,
+            '/snmp': snmp_page, 
+            '/snmp/{version}/{user}': snmp_user_page,
+            '/accounts': accounts_page, 
+            '/accounts/{user}': accounts_user_page,
+            '/terminal': terminal_page,
+            #'/fpga': fpga_page,
+            #'/tests': tests_page
+            }).classes("w-full")
+
+
+
+
+    
+    @app.on_startup
+    async def startup():
+        global sock_task
+        await dbus.setup()
+        sock_task = asyncio.create_task(socket_stream())
+
+
+    @app.on_shutdown
+    async def shutdown():
+        global sock_task
+        await dbus.cleanup()
+        #await socket_cleanup()
+        sock_task.cancel()
+    
+
+    if not sys.argv[1]:
+        sys.exit()
+
+    ui.run(
+       port=int(sys.argv[1]),
+       reload=False,
+       storage_secret="your-secret-key",
+       title="Novus Configuration Tool",
+       favicon=str(ASSETS_DIR / "favicon.png")
+       )
+       
+
+
+
+if __name__ in {"__main__", "__mp_main__"}:
+    main()
+    
+   
+
+#TODO Clean up and test ipv4 stuff, expand to dns and ipv6
+#TODO Add firewalld to networking page
+#TODO Move snmp to a separate service for permissions
+#TODO Work on accounts and grouping users into accounts
+#TODO Implement Policy kit one day
+#TODO Move time server stuff to dbus service?
+#TODO Move PAM / Auth to a different service
+#TODO Fix terminal to be in the signed in user