v2.0.0

.github/workflows/deploy-beta.yml

@@ -1,32 +1,56 @@
-name: Deploy Beta
-
-on:
-  push:
-    branches: [beta]
-
-permissions:
-  contents: read
-
-jobs:
-  deploy:
-    runs-on: ubuntu-latest
-    steps:
-      - name: SSH and deploy
-        uses: appleboy/ssh-action@v1.2.0
-        with:
-          host: ${{ secrets.SSH_HOST }}
-          username: ${{ secrets.SSH_USER }}
-          key: ${{ secrets.SSH_PRIVATE_KEY }}
-          port: ${{ secrets.SSH_PORT || 22 }}
-          host_key_checking: false
-          script: |
-            cd ${{ secrets.BETA_PATH }}
-            cp .env /tmp/beta.env 2>/dev/null; cp port.txt /tmp/beta.port.txt 2>/dev/null
-            git fetch origin --prune
-            git checkout beta
-            git reset --hard origin/beta
-            cp /tmp/beta.env .env 2>/dev/null; cp /tmp/beta.port.txt port.txt 2>/dev/null
-            grep 'discord.zero-host.org' public/js/app.js || echo "⚠ DISCORD LINK NOT FOUND IN FILE"
-            head -20 port.txt 2>/dev/null || echo "⚠ port.txt missing or empty"
-            npm install
-            pm2 restart beta
+name: Deploy Beta
+
+on:
+  push:
+    branches: [beta]
+
+permissions:
+  contents: read
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Go
+        uses: actions/setup-go@v5
+        with:
+          go-version: 'stable'
+
+      - name: Build
+        run: go build -o server ./cmd/server/
+
+      - name: Stop service
+        uses: appleboy/ssh-action@v1.2.0
+        with:
+          host: ${{ secrets.SSH_HOST }}
+          username: ${{ secrets.SSH_USER }}
+          key: ${{ secrets.SSH_PRIVATE_KEY }}
+          port: ${{ secrets.SSH_PORT || 22 }}
+          script: |
+            systemctl stop beta || true
+
+      - name: Upload binary
+        uses: appleboy/scp-action@v0.1.7
+        with:
+          host: ${{ secrets.SSH_HOST }}
+          username: ${{ secrets.SSH_USER }}
+          key: ${{ secrets.SSH_PRIVATE_KEY }}
+          port: ${{ secrets.SSH_PORT || 22 }}
+          source: server
+          target: ${{ secrets.BETA_PATH }}
+          strip_components: 0
+          overwrite: true
+
+      - name: Start service
+        uses: appleboy/ssh-action@v1.2.0
+        with:
+          host: ${{ secrets.SSH_HOST }}
+          username: ${{ secrets.SSH_USER }}
+          key: ${{ secrets.SSH_PRIVATE_KEY }}
+          port: ${{ secrets.SSH_PORT || 22 }}
+          script: |
+            chmod +x ${{ secrets.BETA_PATH }}/server
+            systemctl start beta

.github/workflows/deploy-main.yml

@@ -1,30 +1,56 @@
-name: Deploy Main
-
-on:
-  push:
-    branches: [main]
-
-permissions:
-  contents: read
-
-jobs:
-  deploy:
-    runs-on: ubuntu-latest
-    steps:
-      - name: SSH and deploy
-        uses: appleboy/ssh-action@v1.2.0
-        with:
-          host: ${{ secrets.SSH_HOST }}
-          username: ${{ secrets.SSH_USER }}
-          key: ${{ secrets.SSH_PRIVATE_KEY }}
-          port: ${{ secrets.SSH_PORT || 22 }}
-          host_key_checking: false
-          script: |
-            cd ${{ secrets.MAIN_PATH }}
-            cp .env /tmp/main.env 2>/dev/null; cp port.txt /tmp/main.port.txt 2>/dev/null
-            git fetch origin --prune
-            git checkout main
-            git reset --hard origin/main
-            cp /tmp/main.env .env 2>/dev/null; cp /tmp/main.port.txt port.txt 2>/dev/null
-            npm install
-            pm2 restart zerohost-dashboard
+name: Deploy Main
+
+on:
+  push:
+    branches: [main]
+
+permissions:
+  contents: read
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Go
+        uses: actions/setup-go@v5
+        with:
+          go-version: 'stable'
+
+      - name: Build
+        run: go build -o server ./cmd/server/
+
+      - name: Stop service
+        uses: appleboy/ssh-action@v1.2.0
+        with:
+          host: ${{ secrets.SSH_HOST }}
+          username: ${{ secrets.SSH_USER }}
+          key: ${{ secrets.SSH_PRIVATE_KEY }}
+          port: ${{ secrets.SSH_PORT || 22 }}
+          script: |
+            systemctl stop prod || true
+
+      - name: Upload binary
+        uses: appleboy/scp-action@v0.1.7
+        with:
+          host: ${{ secrets.SSH_HOST }}
+          username: ${{ secrets.SSH_USER }}
+          key: ${{ secrets.SSH_PRIVATE_KEY }}
+          port: ${{ secrets.SSH_PORT || 22 }}
+          source: server
+          target: ${{ secrets.MAIN_PATH }}
+          strip_components: 0
+          overwrite: true
+
+      - name: Start service
+        uses: appleboy/ssh-action@v1.2.0
+        with:
+          host: ${{ secrets.SSH_HOST }}
+          username: ${{ secrets.SSH_USER }}
+          key: ${{ secrets.SSH_PRIVATE_KEY }}
+          port: ${{ secrets.SSH_PORT || 22 }}
+          script: |
+            chmod +x ${{ secrets.MAIN_PATH }}/server
+            systemctl start prod

.gitignore

@@ -34,3 +34,6 @@ uploads/
 # Secrets (if any local dump)
 *.pem
 *.key
+
+# Go binary
+/server

cmd/server/main.go

@@ -0,0 +1,105 @@
+package main
+
+import (
+	"log"
+	"net/http"
+	"os"
+	"os/signal"
+	"strings"
+	"syscall"
+
+	"github.com/go-chi/chi/v5"
+	chimw "github.com/go-chi/chi/v5/middleware"
+	"zerohost/dashboard/internal/config"
+	"zerohost/dashboard/internal/database"
+	"zerohost/dashboard/internal/embed"
+	"zerohost/dashboard/internal/middleware"
+	"zerohost/dashboard/internal/routes"
+	"zerohost/dashboard/internal/services"
+)
+
+func main() {
+	cfg := config.Load()
+
+	if err := database.InitPool(cfg.DatabaseDSN); err != nil {
+		log.Fatalf("Failed to connect to database: %v", err)
+	}
+	defer database.ClosePool()
+
+	database.RunMigrations()
+
+	services.PteroURL = cfg.PteroURL
+	services.PteroAPIKey = cfg.PteroAPIKey
+	services.PanelDBName = cfg.PanelDBName
+	services.ResendAPIKey = cfg.ResendAPIKey
+	services.ResendFrom = cfg.ResendFrom
+	services.BaseURL = cfg.BaseURL
+
+	if cfg.ResendAPIKey == "" {
+		log.Println("WARNING: RESEND_API_KEY not set — verification emails will not be sent")
+	}
+
+	if err := services.InitSecurity(cfg.IPQSKey, cfg.AbuseIPDBKey); err != nil {
+		log.Printf("Warning: security service init failed: %v", err)
+	}
+
+	if err := services.InitFileLogger("log.txt"); err != nil {
+		log.Printf("Warning: file logger init failed: %v", err)
+	}
+
+	services.StartScheduler()
+
+	r := chi.NewRouter()
+
+	r.Use(chimw.Logger)
+	r.Use(chimw.Recoverer)
+	r.Use(chimw.RealIP)
+	r.Use(middleware.SecurityHeaders)
+	r.Use(middleware.FileLogger)
+
+	fileServer := http.FileServer(http.FS(embed.SubFS))
+
+	r.Get("/*", func(w http.ResponseWriter, r *http.Request) {
+		cleanPath := strings.TrimPrefix(r.URL.Path, "/")
+		if cleanPath == "" {
+			cleanPath = "index.html"
+		}
+
+		if _, err := embed.SubFS.Open(cleanPath); err == nil {
+			fileServer.ServeHTTP(w, r)
+			return
+		}
+
+		index, err := embed.PublicFS.ReadFile("public/index.html")
+		if err != nil {
+			http.Error(w, "Not found", http.StatusNotFound)
+			return
+		}
+		w.Header().Set("Content-Type", "text/html; charset=utf-8")
+		w.Write(index)
+	})
+
+	r.Route("/api", func(r chi.Router) {
+		routes.RegisterAuthRoutes(r)
+		routes.RegisterServerRoutes(r)
+		routes.RegisterAdminRoutes(r)
+		routes.RegisterNotificationRoutes(r)
+		r.Route("/auth", func(r chi.Router) {
+			routes.RegisterPasskeyRoutes(r)
+			routes.RegisterTOTPRoutes(r)
+		})
+	})
+
+	go func() {
+		addr := ":" + cfg.Port
+		log.Printf("ZeroHost Dashboard starting on %s", addr)
+		if err := http.ListenAndServe(addr, r); err != nil {
+			log.Fatalf("Server failed: %v", err)
+		}
+	}()
+
+	quit := make(chan os.Signal, 1)
+	signal.Notify(quit, syscall.SIGINT, syscall.SIGTERM)
+	<-quit
+	log.Println("Shutting down...")
+}