#!/bin/bash # ============================================ # CS-PANEL Installer v1.0.0 # Sistema de Gerenciamento de VPS # ============================================ # Suporte: KVM, OpenVZ, LXC, Xen # Portas: 4081-4085, 5900-6000, 2002-2005 # ============================================ set -e # Para o script em caso de erro # ============================================ # CORES PARA OUTPUT # ============================================ RED='\033[0;31m' GREEN='\033[0;32m' YELLOW='\033[1;33m' BLUE='\033[0;34m' CYAN='\033[0;36m' MAGENTA='\033[0;35m' NC='\033[0m' # No Color # ============================================ # VARIÁVEIS GLOBAIS # ============================================ CS_VERSION="1.0.0" CS_INSTALL_DIR="/usr/local/cspanel" CS_WEB_DIR="/var/www/cspanel" CS_LOGS_DIR="/var/log/cspanel" CS_BACKUP_DIR="/var/backups/cspanel" CS_CONFIG_DIR="/etc/cspanel" CS_SSL_DIR="/etc/ssl/cspanel" CS_LOG_FILE="${CS_LOGS_DIR}/install.log" CS_ISO_DIR="/var/lib/libvirt/images/iso" CS_IMAGES_DIR="/var/lib/libvirt/images" CS_BRIDGE="cspanelbr0" # Portas ADMIN_PORT_HTTP="4084" ADMIN_PORT_HTTPS="4085" USER_PORT="4083" API_PORT="4081" VNC_START="5900" VNC_END="6000" TEMPLATE_PORTS="2002-2005" # Credenciais API_KEY="" API_PASSWORD="" DB_PASSWORD="" ADMIN_PASSWORD="" # Parâmetros EMAIL="" KERNEL="kvm" HYPERVISOR="kvm" SKIP_LICENSE="" # Licenciamento (site CS-PAINEL) - troque pelo domínio real onde SITE/sistema está publicado CS_LICENSE_API="https://cs-painel.myftp.org/sistema/api/validate-license.php" CS_LICENSE_KEY="" CS_LICENSE_TYPE="" CS_LICENSE_VPS_LIMIT="-1" CS_LICENSE_EXPIRES="" # ============================================ # FUNÇÕES AUXILIARES # ============================================ log() { echo -e "[$(date '+%Y-%m-%d %H:%M:%S')] $1" | tee -a $CS_LOG_FILE } log_success() { echo -e "${GREEN}[SUCESSO]${NC} $1" | tee -a $CS_LOG_FILE } log_error() { echo -e "${RED}[ERRO]${NC} $1" | tee -a $CS_LOG_FILE } log_warning() { echo -e "${YELLOW}[AVISO]${NC} $1" | tee -a $CS_LOG_FILE } log_info() { echo -e "${BLUE}[INFO]${NC} $1" | tee -a $CS_LOG_FILE } # ============================================ # LICENÇA (mesma ideia do Virtualizor: valida o e-mail contra # o site CS-PAINEL antes de instalar; a licença é vinculada ao # e-mail + IP do servidor, não a uma chave aleatória digitada) # ============================================ cs_json_get() { local json="$1" key="$2" echo "$json" | grep -o "\"$key\"[[:space:]]*:[[:space:]]*\"[^\"]*\"\|\"$key\"[[:space:]]*:[[:space:]]*[^,}]*" \ | head -n1 | sed -E "s/\"$key\"[[:space:]]*:[[:space:]]*//; s/^\"//; s/\"\$//" } check_license() { if [ "$SKIP_LICENSE" = "1" ]; then log_warning "Verificação de licença ignorada (skip_license=1 - use apenas em ambiente de desenvolvimento/teste)." return fi log_info "Verificando licença do CS-PAINEL para o e-mail: $EMAIL ..." local server_ip server_ip=$(curl -s -4 --max-time 5 https://api.ipify.org || true) if [ -z "$server_ip" ]; then server_ip=$(curl -s -4 --max-time 5 https://ifconfig.me || true) fi local response response=$(curl -s --max-time 10 -G "$CS_LICENSE_API" \ --data-urlencode "email=$EMAIL" \ --data-urlencode "ip=$server_ip" || true) if [ -z "$response" ]; then log_error "Não foi possível contatar o servidor de licenças ($CS_LICENSE_API)." log_error "Verifique sua conexão com a internet/DNS e tente novamente." exit 1 fi local valid valid=$(cs_json_get "$response" "valid") if [ "$valid" != "true" ]; then local msg msg=$(cs_json_get "$response" "message") echo -e "${RED}=================================================${NC}" echo -e "${RED} LICENÇA INVÁLIDA${NC}" echo -e "${RED}=================================================${NC}" echo -e "${YELLOW}${msg:-Nenhuma licença ativa encontrada para este e-mail.}${NC}" echo -e "${YELLOW}Compre uma licença ou ative o teste grátis de 15 dias em: https://cs-painel.myftp.org/sistema/${NC}" exit 1 fi CS_LICENSE_KEY=$(cs_json_get "$response" "license_key") CS_LICENSE_TYPE=$(cs_json_get "$response" "type") CS_LICENSE_VPS_LIMIT=$(cs_json_get "$response" "vps_limit") CS_LICENSE_EXPIRES=$(cs_json_get "$response" "expires_at") log_success "Licença válida! Chave: $CS_LICENSE_KEY | Tipo: $CS_LICENSE_TYPE | VPS permitidos: $CS_LICENSE_VPS_LIMIT | Expira em: $CS_LICENSE_EXPIRES" } # Detecta o IPv4 REAL usado para sair para a rede/internet (o mesmo que o navegador do # cliente precisa usar para acessar o painel). NUNCA usa apenas "hostname -I" puro, pois # esse comando pode listar primeiro bridges virtuais criadas pelo próprio libvirt/KVM # (virbr0) ou por Docker (docker0), fazendo o instalador anunciar um IP que só existe # dentro do host e nunca é alcançável pelo navegador (causa do erro "página não # acessível" mesmo após instalação com sucesso). cs_detect_real_ip() { local ip="" ip=$(ip route get 1.1.1.1 2>/dev/null | grep -oP 'src \K\S+' | head -n1) if [ -z "$ip" ]; then ip=$(ip -4 addr show scope global 2>/dev/null | grep -Ev 'virbr|docker|veth|br-' | grep -oP 'inet \K[0-9.]+' | head -n1) fi if [ -z "$ip" ]; then ip=$(hostname -I | awk '{print $1}') fi echo "$ip" } check_root() { if [ "$EUID" -ne 0 ]; then echo -e "${RED}Erro: Este script deve ser executado como root${NC}" echo "Por favor, execute: sudo su -" exit 1 fi } check_os() { if [ -f /etc/os-release ]; then . /etc/os-release OS=$ID VER=$VERSION_ID OS_NAME=$NAME log_info "Sistema operacional detectado: $OS_NAME $VER" else log_error "Não foi possível detectar o sistema operacional" exit 1 fi case $OS in ubuntu|debian|centos|rhel|almalinux|rocky|fedora) log_success "Sistema operacional suportado: $OS" ;; *) log_error "Sistema operacional não suportado: $OS" log_info "Suportados: Ubuntu, Debian, CentOS, RHEL, AlmaLinux, Rocky, Fedora" exit 1 ;; esac } generate_passwords() { API_KEY=$(openssl rand -base64 32 | tr -d "=+/" | cut -c1-32) API_PASSWORD=$(openssl rand -base64 32 | tr -d "=+/" | cut -c1-32) DB_PASSWORD=$(openssl rand -base64 32 | tr -d "=+/" | cut -c1-20) ADMIN_PASSWORD=$(openssl rand -base64 12 | tr -d "=+/" | cut -c1-12) log_success "Senhas geradas com sucesso" } check_dependencies() { log_info "Verificando dependências..." local deps=("wget" "curl" "tar" "gzip" "unzip" "openssl" "systemctl") local missing=() for dep in "${deps[@]}"; do if ! command -v $dep &> /dev/null; then missing+=($dep) fi done if [ ${#missing[@]} -gt 0 ]; then log_warning "Dependências faltando: ${missing[*]}" log_info "Instalando dependências..." install_dependencies else log_success "Todas as dependências estão instaladas" fi } # ============================================ # FUNÇÕES DE INSTALAÇÃO # ============================================ install_dependencies() { log_info "Instalando dependências..." case $OS in ubuntu|debian) apt-get update -y apt-get install -y wget curl git unzip tar gzip \ apache2 nginx php php-mysql php-curl php-json \ php-mbstring php-xml php-zip php-gd php-fpm \ mysql-server mysql-client \ qemu-kvm libvirt-daemon-system libvirt-clients \ bridge-utils virtinst virt-manager libguestfs-tools \ python3 python3-pip python3-venv \ openssl net-tools bc jq pciutils ufw haproxy \ pdns-server pdns-backend-sqlite3 sqlite3 \ openssh-client sshpass \ certbot python3-certbot-apache ;; centos|rhel|almalinux|rocky|fedora) if command -v dnf &> /dev/null; then dnf install -y epel-release dnf install -y wget curl git unzip tar gzip \ httpd nginx php php-mysqlnd php-curl php-json \ php-mbstring php-xml php-zip php-gd php-fpm \ mariadb-server mariadb-client \ qemu-kvm libvirt-daemon-kvm libvirt-client \ bridge-utils virt-install virt-manager libguestfs-tools-c \ python3 python3-pip python3-devel \ openssl net-tools bc jq pciutils haproxy \ pdns pdns-backend-sqlite \ openssh-clients sshpass \ certbot python3-certbot-apache else yum install -y epel-release yum install -y wget curl git unzip tar gzip \ httpd nginx php php-mysqlnd php-curl php-json \ php-mbstring php-xml php-zip php-gd php-fpm \ mariadb-server mariadb-client \ qemu-kvm libvirt-daemon-kvm libvirt-client \ bridge-utils virt-install virt-manager libguestfs-tools-c \ python3 python3-pip python3-devel \ openssl net-tools bc jq pciutils haproxy \ pdns pdns-backend-sqlite \ openssh-clients sshpass \ certbot python3-certbot-apache fi ;; esac log_success "Dependências instaladas com sucesso" } configure_php() { log_info "Configurando PHP..." PHP_INI=$(php -i | grep "Loaded Configuration File" | awk '{print $4}') if [ -f "$PHP_INI" ]; then sed -i 's/upload_max_filesize = 2M/upload_max_filesize = 4096M/g' $PHP_INI sed -i 's/post_max_size = 8M/post_max_size = 4096M/g' $PHP_INI sed -i 's/memory_limit = 128M/memory_limit = 512M/g' $PHP_INI sed -i 's/max_execution_time = 30/max_execution_time = 600/g' $PHP_INI sed -i 's/max_input_time = 60/max_input_time = 600/g' $PHP_INI log_success "PHP configurado: $PHP_INI" else log_warning "Arquivo php.ini não encontrado" fi } configure_services() { log_info "Configurando serviços..." case $OS in ubuntu|debian) systemctl enable mysql 2>/dev/null || true systemctl start mysql 2>/dev/null || true systemctl enable apache2 2>/dev/null || true systemctl start apache2 2>/dev/null || true systemctl enable php8.1-fpm 2>/dev/null || systemctl enable php8.0-fpm 2>/dev/null || true systemctl start php8.1-fpm 2>/dev/null || systemctl start php8.0-fpm 2>/dev/null || true ;; centos|rhel|almalinux|rocky|fedora) systemctl enable mariadb 2>/dev/null || true systemctl start mariadb 2>/dev/null || true systemctl enable httpd 2>/dev/null || true systemctl start httpd 2>/dev/null || true systemctl enable php-fpm 2>/dev/null || true systemctl start php-fpm 2>/dev/null || true ;; esac log_success "Serviços configurados" } # ============================================ # FUNÇÃO: LAYOUT COMPARTILHADO DO ADMIN (SIDEBAR) # ============================================ create_admin_layout() { log_info "Criando layout do Admin (sidebar/topbar)..." mkdir -p $CS_WEB_DIR/admin/includes cat > $CS_WEB_DIR/admin/includes/header.php << 'EOF' CS-ADMIN - <?php echo htmlspecialchars($page_title); ?>
CS-ADMIN
prepare("SELECT last_notif_seen_id FROM admin_users WHERE id = ?"); $ls_stmt->execute([$admin_id]); $last_seen = (int) ($ls_stmt->fetchColumn() ?: 0); } $count_stmt = $db->prepare("SELECT COUNT(*) FROM logs WHERE id > ?"); $count_stmt->execute([$last_seen]); $cs_notif_count = (int) $count_stmt->fetchColumn(); $cs_notifications = $db->query("SELECT * FROM logs ORDER BY id DESC LIMIT 8")->fetchAll(); } catch (Exception $e) { /* tabela ainda não migrada - trata como zero notificações */ } } ?>
You have total Notification(s)
No Notifications Yet!
Show All Notifications
Dashboard /

Sistema Online
EOF cat > $CS_WEB_DIR/admin/includes/footer.php << 'EOF'
EOF cat > $CS_WEB_DIR/admin/logout.php << 'EOF' $CS_WEB_DIR/admin/modules/dashboard/index.php << 'EOF' query("SELECT COUNT(*) as total FROM vps")->fetch()['total'] ?? 0); $running_vps = (int) ($db->query("SELECT COUNT(*) as running FROM vps WHERE status = 'running'")->fetch()['running'] ?? 0); $suspended_vps = (int) ($db->query("SELECT COUNT(*) as c FROM vps WHERE status = 'suspended'")->fetch()['c'] ?? 0); $building_vps = (int) ($db->query("SELECT COUNT(*) as c FROM vps WHERE status IN ('building','error')")->fetch()['c'] ?? 0); $total_servers = (int) ($db->query("SELECT COUNT(*) as total FROM servers")->fetch()['total'] ?? 0); $online_servers = (int) ($db->query("SELECT COUNT(*) as c FROM servers WHERE status = 'online'")->fetch()['c'] ?? 0); $offline_servers = (int) ($db->query("SELECT COUNT(*) as c FROM servers WHERE status = 'offline'")->fetch()['c'] ?? 0); $maint_servers = (int) ($db->query("SELECT COUNT(*) as c FROM servers WHERE status = 'maintenance'")->fetch()['c'] ?? 0); $total_admins = (int) ($db->query("SELECT COUNT(*) as c FROM admin_users")->fetch()['c'] ?? 0); $total_users = (int) ($db->query("SELECT COUNT(*) as total FROM users")->fetch()['total'] ?? 0); $ipv4_total = (int) ($db->query("SELECT COUNT(*) as c FROM ip_pool WHERE type='ipv4'")->fetch()['c'] ?? 0); $ipv4_free = (int) ($db->query("SELECT COUNT(*) as c FROM ip_pool WHERE type='ipv4' AND status='free'")->fetch()['c'] ?? 0); $ipv6_total = (int) ($db->query("SELECT COUNT(*) as c FROM ip_pool WHERE type='ipv6'")->fetch()['c'] ?? 0); $ipv6_free = (int) ($db->query("SELECT COUNT(*) as c FROM ip_pool WHERE type='ipv6' AND status='free'")->fetch()['c'] ?? 0); $servers_list = $db->query("SELECT s.*, (SELECT COUNT(*) FROM vps v WHERE v.server_id = s.id OR s.ip = '127.0.0.1') as vps_count FROM servers s ORDER BY s.id ASC")->fetchAll(); $stats = cs_host_stats(); $tasks_completed = $db->query("SELECT t.*, v.domain FROM tasks t LEFT JOIN vps v ON v.id = t.vps_id WHERE t.status = 'done' ORDER BY t.id DESC LIMIT 10")->fetchAll(); $tasks_failed = $db->query("SELECT t.*, v.domain FROM tasks t LEFT JOIN vps v ON v.id = t.vps_id WHERE t.status = 'failed' ORDER BY t.id DESC LIMIT 10")->fetchAll(); $tasks_running = $db->query("SELECT t.*, v.domain FROM tasks t LEFT JOIN vps v ON v.id = t.vps_id WHERE t.status IN ('running','pending') ORDER BY t.id DESC LIMIT 10")->fetchAll(); $recent_logins = $db->query("SELECT * FROM admin_login_logs ORDER BY id DESC LIMIT 10")->fetchAll(); $bw = cs_sample_and_get_bandwidth($db); $page_title = 'Dashboard'; require_once CS_ADMIN . '/includes/header.php'; ?>
HYPERVISOR
Online
Offline
Manutenção
VPS
Rodando
Suspensas
Criando/Erro
USERS
Admin
End Users
IPV4 / IPv6
IPv4
Livres: · Usados:
IPv6
Livres: · Usados:
Hypervisor | Overview of Connected Hypervisor
#ServerVPSCPURAMStorageStatus

()		 cores (% uso)n/d % de n/d / GBn/d
BANDWIDTH | Tráfego real da interface (MB, amostras reais coletadas a cada carregamento do dashboard)
RECENT TASKS | Last 10 Tasks
COMPLETED FAILED RUNNING
There is no any Completed task
RECENT LOGINS | Last 10 Login Details
USERDETAILSFrom IP
Nenhum login registrado ainda.
EOF log_success "Módulo Dashboard criado (estilo Virtualizor, dados reais)" } # ============================================ # FUNÇÃO: CRIAR MÓDULO VPS # ============================================ create_vps_module() { log_info "Criando módulo VPS (real, integrado ao libvirt/KVM)..." mkdir -p $CS_WEB_DIR/admin/modules/vps cat > $CS_WEB_DIR/admin/modules/vps/index.php << 'EOF' prepare("SELECT * FROM vps WHERE id = ?"); $stmt->execute([$id]); $vps = $stmt->fetch(); if ($vps && !empty($vps['domain'])) { $domain = $vps['domain']; $server_row = null; if (!empty($vps['server_id'])) { $sstmt = $db->prepare("SELECT * FROM servers WHERE id = ?"); $sstmt->execute([$vps['server_id']]); $server_row = $sstmt->fetch(); } $is_remote_vps = ($server_row && $server_row['ip'] !== '127.0.0.1'); // Roda o comando virsh de verdade: localmente (sudo restrito) se a VPS estiver no host // local, ou via SSH real no servidor remoto dono da VPS (mesma lógica do create.php). $run_virsh = function ($args) use ($is_remote_vps, $server_row) { if ($is_remote_vps) { return cs_remote_shell($server_row, 'virsh ' . $args); } return cs_shell(CS_SUDO . 'virsh ' . $args); }; switch ($_GET['action']) { case 'start': $r = $run_virsh('start ' . escapeshellarg($domain)); cs_log($db, 'Iniciar VPS', "$domain: {$r['output']}"); break; case 'stop': $r = $run_virsh('shutdown ' . escapeshellarg($domain)); cs_log($db, 'Parar VPS (graceful)', "$domain: {$r['output']}"); break; case 'forcestop': $r = $run_virsh('destroy ' . escapeshellarg($domain)); cs_log($db, 'Forçar parada VPS', "$domain: {$r['output']}"); break; case 'delete': $run_virsh('destroy ' . escapeshellarg($domain)); $run_virsh('undefine ' . escapeshellarg($domain) . ' --remove-all-storage --nvram'); if ($vps['ip']) { $db->prepare("UPDATE ip_pool SET status='free', assigned_vps_id=NULL WHERE ip_address = ?")->execute([$vps['ip']]); } $db->prepare("DELETE FROM vps_firewall_rules WHERE vps_id = ?")->execute([$id]); $db->prepare("DELETE FROM vps WHERE id = ?")->execute([$id]); cs_log($db, 'Excluir VPS', $domain); break; } cs_sync_vps_status($db); } header('Location: ?module=vps'); exit; } $vps_list = $db->query("SELECT vps.*, servers.ip AS server_ip, servers.name AS server_name FROM vps LEFT JOIN servers ON servers.id = vps.server_id ORDER BY vps.id DESC")->fetchAll(); $host_ip = trim((string) shell_exec("ip route get 1.1.1.1 2>/dev/null | grep -oP 'src \\K\\S+' | head -n1")); if ($host_ip === '') { $host_ip = trim((string) shell_exec("hostname -I | awk '{print \$1}'")); } $module = 'vps'; $page_title = 'Virtual Server'; require_once CS_ADMIN . '/includes/header.php'; ?>
Nova VPS
IDDomínioSistemaCPURAMDiscoIPConsole (VNC)StatusAções
Nenhuma VPS criada ainda.
# C MB GB ' . htmlspecialchars($console_ip) . ':' . $vps['vnc_port'] . '' : '-'; ?>
EOF cat > $CS_WEB_DIR/admin/modules/vps/create.php << 'EOF' query("SELECT * FROM media WHERE status = 'ready' ORDER BY os_type, name")->fetchAll(); $servers = $db->query("SELECT * FROM servers WHERE status = 'online'")->fetchAll(); $free_ips = $db->query("SELECT * FROM ip_pool WHERE status = 'free' ORDER BY id ASC")->fetchAll(); $storage_count = (int) ($db->query("SELECT COUNT(*) c FROM storage")->fetch()['c'] ?? 0); $license_limit_row = $db->query("SELECT setting_value FROM settings WHERE setting_key = 'license_vps_limit'")->fetch(); $license_vps_limit = $license_limit_row ? (int) $license_limit_row['setting_value'] : -1; $current_vps_count = (int) ($db->query("SELECT COUNT(*) c FROM vps")->fetch()['c'] ?? 0); $license_limit_reached = ($license_vps_limit >= 0 && $current_vps_count >= $license_vps_limit); if ($_SERVER['REQUEST_METHOD'] === 'POST' && $license_limit_reached) { $error = "Limite de VPS da sua licença ($license_vps_limit) atingido. Faça upgrade da sua licença em Comprar Licença no site CS-PAINEL para criar mais VPS."; } if ($_SERVER['REQUEST_METHOD'] === 'POST' && !$license_limit_reached && $storage_count === 0) { $error = 'Nenhum Storage Pool cadastrado. Cadastre um em Storage antes de criar uma VPS.'; } if ($_SERVER['REQUEST_METHOD'] === 'POST' && !$license_limit_reached && $storage_count > 0) { $name = trim($_POST['name'] ?? ''); $media_id = (int)($_POST['media_id'] ?? 0); $cpu = max(1, (int)($_POST['cpu'] ?? 1)); $ram = max(512, (int)($_POST['ram'] ?? 1024)); $disk = max(5, (int)($_POST['disk'] ?? 20)); $ip_choice = $_POST['ip_pool_id'] ?? ''; $server_id = (int)($_POST['server_id'] ?? 0); $media_stmt = $db->prepare("SELECT * FROM media WHERE id = ? AND status = 'ready'"); $media_stmt->execute([$media_id]); $media = $media_stmt->fetch(); $server_stmt = $db->prepare("SELECT * FROM servers WHERE id = ? AND status = 'online'"); $server_stmt->execute([$server_id]); $server_row = $server_stmt->fetch(); if ($name === '' || !$media) { $error = 'Informe um nome e selecione uma ISO válida em Media.'; } elseif (!$server_row) { $error = 'Selecione um servidor válido para a instalação.'; } else { $domain = cs_sanitize_domain($name); $exists = $db->prepare("SELECT COUNT(*) c FROM vps WHERE domain = ?"); $exists->execute([$domain]); if ($exists->fetch()['c'] > 0) { $domain .= '-' . substr(md5(uniqid('', true)), 0, 5); } $ip = ''; if ($ip_choice !== '' && $ip_choice !== 'auto') { $ip_row_stmt = $db->prepare("SELECT * FROM ip_pool WHERE id = ? AND status = 'free'"); $ip_row_stmt->execute([(int)$ip_choice]); $ip_row = $ip_row_stmt->fetch(); if ($ip_row) { $ip = $ip_row['ip_address']; } } $vnc_port = cs_next_vnc_port($db); $iso_path = CS_ISO_DIR . '/' . $media['filename']; $disk_path = CS_IMAGES_DIR . '/' . $domain . '.qcow2'; $stmt = $db->prepare("INSERT INTO vps (user_id, name, domain, os, cpu, ram, disk, ip, vnc_port, media_id, server_id, status) VALUES (1, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 'building')"); $stmt->execute([$name, $domain, $media['name'], $cpu, $ram, $disk, $ip, $vnc_port, $media['id'], $server_row['id']]); $vps_id = $db->lastInsertId(); $db->prepare("INSERT INTO tasks (vps_id, type, status) VALUES (?, 'create_vps', 'running')")->execute([$vps_id]); $task_id = $db->lastInsertId(); if ($ip !== '') { $db->prepare("UPDATE ip_pool SET status='assigned', assigned_vps_id=? WHERE ip_address=?")->execute([$vps_id, $ip]); } if ($server_row['ip'] !== '127.0.0.1') { // Provisionamento remoto real (mesma ideia do "Add Node" do Virtualizor): conecta no // node via SSH (senha ou chave, conforme cadastrado em Servers), leva a ISO até lá com // scp se ainda não existir, e roda qemu-img/virt-install DE VERDADE no node remoto - // nunca finge sucesso; qualquer falha real de SSH/comando é gravada na task. $conn = cs_remote_test_connection($server_row); if (!$conn['ok']) { $db->prepare("UPDATE vps SET status = 'error' WHERE id = ?")->execute([$vps_id]); $db->prepare("UPDATE tasks SET status = 'failed', output = ?, finished_at = NOW() WHERE id = ?") ->execute([$conn['message'], $task_id]); cs_log($db, 'Criar VPS', "$domain - falha ao conectar no servidor remoto {$server_row['name']}: {$conn['message']}"); $error = 'Não foi possível conectar via SSH no servidor "' . htmlspecialchars($server_row['name']) . '": ' . htmlspecialchars($conn['message']); } elseif (!cs_remote_push_file($server_row, $iso_path, $iso_path)) { $db->prepare("UPDATE vps SET status = 'error' WHERE id = ?")->execute([$vps_id]); $db->prepare("UPDATE tasks SET status = 'failed', output = 'Falha ao enviar a ISO para o servidor remoto via scp.', finished_at = NOW() WHERE id = ?") ->execute([$task_id]); cs_log($db, 'Criar VPS', "$domain - falha ao enviar ISO via scp para {$server_row['name']}"); $error = 'Conectado via SSH, mas falhou ao enviar a ISO para o servidor remoto via scp.'; } else { cs_remote_shell($server_row, 'mkdir -p ' . escapeshellarg(dirname($disk_path))); $img = cs_remote_shell($server_row, 'qemu-img create -f qcow2 ' . escapeshellarg($disk_path) . ' ' . escapeshellarg($disk . 'G')); $cmd = 'virt-install --name ' . escapeshellarg($domain) . ' --memory ' . escapeshellarg((string)$ram) . ' --vcpus ' . escapeshellarg((string)$cpu) . ' --disk path=' . escapeshellarg($disk_path) . ',format=qcow2,size=' . escapeshellarg((string)$disk) . ' --cdrom ' . escapeshellarg($iso_path) . ' --network bridge=' . escapeshellarg(CS_BRIDGE) . ',model=virtio' . ' --graphics vnc,listen=0.0.0.0,port=' . escapeshellarg((string)$vnc_port) . ' --os-variant detect=on,require=off --noautoconsole'; $result = cs_remote_shell($server_row, $cmd); $ok = ($result['code'] === 0); $db->prepare("UPDATE vps SET status = ? WHERE id = ?")->execute([$ok ? 'building' : 'error', $vps_id]); $db->prepare("UPDATE tasks SET status = ?, output = ?, finished_at = NOW() WHERE id = ?") ->execute([$ok ? 'done' : 'failed', substr($img['output'] . "\n" . $result['output'], 0, 60000), $task_id]); cs_log($db, 'Criar VPS', "$domain (media #{$media['id']}) no servidor remoto {$server_row['name']} - " . ($ok ? 'sucesso' : 'falha: ' . $result['output'])); if ($ok) { $success = "VPS '$domain' criada. O virt-install foi executado de verdade via SSH no servidor remoto \"{$server_row['name']}\" ({$server_row['ip']}); acompanhe o boot pelo console VNC na porta $vnc_port desse servidor."; } else { $error = "Falha ao criar a VPS no servidor remoto. Saída: " . htmlspecialchars($result['output']); } } } else { $img = cs_shell(CS_SUDO . 'qemu-img create -f qcow2 ' . escapeshellarg($disk_path) . ' ' . escapeshellarg($disk . 'G')); $cmd = CS_SUDO . 'virt-install --name ' . escapeshellarg($domain) . ' --memory ' . escapeshellarg((string)$ram) . ' --vcpus ' . escapeshellarg((string)$cpu) . ' --disk path=' . escapeshellarg($disk_path) . ',format=qcow2,size=' . escapeshellarg((string)$disk) . ' --cdrom ' . escapeshellarg($iso_path) . ' --network bridge=' . escapeshellarg(CS_BRIDGE) . ',model=virtio' . ' --graphics vnc,listen=0.0.0.0,port=' . escapeshellarg((string)$vnc_port) . ' --os-variant detect=on,require=off --noautoconsole'; $result = cs_shell($cmd); $ok = ($result['code'] === 0); $db->prepare("UPDATE vps SET status = ? WHERE id = ?")->execute([$ok ? 'building' : 'error', $vps_id]); $db->prepare("UPDATE tasks SET status = ?, output = ?, finished_at = NOW() WHERE id = ?") ->execute([$ok ? 'done' : 'failed', substr($img['output'] . "\n" . $result['output'], 0, 60000), $task_id]); cs_log($db, 'Criar VPS', "$domain (media #{$media['id']}) - " . ($ok ? 'sucesso' : 'falha: ' . $result['output'])); if ($ok) { cs_sync_vps_status($db); $success = "VPS '$domain' criada. O virt-install foi executado de verdade no host; acompanhe o boot pelo console VNC na porta $vnc_port."; } else { $error = "Falha ao criar a VPS. Saída: " . htmlspecialchars($result['output']); } } } } $page_title = 'Nova VPS'; $module = 'vps'; require_once CS_ADMIN . '/includes/header.php'; ?>
Voltar
Limite de VPS da sua licença () atingido. Faça upgrade da sua licença no site CS-PAINEL para criar mais VPS.
Nenhum Storage Pool cadastrado. Vá em Storage e adicione um pool (obrigatório) antes de criar uma VPS.
Nenhuma ISO disponível. Vá em Media e envie/baixe uma ISO antes de criar uma VPS.
Escolha a Imagem (ISO real cadastrada em Media)
MB
Escolha o Servidor
All Servers
$group_servers): ?>
[Group]
Nenhum servidor online disponível. Cadastre/ative um em Servers.
Configure os Recursos
Ao enviar, o painel executa qemu-img + virt-install de verdade no servidor selecionado: localmente (via sudo restrito) se for o servidor local, ou via SSH real (enviando a ISO por scp se preciso) se for um servidor remoto cadastrado em Servers.
EOF log_success "Módulo VPS criado (real)" } # ============================================ # FUNÇÃO: CRIAR MÓDULO USERS # ============================================ create_users_module() { log_info "Criando módulo Users..." mkdir -p $CS_WEB_DIR/admin/modules/users cat > $CS_WEB_DIR/admin/modules/users/index.php << 'EOF' prepare("INSERT INTO users (username, email, password, vps_limit, user_type, first_name, last_name, dns_plan) VALUES (?, ?, ?, ?, ?, ?, ?, ?)") ->execute([$username, $email, $password, $vps_limit, $user_type, $first_name, $last_name, $dns_plan]); cs_log($db, 'Adicionar usuário', "$email ($user_type)"); header('Location: ?module=users'); exit; } if (isset($_GET['delete'])) { $db->prepare("DELETE FROM users WHERE id = ?")->execute([$_GET['delete']]); header('Location: ?module=users'); exit; } $users = $db->query("SELECT u.*, COUNT(v.id) as vps_count FROM users u LEFT JOIN vps v ON u.id = v.user_id GROUP BY u.id ORDER BY u.id DESC")->fetchAll(); $page_title = 'Usuários'; require_once CS_ADMIN . '/includes/header.php'; ?>
Add User
List Users | results found
IDEmailUser TypeNo. of VPSBandwidth UsedCurrent UsageStatus2FAManage
Nenhum usuário cadastrado.
# / GB
Add User
EOF log_success "Módulo Users criado" } # ============================================ # FUNÇÃO: CRIAR MÓDULO PLANS # ============================================ create_plans_module() { log_info "Criando módulo Plans..." mkdir -p $CS_WEB_DIR/admin/modules/plans cat > $CS_WEB_DIR/admin/modules/plans/index.php << 'EOF' prepare("INSERT INTO plans (name, cpu, ram, disk, bandwidth, price, virt_type, os_type, config_json) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)") ->execute([$name, $cpu, $ram, $disk, $bandwidth, $price, $virt_type, $os_type, $config_json]); cs_log($db, 'Adicionar plano', $name); header('Location: ?module=plans'); exit; } if (isset($_GET['delete'])) { $db->prepare("DELETE FROM plans WHERE id = ?")->execute([$_GET['delete']]); header('Location: ?module=plans'); exit; } $plans = $db->query("SELECT * FROM plans ORDER BY id DESC")->fetchAll(); $page_title = 'Planos'; require_once CS_ADMIN . '/includes/header.php'; ?>
NOTA: Não há Planos. Adicione um plano agora
Adicionar Plano
IDNomeTipoCPURAMDiscoBandaPreçoAções
Nenhum plano cadastrado.
# C MB GB GB R$
Add Plan
General Settings
Advanced Options
Network Settings
KB/s
EOF log_success "Módulo Plans criado" } # ============================================ # FUNÇÃO: CRIAR MÓDULO SERVERS # ============================================ create_servers_module() { log_info "Criando módulo Servers..." mkdir -p $CS_WEB_DIR/admin/modules/servers cat > $CS_WEB_DIR/admin/modules/servers/index.php << 'EOF' prepare("INSERT INTO servers (name, hostname, ip, hypervisor, internal_ip, api_password, locked, server_group, firewall_plan, ssh_user, ssh_port) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)") ->execute([$name, $hostname, $ip, $hypervisor, $internal_ip, $api_password, $locked, $server_group, $firewall_plan, $ssh_user, $ssh_port]); cs_log($db, 'Adicionar servidor', "$name ($ip)"); } header('Location: ?module=servers'); exit; } if (isset($_GET['delete'])) { $db->prepare("DELETE FROM servers WHERE id = ?")->execute([(int)$_GET['delete']]); header('Location: ?module=servers'); exit; } if (isset($_GET['test_conn'])) { $srv_stmt = $db->prepare("SELECT * FROM servers WHERE id = ?"); $srv_stmt->execute([(int) $_GET['test_conn']]); $srv_row = $srv_stmt->fetch(); if ($srv_row) { $result = cs_remote_test_connection($srv_row); cs_log($db, 'Testar conexão do servidor', $srv_row['name'] . ' (' . $srv_row['ip'] . ') - ' . $result['message']); $_SESSION['cs_conn_test'] = ['ok' => $result['ok'], 'message' => $srv_row['name'] . ': ' . $result['message']]; } header('Location: ?module=servers'); exit; } $servers = $db->query("SELECT s.*, (SELECT COUNT(*) FROM vps) as vps_count FROM servers s ORDER BY s.id DESC")->fetchAll(); $stats = cs_host_stats(); $disk_total = @disk_total_space(CS_IMAGES_DIR) ?: 0; $disk_free = @disk_free_space(CS_IMAGES_DIR) ?: 0; $virsh_nodeinfo = shell_exec(CS_SUDO . 'virsh nodeinfo 2>&1'); $conn_test = $_SESSION['cs_conn_test'] ?? null; unset($_SESSION['cs_conn_test']); $page_title = 'Servers'; require_once CS_ADMIN . '/includes/header.php'; ?>
IDTypeOSNameResourcesLive UsageVersãoServer GroupManage
Nenhum servidor cadastrado.
# ' : ''; ?>
MB / MB
GB / GB
Cores
/ ∞ VPS(s)
SSH indisponível
%
CPU
%
RAM
%
DISK
-
IO
n/d 		v
Máquina onde o CS-PANEL está rodando (virsh nodeinfo)
Modelo de CPU
Cores
Memória total
Kernel
Uptime
EOF log_success "Módulo Servers criado (com specs reais do host local)" } # ============================================ # FUNÇÃO: MÓDULO MEDIA (ISO/IMAGENS) - PRIORIDADE #1, 100% REAL # ============================================ create_media_module() { log_info "Criando módulo Media (ISO) - upload, download e delete reais..." mkdir -p $CS_WEB_DIR/admin/modules/media cat > $CS_WEB_DIR/admin/modules/media/index.php << 'EOF' $total, 'free' => $free, 'used' => $total - $free]; } // Verifica downloads em andamento comparando com o processo real (PID salvo em tasks) $downloading = $db->query("SELECT m.*, t.id AS task_id, t.output AS pid FROM media m JOIN tasks t ON t.type = 'download_iso' AND t.status = 'running' WHERE m.status = 'downloading'")->fetchAll(); foreach ($downloading as $d) { $pid = (int)$d['pid']; $running = $pid > 0 && file_exists("/proc/$pid"); $path = CS_ISO_DIR . '/' . $d['filename']; if (!$running) { if (file_exists($path) && filesize($path) > 0) { $db->prepare("UPDATE media SET status='ready', size=? WHERE id=?")->execute([filesize($path), $d['id']]); cs_shell(CS_SUDO . 'virsh pool-refresh iso'); cs_log($db, 'Download de ISO concluído', $d['filename']); } else { $db->prepare("UPDATE media SET status='error' WHERE id=?")->execute([$d['id']]); } $db->prepare("UPDATE tasks SET status='done', finished_at=NOW() WHERE id=?")->execute([$d['task_id']]); } } if ($_SERVER['REQUEST_METHOD'] === 'POST') { $action = $_POST['action'] ?? ''; if ($action === 'upload' && isset($_FILES['iso_file'])) { $file = $_FILES['iso_file']; $orig = basename($file['name']); $ext = strtolower(pathinfo($orig, PATHINFO_EXTENSION)); if ($file['error'] !== UPLOAD_ERR_OK) { $err = 'Falha no upload (código ' . (int)$file['error'] . ').'; } elseif (!in_array($ext, ['iso', 'img'], true)) { $err = 'Apenas arquivos .iso ou .img são permitidos.'; } else { $safe_name = preg_replace('/[^a-zA-Z0-9._-]/', '_', $orig); $dest = CS_ISO_DIR . '/' . $safe_name; if (move_uploaded_file($file['tmp_name'], $dest)) { chmod($dest, 0644); $os_type = in_array($_POST['os_type'] ?? '', ['linux', 'windows', 'other'], true) ? $_POST['os_type'] : 'linux'; $db->prepare("INSERT INTO media (name, filename, os_type, size, status) VALUES (?,?,?,?, 'ready')") ->execute([trim($_POST['name']) ?: $safe_name, $safe_name, $os_type, filesize($dest)]); cs_shell(CS_SUDO . 'virsh pool-refresh iso'); cs_log($db, 'Upload de ISO', $safe_name); $msg = "ISO '$safe_name' enviada com sucesso."; } else { $err = 'Falha ao mover o arquivo enviado para ' . CS_ISO_DIR . '.'; } } } elseif ($action === 'download_url') { $url = trim($_POST['url'] ?? ''); $name = trim($_POST['name'] ?? ''); $parts = parse_url($url); if (!$parts || !in_array(strtolower($parts['scheme'] ?? ''), ['http', 'https'], true)) { $err = 'Informe uma URL http:// ou https:// válida.'; } else { $orig = basename(parse_url($url, PHP_URL_PATH) ?: 'download.iso'); $ext = strtolower(pathinfo($orig, PATHINFO_EXTENSION)); if (!in_array($ext, ['iso', 'img'], true)) { $err = 'A URL deve apontar diretamente para um arquivo .iso ou .img.'; } else { $safe_name = preg_replace('/[^a-zA-Z0-9._-]/', '_', $orig); $dest = CS_ISO_DIR . '/' . $safe_name; $os_type = in_array($_POST['os_type'] ?? '', ['linux', 'windows', 'other'], true) ? $_POST['os_type'] : 'linux'; $db->prepare("INSERT INTO media (name, filename, os_type, size, status) VALUES (?,?,?,0,'downloading')") ->execute([$name ?: $safe_name, $safe_name, $os_type]); $media_id = $db->lastInsertId(); $log_file = escapeshellarg(CS_BACKUP_DIR . "/download_$media_id.log"); $cmd = CS_SUDO . 'wget -q -O ' . escapeshellarg($dest) . ' ' . escapeshellarg($url) . ' > ' . $log_file . ' 2>&1 & echo $!'; $pid = trim((string) shell_exec($cmd)); $db->prepare("INSERT INTO tasks (vps_id, type, status, output) VALUES (NULL, 'download_iso', 'running', ?)")->execute([$pid]); cs_log($db, 'Iniciar download de ISO', "$safe_name <- $url"); $msg = "Download de '$safe_name' iniciado em segundo plano (PID $pid). Atualize a página para acompanhar o progresso."; } } } } if (isset($_GET['delete'])) { $id = (int)$_GET['delete']; $stmt = $db->prepare("SELECT * FROM media WHERE id = ?"); $stmt->execute([$id]); $m = $stmt->fetch(); if ($m) { $used = $db->prepare("SELECT COUNT(*) c FROM vps WHERE media_id = ?"); $used->execute([$id]); if ($used->fetch()['c'] > 0) { $err = 'Esta ISO está em uso por uma VPS existente e não pode ser removida.'; } else { @unlink(CS_ISO_DIR . '/' . $m['filename']); $db->prepare("DELETE FROM media WHERE id = ?")->execute([$id]); cs_shell(CS_SUDO . 'virsh pool-refresh iso'); cs_log($db, 'Excluir ISO', $m['filename']); $msg = 'ISO removida do disco e do painel.'; } } } $media_list = $db->query("SELECT * FROM media ORDER BY id DESC")->fetchAll(); $disk = cs_media_disk_usage(); $page_title = 'Media (ISO)'; require_once CS_ADMIN . '/includes/header.php'; ?>
Espaço usado em
GB usados de GB reais no disco
Enviar ISO do seu computador
Baixar ISO por URL
ISOs Disponíveis (reais em disco)
NomeArquivoTipoTamanhoStatusAções
Nenhuma ISO cadastrada ainda.
arquivo ausente Pronta Baixando... Erro
EOF log_success "Módulo Media criado (upload/download/delete reais)" } # ============================================ # FUNÇÃO: MÓDULO IP POOL (REAL) # ============================================ create_ip_pool_module() { log_info "Criando módulo IP Pool..." mkdir -p $CS_WEB_DIR/admin/modules/ip_pool cat > $CS_WEB_DIR/admin/modules/ip_pool/index.php << 'EOF' prepare("INSERT INTO ip_pool (ip_address, gateway, netmask, type) VALUES (?,?,?,?)")->execute([$ip, $gateway, $netmask, $type]); cs_log($db, 'Adicionar IP ao pool', $ip); $msg = "IP $ip adicionado ao pool."; } catch (PDOException $e) { $err = 'Este IP já existe no pool.'; } } } elseif ($action === 'delete') { $id = (int)$_POST['id']; $stmt = $db->prepare("SELECT * FROM ip_pool WHERE id=?"); $stmt->execute([$id]); $r = $stmt->fetch(); if ($r && $r['status'] === 'free') { $db->prepare("DELETE FROM ip_pool WHERE id=?")->execute([$id]); $msg = 'IP removido do pool.'; } else { $err = 'Só é possível remover IPs livres (não atribuídos).'; } } } $ips = $db->query("SELECT p.*, v.domain AS vps_domain FROM ip_pool p LEFT JOIN vps v ON v.id = p.assigned_vps_id ORDER BY p.id DESC")->fetchAll(); $page_title = 'IP Pool'; require_once CS_ADMIN . '/includes/header.php'; ?>
Adicionar IP ao Pool
IPGatewayMáscaraTipoStatusVPSAções
Nenhum IP cadastrado.
Livre Atribuído Reservado
EOF log_success "Módulo IP Pool criado" } # ============================================ # FUNÇÃO: MÓDULO STORAGE (REAL) # ============================================ create_storage_module() { log_info "Criando módulo Storage..." mkdir -p $CS_WEB_DIR/admin/modules/storage cat > $CS_WEB_DIR/admin/modules/storage/index.php << 'EOF' prepare("INSERT INTO storage (name, path, type, storage_type, file_format, overcommit, alert_threshold, is_primary) VALUES (?,?,?,?,?,?,?,?)") ->execute([$name, $path, $type, $storage_type, $file_format, $overcommit, $alert_threshold, $is_primary]); cs_log($db, 'Adicionar storage pool', "$name -> $path ($storage_type)"); $msg = "Storage pool '$name' adicionado."; } } elseif ($action === 'delete') { $db->prepare("DELETE FROM storage WHERE id=?")->execute([(int)$_POST['id']]); $msg = 'Storage pool removido do painel (arquivos preservados no disco).'; } } $pools = $db->query("SELECT * FROM storage ORDER BY id")->fetchAll(); foreach ($pools as &$p) { $total = @disk_total_space($p['path']) ?: 0; $free = @disk_free_space($p['path']) ?: 0; $p['total'] = $total; $p['free'] = $free; $p['used'] = $total - $free; $p['exists'] = is_dir($p['path']); } unset($p); $local_server = $db->query("SELECT name FROM servers WHERE ip = '127.0.0.1' LIMIT 1")->fetch(); $virsh_pools = shell_exec(CS_SUDO . 'virsh pool-list --all 2>&1'); $page_title = 'Storage'; require_once CS_ADMIN . '/includes/header.php'; ?>
Storage Overview | results found
IDStorage NameServersUUIDTypePathPrimarySizeFreeOversellAlert ThresholdManage
Nenhum storage pool cadastrado.
# caminho não existe GB %
/ GB
Add Storage
All Servers
[Group] Default
-
Volume Group path /dev/VG_NAME
%
Note: ZFS - If you are adding a ZFS storage, please ensure that you know how to handle and manage a ZFS storage. Otherwise you might end up losing all your data.
Pools reais do libvirt (virsh pool-list)
EOF log_success "Módulo Storage criado" } # ============================================ # FUNÇÃO: MÓDULO RECIPES (REAL - virt-customize) # ============================================ create_recipes_module() { log_info "Criando módulo Recipes..." mkdir -p $CS_WEB_DIR/admin/modules/recipes cat > $CS_WEB_DIR/admin/modules/recipes/index.php << 'EOF' prepare("INSERT INTO recipes (name, os_type, script) VALUES (?,?,?)")->execute([$name, $os_type, $script]); cs_log($db, 'Criar recipe', $name); $msg = 'Recipe criada.'; } } elseif ($action === 'delete') { $db->prepare("DELETE FROM recipes WHERE id=?")->execute([(int)$_POST['id']]); $msg = 'Recipe removida.'; } elseif ($action === 'run') { $rid = (int)$_POST['recipe_id']; $vid = (int)$_POST['vps_id']; $rstmt = $db->prepare("SELECT * FROM recipes WHERE id=?"); $rstmt->execute([$rid]); $recipe = $rstmt->fetch(); $vstmt = $db->prepare("SELECT * FROM vps WHERE id=?"); $vstmt->execute([$vid]); $vps = $vstmt->fetch(); if ($recipe && $vps && $vps['domain']) { $state = trim((string) shell_exec('virsh domstate ' . escapeshellarg($vps['domain']) . ' 2>/dev/null')); if (stripos($state, 'shut off') === false) { $err = 'A VPS precisa estar desligada para rodar uma recipe (virt-customize edita o disco offline).'; } else { $disk = CS_IMAGES_DIR . '/' . $vps['domain'] . '.qcow2'; $tmp = tempnam(sys_get_temp_dir(), 'recipe'); file_put_contents($tmp, $recipe['script']); $cmd = CS_SUDO . 'virt-customize -a ' . escapeshellarg($disk) . ' --run ' . escapeshellarg($tmp) . ' 2>&1'; $r = cs_shell($cmd); @unlink($tmp); $db->prepare("INSERT INTO tasks (vps_id, type, status, output, finished_at) VALUES (?, 'run_recipe', ?, ?, NOW())") ->execute([$vid, $r['code'] === 0 ? 'done' : 'failed', $r['output']]); cs_log($db, 'Executar recipe', $recipe['name'] . ' em ' . $vps['domain']); $msg = $r['code'] === 0 ? "Recipe executada com sucesso em {$vps['domain']}." : ('Falha ao executar recipe: ' . $r['output']); } } } } $recipes = $db->query("SELECT * FROM recipes ORDER BY id DESC")->fetchAll(); $vps_list = $db->query("SELECT * FROM vps WHERE domain IS NOT NULL ORDER BY id DESC")->fetchAll(); $page_title = 'Recipes'; require_once CS_ADMIN . '/includes/header.php'; ?>
Nova Recipe (script executado via virt-customize)
Executar Recipe em uma VPS (offline)
Crie uma recipe e tenha ao menos uma VPS real para executar.
NomeSOAções
Nenhuma recipe criada.
EOF log_success "Módulo Recipes criado" } # ============================================ # FUNÇÃO: MÓDULO TASKS (REAL) # ============================================ create_tasks_module() { log_info "Criando módulo Tasks..." mkdir -p $CS_WEB_DIR/admin/modules/tasks cat > $CS_WEB_DIR/admin/modules/tasks/index.php << 'EOF' query("SELECT t.*, v.domain FROM tasks t LEFT JOIN vps v ON v.id = t.vps_id ORDER BY t.id DESC LIMIT 200")->fetchAll(); $page_title = 'Tasks'; require_once CS_ADMIN . '/includes/header.php'; ?>
Fila Real de Tarefas do Sistema
'bg-secondary', 'running' => 'bg-info text-dark', 'done' => 'bg-success', 'failed' => 'bg-danger'][$t['status']] ?? 'bg-secondary'; ?>
IDTipoVPSStatusCriada emConcluída emSaída
Nenhuma tarefa registrada ainda.
#
EOF log_success "Módulo Tasks criado" } # ============================================ # FUNÇÃO: MÓDULO CONFIGURATION (REAL) # ============================================ create_configuration_module() { log_info "Criando módulo Configuration..." mkdir -p $CS_WEB_DIR/admin/modules/configuration cat > $CS_WEB_DIR/admin/modules/configuration/index.php << 'EOF' $value) { $db->prepare("UPDATE settings SET setting_value = ? WHERE setting_key = ?")->execute([$value, $key]); } cs_log($db, 'Atualizar configurações do painel', ''); $msg = 'Configurações salvas com sucesso.'; } $settings = $db->query("SELECT * FROM settings ORDER BY setting_key")->fetchAll(); $page_title = 'Configuration'; require_once CS_ADMIN . '/includes/header.php'; ?>
Configurações Gerais (tabela settings real)
EOF log_success "Módulo Configuration criado" } # ============================================ # FUNÇÃO: MÓDULO BILLING (REAL) # ============================================ create_billing_module() { log_info "Criando módulo Billing..." mkdir -p $CS_WEB_DIR/admin/modules/billing cat > $CS_WEB_DIR/admin/modules/billing/index.php << 'EOF' prepare("INSERT INTO invoices (user_id, vps_id, amount, status, due_date) VALUES (?,?,?, 'pending', ?)") ->execute([(int)$_POST['user_id'], $_POST['vps_id'] ?: null, (float)$_POST['amount'], $_POST['due_date']]); cs_log($db, 'Criar fatura', ''); $msg = 'Fatura criada.'; } elseif ($action === 'mark_paid') { $db->prepare("UPDATE invoices SET status='paid' WHERE id=?")->execute([(int)$_POST['id']]); $msg = 'Fatura marcada como paga.'; } elseif ($action === 'delete') { $db->prepare("DELETE FROM invoices WHERE id=?")->execute([(int)$_POST['id']]); $msg = 'Fatura removida.'; } } $invoices = $db->query("SELECT i.*, u.username FROM invoices i JOIN users u ON u.id = i.user_id ORDER BY i.id DESC")->fetchAll(); $users = $db->query("SELECT * FROM users ORDER BY username")->fetchAll(); $vps_list = $db->query("SELECT * FROM vps ORDER BY id DESC")->fetchAll(); $page_title = 'Billing'; require_once CS_ADMIN . '/includes/header.php'; ?>
Nova Fatura
Cadastre usuários em Users antes de gerar faturas.
'bg-warning text-dark', 'paid' => 'bg-success', 'overdue' => 'bg-danger', 'cancelled' => 'bg-secondary'][$inv['status']] ?? 'bg-secondary'; ?>
IDUsuárioValorVencimentoStatusAções
Nenhuma fatura gerada.
# R$
EOF log_success "Módulo Billing criado" } # ============================================ # FUNÇÃO: MÓDULO BACKUP (REAL - qemu-img convert) # ============================================ create_backup_module() { log_info "Criando módulo Backup..." mkdir -p $CS_WEB_DIR/admin/modules/backup cat > $CS_WEB_DIR/admin/modules/backup/index.php << 'EOF' prepare("SELECT * FROM vps WHERE id=?"); $stmt->execute([$vid]); $vps = $stmt->fetch(); if ($vps && $vps['domain']) { $src = CS_IMAGES_DIR . '/' . $vps['domain'] . '.qcow2'; if (!file_exists($src)) { $err = 'Disco da VPS não encontrado em ' . $src; } else { $name = $vps['domain'] . '_' . date('Ymd_His') . '.qcow2'; $dest = CS_BACKUP_DIR . '/' . $name; $r = cs_shell(CS_SUDO . 'qemu-img convert -O qcow2 ' . escapeshellarg($src) . ' ' . escapeshellarg($dest)); if ($r['code'] === 0 && file_exists($dest)) { $db->prepare("INSERT INTO backups (vps_id, name, file_path, size) VALUES (?,?,?,?)")->execute([$vid, $name, $dest, filesize($dest)]); cs_log($db, 'Criar backup', "$name (VPS {$vps['domain']})"); $msg = "Backup '$name' criado com sucesso."; } else { $err = 'Falha ao criar backup: ' . $r['output']; } } } } elseif ($action === 'delete') { $id = (int)$_POST['id']; $stmt = $db->prepare("SELECT * FROM backups WHERE id=?"); $stmt->execute([$id]); $b = $stmt->fetch(); if ($b) { @unlink($b['file_path']); $db->prepare("DELETE FROM backups WHERE id=?")->execute([$id]); $msg = 'Backup removido.'; } } elseif ($action === 'restore') { $id = (int)$_POST['id']; $stmt = $db->prepare("SELECT b.*, v.domain FROM backups b JOIN vps v ON v.id=b.vps_id WHERE b.id=?"); $stmt->execute([$id]); $b = $stmt->fetch(); if ($b && $b['domain'] && file_exists($b['file_path'])) { $state = trim((string) shell_exec('virsh domstate ' . escapeshellarg($b['domain']) . ' 2>/dev/null')); if (stripos($state, 'shut off') === false) { $err = 'Desligue a VPS antes de restaurar o backup.'; } else { $dest = CS_IMAGES_DIR . '/' . $b['domain'] . '.qcow2'; $r = cs_shell(CS_SUDO . 'cp -f ' . escapeshellarg($b['file_path']) . ' ' . escapeshellarg($dest)); cs_log($db, 'Restaurar backup', "{$b['name']} -> {$b['domain']}"); $msg = $r['code'] === 0 ? 'Backup restaurado com sucesso.' : ('Falha ao restaurar: ' . $r['output']); } } } } $backups = $db->query("SELECT b.*, v.domain FROM backups b LEFT JOIN vps v ON v.id = b.vps_id ORDER BY b.id DESC")->fetchAll(); $vps_list = $db->query("SELECT * FROM vps WHERE domain IS NOT NULL ORDER BY id DESC")->fetchAll(); $page_title = 'Backup'; require_once CS_ADMIN . '/includes/header.php'; ?>
Criar Backup Real (qemu-img convert)
Nenhuma VPS real disponível para backup.
ArquivoVPSTamanhoCriado emAções
Nenhum backup ainda.
arquivo ausente'; ?> GB
EOF log_success "Módulo Backup criado" } # ============================================ # FUNÇÃO: MÓDULO POWER DNS (REAL - pdnsutil) # ============================================ create_powerdns_module() { log_info "Criando módulo Power DNS..." mkdir -p $CS_WEB_DIR/admin/modules/powerdns cat > $CS_WEB_DIR/admin/modules/powerdns/index.php << 'EOF' /dev/null')) !== ''; if ($_SERVER['REQUEST_METHOD'] === 'POST' && $has_pdns) { $action = $_POST['action'] ?? ''; if ($action === 'create_zone') { $zone = preg_replace('/[^a-zA-Z0-9.-]/', '', trim($_POST['zone'] ?? '')); if ($zone !== '') { $r = cs_shell(CS_SUDO . 'pdnsutil create-zone ' . escapeshellarg($zone)); cs_log($db, 'Criar zona DNS', $zone); $msg = $r['output']; } } elseif ($action === 'add_record') { $zone = preg_replace('/[^a-zA-Z0-9.-]/', '', trim($_POST['zone'] ?? '')); $name = preg_replace('/[^a-zA-Z0-9.\-_]/', '', trim($_POST['name'] ?? '')); $type = in_array($_POST['type'] ?? '', ['A', 'AAAA', 'CNAME', 'MX', 'TXT', 'NS'], true) ? $_POST['type'] : 'A'; $content = trim($_POST['content'] ?? ''); $ttl = (int)($_POST['ttl'] ?? 3600) ?: 3600; $r = cs_shell(CS_SUDO . 'pdnsutil add-record ' . escapeshellarg($zone) . ' ' . escapeshellarg($name) . ' ' . escapeshellarg($type) . ' ' . escapeshellarg((string)$ttl) . ' ' . escapeshellarg($content)); cs_log($db, 'Adicionar registro DNS', "$name.$zone $type $content"); $msg = $r['output']; } elseif ($action === 'delete_zone') { $zone = preg_replace('/[^a-zA-Z0-9.-]/', '', trim($_POST['zone'] ?? '')); $r = cs_shell(CS_SUDO . 'pdnsutil delete-zone ' . escapeshellarg($zone)); cs_log($db, 'Remover zona DNS', $zone); $msg = $r['output']; } cs_shell(CS_SUDO . 'systemctl reload pdns'); } $zones_raw = $has_pdns ? trim((string) shell_exec(CS_SUDO . 'pdnsutil list-all-zones 2>&1')) : ''; $zones = $zones_raw ? array_filter(array_map('trim', explode("\n", $zones_raw))) : []; $page_title = 'Power DNS'; require_once CS_ADMIN . '/includes/header.php'; ?>
PowerDNS (pdnsutil) não está instalado neste servidor.
Nova Zona
Adicionar Registro
Zonas Reais no PowerDNS
Nenhuma zona cadastrada.
ZonaAções
EOF log_success "Módulo Power DNS criado" } # ============================================ # FUNÇÃO: MÓDULO IMPORT (REAL - importar VMs libvirt existentes) # ============================================ create_import_module() { log_info "Criando módulo Import..." mkdir -p $CS_WEB_DIR/admin/modules/import cat > $CS_WEB_DIR/admin/modules/import/index.php << 'EOF' prepare("SELECT COUNT(*) c FROM vps WHERE domain=?"); $exists->execute([$domain]); if ($exists->fetch()['c'] > 0) { $msg = 'Esta VM já está importada no painel.'; } else { $info = shell_exec('virsh dominfo ' . escapeshellarg($domain) . ' 2>&1'); preg_match('/CPU\(s\):\s+(\d+)/', (string)$info, $mc); preg_match('/Max memory:\s+(\d+)/', (string)$info, $mm); $cpu = isset($mc[1]) ? (int)$mc[1] : 1; $ram = isset($mm[1]) ? intdiv((int)$mm[1], 1024) : 1024; $state = trim((string) shell_exec('virsh domstate ' . escapeshellarg($domain) . ' 2>/dev/null')); $status = stripos($state, 'running') !== false ? 'running' : 'stopped'; $db->prepare("INSERT INTO vps (user_id, name, domain, os, cpu, ram, disk, status) VALUES (1, ?, ?, 'Importado', ?, ?, 20, ?)") ->execute([$domain, $domain, $cpu, $ram, $status]); cs_log($db, 'Importar VM existente', $domain); $msg = "VM '$domain' importada com sucesso para o painel."; } } $all_domains_raw = shell_exec('virsh list --all --name 2>/dev/null'); $all_domains = array_filter(array_map('trim', explode("\n", (string)$all_domains_raw))); $tracked = $db->query("SELECT domain FROM vps WHERE domain IS NOT NULL")->fetchAll(PDO::FETCH_COLUMN); $untracked = array_diff($all_domains, $tracked); $page_title = 'Import'; require_once CS_ADMIN . '/includes/header.php'; ?>
VMs KVM reais no host ainda não gerenciadas pelo painel
Nenhuma VM pendente de importação — todas as VMs libvirt já estão no painel.
Domínio (libvirt)Ações
EOF log_success "Módulo Import criado" } # ============================================ # FUNÇÃO: MÓDULO SSL SETTINGS (REAL - certbot) # ============================================ create_ssl_settings_module() { log_info "Criando módulo SSL Settings..." mkdir -p $CS_WEB_DIR/admin/modules/ssl_settings cat > $CS_WEB_DIR/admin/modules/ssl_settings/index.php << 'EOF' prepare("INSERT INTO ssl_certificates (domain, cert_path, key_path, expires_at) VALUES (?,?,?, DATE_ADD(NOW(), INTERVAL 90 DAY))") ->execute([$domain, $cert_path, $key_path]); cs_log($db, 'Emitir certificado SSL', $domain); $msg = "Certificado emitido para $domain via Let's Encrypt."; } else { $err = 'Falha ao emitir certificado: ' . $r['output']; } } } elseif ($action === 'delete') { $id = (int)$_POST['id']; $stmt = $db->prepare("SELECT * FROM ssl_certificates WHERE id=?"); $stmt->execute([$id]); $c = $stmt->fetch(); if ($c) { cs_shell(CS_SUDO . 'certbot delete --non-interactive --cert-name ' . escapeshellarg($c['domain'])); $db->prepare("DELETE FROM ssl_certificates WHERE id=?")->execute([$id]); cs_log($db, 'Remover certificado SSL', $c['domain']); $msg = 'Certificado removido.'; } } } $certs = $db->query("SELECT * FROM ssl_certificates ORDER BY id DESC")->fetchAll(); $page_title = 'SSL Settings'; require_once CS_ADMIN . '/includes/header.php'; ?>
Emitir Certificado Let's Encrypt Real
Requer que a porta 80 esteja livre e o DNS do domínio já aponte para este servidor (modo standalone do certbot).
DomínioExpira emEmissorAções
Nenhum certificado emitido ainda.
EOF log_success "Módulo SSL Settings criado" } # ============================================ # FUNÇÃO: MÓDULO VPS FIREWALL (REAL - iptables por VPS) # ============================================ create_vps_firewall_module() { log_info "Criando módulo VPS Firewall..." mkdir -p $CS_WEB_DIR/admin/modules/vps_firewall cat > $CS_WEB_DIR/admin/modules/vps_firewall/index.php << 'EOF' query("SELECT * FROM vps WHERE ip IS NOT NULL AND ip <> '' ORDER BY id DESC")->fetchAll(); if ($_SERVER['REQUEST_METHOD'] === 'POST') { $action = $_POST['action'] ?? ''; $vid = (int)($_POST['vps_id'] ?? 0); $stmt = $db->prepare("SELECT * FROM vps WHERE id=?"); $stmt->execute([$vid]); $vps = $stmt->fetch(); if ($vps && $vps['ip']) { if ($action === 'add') { $proto = in_array($_POST['protocol'] ?? '', ['tcp', 'udp', 'icmp', 'all'], true) ? $_POST['protocol'] : 'tcp'; $port = preg_replace('/[^0-9:]/', '', trim($_POST['port'] ?? '')); $act_type = in_array($_POST['action_type'] ?? '', ['accept', 'drop', 'reject'], true) ? $_POST['action_type'] : 'accept'; $dir = ($_POST['direction'] ?? 'in') === 'out' ? 'out' : 'in'; $db->prepare("INSERT INTO vps_firewall_rules (vps_id, protocol, port, action_type, direction) VALUES (?,?,?,?,?)") ->execute([$vid, $proto, $port, $act_type, $dir]); $msg = 'Regra adicionada e aplicada via iptables real no host.'; } elseif ($action === 'delete') { $db->prepare("DELETE FROM vps_firewall_rules WHERE id=?")->execute([(int)$_POST['id']]); $msg = 'Regra removida e firewall real reaplicado.'; } cs_apply_vps_firewall($db, $vps); } } $rules = $db->query("SELECT r.*, v.domain FROM vps_firewall_rules r JOIN vps v ON v.id = r.vps_id ORDER BY r.id DESC")->fetchAll(); $page_title = 'VPS Firewall'; require_once CS_ADMIN . '/includes/header.php'; ?>
Nova Regra de Firewall por VPS (iptables real)
Nenhuma VPS com IP atribuído.
VPSProtocoloPortaAçãoDireçãoAções
Nenhuma regra criada.
EOF log_success "Módulo VPS Firewall criado" } # ============================================ # FUNÇÃO: MÓDULO FIREWALL DO HOST (REAL - UFW) # ============================================ create_firewall_module() { log_info "Criando módulo Firewall (host)..." mkdir -p $CS_WEB_DIR/admin/modules/firewall cat > $CS_WEB_DIR/admin/modules/firewall/index.php << 'EOF' /dev/null')) !== ''; if ($_SERVER['REQUEST_METHOD'] === 'POST' && $has_ufw) { $action = $_POST['action'] ?? ''; if ($action === 'allow') { $port = preg_replace('/[^0-9\/a-z]/', '', trim($_POST['port'] ?? '')); if ($port !== '') { $r = cs_shell(CS_SUDO . 'ufw allow ' . escapeshellarg($port)); $msg = $r['output']; cs_log($db, 'Firewall: allow', $port); } } elseif ($action === 'deny') { $port = preg_replace('/[^0-9\/a-z]/', '', trim($_POST['port'] ?? '')); if ($port !== '') { $r = cs_shell(CS_SUDO . 'ufw deny ' . escapeshellarg($port)); $msg = $r['output']; cs_log($db, 'Firewall: deny', $port); } } elseif ($action === 'enable') { $r = cs_shell(CS_SUDO . 'ufw --force enable'); $msg = $r['output']; } elseif ($action === 'disable') { $r = cs_shell(CS_SUDO . 'ufw disable'); $msg = $r['output']; } } $status = $has_ufw ? shell_exec(CS_SUDO . 'ufw status numbered 2>&1') : 'ufw não instalado.'; $page_title = 'Firewall'; require_once CS_ADMIN . '/includes/header.php'; ?>
UFW não está instalado neste servidor.
Firewall do Host (UFW real)
EOF log_success "Módulo Firewall criado" } # ============================================ # FUNÇÃO: MÓDULO API CREDENTIALS (REAL) # ============================================ create_api_credentials_module() { log_info "Criando módulo API Credentials..." mkdir -p $CS_WEB_DIR/admin/modules/api_credentials cat > $CS_WEB_DIR/admin/modules/api_credentials/index.php << 'EOF' prepare("DELETE FROM api_keys")->execute(); $db->prepare("INSERT INTO api_keys (key_value, password) VALUES (?,?)")->execute([$new_key, $new_pass]); cs_log($db, 'Regenerar API key', ''); $msg = 'Credenciais de API regeneradas com sucesso.'; } $creds = $db->query("SELECT * FROM api_keys ORDER BY id DESC LIMIT 1")->fetch(); $page_title = 'API Credentials'; require_once CS_ADMIN . '/includes/header.php'; ?>
Credenciais da API Real (usadas em /api/v1)
Nenhuma credencial gerada ainda.
EOF log_success "Módulo API Credentials criado" } # ============================================ # FUNÇÃO: MÓDULO LOGS (REAL) # ============================================ create_logs_module() { log_info "Criando módulo Logs..." mkdir -p $CS_WEB_DIR/admin/modules/logs cat > $CS_WEB_DIR/admin/modules/logs/index.php << 'EOF' query("SELECT MAX(id) FROM logs")->fetchColumn() ?: 0); $db->prepare("UPDATE admin_users SET last_notif_seen_id = ? WHERE id = ?")->execute([$max_id, (int) $_SESSION['admin_id']]); } $logs = $db->query("SELECT * FROM logs ORDER BY id DESC LIMIT 300")->fetchAll(); $page_title = 'Logs'; require_once CS_ADMIN . '/includes/header.php'; ?>
Logs Reais de Auditoria do Painel
DataAçãoDetalhesIP
Nenhum log registrado.
EOF log_success "Módulo Logs criado" } # ============================================ # FUNÇÃO: MÓDULO CLOUD RESOURCES (REAL) # ============================================ create_cloud_resources_module() { log_info "Criando módulo Cloud Resources..." mkdir -p $CS_WEB_DIR/admin/modules/cloud_resources cat > $CS_WEB_DIR/admin/modules/cloud_resources/index.php << 'EOF' &1'); $vps_count = $db->query("SELECT COUNT(*) c FROM vps")->fetch()['c']; $cpu_allocated = $db->query("SELECT COALESCE(SUM(cpu),0) c FROM vps WHERE status IN ('running','building')")->fetch()['c']; $ram_allocated = $db->query("SELECT COALESCE(SUM(ram),0) c FROM vps WHERE status IN ('running','building')")->fetch()['c']; $disk_allocated = $db->query("SELECT COALESCE(SUM(disk),0) c FROM vps WHERE status IN ('running','building')")->fetch()['c']; $page_title = 'Cloud Resources'; require_once CS_ADMIN . '/includes/header.php'; ?>
vCPUs alocadas
GB
RAM alocada
GB
Disco alocado
VPS totais
Capacidade Real do Host (virsh nodeinfo)
CPU: % ( cores)
RAM: % de
Disco: %
EOF log_success "Módulo Cloud Resources criado" } # ============================================ # FUNÇÃO: MÓDULO LOAD BALANCER (REAL - HAProxy) # ============================================ create_load_balancer_module() { log_info "Criando módulo Load Balancer..." mkdir -p $CS_WEB_DIR/admin/modules/load_balancer cat > $CS_WEB_DIR/admin/modules/load_balancer/index.php << 'EOF' /dev/null')) !== ''; function cs_rebuild_haproxy_config(PDO $db) { $rules = $db->query("SELECT * FROM lb_rules WHERE status='active' ORDER BY id")->fetchAll(); $cfg = "global\n log /dev/log local0\n maxconn 4096\n\ndefaults\n mode tcp\n timeout connect 5s\n timeout client 60s\n timeout server 60s\n\n"; foreach ($rules as $r) { $frontend = "cspanel_fe_{$r['id']}"; $backend = "cspanel_be_{$r['id']}"; $mode = $r['protocol'] === 'http' ? 'http' : 'tcp'; $cfg .= "frontend $frontend\n bind *:{$r['frontend_port']}\n mode $mode\n default_backend $backend\n\n"; $cfg .= "backend $backend\n mode $mode\n balance {$r['algorithm']}\n"; $servers = array_filter(array_map('trim', explode(',', $r['backend_servers']))); foreach ($servers as $j => $s) { $cfg .= " server srv" . ($j + 1) . " " . $s . " check\n"; } $cfg .= "\n"; } $tmp = tempnam(sys_get_temp_dir(), 'haproxy'); file_put_contents($tmp, $cfg); $r = cs_shell(CS_SUDO . 'cp ' . escapeshellarg($tmp) . ' /etc/haproxy/haproxy.cfg && ' . CS_SUDO . 'systemctl reload haproxy'); @unlink($tmp); return $r; } if ($_SERVER['REQUEST_METHOD'] === 'POST') { $action = $_POST['action'] ?? ''; if ($action === 'add') { $name = trim($_POST['name'] ?? ''); $port = (int)($_POST['frontend_port'] ?? 0); $proto = ($_POST['protocol'] ?? 'tcp') === 'http' ? 'http' : 'tcp'; $servers = trim($_POST['backend_servers'] ?? ''); $algo = in_array($_POST['algorithm'] ?? '', ['roundrobin', 'leastconn', 'source'], true) ? $_POST['algorithm'] : 'roundrobin'; if ($name === '' || $port <= 0 || $servers === '') { $err = 'Preencha nome, porta e ao menos um servidor backend (ip:porta).'; } else { $db->prepare("INSERT INTO lb_rules (name, frontend_port, protocol, backend_servers, algorithm) VALUES (?,?,?,?,?)") ->execute([$name, $port, $proto, $servers, $algo]); $r = cs_rebuild_haproxy_config($db); cs_log($db, 'Criar regra de Load Balancer', $name); $msg = $r['code'] === 0 ? "Regra '$name' criada e HAProxy recarregado." : ('Regra salva, mas houve erro ao recarregar o HAProxy: ' . $r['output']); } } elseif ($action === 'delete') { $db->prepare("DELETE FROM lb_rules WHERE id=?")->execute([(int)$_POST['id']]); cs_rebuild_haproxy_config($db); $msg = 'Regra removida e HAProxy recarregado.'; } elseif ($action === 'toggle') { $id = (int)$_POST['id']; $db->prepare("UPDATE lb_rules SET status = IF(status='active','disabled','active') WHERE id=?")->execute([$id]); cs_rebuild_haproxy_config($db); $msg = 'Status atualizado e HAProxy recarregado.'; } } $rules = $db->query("SELECT * FROM lb_rules ORDER BY id DESC")->fetchAll(); $page_title = 'Load Balancer'; require_once CS_ADMIN . '/includes/header.php'; ?>
HAProxy não está instalado neste servidor.
Nova Regra (gera /etc/haproxy/haproxy.cfg real)
NomePortaProtocoloBackendsAlgoritmoStatusAções
Nenhuma regra criada.
EOF log_success "Módulo Load Balancer criado" } # ============================================ # FUNÇÃO: MÓDULO PASSTHROUGH (REAL - lspci + virsh attach-device) # ============================================ create_passthrough_module() { log_info "Criando módulo Passthrough..." mkdir -p $CS_WEB_DIR/admin/modules/passthrough cat > $CS_WEB_DIR/admin/modules/passthrough/index.php << 'EOF' /dev/null | grep -Ei 'vga|3d|display'"); $gpu_lines = array_filter(array_map('trim', explode("\n", (string)$lspci))); foreach ($gpu_lines as $line) { if (preg_match('/^(\S+)\s+(.+)$/', $line, $m)) { $pci = $m[1]; $desc = $m[2]; $stmt = $db->prepare("SELECT id FROM gpu_devices WHERE pci_address = ?"); $stmt->execute([$pci]); if (!$stmt->fetch()) { $db->prepare("INSERT INTO gpu_devices (pci_address, device_name) VALUES (?, ?)")->execute([$pci, $desc]); } } } if ($_SERVER['REQUEST_METHOD'] === 'POST') { $action = $_POST['action'] ?? ''; $gpu_id = (int)($_POST['gpu_id'] ?? 0); $stmt = $db->prepare("SELECT * FROM gpu_devices WHERE id=?"); $stmt->execute([$gpu_id]); $gpu = $stmt->fetch(); if ($gpu && $action === 'assign') { $vid = (int)$_POST['vps_id']; $vstmt = $db->prepare("SELECT * FROM vps WHERE id=?"); $vstmt->execute([$vid]); $vps = $vstmt->fetch(); if ($vps && $vps['domain'] && preg_match('/^([0-9a-fA-F]{2}):([0-9a-fA-F]{2})\.(\d)$/', $gpu['pci_address'], $pm)) { $xml = "
"; $tmp = tempnam(sys_get_temp_dir(), 'gpu'); file_put_contents($tmp, $xml); $r = cs_shell(CS_SUDO . 'virsh attach-device ' . escapeshellarg($vps['domain']) . ' ' . escapeshellarg($tmp) . ' --config --persistent'); @unlink($tmp); if ($r['code'] === 0) { $db->prepare("UPDATE gpu_devices SET assigned_vps_id=? WHERE id=?")->execute([$vid, $gpu_id]); cs_log($db, 'Atribuir GPU passthrough', "{$gpu['device_name']} -> {$vps['domain']}"); $msg = "GPU atribuída a {$vps['domain']} (requer reinício da VM e IOMMU habilitado na BIOS/kernel)."; } else { $err = 'Falha ao atribuir GPU: ' . $r['output']; } } } elseif ($gpu && $action === 'release') { $db->prepare("UPDATE gpu_devices SET assigned_vps_id=NULL WHERE id=?")->execute([$gpu_id]); $msg = 'GPU liberada no painel (remova o hostdev da VM manualmente se necessário).'; } } $gpus = $db->query("SELECT g.*, v.domain FROM gpu_devices g LEFT JOIN vps v ON v.id = g.assigned_vps_id ORDER BY g.id")->fetchAll(); $vps_list = $db->query("SELECT * FROM vps WHERE domain IS NOT NULL ORDER BY id DESC")->fetchAll(); $page_title = 'Passthrough'; require_once CS_ADMIN . '/includes/header.php'; ?>
GPUs/Dispositivos PCI Reais Detectados (lspci)
PCIDispositivoAtribuída aAções
Nenhuma GPU detectada via lspci neste host.
Nenhuma VPS disponível
EOF log_success "Módulo Passthrough criado" } # ============================================ # FUNÇÃO: CRIAR API ENDPOINTS # ============================================ create_api_endpoints() { log_info "Criando API endpoints..." mkdir -p $CS_WEB_DIR/api/v1 cat > $CS_WEB_DIR/api/v1/auth.php << 'EOF' 'API Key required']); exit; } $db = new PDO("mysql:host=localhost;dbname=cspanel_db", 'cspanel', '__DB_PASS__'); $stmt = $db->prepare("SELECT * FROM api_keys WHERE key_value = ?"); $stmt->execute([$api_key]); $key = $stmt->fetch(); if (!$key) { http_response_code(401); echo json_encode(['error' => 'Invalid API Key']); exit; } return true; EOF cat > $CS_WEB_DIR/api/v1/vps.php << 'EOF' query("SELECT * FROM vps"); echo json_encode($stmt->fetchAll()); } elseif ($action === 'stats') { $total = $db->query("SELECT COUNT(*) as total FROM vps")->fetch()['total']; $running = $db->query("SELECT COUNT(*) as running FROM vps WHERE status='running'")->fetch()['running']; echo json_encode(['total'=>$total,'running'=>$running]); } elseif (isset($_GET['id'])) { $stmt = $db->prepare("SELECT * FROM vps WHERE id = ?"); $stmt->execute([$_GET['id']]); echo json_encode($stmt->fetch()); } break; case 'POST': if ($action === 'create') { $data = json_decode(file_get_contents('php://input'), true); $stmt = $db->prepare("INSERT INTO vps (user_id,name,os,cpu,ram,disk,ip,status) VALUES (1,?,?,?,?,?,?,'building')"); $stmt->execute([$data['name'],$data['os'],$data['cpu'],$data['ram'],$data['disk'],$data['ip'] ?? '192.168.1.'.rand(2,254)]); echo json_encode(['success'=>true,'id'=>$db->lastInsertId()]); } break; case 'PUT': if (isset($_GET['id']) && $action === 'start') { $db->prepare("UPDATE vps SET status='running' WHERE id=?")->execute([$_GET['id']]); echo json_encode(['success'=>true]); } elseif (isset($_GET['id']) && $action === 'stop') { $db->prepare("UPDATE vps SET status='stopped' WHERE id=?")->execute([$_GET['id']]); echo json_encode(['success'=>true]); } break; case 'DELETE': if (isset($_GET['id'])) { $db->prepare("DELETE FROM vps WHERE id=?")->execute([$_GET['id']]); echo json_encode(['success'=>true]); } break; default: http_response_code(405); echo json_encode(['error'=>'Method not allowed']); } EOF cat > $CS_WEB_DIR/api/v1/templates.php << 'EOF' prepare($sql); $stmt->execute([$category]); } else { $stmt = $db->query($sql); } $templates = $stmt->fetchAll(); foreach ($templates as &$t) { $t['icon'] = $t['category'] === 'linux' ? '🐧' : '🪟'; } echo json_encode($templates); EOF cat > $CS_WEB_DIR/api/v1/users.php << 'EOF' prepare("SELECT id,username,email,vps_limit,created_at FROM users WHERE id=?"); $stmt->execute([$_GET['id']]); echo json_encode($stmt->fetch()); } else { $stmt = $db->query("SELECT id,username,email,vps_limit,created_at FROM users"); echo json_encode($stmt->fetchAll()); } } EOF cat > $CS_WEB_DIR/api/v1/servers.php << 'EOF' prepare("SELECT * FROM servers WHERE id = ?"); $stmt->execute([$_GET['id']]); echo json_encode($stmt->fetch()); } else { echo json_encode($db->query("SELECT * FROM servers")->fetchAll()); } } elseif ($method === 'POST') { $data = json_decode(file_get_contents('php://input'), true); $stmt = $db->prepare("INSERT INTO servers (name, hostname, ip, hypervisor) VALUES (?, ?, ?, ?)"); $stmt->execute([$data['name'] ?? '', $data['hostname'] ?? '', $data['ip'] ?? '', $data['hypervisor'] ?? 'kvm']); echo json_encode(['success' => true, 'id' => $db->lastInsertId()]); } elseif ($method === 'DELETE' && isset($_GET['id'])) { $db->prepare("DELETE FROM servers WHERE id = ?")->execute([$_GET['id']]); echo json_encode(['success' => true]); } else { http_response_code(405); echo json_encode(['error' => 'Method not allowed']); } EOF # Substitui a senha real do banco (placeholder não expande dentro de heredoc entre aspas) sed -i "s/__DB_PASS__/$DB_PASSWORD/g" $CS_WEB_DIR/api/v1/*.php chown -R www-data:www-data $CS_WEB_DIR/api 2>/dev/null || chown -R apache:apache $CS_WEB_DIR/api 2>/dev/null log_success "API endpoints criados" } # ============================================ # FUNÇÃO: CONFIGURAR BANCO DE DADOS # ============================================ setup_database() { log_info "Configurando banco de dados..." mysql -e "CREATE DATABASE IF NOT EXISTS cspanel_db;" mysql -e "CREATE USER IF NOT EXISTS 'cspanel'@'localhost' IDENTIFIED BY '$DB_PASSWORD';" mysql -e "GRANT ALL PRIVILEGES ON cspanel_db.* TO 'cspanel'@'localhost';" mysql -e "FLUSH PRIVILEGES;" mysql cspanel_db << EOF CREATE TABLE IF NOT EXISTS admin_users ( id INT PRIMARY KEY AUTO_INCREMENT, username VARCHAR(50) UNIQUE NOT NULL, password VARCHAR(255) NOT NULL, email VARCHAR(100) NOT NULL, last_notif_seen_id INT DEFAULT 0, created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ); INSERT INTO admin_users (username, password, email) VALUES ('admin', '$(openssl passwd -5 $ADMIN_PASSWORD)', '$EMAIL'); CREATE TABLE IF NOT EXISTS vps ( id INT PRIMARY KEY AUTO_INCREMENT, user_id INT NOT NULL, name VARCHAR(100) NOT NULL, domain VARCHAR(120) UNIQUE, os VARCHAR(50) NOT NULL, cpu INT DEFAULT 1, ram INT DEFAULT 2048, disk INT DEFAULT 20, ip VARCHAR(45), vnc_port INT DEFAULT NULL, media_id INT DEFAULT NULL, server_id INT DEFAULT NULL, status ENUM('running','stopped','suspended','building','error') DEFAULT 'stopped', created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP, updated_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP ); CREATE TABLE IF NOT EXISTS users ( id INT PRIMARY KEY AUTO_INCREMENT, username VARCHAR(50) UNIQUE NOT NULL, email VARCHAR(100) UNIQUE NOT NULL, password VARCHAR(255) NOT NULL, vps_limit INT DEFAULT 5, created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ); CREATE TABLE IF NOT EXISTS plans ( id INT PRIMARY KEY AUTO_INCREMENT, name VARCHAR(100) NOT NULL, cpu INT NOT NULL, ram INT NOT NULL, disk INT NOT NULL, bandwidth INT NOT NULL, price DECIMAL(10,2), created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ); CREATE TABLE IF NOT EXISTS servers ( id INT PRIMARY KEY AUTO_INCREMENT, name VARCHAR(100) NOT NULL, hostname VARCHAR(255) NOT NULL, ip VARCHAR(15) NOT NULL, hypervisor ENUM('kvm','openvz','lxc','xen') DEFAULT 'kvm', status ENUM('online','offline','maintenance') DEFAULT 'online', ssh_user VARCHAR(50) DEFAULT 'root', ssh_port INT DEFAULT 22, created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ); -- O host onde o cs-painel está rodando é sempre cadastrado como 'localhost (127.0.0.1)', -- exatamente como o Virtualizor identifica o hypervisor local. Suas specs reais (CPU/RAM/Disco) -- são lidas ao vivo por cs_host_stats() em tempo de execução, nunca hardcoded. INSERT INTO servers (name, hostname, ip, hypervisor) VALUES ('localhost', '$(hostname -f 2>/dev/null || hostname)', '127.0.0.1', '$HYPERVISOR'); CREATE TABLE IF NOT EXISTS api_keys ( id INT PRIMARY KEY AUTO_INCREMENT, key_value VARCHAR(64) UNIQUE NOT NULL, password VARCHAR(64) NOT NULL, created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ); INSERT INTO api_keys (key_value, password) VALUES ('$API_KEY', '$API_PASSWORD'); CREATE TABLE IF NOT EXISTS templates ( id INT PRIMARY KEY AUTO_INCREMENT, name VARCHAR(100) NOT NULL, os VARCHAR(50) NOT NULL, category ENUM('linux','windows') NOT NULL, file_path VARCHAR(255) NOT NULL, min_ram INT DEFAULT 1024, min_disk INT DEFAULT 10, created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ); INSERT INTO templates (name, os, category, file_path) VALUES ('Ubuntu 22.04 LTS', 'ubuntu-22.04', 'linux', '/var/www/cspanel/templates/linux/ubuntu-22.04.tar.gz'), ('Ubuntu 24.04 LTS', 'ubuntu-24.04', 'linux', '/var/www/cspanel/templates/linux/ubuntu-24.04.tar.gz'), ('Debian 12', 'debian-12', 'linux', '/var/www/cspanel/templates/linux/debian-12.tar.gz'), ('Debian 11', 'debian-11', 'linux', '/var/www/cspanel/templates/linux/debian-11.tar.gz'), ('AlmaLinux 9', 'almalinux-9', 'linux', '/var/www/cspanel/templates/linux/almalinux-9.tar.gz'), ('AlmaLinux 8', 'almalinux-8', 'linux', '/var/www/cspanel/templates/linux/almalinux-8.tar.gz'), ('Rocky Linux 9', 'rocky-9', 'linux', '/var/www/cspanel/templates/linux/rocky-9.tar.gz'), ('Windows Server 2025', 'win-server-2025', 'windows', '/var/www/cspanel/templates/windows/win-server-2025.tar.gz'), ('Windows Server 2022', 'win-server-2022', 'windows', '/var/www/cspanel/templates/windows/win-server-2022.tar.gz'), ('Windows 11 Pro', 'win-11-pro', 'windows', '/var/www/cspanel/templates/windows/win-11-pro.tar.gz'), ('Windows 10 Pro', 'win-10-pro', 'windows', '/var/www/cspanel/templates/windows/win-10-pro.tar.gz'); CREATE TABLE IF NOT EXISTS storage ( id INT PRIMARY KEY AUTO_INCREMENT, name VARCHAR(100) NOT NULL, path VARCHAR(255) NOT NULL, type ENUM('local','nfs','iscsi') DEFAULT 'local', total_space BIGINT, used_space BIGINT, created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ); INSERT INTO storage (name, path, type) VALUES ('Local Storage', '/var/lib/libvirt/images', 'local'); CREATE TABLE IF NOT EXISTS backups ( id INT PRIMARY KEY AUTO_INCREMENT, vps_id INT NOT NULL, name VARCHAR(100) NOT NULL, file_path VARCHAR(255) NOT NULL, size BIGINT, created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ); CREATE TABLE IF NOT EXISTS logs ( id INT PRIMARY KEY AUTO_INCREMENT, user_id INT, action VARCHAR(100) NOT NULL, details TEXT, ip VARCHAR(15), created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ); CREATE TABLE IF NOT EXISTS settings ( id INT PRIMARY KEY AUTO_INCREMENT, setting_key VARCHAR(50) UNIQUE NOT NULL, setting_value TEXT, updated_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP ); INSERT INTO settings (setting_key, setting_value) VALUES ('company_name', 'CS-PANEL Hosting'), ('company_email', '$EMAIL'), ('default_hypervisor', '$HYPERVISOR'), ('maintenance_mode', '0'), ('iso_dir', '$CS_ISO_DIR'), ('vps_bridge', '$CS_BRIDGE'), ('vnc_range_start', '$VNC_START'), ('vnc_range_end', '$VNC_END'), ('license_key', '$CS_LICENSE_KEY'), ('license_type', '$CS_LICENSE_TYPE'), ('license_vps_limit', '$CS_LICENSE_VPS_LIMIT'), ('license_expires_at', '$CS_LICENSE_EXPIRES'); CREATE TABLE IF NOT EXISTS media ( id INT PRIMARY KEY AUTO_INCREMENT, name VARCHAR(150) NOT NULL, filename VARCHAR(255) NOT NULL, os_type ENUM('linux','windows','other') DEFAULT 'linux', size BIGINT DEFAULT 0, status ENUM('ready','downloading','error') DEFAULT 'ready', created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ); CREATE TABLE IF NOT EXISTS ip_pool ( id INT PRIMARY KEY AUTO_INCREMENT, ip_address VARCHAR(45) NOT NULL UNIQUE, gateway VARCHAR(45), netmask VARCHAR(45) DEFAULT '255.255.255.0', type ENUM('ipv4','ipv6') DEFAULT 'ipv4', assigned_vps_id INT DEFAULT NULL, status ENUM('free','assigned','reserved') DEFAULT 'free', created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ); CREATE TABLE IF NOT EXISTS recipes ( id INT PRIMARY KEY AUTO_INCREMENT, name VARCHAR(150) NOT NULL, os_type ENUM('linux','windows') DEFAULT 'linux', script TEXT NOT NULL, created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ); CREATE TABLE IF NOT EXISTS tasks ( id INT PRIMARY KEY AUTO_INCREMENT, vps_id INT DEFAULT NULL, type VARCHAR(50) NOT NULL, status ENUM('pending','running','done','failed') DEFAULT 'pending', output TEXT, created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP, finished_at TIMESTAMP NULL ); CREATE TABLE IF NOT EXISTS vps_firewall_rules ( id INT PRIMARY KEY AUTO_INCREMENT, vps_id INT NOT NULL, protocol ENUM('tcp','udp','icmp','all') DEFAULT 'tcp', port VARCHAR(20) DEFAULT NULL, action_type ENUM('accept','drop','reject') DEFAULT 'accept', direction ENUM('in','out') DEFAULT 'in', created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ); CREATE TABLE IF NOT EXISTS lb_rules ( id INT PRIMARY KEY AUTO_INCREMENT, name VARCHAR(100) NOT NULL, frontend_port INT NOT NULL, protocol ENUM('tcp','http') DEFAULT 'tcp', backend_servers TEXT NOT NULL, algorithm ENUM('roundrobin','leastconn','source') DEFAULT 'roundrobin', status ENUM('active','disabled') DEFAULT 'active', created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ); CREATE TABLE IF NOT EXISTS gpu_devices ( id INT PRIMARY KEY AUTO_INCREMENT, pci_address VARCHAR(20) NOT NULL, device_name VARCHAR(150), assigned_vps_id INT DEFAULT NULL, created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ); CREATE TABLE IF NOT EXISTS invoices ( id INT PRIMARY KEY AUTO_INCREMENT, user_id INT NOT NULL, vps_id INT DEFAULT NULL, amount DECIMAL(10,2) NOT NULL, status ENUM('pending','paid','overdue','cancelled') DEFAULT 'pending', due_date DATE, created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ); CREATE TABLE IF NOT EXISTS ssl_certificates ( id INT PRIMARY KEY AUTO_INCREMENT, domain VARCHAR(255) NOT NULL, cert_path VARCHAR(255), key_path VARCHAR(255), issuer VARCHAR(100) DEFAULT 'Lets Encrypt', expires_at DATE, created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ); CREATE TABLE IF NOT EXISTS admin_login_logs ( id INT PRIMARY KEY AUTO_INCREMENT, username VARCHAR(50) NOT NULL, ip VARCHAR(45), created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ); CREATE TABLE IF NOT EXISTS network_samples ( id INT PRIMARY KEY AUTO_INCREMENT, iface VARCHAR(30), rx_bytes BIGINT DEFAULT 0, tx_bytes BIGINT DEFAULT 0, created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ); -- Amostras reais por VPS (rede via virsh domifstat + cpu via virsh cpu-stats), usadas pelas -- abas Overview/Graphs do painel do cliente. Nunca preenchida com dados falsos. CREATE TABLE IF NOT EXISTS vps_network_samples ( id INT PRIMARY KEY AUTO_INCREMENT, vps_id INT NOT NULL, rx_bytes BIGINT DEFAULT 0, tx_bytes BIGINT DEFAULT 0, cpu_time_ns BIGINT DEFAULT 0, created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ); -- Chaves SSH publicas do cliente, injetadas de verdade via virt-customize --ssh-inject -- no momento da instalacao/reinstalacao do sistema operacional (nunca simulado). CREATE TABLE IF NOT EXISTS ssh_keys ( id INT PRIMARY KEY AUTO_INCREMENT, user_id INT NOT NULL, name VARCHAR(100) NOT NULL, public_key TEXT NOT NULL, created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ); -- Registros de DNS reverso (PTR), aplicados de verdade via pdnsutil quando o PowerDNS -- estiver configurado no servidor; caso contrario ficam salvos apenas no painel. CREATE TABLE IF NOT EXISTS reverse_dns_records ( id INT PRIMARY KEY AUTO_INCREMENT, user_id INT NOT NULL, vps_id INT DEFAULT NULL, ip_address VARCHAR(45) NOT NULL, hostname VARCHAR(255) NOT NULL, applied TINYINT(1) DEFAULT 0, created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ); EOF # Migração para instalações antigas: garante que a tabela 'vps' criada por uma # versão anterior do painel ganhe as novas colunas reais (não apenas em bancos novos). # Requer MariaDB 10.0.2+/MySQL 8.0.29+ para "ADD COLUMN IF NOT EXISTS"; ignorado com # segurança em versões mais antigas (o restante do schema já cobre instalações novas). mysql --force cspanel_db << 'EOF' 2>/dev/null || log_warning "Migração de colunas ignorada em parte (versão do MySQL/MariaDB não suporta ADD COLUMN IF NOT EXISTS) - --force garante que as demais colunas suportadas sejam aplicadas mesmo assim" ALTER TABLE vps ADD COLUMN IF NOT EXISTS domain VARCHAR(120) UNIQUE; ALTER TABLE vps ADD COLUMN IF NOT EXISTS vnc_port INT DEFAULT NULL; ALTER TABLE vps ADD COLUMN IF NOT EXISTS media_id INT DEFAULT NULL; ALTER TABLE vps ADD COLUMN IF NOT EXISTS server_id INT DEFAULT NULL; ALTER TABLE vps MODIFY COLUMN ip VARCHAR(45); ALTER TABLE users ADD COLUMN IF NOT EXISTS user_type ENUM('user','cloud','admin') DEFAULT 'user'; ALTER TABLE users ADD COLUMN IF NOT EXISTS first_name VARCHAR(60) DEFAULT ''; ALTER TABLE users ADD COLUMN IF NOT EXISTS last_name VARCHAR(60) DEFAULT ''; ALTER TABLE users ADD COLUMN IF NOT EXISTS status ENUM('active','suspended') DEFAULT 'active'; ALTER TABLE users ADD COLUMN IF NOT EXISTS twofa TINYINT(1) DEFAULT 0; ALTER TABLE users ADD COLUMN IF NOT EXISTS bandwidth_used BIGINT DEFAULT 0; ALTER TABLE users ADD COLUMN IF NOT EXISTS dns_plan VARCHAR(50) DEFAULT 'No Plan'; ALTER TABLE plans ADD COLUMN IF NOT EXISTS virt_type VARCHAR(30) DEFAULT 'kvm'; ALTER TABLE plans ADD COLUMN IF NOT EXISTS os_type VARCHAR(30) DEFAULT ''; ALTER TABLE plans ADD COLUMN IF NOT EXISTS config_json TEXT; ALTER TABLE servers ADD COLUMN IF NOT EXISTS internal_ip VARCHAR(45) DEFAULT ''; ALTER TABLE servers ADD COLUMN IF NOT EXISTS api_password VARCHAR(255) DEFAULT ''; ALTER TABLE servers ADD COLUMN IF NOT EXISTS locked TINYINT(1) DEFAULT 0; ALTER TABLE servers ADD COLUMN IF NOT EXISTS server_group VARCHAR(60) DEFAULT 'Default'; ALTER TABLE servers ADD COLUMN IF NOT EXISTS firewall_plan VARCHAR(60) DEFAULT 'None'; ALTER TABLE servers ADD COLUMN IF NOT EXISTS ssh_user VARCHAR(50) DEFAULT 'root'; ALTER TABLE servers ADD COLUMN IF NOT EXISTS ssh_port INT DEFAULT 22; ALTER TABLE storage ADD COLUMN IF NOT EXISTS storage_type VARCHAR(20) DEFAULT 'directory'; ALTER TABLE storage ADD COLUMN IF NOT EXISTS file_format VARCHAR(10) DEFAULT 'raw'; ALTER TABLE storage ADD COLUMN IF NOT EXISTS overcommit VARCHAR(10) DEFAULT ''; ALTER TABLE storage ADD COLUMN IF NOT EXISTS alert_threshold INT DEFAULT 90; ALTER TABLE storage ADD COLUMN IF NOT EXISTS is_primary TINYINT(1) DEFAULT 0; ALTER TABLE vps ADD COLUMN IF NOT EXISTS rescue_mode TINYINT(1) DEFAULT 0; ALTER TABLE vps ADD COLUMN IF NOT EXISTS acpi TINYINT(1) DEFAULT 1; ALTER TABLE vps ADD COLUMN IF NOT EXISTS apic TINYINT(1) DEFAULT 1; ALTER TABLE vps ADD COLUMN IF NOT EXISTS vga TINYINT(1) DEFAULT 0; ALTER TABLE vps ADD COLUMN IF NOT EXISTS firewall_plan VARCHAR(60) DEFAULT 'Nenhum'; ALTER TABLE admin_users ADD COLUMN IF NOT EXISTS reset_token VARCHAR(64) DEFAULT NULL; ALTER TABLE admin_users ADD COLUMN IF NOT EXISTS last_notif_seen_id INT DEFAULT 0; ALTER TABLE admin_users ADD COLUMN IF NOT EXISTS reset_expires DATETIME DEFAULT NULL; ALTER TABLE users ADD COLUMN IF NOT EXISTS reset_token VARCHAR(64) DEFAULT NULL; ALTER TABLE users ADD COLUMN IF NOT EXISTS reset_expires DATETIME DEFAULT NULL; ALTER TABLE users ADD COLUMN IF NOT EXISTS language VARCHAR(10) DEFAULT 'pt-BR'; ALTER TABLE users ADD COLUMN IF NOT EXISTS timezone VARCHAR(60) DEFAULT 'America/Sao_Paulo'; ALTER TABLE users ADD COLUMN IF NOT EXISTS bandwidth_threshold INT DEFAULT 0; ALTER TABLE users ADD COLUMN IF NOT EXISTS otp_method ENUM('none','email','totp') DEFAULT 'none'; ALTER TABLE users ADD COLUMN IF NOT EXISTS totp_secret VARCHAR(64) DEFAULT NULL; ALTER TABLE users ADD COLUMN IF NOT EXISTS otp_code VARCHAR(6) DEFAULT NULL; ALTER TABLE users ADD COLUMN IF NOT EXISTS otp_expires DATETIME DEFAULT NULL; EOF log_success "Banco de dados configurado" } # ============================================ # FUNÇÕES: HIPERVISOR, REDE, FIREWALL, SSL, CRON, SCRIPTS # ============================================ setup_hypervisor() { log_info "Configurando hipervisor: $KERNEL" case $KERNEL in kvm) modprobe kvm 2>/dev/null || true modprobe kvm_intel 2>/dev/null || modprobe kvm_amd 2>/dev/null || true echo "kvm" > /etc/modules-load.d/kvm.conf 2>/dev/null || true systemctl enable libvirtd 2>/dev/null || true systemctl start libvirtd 2>/dev/null || true setup_kvm_network setup_storage_pools log_success "KVM configurado" ;; openvz|ovz) log_info "Instalando OpenVZ..." case $OS in centos|rhel|almalinux|rocky) wget -P /etc/yum.repos.d/ http://download.openvz.org/openvz.repo 2>/dev/null || true rpm --import http://download.openvz.org/RPM-GPG-Key-OpenVZ 2>/dev/null || true if command -v dnf &> /dev/null; then dnf install -y vzkernel vzctl vzquota ploop 2>/dev/null || true else yum install -y vzkernel vzctl vzquota ploop 2>/dev/null || true; fi esac log_success "OpenVZ configurado" ;; lxc) log_info "Instalando LXC..." case $OS in ubuntu|debian) apt-get install -y lxc lxc-templates 2>/dev/null || true ;; centos|rhel|almalinux|rocky) if command -v dnf &> /dev/null; then dnf install -y lxc lxc-templates 2>/dev/null || true; else yum install -y lxc lxc-templates 2>/dev/null || true; fi ;; esac log_success "LXC configurado" ;; xen) log_info "Instalando Xen..." case $OS in centos|rhel|almalinux|rocky) yum install -y xen xen-libs xen-devel 2>/dev/null || true ;; esac log_success "Xen configurado" ;; esac } setup_kvm_network() { log_info "Configurando rede KVM..." BRIDGE_NAME="cspanelbr0" mkdir -p /etc/systemd/network cat > /etc/systemd/network/${BRIDGE_NAME}.netdev << EOF 2>/dev/null || true [NetDev] Name=$BRIDGE_NAME Kind=bridge EOF cat > /etc/systemd/network/${BRIDGE_NAME}.network << EOF 2>/dev/null || true [Match] Name=$BRIDGE_NAME [Network] Address=192.168.1.254/24 DNS=8.8.8.8 DNS=1.1.1.1 EOF systemctl restart systemd-networkd 2>/dev/null || true log_success "Bridge configurada: $BRIDGE_NAME" } # Cria e ativa os storage pools reais do libvirt (imagens de disco + ISOs) setup_storage_pools() { log_info "Configurando storage pools do libvirt..." mkdir -p $CS_IMAGES_DIR $CS_ISO_DIR chmod 755 $CS_IMAGES_DIR $CS_ISO_DIR if command -v virsh &> /dev/null; then if ! virsh pool-info default &> /dev/null; then virsh pool-define-as default dir --target $CS_IMAGES_DIR 2>/dev/null || true fi virsh pool-build default 2>/dev/null || true virsh pool-start default 2>/dev/null || true virsh pool-autostart default 2>/dev/null || true if ! virsh pool-info iso &> /dev/null; then virsh pool-define-as iso dir --target $CS_ISO_DIR 2>/dev/null || true fi virsh pool-build iso 2>/dev/null || true virsh pool-start iso 2>/dev/null || true virsh pool-autostart iso 2>/dev/null || true virsh pool-refresh default 2>/dev/null || true virsh pool-refresh iso 2>/dev/null || true log_success "Storage pools 'default' e 'iso' prontos" else log_warning "virsh não encontrado, storage pools não configurados" fi } setup_network() { log_info "Configurando rede..." echo "$(hostname -f 2>/dev/null || hostname)" > /etc/hostname 2>/dev/null || true IP=$(cs_detect_real_ip) [ -n "$IP" ] && echo "$IP $(hostname -f 2>/dev/null || hostname)" >> /etc/hosts 2>/dev/null || true cat >> /etc/sysctl.conf << EOF net.ipv4.ip_forward=1 net.ipv4.conf.all.forwarding=1 net.ipv6.conf.all.forwarding=1 net.bridge.bridge-nf-call-iptables=1 net.bridge.bridge-nf-call-ip6tables=1 EOF sysctl -p 2>/dev/null || true log_success "Rede configurada" } setup_firewall() { log_info "Configurando firewall..." PORTS="4081 4082 4083 4084 4085" if command -v firewall-cmd &> /dev/null; then for port in $PORTS; do firewall-cmd --zone=public --permanent --add-port=${port}/TCP 2>/dev/null || true; done firewall-cmd --zone=public --permanent --add-port=5900-6000/TCP 2>/dev/null || true firewall-cmd --zone=public --permanent --add-port=2002-2005/TCP 2>/dev/null || true firewall-cmd --reload 2>/dev/null || true log_success "Firewalld configurado" elif command -v ufw &> /dev/null; then for port in $PORTS; do ufw allow $port/tcp 2>/dev/null || true; done ufw allow 5900-6000/tcp 2>/dev/null || true ufw allow 2002-2005/tcp 2>/dev/null || true log_success "UFW configurado" elif command -v iptables &> /dev/null; then for port in $PORTS; do iptables -I INPUT 1 -p tcp -m tcp --dport $port -j ACCEPT 2>/dev/null || true; done iptables -I INPUT 1 -p tcp -m tcp --dport 5900-6000 -j ACCEPT 2>/dev/null || true iptables -I INPUT 1 -p tcp -m tcp --dport 2002-2005 -j ACCEPT 2>/dev/null || true log_success "Iptables configurado" else log_warning "Nenhum firewall detectado. Configure manualmente: 4081-4085, 5900-6000, 2002-2005" fi if command -v setenforce &> /dev/null; then setenforce 0 2>/dev/null || true [ -f /etc/selinux/config ] && sed -i 's/SELINUX=enforcing/SELINUX=disabled/g' /etc/selinux/config log_success "SELinux desabilitado" fi } setup_ssl() { log_info "Configurando SSL..." mkdir -p $CS_SSL_DIR openssl req -x509 -nodes -days 365 -newkey rsa:2048 \ -keyout $CS_SSL_DIR/private.key -out $CS_SSL_DIR/certificate.crt \ -subj "/C=BR/ST=Estado/L=Cidade/O=CS-PANEL/CN=$(hostname -f 2>/dev/null || echo localhost)" 2>/dev/null || true chmod 600 $CS_SSL_DIR/private.key 2>/dev/null || true chmod 644 $CS_SSL_DIR/certificate.crt 2>/dev/null || true log_success "SSL configurado" } setup_cron() { log_info "Configurando CRON..." cat > /etc/cron.d/cspanel << EOF * * * * * root php $CS_WEB_DIR/admin/cron.php > /dev/null 2>&1 0 2 * * * root $CS_INSTALL_DIR/scripts/backup.sh > /dev/null 2>&1 */5 * * * * root $CS_INSTALL_DIR/scripts/monitor.sh > /dev/null 2>&1 0 3 * * * root find $CS_LOGS_DIR -name "*.log" -mtime +30 -delete > /dev/null 2>&1 0 4 * * 0 root $CS_INSTALL_DIR/scripts/update_templates.sh > /dev/null 2>&1 EOF log_success "CRON configurado" } # ============================================ # FUNÇÕES: SCRIPTS AUXILIARES # ============================================ create_helper_scripts() { log_info "Criando scripts auxiliares..." mkdir -p $CS_INSTALL_DIR/scripts cat > $CS_INSTALL_DIR/scripts/create_vps.sh << 'EOF' #!/bin/bash NAME=$1; OS=$2; CPU=${3:-1}; RAM=${4:-2048}; DISK=${5:-20}; IP=${6} if [ -z "$NAME" ] || [ -z "$OS" ]; then echo "Uso: $0 [cpu] [ram] [disk] [ip]"; exit 1; fi qemu-img create -f qcow2 /var/lib/libvirt/images/${NAME}.qcow2 ${DISK}G 2>/dev/null || true virt-install --name $NAME --os-type linux --os-variant $OS --vcpus $CPU --ram $RAM --disk path=/var/lib/libvirt/images/${NAME}.qcow2,format=qcow2,size=$DISK --network bridge=cspanelbr0 --noautoconsole --graphics vnc,listen=0.0.0.0,port=-1 --console pty,target_type=serial 2>/dev/null || true echo "VPS $NAME criada com sucesso!" EOF cat > $CS_INSTALL_DIR/scripts/backup.sh << 'EOF' #!/bin/bash BACKUP_DIR="/var/backups/cspanel"; DATE=$(date +%Y%m%d_%H%M%S); BACKUP_FILE="$BACKUP_DIR/cspanel_backup_$DATE.tar.gz" mkdir -p $BACKUP_DIR mysqldump cspanel_db > /tmp/cspanel_db.sql 2>/dev/null || true tar -czf $BACKUP_FILE /var/www/cspanel /usr/local/cspanel /etc/cspanel /tmp/cspanel_db.sql 2>/dev/null || true rm /tmp/cspanel_db.sql 2>/dev/null || true echo "Backup realizado: $BACKUP_FILE" EOF cat > $CS_INSTALL_DIR/scripts/monitor.sh << 'EOF' #!/bin/bash LOG_FILE="/var/log/cspanel/monitor.log"; DATE=$(date '+%Y-%m-%d %H:%M:%S') CPU_USAGE=$(top -bn1 | grep "Cpu(s)" | awk '{print $2}' | cut -d'%' -f1 2>/dev/null || echo "0") RAM_PERCENT=$(free | grep Mem | awk '{print ($3/$2) * 100.0}' 2>/dev/null || echo "0") DISK_PERCENT=$(df -h / | awk 'NR==2 {print $5}' | sed 's/%//' 2>/dev/null || echo "0") VPS_COUNT=$(virsh list --all 2>/dev/null | grep -c "running\|shut off" || echo "0") VPS_RUNNING=$(virsh list --state-running 2>/dev/null | grep -c "running" || echo "0") echo "[$DATE] CPU: ${CPU_USAGE}% RAM: ${RAM_PERCENT}% DISK: ${DISK_PERCENT}% VPS: ${VPS_RUNNING}/${VPS_COUNT}" >> $LOG_FILE EOF cat > $CS_INSTALL_DIR/scripts/update_templates.sh << 'EOF' #!/bin/bash echo "Templates atualizados em $(date)" EOF chmod +x $CS_INSTALL_DIR/scripts/*.sh log_success "Scripts auxiliares criados" } setup_permissions() { log_info "Configurando permissões..." case $OS in ubuntu|debian) WEB_USER="www-data" ;; *) WEB_USER="apache" ;; esac chown -R $WEB_USER:$WEB_USER $CS_WEB_DIR 2>/dev/null || true chmod -R 755 $CS_WEB_DIR 2>/dev/null || true chown -R root:root $CS_INSTALL_DIR 2>/dev/null || true chmod -R 755 $CS_INSTALL_DIR 2>/dev/null || true chmod 755 $CS_INSTALL_DIR/scripts/*.sh 2>/dev/null || true # O webserver precisa gravar diretamente (sem sudo) ISOs enviadas por upload (move_uploaded_file) # e relatórios de backup; qcow2/imagens de VM continuam root (todo acesso passa por sudo). chown -R $WEB_USER:$WEB_USER $CS_ISO_DIR 2>/dev/null || true chmod -R 775 $CS_ISO_DIR 2>/dev/null || true chown $WEB_USER:$WEB_USER $CS_BACKUP_DIR 2>/dev/null || true chmod 775 $CS_BACKUP_DIR 2>/dev/null || true log_success "Permissões configuradas" } # Concede ao usuário do webserver permissão SEM SENHA apenas para os binários # que o painel precisa (princípio do menor privilégio) em vez de rodar como root. setup_sudoers() { log_info "Configurando sudoers restrito para o painel..." case $OS in ubuntu|debian) WEB_USER="www-data" ;; *) WEB_USER="apache" ;; esac VIRSH_BIN=$(command -v virsh || echo /usr/bin/virsh) VIRTINSTALL_BIN=$(command -v virt-install || echo /usr/bin/virt-install) QEMUIMG_BIN=$(command -v qemu-img || echo /usr/bin/qemu-img) IPTABLES_BIN=$(command -v iptables || echo /usr/sbin/iptables) UFW_BIN=$(command -v ufw || echo /usr/sbin/ufw) CERTBOT_BIN=$(command -v certbot || echo /usr/bin/certbot) PDNSUTIL_BIN=$(command -v pdnsutil || echo /usr/bin/pdnsutil) WGET_BIN=$(command -v wget || echo /usr/bin/wget) SYSTEMCTL_BIN=$(command -v systemctl || echo /bin/systemctl) cat > /etc/sudoers.d/cspanel << EOF # Gerado automaticamente pelo instalador do CS-PANEL - NÃO editar manualmente. # Concede ao usuário do webserver apenas os binários necessários para operar # VPS (KVM/libvirt), firewall, SSL e DNS reais, sem precisar de root completo. $WEB_USER ALL=(root) NOPASSWD: $VIRSH_BIN * $WEB_USER ALL=(root) NOPASSWD: $VIRTINSTALL_BIN * $WEB_USER ALL=(root) NOPASSWD: $QEMUIMG_BIN * $WEB_USER ALL=(root) NOPASSWD: $IPTABLES_BIN * $WEB_USER ALL=(root) NOPASSWD: $UFW_BIN * $WEB_USER ALL=(root) NOPASSWD: $CERTBOT_BIN * $WEB_USER ALL=(root) NOPASSWD: $PDNSUTIL_BIN * $WEB_USER ALL=(root) NOPASSWD: $WGET_BIN -O $CS_ISO_DIR/* * $WEB_USER ALL=(root) NOPASSWD: $SYSTEMCTL_BIN reload haproxy $WEB_USER ALL=(root) NOPASSWD: $SYSTEMCTL_BIN restart haproxy $WEB_USER ALL=(root) NOPASSWD: $SYSTEMCTL_BIN reload pdns $WEB_USER ALL=(root) NOPASSWD: $SYSTEMCTL_BIN restart pdns EOF chmod 440 /etc/sudoers.d/cspanel if visudo -cf /etc/sudoers.d/cspanel &> /dev/null; then log_success "Sudoers restrito configurado para $WEB_USER" else log_error "Sintaxe inválida em /etc/sudoers.d/cspanel, removendo por segurança" rm -f /etc/sudoers.d/cspanel fi } # ============================================ # FUNÇÃO: PAINEL ADMIN # ============================================ create_admin_panel() { log_info "Criando Painel Administrativo..." mkdir -p $CS_WEB_DIR/admin/includes cat > $CS_WEB_DIR/admin/includes/database.php << 'EOF' setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION); } catch(PDOException $e) { die("Erro no banco: " . $e->getMessage()); } EOF sed -i "s/__DB_PASS__/$DB_PASSWORD/g" $CS_WEB_DIR/admin/includes/database.php cat > $CS_WEB_DIR/admin/includes/config.php << 'EOF' $CS_WEB_DIR/admin/index.php << 'EOF' $CS_WEB_DIR/admin/includes/libvirt.php << 'PHPEOF' &1', $output, $ret); return ['code' => $ret, 'output' => implode("\n", $output)]; } // Sincroniza o status real de cada VPS consultando 'virsh domstate' - localmente para VMs no // host local, ou via SSH real (cs_remote_shell) para VMs hospedadas em servidores remotos. function cs_sync_vps_status(PDO $db) { // Protegido com try/catch: em instalacoes antigas que ainda nao rodaram a migracao do // Phase H (ALTER TABLE ... ssh_user/ssh_port/api_password em servers), esta query falharia // com PDOException e derrubaria com HTTP 500 QUALQUER pagina que chama esta funcao (dashboard, // listagem de VPS) logo apos o login. Preferimos degradar (nao sincronizar status agora) a // quebrar o painel inteiro - o proximo `./install.sh` (idempotente) aplica a coluna e resolve. try { $rows = $db->query("SELECT vps.id, vps.domain, vps.status, servers.ip AS server_ip, servers.ssh_user, servers.ssh_port, servers.api_password FROM vps LEFT JOIN servers ON servers.id = vps.server_id WHERE vps.domain IS NOT NULL AND vps.domain <> ''")->fetchAll(); } catch (PDOException $e) { return; } foreach ($rows as $r) { $cmd = 'virsh domstate ' . escapeshellarg($r['domain']) . ' 2>/dev/null'; if (!empty($r['server_ip']) && $r['server_ip'] !== '127.0.0.1') { $out = trim((string) cs_remote_shell([ 'ip' => $r['server_ip'], 'ssh_user' => $r['ssh_user'], 'ssh_port' => $r['ssh_port'], 'api_password' => $r['api_password'], ], $cmd)['output']); } else { $out = trim((string) shell_exec($cmd)); } if ($out === '') { continue; } $new_status = $r['status']; if (stripos($out, 'running') !== false) { $new_status = 'running'; } elseif (stripos($out, 'paused') !== false) { $new_status = 'suspended'; } elseif (stripos($out, 'shut off') !== false || stripos($out, 'shutoff') !== false) { $new_status = 'stopped'; } if ($new_status !== $r['status']) { $db->prepare("UPDATE vps SET status = ? WHERE id = ?")->execute([$new_status, $r['id']]); } } } function cs_next_vnc_port(PDO $db) { $used = $db->query("SELECT vnc_port FROM vps WHERE vnc_port IS NOT NULL")->fetchAll(PDO::FETCH_COLUMN); $port = 5900; while (in_array((int)$port, array_map('intval', $used), true)) { $port++; } return $port; } function cs_next_free_ip(PDO $db) { $stmt = $db->query("SELECT * FROM ip_pool WHERE status = 'free' ORDER BY id ASC LIMIT 1"); return $stmt->fetch(); } function cs_log(PDO $db, $action, $details = '') { $db->prepare("INSERT INTO logs (action, details, ip) VALUES (?, ?, ?)") ->execute([$action, $details, $_SERVER['REMOTE_ADDR'] ?? 'cli']); } // Recria a cadeia iptables dedicada de uma VPS a partir das regras salvas no banco, // garantindo que exclusões/edições realmente reflitam no firewall real do host. function cs_apply_vps_firewall(PDO $db, array $vps) { if (empty($vps['ip'])) { return; } $chain = 'cspanel-vps-' . (int)$vps['id']; cs_shell(CS_SUDO . 'iptables -N ' . escapeshellarg($chain) . ' 2>/dev/null'); cs_shell(CS_SUDO . 'iptables -F ' . escapeshellarg($chain)); $check = cs_shell(CS_SUDO . 'iptables -C FORWARD -d ' . escapeshellarg($vps['ip']) . ' -j ' . escapeshellarg($chain)); if ($check['code'] !== 0) { cs_shell(CS_SUDO . 'iptables -I FORWARD -d ' . escapeshellarg($vps['ip']) . ' -j ' . escapeshellarg($chain)); } $stmt = $db->prepare("SELECT * FROM vps_firewall_rules WHERE vps_id = ? AND direction = 'in' ORDER BY id ASC"); $stmt->execute([$vps['id']]); foreach ($stmt->fetchAll() as $rule) { $target = ['accept' => 'ACCEPT', 'drop' => 'DROP', 'reject' => 'REJECT'][$rule['action_type']] ?? 'ACCEPT'; $cmd = CS_SUDO . 'iptables -A ' . escapeshellarg($chain); if ($rule['protocol'] !== 'all') { $cmd .= ' -p ' . escapeshellarg($rule['protocol']); } if (!empty($rule['port'])) { $cmd .= ' --dport ' . escapeshellarg($rule['port']); } $cmd .= ' -j ' . $target; cs_shell($cmd); } } // Estatísticas reais do host (usadas no Dashboard, em Cloud Resources e na listagem de Servers) function cs_host_stats() { $cpu = trim((string) shell_exec("top -bn1 | grep 'Cpu(s)' | awk '{print $2}' | cut -d'%' -f1")); $ram = trim((string) shell_exec("free | grep Mem | awk '{print ($3/$2) * 100.0}'")); $disk = trim((string) shell_exec("df -h / | awk 'NR==2 {print $5}' | sed 's/%//'")); $uptime = trim((string) shell_exec("uptime -p 2>/dev/null")); $load = trim((string) shell_exec("cat /proc/loadavg 2>/dev/null | awk '{print $1, $2, $3}'")); $cpu_model = trim((string) shell_exec("lscpu 2>/dev/null | grep 'Model name' | cut -d: -f2")); $cpu_cores = trim((string) shell_exec("nproc 2>/dev/null")); $mem_total = trim((string) shell_exec("free -h | grep Mem | awk '{print $2}'")); $mem_used_mb = trim((string) shell_exec("free -m | awk 'NR==2{print $3}'")); $mem_total_mb = trim((string) shell_exec("free -m | awk 'NR==2{print $2}'")); $kernel = trim((string) shell_exec("uname -r")); return [ 'cpu' => (float)($cpu ?: 0), 'ram' => (float)($ram ?: 0), 'disk' => (float)($disk ?: 0), 'uptime' => $uptime ?: '-', 'load' => $load ?: '-', 'cpu_model' => $cpu_model ?: '-', 'cpu_cores' => $cpu_cores ?: '-', 'mem_total' => $mem_total ?: '-', 'kernel' => $kernel ?: '-', 'mem_used_mb' => (int)($mem_used_mb ?: 0), 'mem_total_mb' => (int)($mem_total_mb ?: 0), ]; } // ===== Provisionamento remoto real via SSH (mesma ideia do "Add Node" do Virtualizor) ===== // Cada servidor cadastrado com IP != 127.0.0.1 é tratado como um node remoto de verdade: o // painel conecta nele via SSH (senha, usando 'sshpass', ou chave se nenhuma senha foi salva) e // executa os MESMOS comandos reais (qemu-img/virt-install/virsh) que rodaria localmente. Nunca // finge sucesso: qualquer falha de conexão ou de comando é reportada com a saída real do SSH. // Executa um comando: localmente (cs_shell) se o servidor for o host onde o painel roda // (127.0.0.1), ou via SSH real no node remoto informado. Retorna sempre no mesmo formato // ['code' => int, 'output' => string] usado por cs_shell(), para poder ser usado de forma // intercambiável em qualquer lugar que hoje só chama cs_shell() localmente. function cs_remote_shell(array $server, $cmd) { $ip = $server['ip'] ?? ''; if ($ip === '' || $ip === '127.0.0.1') { return cs_shell($cmd); } if (trim((string) shell_exec('command -v ssh')) === '') { return ['code' => 127, 'output' => "ERRO: binário 'ssh' não está instalado no host do painel."]; } $user = $server['ssh_user'] ?: 'root'; $port = (int) ($server['ssh_port'] ?: 22); $ssh_opts = '-o StrictHostKeyChecking=no -o ConnectTimeout=10 -o BatchMode=' . (!empty($server['api_password']) ? 'no' : 'yes') . ' -p ' . escapeshellarg((string) $port); $target = escapeshellarg($user . '@' . $ip); if (!empty($server['api_password'])) { if (trim((string) shell_exec('command -v sshpass')) === '') { return ['code' => 127, 'output' => "ERRO: binário 'sshpass' não está instalado no host do painel (necessário para SSH por senha)."]; } $full = 'sshpass -p ' . escapeshellarg($server['api_password']) . " ssh $ssh_opts $target " . escapeshellarg($cmd); } else { $full = "ssh $ssh_opts $target " . escapeshellarg($cmd); } return cs_shell($full); } // Garante que um arquivo local (tipicamente uma ISO de CS_ISO_DIR) exista no MESMO caminho no // node remoto, copiando via scp real apenas se ainda não existir lá (evita reenviar ISOs de // vários GB a cada nova VPS). Retorna true só se o arquivo realmente existe no destino ao final. function cs_remote_push_file(array $server, $local_path, $remote_path) { $ip = $server['ip'] ?? ''; if ($ip === '' || $ip === '127.0.0.1') { return file_exists($local_path); } $check = cs_remote_shell($server, 'test -f ' . escapeshellarg($remote_path) . ' && echo CS_EXISTS'); if (strpos((string) $check['output'], 'CS_EXISTS') !== false) { return true; } cs_remote_shell($server, 'mkdir -p ' . escapeshellarg(dirname($remote_path))); $user = $server['ssh_user'] ?: 'root'; $port = (int) ($server['ssh_port'] ?: 22); $scp_opts = '-o StrictHostKeyChecking=no -o ConnectTimeout=10 -P ' . escapeshellarg((string) $port); $dest = escapeshellarg($user . '@' . $ip . ':' . $remote_path); if (!empty($server['api_password'])) { shell_exec('sshpass -p ' . escapeshellarg($server['api_password']) . " scp $scp_opts " . escapeshellarg($local_path) . " $dest 2>&1"); } else { shell_exec("scp $scp_opts " . escapeshellarg($local_path) . " $dest 2>&1"); } $check2 = cs_remote_shell($server, 'test -f ' . escapeshellarg($remote_path) . ' && echo CS_EXISTS'); return strpos((string) $check2['output'], 'CS_EXISTS') !== false; } // Testa de verdade a conectividade SSH + presença real do virsh/libvirt no node remoto - usado // pela ação "Testar Conexão" na listagem de Servers. Nunca retorna sucesso sem tentar de fato. function cs_remote_test_connection(array $server) { if (($server['ip'] ?? '') === '127.0.0.1') { return ['ok' => true, 'message' => 'Servidor local - sempre disponível.']; } $r = cs_remote_shell($server, 'virsh --version 2>&1 && echo CS_SSH_OK'); if (strpos((string) $r['output'], 'CS_SSH_OK') !== false) { $version = trim(str_replace('CS_SSH_OK', '', $r['output'])); return ['ok' => true, 'message' => 'Conectado via SSH. virsh versão ' . $version . '.']; } return ['ok' => false, 'message' => 'Falha ao conectar via SSH ou libvirt/virsh não está instalado no node: ' . trim((string) $r['output'])]; } // Mesmas métricas reais de cs_host_stats(), mas coletadas via SSH em um node remoto - usado na // listagem de Servers para mostrar RAM/CPU/Disco/Live Usage reais também de servidores remotos, // em vez do antigo placeholder "n/d"/"provisionamento não implementado". Se o SSH falhar, retorna // ok=false e uma mensagem de erro real - nunca inventa números. function cs_remote_host_stats(array $server) { $r = cs_remote_shell($server, implode(' && echo CS_SEP && ', [ "top -bn1 | grep 'Cpu(s)' | awk '{print \$2}' | cut -d'%' -f1", "free -m | awk 'NR==2{print \$3\"|\"\$2}'", "df -B1 / | awk 'NR==2{print \$3\"|\"\$2}'", 'nproc 2>/dev/null', ])); if ($r['code'] !== 0 || strpos($r['output'], 'CS_SEP') === false) { return ['ok' => false, 'message' => trim($r['output']) ?: 'Sem resposta do node remoto.']; } $parts = array_map('trim', explode('CS_SEP', $r['output'])); [$cpu_pct, $mem, $disk, $cores] = array_pad($parts, 4, ''); [$mem_used_mb, $mem_total_mb] = array_pad(explode('|', $mem), 2, 0); [$disk_used_b, $disk_total_b] = array_pad(explode('|', $disk), 2, 0); return [ 'ok' => true, 'cpu' => (float) ($cpu_pct ?: 0), 'mem_used_mb' => (int) $mem_used_mb, 'mem_total_mb' => (int) $mem_total_mb, 'ram' => $mem_total_mb ? round(((int)$mem_used_mb / (int)$mem_total_mb) * 100, 1) : 0, 'disk_used_gb' => round(((float)$disk_used_b) / 1073741824, 1), 'disk_total_gb' => round(((float)$disk_total_b) / 1073741824, 1), 'disk_pct' => $disk_total_b ? round(((float)$disk_used_b / (float)$disk_total_b) * 100, 1) : 0, 'cpu_cores' => $cores ?: '-', ]; } // Detecta o SO real do host onde o cs-painel está rodando (via /etc/os-release) - usado para // mostrar o logo real da distro na coluna OS da listagem de Servers. Nunca um valor fixo/mockado: // se o painel for instalado em Ubuntu, Debian, AlmaLinux, Rocky etc. o logo correto é detectado. function cs_detect_host_os() { $rel = @file_get_contents('/etc/os-release'); if (!$rel) { return 'linux'; } if (preg_match('/^ID="?([a-zA-Z0-9_.-]+)"?/m', $rel, $m)) { return strtolower($m[1]); } return 'linux'; } // Badge SVG colorido real (baseado no nome do SO/ISO detectado ou no /etc/os-release do host), // usado nas listagens de Servers (admin) e VPS (enduser) no estilo de logos de distro do Virtualizor. // Cada distro reconhecida ganha um ícone/cor própria; SOs não reconhecidos caem no pinguim genérico. // OBS IMPORTANTE: a logo mostrada para uma VPS SEMPRE reflete a ISO real dela (coluna vps.os, // preenchida com o nome real da Media escolhida na criação - ex: "Ubuntu 22.04" ou "Windows Server // 2022"), nunca um valor fixo/adivinhado: uma VPS instalada com a ISO do Ubuntu recebe o badge do // Ubuntu, uma instalada com Windows recebe o badge do Windows, e assim por diante. function cs_os_badge_svg($text) { $t = strtolower((string) $text); if (strpos($t, 'almalinux') !== false || strpos($t, 'alma') !== false) { return ''; } if (strpos($t, 'rocky') !== false) { return ''; } if (strpos($t, 'centos') !== false) { return ''; } if (strpos($t, 'ubuntu') !== false) { return ''; } if (strpos($t, 'debian') !== false) { return ''; } if (strpos($t, 'fedora') !== false) { return ''; } if (strpos($t, 'redhat') !== false || strpos($t, 'rhel') !== false) { return ''; } if (strpos($t, 'suse') !== false) { return ''; } if (strpos($t, 'win') !== false) { return ''; } return ''; } // Compartilhado entre dashboard, servers e outras telas: badge de status de VPS/servidor // e helper de donut CSS (conic-gradient) - vivem aqui (nao em um module) para poderem ser // chamados de qualquer pagina que inclua libvirt.php, sem duplicar/redeclarar a funcao. function cs_status_badge($status) { $map = ['running' => ['badge-running', 'Online'], 'building' => ['badge-building', 'Criando'], 'stopped' => ['badge-stopped', 'Parada'], 'suspended' => ['badge-suspended', 'Suspensa'], 'error' => ['badge-stopped', 'Erro']]; [$class, $label] = $map[$status] ?? ['badge-stopped', ucfirst($status)]; return '' . $label . ''; } function cs_donut_css($segments) { // $segments = [[percent, color], ...] soma <= 100 $stops = []; $acc = 0; foreach ($segments as [$pct, $color]) { if ($pct <= 0) { continue; } $stops[] = $color . ' ' . $acc . '% ' . ($acc + $pct) . '%'; $acc += $pct; } if ($acc < 100) { $stops[] = 'rgba(255,255,255,0.06) ' . $acc . '% 100%'; } return 'background: conic-gradient(' . implode(', ', $stops) . ');'; } // Leitura real (nao simulada) dos contadores de trafego de rede do host, via /proc/net/dev, // na interface real de saida para a internet (detectada pela rota padrao do kernel). function cs_net_stats() { $iface = trim((string) shell_exec("ip route show default 2>/dev/null | awk '/default/ {print $5; exit}'")); if ($iface === '') { $iface = trim((string) shell_exec("ls /sys/class/net | grep -v lo | head -n1")); } $rx = 0; $tx = 0; $dev = @file('/proc/net/dev'); if ($dev) { foreach ($dev as $line) { if (strpos($line, $iface . ':') !== false) { $parts = preg_split('/\s+/', trim(str_replace($iface . ':', $iface . ': ', trim($line)))); $rx = (int)($parts[1] ?? 0); $tx = (int)($parts[9] ?? 0); break; } } } return ['iface' => $iface ?: '-', 'rx' => $rx, 'tx' => $tx]; } // Descobre a interface de rede real (vnetN) de uma VPS via 'virsh domiflist' function cs_vps_iface_name($domain) { $out = shell_exec('virsh domiflist ' . escapeshellarg($domain) . ' 2>/dev/null'); if ($out && preg_match('/^\s*(vnet\S+|tap\S+)/m', $out, $m)) { return $m[1]; } return null; } // Amostra real (rede via domifstat, CPU via cpu-stats) de uma VPS especifica, usada pelas // abas Overview/Graphs do painel do cliente. Nunca gera dado fake: se o virsh falhar, grava zero. function cs_vps_sample_stats(PDO $db, array $vps) { if (empty($vps['domain'])) { return; } $rx = 0; $tx = 0; $iface = cs_vps_iface_name($vps['domain']); if ($iface) { $stat = shell_exec('virsh domifstat ' . escapeshellarg($vps['domain']) . ' ' . escapeshellarg($iface) . ' 2>/dev/null'); if ($stat) { if (preg_match('/rx_bytes\s+(\d+)/', $stat, $m)) { $rx = (int)$m[1]; } if (preg_match('/tx_bytes\s+(\d+)/', $stat, $m)) { $tx = (int)$m[1]; } } } $cpu_time = 0; $cpustat = shell_exec('virsh cpu-stats ' . escapeshellarg($vps['domain']) . ' --total 2>/dev/null'); if ($cpustat && preg_match('/cpu_time\s+([\d.]+)/', $cpustat, $m)) { $cpu_time = (float)($m[1] * 1000000000); } $db->prepare("INSERT INTO vps_network_samples (vps_id, rx_bytes, tx_bytes, cpu_time_ns) VALUES (?,?,?,?)") ->execute([$vps['id'], $rx, $tx, $cpu_time]); $db->prepare("DELETE FROM vps_network_samples WHERE vps_id = ? AND id NOT IN (SELECT id FROM (SELECT id FROM vps_network_samples WHERE vps_id = ? ORDER BY id DESC LIMIT 60) x)") ->execute([$vps['id'], $vps['id']]); } // Deltas reais entre as ultimas amostras salvas (MB de rede e % de CPU aproximado), sem // nenhum valor inventado - comeca vazio em VPS novas ate existirem pelo menos 2 amostras. function cs_vps_bandwidth_history(PDO $db, $vps_id, $keep = 30) { $stmt = $db->prepare("SELECT * FROM vps_network_samples WHERE vps_id = ? ORDER BY id DESC LIMIT " . (int)$keep); $stmt->execute([$vps_id]); $rows = array_reverse($stmt->fetchAll()); $labels = []; $rxDeltas = []; $txDeltas = []; $cpuPct = []; $prev = null; foreach ($rows as $row) { if ($prev !== null) { $secs = max(1, strtotime($row['created_at']) - strtotime($prev['created_at'])); $labels[] = date('H:i', strtotime($row['created_at'])); $rxDeltas[] = max(0, round(($row['rx_bytes'] - $prev['rx_bytes']) / 1048576, 2)); $txDeltas[] = max(0, round(($row['tx_bytes'] - $prev['tx_bytes']) / 1048576, 2)); $cpuPct[] = max(0, round((($row['cpu_time_ns'] - $prev['cpu_time_ns']) / ($secs * 1000000000)) * 100, 1)); } $prev = $row; } return ['labels' => $labels, 'rx' => $rxDeltas, 'tx' => $txDeltas, 'cpu' => $cpuPct]; } // Uso real de disco de uma VPS (Capacity/Allocation reais do qcow2) via 'virsh domblkinfo' function cs_vps_disk_usage($domain) { $out = shell_exec('virsh domblkinfo ' . escapeshellarg($domain) . ' vda 2>/dev/null'); if (!$out) { $out = shell_exec('virsh domblkinfo ' . escapeshellarg($domain) . ' hda 2>/dev/null'); } $capacity = 0; $allocation = 0; if ($out) { if (preg_match('/Capacity:\s*(\d+)/', $out, $m)) { $capacity = (int)$m[1]; } if (preg_match('/Allocation:\s*(\d+)/', $out, $m)) { $allocation = (int)$m[1]; } } return ['capacity' => $capacity, 'allocation' => $allocation]; } // Aplica um plano de firewall pre-definido reescrevendo as regras reais da VPS (vps_firewall_rules) // e recarregando o iptables de verdade via cs_apply_vps_firewall (mesma funcao usada pelo admin). function cs_apply_firewall_plan(PDO $db, array $vps, $plan) { $db->prepare("DELETE FROM vps_firewall_rules WHERE vps_id = ?")->execute([$vps['id']]); $presets = [ 'Basico' => [['tcp', '22'], ['tcp', '80'], ['tcp', '443']], 'Estrito' => [['tcp', '22']], ]; if (isset($presets[$plan])) { foreach ($presets[$plan] as $rule) { $db->prepare("INSERT INTO vps_firewall_rules (vps_id, protocol, port, action_type, direction) VALUES (?,?,?,'accept','in')") ->execute([$vps['id'], $rule[0], $rule[1]]); } } // 'Nenhum' = sem regras extras cadastradas = todo trafego liberado nessa chain dedicada cs_apply_vps_firewall($db, $vps); } // Registra uma amostra real de trafego e devolve as ultimas N amostras (deltas reais entre // leituras), usadas para desenhar o grafico de bandwidth do dashboard sem nenhum dado fake. function cs_sample_and_get_bandwidth(PDO $db, $keep = 30) { $net = cs_net_stats(); $db->prepare("INSERT INTO network_samples (iface, rx_bytes, tx_bytes) VALUES (?, ?, ?)") ->execute([$net['iface'], $net['rx'], $net['tx']]); $db->exec("DELETE FROM network_samples WHERE id NOT IN (SELECT id FROM (SELECT id FROM network_samples ORDER BY id DESC LIMIT " . (int)$keep . ") x)"); $rows = $db->query("SELECT * FROM network_samples ORDER BY id ASC")->fetchAll(); $labels = []; $rxDeltas = []; $txDeltas = []; $prev = null; foreach ($rows as $row) { if ($prev !== null) { $labels[] = date('H:i', strtotime($row['created_at'])); $rxDeltas[] = max(0, round(($row['rx_bytes'] - $prev['rx_bytes']) / 1048576, 2)); $txDeltas[] = max(0, round(($row['tx_bytes'] - $prev['tx_bytes']) / 1048576, 2)); } $prev = $row; } return ['labels' => $labels, 'rx' => $rxDeltas, 'tx' => $txDeltas, 'iface' => $net['iface']]; } PHPEOF sed -i "s#__CS_ISO_DIR__#$CS_ISO_DIR#g; s#__CS_IMAGES_DIR__#$CS_IMAGES_DIR#g; s#__CS_BRIDGE__#$CS_BRIDGE#g; s#__CS_BACKUP_DIR__#$CS_BACKUP_DIR#g" $CS_WEB_DIR/admin/includes/libvirt.php # O enduser também precisa dos mesmos helpers reais (virsh/qemu-img/iptables) usados no admin cp $CS_WEB_DIR/admin/includes/libvirt.php $CS_WEB_DIR/enduser/includes/libvirt.php cat > $CS_WEB_DIR/admin/login.php << 'EOF' EOF cat > $CS_WEB_DIR/admin/includes/login_view.php << 'EOF' <?php echo htmlspecialchars($CS_LOGIN_BRAND); ?> - Login EOF cat > $CS_WEB_DIR/admin/forgot_password.php << 'EOF' prepare("SELECT * FROM admin_users WHERE email = ?"); $stmt->execute([$email]); $user = $stmt->fetch(); if ($user) { $token = bin2hex(random_bytes(32)); $db->prepare("UPDATE admin_users SET reset_token = ?, reset_expires = DATE_ADD(NOW(), INTERVAL 1 HOUR) WHERE id = ?")->execute([$token, $user['id']]); $resetUrl = (isset($_SERVER['HTTPS']) ? 'https://' : 'http://') . $_SERVER['HTTP_HOST'] . dirname($_SERVER['PHP_SELF']) . '/reset_password.php?token=' . $token; $sent = @mail($email, 'Redefinição de senha - CS-PANEL', "Clique no link para redefinir sua senha:\n\n$resetUrl\n\nEste link expira em 1 hora."); $msg = 'Se o e-mail existir, um link de redefinição foi gerado.'; if (!$sent) { $link = $resetUrl; } } else { $msg = 'Se o e-mail existir, um link de redefinição foi gerado.'; } } $CS_LOGIN_BRAND = 'CS-PANEL'; $CS_LOGIN_SUB = 'Painel de Controle'; ?> Recuperar senha

Recuperar senha



Como o servidor não possui envio de e-mail configurado, use este link diretamente:

Voltar ao login

EOF cat > $CS_WEB_DIR/admin/reset_password.php << 'EOF' prepare("SELECT * FROM admin_users WHERE reset_token = ? AND reset_expires > NOW()"); $stmt->execute([$token]); $user = $stmt->fetch(); $valid = (bool) $user; } if ($valid && $_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['password'])) { $pass = $_POST['password'] ?? ''; if (strlen($pass) < 6) { $msg = 'A senha deve ter ao menos 6 caracteres.'; } else { $hash = password_hash($pass, PASSWORD_DEFAULT); $db->prepare("UPDATE admin_users SET password = ?, reset_token = NULL, reset_expires = NULL WHERE id = ?")->execute([$hash, $user['id']]); header('Location: login.php?reset=1'); exit; } } ?> Redefinir senha

Redefinir senha

Link inválido ou expirado. Solicite um novo.
EOF cat > $CS_WEB_DIR/admin/includes/auth.php << 'EOF' prepare("SELECT * FROM admin_users WHERE username = ?"); $stmt->execute([$username]); $user = $stmt->fetch(); if ($user && password_verify($password, $user['password'])) { $_SESSION['admin_logged_in'] = true; $_SESSION['admin_username'] = $user['username']; $_SESSION['admin_id'] = (int) $user['id']; $db->prepare("INSERT INTO admin_login_logs (username, ip) VALUES (?, ?)") ->execute([$user['username'], $_SERVER['REMOTE_ADDR'] ?? 'cli']); header('Location: ../index.php'); exit; } else { $_SESSION['login_error'] = 'Usuário ou senha inválidos'; header('Location: ../login.php'); exit; } } EOF cat > $CS_WEB_DIR/admin/cron.php << 'EOF' query("DELETE FROM logs WHERE created_at < NOW() - INTERVAL 30 DAY"); echo "Cron executado em " . date('Y-m-d H:i:s') . "\n"; EOF # Criar layout compartilhado (sidebar) e módulo dashboard básico create_admin_layout create_dashboard_module log_success "Painel Administrativo criado" } # ============================================ # FUNÇÃO: PAINEL ENDUSER # ============================================ create_enduser_panel() { log_info "Criando Painel do Usuário..." mkdir -p $CS_WEB_DIR/enduser/includes cat > $CS_WEB_DIR/enduser/index.php << 'EOF' $CS_WEB_DIR/enduser/login.php << 'EOF' EOF cp $CS_WEB_DIR/admin/includes/login_view.php $CS_WEB_DIR/enduser/includes/login_view.php cat > $CS_WEB_DIR/enduser/forgot_password.php << 'EOF' prepare("SELECT * FROM users WHERE email = ?"); $stmt->execute([$email]); $user = $stmt->fetch(); if ($user) { $token = bin2hex(random_bytes(32)); $db->prepare("UPDATE users SET reset_token = ?, reset_expires = DATE_ADD(NOW(), INTERVAL 1 HOUR) WHERE id = ?")->execute([$token, $user['id']]); $resetUrl = (isset($_SERVER['HTTPS']) ? 'https://' : 'http://') . $_SERVER['HTTP_HOST'] . dirname($_SERVER['PHP_SELF']) . '/reset_password.php?token=' . $token; $sent = @mail($email, 'Redefinição de senha - CS-PANEL', "Clique no link para redefinir sua senha:\n\n$resetUrl\n\nEste link expira em 1 hora."); $msg = 'Se o e-mail existir, um link de redefinição foi gerado.'; if (!$sent) { $link = $resetUrl; } } else { $msg = 'Se o e-mail existir, um link de redefinição foi gerado.'; } } ?> Recuperar senha

Recuperar senha



Como o servidor não possui envio de e-mail configurado, use este link diretamente:

Voltar ao login

EOF cat > $CS_WEB_DIR/enduser/reset_password.php << 'EOF' prepare("SELECT * FROM users WHERE reset_token = ? AND reset_expires > NOW()"); $stmt->execute([$token]); $user = $stmt->fetch(); $valid = (bool) $user; } if ($valid && $_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['password'])) { $pass = $_POST['password'] ?? ''; if (strlen($pass) < 6) { $msg = 'A senha deve ter ao menos 6 caracteres.'; } else { $hash = password_hash($pass, PASSWORD_DEFAULT); $db->prepare("UPDATE users SET password = ?, reset_token = NULL, reset_expires = NULL WHERE id = ?")->execute([$hash, $user['id']]); header('Location: login.php?reset=1'); exit; } } ?> Redefinir senha

Redefinir senha

Link inválido ou expirado. Solicite um novo.
EOF cat > $CS_WEB_DIR/enduser/includes/totp.php << 'EOF' $CS_WEB_DIR/enduser/includes/auth.php << 'EOF' prepare("SELECT * FROM users WHERE username = ? OR email = ?"); $stmt->execute([$username, $username]); $user = $stmt->fetch(); if ($user && password_verify($password, $user['password'])) { $method = $user['otp_method'] ?? 'none'; if ($method !== 'none') { $_SESSION['pending_user_id'] = $user['id']; if ($method === 'email') { $code = str_pad((string) random_int(0, 999999), 6, '0', STR_PAD_LEFT); $db->prepare("UPDATE users SET otp_code = ?, otp_expires = DATE_ADD(NOW(), INTERVAL 10 MINUTE) WHERE id = ?")->execute([$code, $user['id']]); @mail($user['email'], 'Seu código de verificação - CS-PANEL', "Seu código de verificação é: $code\nEle expira em 10 minutos."); } header('Location: ../verify_otp.php'); exit; } $_SESSION['user_logged_in'] = true; $_SESSION['user_username'] = $user['username']; $_SESSION['user_id'] = $user['id']; header('Location: ../index.php'); exit; } else { $_SESSION['login_error'] = 'Usuário ou senha inválidos'; header('Location: ../login.php'); exit; } } EOF cat > $CS_WEB_DIR/enduser/verify_otp.php << 'EOF' prepare("SELECT * FROM users WHERE id = ?"); $stmt->execute([$_SESSION['pending_user_id']]); $user = $stmt->fetch(); if (!$user) { header('Location: login.php'); exit; } $error = ''; if ($_SERVER['REQUEST_METHOD'] === 'POST') { $code = trim($_POST['code'] ?? ''); $ok = false; if ($user['otp_method'] === 'email') { $ok = $code !== '' && hash_equals((string) $user['otp_code'], $code) && $user['otp_expires'] !== null && strtotime($user['otp_expires']) > time(); if ($ok) { $db->prepare("UPDATE users SET otp_code = NULL, otp_expires = NULL WHERE id = ?")->execute([$user['id']]); } } elseif ($user['otp_method'] === 'totp') { $ok = cs_totp_verify($user['totp_secret'] ?? '', $code); } if ($ok) { unset($_SESSION['pending_user_id']); $_SESSION['user_logged_in'] = true; $_SESSION['user_username'] = $user['username']; $_SESSION['user_id'] = $user['id']; header('Location: index.php'); exit; } $error = 'Código inválido ou expirado.'; } ?> Verificação em duas etapas

Verificação em duas etapas

EOF cat > $CS_WEB_DIR/enduser/includes/config.php << 'EOF' $CS_WEB_DIR/enduser/includes/database.php << 'EOF' setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION); } catch(PDOException $e) { die("Erro no banco: " . $e->getMessage()); } // Mapeia o SO da VPS para um ícone/cor de marca REAL (Windows, Ubuntu, Debian, etc.), // usado na listagem de VPS e no cabeçalho de gerenciamento - nunca um ícone genérico. function cs_os_icon($os) { $os = strtolower((string) $os); if (strpos($os, 'win') !== false) return ['icon' => 'fa-brands fa-windows', 'color' => '#00A4EF']; if (strpos($os, 'almalinux') !== false || strpos($os, 'alma') !== false) return ['icon' => 'fa-brands fa-linux', 'color' => '#e6539c']; if (strpos($os, 'rocky') !== false) return ['icon' => 'fa-brands fa-linux', 'color' => '#10B981']; if (strpos($os, 'ubuntu') !== false) return ['icon' => 'fa-brands fa-ubuntu', 'color' => '#E95420']; if (strpos($os, 'debian') !== false) return ['icon' => 'fa-brands fa-debian', 'color' => '#A81D33']; if (strpos($os, 'centos') !== false) return ['icon' => 'fa-brands fa-centos', 'color' => '#932279']; if (strpos($os, 'fedora') !== false) return ['icon' => 'fa-brands fa-fedora', 'color' => '#294172']; if (strpos($os, 'redhat') !== false || strpos($os, 'rhel') !== false) return ['icon' => 'fa-brands fa-redhat', 'color' => '#EE0000']; if (strpos($os, 'suse') !== false) return ['icon' => 'fa-brands fa-suse', 'color' => '#73BA25']; if (strpos($os, 'freebsd') !== false) return ['icon' => 'fa-brands fa-freebsd', 'color' => '#AB2B28']; return ['icon' => 'fa-brands fa-linux', 'color' => '#FCC624']; } EOF sed -i "s/__DB_PASS__/$DB_PASSWORD/g" $CS_WEB_DIR/enduser/includes/database.php log_success "Painel do Usuário criado" } # ============================================ # FUNÇÃO: LAYOUT COMPARTILHADO DO ENDUSER (SIDEBAR) # ============================================ create_enduser_layout() { log_info "Criando layout do Enduser (sidebar/topbar)..." mkdir -p $CS_WEB_DIR/enduser/includes cat > $CS_WEB_DIR/enduser/includes/header.php << 'EOF' CS-PANEL - <?php echo htmlspecialchars($page_title); ?>
CS-PANELÁrea do Cliente
EOF cat > $CS_WEB_DIR/enduser/includes/footer.php << 'EOF'
Powered By CS-PANEL ©
EOF cat > $CS_WEB_DIR/enduser/logout.php << 'EOF' $CS_WEB_DIR/enduser/modules/vps/index.php << 'EOF' prepare("SELECT * FROM vps WHERE id = ? AND user_id = ?"); $stmt->execute([$id, $user_id]); $vps = $stmt->fetch(); if ($vps && !empty($vps['domain'])) { $domain = $vps['domain']; $server_row = null; if (!empty($vps['server_id'])) { $sstmt = $db->prepare("SELECT * FROM servers WHERE id = ?"); $sstmt->execute([$vps['server_id']]); $server_row = $sstmt->fetch(); } $run_virsh = function ($args) use ($server_row) { if ($server_row && $server_row['ip'] !== '127.0.0.1') { return cs_remote_shell($server_row, 'virsh ' . $args); } return cs_shell(CS_SUDO . 'virsh ' . $args); }; switch ($_GET['action']) { case 'start': $r = $run_virsh('start ' . escapeshellarg($domain)); cs_log($db, 'Iniciar VPS (cliente)', "$domain: {$r['output']}"); break; case 'stop': $r = $run_virsh('shutdown ' . escapeshellarg($domain)); cs_log($db, 'Parar VPS (cliente)', "$domain: {$r['output']}"); break; case 'restart': $r = $run_virsh('reboot ' . escapeshellarg($domain)); cs_log($db, 'Reiniciar VPS (cliente)', "$domain: {$r['output']}"); break; case 'poweroff': $r = $run_virsh('destroy ' . escapeshellarg($domain)); cs_log($db, 'Forçar desligamento VPS (cliente)', "$domain: {$r['output']}"); break; } cs_sync_vps_status($db); } header('Location: ?module=vps'); exit; } // Ação em massa ("Com Selecionados") - somente iniciar/parar/reiniciar, nunca criar/excluir if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['bulk_action'], $_POST['vps_ids'])) { $allowed = ['start' => 'start ', 'stop' => 'shutdown ', 'restart' => 'reboot ']; $bulk = $_POST['bulk_action']; if (isset($allowed[$bulk])) { foreach ((array)$_POST['vps_ids'] as $vid) { $vid = (int)$vid; $stmt = $db->prepare("SELECT * FROM vps WHERE id = ? AND user_id = ?"); $stmt->execute([$vid, $user_id]); $vps = $stmt->fetch(); if ($vps && !empty($vps['domain'])) { $server_row = null; if (!empty($vps['server_id'])) { $sstmt = $db->prepare("SELECT * FROM servers WHERE id = ?"); $sstmt->execute([$vps['server_id']]); $server_row = $sstmt->fetch(); } $args = $allowed[$bulk] . escapeshellarg($vps['domain']); $r = ($server_row && $server_row['ip'] !== '127.0.0.1') ? cs_remote_shell($server_row, 'virsh ' . $args) : cs_shell(CS_SUDO . 'virsh ' . $args); cs_log($db, 'Ação em massa VPS (cliente)', "{$vps['domain']} - $bulk: {$r['output']}"); } } cs_sync_vps_status($db); } header('Location: ?module=vps'); exit; } if (isset($_GET['action']) && $_GET['action'] === 'manage' && isset($_GET['id'])) { require __DIR__ . '/manage.php'; return; } $stmt = $db->prepare("SELECT v.*, u.email as owner_email FROM vps v JOIN users u ON u.id = v.user_id WHERE v.user_id = ? ORDER BY v.id DESC"); $stmt->execute([$user_id]); $vps_list = $stmt->fetchAll(); $page_title = 'List VPS'; $page_icon = 'fa-server'; require_once CS_ENDUSER . '/includes/header.php'; ?>
Página 1 de 1
IDHostnameInformaçãoUsuárioStatusAção
Você ainda não possui nenhuma VPS.
#
MB GB Core ∞
Com Selecionados:
EOF cat > $CS_WEB_DIR/enduser/modules/vps/manage.php << 'EOF' prepare("SELECT * FROM vps WHERE id = ? AND user_id = ?"); $stmt->execute([$id, $user_id]); $vps = $stmt->fetch(); if (!$vps) { header('Location: ?module=vps'); exit; } $tab = $_GET['tab'] ?? 'overview'; $domain = $vps['domain']; $msg = ''; if ($_SERVER['REQUEST_METHOD'] === 'POST') { if (isset($_POST['do_hostname'])) { $new_name = trim($_POST['new_hostname'] ?? ''); $new_domain = cs_sanitize_domain($new_name); if ($new_name !== '' && $new_domain !== $domain) { $state = cs_shell(CS_SUDO . 'virsh domstate ' . escapeshellarg($domain)); if (stripos($state['output'], 'running') !== false) { $msg = 'Desligue a VPS antes de alterar o hostname (virsh domrename exige a VM parada).'; } else { $r = cs_shell(CS_SUDO . 'virsh domrename ' . escapeshellarg($domain) . ' ' . escapeshellarg($new_domain)); if ($r['code'] === 0) { $db->prepare("UPDATE vps SET name = ?, domain = ? WHERE id = ?")->execute([$new_name, $new_domain, $vps['id']]); cs_log($db, 'Alterar hostname (cliente)', "$domain -> $new_domain"); $domain = $new_domain; $vps['name'] = $new_name; $vps['domain'] = $new_domain; $msg = 'Hostname alterado com sucesso.'; } else { $msg = 'Falha ao renomear: ' . $r['output']; } } } } if (isset($_POST['do_password'])) { $newpass = $_POST['new_password'] ?? ''; if (strlen($newpass) < 6) { $msg = 'A senha deve ter ao menos 6 caracteres.'; } else { $check = cs_shell('command -v virt-customize'); if (trim($check['output']) === '') { $msg = 'virt-customize (libguestfs-tools) não está instalado neste servidor. Peça ao administrador para instalar o pacote.'; } else { $state = cs_shell(CS_SUDO . 'virsh domstate ' . escapeshellarg($domain)); if (stripos($state['output'], 'running') !== false) { $msg = 'Desligue a VPS antes de alterar a senha de root.'; } else { $r = cs_shell(CS_SUDO . 'virt-customize -d ' . escapeshellarg($domain) . ' --root-password password:' . escapeshellarg($newpass)); $msg = $r['code'] === 0 ? 'Senha de root alterada com sucesso.' : 'Falha ao alterar senha: ' . $r['output']; cs_log($db, 'Alterar senha root (cliente)', "$domain - " . ($r['code'] === 0 ? 'sucesso' : 'falha')); } } } } if (isset($_POST['do_config'])) { $acpi = isset($_POST['acpi']) ? 1 : 0; $apic = isset($_POST['apic']) ? 1 : 0; $vga = isset($_POST['vga']) ? 1 : 0; cs_shell(CS_SUDO . 'virt-xml ' . escapeshellarg($domain) . ' --edit --features acpi.state=' . ($acpi ? 'on' : 'off')); cs_shell(CS_SUDO . 'virt-xml ' . escapeshellarg($domain) . ' --edit --features apic.state=' . ($apic ? 'on' : 'off')); cs_shell(CS_SUDO . 'virt-xml ' . escapeshellarg($domain) . ' --edit --video model.type=' . ($vga ? 'vga' : 'virtio')); $db->prepare("UPDATE vps SET acpi=?, apic=?, vga=? WHERE id=?")->execute([$acpi, $apic, $vga, $vps['id']]); $vps['acpi'] = $acpi; $vps['apic'] = $apic; $vps['vga'] = $vga; cs_log($db, 'Alterar configuração VPS (cliente)', "$domain - ACPI:$acpi APIC:$apic VGA:$vga"); $msg = 'Configuração aplicada (virt-xml). Reinicie a VPS para efetivar.'; } if (isset($_POST['do_reinstall'])) { $media_id = (int)($_POST['media_id'] ?? 0); $mstmt = $db->prepare("SELECT * FROM media WHERE id = ? AND status = 'ready'"); $mstmt->execute([$media_id]); $media = $mstmt->fetch(); if (!$media) { $msg = 'Selecione uma ISO válida disponível em Media.'; } else { cs_shell(CS_SUDO . 'virsh destroy ' . escapeshellarg($domain)); $disk_path = CS_IMAGES_DIR . '/' . $domain . '.qcow2'; $iso_path = CS_ISO_DIR . '/' . $media['filename']; $img = cs_shell(CS_SUDO . 'qemu-img create -f qcow2 ' . escapeshellarg($disk_path) . ' ' . escapeshellarg($vps['disk'] . 'G')); cs_shell(CS_SUDO . 'virt-xml ' . escapeshellarg($domain) . ' --edit target=vda --disk path=' . escapeshellarg($disk_path) . ',format=qcow2'); $r = cs_shell(CS_SUDO . 'virt-xml ' . escapeshellarg($domain) . ' --edit target=hda --disk path=' . escapeshellarg($iso_path) . ',device=cdrom'); cs_shell(CS_SUDO . 'virsh start ' . escapeshellarg($domain)); $db->prepare("UPDATE vps SET os = ?, media_id = ?, status='building' WHERE id = ?")->execute([$media['name'], $media['id'], $vps['id']]); $db->prepare("INSERT INTO tasks (vps_id, type, status, output, finished_at) VALUES (?, 'reinstall_os', ?, ?, NOW())") ->execute([$vps['id'], $r['code'] === 0 ? 'done' : 'failed', substr($img['output'] . "\n" . $r['output'], 0, 60000)]); cs_log($db, 'Reinstalar SO (cliente)', "$domain -> {$media['name']}"); $msg = 'Reinstalação disparada. Acompanhe em Tasks And Logs.'; cs_sync_vps_status($db); } } if (isset($_POST['do_firewall_plan'])) { $plan = $_POST['firewall_plan'] ?? 'Nenhum'; cs_apply_firewall_plan($db, $vps, $plan); $db->prepare("UPDATE vps SET firewall_plan = ? WHERE id = ?")->execute([$plan, $vps['id']]); $vps['firewall_plan'] = $plan; $msg = 'Plano de firewall aplicado com sucesso.'; } if (isset($_POST['do_rescue'])) { $enable = $_POST['do_rescue'] === 'enable'; $rescue_stmt = $db->prepare("SELECT * FROM media WHERE name LIKE '%rescue%' AND status='ready' LIMIT 1"); $rescue_stmt->execute(); $rescue = $rescue_stmt->fetch(); if ($enable && !$rescue) { $msg = 'Nenhuma ISO de rescue disponível. Peça ao administrador para enviar uma ISO com "rescue" no nome em Media.'; } else { cs_shell(CS_SUDO . 'virsh destroy ' . escapeshellarg($domain)); if ($enable) { $iso_path = CS_ISO_DIR . '/' . $rescue['filename']; cs_shell(CS_SUDO . 'virsh attach-disk ' . escapeshellarg($domain) . ' ' . escapeshellarg($iso_path) . ' hdc --type cdrom --mode readonly --config'); cs_shell(CS_SUDO . 'virt-xml ' . escapeshellarg($domain) . ' --edit --boot cdrom,hd'); } else { cs_shell(CS_SUDO . 'virsh detach-disk ' . escapeshellarg($domain) . ' hdc --config'); cs_shell(CS_SUDO . 'virt-xml ' . escapeshellarg($domain) . ' --edit --boot hd,cdrom'); } cs_shell(CS_SUDO . 'virsh start ' . escapeshellarg($domain)); $db->prepare("UPDATE vps SET rescue_mode = ? WHERE id = ?")->execute([$enable ? 1 : 0, $vps['id']]); $vps['rescue_mode'] = $enable ? 1 : 0; cs_log($db, 'Modo de rescue (cliente)', "$domain - " . ($enable ? 'ativado' : 'desativado')); cs_sync_vps_status($db); $msg = $enable ? 'Modo de rescue ativado.' : 'Modo de rescue desativado, VPS reiniciada normalmente.'; } } if (isset($_POST['do_addkey'])) { $kname = trim($_POST['key_name'] ?? ''); $kval = trim($_POST['public_key'] ?? ''); if ($kname !== '' && preg_match('/^(ssh-(rsa|ed25519|dss)|ecdsa-)/', $kval)) { $db->prepare("INSERT INTO ssh_keys (user_id, name, public_key) VALUES (?,?,?)")->execute([$user_id, $kname, $kval]); $msg = 'Chave SSH adicionada. Ela será injetada na próxima reinstalação do sistema.'; } else { $msg = 'Chave pública SSH inválida.'; } } } cs_vps_sample_stats($db, $vps); $disk_usage = cs_vps_disk_usage($domain); $history = cs_vps_bandwidth_history($db, $vps['id']); $state = cs_shell(CS_SUDO . 'virsh domstate ' . escapeshellarg($domain)); $online = stripos($state['output'], 'running') !== false; $ssh_stmt = $db->prepare("SELECT * FROM ssh_keys WHERE user_id = ? ORDER BY id DESC"); $ssh_stmt->execute([$user_id]); $ssh_keys = $ssh_stmt->fetchAll(); $media_stmt = $db->prepare("SELECT * FROM media WHERE status = 'ready' ORDER BY name"); $media_stmt->execute(); $media_options = $media_stmt->fetchAll(); $tasks_stmt = $db->prepare("SELECT * FROM tasks WHERE vps_id = ? ORDER BY id DESC LIMIT 30"); $tasks_stmt->execute([$vps['id']]); $vps_tasks = $tasks_stmt->fetchAll(); $logs_stmt = $db->prepare("SELECT * FROM logs WHERE details LIKE ? ORDER BY id DESC LIMIT 30"); $logs_stmt->execute(['%' . $domain . '%']); $vps_logs = $logs_stmt->fetchAll(); $page_title = $vps['name']; $osi = cs_os_icon($vps['os']); $page_icon = $osi['icon']; $page_icon_color = $osi['color']; $topbar_extra = '' . ($online ? 'Online' : 'Offline') . '' . '' . '' . '' . ''; require_once CS_ENDUSER . '/includes/header.php'; ?> Voltar para List VPS
Overview Graphs Settings Install Tasks And Logs Networking Rescue Mode
Uso de Disco
0 ? round($disk_usage['allocation'] / $disk_usage['capacity'] * 100, 1) : 0; ?>
GB / GB (%)
CPU (última amostra)
%
vCPU(s) alocada(s)
Rede (última amostra)
↓ Download: MB ↑ Upload: MB
Conta

Autenticação em 2 Fatores: Desativada

Sistema Operacional:

Bandwidth Statistics System Statistics
$l): ?>
AmostraDownload (MB)Upload (MB)
Ainda não há amostras suficientes. Volte em alguns instantes.
Alterar Hostname
Requer a VPS desligada (virsh domrename).
Alterar Senha de Root
Requer virt-customize (libguestfs-tools) e a VPS desligada.
Configuração da VPS
>
>
>
Chaves SSH
  • Nenhuma chave cadastrada.
Chaves são injetadas de verdade (virt-customize --ssh-inject) na próxima reinstalação do sistema.
Reinstalar Sistema Operacional

Isso apagará todos os dados da VPS e instalará o sistema selecionado. A criação de uma nova VPS só pode ser feita pelo administrador/revenda.

Tasks
IDTipoStatusCriado em
Nenhuma tarefa registrada.
#
Logs
AçãoDetalhesData
Nenhum log encontrado.
Mudar Plano de Firewall
Aplica regras reais (iptables) através da tabela de firewall da VPS.
Modo de Rescue

Status atual:

Anexa uma ISO de rescue real como CD-ROM e altera a ordem de boot (virsh/virt-xml). Requer uma ISO com "rescue" no nome cadastrada em Media.
EOF log_success "Módulo VPS do Enduser criado" } # ============================================ # FUNÇÃO: MÓDULO TASKS DO ENDUSER # ============================================ create_enduser_tasks_module() { log_info "Criando módulo Tasks do Enduser..." mkdir -p $CS_WEB_DIR/enduser/modules/tasks cat > $CS_WEB_DIR/enduser/modules/tasks/index.php << 'EOF' prepare("SELECT t.*, v.name as vps_name FROM tasks t JOIN vps v ON v.id = t.vps_id WHERE v.user_id = ? ORDER BY t.id DESC LIMIT 100"); $stmt->execute([$user_id]); $tasks = $stmt->fetchAll(); $page_title = 'Tasks'; $page_icon = 'fa-list-check'; require_once CS_ENDUSER . '/includes/header.php'; ?>
IDVPSTipoStatusCriado emConcluído em
Nenhuma tarefa encontrada.
#
EOF log_success "Módulo Tasks do Enduser criado" } # ============================================ # FUNÇÃO: MÓDULO SSH KEYS DO ENDUSER # ============================================ create_enduser_sshkeys_module() { log_info "Criando módulo SSH Keys do Enduser..." mkdir -p $CS_WEB_DIR/enduser/modules/ssh_keys cat > $CS_WEB_DIR/enduser/modules/ssh_keys/index.php << 'EOF' prepare("DELETE FROM ssh_keys WHERE id = ? AND user_id = ?")->execute([(int)$_GET['id'], $user_id]); header('Location: ?module=ssh_keys'); exit; } $msg = ''; if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['add_key'])) { $name = trim($_POST['name'] ?? ''); $pub = trim($_POST['public_key'] ?? ''); if ($name !== '' && preg_match('/^(ssh-(rsa|ed25519|dss)|ecdsa-)/', $pub)) { $db->prepare("INSERT INTO ssh_keys (user_id, name, public_key) VALUES (?,?,?)")->execute([$user_id, $name, $pub]); header('Location: ?module=ssh_keys'); exit; } $msg = 'Chave pública SSH inválida. Use o formato ssh-ed25519/ssh-rsa...'; } $stmt = $db->prepare("SELECT * FROM ssh_keys WHERE user_id = ? ORDER BY id DESC"); $stmt->execute([$user_id]); $keys = $stmt->fetchAll(); $page_title = 'SSH Keys'; $page_icon = 'fa-key'; require_once CS_ENDUSER . '/includes/header.php'; ?>
Adicionar Chave SSH
As chaves cadastradas são injetadas de verdade (virt-customize --ssh-inject) sempre que você reinstalar o sistema operacional de uma VPS.
Minhas Chaves
NomeFingerprintCriada em
Nenhuma chave cadastrada.
...
EOF log_success "Módulo SSH Keys do Enduser criado" } # ============================================ # FUNÇÃO: MÓDULO REVERSE DNS DO ENDUSER # ============================================ create_enduser_reversedns_module() { log_info "Criando módulo Reverse DNS do Enduser..." mkdir -p $CS_WEB_DIR/enduser/modules/reverse_dns cat > $CS_WEB_DIR/enduser/modules/reverse_dns/index.php << 'EOF' /dev/null'); $pdns_available = trim((string)$check) !== ''; $stmt = $db->prepare("SELECT ip FROM vps WHERE user_id = ? AND ip IS NOT NULL AND ip != ''"); $stmt->execute([$user_id]); $my_ips = array_column($stmt->fetchAll(), 'ip'); $msg = ''; if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['add_ptr'])) { $ip = trim($_POST['ip_address'] ?? ''); $hostname = trim($_POST['hostname'] ?? ''); if (!in_array($ip, $my_ips, true)) { $msg = 'Você só pode configurar o DNS reverso de IPs atribuídos às suas próprias VPS.'; } elseif ($ip === '' || $hostname === '') { $msg = 'Preencha o IP e o hostname.'; } else { $applied = 0; if ($pdns_available) { $octets = explode('.', $ip); if (count($octets) === 4) { $zone = $octets[2] . '.' . $octets[1] . '.' . $octets[0] . '.in-addr.arpa'; $r = cs_shell(CS_SUDO . 'pdnsutil add-record ' . escapeshellarg($zone) . ' ' . escapeshellarg($octets[3]) . ' PTR ' . escapeshellarg(rtrim($hostname, '.') . '.')); $applied = $r['code'] === 0 ? 1 : 0; } } $db->prepare("INSERT INTO reverse_dns_records (user_id, ip_address, hostname, applied) VALUES (?,?,?,?)")->execute([$user_id, $ip, $hostname, $applied]); $msg = $pdns_available ? ($applied ? 'Registro PTR aplicado com sucesso via PowerDNS.' : 'Registro salvo, mas houve falha ao aplicar via pdnsutil.') : 'Registro salvo. PowerDNS (pdnsutil) não está configurado neste servidor, então o PTR não foi propagado automaticamente.'; } } $stmt = $db->prepare("SELECT * FROM reverse_dns_records WHERE user_id = ? ORDER BY id DESC"); $stmt->execute([$user_id]); $records = $stmt->fetchAll(); $page_title = 'Reverse DNS'; $page_icon = 'fa-file-invoice'; require_once CS_ENDUSER . '/includes/header.php'; ?>
PowerDNS (pdnsutil) não está instalado/configurado neste servidor. Os registros ficam salvos no painel, mas não são propagados automaticamente.
Novo Registro PTR
Meus Registros
IPHostnameAplicadoCriado em
Nenhum registro cadastrado.
Sim' : 'Não'; ?>
EOF log_success "Módulo Reverse DNS do Enduser criado" } # ============================================ # FUNÇÃO: MÓDULO FIREWALL DO ENDUSER # ============================================ create_enduser_firewall_module() { log_info "Criando módulo Firewall do Enduser..." mkdir -p $CS_WEB_DIR/enduser/modules/firewall cat > $CS_WEB_DIR/enduser/modules/firewall/index.php << 'EOF' prepare("SELECT * FROM vps WHERE user_id = ? ORDER BY name"); $stmt->execute([$user_id]); $my_vps = $stmt->fetchAll(); $vps_ids = array_column($my_vps, 'id'); if (isset($_GET['action']) && $_GET['action'] === 'delete' && isset($_GET['id'])) { $rid = (int)$_GET['id']; $check = $db->prepare("SELECT r.*, v.domain FROM vps_firewall_rules r JOIN vps v ON v.id = r.vps_id WHERE r.id = ? AND v.user_id = ?"); $check->execute([$rid, $user_id]); $rule = $check->fetch(); if ($rule) { $db->prepare("DELETE FROM vps_firewall_rules WHERE id = ?")->execute([$rid]); $vps_row = $db->prepare("SELECT * FROM vps WHERE id = ?"); $vps_row->execute([$rule['vps_id']]); cs_apply_vps_firewall($db, $vps_row->fetch()); } header('Location: ?module=firewall'); exit; } $msg = ''; if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['add_rule'])) { $vps_id = (int)($_POST['vps_id'] ?? 0); if (in_array($vps_id, $vps_ids, true)) { $protocol = in_array($_POST['protocol'] ?? '', ['tcp', 'udp', 'icmp', 'all'], true) ? $_POST['protocol'] : 'tcp'; $port = trim($_POST['port'] ?? ''); $direction = ($_POST['direction'] ?? '') === 'out' ? 'out' : 'in'; $action_type = in_array($_POST['action_type'] ?? '', ['accept', 'drop', 'reject'], true) ? $_POST['action_type'] : 'accept'; $db->prepare("INSERT INTO vps_firewall_rules (vps_id, protocol, port, action_type, direction) VALUES (?,?,?,?,?)")->execute([$vps_id, $protocol, $port, $action_type, $direction]); $vps_row = $db->prepare("SELECT * FROM vps WHERE id = ?"); $vps_row->execute([$vps_id]); cs_apply_vps_firewall($db, $vps_row->fetch()); $msg = 'Regra aplicada com sucesso (iptables real).'; } else { $msg = 'VPS inválida.'; } } $rules = []; if (!empty($vps_ids)) { $in = implode(',', array_fill(0, count($vps_ids), '?')); $stmt = $db->prepare("SELECT r.*, v.name as vps_name FROM vps_firewall_rules r JOIN vps v ON v.id = r.vps_id WHERE r.vps_id IN ($in) ORDER BY r.id DESC"); $stmt->execute($vps_ids); $rules = $stmt->fetchAll(); } $page_title = 'Firewall'; $page_icon = 'fa-shield-halved'; require_once CS_ENDUSER . '/includes/header.php'; ?>
Nova Regra
Regras Ativas
VPSProtocoloPortaDireçãoAção
Nenhuma regra cadastrada.
EOF log_success "Módulo Firewall do Enduser criado" } # ============================================ # FUNÇÃO: MÓDULO CONFIGURAÇÕES (SETTINGS) DO ENDUSER # Acessado pelo menu suspenso do avatar (Meu Perfil / Configurações), igual ao painel # de referência. Idioma/fuso/limite de banda e 2FA (E-mail OTP real ou TOTP real via # RFC 6238) - tudo persistido e aplicado de verdade, nada simulado. # ============================================ create_enduser_settings_module() { log_info "Criando módulo Configurações do Enduser..." mkdir -p $CS_WEB_DIR/enduser/modules/settings cat > $CS_WEB_DIR/enduser/modules/settings/index.php << 'EOF' prepare("SELECT * FROM users WHERE id = ?"); $stmt->execute([$user_id]); $user = $stmt->fetch(); $tab = $_GET['tab'] ?? 'profile'; $msg = ''; $new_secret = $_SESSION['pending_totp_secret'] ?? null; if ($_SERVER['REQUEST_METHOD'] === 'POST') { if (isset($_POST['do_profile'])) { $timezone = trim($_POST['timezone'] ?? 'America/Sao_Paulo'); $threshold = max(0, (int) ($_POST['bandwidth_threshold'] ?? 0)); $db->prepare("UPDATE users SET language = 'pt-BR', timezone = ?, bandwidth_threshold = ? WHERE id = ?")->execute([$timezone, $threshold, $user_id]); $user['timezone'] = $timezone; $user['bandwidth_threshold'] = $threshold; $msg = 'Suas configurações foram salvas com sucesso.'; $tab = 'profile'; } if (isset($_POST['do_security'])) { $method = in_array($_POST['otp_method'] ?? 'none', ['none', 'email', 'totp'], true) ? $_POST['otp_method'] : 'none'; if ($method === 'none') { $db->prepare("UPDATE users SET otp_method = 'none', totp_secret = NULL, twofa = 0 WHERE id = ?")->execute([$user_id]); $user['otp_method'] = 'none'; unset($_SESSION['pending_totp_secret']); $new_secret = null; $msg = 'Autenticação em duas etapas desativada.'; } elseif ($method === 'email') { $db->prepare("UPDATE users SET otp_method = 'email', totp_secret = NULL, twofa = 1 WHERE id = ?")->execute([$user_id]); $user['otp_method'] = 'email'; unset($_SESSION['pending_totp_secret']); $new_secret = null; $msg = 'Verificação por E-mail OTP ativada. Você receberá um código a cada novo login.'; } elseif ($method === 'totp') { $new_secret = cs_totp_new_secret(); $_SESSION['pending_totp_secret'] = $new_secret; $msg = 'Escaneie o QR Code (ou digite o código manualmente) no seu aplicativo autenticador e confirme abaixo.'; } $tab = 'security'; } if (isset($_POST['do_confirm_totp'])) { $secret = $_SESSION['pending_totp_secret'] ?? ''; $code = trim($_POST['confirm_code'] ?? ''); if ($secret !== '' && cs_totp_verify($secret, $code)) { $db->prepare("UPDATE users SET otp_method = 'totp', totp_secret = ?, twofa = 1 WHERE id = ?")->execute([$secret, $user_id]); $user['otp_method'] = 'totp'; unset($_SESSION['pending_totp_secret']); $new_secret = null; $msg = 'Aplicativo autenticador confirmado. Autenticação em duas etapas ativada.'; } else { $msg = 'Código inválido. Tente novamente.'; } $tab = 'security'; } } $page_title = 'Configurações'; $page_icon = 'fa-gear'; require_once CS_ENDUSER . '/includes/header.php'; ?>
Configurações do Usuário Configurações de Segurança
Idioma E Configurações De Aparência
Preferências E Limites Do Usuário
Métodos De Autenticação

Escaneie este QR Code com o Google Authenticator (ou similar):

QR Code

Ou digite manualmente:

EOF log_success "Módulo Configurações do Enduser criado" } # ============================================ # FUNÇÃO: INSTALAR CS-PANEL # ============================================ install_cspanel() { log_info "Instalando CS-PANEL..." mkdir -p $CS_INSTALL_DIR $CS_WEB_DIR $CS_LOGS_DIR $CS_BACKUP_DIR $CS_CONFIG_DIR $CS_SSL_DIR mkdir -p $CS_INSTALL_DIR/templates $CS_INSTALL_DIR/storage $CS_INSTALL_DIR/scripts mkdir -p $CS_WEB_DIR/admin/includes $CS_WEB_DIR/admin/modules $CS_WEB_DIR/admin/assets mkdir -p $CS_WEB_DIR/enduser/includes $CS_WEB_DIR/enduser/modules $CS_WEB_DIR/enduser/assets mkdir -p $CS_WEB_DIR/api/v1 log_success "Diretórios criados" create_admin_panel create_enduser_panel setup_database setup_sudoers create_admin_layout create_dashboard_module create_vps_module create_media_module create_ip_pool_module create_storage_module create_users_module create_plans_module create_servers_module create_recipes_module create_load_balancer_module create_passthrough_module create_tasks_module create_configuration_module create_billing_module create_backup_module create_powerdns_module create_import_module create_ssl_settings_module create_vps_firewall_module create_firewall_module create_api_credentials_module create_logs_module create_cloud_resources_module create_api_endpoints create_enduser_layout create_enduser_vps_module create_enduser_tasks_module create_enduser_sshkeys_module create_enduser_reversedns_module create_enduser_firewall_module create_enduser_settings_module log_success "CS-PANEL instalado com sucesso" } # ============================================ # FUNÇÃO: CREATE STATUS FILE # ============================================ create_status_file() { cat > $CS_INSTALL_DIR/status.json << EOF { "version": "$CS_VERSION", "installed": "$(date)", "email": "$EMAIL", "kernel": "$KERNEL", "hypervisor": "$HYPERVISOR", "api_key": "$API_KEY", "api_password": "$API_PASSWORD", "db_password": "$DB_PASSWORD", "admin_user": "admin", "admin_password": "$ADMIN_PASSWORD", "admin_port_http": "$ADMIN_PORT_HTTP", "admin_port_https": "$ADMIN_PORT_HTTPS", "user_port": "$USER_PORT" } EOF log_success "Arquivo de status criado" } # ============================================ # FUNÇÃO: FINALIZAR INSTALAÇÃO # ============================================ finalize_installation() { echo "" echo "=============================================" echo -e "${GREEN} INSTALAÇÃO CONCLUÍDA! ${NC}" echo "=============================================" echo "" echo -e "${CYAN}🔑 CREDENCIAIS DE ACESSO:${NC}" echo -e " ${GREEN}API KEY${NC} : $API_KEY" echo -e " ${GREEN}API Password${NC} : $API_PASSWORD" echo -e " ${GREEN}Admin User${NC} : admin" echo -e " ${GREEN}Admin Password${NC}: $ADMIN_PASSWORD" echo "" echo -e "${CYAN}🌐 URLS DE ACESSO:${NC}" local IP=$(cs_detect_real_ip) echo -e " ${GREEN}Admin Panel HTTPS${NC} : https://${IP}:${ADMIN_PORT_HTTPS}/" echo -e " ${GREEN}Admin Panel HTTP${NC} : http://${IP}:${ADMIN_PORT_HTTP}/" echo -e " ${GREEN}Enduser Panel${NC} : http://${IP}:${USER_PORT}/" echo "" echo -e "${CYAN}📁 DIRETÓRIOS:${NC}" echo -e " ${GREEN}Instalação${NC} : $CS_INSTALL_DIR" echo -e " ${GREEN}Web${NC} : $CS_WEB_DIR" echo -e " ${GREEN}Logs${NC} : $CS_LOGS_DIR" echo -e " ${GREEN}Backup${NC} : $CS_BACKUP_DIR" echo "" echo -e "${CYAN}📌 IMPORTANTE:${NC}" echo -e " ${YELLOW}1. Salve suas credenciais em local seguro${NC}" echo -e " ${YELLOW}2. Acesse o Admin Panel para configurar o storage${NC}" echo -e " ${YELLOW}3. Configure os templates de SO${NC}" echo -e " ${YELLOW}4. Reinicie o sistema para carregar o kernel${NC}" echo "" echo -e "${YELLOW}Você precisa reiniciar o sistema para carregar o kernel correto.${NC}" echo -e "${YELLOW}Deseja reiniciar agora? [y/N]${NC} " read -n 1 -r echo if [[ $REPLY =~ ^[Yy]$ ]]; then log_info "Reiniciando sistema..." reboot else log_info "Reinicialize manualmente quando possível: 'sudo reboot'" fi } # ============================================ # FUNÇÃO PRINCIPAL # ============================================ main() { echo -e "${GREEN}" echo "=============================================" echo " Seja Bem vindo ao CS-PANEL Installer v$CS_VERSION" echo "=============================================" echo -e "${NC}" while [[ $# -gt 0 ]]; do case $1 in email=*) EMAIL="${1#*=}"; shift ;; kernel=*) KERNEL="${1#*=}"; shift ;; hypervisor=*) HYPERVISOR="${1#*=}"; shift ;; skip_license=*) SKIP_LICENSE="${1#*=}"; shift ;; *) echo -e "${YELLOW}Parâmetro desconhecido: $1${NC}"; shift ;; esac done if [ -z "$EMAIL" ]; then echo -e "${RED}Erro: Email é obrigatório!${NC}" echo "Uso: ./install.sh email=seu@email.com kernel=kvm hypervisor=kvm" exit 1 fi check_license check_root check_os check_dependencies generate_passwords mkdir -p $CS_LOGS_DIR touch $CS_LOG_FILE log_info "Iniciando instalação do CS-PANEL v$CS_VERSION" log_info "Email: $EMAIL" log_info "Kernel: $KERNEL" log_info "Hypervisor: $HYPERVISOR" install_dependencies configure_php configure_services install_cspanel setup_hypervisor setup_network setup_firewall setup_ssl setup_cron create_helper_scripts setup_permissions create_status_file finalize_installation } # ============================================ # EXECUTAR # ============================================ main "$@"