Add local authserver to provide /verify-credentials route

This is used for apps which are using OpenID to login but still need to
be able to verify the users password or app password

.gitignore

@@ -1,9 +1,8 @@
 node_modules/
-coverage/
-.nyc_output/
-webadmin/dist/
 installer/src/certs/server.key
 
 # vim swap files
 *.swp
 
+.cursor
+

.gitlab-ci.yml

@@ -0,0 +1,24 @@
+run_tests:
+  stage: test
+  image: cloudron/base:4.2.0@sha256:46da2fffb36353ef714f97ae8e962bd2c212ca091108d768ba473078319a47f4
+  services:
+    - name: mysql:8.0
+      alias: mysql
+  variables:
+    MYSQL_ROOT_PASSWORD: password
+    MYSQL_DATABASE: box
+    BOX_ENV: ci
+    DATABASE_URL: mysql://root:password@mysql/box
+  script:
+    - echo "Running tests..."
+    - mysql -hmysql -uroot -ppassword -e "ALTER USER 'root'@'%' IDENTIFIED WITH mysql_native_password BY 'password';"
+    - mysql -hmysql -uroot -ppassword -e "CREATE DATABASE IF NOT EXISTS box"
+    - npm install
+    - node_modules/.bin/db-migrate up
+    - ln -s /usr/local/node-18.18.0/bin/node /usr/bin/node
+    - node_modules/.bin/mocha --no-timeouts --bail src/test/tokens-test.js
+    - echo "Done!"
+
+stages:
+  - test
+

CHANGES

@@ -2851,3 +2851,371 @@
 [8.0.6]
 * Fix AdGuard resolving dashboard to docker bridge IP
 
+[8.1.0]
+* backups: add hetzner object storage
+* registry: cloudron container registry
+* gandi: add PAT token support
+* OpenID: add groups claim support
+* OpenID: enable refresh token support (dokuwiki)
+* filemanger: fix various regressions
+* dashboard: mobile and dark-mode fixes
+* syslog: fix multiline timestamps
+* porkbun: use new API endpoint
+* fix "happy eyeballs" quirk in nodejs
+* Update nodejs to 20.18.0
+
+[8.2.0]
+* rsync: show better error message with too many empty dirs, symlinks or executables
+* mail: update Solr to 8.11.4
+* mail: update Haraka to 3.0.5
+* Add sqlite3 addon
+* docker: update docker to 27.3.1
+* du: add exclude file to skip filesystem usage checks
+* mail: attachment search
+* oidc: use cloudron name as provider name
+* groups: add eventlog
+* resources: allow mounting devices into apps
+* remove global lock
+* hetzner: add helsinki object storage location
+* backups: implement app archive
+* notifications: per user email notification config
+* postgres: enable vector extension
+* docker: fallback to downloading images from quay if dockerhub does not work
+
+[8.2.1]
+* apps: fix bug where update and notes indicator was shown to normal users
+* archive: disable archiving for pre-8.2 backups. we don't have enough info to unarchive
+* dashboard: fix browser caching issue
+
+[8.2.2]
+* gandi: add token type in the setup view
+* mail: fix issue with dkim signing
+* mail: fix crash in dns list plugin
+* scheduler: create jobs with cloudron tz setting
+* security: fix issue where '/' symlink allows admins to get ssh access
+
+[8.2.3]
+* mail: give container a static IP
+* firewall: add masquerading rules for containers to reach each other via public IP
+* docker: fix parsing of optional namespace in image refs
+
+[8.2.4]
+* restore: fix crash with invalid backup id
+* setup: add inwx to dns setup
+* backups: add preserve attributes checkbox
+* mail: add ipv6 rdns check
+* mail: disable OCR in tika. this is too slow
+* mail: rebuild index script
+* backups: add preserve attributes checkbox
+* username: only ending with .app is reserved
+* cloudron-support: add helper function to free up disk space when full
+* cloudflare: list API does not return `zone_id` anymore
+
+[8.3.0]
+* new base image: cloudron/base:5.0.0@sha256:04fd70dbd8ad6149c19de39e35718e024417c3e01dc9c6637eaf4a41ec4e596c
+* Database upgrades are automatically performed. This might take some time depending on the amount of data.
+* Postgres v16
+* Mongodb v7
+* PHP v8.3
+* Node.js v22 LTS
+
+[8.3.1]
+* Fix crash in postgresql pgvector extension
+
+[8.3.2]
+* Bring back immich vectors hook in postgres addon
+
+[9.0.0]
+* UI redesign
+* notifications: email notification when server reboot is required
+* notifications: email notification when cloudron update failed
+* notifications: email notification for low disk space (90%)
+* node: update to 22.20.0
+* docker: update to 28.1.1
+* s3: automatically abort old multipart uploads
+* notifications: validate domains configs
+* ldap: automatically detect pagination support
+* ubuntu: alert for 20.04 support being deprecated
+* domains: vanity nameservers
+* token: access can by restricted by ip range(s)
+* sendmail: requiresValidCertificate option for using mail server domain
+* mail: update haraka to 3.1.1
+* sshfs: implement rm via ssh
+* multiple docker registries
+* mail: rename delivered -> sent and received -> saved in event log
+* graphs: replace collectd with custom collector
+* graphs: live graphs
+* graphs: add system disk and network graph
+* profile: drop gravatar support
+* login: suppress notification of impersonated users
+* mongodb: reduce verbosity of logs
+* redis: disable by default when optional
+* apps: fix issue where operations on stopped apps errored
+* eventlog: Fix incorrect eventlog that the update crashed
+* database: change charset to utf8mb4. this allows emojis everywhere!
+* mail: add brevo as relay provider
+* mail: add rbl6 check
+* eventlog: mail server change log
+* profile: avatar cannot be changed when profile is locked
+* app backup: no more part alters app state. runs completely in background
+* system: disk usage is not collected in background. new disk ui, computes space on demand
+* backups: multiple backup targets
+* port bindings: add `enabledByDefault` property in manifest
+* backups: store integrity information and perform validation
+* reverse proxy: remove OCSP support. this is being deprecated in favor of CRLs
+* sqlite: fix issue where dump was also logged when backing up
+* backups: remove noop backend
+
+[9.0.1]
+* redis: update to 8.2.2
+* Split the ubuntu version and cloudron version
+* Restructure sidebar menu items
+* eventlog: fix display of backup (sites) events
+* app archive: fix download config
+* graphs: fix performance issue when selecting apps
+* Support overwrite DNS in app install dialog
+* encryption: do not allow password and hint to be the same
+* Add better grouping to mailbox owner select
+* eventlog: display task log link when available
+* add ephemeral port warning
+* rsync: fix integrity computation
+
+[9.0.2]
+* backupsite: only owner can add a site
+* remove max-height from the users view and groups view tables
+* backups: fix listing when stats is null
+* graphs: fix detection of rootfs block device
+* sidebar: ldap/openid/directory should not be visible to non-admins
+* sidebar: email domains, eventlog, settings is only for admins
+* reload dashboard on Cloudron version change
+* Always start with a fresh domains list for the apps filter
+* sysinfo: fallback to product family if product vendor is empty
+* archive: display the site name of latest backup
+* graphs: fix flickering of disk graph item
+* graphs: fix issue with live graph time calculation
+
+[9.0.3]
+* Fix submit state for login form
+* Avoid flickering of SystemUpdate view when update is busy
+* backuptask: fix crash when accessing stats of old backups
+* backup sites: fix listing when status call errors
+* backups: display mail backup stats
+* Add missing autocomplete attributes on forms
+* Refresh backup site status and task in the background
+* Hide non-owner actions for backup sites
+* Move app start/stop back to the main toolbar
+* Fix styling in public page
+* network: fix ip caching bug
+* Change default footer to not have the forum link
+* Fix troubleshooting tool
+* Give domains list a larger max-height
+* Make app error compatible with previous releases
+
+[9.0.4]
+* filemanager: fix missing translations
+* display backup duration
+* add hetznercloud DNS provider
+
+[9.0.5]
+* access control/operators: remove deleted users and groups
+* backupcleaner: fix scoping of cleanup by site id
+* Use normal buttons for app start/stop
+* site schedule: Fix hourly display
+
+[9.0.6]
+* Autofocus search in appstore view
+* All settings in sidebar should be same icon
+* Make backup content list a TableView so we can sort it by size and fileCount
+* Fix filemanager for custom apps
+* Sort apps in the grid by label
+* Filter dropdowns are searchable with more than 10 entries
+* Show app icons in the grid in grayscale if app is stopped
+* Support wildcard domain aliases in app location
+
+[9.0.7]
+* externalldap: only set group members if they changed
+* Fix issue where backups remote paths were incorrectly migrated
+
+[9.0.8]
+* Add explicit option to disable automatic backups
+* backups: show same filesystem warning
+* Fix tgz app backup download
+* Fix mailbox usage and quota sorting
+* Give sshfs identity files unique filenames across mounts
+* Do not share relay provider setting with view and form
+* cloudflare: ensure defaultProxyStatus in older configs
+* filter: fix domain search to include redirect/alias/secondary domains
+* Use full URLs for page preview icons and favicon
+* email: fix masquerade toggle
+
+[9.0.9]
+* minio: fix issue with accepting selfsigned certs
+* applink: fix button text in edit mode
+* password reset: show error message if any
+* sshfs: use a temporary identity file for remote ssh copy
+* access control: always show the user management section
+* update: show the last update error, if any
+
+[9.0.10]
+* Only enable LdapServer input fields if feature is enabled
+* Require display name to not be empty when changed from the profile view
+* access control: fix spacing
+* storage: pass limits object to backend
+
+[9.0.11]
+* mail: fix count indicator when loading
+* mailinglist: fix search on name
+* backup site: fix migration with mixed formats
+
+[9.0.12]
+* eventlog: always fetch enough event logs to fill the screen
+* mail: check for outbound ipv6 connectivity
+* store actual appId not oidc clientId for log in events
+* Add english labels for eventlog filtering
+* mail: when deferred, show reason
+* mail: prefer ipv4 for outbound mail
+
+[9.0.13]
+* Fix issue where footer/name can break templates
+* rsync: bump empty dir limit to 80k
+* nginx: do not log query params
+* Fetch mailbox usage in the background to not delay mailbox listing
+* cloudron-support: add --check-services and add it to troubleshoot
+* Do not poll services if they are in recoveryMode
+* restore/import: fix issue where prefix was empty
+
+[9.0.14]
+* Also use a temporary SSH identity file for optimized ssh remote rm -rf
+* app search: title is optional manifest
+* network: detect default ipv6 interface when no ipv4 interface
+* mail status: fix rbl display
+* platform: show any container upgrade errors in the UI
+* users: make remove 2fa separate dialog
+* mandatory 2fa: show undismissable dialog and warning
+* restore: validate ipv6 config
+* location: use the domain where app is installed as default
+* s3: remove leading slash in CopySource
+* gcs: fix copy operation
+* restore: fix crash when trying to mount fs volumes
+* restore: teardown pseudo backup site
+* oidc: add separate jwks key route for cloudflare access
+
+[9.0.15]
+* sshfs: Use unique temporary ssh key file for each ssh remote operation
+
+[9.0.16]
+* Update mongodb to 7.0.28 (also fixes mongobleed)
+* docker: do not use auth for appstore images
+* backup: add synology C2
+* mail: update haraka to 3.1.2
+* csp/robots: add common patterns
+
+[9.0.17]
+* Update mongodb to 7.0.28 (also fixes mongobleed)
+* UI: add favorites for list views
+* UI: add collapsible sidebar
+* docker: do not use auth for appstore images
+* backup: add synology C2
+* mail: update haraka to 3.1.2
+* csp/robots: add common patterns
+
+[9.0.18]
+* ami & cloud images: fix setup
+
+[9.1.0]
+* acme: ARI support . https://www.rfc-editor.org/rfc/rfc9773.txt
+* Update nodejs to 24.13.0
+* Update docker to 29.1.5
+* Update mongodb to 8.0.17
+* Update redis to 8.4.0
+* Add notification view. settings have moved to this new view.
+* updater: skip backup site check when user skips backup
+* community packages
+* source builds
+* backups: add integrity check UI
+* Fix fonts on chrome
+* applinks: fix acl UI
+* services: rename sftp to filemanager, graphite to metrics
+* app passwords: add expiry
+* DO Spaces: add missing ATL1, BLR1, SYD1 regions
+* filemanager: the terminal button automatically cds into the cwd
+* filemanager: add a tree view
+* passkey support
+* security: remove cors
+* support card/cal dav well-known endpoints
+* add backupCommand, restoreCommand, persistentDirs
+* Update Haraka to 3.1.3
+
+[9.1.1]
+* cli: use web based browser login flow
+
+[9.1.2]
+* apps: avoid flickering with filters
+* apps: move to error state if a volume is unavailable
+* apps: enable storage view in all error states
+* postgres: update pgvector to 0.8.2
+* appstore: add ai category
+* appstore: better tag/cateogry mapping
+* i18n: add Czech translations
+* Support and prefer Dockerfile.cloudron in local builds
+* integrity: show status in the info dialog
+* backup: show integrity column for dependsOn backups
+* integrity: show log link
+* syncer: fix bug with a file and dir having same prefix
+
+[9.1.3]
+* Remove 'Dashboard' from dashboard page title
+* integrity: skip check of backups with no integrity info
+* backupintegrity: add percent progress
+* apps: fix acl display
+
+[9.1.4]
+* services: lazy start services / on demand services
+* restore: fix restore of trusted ips and blocklist
+* dashboard: wait for dashboard reload when version has changed
+* graphite: fix aggregation of block/network read/write
+* Workaround chrome quirks on file drop handling
+* notifications: add empty text, progress bar and inifinite scroll
+* rsync: throttle log messages during download
+* backup logs: make them much terse and concise
+* oidc: implement Device Authorization Grant
+* operator: fix viewing of backup progress and logs
+* notification: automatic app update failure notification
+* backup sites: identify conflicting site locations
+* update: add policy to update apps and platform separately
+* passkey: fix issue where passkeys were lost on restart
+* passkey: implement passwordless login
+* oidcserver: fix jwks_rsaonly response
+
+[9.1.5]
+* services: lazy start services / on demand services
+* restore: fix restore of trusted ips and blocklist
+* dashboard: wait for dashboard reload when version has changed
+* graphite: fix aggregation of block/network read/write
+* Workaround chrome quirks on file drop handling
+* notifications: add empty text, progress bar and inifinite scroll
+* rsync: throttle log messages during download
+* backup logs: make them much terse and concise
+* oidc: implement Device Authorization Grant
+* operator: fix viewing of backup progress and logs
+* notification: automatic app update failure notification
+* backup sites: identify conflicting site locations
+* update: add policy to update apps and platform separately
+* passkey: fix issue where passkeys were lost on restart
+* passkey: implement passwordless login
+* oidcserver: fix jwks_rsaonly response
+
+[9.1.6]
+* apps: fix wrong disabled state for devices config
+* notifications: send email when manual platform and app update required
+* source install: support dockerfileName and build options
+* source install: persist buildConfig so restore, import, clone work correctly
+* search for matches in app links labels for apps view filter
+* restore: prune portBindings whose tcpPorts/udpPorts no longer exist
+* location: fix duplication of port bindings on submit
+* Update translations
+* location: show what DNS is being overwritten in location UI
+* backup site: remove the local disk provider
+* mail: update haraka to 3.1.4, tika to 3.3.0
+* solr: dynamically allocate java heap based on container mem
+

README.md

@@ -45,20 +45,19 @@ Try our demo at https://my.demo.cloudron.io (username: cloudron password: cloudr
 
 [Install script](https://docs.cloudron.io/installation/) - [Pricing](https://cloudron.io/pricing.html)
 
-**Note:** This repo is a small part of what gets installed on your server - there is
+**Note:** This repo is just a part of what gets installed on the server. Database addons,
-the dashboard, database addons, graph container, base image etc. Cloudron also relies
+Mail Server, Stat contains etc are not part of this repo. As such, don't clone this repo and
-on external services such as the App Store for apps to be installed. As such, don't
+npm install and expect something to work.
-clone this repo and npm install and expect something to work.
 
 ## License
 
 Please note that the Cloudron code is under a source-available license. This is not the same as an
-open source license but ensures the code is available for introspection (and hacking!).
+open source license but ensures the code is available for transparency and introspection (and hacking!).
 
 ## Contributions
 
-Just to give some heads up, we are a bit restrictive in merging changes. We are a small team and
+We are very restrictive in merging changes. We are a small team and would like to keep our maintenance burden low,
-would like to keep our maintenance burden low. It might be best to discuss features first in the [forum](https://forum.cloudron.io),
+not to mention legal issues. It might be best to discuss features first in the [forum](https://forum.cloudron.io),
 to also figure out how many other people will use it to justify maintenance for a feature.
 
 # Localization

box.js

@@ -1,16 +1,19 @@
 #!/usr/bin/env node
 
-'use strict';
+import constants from './src/constants.js';
+import fs from 'node:fs';
+import ldapServer from './src/ldapserver.js';
+import net from 'node:net';
+import authServer from './src/authserver.js';
+import oidcServer from './src/oidcserver.js';
+import paths from './src/paths.js';
+import proxyAuth from './src/proxyauth.js';
+import safe from '@cloudron/safetydance';
+import server from './src/server.js';
+import directoryServer from './src/directoryserver.js';
+import logger from './src/logger.js';
 
-const constants = require('./src/constants.js'),
+const { log } = logger('box');
-    fs = require('fs'),
-    ldapServer = require('./src/ldapserver.js'),
-    oidc = require('./src/oidc.js'),
-    paths = require('./src/paths.js'),
-    proxyAuth = require('./src/proxyauth.js'),
-    safe = require('safetydance'),
-    server = require('./src/server.js'),
-    directoryServer = require('./src/directoryserver.js');
 
 let logFd;
 
@@ -25,9 +28,18 @@ async function setupLogging() {
     };
 }
 
+// happy eyeballs workaround. when there is no ipv6, nodejs timesout prematurely since the default for ipv4 is just 250ms
+// https://github.com/nodejs/node/issues/54359
+async function setupNetworking() {
+    net.setDefaultAutoSelectFamilyAttemptTimeout(2500);
+}
+
 // this is also used as the 'uncaughtException' handler which can only have synchronous functions
 function exitSync(status) {
-    if (status.error) fs.write(logFd, status.error.stack + '\n', function () {});
+    const ts = new Date().toISOString();
+    if (status.message) fs.write(logFd, `${ts} ${status.message}\n`, function () {});
+    const msg = status.error.stack.replace(/\n/g, `\n${ts} `); // prefix each line with ts
+    if (status.error) fs.write(logFd, `${ts} ${msg}\n`, function () {});
     fs.fsyncSync(logFd);
     fs.closeSync(logFd);
     process.exit(status.code);
@@ -35,6 +47,7 @@ function exitSync(status) {
 
 async function startServers() {
     await setupLogging();
+    await setupNetworking();
     await server.start(); // do this first since it also inits the database
     await proxyAuth.start();
     await ldapServer.start();
@@ -43,42 +56,45 @@ async function startServers() {
     if (conf.enabled) await directoryServer.start();
 }
 
-async function main() {
+const [error] = await safe(startServers());
-    const [error] = await safe(startServers());
+if (error) exitSync({ error, code: 1, message: 'Error starting servers' });
-    if (error) return exitSync({ error: new Error(`Error starting server: ${JSON.stringify(error)}`), code: 1 });
 
-    // require this here so that logging handler is already setup
+process.on('SIGHUP', async function () {
-    const debug = require('debug')('box:box');
+    log('Received SIGHUP. Re-reading configs.');
+    const conf = await directoryServer.getConfig();
+    if (conf.enabled) await directoryServer.checkCertificate();
+});
 
-    process.on('SIGHUP', async function () {
+process.on('SIGINT', async function () {
-        debug('Received SIGHUP. Re-reading configs.');
+    log('Received SIGINT. Shutting down.');
-        const conf = await directoryServer.getConfig();
-        if (conf.enabled) await directoryServer.checkCertificate();
-    });
 
-    process.on('SIGINT', async function () {
+    await proxyAuth.stop();
-        debug('Received SIGINT. Shutting down.');
+    await server.stop();
+    await directoryServer.stop();
+    await ldapServer.stop();
+    await oidcServer.stop();
+    await authServer.stop();
 
-        await proxyAuth.stop();
+    setTimeout(() => {
-        await server.stop();
+        log('Shutdown complete');
-        await directoryServer.stop();
+        process.exit();
-        await ldapServer.stop();
+    }, 2000); // need to wait for the task processes to die
-        await oidc.stop();
+});
-        setTimeout(process.exit.bind(process), 3000);
-    });
 
-    process.on('SIGTERM', async function () {
+process.on('SIGTERM', async function () {
-        debug('Received SIGTERM. Shutting down.');
+    log('Received SIGTERM. Shutting down.');
 
-        await proxyAuth.stop();
+    await proxyAuth.stop();
-        await server.stop();
+    await server.stop();
-        await directoryServer.stop();
+    await directoryServer.stop();
-        await ldapServer.stop();
+    await ldapServer.stop();
-        await oidc.stop();
+    await oidcServer.stop();
-        setTimeout(process.exit.bind(process), 3000);
+    await authServer.stop();
-    });
 
-    process.on('uncaughtException', (error) => exitSync({ error, code: 1 }));
+    setTimeout(() => {
-}
+        log('Shutdown complete');
+        process.exit();
+    }, 2000); // need to wait for the task processes to die
+});
 
-main();
+process.on('uncaughtException', (uncaughtError) => exitSync({ error: uncaughtError, code: 1, message: 'From uncaughtException handler.' }));

dashboard/.gitattributes

@@ -1,6 +0,0 @@
-# following files are skipped when exporting using git archive
-test export-ignore
-docs export-ignore
-.gitattributes export-ignore
-.gitignore export-ignore
-

dashboard/.gitignore

@@ -1,11 +1,13 @@
-dist/
 node_modules/
 
 # vim swap files
 *.swp
 
+dist/
+
 # these are not done yet
-src/translation/ja.json
+public/translation/ja.json
-src/translation/pl.json
+public/translation/pl.json
-src/translation/si.json
+public/translation/si.json
-src/translation/gl.json
+public/translation/gl.json
+public/translation/hr.json

dashboard/.jshintrc

@@ -1,20 +0,0 @@
-{
-    "node": true,
-    "browser": true,
-    "unused": true,
-    "esversion": 6,
-    "globalstrict": false,
-    "predef": [
-        "$",
-        "angular",
-        "async",
-        "describe",
-        "it",
-        "before",
-        "after",
-        "require",
-        "monaco",
-        "Mimer",
-        "ISTATES"
-    ]
-}

dashboard/LICENSE

@@ -1,35 +0,0 @@
-The Cloudron Subscription license
-Copyright (c) 2022 Cloudron UG
-
-With regard to the Cloudron Software:
-
-This software and associated documentation files (the "Software") may only be
-used in production, if you (and any entity that you represent) have agreed to,
-and are in compliance with, the Cloudron Subscription Terms of Service, available
-at https://cloudron.io/legal/terms.html (the “Subscription Terms”), or other
-agreement governing the use of the Software, as agreed by you and Cloudron,
-and otherwise have a valid Cloudron Subscription. Subject to the foregoing sentence,
-you are free to modify this Software and publish patches to the Software. You agree
-that Subscription and/or its licensors (as applicable) retain all right, title and
-interest in and to all such modifications and/or patches, and all such modifications
-and/or patches may only be used, copied, modified, displayed, distributed, or otherwise
-exploited with a valid Cloudron subscription. Notwithstanding the foregoing, you may copy
-and modify the Software for development and testing purposes, without requiring a
-subscription.  You agree that Cloudron and/or its licensors (as applicable) retain
-all right, title and interest in and to all such modifications.  You are not
-granted any other rights beyond what is expressly stated herein.  Subject to the
-foregoing, it is forbidden to copy, merge, publish, distribute, sublicense,
-and/or sell the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
-THE SOFTWARE.
-
-For all third party components incorporated into the Cloudron Software, those
-components are licensed under the original license provided by the owner of the
-applicable component.
-

dashboard/README.md

@@ -1,20 +0,0 @@
-# Cloudron Dashboard
-
-This is the front end code of Cloudron. The backend code is [here](https://git.cloudron.io/cloudron/box).
-
-## Developing
-
-* `npm install`
-* `gulp develop --api-origin=https://my.example.com`
-
-## License
-
-Please note that the Cloudron code is under a source-available license. This is not the same as an
-open source license but ensures the code is available for inspection (and hacking!).
-
-## Contributions
-
-Just to give a heads-up, we are a bit restrictive in merging changes. We are a small team and
-would like to keep our maintenance burden low. It might be best to first discuss features in the [forum](https://forum.cloudron.io),
-which also helps to determine how many other people will use it to justify maintenance for a feature.
-

dashboard/TRANSLATIONS.md

@@ -0,0 +1,99 @@
+
+## Translations
+
+This documents the convention used for the text in the UI.
+
+### Tale of Two Cases
+
+**Title Case**
+
+All words are capitalized. In title case, articles (a/an/the), conjunctions (and/but/or/...)
+and prepositions (on/at/...) inside a phrase are not capitalized. Everything else is capitalized
+- noun, pronoun, verb, adverb.
+
+Examples:
+
+* "Sign In to Your Account"
+* "Terms and Conditions"
+* "Getting Started with GraphQL"
+* "Between You and Me"
+
+**Sentence Case**
+
+Only first word is capitalized.
+
+### UI Conventions
+
+Keeping as much as possible in Sentence Case helps in sharing the same strings.
+
+| Element        | Recommended Style      | Example                          |
+| -------------- | ---------------------- | -------------------------------- |
+| Headings       | Title Case             | Manage Account                   |
+| Sub heading    | Title Case             | Create Admin Account             |
+| Section/Card   | Title Case             | System Information               |
+| Form Labels    | Sentence case          | Email address                    |
+| Form Groups    | Sentence case          | Volume mounts, Data directory    |
+| Table headings | Sentence case          | Memory limit                     |
+| Info sections  | Sentence case          | Cloudron version                 |
+| Buttons        | Sentence case          | Save changes                     |
+| Radio Buttons  | Sentence case          | Option one / Option two          |
+| Checkbox       | Sentence case          | Use CIFS encryption              |
+| Menu action    | Sentence case          | Select all                       |
+| Switches       | Sentence case          | Allow users to edit email        |
+| Descriptions   | Sentence case          | Enter your password to continue. |
+| Tooltips       | Sentence case          | Click to edit.                   |
+| Error Messages | Sentence case          | Password is too short            |
+| Notifications  | Sentence case          | Settings saved successfully.     |
+| Legend (graph) | Sentence case          | Docker volume, Box data.         |
+| Placeholders   | Sentence case          | Comma separated IPs or subnets   |
+
+Hints in brackets are small case. Like "(comma separated)".
+
+### Full Stops
+
+Sentence fragments like form hints and tooltips (which are always visible) do not need a full stop.
+All other full sentences do.
+
+Description has a full stop unless it's a hint/phrase.
+
+instructional heading in dialogs (like the object being configured) should not have a full stop.
+
+Switch UI description does not have a fullstop.
+
+Setting item description does not need a fullstop (usually).
+
+Checkbox labels do not have a full stop at the end.
+
+No full stop → short labels, commands, headings, or action text (“Configure Service {{serviceName}}”).
+
+Full stop → descriptive text or sentences explaining a setting (“The IPv4 address used for DNS A records.”).
+
+### Dialog Buttons
+
+'Add' for addition
+'Cancel' to cancel
+'Save' for edit/update
+'Remove' for non-destructive/less destructive things (app password remove)
+'Delete' for destructive (user delete)
+
+'Close' - Only for dialogs with the only button
+
+### Dialog Text
+
+When asking for confirmation simply ask 'Remove app password "xxx"' . Don't use "really"
+or other emotional terms. Quote the password/domain name.
+
+In general, we put just "Delete User" in Title and provide the username in the context.
+
+Title = action (what you’re doing)
+Description = context (to whom it applies)
+
+### Description Text
+
+| Context                           | Verb form                | Example                                                                |
+| --------------------------------- | ------------------------ | ---------------------------------------------------------------------- |
+| **Action / Button / Instruction** | **Imperative** → “Add”   | Button: **Add**, Tooltip: “Add a new link”                             |
+| **Section / View description**    | **Imperative** → “Add”   | Description: **Adds shortcuts to external services on the dashboard.** |
+
+We use plural when possible. "Admins can ..." , "Operators can ..."
+

dashboard/activation.html

@@ -0,0 +1,10 @@
+<!DOCTYPE html>
+<html lang="en">
+  <head>
+    <title>Cloudron Admin Setup</title>
+  </head>
+  <body>
+    <div id="app" style="overflow: hidden; height: 100%;"></div>
+    <script type="module" src="/src/activation.js"></script>
+  </body>
+</html>

dashboard/authcallback.html

@@ -0,0 +1,60 @@
+<!DOCTYPE html>
+
+<script>
+
+(async function () {
+    const params = new URLSearchParams(window.location.search);
+    const code = params.get('code');
+
+    if (!code) {
+        console.error('No authorization code in callback URL');
+        window.location.replace('/');
+        return;
+    }
+
+    const codeVerifier = sessionStorage.getItem('pkce_code_verifier');
+    const clientId = sessionStorage.getItem('pkce_client_id') || 'cid-webadmin';
+    const apiOrigin = sessionStorage.getItem('pkce_api_origin') || '';
+
+    sessionStorage.removeItem('pkce_code_verifier');
+    sessionStorage.removeItem('pkce_client_id');
+    sessionStorage.removeItem('pkce_api_origin');
+
+    try {
+        const response = await fetch(apiOrigin + '/openid/token', {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+            body: new URLSearchParams({
+                grant_type: 'authorization_code',
+                code: code,
+                client_id: clientId,
+                redirect_uri: window.location.origin + '/authcallback.html',
+                code_verifier: codeVerifier
+            })
+        });
+
+        const data = await response.json();
+
+        if (!response.ok || !data.access_token) {
+            console.error('Token exchange failed', data);
+            window.location.replace('/');
+            return;
+        }
+
+        localStorage.token = data.access_token;
+    } catch (e) {
+        console.error('Token exchange error', e);
+        window.location.replace('/');
+        return;
+    }
+
+    let redirectTo = '/';
+    if (localStorage.getItem('redirectToHash')) {
+        redirectTo += localStorage.getItem('redirectToHash');
+        localStorage.removeItem('redirectToHash');
+    }
+
+    window.location.replace(redirectTo);
+})();
+
+</script>

dashboard/build.sh

@@ -0,0 +1,11 @@
+#!/bin/bash
+
+set -eu
+
+echo "=> Create timezones.js"
+./scripts/createTimezones.cjs ./public/js/timezones.js
+
+export VITE_CACHE_ID=$(date +%s)
+
+echo "=> Build the dashboard apps"
+npm run build

dashboard/develop.sh

@@ -0,0 +1,17 @@
+#!/bin/bash
+
+set -eu
+
+# Check if the API origin is set, if not prompt the user to enter it
+if [[ -z "${DASHBOARD_DEVELOPMENT_ORIGIN:-}" ]]; then
+  read -p "Enter the API origin (e.g. http://localhost:3000): " DASHBOARD_DEVELOPMENT_ORIGIN
+fi
+
+echo "=> Set API origin"
+export VITE_API_ORIGIN="${DASHBOARD_DEVELOPMENT_ORIGIN}"
+
+# only really used for prod builds to bust cache
+export VITE_CACHE_ID="develop"
+
+echo "=> Run vite locally"
+npm run dev

dashboard/eslint.config.js

@@ -0,0 +1,21 @@
+import js from '@eslint/js';
+import pluginVue from 'eslint-plugin-vue';
+import globals from 'globals';
+
+export default [
+    js.configs.recommended,
+    ...pluginVue.configs['flat/essential'],
+    {
+        languageOptions: {
+            globals: globals.browser,
+        },
+        rules: {
+            "semi": "error",
+            "prefer-const": "error",
+            "vue/no-reserved-component-names": "off",
+            "vue/multi-word-component-names": "off",
+            "vue/no-undef-components": "error",
+            'vue/no-root-v-if': "error",
+        }
+    }
+];

dashboard/filemanager.html

@@ -0,0 +1,10 @@
+<!DOCTYPE html>
+<html lang="en">
+  <head>
+    <title>File Manager</title>
+  </head>
+  <body>
+    <div id="app"></div>
+    <script type="module" src="/src/filemanager.js"></script>
+  </body>
+</html>

dashboard/gulpfile.js

@@ -1,217 +0,0 @@
-/* jslint node:true */
-
-'use strict';
-
-const argv = require('yargs').argv,
-    concat = require('gulp-concat'),
-    ejs = require('gulp-ejs'),
-    execSync = require('child_process').execSync,
-    fs = require('fs'),
-    gulp = require('gulp'),
-    sass = require('gulp-sass')(require('sass')),
-    serve = require('gulp-serve'),
-    sourcemaps = require('gulp-sourcemaps');
-
-if (argv.help || argv.h) {
-    console.log('Supported arguments for "gulp develop":');
-    console.log(' --api-origin <cloudron api uri>');
-    console.log(' --revision <revision>');
-    console.log(' --appstore-console-origin <appstore console uri>');
-
-    process.exit(1);
-}
-
-const revision = argv.revision || '';
-
-let apiOrigin = '';
-if (argv.apiOrigin) {
-    if (argv.apiOrigin.indexOf('https://') === 0) apiOrigin = argv.apiOrigin;
-    else apiOrigin = 'https://' + argv.apiOrigin;
-}
-
-var appstore = {
-    consoleOrigin: argv.appstoreConsoleOrigin || ''
-};
-
-console.log();
-console.log('Cloudron API:          %s', apiOrigin || 'default');
-console.log('Building for revision: %s', revision);
-console.log();
-console.log('Overriding appstore origin:');
-console.log(' Console: %s', appstore.consoleOrigin || 'no');
-console.log();
-
-gulp.task('fontawesome', function () {
-    return gulp.src('node_modules/@fortawesome/fontawesome-free/**/*')
-        .pipe(gulp.dest('dist/3rdparty/fontawesome/'));
-});
-
-gulp.task('noto-sans', function () {
-    return gulp.src('node_modules/@fontsource/noto-sans/**/*')
-        .pipe(gulp.dest('dist/3rdparty/noto-sans/'));
-});
-
-gulp.task('bootstrap', function () {
-    return gulp.src('node_modules/bootstrap-sass/assets/javascripts/bootstrap.min.js')
-        .pipe(gulp.dest('dist/3rdparty/js'));
-});
-
-gulp.task('moment', function () {
-    return gulp.src('node_modules/moment/min/*')
-        .pipe(gulp.dest('dist/3rdparty/js'));
-});
-
-gulp.task('3rdparty-copy', function () {
-    return gulp.src([
-        'src/3rdparty/**/*.js',
-        'src/3rdparty/**/*.map',
-        'src/3rdparty/**/*.css',
-        'src/3rdparty/**/*.otf',
-        'src/3rdparty/**/*.eot',
-        'src/3rdparty/**/*.svg',
-        'src/3rdparty/**/*.gif',
-        'src/3rdparty/**/*.ttf',
-        'node_modules/chart.js/dist/chart.umd.js'
-    ]).pipe(gulp.dest('dist/3rdparty/'));
-});
-
-gulp.task('3rdparty', gulp.series(['3rdparty-copy', 'moment', 'bootstrap', 'fontawesome', 'noto-sans']));
-
-// --------------
-// JavaScript
-// --------------
-
-gulp.task('js-index', function () {
-    return gulp.src([
-        'src/js/index.js',
-        'src/js/client.js',
-        'src/js/utils.js',
-        'src/views/*.js'
-    ])
-        .pipe(ejs({ apiOrigin: apiOrigin, revision: revision, appstore: appstore }, {}, { ext: '.js' }))
-        .pipe(sourcemaps.init())
-        .pipe(concat('index.js', { newLine: ';' }))
-        .pipe(sourcemaps.write())
-        .pipe(gulp.dest('dist/js'));
-});
-
-gulp.task('js-passwordreset', function () {
-    return gulp.src(['src/js/passwordreset.js', 'src/js/utils.js'])
-        .pipe(ejs({ apiOrigin: apiOrigin, revision: revision, appstore: appstore }, {}, { ext: '.js' }))
-        .pipe(sourcemaps.init())
-        .pipe(concat('passwordreset.js', { newLine: ';' }))
-        .pipe(sourcemaps.write())
-        .pipe(gulp.dest('dist/js'));
-});
-
-gulp.task('js-setupaccount', function () {
-    return gulp.src(['src/js/setupaccount.js', 'src/js/utils.js'])
-        .pipe(ejs({ apiOrigin: apiOrigin, revision: revision, appstore: appstore }, {}, { ext: '.js' }))
-        .pipe(sourcemaps.init())
-        .pipe(concat('setupaccount.js', { newLine: ';' }))
-        .pipe(sourcemaps.write())
-        .pipe(gulp.dest('dist/js'));
-});
-
-gulp.task('js-activation', function () {
-    return gulp.src(['src/js/activation.js', 'src/js/client.js', 'src/js/utils.js'])
-        .pipe(ejs({ apiOrigin: apiOrigin, revision: revision, appstore: appstore }, {}, { ext: '.js' }))
-        .pipe(sourcemaps.init())
-        .pipe(concat('activation.js', { newLine: ';' }))
-        .pipe(sourcemaps.write())
-        .pipe(gulp.dest('dist/js'));
-});
-
-gulp.task('js-setup', function () {
-    return gulp.src(['src/js/setup.js', 'src/js/client.js', 'src/js/utils.js'])
-        .pipe(ejs({ apiOrigin: apiOrigin, revision: revision, appstore: appstore }, {}, { ext: '.js' }))
-        .pipe(sourcemaps.init())
-        .pipe(concat('setup.js', { newLine: ';' }))
-        .pipe(sourcemaps.write())
-        .pipe(gulp.dest('dist/js'));
-});
-
-gulp.task('js-restore', function () {
-    return gulp.src(['src/js/restore.js', 'src/js/client.js', 'src/js/utils.js'])
-        .pipe(ejs({ apiOrigin: apiOrigin, revision: revision, appstore: appstore }, {}, { ext: '.js' }))
-        .pipe(sourcemaps.init())
-        .pipe(concat('restore.js', { newLine: ';' }))
-        .pipe(sourcemaps.write())
-        .pipe(gulp.dest('dist/js'));
-});
-
-gulp.task('js', gulp.series([ 'js-index', 'js-passwordreset', 'js-setupaccount', 'js-activation', 'js-setup', 'js-restore' ]));
-
-// --------------
-// HTML
-// --------------
-
-gulp.task('html-views', function () {
-    return gulp.src('src/views/**/*.html').pipe(gulp.dest('dist/views'));
-});
-
-gulp.task('html-raw', function () {
-    return gulp.src('src/*.html').pipe(ejs({ apiOrigin: apiOrigin, revision: revision }, {}, { ext: '.html' })).pipe(gulp.dest('dist'));
-});
-
-gulp.task('html', gulp.series(['html-views', 'html-raw']));
-
-// --------------
-// CSS
-// --------------
-
-gulp.task('css', function () {
-    return gulp.src('src/*.scss')
-        .pipe(sass({ includePaths: [
-            'node_modules/bootstrap-sass/assets/stylesheets/',
-            'node_modules/@fontsource/'
-        ]}).on('error', sass.logError))
-        .pipe(gulp.dest('dist'));
-});
-
-gulp.task('images', function () {
-    return gulp.src('src/img/**')
-        .pipe(gulp.dest('dist/img'));
-});
-
-gulp.task('translation', function () {
-    return gulp.src('src/translation/**')
-        .pipe(gulp.dest('dist/translation'));
-});
-
-gulp.task('timezones', function (done) {
-    execSync('./scripts/createTimezones.js ./dist/js/timezones.js');
-    done();
-});
-
-// --------------
-// Utilities
-// --------------
-
-gulp.task('clean', function (done) {
-    fs.rm('dist', { recursive: true, force: true }, done);
-});
-
-gulp.task('default', gulp.series(['clean', 'html', 'js', 'timezones', '3rdparty', 'translation', 'images', 'css']));
-
-gulp.task('watch', function (done) {
-    gulp.watch(['src/*.scss'], gulp.series(['css']));
-    gulp.watch(['src/img/*'], gulp.series(['images']));
-    gulp.watch(['src/translation/*'], gulp.series(['translation']));
-    gulp.watch(['src/**/*.html'], gulp.series(['html']));
-    gulp.watch(['src/views/*.html'], gulp.series(['html-views']));
-    gulp.watch(['scripts/createTimezones.js', 'src/js/utils.js'], gulp.series(['timezones']));
-    gulp.watch(['src/js/activation.js', 'src/js/client.js', 'src/js/utils.js'], gulp.series(['js-activation']));
-    gulp.watch(['src/js/setup.js', 'src/js/client.js', 'src/js/utils.js'], gulp.series(['js-setup']));
-    gulp.watch(['src/js/restore.js', 'src/js/client.js', 'src/js/utils.js'], gulp.series(['js-restore']));
-    gulp.watch(['src/js/passwordreset.js', 'src/js/utils.js'], gulp.series(['js-passwordreset']));
-    gulp.watch(['src/js/setupaccount.js', 'src/js/utils.js'], gulp.series(['js-setupaccount']));
-    gulp.watch(['src/js/index.js', 'src/js/client.js', 'src/views/*.js', 'src/js/utils.js'], gulp.series(['js-index']));
-    gulp.watch(['src/3rdparty/**/*'], gulp.series(['3rdparty']));
-    done();
-});
-
-gulp.task('serve', serve({ root: 'dist', port: 4000, hostname: '0.0.0.0' }));
-
-gulp.task('develop', gulp.series(['default', 'watch', 'serve']));
-

dashboard/index.html

@@ -0,0 +1,10 @@
+<!DOCTYPE html>
+<html lang="en">
+  <head>
+    <title><%= name %></title>
+  </head>
+  <body>
+    <div id="app" style="overflow: hidden; height: 100%;"></div>
+    <script type="module" src="/src/index.js"></script>
+  </body>
+</html>

dashboard/injectMetaTags.vite.plugin.js

@@ -0,0 +1,28 @@
+import fs from 'fs';
+import path from 'path';
+
+function injectMetaTags(templates) {
+  let config;
+  let template = fs.readFileSync(path.resolve('./src/meta-tags-header.html'), 'utf8');
+
+  return {
+    name: 'inject-meta-tags',
+    configResolved(resolvedConfig) {
+      config = resolvedConfig;
+
+      // remove all ejs content in dev mode
+      if (!config.isProduction) template = template.replace(/<%[^]*?%>/g, '');
+    },
+    transformIndexHtml: {
+      handler: function transform(html, ctx) {
+        if (templates.indexOf(ctx.filename) === -1) return html;
+
+        html = html.replace(/<head(.*)>/i, `$&\n${template}`);
+
+        return html;
+      }
+    },
+  };
+}
+
+export default injectMetaTags;

dashboard/logs.html

@@ -0,0 +1,10 @@
+<!DOCTYPE html>
+<html lang="en">
+  <head>
+    <title>Logs</title>
+  </head>
+  <body>
+    <div id="app"></div>
+    <script type="module" src="/src/logs.js"></script>
+  </body>
+</html>

dashboard/oidc_device_confirm.html

@@ -0,0 +1,16 @@
+<!DOCTYPE html>
+<html lang="en">
+  <head>
+    <title>OpenID Confirm</title>
+
+    <script>
+      window.cloudron = <%- JSON.stringify({ name, clientName, userCode, form }) %>;
+    </script>
+
+  </head>
+
+  <body>
+    <div id="app"></div>
+    <script type="module" src="/src/oidcdeviceconfirm.js"></script>
+  </body>
+</html>

dashboard/oidc_device_input.html

@@ -0,0 +1,16 @@
+<!DOCTYPE html>
+<html lang="en">
+  <head>
+    <title>OpenID Device Sign-in</title>
+
+    <script>
+      window.cloudron = <%- JSON.stringify({ name, message, form }) %>;
+    </script>
+
+  </head>
+
+  <body>
+    <div id="app"></div>
+    <script type="module" src="/src/oidcdeviceinput.js"></script>
+  </body>
+</html>

dashboard/oidc_device_success.html

@@ -0,0 +1,16 @@
+<!DOCTYPE html>
+<html lang="en">
+  <head>
+    <title>OpenID Device Success</title>
+
+    <script>
+      window.cloudron = <%- JSON.stringify({ name }) %>;
+    </script>
+
+  </head>
+
+  <body>
+    <div id="app"></div>
+    <script type="module" src="/src/oidcdevicesuccess.js"></script>
+  </body>
+</html>

dashboard/oidc_error.html

@@ -0,0 +1,16 @@
+<!DOCTYPE html>
+<html lang="en">
+  <head>
+    <title><%= name %> OpenID Error</title>
+
+    <script>
+      window.cloudron = <%- JSON.stringify({ iconUrl, name, errorMessage, footer, language }) %>;
+    </script>
+
+  </head>
+
+  <body>
+    <div id="app"></div>
+    <script type="module" src="/src/oidcerror.js"></script>
+  </body>
+</html>

dashboard/oidc_interaction_abort.html

@@ -0,0 +1,22 @@
+<!DOCTYPE html>
+<html lang="en">
+  <head>
+    <title><%= name %> OpenID Access Denied</title>
+
+    <script>
+      window.cloudron = <%- JSON.stringify({
+        iconUrl: iconUrl,
+        name: name,
+        submitUrl: submitUrl,
+        footer: footer,
+        language: language
+      }) %>;
+    </script>
+
+  </head>
+
+  <body>
+    <div id="app"></div>
+    <script type="module" src="/src/oidcinteractionabort.js"></script>
+  </body>
+</html>

dashboard/oidc_interaction_confirm.html

@@ -0,0 +1,19 @@
+<!DOCTYPE html>
+<html lang="en">
+  <head>
+    <title>Authorize <%= name %></title>
+  </head>
+<body>
+
+<form id="submitForm" method="post" action="<%- submitUrl %>">
+  <!-- <button type="submit"></button> -->
+</form>
+
+<script>
+
+document.getElementById('submitForm').submit();
+
+</script>
+
+</body>
+</html>

dashboard/oidc_login.html

@@ -0,0 +1,25 @@
+<!DOCTYPE html>
+<html lang="en">
+  <head>
+    <title><%= name %> Login</title>
+
+    <script>
+      window.cloudron = <%- JSON.stringify({
+        iconUrl: iconUrl,
+        name: name,
+        note: note,
+        submitUrl: submitUrl,
+        passkeyAuthOptionsUrl: passkeyAuthOptionsUrl,
+        passkeyLoginUrl: passkeyLoginUrl,
+        footer: footer,
+        language: language
+      }) %>;
+    </script>
+
+  </head>
+
+  <body>
+    <div id="app"></div>
+    <script type="module" src="/src/login.js"></script>
+  </body>
+</html>

dashboard/package.json

@@ -1,35 +1,33 @@
 {
-  "name": "dashboard",
+  "private": true,
-  "version": "1.0.0",
-  "description": "[Cloudron](https://cloudron.io) is the best way to run apps on your server.",
   "scripts": {
-    "test": "echo \"Error: no test specified\" && exit 1",
+    "update-translations": "curl https://translate.cloudron.io/api/components/cloudron/dashboard/file/ -o lang.zip && unzip -jo lang.zip -d ./public/translation/ && rm lang.zip",
-    "update-translations": "curl https://translate.cloudron.io/api/components/cloudron/dashboard/file/ -o lang.zip && unzip -jo lang.zip -d ./src/translation/ && rm lang.zip"
+    "dev": "vite --strictPort --port 4000",
+    "build": "rm -rf ./dist/* && vite build --config ./vite.config.mjs && vite build --config ./vite.proxyauth.config.mjs"
   },
-  "repository": {
+  "type": "module",
-    "type": "git",
-    "url": "ssh://git@git.cloudron.io:6000/cloudron/dashboard.git"
-  },
-  "author": "",
-  "license": "SEE LICENSE IN LICENSE",
   "dependencies": {
-    "@fontsource/noto-sans": "^5.0.21",
+    "@simplewebauthn/browser": "^13.3.0",
-    "@fortawesome/fontawesome-free": "^6.5.2",
+    "@cloudron/pankow": "^4.1.8",
-    "bootstrap-sass": "^3.4.3",
+    "@fontsource/inter": "^5.2.8",
-    "chart.js": "^4.4.2",
+    "@fortawesome/fontawesome-free": "^7.2.0",
-    "gulp": "^4.0.2",
+    "@vitejs/plugin-vue": "^6.0.5",
-    "gulp-concat": "^2.6.1",
+    "@xterm/addon-attach": "^0.12.0",
-    "gulp-ejs": "^5.1.0",
+    "@xterm/addon-fit": "^0.11.0",
-    "gulp-sass": "^5.1.0",
+    "@xterm/xterm": "^6.0.0",
-    "gulp-serve": "^1.4.0",
+    "anser": "^2.3.5",
-    "gulp-sourcemaps": "^3.0.0",
+    "async": "^3.2.6",
+    "chart.js": "^4.5.1",
+    "chartjs-plugin-annotation": "^3.1.0",
+    "eslint": "^10.1.0",
+    "eslint-plugin-vue": "^10.8.0",
+    "marked": "^17.0.5",
     "moment": "^2.30.1",
-    "sass": "^1.75.0",
+    "moment-timezone": "^0.6.1",
-    "yargs": "^17.7.2"
+    "vite": "^8.0.3",
-  },
+    "vite-plugin-singlefile": "^2.3.2",
-  "eslintConfig": {
+    "vue": "^3.5.31",
-    "env": {
+    "vue-i18n": "^11.3.0",
-      "browser": true
+    "vue-router": "^5.0.4"
-    }
   }
 }

dashboard/passwordreset.html

@@ -0,0 +1,21 @@
+<!DOCTYPE html>
+<html lang="en">
+  <head>
+    <title><%= name %> Password Reset</title>
+
+    <script>
+      window.cloudron = <%- JSON.stringify({
+        name: name,
+        footer: footer,
+        language: language
+      }) %>;
+    </script>
+
+  </head>
+
+  <body>
+    <div id="app"></div>
+    <script type="module" src="/src/passwordreset.js"></script>
+  </body>
+
+</html>

dashboard/proxyauth.html

@@ -0,0 +1,22 @@
+<!DOCTYPE html>
+<html lang="en">
+  <head>
+    <title><%= name %> Login</title>
+
+    <script>
+      window.cloudron = <%- JSON.stringify({
+        name: name,
+        iconUrl: iconUrl,
+        loginUrl: loginUrl,
+        language: language,
+        apiOrigin: apiOrigin
+      }) %>;
+    </script>
+
+  </head>
+
+  <body>
+    <div id="app"></div>
+    <script type="module" src="/src/proxyauth.js"></script>
+  </body>
+</html>

dashboard/public/img/app_down.svg

@@ -0,0 +1,108 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<!-- Created with Inkscape (http://www.inkscape.org/) -->
+
+<svg
+   width="546.13336"
+   height="546.13336"
+   viewBox="0 0 512.00001 512.00001"
+   id="svg4519"
+   version="1.1"
+   inkscape:version="1.4.2 (ebf0e940d0, 2025-05-08)"
+   sodipodi:docname="app_down.svg"
+   inkscape:export-filename="/home/nebulon/Cloudron/Assets/logo_115.png"
+   inkscape:export-xdpi="20.214842"
+   inkscape:export-ydpi="20.214842"
+   xml:space="preserve"
+   xmlns:inkscape="http://www.inkscape.org/namespaces/inkscape"
+   xmlns:sodipodi="http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd"
+   xmlns="http://www.w3.org/2000/svg"
+   xmlns:svg="http://www.w3.org/2000/svg"
+   xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"
+   xmlns:cc="http://creativecommons.org/ns#"
+   xmlns:dc="http://purl.org/dc/elements/1.1/"><defs
+     id="defs4521" /><sodipodi:namedview
+     id="base"
+     pagecolor="#ffffff"
+     bordercolor="#666666"
+     borderopacity="1.0"
+     inkscape:pageopacity="0.0"
+     inkscape:pageshadow="2"
+     inkscape:zoom="0.98994949"
+     inkscape:cx="250.01276"
+     inkscape:cy="238.90108"
+     inkscape:document-units="px"
+     inkscape:current-layer="g4496"
+     showgrid="false"
+     units="px"
+     inkscape:window-width="1920"
+     inkscape:window-height="1014"
+     inkscape:window-x="0"
+     inkscape:window-y="0"
+     inkscape:window-maximized="1"
+     inkscape:showpageshadow="2"
+     inkscape:pagecheckerboard="0"
+     inkscape:deskcolor="#d1d1d1" /><metadata
+     id="metadata4524"><rdf:RDF><cc:Work
+         rdf:about=""><dc:format>image/svg+xml</dc:format><dc:type
+           rdf:resource="http://purl.org/dc/dcmitype/StillImage" /><dc:title /></cc:Work></rdf:RDF></metadata><g
+     inkscape:label="Layer 1"
+     inkscape:groupmode="layer"
+     id="layer1"
+     transform="translate(0,-540.36216)"><g
+       id="g4467"
+       transform="matrix(20.50952,0,0,20.859456,-526.58031,-94.042799)"><g
+         inkscape:export-ydpi="67.349998"
+         inkscape:export-xdpi="67.349998"
+         transform="matrix(0.59473169,0,0,0.59473169,31.04719,102.48374)"
+         id="g4382"><g
+           id="g4496"><path
+             sodipodi:type="star"
+             style="opacity:1;fill:#7c7c7c;fill-opacity:1;stroke:none;stroke-width:1.10000002;stroke-miterlimit:4;stroke-dasharray:none;stroke-dashoffset:0;stroke-opacity:1"
+             id="path4162"
+             sodipodi:sides="6"
+             sodipodi:cx="12.46875"
+             sodipodi:cy="-99.893143"
+             sodipodi:r1="19.266006"
+             sodipodi:r2="16.307295"
+             sodipodi:arg1="-0.52224059"
+             sodipodi:arg2="0.0013581913"
+             inkscape:flatsided="true"
+             inkscape:rounded="0.12490573"
+             inkscape:randomized="0"
+             d="m 29.166669,-109.50348 c 1.200386,2.08567 1.17988,17.183595 -0.02617,19.265993 -1.206046,2.082397 -14.291486,9.613601 -16.697919,9.610333 -2.406432,-0.0033 -15.4713664,-7.56999 -16.671752,-9.655655 -1.2003857,-2.085666 -1.1798799,-17.183591 0.026167,-19.265991 1.2060467,-2.0824 14.2914862,-9.6136 16.6979192,-9.61033 2.406432,0.003 15.471366,7.56999 16.671752,9.65565 z"
+             transform="rotate(-30,10.993604,-99.259973)"
+             inkscape:export-xdpi="67.349998"
+             inkscape:export-ydpi="67.349998" /><rect
+             inkscape:transform-center-x="0.40624986"
+             ry="2.4183984"
+             y="-104.9176"
+             x="2.2207832"
+             height="8.7434387"
+             width="8.7434387"
+             id="rect4168-1-1"
+             style="opacity:1;fill:#ffffff;fill-opacity:1;stroke:none;stroke-width:2.29999995;stroke-miterlimit:4;stroke-dasharray:none;stroke-dashoffset:0;stroke-opacity:1" /><g
+             transform="translate(0,0.14463441)"
+             id="g4491"><rect
+               style="opacity:1;fill:#ffffff;fill-opacity:1;stroke:none;stroke-width:2.29999995;stroke-miterlimit:4;stroke-dasharray:none;stroke-dashoffset:0;stroke-opacity:1"
+               id="rect4168-1-1-7"
+               width="8.7434387"
+               height="8.7434387"
+               x="9.0890703"
+               y="-98.734459"
+               ry="2.4183986" /><rect
+               style="opacity:1;fill:#ffffff;fill-opacity:1;stroke:none;stroke-width:2.29999995;stroke-miterlimit:4;stroke-dasharray:none;stroke-dashoffset:0;stroke-opacity:1"
+               id="rect4168-1-1-7-2"
+               width="8.7434387"
+               height="8.7434387"
+               x="9.0890703"
+               y="-111.39002"
+               ry="2.4183986" /></g><ellipse
+             style="fill:#ca3636;stroke-width:1.36965;fill-opacity:1"
+             id="path1"
+             cx="23.01207"
+             cy="-89.902901"
+             rx="9.6073742"
+             ry="9.4462013" /><path
+             d="m 26.439777,-95.584412 c 0.161271,-0.368194 0.04101,-0.798203 -0.289743,-1.034712 -0.330744,-0.236504 -0.781758,-0.215002 -1.090634,0.04838 l -6.997553,6.020141 c -0.273341,0.236508 -0.371745,0.615454 -0.243273,0.948711 0.12847,0.333256 0.45648,0.559013 0.820025,0.559013 h 3.047762 l -2.101999,4.821487 c -0.161272,0.368197 -0.041,0.798206 0.289742,1.034712 0.330744,0.236506 0.781758,0.215005 1.090634,-0.04837 l 6.997553,-6.020141 c 0.273342,-0.236505 0.371745,-0.615454 0.243274,-0.948711 -0.12847,-0.333256 -0.453747,-0.556325 -0.820026,-0.556325 h -3.047762 z"
+             id="path1-7"
+             style="fill:#ffffff;stroke-width:0.027104" /></g></g></g></g></svg>

dashboard/public/img/not_found.svg

@@ -0,0 +1,108 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<!-- Created with Inkscape (http://www.inkscape.org/) -->
+
+<svg
+   width="546.13336"
+   height="546.13336"
+   viewBox="0 0 512.00001 512.00001"
+   id="svg4519"
+   version="1.1"
+   inkscape:version="1.4.2 (ebf0e940d0, 2025-05-08)"
+   sodipodi:docname="not_found.svg"
+   inkscape:export-filename="/home/nebulon/Cloudron/Assets/logo_115.png"
+   inkscape:export-xdpi="20.214842"
+   inkscape:export-ydpi="20.214842"
+   xml:space="preserve"
+   xmlns:inkscape="http://www.inkscape.org/namespaces/inkscape"
+   xmlns:sodipodi="http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd"
+   xmlns="http://www.w3.org/2000/svg"
+   xmlns:svg="http://www.w3.org/2000/svg"
+   xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"
+   xmlns:cc="http://creativecommons.org/ns#"
+   xmlns:dc="http://purl.org/dc/elements/1.1/"><defs
+     id="defs4521" /><sodipodi:namedview
+     id="base"
+     pagecolor="#ffffff"
+     bordercolor="#666666"
+     borderopacity="1.0"
+     inkscape:pageopacity="0.0"
+     inkscape:pageshadow="2"
+     inkscape:zoom="0.98994949"
+     inkscape:cx="250.01276"
+     inkscape:cy="239.91123"
+     inkscape:document-units="px"
+     inkscape:current-layer="g4496"
+     showgrid="false"
+     units="px"
+     inkscape:window-width="1920"
+     inkscape:window-height="1014"
+     inkscape:window-x="0"
+     inkscape:window-y="0"
+     inkscape:window-maximized="1"
+     inkscape:showpageshadow="2"
+     inkscape:pagecheckerboard="0"
+     inkscape:deskcolor="#d1d1d1" /><metadata
+     id="metadata4524"><rdf:RDF><cc:Work
+         rdf:about=""><dc:format>image/svg+xml</dc:format><dc:type
+           rdf:resource="http://purl.org/dc/dcmitype/StillImage" /><dc:title /></cc:Work></rdf:RDF></metadata><g
+     inkscape:label="Layer 1"
+     inkscape:groupmode="layer"
+     id="layer1"
+     transform="translate(0,-540.36216)"><g
+       id="g4467"
+       transform="matrix(20.50952,0,0,20.859456,-526.58031,-94.042799)"><g
+         inkscape:export-ydpi="67.349998"
+         inkscape:export-xdpi="67.349998"
+         transform="matrix(0.59473169,0,0,0.59473169,31.04719,102.48374)"
+         id="g4382"><g
+           id="g4496"><path
+             sodipodi:type="star"
+             style="opacity:1;fill:#7c7c7c;fill-opacity:1;stroke:none;stroke-width:1.10000002;stroke-miterlimit:4;stroke-dasharray:none;stroke-dashoffset:0;stroke-opacity:1"
+             id="path4162"
+             sodipodi:sides="6"
+             sodipodi:cx="12.46875"
+             sodipodi:cy="-99.893143"
+             sodipodi:r1="19.266006"
+             sodipodi:r2="16.307295"
+             sodipodi:arg1="-0.52224059"
+             sodipodi:arg2="0.0013581913"
+             inkscape:flatsided="true"
+             inkscape:rounded="0.12490573"
+             inkscape:randomized="0"
+             d="m 29.166669,-109.50348 c 1.200386,2.08567 1.17988,17.183595 -0.02617,19.265993 -1.206046,2.082397 -14.291486,9.613601 -16.697919,9.610333 -2.406432,-0.0033 -15.4713664,-7.56999 -16.671752,-9.655655 -1.2003857,-2.085666 -1.1798799,-17.183591 0.026167,-19.265991 1.2060467,-2.0824 14.2914862,-9.6136 16.6979192,-9.61033 2.406432,0.003 15.471366,7.56999 16.671752,9.65565 z"
+             transform="rotate(-30,10.993604,-99.259973)"
+             inkscape:export-xdpi="67.349998"
+             inkscape:export-ydpi="67.349998" /><rect
+             inkscape:transform-center-x="0.40624986"
+             ry="2.4183984"
+             y="-104.9176"
+             x="2.2207832"
+             height="8.7434387"
+             width="8.7434387"
+             id="rect4168-1-1"
+             style="opacity:1;fill:#ffffff;fill-opacity:1;stroke:none;stroke-width:2.29999995;stroke-miterlimit:4;stroke-dasharray:none;stroke-dashoffset:0;stroke-opacity:1" /><g
+             transform="translate(0,0.14463441)"
+             id="g4491"><rect
+               style="opacity:1;fill:#ffffff;fill-opacity:1;stroke:none;stroke-width:2.29999995;stroke-miterlimit:4;stroke-dasharray:none;stroke-dashoffset:0;stroke-opacity:1"
+               id="rect4168-1-1-7"
+               width="8.7434387"
+               height="8.7434387"
+               x="9.0890703"
+               y="-98.734459"
+               ry="2.4183986" /><rect
+               style="opacity:1;fill:#ffffff;fill-opacity:1;stroke:none;stroke-width:2.29999995;stroke-miterlimit:4;stroke-dasharray:none;stroke-dashoffset:0;stroke-opacity:1"
+               id="rect4168-1-1-7-2"
+               width="8.7434387"
+               height="8.7434387"
+               x="9.0890703"
+               y="-111.39002"
+               ry="2.4183986" /></g><ellipse
+             style="fill:#1a76bf;stroke-width:1.36965;fill-opacity:1"
+             id="path1"
+             cx="23.01207"
+             cy="-89.902901"
+             rx="9.6073742"
+             ry="9.4462013" /><path
+             d="m 22.28174,-94.476029 h -3.651649 c -0.403963,0 -0.730329,0.320891 -0.730329,0.718076 v 1.436157 c 0,0.397187 0.326366,0.718079 0.730329,0.718079 h 8.613327 c 0.09585,0 0.189429,-0.03815 0.257897,-0.105469 l 1.095495,-1.077115 c 0.141502,-0.139127 0.141502,-0.368016 0,-0.507142 l -1.095495,-1.07712 c -0.06847,-0.06732 -0.162041,-0.105466 -0.257897,-0.105466 h -3.501017 c 0,-0.397187 -0.326367,-0.718075 -0.730331,-0.718075 -0.403964,0 -0.73033,0.320888 -0.73033,0.718075 z m 5.842639,5.026544 c 0,-0.397185 -0.326366,-0.718078 -0.730331,-0.718078 h -3.651647 v -0.718076 H 22.28174 v 0.718076 h -3.501017 c -0.09585,0 -0.18943,0.03815 -0.257898,0.105468 l -1.095496,1.077117 c -0.141501,0.139127 -0.141501,0.368014 0,0.507141 l 1.095496,1.077118 c 0.06847,0.06732 0.162042,0.105467 0.257898,0.105467 h 8.613325 c 0.403965,0 0.730331,-0.320892 0.730331,-0.718078 z m -4.381978,5.026544 v -2.154233 H 22.28174 v 2.154233 c 0,0.397187 0.326366,0.718078 0.73033,0.718078 0.403964,0 0.730331,-0.320891 0.730331,-0.718078 z"
+             id="path1-3"
+             style="fill:#ffffff;stroke-width:0.0226306" /></g></g></g></g></svg>