]>
Commit | Line | Data |
---|---|---|
8b27beb9 DM |
1 | package PVE::API2::Firewall::Host; |
2 | ||
3 | use strict; | |
4 | use warnings; | |
f6163c2e TL |
5 | |
6 | use PVE::Exception qw(raise_param_exc); | |
8b27beb9 | 7 | use PVE::JSONSchema qw(get_standard_option); |
a959126d | 8 | use PVE::RPCEnvironment; |
8b27beb9 DM |
9 | |
10 | use PVE::Firewall; | |
63c91681 | 11 | use PVE::API2::Firewall::Rules; |
8b27beb9 | 12 | |
8b27beb9 DM |
13 | |
14 | use base qw(PVE::RESTHandler); | |
15 | ||
63c91681 | 16 | __PACKAGE__->register_method ({ |
75a12a9d | 17 | subclass => "PVE::API2::Firewall::HostRules", |
63c91681 DM |
18 | path => 'rules', |
19 | }); | |
20 | ||
8b27beb9 DM |
21 | __PACKAGE__->register_method({ |
22 | name => 'index', | |
23 | path => '', | |
24 | method => 'GET', | |
25 | permissions => { user => 'all' }, | |
26 | description => "Directory index.", | |
27 | parameters => { | |
28 | additionalProperties => 0, | |
29 | properties => { | |
30 | node => get_standard_option('pve-node'), | |
31 | }, | |
32 | }, | |
33 | returns => { | |
34 | type => 'array', | |
35 | items => { | |
36 | type => "object", | |
37 | properties => {}, | |
38 | }, | |
39 | links => [ { rel => 'child', href => "{name}" } ], | |
40 | }, | |
41 | code => sub { | |
42 | my ($param) = @_; | |
43 | ||
44 | my $result = [ | |
45 | { name => 'rules' }, | |
46 | { name => 'options' }, | |
a959126d | 47 | { name => 'log' }, |
8b27beb9 DM |
48 | ]; |
49 | ||
50 | return $result; | |
51 | }}); | |
52 | ||
e313afe0 | 53 | my $option_properties = $PVE::Firewall::host_option_properties; |
6302c41f DM |
54 | |
55 | my $add_option_properties = sub { | |
56 | my ($properties) = @_; | |
57 | ||
58 | foreach my $k (keys %$option_properties) { | |
59 | $properties->{$k} = $option_properties->{$k}; | |
60 | } | |
75a12a9d | 61 | |
6302c41f DM |
62 | return $properties; |
63 | }; | |
64 | ||
65 | ||
8b27beb9 DM |
66 | __PACKAGE__->register_method({ |
67 | name => 'get_options', | |
68 | path => 'options', | |
69 | method => 'GET', | |
70 | description => "Get host firewall options.", | |
71 | proxyto => 'node', | |
60c103df DM |
72 | permissions => { |
73 | check => ['perm', '/nodes/{node}', [ 'Sys.Audit' ]], | |
74 | }, | |
8b27beb9 DM |
75 | parameters => { |
76 | additionalProperties => 0, | |
77 | properties => { | |
78 | node => get_standard_option('pve-node'), | |
79 | }, | |
80 | }, | |
81 | returns => { | |
82 | type => "object", | |
6302c41f DM |
83 | #additionalProperties => 1, |
84 | properties => $option_properties, | |
8b27beb9 DM |
85 | }, |
86 | code => sub { | |
87 | my ($param) = @_; | |
88 | ||
f78c7ca0 TL |
89 | my $cluster_conf = PVE::Firewall::load_clusterfw_conf(); |
90 | my $hostfw_conf = PVE::Firewall::load_hostfw_conf($cluster_conf); | |
8b27beb9 | 91 | |
5d38d64f | 92 | return PVE::Firewall::copy_opject_with_digest($hostfw_conf->{options}); |
8b27beb9 DM |
93 | }}); |
94 | ||
6302c41f DM |
95 | __PACKAGE__->register_method({ |
96 | name => 'set_options', | |
97 | path => 'options', | |
98 | method => 'PUT', | |
99 | description => "Set Firewall options.", | |
100 | protected => 1, | |
101 | proxyto => 'node', | |
60c103df DM |
102 | permissions => { |
103 | check => ['perm', '/nodes/{node}', [ 'Sys.Modify' ]], | |
104 | }, | |
6302c41f DM |
105 | parameters => { |
106 | additionalProperties => 0, | |
107 | properties => &$add_option_properties({ | |
108 | node => get_standard_option('pve-node'), | |
109 | delete => { | |
110 | type => 'string', format => 'pve-configid-list', | |
111 | description => "A list of settings you want to delete.", | |
112 | optional => 1, | |
113 | }, | |
114 | digest => get_standard_option('pve-config-digest'), | |
115 | }), | |
116 | }, | |
117 | returns => { type => "null" }, | |
118 | code => sub { | |
119 | my ($param) = @_; | |
120 | ||
a38849e6 FG |
121 | PVE::Firewall::lock_hostfw_conf(10, sub { |
122 | my $cluster_conf = PVE::Firewall::load_clusterfw_conf(); | |
123 | my $hostfw_conf = PVE::Firewall::load_hostfw_conf($cluster_conf); | |
124 | ||
125 | my (undef, $digest) = PVE::Firewall::copy_opject_with_digest($hostfw_conf->{options}); | |
126 | PVE::Tools::assert_if_modified($digest, $param->{digest}); | |
127 | ||
128 | if ($param->{delete}) { | |
129 | foreach my $opt (PVE::Tools::split_list($param->{delete})) { | |
130 | raise_param_exc({ delete => "no such option '$opt'" }) | |
131 | if !$option_properties->{$opt}; | |
132 | delete $hostfw_conf->{options}->{$opt}; | |
133 | } | |
6302c41f | 134 | } |
6302c41f | 135 | |
a38849e6 FG |
136 | if (defined($param->{enable})) { |
137 | $param->{enable} = $param->{enable} ? 1 : 0; | |
138 | } | |
6302c41f | 139 | |
a38849e6 FG |
140 | foreach my $k (keys %$option_properties) { |
141 | next if !defined($param->{$k}); | |
142 | $hostfw_conf->{options}->{$k} = $param->{$k}; | |
143 | } | |
6302c41f | 144 | |
a38849e6 FG |
145 | PVE::Firewall::save_hostfw_conf($hostfw_conf); |
146 | }); | |
6302c41f DM |
147 | |
148 | return undef; | |
149 | }}); | |
150 | ||
a959126d | 151 | __PACKAGE__->register_method({ |
75a12a9d TL |
152 | name => 'log', |
153 | path => 'log', | |
a959126d DM |
154 | method => 'GET', |
155 | description => "Read firewall log", | |
156 | proxyto => 'node', | |
157 | permissions => { | |
158 | check => ['perm', '/nodes/{node}', [ 'Sys.Syslog' ]], | |
159 | }, | |
160 | protected => 1, | |
161 | parameters => { | |
162 | additionalProperties => 0, | |
163 | properties => { | |
164 | node => get_standard_option('pve-node'), | |
165 | start => { | |
166 | type => 'integer', | |
167 | minimum => 0, | |
168 | optional => 1, | |
169 | }, | |
170 | limit => { | |
171 | type => 'integer', | |
172 | minimum => 0, | |
173 | optional => 1, | |
174 | }, | |
175 | }, | |
176 | }, | |
177 | returns => { | |
178 | type => 'array', | |
75a12a9d | 179 | items => { |
a959126d DM |
180 | type => "object", |
181 | properties => { | |
182 | n => { | |
183 | description=> "Line number", | |
184 | type=> 'integer', | |
185 | }, | |
186 | t => { | |
187 | description=> "Line text", | |
188 | type => 'string', | |
189 | } | |
190 | } | |
191 | } | |
192 | }, | |
193 | code => sub { | |
194 | my ($param) = @_; | |
195 | ||
196 | my $rpcenv = PVE::RPCEnvironment::get(); | |
197 | my $user = $rpcenv->get_user(); | |
198 | my $node = $param->{node}; | |
199 | ||
200 | my ($count, $lines) = PVE::Tools::dump_logfile("/var/log/pve-firewall.log", $param->{start}, $param->{limit}); | |
201 | ||
202 | $rpcenv->set_result_attrib('total', $count); | |
75a12a9d TL |
203 | |
204 | return $lines; | |
a959126d DM |
205 | }}); |
206 | ||
8b27beb9 | 207 | 1; |