Files
JTL-WAFI/jtl-wafi-dashboard.py

1375 lines
78 KiB
Python

#!/usr/bin/env python3
"""
JTL-WAFi Dashboard v2.2.0 - WebSocket Real-Time Dashboard
ÄNDERUNG: Keine SQLite mehr für Echtzeit-Daten!
- Alle Agent/Shop-Daten im Memory
- DB nur für: Passwort, Tokens, Sessions
- Kein Locking, keine Timeouts
v2.2.0: In-Memory Storage für maximale Performance
"""
import os
import sys
import json
import secrets
import hashlib
import asyncio
import subprocess
from datetime import datetime, timedelta, timezone
from typing import Optional, Dict, Any, List, Set
from dataclasses import dataclass, field
from collections import deque
from contextlib import asynccontextmanager
from fastapi import FastAPI, WebSocket, WebSocketDisconnect, Request, HTTPException, Form
from fastapi.responses import HTMLResponse, RedirectResponse, JSONResponse
from starlette.middleware.sessions import SessionMiddleware
import uvicorn
# =============================================================================
# VERSION & CONFIG
# =============================================================================
VERSION = "2.3.0"
DATA_DIR = "/var/lib/jtl-wafi"
SSL_DIR = "/var/lib/jtl-wafi/ssl"
SSL_CERT = "/var/lib/jtl-wafi/ssl/server.crt"
SSL_KEY = "/var/lib/jtl-wafi/ssl/server.key"
CONFIG_FILE = "/var/lib/jtl-wafi/config.json"
TOKENS_FILE = "/var/lib/jtl-wafi/tokens.json"
AGENT_TIMEOUT = 120
HISTORY_MAX_POINTS = 1000 # Max Datenpunkte pro Shop
SECRET_KEY = os.environ.get("DASHBOARD_SECRET", secrets.token_hex(32))
# =============================================================================
# UTILITY
# =============================================================================
def utc_now() -> datetime:
return datetime.now(timezone.utc)
def utc_now_str() -> str:
return utc_now().strftime("%Y-%m-%d %H:%M:%S")
def utc_now_iso() -> str:
return utc_now().strftime('%Y-%m-%dT%H:%M:%SZ')
# =============================================================================
# IN-MEMORY DATA STORE
# =============================================================================
@dataclass
class AgentData:
id: str
hostname: str
version: str = ""
os_info: Dict = field(default_factory=dict)
first_seen: str = ""
last_seen: str = ""
approved: bool = False
token: str = ""
status: str = "pending"
load_1m: float = 0.0
load_5m: float = 0.0
memory_percent: float = 0.0
uptime_seconds: int = 0
shops_total: int = 0
shops_active: int = 0
@dataclass
class ShopData:
domain: str
agent_id: str
agent_hostname: str = ""
status: str = "inactive"
mode: str = ""
geo_region: str = ""
rate_limit: int = 0
ban_duration: int = 0
link11: bool = False
link11_ip: str = ""
activated: str = ""
runtime_minutes: float = 0.0
# Stats
log_entries: int = 0
total_bans: int = 0
active_bans: int = 0
banned_bots: List[str] = field(default_factory=list)
req_per_min: float = 0.0
unique_ips: int = 0
unique_bots: int = 0
top_bots: Dict[str, int] = field(default_factory=dict)
top_ips: Dict[str, int] = field(default_factory=dict)
# History für Graph - jetzt pro Bot
history: deque = field(default_factory=lambda: deque(maxlen=HISTORY_MAX_POINTS))
bot_history: Dict[str, deque] = field(default_factory=dict) # bot_name -> deque of {timestamp, count}
class DataStore:
"""In-Memory Datenspeicher - Thread-safe durch asyncio."""
def __init__(self):
self.agents: Dict[str, AgentData] = {}
self.shops: Dict[str, ShopData] = {}
self.sessions: Dict[str, Dict] = {} # token -> {username, expires}
self._password_hash: Optional[str] = None
self._tokens: Dict[str, str] = {} # agent_id -> token
self._load_persistent_data()
def _load_persistent_data(self):
"""Lädt persistente Daten (Passwort, Tokens)."""
os.makedirs(DATA_DIR, exist_ok=True)
# Config laden (Passwort)
if os.path.exists(CONFIG_FILE):
try:
with open(CONFIG_FILE, 'r') as f:
config = json.load(f)
self._password_hash = config.get('password_hash')
except:
pass
# Tokens laden
if os.path.exists(TOKENS_FILE):
try:
with open(TOKENS_FILE, 'r') as f:
self._tokens = json.load(f)
except:
pass
def _save_config(self):
"""Speichert Config."""
with open(CONFIG_FILE, 'w') as f:
json.dump({'password_hash': self._password_hash}, f)
def _save_tokens(self):
"""Speichert Tokens."""
with open(TOKENS_FILE, 'w') as f:
json.dump(self._tokens, f)
# === Password ===
def get_password_hash(self) -> Optional[str]:
return self._password_hash
def set_password(self, password: str):
self._password_hash = hashlib.sha256(password.encode()).hexdigest()
self._save_config()
def verify_password(self, password: str) -> bool:
if not self._password_hash:
return False
return hashlib.sha256(password.encode()).hexdigest() == self._password_hash
# === Sessions ===
def create_session(self, username: str) -> str:
token = secrets.token_hex(32)
expires = (utc_now() + timedelta(hours=24)).isoformat()
self.sessions[token] = {'username': username, 'expires': expires}
return token
def verify_session(self, token: str) -> Optional[str]:
if not token or token not in self.sessions:
return None
session = self.sessions[token]
expires = datetime.fromisoformat(session['expires'])
if utc_now() > expires:
del self.sessions[token]
return None
return session['username']
def delete_session(self, token: str):
self.sessions.pop(token, None)
# === Agent Tokens ===
def get_agent_token(self, agent_id: str) -> Optional[str]:
return self._tokens.get(agent_id)
def set_agent_token(self, agent_id: str, token: str):
self._tokens[agent_id] = token
self._save_tokens()
# === Agents ===
def get_or_create_agent(self, agent_id: str, hostname: str) -> AgentData:
if agent_id not in self.agents:
self.agents[agent_id] = AgentData(
id=agent_id,
hostname=hostname,
first_seen=utc_now_str()
)
# Prüfe ob Token existiert
if agent_id in self._tokens:
self.agents[agent_id].approved = True
self.agents[agent_id].token = self._tokens[agent_id]
self.agents[agent_id].status = 'online'
return self.agents[agent_id]
def get_agent(self, agent_id: str) -> Optional[AgentData]:
return self.agents.get(agent_id)
def get_all_agents(self) -> List[Dict]:
result = []
for agent in self.agents.values():
# Status prüfen
status = agent.status
if status == 'online' and agent.last_seen:
try:
last = datetime.strptime(agent.last_seen, "%Y-%m-%d %H:%M:%S")
if (utc_now().replace(tzinfo=None) - last).total_seconds() > AGENT_TIMEOUT:
status = 'offline'
except:
pass
result.append({
'id': agent.id,
'hostname': agent.hostname,
'version': agent.version,
'status': status,
'approved': agent.approved,
'first_seen': agent.first_seen,
'last_seen': agent.last_seen,
'load_1m': agent.load_1m,
'memory_percent': agent.memory_percent,
'shops_total': agent.shops_total,
'shops_active': agent.shops_active
})
return result
# === Shops ===
def update_shop(self, agent_id: str, agent_hostname: str, shop_data: Dict) -> ShopData:
domain = shop_data.get('domain')
if domain not in self.shops:
self.shops[domain] = ShopData(domain=domain, agent_id=agent_id)
shop = self.shops[domain]
shop.agent_id = agent_id
shop.agent_hostname = agent_hostname
shop.status = shop_data.get('status', 'inactive')
shop.mode = shop_data.get('mode', '')
shop.geo_region = shop_data.get('geo_region', '')
shop.rate_limit = shop_data.get('rate_limit', 0)
shop.ban_duration = shop_data.get('ban_duration', 0)
shop.link11 = bool(shop_data.get('link11'))
shop.link11_ip = shop_data.get('link11_ip', '')
shop.activated = shop_data.get('activated', '')
shop.runtime_minutes = shop_data.get('runtime_minutes', 0)
# Stats
stats = shop_data.get('stats', {})
if stats:
shop.log_entries = stats.get('log_entries', 0)
shop.total_bans = stats.get('total_bans', 0)
shop.active_bans = stats.get('active_bans', 0)
shop.banned_bots = stats.get('banned_bots', [])
shop.req_per_min = stats.get('req_per_min', 0)
shop.unique_ips = stats.get('unique_ips', 0)
shop.unique_bots = stats.get('unique_bots', 0)
shop.top_bots = stats.get('top_bots', {})
shop.top_ips = stats.get('top_ips', {})
# History für Graph
shop.history.append({
'timestamp': utc_now_str(),
'req_per_min': shop.req_per_min,
'active_bans': shop.active_bans
})
return shop
def update_shop_stats(self, domain: str, stats: Dict):
if domain not in self.shops:
return
shop = self.shops[domain]
shop.log_entries = stats.get('log_entries', shop.log_entries)
shop.total_bans = stats.get('total_bans', shop.total_bans)
shop.active_bans = stats.get('active_bans', shop.active_bans)
shop.banned_bots = stats.get('banned_bots', shop.banned_bots)
shop.req_per_min = stats.get('req_per_min', shop.req_per_min)
shop.unique_ips = stats.get('unique_ips', shop.unique_ips)
shop.unique_bots = stats.get('unique_bots', shop.unique_bots)
shop.top_bots = stats.get('top_bots', shop.top_bots)
shop.top_ips = stats.get('top_ips', shop.top_ips)
timestamp = utc_now_str()
# Gesamt-History
shop.history.append({
'timestamp': timestamp,
'req_per_min': shop.req_per_min,
'active_bans': shop.active_bans
})
# Bot-History aktualisieren
top_bots = stats.get('top_bots', {})
for bot_name, count in top_bots.items():
if bot_name not in shop.bot_history:
shop.bot_history[bot_name] = deque(maxlen=HISTORY_MAX_POINTS)
shop.bot_history[bot_name].append({
'timestamp': timestamp,
'count': count
})
def get_shop(self, domain: str) -> Optional[ShopData]:
return self.shops.get(domain)
def get_all_shops(self) -> List[Dict]:
result = []
for shop in self.shops.values():
result.append({
'domain': shop.domain,
'agent_id': shop.agent_id,
'agent_hostname': shop.agent_hostname,
'status': shop.status,
'mode': shop.mode,
'geo_region': shop.geo_region,
'rate_limit': shop.rate_limit,
'ban_duration': shop.ban_duration,
'link11': shop.link11,
'link11_ip': shop.link11_ip,
'activated': shop.activated,
'runtime_minutes': shop.runtime_minutes,
'stats': {
'log_entries': shop.log_entries,
'total_bans': shop.total_bans,
'active_bans': shop.active_bans,
'banned_bots': shop.banned_bots,
'req_per_min': shop.req_per_min,
'unique_ips': shop.unique_ips,
'unique_bots': shop.unique_bots,
'top_bots': shop.top_bots,
'top_ips': shop.top_ips
}
})
return result
def get_shop_history(self, domain: str) -> Dict:
shop = self.shops.get(domain)
if not shop:
return {'history': [], 'bot_history': {}}
# Bot-History in JSON-serialisierbares Format
bot_history = {}
for bot_name, history in shop.bot_history.items():
bot_history[bot_name] = list(history)
return {
'history': list(shop.history),
'bot_history': bot_history
}
def get_top_shops(self, limit: int = 10, sort_by: str = 'req_per_min') -> List[Dict]:
"""Gibt Top Shops sortiert nach req_per_min oder active_bans zurück."""
shops_list = []
for shop in self.shops.values():
shops_list.append({
'domain': shop.domain,
'agent_hostname': shop.agent_hostname,
'status': shop.status,
'req_per_min': shop.req_per_min,
'active_bans': shop.active_bans,
'link11': shop.link11
})
# Sortieren
if sort_by == 'active_bans':
shops_list.sort(key=lambda x: x['active_bans'], reverse=True)
else:
shops_list.sort(key=lambda x: x['req_per_min'], reverse=True)
if limit:
return shops_list[:limit]
return shops_list
def get_stats(self) -> Dict:
agents_online = sum(1 for a in self.agents.values()
if a.approved and a.status == 'online')
agents_pending = sum(1 for a in self.agents.values() if not a.approved)
shops_active = sum(1 for s in self.shops.values() if s.status == 'active')
shops_total = len(self.shops)
shops_link11 = sum(1 for s in self.shops.values() if s.link11)
shops_direct = shops_total - shops_link11
req_per_min = sum(s.req_per_min for s in self.shops.values())
active_bans = sum(s.active_bans for s in self.shops.values())
return {
'agents_online': agents_online,
'agents_pending': agents_pending,
'shops_active': shops_active,
'shops_total': shops_total,
'shops_link11': shops_link11,
'shops_direct': shops_direct,
'req_per_min': round(req_per_min, 1),
'active_bans': active_bans
}
# Global Data Store
store = DataStore()
# =============================================================================
# SSL
# =============================================================================
def generate_ssl_certificate():
os.makedirs(SSL_DIR, exist_ok=True)
if os.path.exists(SSL_CERT) and os.path.exists(SSL_KEY):
return
print("🔐 Generiere SSL-Zertifikat...")
try:
subprocess.run([
'openssl', 'req', '-x509', '-nodes',
'-days', '3650',
'-newkey', 'rsa:2048',
'-keyout', SSL_KEY,
'-out', SSL_CERT,
'-subj', '/CN=jtl-wafi/O=JTL-WAFi/C=DE'
], check=True, capture_output=True)
os.chmod(SSL_KEY, 0o600)
os.chmod(SSL_CERT, 0o644)
print(f"✅ SSL-Zertifikat generiert: {SSL_CERT}")
except Exception as e:
print(f"❌ SSL Fehler: {e}")
raise
# =============================================================================
# CONNECTION MANAGER
# =============================================================================
class ConnectionManager:
def __init__(self):
self.agent_connections: Dict[str, WebSocket] = {}
self.browser_connections: Set[WebSocket] = set()
self.agent_hostnames: Dict[str, str] = {}
async def connect_agent(self, agent_id: str, hostname: str, websocket: WebSocket):
# Alte Verbindung schließen
if agent_id in self.agent_connections:
try:
await self.agent_connections[agent_id].close()
except:
pass
self.agent_connections[agent_id] = websocket
self.agent_hostnames[agent_id] = hostname
print(f"✅ Agent verbunden: {hostname}")
async def disconnect_agent(self, agent_id: str):
self.agent_connections.pop(agent_id, None)
hostname = self.agent_hostnames.pop(agent_id, "unknown")
# Status updaten
agent = store.get_agent(agent_id)
if agent:
agent.status = 'offline'
agent.last_seen = utc_now_str()
print(f"❌ Agent getrennt: {hostname}")
await self.broadcast_to_browsers({
'type': 'agent.offline',
'data': {'agent_id': agent_id, 'hostname': hostname}
})
async def connect_browser(self, websocket: WebSocket):
self.browser_connections.add(websocket)
print(f"🌐 Browser verbunden (Total: {len(self.browser_connections)})")
async def disconnect_browser(self, websocket: WebSocket):
self.browser_connections.discard(websocket)
print(f"🌐 Browser getrennt (Total: {len(self.browser_connections)})")
async def send_to_agent(self, agent_id: str, message: Dict):
ws = self.agent_connections.get(agent_id)
if ws:
try:
await ws.send_json(message)
except Exception as e:
print(f"Send to agent error: {e}")
async def broadcast_to_browsers(self, message: Dict):
dead = set()
for ws in self.browser_connections:
try:
await ws.send_json(message)
except:
dead.add(ws)
self.browser_connections -= dead
def get_agent_for_shop(self, domain: str) -> Optional[str]:
shop = store.get_shop(domain)
return shop.agent_id if shop else None
def is_agent_connected(self, agent_id: str) -> bool:
return agent_id in self.agent_connections
manager = ConnectionManager()
# =============================================================================
# FASTAPI APP
# =============================================================================
@asynccontextmanager
async def lifespan(app: FastAPI):
generate_ssl_certificate()
yield
app = FastAPI(title="JTL-WAFi Dashboard", version=VERSION, lifespan=lifespan)
app.add_middleware(SessionMiddleware, secret_key=SECRET_KEY, session_cookie="geoip_session", max_age=86400)
# =============================================================================
# AUTH HELPERS
# =============================================================================
async def get_current_user(request: Request) -> Optional[str]:
token = request.session.get("token")
return store.verify_session(token)
# =============================================================================
# WEBSOCKET: AGENT
# =============================================================================
@app.websocket("/ws/agent")
async def agent_websocket(websocket: WebSocket):
await websocket.accept()
agent_id = None
try:
async for message in websocket.iter_text():
try:
data = json.loads(message)
event_type = data.get('type')
event_data = data.get('data', {})
if event_type == 'agent.connect':
agent_id = event_data.get('agent_id')
hostname = event_data.get('hostname')
token = event_data.get('token')
version = event_data.get('version', '')
os_info = event_data.get('os_info', {})
shops_summary = event_data.get('shops_summary', {})
# Agent registrieren
agent = store.get_or_create_agent(agent_id, hostname)
agent.hostname = hostname
agent.version = version
agent.os_info = os_info
agent.last_seen = utc_now_str()
agent.shops_total = shops_summary.get('total', 0)
agent.shops_active = shops_summary.get('active', 0)
# Token prüfen
stored_token = store.get_agent_token(agent_id)
if stored_token and token == stored_token:
agent.approved = True
agent.token = stored_token
agent.status = 'online'
await manager.connect_agent(agent_id, hostname, websocket)
# Browser informieren
await manager.broadcast_to_browsers({
'type': 'agent.online' if agent.approved else 'agent.pending',
'data': {
'agent_id': agent_id,
'hostname': hostname,
'version': version,
'status': agent.status,
'approved': agent.approved,
'shops_total': shops_summary.get('total', 0),
'shops_active': shops_summary.get('active', 0)
}
})
# Token senden wenn approved
if agent.approved:
await websocket.send_json({
'type': 'auth.approved',
'data': {'token': agent.token}
})
elif event_type == 'agent.heartbeat':
if agent_id:
agent = store.get_agent(agent_id)
if agent:
system = event_data.get('system', {})
shops_summary = event_data.get('shops_summary', {})
agent.last_seen = utc_now_str()
agent.load_1m = system.get('load_1m', 0)
agent.load_5m = system.get('load_5m', 0)
agent.memory_percent = system.get('memory_percent', 0)
agent.uptime_seconds = system.get('uptime_seconds', 0)
agent.shops_total = shops_summary.get('total', 0)
agent.shops_active = shops_summary.get('active', 0)
await manager.broadcast_to_browsers({
'type': 'agent.update',
'data': {
'agent_id': agent_id,
'hostname': agent.hostname,
'system': system,
'shops_summary': shops_summary
}
})
elif event_type == 'shop.full_update':
if agent_id:
agent = store.get_agent(agent_id)
hostname = agent.hostname if agent else ''
shops = event_data.get('shops', [])
for shop_data in shops:
store.update_shop(agent_id, hostname, shop_data)
await manager.broadcast_to_browsers({
'type': 'shop.full_update',
'data': {
'agent_id': agent_id,
'hostname': hostname,
'shops': shops
}
})
elif event_type == 'shop.stats':
if agent_id:
domain = event_data.get('domain')
stats = event_data.get('stats', {})
store.update_shop_stats(domain, stats)
await manager.broadcast_to_browsers({
'type': 'shop.stats',
'data': {'domain': domain, 'stats': stats}
})
elif event_type == 'log.entry':
await manager.broadcast_to_browsers({
'type': 'log.entry',
'data': event_data
})
elif event_type == 'bot.banned':
await manager.broadcast_to_browsers({
'type': 'bot.banned',
'data': event_data
})
elif event_type == 'command.result':
await manager.broadcast_to_browsers({
'type': 'command.result',
'data': event_data
})
except json.JSONDecodeError:
pass
except Exception as e:
print(f"Agent message error: {e}")
except WebSocketDisconnect:
pass
except Exception as e:
print(f"Agent WebSocket error: {e}")
finally:
if agent_id:
await manager.disconnect_agent(agent_id)
# =============================================================================
# WEBSOCKET: BROWSER
# =============================================================================
@app.websocket("/ws/dashboard")
async def dashboard_websocket(websocket: WebSocket):
await websocket.accept()
await manager.connect_browser(websocket)
try:
# Initial state senden
await websocket.send_json({
'type': 'initial_state',
'data': {
'agents': store.get_all_agents(),
'shops': store.get_all_shops(),
'stats': store.get_stats()
}
})
async for message in websocket.iter_text():
try:
data = json.loads(message)
event_type = data.get('type')
event_data = data.get('data', {})
if event_type == 'log.subscribe':
domain = event_data.get('shop')
agent_id = manager.get_agent_for_shop(domain)
if agent_id:
await manager.send_to_agent(agent_id, {
'type': 'log.subscribe',
'data': {'shop': domain}
})
elif event_type == 'log.unsubscribe':
domain = event_data.get('shop')
agent_id = manager.get_agent_for_shop(domain)
if agent_id:
await manager.send_to_agent(agent_id, {
'type': 'log.unsubscribe',
'data': {'shop': domain}
})
elif event_type == 'get_shop_history':
domain = event_data.get('domain')
data = store.get_shop_history(domain)
await websocket.send_json({
'type': 'shop_history',
'data': {'domain': domain, **data}
})
elif event_type == 'get_top_shops':
sort_by = event_data.get('sort_by', 'req_per_min')
limit = event_data.get('limit', 10)
shops = store.get_top_shops(limit=limit, sort_by=sort_by)
await websocket.send_json({
'type': 'top_shops',
'data': {'shops': shops, 'sort_by': sort_by}
})
elif event_type == 'get_all_shops_sorted':
sort_by = event_data.get('sort_by', 'req_per_min')
shops = store.get_top_shops(limit=None, sort_by=sort_by)
await websocket.send_json({
'type': 'all_shops_sorted',
'data': {'shops': shops, 'sort_by': sort_by}
})
elif event_type == 'refresh':
await websocket.send_json({
'type': 'refresh',
'data': {
'agents': store.get_all_agents(),
'shops': store.get_all_shops(),
'stats': store.get_stats()
}
})
except Exception as e:
print(f"Browser message error: {e}")
except WebSocketDisconnect:
pass
except Exception as e:
print(f"Browser WebSocket error: {e}")
finally:
await manager.disconnect_browser(websocket)
# =============================================================================
# HTTP ENDPOINTS
# =============================================================================
@app.get("/", response_class=HTMLResponse)
async def root(request: Request):
user = await get_current_user(request)
if not store.get_password_hash():
return get_setup_html()
if not user:
return get_login_html()
return get_dashboard_html()
@app.post("/setup")
async def setup(request: Request, password: str = Form(...), confirm: str = Form(...)):
if store.get_password_hash():
raise HTTPException(400, "Passwort bereits gesetzt")
if password != confirm:
return HTMLResponse(get_setup_html("Passwörter stimmen nicht überein"))
if len(password) < 8:
return HTMLResponse(get_setup_html("Passwort muss mindestens 8 Zeichen haben"))
store.set_password(password)
token = store.create_session("admin")
response = RedirectResponse(url="/", status_code=303)
request.session["token"] = token
return response
@app.post("/login")
async def login(request: Request, password: str = Form(...)):
if not store.verify_password(password):
return HTMLResponse(get_login_html("Falsches Passwort"))
token = store.create_session("admin")
response = RedirectResponse(url="/", status_code=303)
request.session["token"] = token
return response
@app.get("/logout")
async def logout(request: Request):
token = request.session.get("token")
if token:
store.delete_session(token)
request.session.clear()
return RedirectResponse(url="/")
@app.post("/api/agents/{agent_id}/approve")
async def approve_agent(agent_id: str, request: Request):
user = await get_current_user(request)
if not user:
raise HTTPException(401)
agent = store.get_agent(agent_id)
if not agent:
raise HTTPException(404, "Agent nicht gefunden")
# Token generieren
token = secrets.token_hex(32)
agent.approved = True
agent.token = token
agent.status = 'online'
store.set_agent_token(agent_id, token)
# Token an Agent senden
if manager.is_agent_connected(agent_id):
await manager.send_to_agent(agent_id, {
'type': 'auth.approved',
'data': {'token': token}
})
await manager.broadcast_to_browsers({
'type': 'agent.approved',
'data': {'agent_id': agent_id}
})
return {"success": True}
@app.post("/api/shops/activate")
async def activate_shop(
request: Request,
domain: str = Form(...),
mode: str = Form(...),
geo_region: str = Form("dach"),
rate_limit: int = Form(30),
ban_duration: int = Form(300)
):
user = await get_current_user(request)
if not user:
raise HTTPException(401)
agent_id = manager.get_agent_for_shop(domain)
if not agent_id or not manager.is_agent_connected(agent_id):
return JSONResponse({"success": False, "error": "Agent nicht verbunden"})
command_id = secrets.token_hex(8)
await manager.send_to_agent(agent_id, {
'type': 'command.activate',
'data': {
'command_id': command_id,
'shop': domain,
'mode': mode,
'geo_region': geo_region if mode == 'geoip' else None,
'rate_limit': rate_limit if mode == 'bot' else None,
'ban_duration': ban_duration if mode == 'bot' else None
}
})
return {"success": True, "command_id": command_id}
@app.post("/api/shops/deactivate")
async def deactivate_shop(request: Request, domain: str = Form(...)):
user = await get_current_user(request)
if not user:
raise HTTPException(401)
agent_id = manager.get_agent_for_shop(domain)
if not agent_id or not manager.is_agent_connected(agent_id):
return JSONResponse({"success": False, "error": "Agent nicht verbunden"})
command_id = secrets.token_hex(8)
await manager.send_to_agent(agent_id, {
'type': 'command.deactivate',
'data': {'command_id': command_id, 'shop': domain}
})
return {"success": True, "command_id": command_id}
@app.post("/api/shops/bulk-activate")
async def bulk_activate(
request: Request,
mode: str = Form(...),
geo_region: str = Form("dach"),
rate_limit: int = Form(30),
ban_duration: int = Form(300),
filter_type: str = Form("all")
):
user = await get_current_user(request)
if not user:
raise HTTPException(401)
activated = 0
shops = store.get_all_shops()
for shop in shops:
if shop['status'] == 'active':
continue
if filter_type == 'direct' and shop['link11']:
continue
if filter_type == 'link11' and not shop['link11']:
continue
agent_id = shop.get('agent_id')
if not agent_id or not manager.is_agent_connected(agent_id):
continue
command_id = secrets.token_hex(8)
await manager.send_to_agent(agent_id, {
'type': 'command.activate',
'data': {
'command_id': command_id,
'shop': shop['domain'],
'mode': mode,
'geo_region': geo_region if mode == 'geoip' else None,
'rate_limit': rate_limit if mode == 'bot' else None,
'ban_duration': ban_duration if mode == 'bot' else None
}
})
activated += 1
# Kleine Pause um nicht zu überlasten
if activated % 5 == 0:
await asyncio.sleep(0.1)
return {"success": True, "activated": activated}
@app.post("/api/shops/bulk-deactivate")
async def bulk_deactivate(request: Request, filter_type: str = Form("all")):
user = await get_current_user(request)
if not user:
raise HTTPException(401)
deactivated = 0
shops = store.get_all_shops()
for shop in shops:
if shop['status'] != 'active':
continue
if filter_type == 'direct' and shop['link11']:
continue
if filter_type == 'link11' and not shop['link11']:
continue
agent_id = shop.get('agent_id')
if not agent_id or not manager.is_agent_connected(agent_id):
continue
command_id = secrets.token_hex(8)
await manager.send_to_agent(agent_id, {
'type': 'command.deactivate',
'data': {'command_id': command_id, 'shop': shop['domain']}
})
deactivated += 1
if deactivated % 5 == 0:
await asyncio.sleep(0.1)
return {"success": True, "deactivated": deactivated}
@app.post("/api/change-password")
async def change_password(
request: Request,
current: str = Form(...),
new_pw: str = Form(...),
confirm: str = Form(...)
):
user = await get_current_user(request)
if not user:
raise HTTPException(401)
if not store.verify_password(current):
return {"success": False, "error": "Aktuelles Passwort falsch"}
if new_pw != confirm:
return {"success": False, "error": "Neue Passwörter stimmen nicht überein"}
if len(new_pw) < 8:
return {"success": False, "error": "Mindestens 8 Zeichen"}
store.set_password(new_pw)
return {"success": True}
@app.get("/api/shop/{domain}/history")
async def get_shop_history_api(domain: str, request: Request):
user = await get_current_user(request)
if not user:
raise HTTPException(401)
data = store.get_shop_history(domain)
return {"domain": domain, **data}
# =============================================================================
# HTML TEMPLATES
# =============================================================================
def get_setup_html(error: str = None) -> str:
error_html = f'<div class="error">{error}</div>' if error else ''
return f'''<!DOCTYPE html>
<html lang="de">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>JTL-WAFi Dashboard - Setup</title>
<style>
* {{ margin: 0; padding: 0; box-sizing: border-box; }}
body {{ font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, sans-serif; background: linear-gradient(135deg, #1a1a2e 0%, #16213e 100%); min-height: 100vh; display: flex; align-items: center; justify-content: center; color: #e0e0e0; }}
.container {{ background: rgba(255,255,255,0.05); border: 1px solid rgba(255,255,255,0.1); border-radius: 16px; padding: 40px; width: 100%; max-width: 400px; }}
h1 {{ text-align: center; margin-bottom: 10px; color: #fff; }}
p {{ text-align: center; margin-bottom: 30px; opacity: 0.7; font-size: 14px; }}
.error {{ background: #e74c3c; color: white; padding: 10px; border-radius: 8px; margin-bottom: 20px; text-align: center; }}
label {{ display: block; margin-bottom: 5px; font-size: 14px; opacity: 0.8; }}
input {{ width: 100%; padding: 12px 16px; border: 1px solid rgba(255,255,255,0.2); border-radius: 8px; background: rgba(0,0,0,0.3); color: #fff; font-size: 16px; margin-bottom: 20px; }}
input:focus {{ outline: none; border-color: #4a9eff; }}
button {{ width: 100%; padding: 14px; background: linear-gradient(135deg, #4a9eff 0%, #6c5ce7 100%); border: none; border-radius: 8px; color: white; font-size: 16px; font-weight: 600; cursor: pointer; }}
button:hover {{ filter: brightness(1.1); }}
</style>
</head>
<body>
<div class="container">
<h1>🔐 Setup</h1>
<p>Erstelle ein Admin-Passwort</p>
{error_html}
<form method="POST" action="/setup">
<label>Passwort</label>
<input type="password" name="password" required minlength="8" placeholder="Mindestens 8 Zeichen">
<label>Passwort bestätigen</label>
<input type="password" name="confirm" required>
<button type="submit">Dashboard einrichten</button>
</form>
</div>
</body>
</html>'''
def get_login_html(error: str = None) -> str:
error_html = f'<div class="error">{error}</div>' if error else ''
return f'''<!DOCTYPE html>
<html lang="de">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>JTL-WAFi Dashboard - Login</title>
<style>
* {{ margin: 0; padding: 0; box-sizing: border-box; }}
body {{ font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, sans-serif; background: linear-gradient(135deg, #1a1a2e 0%, #16213e 100%); min-height: 100vh; display: flex; align-items: center; justify-content: center; color: #e0e0e0; }}
.container {{ background: rgba(255,255,255,0.05); border: 1px solid rgba(255,255,255,0.1); border-radius: 16px; padding: 40px; width: 100%; max-width: 400px; }}
h1 {{ text-align: center; margin-bottom: 30px; color: #fff; }}
.error {{ background: #e74c3c; color: white; padding: 10px; border-radius: 8px; margin-bottom: 20px; text-align: center; }}
input {{ width: 100%; padding: 14px 16px; border: 1px solid rgba(255,255,255,0.2); border-radius: 8px; background: rgba(0,0,0,0.3); color: #fff; font-size: 16px; margin-bottom: 20px; }}
input:focus {{ outline: none; border-color: #4a9eff; }}
button {{ width: 100%; padding: 14px; background: linear-gradient(135deg, #4a9eff 0%, #6c5ce7 100%); border: none; border-radius: 8px; color: white; font-size: 16px; font-weight: 600; cursor: pointer; }}
button:hover {{ filter: brightness(1.1); }}
</style>
</head>
<body>
<div class="container">
<h1>🌍 JTL-WAFi Dashboard</h1>
{error_html}
<form method="POST" action="/login">
<input type="password" name="password" required placeholder="Passwort" autofocus>
<button type="submit">Anmelden</button>
</form>
</div>
</body>
</html>'''
def get_dashboard_html() -> str:
return '''<!DOCTYPE html>
<html lang="de">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>JTL-WAFi Dashboard v2.3</title>
<style>
* { margin: 0; padding: 0; box-sizing: border-box; }
:root {
--bg-primary: #0f0f1a;
--bg-secondary: #1a1a2e;
--bg-card: rgba(255,255,255,0.03);
--border: rgba(255,255,255,0.08);
--text-primary: #ffffff;
--text-secondary: #a0a0b0;
--accent: #4a9eff;
--success: #00d26a;
--warning: #ffc107;
--danger: #ff4757;
--link11: #9b59b6;
}
body { font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, sans-serif; background: var(--bg-primary); color: var(--text-primary); min-height: 100vh; }
header { background: var(--bg-secondary); border-bottom: 1px solid var(--border); padding: 16px 24px; display: flex; justify-content: space-between; align-items: center; position: sticky; top: 0; z-index: 100; }
.logo { font-size: 20px; font-weight: 700; }
.logo span { color: var(--accent); }
.header-right { display: flex; align-items: center; gap: 16px; }
.clock { font-size: 14px; color: var(--text-secondary); font-family: monospace; }
.connection-status { display: flex; align-items: center; gap: 8px; font-size: 13px; color: var(--text-secondary); }
.status-dot { width: 8px; height: 8px; border-radius: 50%; background: var(--danger); }
.status-dot.connected { background: var(--success); }
.btn-header { background: transparent; border: 1px solid var(--border); color: var(--text-secondary); padding: 8px 16px; border-radius: 6px; cursor: pointer; font-size: 13px; text-decoration: none; }
.btn-header:hover { border-color: var(--accent); color: var(--accent); }
main { padding: 24px; max-width: 1800px; margin: 0 auto; }
.stats-grid { display: grid; grid-template-columns: repeat(6, 1fr); gap: 16px; margin-bottom: 24px; }
.stat-card { background: var(--bg-card); border: 1px solid var(--border); border-radius: 12px; padding: 20px; }
.stat-label { font-size: 12px; color: var(--text-secondary); margin-bottom: 8px; text-transform: uppercase; }
.stat-value { font-size: 28px; font-weight: 700; }
.stat-value.success { color: var(--success); }
.stat-value.warning { color: var(--warning); }
.stat-value.link11 { color: var(--link11); }
.stat-value.direct { color: var(--danger); }
.top-shops-card { background: var(--bg-card); border: 1px solid var(--border); border-radius: 12px; padding: 20px; margin-bottom: 24px; }
.top-shops-header { display: flex; justify-content: space-between; align-items: center; margin-bottom: 16px; cursor: pointer; }
.top-shops-header:hover .top-shops-title { color: var(--accent); }
.top-shops-title { font-size: 16px; font-weight: 600; transition: color 0.2s; }
.top-shops-subtitle { font-size: 12px; color: var(--text-secondary); }
.top-shops-list { display: grid; grid-template-columns: repeat(5, 1fr); gap: 12px; }
.top-shop-item { background: var(--bg-secondary); border: 1px solid var(--border); border-radius: 8px; padding: 12px; cursor: pointer; transition: border-color 0.2s; }
.top-shop-item:hover { border-color: var(--accent); }
.top-shop-domain { font-size: 13px; font-weight: 500; white-space: nowrap; overflow: hidden; text-overflow: ellipsis; margin-bottom: 4px; }
.top-shop-stats { display: flex; justify-content: space-between; font-size: 11px; color: var(--text-secondary); }
.top-shop-req { color: var(--accent); font-weight: 600; }
.top-shop-bans { color: var(--warning); }
.bulk-actions { background: var(--bg-card); border: 1px solid var(--border); border-radius: 12px; padding: 16px 20px; margin-bottom: 24px; display: flex; align-items: center; gap: 16px; }
.bulk-actions-title { font-weight: 600; color: var(--text-secondary); }
.section { margin-bottom: 32px; }
.section-header { display: flex; justify-content: space-between; align-items: center; margin-bottom: 16px; }
.section-title { font-size: 18px; font-weight: 600; }
.badge { background: var(--bg-card); border: 1px solid var(--border); padding: 4px 12px; border-radius: 20px; font-size: 12px; color: var(--text-secondary); }
.badge.link11 { border-color: var(--link11); color: var(--link11); }
.badge.direct { border-color: var(--danger); color: var(--danger); }
table { width: 100%; border-collapse: collapse; background: var(--bg-card); border: 1px solid var(--border); border-radius: 12px; overflow: hidden; }
th, td { padding: 14px 16px; text-align: left; }
th { background: rgba(0,0,0,0.2); font-size: 12px; font-weight: 600; text-transform: uppercase; letter-spacing: 0.5px; color: var(--text-secondary); }
td { border-top: 1px solid var(--border); font-size: 14px; }
tr:hover td { background: rgba(255,255,255,0.02); }
.status-badge { display: inline-flex; align-items: center; gap: 6px; padding: 4px 10px; border-radius: 20px; font-size: 12px; font-weight: 500; }
.status-online { background: rgba(0,210,106,0.15); color: var(--success); }
.status-offline { background: rgba(255,71,87,0.15); color: var(--danger); }
.status-pending { background: rgba(255,193,7,0.15); color: var(--warning); }
.status-active { background: rgba(0,210,106,0.15); color: var(--success); }
.status-inactive { background: rgba(160,160,176,0.15); color: var(--text-secondary); }
.domain-link { color: var(--accent); cursor: pointer; text-decoration: none; }
.domain-link:hover { text-decoration: underline; }
.btn { padding: 6px 12px; border-radius: 6px; border: none; cursor: pointer; font-size: 12px; font-weight: 500; transition: all 0.2s; }
.btn-primary { background: var(--accent); color: white; }
.btn-success { background: var(--success); color: white; }
.btn-secondary { background: transparent; border: 1px solid var(--border); color: var(--text-secondary); }
.btn-secondary:hover { border-color: var(--accent); color: var(--accent); }
.btn-danger { background: rgba(255,71,87,0.2); color: var(--danger); }
.btn-danger:hover { background: var(--danger); color: white; }
.btn-icon { width: 32px; height: 32px; padding: 0; display: inline-flex; align-items: center; justify-content: center; background: transparent; border: 1px solid var(--border); border-radius: 6px; color: var(--text-secondary); cursor: pointer; text-decoration: none; }
.btn-icon:hover { border-color: var(--accent); color: var(--accent); }
.actions { display: flex; gap: 8px; align-items: center; }
.logs-panel { position: fixed; bottom: 0; left: 0; right: 0; background: var(--bg-secondary); border-top: 1px solid var(--border); height: 300px; transform: translateY(100%); transition: transform 0.3s ease; z-index: 200; }
.logs-panel.open { transform: translateY(0); }
.logs-header { display: flex; justify-content: space-between; align-items: center; padding: 12px 20px; border-bottom: 1px solid var(--border); }
.logs-content { height: calc(100% - 48px); overflow-y: auto; padding: 12px 20px; font-family: monospace; font-size: 12px; line-height: 1.6; }
.log-entry { color: var(--text-secondary); }
.log-entry.banned { color: var(--danger); }
.modal-overlay { position: fixed; inset: 0; background: rgba(0,0,0,0.7); display: none; align-items: center; justify-content: center; z-index: 300; overflow-y: auto; padding: 20px; }
.modal-overlay.open { display: flex; }
.modal { background: var(--bg-secondary); border: 1px solid var(--border); border-radius: 16px; padding: 24px; width: 100%; max-width: 600px; max-height: 90vh; overflow-y: auto; }
.modal.large { max-width: 900px; }
.modal.xlarge { max-width: 1200px; }
.modal-title { font-size: 18px; font-weight: 600; margin-bottom: 20px; display: flex; justify-content: space-between; align-items: center; }
.form-group { margin-bottom: 16px; }
.form-group label { display: block; font-size: 13px; color: var(--text-secondary); margin-bottom: 6px; }
.form-group input, .form-group select { width: 100%; padding: 12px; background: var(--bg-card); border: 1px solid var(--border); border-radius: 8px; color: var(--text-primary); font-size: 14px; }
.form-group small { display: block; margin-top: 4px; color: var(--text-secondary); font-size: 11px; }
.modal-actions { display: flex; gap: 12px; justify-content: flex-end; margin-top: 24px; }
.detail-grid { display: grid; grid-template-columns: repeat(3, 1fr); gap: 16px; margin-bottom: 20px; }
.detail-card { background: var(--bg-card); border: 1px solid var(--border); border-radius: 8px; padding: 16px; }
.detail-card-label { font-size: 11px; color: var(--text-secondary); text-transform: uppercase; margin-bottom: 4px; }
.detail-card-value { font-size: 20px; font-weight: 600; }
.detail-section { margin-bottom: 20px; }
.detail-section-title { font-size: 14px; font-weight: 600; margin-bottom: 12px; color: var(--text-secondary); }
.bot-list { max-height: 200px; overflow-y: auto; }
.bot-item { display: flex; justify-content: space-between; padding: 8px 12px; background: var(--bg-card); border-radius: 6px; margin-bottom: 4px; font-size: 13px; }
.chart-container { background: var(--bg-card); border: 1px solid var(--border); border-radius: 8px; padding: 16px; height: 280px; }
.chart-legend { display: flex; flex-wrap: wrap; gap: 12px; margin-top: 12px; font-size: 11px; }
.legend-item { display: flex; align-items: center; gap: 4px; }
.legend-color { width: 12px; height: 3px; border-radius: 2px; }
.toast-container { position: fixed; top: 80px; right: 24px; z-index: 400; }
.toast { background: var(--bg-secondary); border: 1px solid var(--border); border-radius: 8px; padding: 12px 16px; margin-bottom: 8px; animation: slideIn 0.3s ease; }
.toast.success { border-color: var(--success); }
.toast.error { border-color: var(--danger); }
.toast.info { border-color: var(--accent); }
@keyframes slideIn { from { transform: translateX(100px); opacity: 0; } }
@media (max-width: 1400px) { .stats-grid { grid-template-columns: repeat(3, 1fr); } .top-shops-list { grid-template-columns: repeat(3, 1fr); } }
@media (max-width: 900px) { .stats-grid { grid-template-columns: repeat(2, 1fr); } .detail-grid { grid-template-columns: repeat(2, 1fr); } }
</style>
</head>
<body>
<header>
<div class="logo">🌍 JTL-<span>WAFi</span> <small style="font-size:11px;opacity:0.5">v2.3</small></div>
<div class="header-right">
<div class="clock" id="clock">--:--:--</div>
<div class="connection-status"><div class="status-dot" id="wsStatus"></div><span id="wsStatusText">Verbinde...</span></div>
<div style="display:flex;gap:8px"><button class="btn-header" onclick="openPasswordModal()">🔑</button><a href="/logout" class="btn-header">Abmelden</a></div>
</div>
</header>
<main>
<div class="stats-grid">
<div class="stat-card"><div class="stat-label">Server Online</div><div class="stat-value success" id="statAgents">0</div></div>
<div class="stat-card"><div class="stat-label">Shops Aktiv</div><div class="stat-value" id="statShops">0</div></div>
<div class="stat-card"><div class="stat-label">🛡️ Link11</div><div class="stat-value link11" id="statLink11">0</div></div>
<div class="stat-card"><div class="stat-label">⚡ Direkt</div><div class="stat-value direct" id="statDirect">0</div></div>
<div class="stat-card"><div class="stat-label">Requests/min</div><div class="stat-value" id="statReqMin">0</div></div>
<div class="stat-card"><div class="stat-label">Aktive Bans</div><div class="stat-value warning" id="statBans">0</div></div>
</div>
<div class="top-shops-card">
<div class="top-shops-header" onclick="openAllShopsModal()">
<div><div class="top-shops-title">🔥 Top 10 Shops (Requests/min)</div><div class="top-shops-subtitle">Klicken für vollständige Liste</div></div>
<span style="color:var(--text-secondary)">→</span>
</div>
<div class="top-shops-list" id="topShopsList"></div>
</div>
<div class="bulk-actions">
<span class="bulk-actions-title">⚡ Massenaktionen:</span>
<button class="btn btn-success" onclick="openBulkActivateModal()">▶️ Aktivieren...</button>
<button class="btn btn-danger" onclick="openBulkDeactivateModal()">⏹️ Deaktivieren...</button>
</div>
<div class="section">
<div class="section-header"><h2 class="section-title">🖥️ Server</h2><span class="badge" id="agentCount">0</span></div>
<table><thead><tr><th>Status</th><th>Hostname</th><th>Shops</th><th>Load</th><th>Memory</th><th>Zuletzt</th><th>Aktionen</th></tr></thead><tbody id="agentsTable"></tbody></table>
</div>
<div class="section">
<div class="section-header"><h2 class="section-title">🛡️ Shops hinter Link11</h2><span class="badge link11" id="link11Count">0</span></div>
<table><thead><tr><th>Status</th><th>Domain</th><th>Server</th><th>Modus</th><th>Req/min</th><th>Bans</th><th>Laufzeit</th><th>Aktionen</th></tr></thead><tbody id="shopsLink11Table"></tbody></table>
</div>
<div class="section">
<div class="section-header"><h2 class="section-title">⚡ Shops direkt verbunden</h2><span class="badge direct" id="directCount">0</span></div>
<table><thead><tr><th>Status</th><th>Domain</th><th>Server</th><th>Modus</th><th>Req/min</th><th>Bans</th><th>Laufzeit</th><th>Aktionen</th></tr></thead><tbody id="shopsDirectTable"></tbody></table>
</div>
</main>
<div class="logs-panel" id="logsPanel"><div class="logs-header"><span>📜 Live Logs: <span id="logsShop">-</span></span><button class="btn btn-secondary" onclick="closeLogs()">✕</button></div><div class="logs-content" id="logsContent"></div></div>
<div class="modal-overlay" id="activateModal"><div class="modal"><h3 class="modal-title">🚀 Shop aktivieren</h3><form id="activateForm"><input type="hidden" name="domain" id="activateDomain"><div class="form-group"><label>Domain</label><input type="text" id="activateDomainDisplay" readonly></div><div class="form-group"><label>Modus</label><select name="mode" id="activateMode" onchange="toggleModeOptions()"><option value="bot">🤖 Bot Rate-Limiting</option><option value="geoip">🛡️ JTL-WAFi-Blocking</option></select></div><div class="form-group" id="geoRegionGroup" style="display:none"><label>Region</label><select name="geo_region"><option value="dach">🇩🇪🇦🇹🇨🇭 DACH</option><option value="eurozone">🇪🇺 Eurozone</option></select></div><div class="form-group" id="rateLimitGroup"><label>Rate-Limit (Req/min)</label><input type="number" name="rate_limit" value="30" min="1"></div><div class="form-group" id="banDurationGroup"><label>Ban-Dauer (Sekunden)</label><input type="number" name="ban_duration" value="300" min="60"><small>300=5min</small></div><div class="modal-actions"><button type="button" class="btn btn-secondary" onclick="closeModal('activateModal')">Abbrechen</button><button type="submit" class="btn btn-primary">Aktivieren</button></div></form></div></div>
<div class="modal-overlay" id="bulkActivateModal"><div class="modal"><h3 class="modal-title">⚡ Massenaktivierung</h3><form id="bulkActivateForm"><div class="form-group"><label>Modus</label><select name="mode" id="bulkActivateMode" onchange="toggleBulkModeOptions()"><option value="bot">🤖 Bot Rate-Limiting</option><option value="geoip">🛡️ JTL-WAFi-Blocking</option></select></div><div class="form-group" id="bulkGeoRegionGroup" style="display:none"><label>Region</label><select name="geo_region"><option value="dach">🇩🇪🇦🇹🇨🇭 DACH</option><option value="eurozone">🇪🇺 Eurozone</option></select></div><div class="form-group" id="bulkRateLimitGroup"><label>Rate-Limit (Req/min)</label><input type="number" name="rate_limit" value="30" min="1"></div><div class="form-group" id="bulkBanDurationGroup"><label>Ban-Dauer (Sek)</label><input type="number" name="ban_duration" value="300" min="60"><small>300=5min, 3600=1h</small></div><div class="form-group"><label>Filter</label><select name="filter_type"><option value="all">Alle inaktiven</option><option value="direct">Nur Direkte ⚡</option><option value="link11">Nur Link11 🛡️</option></select></div><div class="modal-actions"><button type="button" class="btn btn-secondary" onclick="closeModal('bulkActivateModal')">Abbrechen</button><button type="submit" class="btn btn-success">▶️ Aktivieren</button></div></form></div></div>
<div class="modal-overlay" id="bulkDeactivateModal"><div class="modal"><h3 class="modal-title">⏹️ Massendeaktivierung</h3><form id="bulkDeactivateForm"><div class="form-group"><label>Filter</label><select name="filter_type"><option value="all">Alle aktiven</option><option value="direct">Nur Direkte ⚡</option><option value="link11">Nur Link11 🛡️</option></select></div><div class="modal-actions"><button type="button" class="btn btn-secondary" onclick="closeModal('bulkDeactivateModal')">Abbrechen</button><button type="submit" class="btn btn-danger">⏹️ Deaktivieren</button></div></form></div></div>
<div class="modal-overlay" id="passwordModal"><div class="modal"><h3 class="modal-title">🔑 Passwort ändern</h3><form id="passwordForm"><div class="form-group"><label>Aktuelles Passwort</label><input type="password" name="current" required></div><div class="form-group"><label>Neues Passwort</label><input type="password" name="new_pw" required minlength="8"></div><div class="form-group"><label>Bestätigen</label><input type="password" name="confirm" required></div><div class="modal-actions"><button type="button" class="btn btn-secondary" onclick="closeModal('passwordModal')">Abbrechen</button><button type="submit" class="btn btn-primary">Speichern</button></div></form></div></div>
<div class="modal-overlay" id="allShopsModal"><div class="modal xlarge"><h3 class="modal-title"><span>📊 Alle Shops</span><button class="btn btn-secondary" onclick="closeModal('allShopsModal')">✕</button></h3><div style="margin-bottom:16px"><button class="btn" id="sortByReq" onclick="sortAllShops('req_per_min')">Nach Requests</button> <button class="btn btn-secondary" id="sortByBans" onclick="sortAllShops('active_bans')">Nach Bans</button></div><table><thead><tr><th>#</th><th>Domain</th><th>Server</th><th>Status</th><th>Req/min</th><th>Bans</th><th>Typ</th></tr></thead><tbody id="allShopsTable"></tbody></table></div></div>
<div class="modal-overlay" id="detailModal"><div class="modal large"><h3 class="modal-title"><span id="detailDomain">-</span><button class="btn btn-secondary" onclick="closeModal('detailModal')">✕</button></h3><div class="detail-grid"><div class="detail-card"><div class="detail-card-label">Status</div><div class="detail-card-value" id="detailStatus">-</div></div><div class="detail-card"><div class="detail-card-label">Modus</div><div class="detail-card-value" id="detailMode">-</div></div><div class="detail-card"><div class="detail-card-label">Region</div><div class="detail-card-value" id="detailRegion">-</div></div><div class="detail-card"><div class="detail-card-label">Rate-Limit</div><div class="detail-card-value" id="detailRateLimit">-</div></div><div class="detail-card"><div class="detail-card-label">Ban-Dauer</div><div class="detail-card-value" id="detailBanDuration">-</div></div><div class="detail-card"><div class="detail-card-label">Laufzeit</div><div class="detail-card-value" id="detailRuntime">-</div></div></div><div class="detail-grid"><div class="detail-card"><div class="detail-card-label">Req/min</div><div class="detail-card-value" id="detailReqMin">0</div></div><div class="detail-card"><div class="detail-card-label">Aktive Bans</div><div class="detail-card-value" id="detailActiveBans">0</div></div><div class="detail-card"><div class="detail-card-label">Total Bans</div><div class="detail-card-value" id="detailTotalBans">0</div></div></div><div class="detail-section"><div class="detail-section-title">📈 Bot-Aktivität über Zeit</div><div class="chart-container"><canvas id="requestChart"></canvas></div><div class="chart-legend" id="chartLegend"></div></div><div class="detail-section"><div class="detail-section-title">🤖 Top Bots</div><div class="bot-list" id="detailTopBots"></div></div><div class="detail-section"><div class="detail-section-title">🚫 Aktuell gebannt</div><div class="bot-list" id="detailBannedBots"></div></div></div></div>
<div class="toast-container" id="toastContainer"></div>
<script>
let ws=null,agents={},shops={},currentLogsShop=null,currentSortBy='req_per_min';
const BOT_COLORS=['#4a9eff','#00d26a','#ff4757','#ffc107','#9b59b6','#1abc9c','#e74c3c','#3498db','#f39c12','#2ecc71'];
function updateClock(){document.getElementById('clock').textContent=new Date().toLocaleTimeString('de-DE');}
setInterval(updateClock,1000);updateClock();
function connect(){const p=location.protocol==='https:'?'wss:':'ws:';ws=new WebSocket(p+'//'+location.host+'/ws/dashboard');ws.onopen=()=>{document.getElementById('wsStatus').classList.add('connected');document.getElementById('wsStatusText').textContent='Verbunden';};ws.onclose=()=>{document.getElementById('wsStatus').classList.remove('connected');document.getElementById('wsStatusText').textContent='Getrennt';setTimeout(connect,3000);};ws.onmessage=e=>handleMessage(JSON.parse(e.data));}
function handleMessage(msg){switch(msg.type){case'initial_state':case'refresh':agents={};msg.data.agents.forEach(a=>agents[a.id]=a);shops={};msg.data.shops.forEach(s=>shops[s.domain]=s);updateStats(msg.data.stats);renderAgents();renderShops();renderTopShops();break;case'agent.online':case'agent.update':case'agent.pending':const a=msg.data;if(!agents[a.agent_id])agents[a.agent_id]={};Object.assign(agents[a.agent_id],{id:a.agent_id,hostname:a.hostname,status:a.status||'online',approved:a.approved,shops_total:a.shops_summary?.total||0,shops_active:a.shops_summary?.active||0,load_1m:a.system?.load_1m,memory_percent:a.system?.memory_percent,last_seen:new Date().toISOString()});renderAgents();break;case'agent.offline':if(agents[msg.data.agent_id]){agents[msg.data.agent_id].status='offline';renderAgents();}break;case'agent.approved':if(agents[msg.data.agent_id]){agents[msg.data.agent_id].status='online';agents[msg.data.agent_id].approved=true;renderAgents();toast('Agent freigegeben','success');}break;case'shop.full_update':msg.data.shops.forEach(s=>{shops[s.domain]={...s,agent_id:msg.data.agent_id,agent_hostname:msg.data.hostname};});renderShops();renderTopShops();refreshStats();break;case'shop.stats':if(shops[msg.data.domain]){shops[msg.data.domain].stats=msg.data.stats;renderShops();renderTopShops();refreshStats();}break;case'shop_history':updateBotChart(msg.data);break;case'top_shops':case'all_shops_sorted':renderAllShopsTable(msg.data.shops,msg.data.sort_by);break;case'log.entry':if(msg.data.shop===currentLogsShop)addLogEntry(msg.data.line);break;case'bot.banned':toast('🚫 '+msg.data.bot_name+' gebannt','warning');break;case'command.result':toast(msg.data.message,msg.data.status==='success'?'success':'error');break;}}
function renderAgents(){const t=document.getElementById('agentsTable'),l=Object.values(agents);document.getElementById('agentCount').textContent=l.length+' Agents';t.innerHTML=l.map(a=>'<tr><td><span class="status-badge status-'+(a.status||'offline')+'">'+(a.status==='online'?'🟢':a.status==='pending'?'🟡':'🔴')+' '+(a.status==='pending'?'Warte':a.status==='online'?'Online':'Offline')+'</span></td><td><strong>'+a.hostname+'</strong></td><td>'+(a.shops_active||0)+'/'+(a.shops_total||0)+'</td><td>'+(a.load_1m!=null?a.load_1m.toFixed(2):'-')+'</td><td>'+(a.memory_percent!=null?a.memory_percent.toFixed(1)+'%':'-')+'</td><td>'+(a.last_seen?formatTime(a.last_seen):'-')+'</td><td>'+(a.status==='pending'?'<button class="btn btn-primary" onclick="approveAgent(\\''+a.id+'\\')">✓</button>':'')+'</td></tr>').join('');}
function renderShops(){const l11=Object.values(shops).filter(s=>s.link11),dir=Object.values(shops).filter(s=>!s.link11);document.getElementById('link11Count').textContent=l11.length+' Shops';document.getElementById('directCount').textContent=dir.length+' Shops';document.getElementById('shopsLink11Table').innerHTML=renderShopRows(l11);document.getElementById('shopsDirectTable').innerHTML=renderShopRows(dir);}
function renderShopRows(l){return l.map(s=>'<tr><td><span class="status-badge status-'+(s.status||'inactive')+'">'+(s.status==='active'?'':'')+'</span></td><td><span class="domain-link" onclick="openDetailModal(\\''+s.domain+'\\')">'+s.domain+'</span></td><td>'+(s.agent_hostname||'-')+'</td><td>'+(s.mode?(s.mode==='bot'?'🤖':'🌍')+(s.mode==='geoip'&&s.geo_region?' ('+s.geo_region.toUpperCase()+')':''):'-')+'</td><td>'+((s.stats?.req_per_min||0).toFixed(1))+'</td><td>'+(s.stats?.active_bans||0)+'</td><td>'+formatRuntime(s.runtime_minutes)+'</td><td class="actions"><a href="https://'+s.domain+'" target="_blank" class="btn-icon">🔗</a>'+(s.status==='active'?'<button class="btn-icon" onclick="openLogs(\\''+s.domain+'\\')">📜</button><button class="btn btn-danger" onclick="deactivateShop(\\''+s.domain+'\\')">Stop</button>':'<button class="btn btn-primary" onclick="openActivateModal(\\''+s.domain+'\\')">Start</button>')+'</td></tr>').join('');}
function renderTopShops(){const l=Object.values(shops).filter(s=>s.status==='active').sort((a,b)=>(b.stats?.req_per_min||0)-(a.stats?.req_per_min||0)).slice(0,10);document.getElementById('topShopsList').innerHTML=l.map(s=>'<div class="top-shop-item" onclick="openDetailModal(\\''+s.domain+'\\')"><div class="top-shop-domain">'+s.domain+'</div><div class="top-shop-stats"><span class="top-shop-req">'+((s.stats?.req_per_min||0).toFixed(1))+' req/m</span><span class="top-shop-bans">'+(s.stats?.active_bans||0)+' bans</span></div></div>').join('')||'<div style="color:var(--text-secondary)">Keine aktiven Shops</div>';}
function updateStats(s){document.getElementById('statAgents').textContent=s.agents_online||0;document.getElementById('statShops').textContent=s.shops_active||0;document.getElementById('statLink11').textContent=s.shops_link11||0;document.getElementById('statDirect').textContent=s.shops_direct||0;document.getElementById('statReqMin').textContent=(s.req_per_min||0).toFixed(1);document.getElementById('statBans').textContent=s.active_bans||0;}
function refreshStats(){const l=Object.values(shops),a=l.filter(s=>s.status==='active');document.getElementById('statShops').textContent=a.length;document.getElementById('statLink11').textContent=l.filter(s=>s.link11).length;document.getElementById('statDirect').textContent=l.filter(s=>!s.link11).length;document.getElementById('statReqMin').textContent=a.reduce((sum,s)=>sum+(s.stats?.req_per_min||0),0).toFixed(1);document.getElementById('statBans').textContent=a.reduce((sum,s)=>sum+(s.stats?.active_bans||0),0);}
async function approveAgent(id){await fetch('/api/agents/'+id+'/approve',{method:'POST'});}
function openActivateModal(d){document.getElementById('activateDomain').value=d;document.getElementById('activateDomainDisplay').value=d;document.getElementById('activateModal').classList.add('open');toggleModeOptions();}
function closeModal(id){document.getElementById(id).classList.remove('open');}
function toggleModeOptions(){const m=document.getElementById('activateMode').value;document.getElementById('geoRegionGroup').style.display=m==='geoip'?'block':'none';document.getElementById('rateLimitGroup').style.display=m==='bot'?'block':'none';document.getElementById('banDurationGroup').style.display=m==='bot'?'block':'none';}
document.getElementById('activateForm').onsubmit=async e=>{e.preventDefault();await fetch('/api/shops/activate',{method:'POST',body:new FormData(e.target)});closeModal('activateModal');};
async function deactivateShop(d){if(!confirm(d+' deaktivieren?'))return;const fd=new FormData();fd.append('domain',d);await fetch('/api/shops/deactivate',{method:'POST',body:fd});}
function openBulkActivateModal(){document.getElementById('bulkActivateModal').classList.add('open');toggleBulkModeOptions();}
function openBulkDeactivateModal(){document.getElementById('bulkDeactivateModal').classList.add('open');}
function toggleBulkModeOptions(){const m=document.getElementById('bulkActivateMode').value;document.getElementById('bulkGeoRegionGroup').style.display=m==='geoip'?'block':'none';document.getElementById('bulkRateLimitGroup').style.display=m==='bot'?'block':'none';document.getElementById('bulkBanDurationGroup').style.display=m==='bot'?'block':'none';}
document.getElementById('bulkActivateForm').onsubmit=async e=>{e.preventDefault();if(!confirm('Shops aktivieren?'))return;closeModal('bulkActivateModal');toast('Aktivierung...','info');const r=await fetch('/api/shops/bulk-activate',{method:'POST',body:new FormData(e.target)});const d=await r.json();if(d.success)toast(d.activated+' aktiviert','success');};
document.getElementById('bulkDeactivateForm').onsubmit=async e=>{e.preventDefault();if(!confirm('Shops deaktivieren?'))return;closeModal('bulkDeactivateModal');toast('Deaktivierung...','info');const r=await fetch('/api/shops/bulk-deactivate',{method:'POST',body:new FormData(e.target)});const d=await r.json();if(d.success)toast(d.deactivated+' deaktiviert','success');};
function openPasswordModal(){document.getElementById('passwordModal').classList.add('open');}
document.getElementById('passwordForm').onsubmit=async e=>{e.preventDefault();const r=await fetch('/api/change-password',{method:'POST',body:new FormData(e.target)});const d=await r.json();if(d.success){toast('Passwort geändert','success');closeModal('passwordModal');e.target.reset();}else toast(d.error,'error');};
function openAllShopsModal(){document.getElementById('allShopsModal').classList.add('open');sortAllShops('req_per_min');}
function sortAllShops(by){currentSortBy=by;document.getElementById('sortByReq').className='btn'+(by==='req_per_min'?' btn-primary':' btn-secondary');document.getElementById('sortByBans').className='btn'+(by==='active_bans'?' btn-primary':' btn-secondary');if(ws&&ws.readyState===1)ws.send(JSON.stringify({type:'get_all_shops_sorted',data:{sort_by:by}}));}
function renderAllShopsTable(l,by){document.getElementById('allShopsTable').innerHTML=l.map((s,i)=>'<tr onclick="openDetailModal(\\''+s.domain+'\\')" style="cursor:pointer"><td>'+(i+1)+'</td><td><strong>'+s.domain+'</strong></td><td>'+(s.agent_hostname||'-')+'</td><td><span class="status-badge status-'+(s.status||'inactive')+'">'+(s.status==='active'?'':'')+'</span></td><td style="'+(by==='req_per_min'?'color:var(--accent);font-weight:600':'')+'">'+(s.req_per_min||0).toFixed(1)+'</td><td style="'+(by==='active_bans'?'color:var(--warning);font-weight:600':'')+'">'+(s.active_bans||0)+'</td><td>'+(s.link11?'🛡️':'')+'</td></tr>').join('');}
function openDetailModal(d){const s=shops[d];if(!s)return;document.getElementById('detailDomain').textContent=d;document.getElementById('detailStatus').textContent=s.status==='active'?'✅ Aktiv':'⭕ Inaktiv';document.getElementById('detailMode').textContent=s.mode==='bot'?'🤖 Bot':s.mode==='geoip'?'🛡️ JTL-WAFi':'-';document.getElementById('detailRegion').textContent=s.mode==='geoip'&&s.geo_region?s.geo_region.toUpperCase():(s.mode==='bot'?'NONE':'-');document.getElementById('detailRateLimit').textContent=s.rate_limit?s.rate_limit+'/min':'-';document.getElementById('detailBanDuration').textContent=s.ban_duration?(s.ban_duration>=60?Math.round(s.ban_duration/60)+' min':s.ban_duration+'s'):'-';document.getElementById('detailRuntime').textContent=formatRuntime(s.runtime_minutes);const st=s.stats||{};document.getElementById('detailReqMin').textContent=(st.req_per_min||0).toFixed(1);document.getElementById('detailActiveBans').textContent=st.active_bans||0;document.getElementById('detailTotalBans').textContent=st.total_bans||0;document.getElementById('detailTopBots').innerHTML=Object.entries(st.top_bots||{}).sort((a,b)=>b[1]-a[1]).map(([n,c])=>'<div class="bot-item"><span>'+n+'</span><span>'+c+'</span></div>').join('')||'<div style="color:var(--text-secondary);padding:8px">Keine Daten</div>';document.getElementById('detailBannedBots').innerHTML=(st.banned_bots||[]).map(n=>'<div class="bot-item"><span>🚫 '+n+'</span></div>').join('')||'<div style="color:var(--text-secondary);padding:8px">Keine Bans</div>';document.getElementById('chartLegend').innerHTML='';const cv=document.getElementById('requestChart');cv.getContext('2d').clearRect(0,0,cv.width,cv.height);if(ws&&ws.readyState===1)ws.send(JSON.stringify({type:'get_shop_history',data:{domain:d}}));document.getElementById('detailModal').classList.add('open');}
function updateBotChart(data){const cv=document.getElementById('requestChart'),ctx=cv.getContext('2d'),ct=cv.parentElement,w=ct.clientWidth-32,h=230;cv.width=w;cv.height=h;ctx.clearRect(0,0,w,h);const bh=data.bot_history||{},bn=Object.keys(bh).slice(0,10);if(bn.length===0){ctx.fillStyle='#a0a0b0';ctx.font='14px sans-serif';ctx.fillText('Noch keine Bot-Daten',w/2-60,h/2);return;}let ts=new Set();bn.forEach(b=>bh[b].forEach(p=>ts.add(p.timestamp)));ts=[...ts].sort();if(ts.length<2){ctx.fillStyle='#a0a0b0';ctx.font='14px sans-serif';ctx.fillText('Warte auf Daten...',w/2-50,h/2);return;}let mx=1;bn.forEach(b=>bh[b].forEach(p=>{if(p.count>mx)mx=p.count;}));const pd={t:20,r:20,b:40,l:50},cW=w-pd.l-pd.r,cH=h-pd.t-pd.b;ctx.strokeStyle='rgba(255,255,255,0.1)';ctx.lineWidth=1;for(let i=0;i<=4;i++){const y=pd.t+(cH/4)*i;ctx.beginPath();ctx.moveTo(pd.l,y);ctx.lineTo(w-pd.r,y);ctx.stroke();ctx.fillStyle='#a0a0b0';ctx.font='10px sans-serif';ctx.fillText(Math.round(mx-(mx/4)*i),5,y+4);}const step=Math.max(1,Math.floor(ts.length/6));ctx.fillStyle='#a0a0b0';ctx.font='10px sans-serif';for(let i=0;i<ts.length;i+=step){const t=ts[i].split(' ')[1]?.substring(0,5)||ts[i],x=pd.l+(cW/(ts.length-1))*i;ctx.fillText(t,x-15,h-10);}const lg=document.getElementById('chartLegend');lg.innerHTML='';bn.forEach((bot,idx)=>{const c=BOT_COLORS[idx%BOT_COLORS.length],pts=bh[bot];ctx.strokeStyle=c;ctx.lineWidth=2;ctx.beginPath();pts.forEach((p,i)=>{const ti=ts.indexOf(p.timestamp),x=pd.l+(cW/(ts.length-1))*ti,y=pd.t+cH-(p.count/mx)*cH;i===0?ctx.moveTo(x,y):ctx.lineTo(x,y);});ctx.stroke();lg.innerHTML+='<div class="legend-item"><div class="legend-color" style="background:'+c+'"></div><span>'+bot+'</span></div>';});}
function openLogs(d){currentLogsShop=d;document.getElementById('logsShop').textContent=d;document.getElementById('logsContent').innerHTML='<div style="color:#666">Warte auf Logs...</div>';document.getElementById('logsPanel').classList.add('open');if(ws&&ws.readyState===1)ws.send(JSON.stringify({type:'log.subscribe',data:{shop:d}}));}
function closeLogs(){if(currentLogsShop&&ws&&ws.readyState===1)ws.send(JSON.stringify({type:'log.unsubscribe',data:{shop:currentLogsShop}}));currentLogsShop=null;document.getElementById('logsPanel').classList.remove('open');}
function addLogEntry(line){const c=document.getElementById('logsContent');if(c.querySelector('div[style*="color:#666"]'))c.innerHTML='';const e=document.createElement('div');e.className='log-entry'+(line.includes('BANNED')?' banned':'');e.textContent=line;c.insertBefore(e,c.firstChild);while(c.children.length>100)c.removeChild(c.lastChild);}
function formatTime(iso){return new Date(iso).toLocaleTimeString('de-DE');}
function formatRuntime(m){if(!m||m<=0)return'-';if(m<60)return Math.round(m)+'m';const h=m/60;if(h<24)return Math.round(h)+'h';return Math.round(h/24)+'d';}
function toast(msg,type='info'){const c=document.getElementById('toastContainer'),t=document.createElement('div');t.className='toast '+type;t.innerHTML='<span>'+msg+'</span>';c.appendChild(t);setTimeout(()=>t.remove(),4000);}
connect();
</script>
</body>
</html>'''
def create_systemd_service():
service = """[Unit]
Description=JTL-WAFi Dashboard v2.3 (WebSocket)
After=network.target
[Service]
Type=simple
ExecStart=/usr/bin/python3 /opt/jtl-wafi/dashboard.py
Restart=always
RestartSec=10
User=root
Environment=PYTHONUNBUFFERED=1
[Install]
WantedBy=multi-user.target
"""
with open("/etc/systemd/system/jtl-wafi.service", 'w') as f:
f.write(service)
print("✅ Service erstellt")
print(" systemctl daemon-reload && systemctl enable --now jtl-wafi")
def main():
import argparse
parser = argparse.ArgumentParser(description=f"JTL-WAFi Dashboard v{VERSION}")
parser.add_argument("--host", default="0.0.0.0")
parser.add_argument("--port", type=int, default=8000)
parser.add_argument("--no-ssl", action="store_true")
parser.add_argument("--install-service", action="store_true")
args = parser.parse_args()
if args.install_service:
create_systemd_service()
return
os.makedirs(DATA_DIR, exist_ok=True)
print("=" * 60)
print(f"🌍 JTL-WAFi Dashboard v{VERSION} (In-Memory)")
print("=" * 60)
print(f"Host: {args.host}:{args.port}")
print(f"SSL: {'Nein' if args.no_ssl else 'Ja'}")
print("=" * 60)
ssl_config = {}
if not args.no_ssl:
generate_ssl_certificate()
ssl_config = {"ssl_certfile": SSL_CERT, "ssl_keyfile": SSL_KEY}
uvicorn.run(app, host=args.host, port=args.port, **ssl_config, log_level="info")
if __name__ == "__main__":
main()