chore: 初始提交 Fonu 1.0.2

- 公网反代：Nginx 状态卡片（版本 / 运行状态 / 配置校验 / 端口监听） - 部署设置第一、二梯队（HTTPS 开关、安全头、限流、连接数、仅中国大陆 IP） - 隧道检测兼容 frps v0.68 / v0.71（V2 与旧版端点） - 恢复被清空的 internal/frp/store.go、internal/api/ddns_handler.go、web/src/views/DdnsView.vue
2026-09-23 09:40:59 +08:00
commit 278f8267b7
333 changed files with 53562 additions and 0 deletions
@@ -0,0 +1,181 @@
+package settings
+
+import (
+	"context"
+	"database/sql"
+	"strconv"
+	"strings"
+)
+
+const (
+	KeyTheme                 = "theme"
+	KeyTimezone              = "timezone"
+	KeyLogRetentionDays      = "log_retention_days"
+	KeyDDNSCheckInterval     = "ddns_check_interval_minutes"
+	KeyCertRenewThreshold    = "cert_renew_threshold_days"
+	KeyRootDomain            = "root_domain"
+	KeyACMEEmail             = "acme_email"
+	KeyACMECA                = "acme_ca"
+	KeyZeroSSLAPIKey         = "zerossl_api_key"
+	KeyNotifyWebhookURL      = "notify_webhook_url"
+	KeyNotifyType            = "notify_type"
+	KeyNotifyEmailJSON       = "notify_email_json"
+	KeyNotifySMTPPassword    = "notify_smtp_password"
+	KeyNotifyWebhookJSON     = "notify_webhook_json"
+	KeyNotifyWebhookSecret   = "notify_webhook_secret"
+	KeyNotifyTelegramJSON    = "notify_telegram_json"
+	KeyNotifyTelegramToken   = "notify_telegram_token"
+	KeyNotifyOnDDNSError            = "notify_on_ddns_error" // legacy, migrated to KeyNotifyOnDDNSFailure
+	KeyNotifyOnCertError            = "notify_on_cert_error" // legacy, migrated to KeyNotifyOnCertExpiry
+	KeyNotifyOnNginxError           = "notify_on_nginx_error" // legacy, ignored
+	KeyNotifyOnDDNSIPChange         = "notify_on_ddns_ip_change"
+	KeyNotifyOnDDNSFailure          = "notify_on_ddns_failure"
+	KeyNotifyOnCertExpiry           = "notify_on_cert_expiry"
+	KeyNotifyOnCertRenewSuccess     = "notify_on_cert_renew_success"
+	KeyNotifyOnIPFrequentAccess     = "notify_on_ip_frequent_access"
+	KeyNotifyOnCertRenewFailure     = "notify_on_cert_renew_failure"
+	KeyNotifyOnLoginFailure         = "notify_on_login_failure"
+	KeyNotifyOnNginxReloadFailure   = "notify_on_nginx_reload_failure"
+	KeyNotifyIPFrequentThreshold    = "notify_ip_frequent_threshold"
+	KeyNotifyIPFrequentWindowSec    = "notify_ip_frequent_window_sec"
+	KeyNotifyLoginFailureThreshold  = "notify_login_failure_threshold"
+	KeyNotifyLoginFailureWindowSec  = "notify_login_failure_window_sec"
+	KeyTrustedProxy          = "trusted_proxy_json"
+	KeyGlobalIPBlacklist     = "global_ip_blacklist"
+	KeyGlobalIPWhitelist     = "global_ip_whitelist"
+	KeyChinaCIDRUpdateHours  = "china_cidr_update_interval_hours"
+	KeyChinaCIDRSourceV4     = "china_cidr_source_url_v4"
+	KeyChinaCIDRSourceV6     = "china_cidr_source_url_v6"
+	KeyChinaCIDRUpdatedAt    = "china_cidr_updated_at"
+	KeyChinaCIDRCountV4      = "china_cidr_count_v4"
+	KeyChinaCIDRCountV6      = "china_cidr_count_v6"
+	KeyChinaCIDRLastError    = "china_cidr_last_error"
+	KeyFRPEnabled            = "frp_enabled"
+	KeyFRPServerAddr         = "frp_server_addr"
+	KeyFRPServerPort         = "frp_server_port"
+	KeyFRPAuthToken          = "frp_auth_token"
+	KeyFRPTLSEnabled         = "frp_tls_enabled"
+	KeyFRPCustomDomains      = "frp_custom_domains"
+	KeyFRPLastError          = "frp_last_error"
+	KeyFRPStartedAt          = "frp_started_at"
+	KeyNginxGlobalMode       = "nginx_global_mode"
+)
+
+var Defaults = map[string]string{
+	KeyTheme:              "system",
+	KeyTimezone:           "Asia/Shanghai",
+	KeyLogRetentionDays:   "30",
+	KeyDDNSCheckInterval:  "5",
+	KeyCertRenewThreshold: "30",
+	KeyACMECA:                    "letsencrypt",
+	KeyChinaCIDRUpdateHours:      "24",
+	KeyNginxGlobalMode:           "auto",
+}
+
+type Store struct {
+	db *sql.DB
+}
+
+func NewStore(db *sql.DB) *Store {
+	return &Store{db: db}
+}
+
+func (s *Store) Get(ctx context.Context, key string) (string, error) {
+	var value string
+	err := s.db.QueryRowContext(ctx, `SELECT value FROM settings WHERE key = ?`, key).Scan(&value)
+	if err == sql.ErrNoRows {
+		if def, ok := Defaults[key]; ok {
+			return def, nil
+		}
+		return "", nil
+	}
+	return value, err
+}
+
+func (s *Store) Set(ctx context.Context, key, value string) error {
+	_, err := s.db.ExecContext(ctx, `
+		INSERT INTO settings(key, value) VALUES (?, ?)
+		ON CONFLICT(key) DO UPDATE SET value = excluded.value
+	`, key, value)
+	return err
+}
+
+func (s *Store) GetBool(ctx context.Context, key string) (bool, error) {
+	raw, err := s.Get(ctx, key)
+	if err != nil {
+		return false, err
+	}
+	switch strings.ToLower(strings.TrimSpace(raw)) {
+	case "1", "true", "yes", "on":
+		return true, nil
+	default:
+		return false, nil
+	}
+}
+
+func (s *Store) SetBool(ctx context.Context, key string, value bool) error {
+	if value {
+		return s.Set(ctx, key, "true")
+	}
+	return s.Set(ctx, key, "false")
+}
+
+func (s *Store) SetInt(ctx context.Context, key string, value int) error {
+	return s.Set(ctx, key, strconv.Itoa(value))
+}
+
+func (s *Store) GetInt(ctx context.Context, key string) (int, error) {
+	raw, err := s.Get(ctx, key)
+	if err != nil {
+		return 0, err
+	}
+	if raw == "" {
+		if def, ok := Defaults[key]; ok {
+			raw = def
+		}
+	}
+	n, err := strconv.Atoi(raw)
+	if err != nil {
+		return 0, err
+	}
+	return n, nil
+}
+
+func (s *Store) List(ctx context.Context) (map[string]string, error) {
+	rows, err := s.db.QueryContext(ctx, `SELECT key, value FROM settings`)
+	if err != nil {
+		return nil, err
+	}
+	defer rows.Close()
+
+	out := map[string]string{}
+	for k, v := range Defaults {
+		out[k] = v
+	}
+	for rows.Next() {
+		var key, value string
+		if err := rows.Scan(&key, &value); err != nil {
+			return nil, err
+		}
+		out[key] = value
+	}
+	return out, rows.Err()
+}
+
+func (s *Store) SetMany(ctx context.Context, values map[string]string) error {
+	tx, err := s.db.BeginTx(ctx, nil)
+	if err != nil {
+		return err
+	}
+	defer func() { _ = tx.Rollback() }()
+
+	for key, value := range values {
+		if _, err := tx.ExecContext(ctx, `
+			INSERT INTO settings(key, value) VALUES (?, ?)
+			ON CONFLICT(key) DO UPDATE SET value = excluded.value
+		`, key, value); err != nil {
+			return err
+		}
+	}
+	return tx.Commit()
+}