feat: 配置版本历史/对比/回滚、国内 IM 通知渠道、阈值告警与 API Token（v1.2.9）

- 配置版本：fsutil 版本化备份（内容相同自动去重），主 nginx.conf 与 VPS vhost 的版本列表/逐行差异/一键回滚，回滚先校验语法与 nginx -t 再写回 - agent 0.12.2：写 vhost 前留版本；nginx -t 校验失败改为恢复上一个可用版本（此前直接删文件），新增域名 vhost 版本端点，双架构二进制已重编 - 通知：补企业微信 / 钉钉 / 飞书机器人，切换预设时服务地址跟随该预设默认值 - 阈值告警：新增 internal/monitor 巡检（CPU/内存/磁盘持续超阈值、隧道连续 N 次未注册），默认关闭，带静默期与恢复通知 - API Token：api_tokens 表 + Authorization Bearer 认证，只读/读写两种范围；令牌管理与改密/退出仅限登录会话
2026-09-24 20:50:17 +08:00
parent 8f75e99339
commit 862442e77f
42 changed files with 3034 additions and 190 deletions
@@ -8,68 +8,74 @@ import (
 )

 const (
-	KeyTheme                 = "theme"
-	KeyTimezone              = "timezone"
-	KeyLogRetentionDays      = "log_retention_days"
-	KeyDDNSCheckInterval     = "ddns_check_interval_minutes"
-	KeyCertRenewThreshold    = "cert_renew_threshold_days"
-	KeyRootDomain            = "root_domain"
-	KeyACMEEmail             = "acme_email"
-	KeyACMECA                = "acme_ca"
-	KeyZeroSSLAPIKey         = "zerossl_api_key"
-	KeyNotifyWebhookURL      = "notify_webhook_url"
-	KeyNotifyType            = "notify_type"
-	KeyNotifyEmailJSON       = "notify_email_json"
-	KeyNotifySMTPPassword    = "notify_smtp_password"
-	KeyNotifyWebhookJSON     = "notify_webhook_json"
-	KeyNotifyWebhookSecret   = "notify_webhook_secret"
-	KeyNotifyTelegramJSON    = "notify_telegram_json"
-	KeyNotifyTelegramToken   = "notify_telegram_token"
-	KeyNotifyOnDDNSError            = "notify_on_ddns_error" // legacy, migrated to KeyNotifyOnDDNSFailure
-	KeyNotifyOnCertError            = "notify_on_cert_error" // legacy, migrated to KeyNotifyOnCertExpiry
-	KeyNotifyOnNginxError           = "notify_on_nginx_error" // legacy, ignored
-	KeyNotifyOnDDNSIPChange         = "notify_on_ddns_ip_change"
-	KeyNotifyOnDDNSFailure          = "notify_on_ddns_failure"
-	KeyNotifyOnCertExpiry           = "notify_on_cert_expiry"
-	KeyNotifyOnCertRenewSuccess     = "notify_on_cert_renew_success"
-	KeyNotifyOnIPFrequentAccess     = "notify_on_ip_frequent_access"
-	KeyNotifyOnCertRenewFailure     = "notify_on_cert_renew_failure"
-	KeyNotifyOnLoginFailure         = "notify_on_login_failure"
-	KeyNotifyOnNginxReloadFailure   = "notify_on_nginx_reload_failure"
-	KeyNotifyIPFrequentThreshold    = "notify_ip_frequent_threshold"
-	KeyNotifyIPFrequentWindowSec    = "notify_ip_frequent_window_sec"
-	KeyNotifyLoginFailureThreshold  = "notify_login_failure_threshold"
-	KeyNotifyLoginFailureWindowSec  = "notify_login_failure_window_sec"
-	KeyTrustedProxy          = "trusted_proxy_json"
-	KeyGlobalIPBlacklist     = "global_ip_blacklist"
-	KeyGlobalIPWhitelist     = "global_ip_whitelist"
-	KeyChinaCIDRUpdateHours  = "china_cidr_update_interval_hours"
-	KeyChinaCIDRSourceV4     = "china_cidr_source_url_v4"
-	KeyChinaCIDRSourceV6     = "china_cidr_source_url_v6"
-	KeyChinaCIDRUpdatedAt    = "china_cidr_updated_at"
-	KeyChinaCIDRCountV4      = "china_cidr_count_v4"
-	KeyChinaCIDRCountV6      = "china_cidr_count_v6"
-	KeyChinaCIDRLastError    = "china_cidr_last_error"
-	KeyFRPEnabled            = "frp_enabled"
-	KeyFRPServerAddr         = "frp_server_addr"
-	KeyFRPServerPort         = "frp_server_port"
-	KeyFRPAuthToken          = "frp_auth_token"
-	KeyFRPTLSEnabled         = "frp_tls_enabled"
-	KeyFRPCustomDomains      = "frp_custom_domains"
-	KeyFRPLastError          = "frp_last_error"
-	KeyFRPStartedAt          = "frp_started_at"
-	KeyNginxGlobalMode       = "nginx_global_mode"
+	KeyTheme                       = "theme"
+	KeyTimezone                    = "timezone"
+	KeyLogRetentionDays            = "log_retention_days"
+	KeyDDNSCheckInterval           = "ddns_check_interval_minutes"
+	KeyCertRenewThreshold          = "cert_renew_threshold_days"
+	KeyRootDomain                  = "root_domain"
+	KeyACMEEmail                   = "acme_email"
+	KeyACMECA                      = "acme_ca"
+	KeyZeroSSLAPIKey               = "zerossl_api_key"
+	KeyNotifyWebhookURL            = "notify_webhook_url"
+	KeyNotifyType                  = "notify_type"
+	KeyNotifyEmailJSON             = "notify_email_json"
+	KeyNotifySMTPPassword          = "notify_smtp_password"
+	KeyNotifyWebhookJSON           = "notify_webhook_json"
+	KeyNotifyWebhookSecret         = "notify_webhook_secret"
+	KeyNotifyTelegramJSON          = "notify_telegram_json"
+	KeyNotifyTelegramToken         = "notify_telegram_token"
+	KeyNotifyOnDDNSError           = "notify_on_ddns_error"  // legacy, migrated to KeyNotifyOnDDNSFailure
+	KeyNotifyOnCertError           = "notify_on_cert_error"  // legacy, migrated to KeyNotifyOnCertExpiry
+	KeyNotifyOnNginxError          = "notify_on_nginx_error" // legacy, ignored
+	KeyNotifyOnDDNSIPChange        = "notify_on_ddns_ip_change"
+	KeyNotifyOnDDNSFailure         = "notify_on_ddns_failure"
+	KeyNotifyOnCertExpiry          = "notify_on_cert_expiry"
+	KeyNotifyOnCertRenewSuccess    = "notify_on_cert_renew_success"
+	KeyNotifyOnIPFrequentAccess    = "notify_on_ip_frequent_access"
+	KeyNotifyOnCertRenewFailure    = "notify_on_cert_renew_failure"
+	KeyNotifyOnLoginFailure        = "notify_on_login_failure"
+	KeyNotifyOnNginxReloadFailure  = "notify_on_nginx_reload_failure"
+	KeyNotifyIPFrequentThreshold   = "notify_ip_frequent_threshold"
+	KeyNotifyIPFrequentWindowSec   = "notify_ip_frequent_window_sec"
+	KeyNotifyLoginFailureThreshold = "notify_login_failure_threshold"
+	KeyNotifyLoginFailureWindowSec = "notify_login_failure_window_sec"
+	KeyNotifyOnResourceThreshold   = "notify_on_resource_threshold"
+	KeyNotifyOnTunnelDown          = "notify_on_tunnel_down"
+	KeyNotifyCPUThreshold          = "notify_cpu_threshold"
+	KeyNotifyMemoryThreshold       = "notify_memory_threshold"
+	KeyNotifyDiskThreshold         = "notify_disk_threshold"
+	KeyNotifyTunnelFailThreshold   = "notify_tunnel_fail_threshold"
+	KeyTrustedProxy                = "trusted_proxy_json"
+	KeyGlobalIPBlacklist           = "global_ip_blacklist"
+	KeyGlobalIPWhitelist           = "global_ip_whitelist"
+	KeyChinaCIDRUpdateHours        = "china_cidr_update_interval_hours"
+	KeyChinaCIDRSourceV4           = "china_cidr_source_url_v4"
+	KeyChinaCIDRSourceV6           = "china_cidr_source_url_v6"
+	KeyChinaCIDRUpdatedAt          = "china_cidr_updated_at"
+	KeyChinaCIDRCountV4            = "china_cidr_count_v4"
+	KeyChinaCIDRCountV6            = "china_cidr_count_v6"
+	KeyChinaCIDRLastError          = "china_cidr_last_error"
+	KeyFRPEnabled                  = "frp_enabled"
+	KeyFRPServerAddr               = "frp_server_addr"
+	KeyFRPServerPort               = "frp_server_port"
+	KeyFRPAuthToken                = "frp_auth_token"
+	KeyFRPTLSEnabled               = "frp_tls_enabled"
+	KeyFRPCustomDomains            = "frp_custom_domains"
+	KeyFRPLastError                = "frp_last_error"
+	KeyFRPStartedAt                = "frp_started_at"
+	KeyNginxGlobalMode             = "nginx_global_mode"
 )

 var Defaults = map[string]string{
-	KeyTheme:              "system",
-	KeyTimezone:           "Asia/Shanghai",
-	KeyLogRetentionDays:   "30",
-	KeyDDNSCheckInterval:  "5",
-	KeyCertRenewThreshold: "30",
-	KeyACMECA:                    "letsencrypt",
-	KeyChinaCIDRUpdateHours:      "24",
-	KeyNginxGlobalMode:           "auto",
+	KeyTheme:                "system",
+	KeyTimezone:             "Asia/Shanghai",
+	KeyLogRetentionDays:     "30",
+	KeyDDNSCheckInterval:    "5",
+	KeyCertRenewThreshold:   "30",
+	KeyACMECA:               "letsencrypt",
+	KeyChinaCIDRUpdateHours: "24",
+	KeyNginxGlobalMode:      "auto",
 }

 type Store struct {