feat: 发布v2.3.7

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -68,7 +68,7 @@ body:
     attributes:
       label: 描述问题 (Describe The Problem)
       description: |
-        简明概要地描述你遇到的问题。
+        简明概要地描述您遇到的问题。
         Briefly describe the problem you are having.
     validations:
       required: true
@@ -91,7 +91,7 @@ body:
     attributes:
       label: 预期行为 (Expected Behavior)
       description: |
-        简明概要地描述你期望发生的事情。
+        简明概要地描述您期望发生的事情。
         Briefly describe what you expect to happen.
     validations:
       required: true
@@ -113,7 +113,7 @@ body:
     attributes:
       label: 截图 (Screenshots)
       description: |
-        如果有，添加屏幕截图可帮助更快定位你的问题。
+        如果有，添加屏幕截图可帮助更快定位您的问题。
         If so, adding screenshots can help locate your issue faster.
         可以复制图片后在此区域内粘贴以添加图片。
         Pictures can be copied and pasted in this area to add pictures.
@@ -128,7 +128,7 @@ body:
       description: |
         运行环境？浏览器？软件版本？相关的配置？链接？参考资料？
         Environment? Browser? Software version? Related configuration? Link? References?
-        任何能让我们对你所遇到的问题有更多了解的东西。
+        任何能让我们对您所遇到的问题有更多了解的东西。
         Anything that can give us more insight into the problem you're having.
     validations:
       required: false

.github/ISSUE_TEMPLATE/feature_request.yml

@@ -25,7 +25,7 @@ body:
     attributes:
       label: 描述功能 (Describe Feature)
       description: |
-        简明概要地描述你的新功能，以及它将解决什么问题。
+        简明概要地描述您的新功能，以及它将解决什么问题。
         Briefly describe your new feature and what problem it will solve.
     validations:
       required: true

.github/workflows/issue-auto-close.yml

@@ -0,0 +1,25 @@
+name: Issue Auto Lock
+on:
+  schedule:
+    - cron: "0 */6 * * *"
+  workflow_dispatch:
+  push:
+    branches:
+      - main
+  issues:
+    types: [ opened ]
+permissions:
+  issues: write
+  contents: read
+jobs:
+  issue-lock:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Set GH_REPO
+        run: echo "GH_REPO=${{ github.repository }}" >> $GITHUB_ENV
+      - name: Auto Lock Issue
+        uses: devhaozi/issue-auto-lock@v1
+        with:
+          gh_repo: ${{ github.repository }}
+          gh_token: ${{ secrets.GITHUB_TOKEN }}
+          issue_labels: "⭐ No Star"

README.md

@@ -26,40 +26,54 @@
 2. **低破坏性:** 面板的设计理念是尽可能减少对系统的额外修改，在同类面板中，我们对系统的修改最少。
 3. **追随时代:** 面板所有组件均走在时代前沿，更新快，功能强大，安全性有保障。
 4. **高效运维:** 面板界面简洁，操作简单，无需繁琐的配置，即可快速部署各类环境、调整应用设置。
-5. **离线运行:** 面板运行可不依赖任何外部服务，你甚至可以在部署完成后停止面板进程，不会对已部署服务造成任何影响。
+5. **离线运行:** 面板运行可不依赖任何外部服务，您甚至可以在部署完成后停止面板进程，不会对已部署服务造成任何影响。
 6. **久经考验:** 我们生产环境自 2022 年即开始使用，已稳定运行 2 年无事故。
-7. **开源开放:** 面板开源，你可以自由修改、审计面板源码，安全性有保障。
+7. **开源开放:** 面板开源，您可以自由修改、审计面板源码，安全性有保障。
 
 ## UI 截图
 
-![UI 截图](ui.png)
+![UI 截图](.github/assets/ui.png)
 
 ## 运行环境
 
-耗子面板支持 `amd64` | `arm64` 架构下的主流系统。
+耗子面板支持 `amd64` | `arm64` 架构下的主流系统，下表中的系统均已测试 LNMP 环境安装。
 
-优先建议使用 `AlmaLinux` | `RockyLinux`。
+优先建议使用标注**推荐**的系统，无特殊情况不建议使用标注**不推荐**的系统。
 
-不在下表中的其他系统，可自行尝试安装，但不保证能够正常运行，且不提供技术支持。
+不在下表中的其他系统，可自行尝试安装，但不提供技术支持（接受相关 PR 提交）。
 
-| 系统         | 版本 |
-|------------|----|
-| RHEL       | 9  |
-| AlmaLinux  | 9  |
-| RockyLinux | 9  |
-| Ubuntu     | 22 |
-| Ubuntu     | 24 |
-| Debian     | 11 |
-| Debian     | 12 |
+| 系统                  | 版本  | 备注  |
+|---------------------|-----|-----|
+| AlmaLinux           | 9   | 推荐  |
+| AlmaLinux           | 8   | 不推荐 |
+| RockyLinux          | 9   |     |
+| RockyLinux          | 8   | 不推荐 |
+| CentOS Stream       | 9   | 不推荐 |
+| CentOS Stream       | 8   | 不推荐 |
+| Ubuntu              | 24  | 推荐  |
+| Ubuntu              | 22  |     |
+| Debian              | 12  | 推荐  |
+| Debian              | 11  |     |
+| OpenCloudOS         | 9   |     |
+| TencentOS Server    | 4   |     |
+| TencentOS Server    | 3.1 | 不推荐 |
+| Alibaba Cloud Linux | 3.2 | 不推荐 |
+| Anolis              | 8   | 不推荐 |
 
 随着系统版本的不断更新，我们亦可能会终止部分过于老旧的系统的支持，以保证面板的健壮性。
 
 ## 安装面板
 
 > **Warning**
-> 安装面板前，你需要了解 LNMP 环境的基本知识，以及如何处理常见的 LNMP 环境问题，我们不建议 0 基础的用户安装和使用耗子面板。
+> 安装面板前，您需要了解 LNMP 环境的基本知识，以及如何处理常见的 LNMP 环境问题，我们不建议 0 基础的用户安装和使用耗子面板。
 
-如果你决定继续，请以`root`用户登录服务器，执行以下命令安装面板：
+如果您的服务器有未挂载的数据盘，可在安装前以`root`用户登录服务器运行以下命令自动挂载，面板安装后不支持跨目录迁移。
+
+```shell
+curl -fsLm 10 -o auto_mount.sh https://dl.cdn.haozi.net/panel/auto_mount.sh && bash auto_mount.sh
+```
+
+准备就绪后，请以`root`用户登录服务器，运行以下命令安装面板：
 
 **当前 v2.3.x 为测试版本，欢迎帮助我们测试在不同操作系统下的兼容性。**
 
@@ -71,7 +85,7 @@ curl -fsLm 10 -o install.sh https://dl.cdn.haozi.net/panel/install.sh && bash in
 
 优先建议备份数据重装系统，这样可以保证系统纯净。
 
-如果你无法重装系统，请以`root`用户登录服务器，执行以下命令卸载面板：
+如果您无法重装系统，请以`root`用户登录服务器，执行以下命令卸载面板：
 
 ```shell
 curl -fsLm 10 -o uninstall.sh https://dl.cdn.haozi.net/panel/uninstall.sh && bash uninstall.sh
@@ -97,19 +111,35 @@ panel-cli
 
 ## 赞助商
 
-如果耗子面板对你有帮助，欢迎[赞助我们](https://afdian.com/a/TheTNB)，感谢以下支持者/赞助商的支持：
+如果耗子面板对您有帮助，欢迎[赞助我们](https://afdian.com/a/TheTNB)，感谢以下支持者/赞助商的支持：
 
 **同时接受云资源赞助，可通过QQ群咨询联系**
 
 ### 资金
 
-- [微晓朵](https://www.weixiaoduo.com/)
+<a href="https://www.weixiaoduo.com/">
+  <img height="80" src=".github/assets/wxd.png" alt="微晓朵">
+</a>
+
+### 服务器
+
+<a href="https://www.dkdun.cn/">
+  <img height="80" src=".github/assets/dk.png" alt="林枫云">
+</a>
 
 ### CDN
 
-- [无畏云加速](https://su.sctes.com/register?code=8st689ujpmm2p)
-- [WAF PRO](https://waf.pro/)
-- [盾云SCDN](https://scdn.ddunyun.com/)
+<a href="https://su.sctes.com/register?code=8st689ujpmm2p">
+  <img height="80" src=".github/assets/sctes.png" alt="无畏云加速">
+</a>
+<a href="https://su.sctes.com/register?code=8st689ujpmm2p">
+  <img height="80" src=".github/assets/wafpro.png" alt="WAFPRO">
+</a>
+<a href="https://scdn.ddunyun.com/">
+  <img height="80" src=".github/assets/ddunyun.png" alt="盾云SCDN">
+</a>
+
+### 赞助商们
 
 <p align="center">
   <a target="_blank" href="https://afdian.com/a/TheTNB">

README_EN.md

@@ -32,25 +32,33 @@ Communication QQ group: [12370907](https://jq.qq.com/?_wv=1027&k=I1oJKSTH) | For
 
 ## UI Screenshots
 
-![UI Screenshots](ui.png)
+![UI Screenshots](.github/assets/ui.png)
 
 ## Operating Environment
 
-Rat Panel supports mainstream systems under the `amd64` | `arm64` architecture.
+Rat Panel supports mainstream systems under the `amd64` | `arm64` architecture, and the systems in the table below have been tested for LNMP environment installation.
 
-It is recommended to use `AlmaLinux` | `RockyLinux` first.
+It is recommended to use the systems marked **Recommended** first, and not recommended to use the systems marked **Not recommended** without special circumstances.
 
-For other systems not listed in the table below, you can try to install them by yourself, but there is no guarantee that they will run normally, and no technical support will be provided.
+For other systems not listed in the table below, you can try to install them by yourself, but there is no technical support will be provided (accept related PR submissions).
 
-| OS         | Version |
-|------------|---------|
-| RHEL       | 9       |
-| RockyLinux | 9       |
-| AlmaLinux  | 9       |
-| Ubuntu     | 22      |
-| Ubuntu     | 24      |
-| Debian     | 11      |
-| Debian     | 12      |
+| OS                  | Version | Note            |
+|---------------------|---------|-----------------|
+| AlmaLinux           | 9       | Recommended     |
+| AlmaLinux           | 8       | Not recommended |
+| RockyLinux          | 9       |                 |
+| RockyLinux          | 8       | Not recommended |
+| CentOS Stream       | 9       | Not recommended |
+| CentOS Stream       | 8       | Not recommended |
+| Ubuntu              | 24      | Recommended     |
+| Ubuntu              | 22      |                 |
+| Debian              | 12      | Recommended     |
+| Debian              | 11      |                 |
+| OpenCloudOS         | 9       |                 |
+| TencentOS Server    | 4       |                 |
+| TencentOS Server    | 3.1     | Not recommended |
+| Alibaba Cloud Linux | 3.2     | Not recommended |
+| Anolis              | 8       | Not recommended |
 
 As system versions are constantly updated, we may also terminate support for some older systems to ensure the robustness of the panel.
 
@@ -59,7 +67,13 @@ As system versions are constantly updated, we may also terminate support for som
 > **Warning**
 > Before installing the panel, you need to understand the basic knowledge of the LNMP environment and how to deal with common LNMP environment problems. We are not recommended for users with zero basic knowledge to install and use Rat Panel.
 
-If you decide to continue, please log in to the server as `root` user and execute the following command to install the panel:
+If your server has an unmounted data disk, you can run the following command as the `root` user to automatically mount it before installation. The panel does not support cross-directory migration after installation.
+
+```shell
+curl -fsLm 10 -o auto_mount.sh https://dl.cdn.haozi.net/panel/auto_mount.sh && bash auto_mount.sh
+```
+
+After you are ready, log in to the server as the `root` user and run the following command to install the panel:
 
 **Current v2.3.x is a test version, welcome to help us test compatibility on different operating systems.**
 
@@ -103,13 +117,29 @@ If the Rat Panel is helpful to you, welcome to [sponsor us](https://opencollecti
 
 ### Financial
 
-- [微晓朵](https://www.weixiaoduo.com/)
+<a href="https://www.weixiaoduo.com/">
+  <img height="80" src=".github/assets/wxd.png" alt="微晓朵">
+</a>
+
+### Server
+
+<a href="https://www.dkdun.cn/">
+  <img height="80" src=".github/assets/dk.png" alt="林枫云">
+</a>
 
 ### CDN
 
-- [无畏云加速](https://su.sctes.com/register?code=8st689ujpmm2p)
-- [WAF PRO](https://waf.pro/)
-- [盾云SCDN](https://scdn.ddunyun.com/)
+<a href="https://su.sctes.com/register?code=8st689ujpmm2p">
+  <img height="80" src=".github/assets/sctes.png" alt="无畏云加速">
+</a>
+<a href="https://su.sctes.com/register?code=8st689ujpmm2p">
+  <img height="80" src=".github/assets/wafpro.png" alt="WAFPRO">
+</a>
+<a href="https://scdn.ddunyun.com/">
+  <img height="80" src=".github/assets/ddunyun.png" alt="盾云SCDN">
+</a>
+
+### Sponsors
 
 <p align="center">
   <a target="_blank" href="https://afdian.com/a/TheTNB">

go.mod

@@ -13,7 +13,7 @@ require (
 	github.com/go-playground/locales v0.14.1
 	github.com/go-playground/universal-translator v0.18.1
 	github.com/go-playground/validator/v10 v10.22.1
-	github.com/go-rat/chix v1.1.3
+	github.com/go-rat/chix v1.1.4
 	github.com/go-rat/gormstore v1.0.6
 	github.com/go-rat/sessions v1.0.11
 	github.com/go-rat/utils v1.0.3
@@ -35,11 +35,13 @@ require (
 	github.com/mholt/acmez/v2 v2.0.3
 	github.com/mholt/archiver/v4 v4.0.0-alpha.8
 	github.com/robfig/cron/v3 v3.0.1
+	github.com/samber/lo v1.47.0
 	github.com/sethvargo/go-limiter v1.0.0
 	github.com/shirou/gopsutil v2.21.11+incompatible
 	github.com/spf13/cast v1.7.0
 	github.com/stretchr/testify v1.9.0
-	github.com/urfave/cli/v3 v3.0.0-alpha9
+	github.com/tufanbarisyildirim/gonginx v0.0.0-20241013191809-e73b7dd454e8
+	github.com/urfave/cli/v3 v3.0.0-alpha9.1
 	go.uber.org/zap v1.27.0
 	golang.org/x/crypto v0.28.0
 	golang.org/x/net v0.30.0
@@ -72,6 +74,7 @@ require (
 	github.com/go-ole/go-ole v1.2.6 // indirect
 	github.com/go-rat/securecookie v1.0.1 // indirect
 	github.com/go-viper/mapstructure/v2 v2.0.0 // indirect
+	github.com/gofiber/schema v1.2.0 // indirect
 	github.com/gogo/protobuf v1.3.2 // indirect
 	github.com/golang/snappy v0.0.4 // indirect
 	github.com/google/uuid v1.6.0 // indirect
@@ -107,7 +110,6 @@ require (
 	github.com/tklauser/numcpus v0.8.0 // indirect
 	github.com/ulikunitz/xz v0.5.12 // indirect
 	github.com/xo/terminfo v0.0.0-20210125001918-ca9a967f8778 // indirect
-	github.com/xrash/smetrics v0.0.0-20240521201337-686a1a2994c1 // indirect
 	github.com/yusufpapurcu/wmi v1.2.4 // indirect
 	go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.55.0 // indirect
 	go.opentelemetry.io/otel v1.30.0 // indirect
@@ -124,7 +126,6 @@ require (
 	google.golang.org/genproto/googleapis/rpc v0.0.0-20240903143218-8af14fe29dc1 // indirect
 	gopkg.in/check.v1 v1.0.0-20200227125254-8fa46927fb4f // indirect
 	gopkg.in/yaml.v3 v3.0.1 // indirect
-	gotest.tools/v3 v3.5.1 // indirect
 	modernc.org/libc v1.60.1 // indirect
 	modernc.org/mathutil v1.6.0 // indirect
 	modernc.org/memory v1.8.0 // indirect

go.sum

@@ -102,8 +102,8 @@ github.com/go-playground/universal-translator v0.18.1 h1:Bcnm0ZwsGyWbCzImXv+pAJn
 github.com/go-playground/universal-translator v0.18.1/go.mod h1:xekY+UJKNuX9WP91TpwSH2VMlDf28Uj24BCp08ZFTUY=
 github.com/go-playground/validator/v10 v10.22.1 h1:40JcKH+bBNGFczGuoBYgX4I6m/i27HYW8P9FDk5PbgA=
 github.com/go-playground/validator/v10 v10.22.1/go.mod h1:dbuPbCMFw/DrkbEynArYaCwl3amGuJotoKCe95atGMM=
-github.com/go-rat/chix v1.1.3 h1:NeDbmA3OTfhEeizn528dz8z8/lBcsziftgtSarYn7Vo=
-github.com/go-rat/chix v1.1.3/go.mod h1:XeC0hmaAXlPB/V8g0QZiIAgnAJO70ZeT+k1Q4Zh9qeI=
+github.com/go-rat/chix v1.1.4 h1:YVDwF4vrlkm5hmlDGWKoiWPgP98pJooBvhsto8UWq+o=
+github.com/go-rat/chix v1.1.4/go.mod h1:eKUTG7GXqMS278PH0QZi8yMWZddvMfxqWu7mverM6kQ=
 github.com/go-rat/gormstore v1.0.6 h1:YxmaY6n3JoTk6o9RXoZ1+cQ6HQL+ayf/6d8D76ydCAc=
 github.com/go-rat/gormstore v1.0.6/go.mod h1:xG/n+Du8baWf7ptiafiHLWBZWVXrYIPC42CsoEbfr4M=
 github.com/go-rat/securecookie v1.0.1 h1:HW0fpKmB+FjJzXTw8ABOwBJ+XrPmRBSZqHhmrv86lBo=
@@ -120,6 +120,8 @@ github.com/go-viper/mapstructure/v2 v2.0.0 h1:dhn8MZ1gZ0mzeodTG3jt5Vj/o87xZKuNAp
 github.com/go-viper/mapstructure/v2 v2.0.0/go.mod h1:oJDH3BJKyqBA2TXFhDsKDGDTlndYOZ6rGS0BRZIxGhM=
 github.com/goccy/go-yaml v1.12.0 h1:/1WHjnMsI1dlIBQutrvSMGZRQufVO3asrHfTwfACoPM=
 github.com/goccy/go-yaml v1.12.0/go.mod h1:wKnAMd44+9JAAnGQpWVEgBzGt3YuTaQ4uXoHvE4m7WU=
+github.com/gofiber/schema v1.2.0 h1:j+ZRrNnUa/0ZuWrn/6kAtAufEr4jCJ+JuTURAMxNSZg=
+github.com/gofiber/schema v1.2.0/go.mod h1:YYwj01w3hVfaNjhtJzaqetymL56VW642YS3qZPhuE6c=
 github.com/gogo/protobuf v1.3.2 h1:Ov1cvc58UF3b5XjBnZv7+opcTcQFZebYjWzi34vdm4Q=
 github.com/gogo/protobuf v1.3.2/go.mod h1:P1XiOD3dCwIKUDQYPy72D8LYyHL2YPYrpS2s69NZV8Q=
 github.com/golang/glog v0.0.0-20160126235308-23def4e6c14b/go.mod h1:SBH7ygxi8pfUlaOkMMuAQtPIUF8ecWP5IEl/CR7VP2Q=
@@ -269,6 +271,8 @@ github.com/rogpeppe/go-internal v1.3.0/go.mod h1:M8bDsm7K2OlrFYOpmOWEs/qY81heoFR
 github.com/rogpeppe/go-internal v1.9.0 h1:73kH8U+JUqXU8lRuOHeVHaa/SZPifC7BkcraZVejAe8=
 github.com/rogpeppe/go-internal v1.9.0/go.mod h1:WtVeX8xhTBvf0smdhujwtBcq4Qrzq/fJaraNFVN+nFs=
 github.com/rwcarlsen/goexif v0.0.0-20190401172101-9e8deecbddbd/go.mod h1:hPqNNc0+uJM6H+SuU8sEs5K5IQeKccPqeSjfgcKGgPk=
+github.com/samber/lo v1.47.0 h1:z7RynLwP5nbyRscyvcD043DWYoOcYRv3mV8lBeqOCLc=
+github.com/samber/lo v1.47.0/go.mod h1:RmDH9Ct32Qy3gduHQuKJ3gW1fMHAnE/fAzQuf6He5cU=
 github.com/sethvargo/go-limiter v1.0.0 h1:JqW13eWEMn0VFv86OKn8wiYJY/m250WoXdrjRV0kLe4=
 github.com/sethvargo/go-limiter v1.0.0/go.mod h1:01b6tW25Ap+MeLYBuD4aHunMrJoNO5PVUFdS9rac3II=
 github.com/shirou/gopsutil v2.21.11+incompatible h1:lOGOyCG67a5dv2hq5Z1BLDUqqKp3HkbjPcz5j6XMS0U=
@@ -295,15 +299,15 @@ github.com/tklauser/go-sysconf v0.3.14 h1:g5vzr9iPFFz24v2KZXs/pvpvh8/V9Fw6vQK5ZZ
 github.com/tklauser/go-sysconf v0.3.14/go.mod h1:1ym4lWMLUOhuBOPGtRcJm7tEGX4SCYNEEEtghGG/8uY=
 github.com/tklauser/numcpus v0.8.0 h1:Mx4Wwe/FjZLeQsK/6kt2EOepwwSl7SmJrK5bV/dXYgY=
 github.com/tklauser/numcpus v0.8.0/go.mod h1:ZJZlAY+dmR4eut8epnzf0u/VwodKmryxR8txiloSqBE=
+github.com/tufanbarisyildirim/gonginx v0.0.0-20241013191809-e73b7dd454e8 h1:7yw1yHkylDcu/CwY4hEEe8MycDLo7B9LjcqwhoL8NrM=
+github.com/tufanbarisyildirim/gonginx v0.0.0-20241013191809-e73b7dd454e8/go.mod h1:itu4KWRgrfEwGcfNka+rV4houuirUau53i0diN4lG5g=
 github.com/ulikunitz/xz v0.5.8/go.mod h1:nbz6k7qbPmH4IRqmfOplQw/tblSgqTqBwxkY0oWt/14=
 github.com/ulikunitz/xz v0.5.12 h1:37Nm15o69RwBkXM0J6A5OlE67RZTfzUxTj8fB3dfcsc=
 github.com/ulikunitz/xz v0.5.12/go.mod h1:nbz6k7qbPmH4IRqmfOplQw/tblSgqTqBwxkY0oWt/14=
-github.com/urfave/cli/v3 v3.0.0-alpha9 h1:P0RMy5fQm1AslQS+XCmy9UknDXctOmG/q/FZkUFnJSo=
-github.com/urfave/cli/v3 v3.0.0-alpha9/go.mod h1:0kK/RUFHyh+yIKSfWxwheGndfnrvYSmYFVeKCh03ZUc=
+github.com/urfave/cli/v3 v3.0.0-alpha9.1 h1:1fJU+bltkwN8lF4Sni/X0i1d8XwPIrS82ivZ8qsp/q4=
+github.com/urfave/cli/v3 v3.0.0-alpha9.1/go.mod h1:FnIeEMYu+ko8zP1F9Ypr3xkZMIDqW3DR92yUtY39q1Y=
 github.com/xo/terminfo v0.0.0-20210125001918-ca9a967f8778 h1:QldyIu/L63oPpyvQmHgvgickp1Yw510KJOqX7H24mg8=
 github.com/xo/terminfo v0.0.0-20210125001918-ca9a967f8778/go.mod h1:2MuV+tbUrU1zIOPMxZ5EncGwgmMJsa+9ucAQZXxsObs=
-github.com/xrash/smetrics v0.0.0-20240521201337-686a1a2994c1 h1:gEOO8jv9F4OT7lGCjxCBTO/36wtF6j2nSip77qHd4x4=
-github.com/xrash/smetrics v0.0.0-20240521201337-686a1a2994c1/go.mod h1:Ohn+xnUBiLI6FVj/9LpzZWtj1/D6lUovWYBkxHVV3aM=
 github.com/yuin/goldmark v1.1.27/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74=
 github.com/yuin/goldmark v1.2.1/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74=
 github.com/yuin/goldmark v1.3.5/go.mod h1:mwnBkeHKe2W/ZEtQ+71ViKU8L12m81fl3OWwC1Zlc8k=

internal/app/global.go

@@ -25,9 +25,20 @@ var (
 	Logger     *zap.Logger
 )
 
+// 定义面板状态常量
+const (
+	StatusNormal = iota
+	StatusMaintain
+	StatusClosed
+	StatusUpgrade
+	StatusFailed
+)
+
 // 面板全局变量
 var (
 	Root    string
 	Version string
 	Locale  string
+	IsCli   bool
+	Status  = StatusNormal
 )

internal/apps/fail2ban/init.go

@@ -13,7 +13,7 @@ func init() {
 		Route: func(r chi.Router) {
 			service := NewService()
 			r.Get("/jails", service.List)
-			r.Post("/jails", service.Add)
+			r.Post("/jails", service.Create)
 			r.Delete("/jails", service.Delete)
 			r.Get("/jails/{name}", service.BanList)
 			r.Post("/unban", service.Unban)

internal/apps/fail2ban/request.go

@@ -1,29 +1,29 @@
 package fail2ban
 
 type Add struct {
-	Name        string `json:"name"`
-	Type        string `json:"type"`
-	MaxRetry    string `json:"maxretry"`
-	FindTime    string `json:"findtime"`
-	BanTime     string `json:"bantime"`
+	Name        string `json:"name" validate:"required"`
+	Type        string `json:"type" validate:"required"`
+	MaxRetry    int    `json:"maxretry" validate:"required"`
+	FindTime    int    `json:"findtime" validate:"required"`
+	BanTime     int    `json:"bantime" validate:"required"`
 	WebsiteName string `json:"website_name"`
 	WebsiteMode string `json:"website_mode"`
 	WebsitePath string `json:"website_path"`
 }
 
 type Delete struct {
-	Name string `json:"name"`
+	Name string `json:"name" validate:"required"`
 }
 
 type BanList struct {
-	Name string `json:"name"`
+	Name string `json:"name" validate:"required"`
 }
 
 type Unban struct {
-	Name string `json:"name"`
-	IP   string `json:"ip"`
+	Name string `json:"name" validate:"required"`
+	IP   string `json:"ip" validate:"required"`
 }
 
 type SetWhiteList struct {
-	IP string `json:"ip"`
+	IP string `json:"ip" validate:"required"`
 }

internal/apps/fail2ban/service.go

@@ -1,6 +1,7 @@
 package fail2ban
 
 import (
+	"fmt"
 	"net/http"
 	"regexp"
 	"strings"
@@ -28,7 +29,7 @@ func NewService() *Service {
 	}
 }
 
-// List 所有 Fail2ban 规则
+// List 所有规则
 func (s *Service) List(w http.ResponseWriter, r *http.Request) {
 	raw, err := io.Read("/etc/fail2ban/jail.local")
 	if err != nil {
@@ -77,8 +78,8 @@ func (s *Service) List(w http.ResponseWriter, r *http.Request) {
 	})
 }
 
-// Add 添加 Fail2ban 规则
-func (s *Service) Add(w http.ResponseWriter, r *http.Request) {
+// Create 添加规则
+func (s *Service) Create(w http.ResponseWriter, r *http.Request) {
 	req, err := service.Bind[Add](r)
 	if err != nil {
 		service.Error(w, http.StatusUnprocessableEntity, "%v", err)
@@ -86,9 +87,9 @@ func (s *Service) Add(w http.ResponseWriter, r *http.Request) {
 	}
 	jailName := req.Name
 	jailType := req.Type
-	jailMaxRetry := req.MaxRetry
-	jailFindTime := req.FindTime
-	jailBanTime := req.BanTime
+	jailMaxRetry := cast.ToString(req.MaxRetry)
+	jailFindTime := cast.ToString(req.FindTime)
+	jailBanTime := cast.ToString(req.BanTime)
 	jailWebsiteName := req.WebsiteName
 	jailWebsiteMode := req.WebsiteMode
 	jailWebsitePath := req.WebsitePath
@@ -111,10 +112,12 @@ func (s *Service) Add(w http.ResponseWriter, r *http.Request) {
 			return
 		}
 		var ports string
-		for _, port := range website.Ports {
-			fields := strings.Fields(cast.ToString(port))
-			ports += fields[0] + ","
+		for _, listen := range website.Listens {
+			if port, err := cast.ToIntE(listen.Address); err == nil {
+				ports += fmt.Sprintf("%d", port) + ","
+			}
 		}
+		ports = strings.TrimSuffix(ports, ",")
 
 		rule := `
 # ` + jailWebsiteName + `-` + jailWebsiteMode + `-START

internal/apps/frp/request.go

@@ -1,10 +1,10 @@
 package frp
 
 type Name struct {
-	Name string `form:"name" json:"name"`
+	Name string `form:"name" json:"name" validate:"required"`
 }
 
 type UpdateConfig struct {
-	Name   string `form:"name" json:"name"`
-	Config string `form:"config" json:"config"`
+	Name   string `form:"name" json:"name" validate:"required"`
+	Config string `form:"config" json:"config" validate:"required"`
 }

internal/apps/gitea/request.go

@@ -1,5 +1,5 @@
 package gitea
 
 type UpdateConfig struct {
-	Config string `form:"config" json:"config"`
+	Config string `form:"config" json:"config" validate:"required"`
 }

internal/apps/gitea/service.go

@@ -17,12 +17,7 @@ func NewService() *Service {
 }
 
 func (s *Service) GetConfig(w http.ResponseWriter, r *http.Request) {
-	config, err := io.Read(fmt.Sprintf("%s/server/gitea/app.ini", app.Root))
-	if err != nil {
-		service.Error(w, http.StatusInternalServerError, "%v", err)
-		return
-	}
-
+	config, _ := io.Read(fmt.Sprintf("%s/server/gitea/app.ini", app.Root))
 	service.Success(w, config)
 }
 

internal/apps/mysql/request.go

@@ -1,9 +1,9 @@
 package mysql
 
 type UpdateConfig struct {
-	Config string `form:"config" json:"config"`
+	Config string `form:"config" json:"config" validate:"required"`
 }
 
 type SetRootPassword struct {
-	Password string `form:"password" json:"password"`
+	Password string `form:"password" json:"password" validate:"required"`
 }

internal/apps/mysql/service.go

@@ -49,13 +49,13 @@ func (s *Service) UpdateConfig(w http.ResponseWriter, r *http.Request) {
 		return
 	}
 
-	if err := io.Write(app.Root+"/server/mysql/conf/my.cnf", req.Config, 0644); err != nil {
-		service.Error(w, http.StatusInternalServerError, "写入配置失败")
+	if err = io.Write(app.Root+"/server/mysql/conf/my.cnf", req.Config, 0644); err != nil {
+		service.Error(w, http.StatusInternalServerError, "写入配置失败：%v", err)
 		return
 	}
 
-	if err := systemctl.Reload("mysqld"); err != nil {
-		service.Error(w, http.StatusInternalServerError, "重载失败")
+	if err = systemctl.Restart("mysqld"); err != nil {
+		service.Error(w, http.StatusInternalServerError, "重启失败：%v", err)
 		return
 	}
 
@@ -108,7 +108,7 @@ func (s *Service) Load(w http.ResponseWriter, r *http.Request) {
 		{`Max_used_connections\s+\|\s+(\d+)\s+\|`, "峰值连接数"},
 		{`Key_read_requests\s+\|\s+(\d+)\s+\|`, "索引命中率"},
 		{`Innodb_buffer_pool_reads\s+\|\s+(\d+)\s+\|`, "Innodb索引命中率"},
-		{`Created_tmp_disk_tables\s+\|\s+(\d+)\s+\|`, "创建临时表到磁盘"},
+		{`Created_tmp_disk_tables\s+\|\s+(\d+)\s+\|`, "创建临时表到硬盘"},
 		{`Open_tables\s+\|\s+(\d+)\s+\|`, "已打开的表"},
 		{`Select_full_join\s+\|\s+(\d+)\s+\|`, "没有使用索引的量"},
 		{`Select_full_range_join\s+\|\s+(\d+)\s+\|`, "没有索引的JOIN量"},

internal/apps/nginx/request.go

@@ -1,5 +1,5 @@
 package nginx
 
 type UpdateConfig struct {
-	Config string `form:"config" json:"config"`
+	Config string `form:"config" json:"config" validate:"required"`
 }

internal/apps/php/request.go

@@ -1,9 +1,9 @@
 package php
 
 type UpdateConfig struct {
-	Config string `form:"config" json:"config"`
+	Config string `form:"config" json:"config" validate:"required"`
 }
 
 type ExtensionSlug struct {
-	Slug string `form:"slug" json:"slug"`
+	Slug string `form:"slug" json:"slug" validate:"required"`
 }

internal/apps/php/service.go

@@ -3,6 +3,7 @@ package php
 import (
 	"fmt"
 	"net/http"
+	"net/url"
 	"regexp"
 	"slices"
 	"strings"
@@ -183,7 +184,7 @@ func (s *Service) InstallExtension(w http.ResponseWriter, r *http.Request) {
 		return
 	}
 
-	cmd := fmt.Sprintf(`curl -fsLm 10 --retry 3 "https://dl.cdn.haozi.net/panel/php_exts/%s" | bash -s -- "install" "%d" >> /tmp/%s.log 2>&1`, req.Slug, s.version, req.Slug)
+	cmd := fmt.Sprintf(`curl -fsLm 10 --retry 3 "https://dl.cdn.haozi.net/panel/php_exts/%s.sh" | bash -s -- "install" "%d" >> /tmp/%s.log 2>&1`, url.QueryEscape(req.Slug), s.version, req.Slug)
 	officials := []string{"fileinfo", "exif", "imap", "pdo_pgsql", "zip", "bz2", "readline", "snmp", "ldap", "enchant", "pspell", "calendar", "gmp", "sysvmsg", "sysvsem", "sysvshm", "xsl", "intl", "gettext"}
 	if slices.Contains(officials, req.Slug) {
 		cmd = fmt.Sprintf(`curl -fsLm 10 --retry 3 "https://dl.cdn.haozi.net/panel/php_exts/official.sh" | bash -s -- "install" "%d" "%s" >> /tmp/%s.log 2>&1`, s.version, req.Slug, req.Slug)
@@ -214,7 +215,7 @@ func (s *Service) UninstallExtension(w http.ResponseWriter, r *http.Request) {
 		return
 	}
 
-	cmd := fmt.Sprintf(`curl -fsLm 10 --retry 3 "https://dl.cdn.haozi.net/panel/php_exts/%s" | bash -s -- "uninstall" "%d" >> /tmp/%s.log 2>&1`, req.Slug, s.version, req.Slug)
+	cmd := fmt.Sprintf(`curl -fsLm 10 --retry 3 "https://dl.cdn.haozi.net/panel/php_exts/%s.sh" | bash -s -- "uninstall" "%d" >> /tmp/%s.log 2>&1`, url.QueryEscape(req.Slug), s.version, req.Slug)
 	officials := []string{"fileinfo", "exif", "imap", "pdo_pgsql", "zip", "bz2", "readline", "snmp", "ldap", "enchant", "pspell", "calendar", "gmp", "sysvmsg", "sysvsem", "sysvshm", "xsl", "intl", "gettext"}
 	if slices.Contains(officials, req.Slug) {
 		cmd = fmt.Sprintf(`curl -fsLm 10 --retry 3 "https://dl.cdn.haozi.net/panel/php_exts/official.sh" | bash -s -- "uninstall" "%d" "%s" >> /tmp/%s.log 2>&1`, s.version, req.Slug, req.Slug)
@@ -258,7 +259,7 @@ func (s *Service) getExtensions() []Extension {
 		{
 			Name:        "exif",
 			Slug:        "exif",
-			Description: "通过 exif 扩展，你可以操作图像元数据。",
+			Description: "通过 exif 扩展，您可以操作图像元数据。",
 		},
 		{
 			Name:        "pdo_pgsql",

internal/apps/phpmyadmin/request.go

@@ -1,9 +1,9 @@
 package phpmyadmin
 
 type UpdateConfig struct {
-	Config string `form:"config" json:"config"`
+	Config string `form:"config" json:"config" validate:"required"`
 }
 
 type UpdatePort struct {
-	Port uint `form:"port" json:"port"`
+	Port uint `form:"port" json:"port" validate:"required,number,gte=1,lte=65535"`
 }

internal/apps/phpmyadmin/service.go

@@ -78,8 +78,9 @@ func (s *Service) UpdatePort(w http.ResponseWriter, r *http.Request) {
 
 	fw := firewall.NewFirewall()
 	err = fw.Port(firewall.FireInfo{
-		Port:     req.Port,
-		Protocol: "tcp",
+		PortStart: req.Port,
+		PortEnd:   req.Port,
+		Protocol:  "tcp",
 	}, firewall.OperationAdd)
 	if err != nil {
 		service.Error(w, http.StatusInternalServerError, "%v", err)

internal/apps/podman/request.go

@@ -1,5 +1,5 @@
 package podman
 
 type UpdateConfig struct {
-	Config string `form:"config" json:"config"`
+	Config string `form:"config" json:"config" validate:"required"`
 }

internal/apps/postgresql/request.go

@@ -1,5 +1,5 @@
 package postgresql
 
 type UpdateConfig struct {
-	Config string `form:"config" json:"config"`
+	Config string `form:"config" json:"config" validate:"required"`
 }

internal/apps/pureftpd/init.go

@@ -14,8 +14,8 @@ func init() {
 			service := NewService()
 			r.Get("/users", service.List)
 			r.Post("/users", service.Create)
-			r.Delete("/users/{name}", service.Delete)
-			r.Post("/users/{name}/password", service.ChangePassword)
+			r.Delete("/users/{username}", service.Delete)
+			r.Post("/users/{username}/password", service.ChangePassword)
 			r.Get("/port", service.GetPort)
 			r.Post("/port", service.UpdatePort)
 		},

internal/apps/pureftpd/request.go

@@ -1,20 +1,20 @@
 package pureftpd
 
 type Create struct {
-	Username string `form:"username" json:"username"`
-	Password string `form:"password" json:"password"`
-	Path     string `form:"path" json:"path"`
+	Username string `form:"username" json:"username" validate:"required"`
+	Password string `form:"password" json:"password" validate:"required"`
+	Path     string `form:"path" json:"path" validate:"required"`
 }
 
 type Delete struct {
-	Username string `form:"username" json:"username"`
+	Username string `form:"username" json:"username" validate:"required"`
 }
 
 type ChangePassword struct {
-	Username string `form:"username" json:"username"`
-	Password string `form:"password" json:"password"`
+	Username string `form:"username" json:"username" validate:"required"`
+	Password string `form:"password" json:"password" validate:"required"`
 }
 
 type UpdatePort struct {
-	Port uint `form:"port" json:"port"`
+	Port uint `form:"port" json:"port" validate:"required"`
 }

internal/apps/pureftpd/service.go

@@ -156,8 +156,9 @@ func (s *Service) UpdatePort(w http.ResponseWriter, r *http.Request) {
 
 	fw := firewall.NewFirewall()
 	err = fw.Port(firewall.FireInfo{
-		Port:     req.Port,
-		Protocol: "tcp",
+		PortStart: req.Port,
+		PortEnd:   req.Port,
+		Protocol:  "tcp",
 	}, firewall.OperationAdd)
 	if err != nil {
 		service.Error(w, http.StatusInternalServerError, "%v", err)

internal/apps/redis/request.go

@@ -1,5 +1,5 @@
 package redis
 
 type UpdateConfig struct {
-	Config string `form:"config" json:"config"`
+	Config string `form:"config" json:"config" validate:"required"`
 }

internal/apps/rsync/request.go

@@ -1,27 +1,27 @@
 package rsync
 
 type Create struct {
-	Name       string `form:"name" json:"name"`
-	Path       string `form:"path" json:"path"`
+	Name       string `form:"name" json:"name" validate:"required"`
+	Path       string `form:"path" json:"path" validate:"required"`
 	Comment    string `form:"comment" json:"comment"`
-	AuthUser   string `form:"auth_user" json:"auth_user"`
-	Secret     string `form:"secret" json:"secret"`
+	AuthUser   string `form:"auth_user" json:"auth_user" validate:"required"`
+	Secret     string `form:"secret" json:"secret" validate:"required"`
 	HostsAllow string `form:"hosts_allow" json:"hosts_allow"`
 }
 
 type Delete struct {
-	Name string `form:"name" json:"name"`
+	Name string `form:"name" json:"name" validate:"required"`
 }
 
 type Update struct {
-	Name       string `form:"name" json:"name"`
-	Path       string `form:"path" json:"path"`
+	Name       string `form:"name" json:"name" validate:"required"`
+	Path       string `form:"path" json:"path" validate:"required"`
 	Comment    string `form:"comment" json:"comment"`
-	AuthUser   string `form:"auth_user" json:"auth_user"`
-	Secret     string `form:"secret" json:"secret"`
+	AuthUser   string `form:"auth_user" json:"auth_user" validate:"required"`
+	Secret     string `form:"secret" json:"secret" validate:"required"`
 	HostsAllow string `form:"hosts_allow" json:"hosts_allow"`
 }
 
 type UpdateConfig struct {
-	Config string `form:"config" json:"config"`
+	Config string `form:"config" json:"config" validate:"required"`
 }

internal/apps/s3fs/request.go

@@ -1,13 +1,13 @@
 package s3fs
 
 type Create struct {
-	Ak     string `form:"ak" json:"ak"`
-	Sk     string `form:"sk" json:"sk"`
-	Bucket string `form:"bucket" json:"bucket"`
-	URL    string `form:"url" json:"url"`
-	Path   string `form:"path" json:"path"`
+	Ak     string `form:"ak" json:"ak" validate:"required"`
+	Sk     string `form:"sk" json:"sk" validate:"required"`
+	Bucket string `form:"bucket" json:"bucket" validate:"required"`
+	URL    string `form:"url" json:"url" validate:"required"`
+	Path   string `form:"path" json:"path" validate:"required"`
 }
 
 type Delete struct {
-	ID int64 `form:"id" json:"id"`
+	ID int64 `form:"id" json:"id" validate:"required"`
 }

internal/apps/supervisor/init.go

@@ -18,14 +18,14 @@ func init() {
 			r.Get("/config", service.GetConfig)
 			r.Post("/config", service.UpdateConfig)
 			r.Get("/processes", service.Processes)
-			r.Post("/processes/{name}/start", service.StartProcess)
-			r.Post("/processes/{name}/stop", service.StopProcess)
-			r.Post("/processes/{name}/restart", service.RestartProcess)
-			r.Get("/processes/{name}/log", service.ProcessLog)
-			r.Post("/processes/{name}/clearLog", service.ClearProcessLog)
-			r.Get("/processes/{name}", service.ProcessConfig)
-			r.Post("/processes/{name}", service.UpdateProcessConfig)
-			r.Delete("/processes/{name}", service.DeleteProcess)
+			r.Post("/processes/{process}/start", service.StartProcess)
+			r.Post("/processes/{process}/stop", service.StopProcess)
+			r.Post("/processes/{process}/restart", service.RestartProcess)
+			r.Get("/processes/{process}/log", service.ProcessLog)
+			r.Post("/processes/{process}/clearLog", service.ClearProcessLog)
+			r.Get("/processes/{process}", service.ProcessConfig)
+			r.Post("/processes/{process}", service.UpdateProcessConfig)
+			r.Delete("/processes/{process}", service.DeleteProcess)
 			r.Post("/processes", service.CreateProcess)
 		},
 	})

internal/apps/supervisor/request.go

@@ -1,22 +1,22 @@
 package supervisor
 
 type UpdateConfig struct {
-	Config string `form:"config" json:"config"`
+	Config string `form:"config" json:"config" validate:"required"`
 }
 
 type UpdateProcessConfig struct {
-	Process string `form:"config" json:"process"`
-	Config  string `form:"config" json:"config"`
+	Process string `form:"process" json:"process" validate:"required"`
+	Config  string `form:"config" json:"config" validate:"required"`
 }
 
 type ProcessName struct {
-	Process string `form:"config" json:"process"`
+	Process string `form:"process" json:"process" validate:"required"`
 }
 
 type CreateProcess struct {
-	Name    string `form:"name" json:"name"`
-	User    string `form:"user" json:"user"`
-	Path    string `form:"path" json:"path"`
-	Command string `form:"command" json:"command"`
-	Num     int    `form:"num" json:"num"`
+	Name    string `form:"name" json:"name" validate:"required"`
+	User    string `form:"user" json:"user" validate:"required"`
+	Path    string `form:"path" json:"path" validate:"required"`
+	Command string `form:"command" json:"command" validate:"required"`
+	Num     int    `form:"num" json:"num" validate:"required,gte=1"`
 }

internal/apps/toolbox/request.go

@@ -1,16 +1,16 @@
 package toolbox
 
 type DNS struct {
-	DNS1 string `form:"dns1" json:"dns1"`
-	DNS2 string `form:"dns2" json:"dns2"`
+	DNS1 string `form:"dns1" json:"dns1" validate:"required"`
+	DNS2 string `form:"dns2" json:"dns2" validate:"required"`
 }
 
 type SWAP struct {
-	Size int64 `form:"size" json:"size"`
+	Size int64 `form:"size" json:"size" validate:"gte=0"`
 }
 
 type Timezone struct {
-	Timezone string `form:"timezone" json:"timezone"`
+	Timezone string `form:"timezone" json:"timezone" validate:"required"`
 }
 
 type Hosts struct {
@@ -18,5 +18,5 @@ type Hosts struct {
 }
 
 type Password struct {
-	Password string `form:"password" json:"password"`
+	Password string `form:"password" json:"password" validate:"required"`
 }

internal/apps/toolbox/service.go

@@ -52,11 +52,6 @@ func (s *Service) UpdateDNS(w http.ResponseWriter, r *http.Request) {
 		return
 	}
 
-	if len(req.DNS1) == 0 || len(req.DNS2) == 0 {
-		service.Error(w, http.StatusUnprocessableEntity, "DNS 信息不能为空")
-		return
-	}
-
 	var dns string
 	dns += "nameserver " + req.DNS1 + "\n"
 	dns += "nameserver " + req.DNS2 + "\n"
@@ -76,7 +71,7 @@ func (s *Service) GetSWAP(w http.ResponseWriter, r *http.Request) {
 	if io.Exists(filepath.Join(app.Root, "swap")) {
 		file, err := io.FileInfo(filepath.Join(app.Root, "swap"))
 		if err != nil {
-			service.Error(w, http.StatusUnprocessableEntity, "获取 SWAP 信息失败")
+			service.Error(w, http.StatusInternalServerError, "获取 SWAP 信息失败")
 			return
 		}
 
@@ -89,12 +84,12 @@ func (s *Service) GetSWAP(w http.ResponseWriter, r *http.Request) {
 
 	raw, err := shell.Execf("free | grep Swap")
 	if err != nil {
-		service.Error(w, http.StatusUnprocessableEntity, "获取 SWAP 信息失败")
+		service.Error(w, http.StatusInternalServerError, "获取 SWAP 信息失败")
 		return
 	}
 
 	match := regexp.MustCompile(`Swap:\s+(\d+)\s+(\d+)\s+(\d+)`).FindStringSubmatch(raw)
-	if len(match) > 0 {
+	if len(match) >= 4 {
 		used = str.FormatBytes(cast.ToFloat64(match[2]) * 1024)
 		free = str.FormatBytes(cast.ToFloat64(match[3]) * 1024)
 	}
@@ -117,15 +112,15 @@ func (s *Service) UpdateSWAP(w http.ResponseWriter, r *http.Request) {
 
 	if io.Exists(filepath.Join(app.Root, "swap")) {
 		if _, err = shell.Execf("swapoff '%s'", filepath.Join(app.Root, "swap")); err != nil {
-			service.Error(w, http.StatusUnprocessableEntity, "%v", err)
+			service.Error(w, http.StatusInternalServerError, "%v", err)
 			return
 		}
 		if _, err = shell.Execf("rm -f '%s'", filepath.Join(app.Root, "swap")); err != nil {
-			service.Error(w, http.StatusUnprocessableEntity, "%v", err)
+			service.Error(w, http.StatusInternalServerError, "%v", err)
 			return
 		}
-		if _, err = shell.Execf(`sed -i '%s/d' /etc/fstab`, filepath.Join(app.Root, "swap")); err != nil {
-			service.Error(w, http.StatusUnprocessableEntity, "%v", err)
+		if _, err = shell.Execf(`sed -i "\|^%s|d" /etc/fstab`, filepath.Join(app.Root, "swap")); err != nil {
+			service.Error(w, http.StatusInternalServerError, "%v", err)
 			return
 		}
 	}
@@ -134,40 +129,40 @@ func (s *Service) UpdateSWAP(w http.ResponseWriter, r *http.Request) {
 		var free string
 		free, err = shell.Execf("df -k %s | awk '{print $4}' | tail -n 1", app.Root)
 		if err != nil {
-			service.Error(w, http.StatusUnprocessableEntity, "获取磁盘空间失败")
+			service.Error(w, http.StatusInternalServerError, "获取硬盘空间失败")
 			return
 		}
 		if cast.ToInt64(free)*1024 < req.Size*1024*1024 {
-			service.Error(w, http.StatusUnprocessableEntity, "磁盘空间不足，当前剩余%s", str.FormatBytes(cast.ToFloat64(free)))
+			service.Error(w, http.StatusInternalServerError, "硬盘空间不足，当前剩余%s", str.FormatBytes(cast.ToFloat64(free)))
 			return
 		}
 
 		btrfsCheck, _ := shell.Execf("df -T %s | awk '{print $2}' | tail -n 1", app.Root)
 		if strings.Contains(btrfsCheck, "btrfs") {
 			if _, err = shell.Execf("btrfs filesystem mkswapfile --size %dM --uuid clear %s", req.Size, filepath.Join(app.Root, "swap")); err != nil {
-				service.Error(w, http.StatusUnprocessableEntity, "%v", err)
+				service.Error(w, http.StatusInternalServerError, "%v", err)
 				return
 			}
 		} else {
 			if _, err = shell.Execf("dd if=/dev/zero of=%s bs=1M count=%d", filepath.Join(app.Root, "swap"), req.Size); err != nil {
-				service.Error(w, http.StatusUnprocessableEntity, "%v", err)
+				service.Error(w, http.StatusInternalServerError, "%v", err)
 				return
 			}
 			if _, err = shell.Execf("mkswap -f '%s'", filepath.Join(app.Root, "swap")); err != nil {
-				service.Error(w, http.StatusUnprocessableEntity, "%v", err)
+				service.Error(w, http.StatusInternalServerError, "%v", err)
 				return
 			}
 			if err = io.Chmod(filepath.Join(app.Root, "swap"), 0600); err != nil {
-				service.Error(w, http.StatusUnprocessableEntity, "设置 SWAP 权限失败")
+				service.Error(w, http.StatusInternalServerError, "设置 SWAP 权限失败")
 				return
 			}
 		}
 		if _, err = shell.Execf("swapon '%s'", filepath.Join(app.Root, "swap")); err != nil {
-			service.Error(w, http.StatusUnprocessableEntity, "%v", err)
+			service.Error(w, http.StatusInternalServerError, "%v", err)
 			return
 		}
 		if _, err = shell.Execf("echo '%s    swap    swap    defaults    0 0' >> /etc/fstab", filepath.Join(app.Root, "swap")); err != nil {
-			service.Error(w, http.StatusUnprocessableEntity, "%v", err)
+			service.Error(w, http.StatusInternalServerError, "%v", err)
 			return
 		}
 	}
@@ -179,19 +174,19 @@ func (s *Service) UpdateSWAP(w http.ResponseWriter, r *http.Request) {
 func (s *Service) GetTimezone(w http.ResponseWriter, r *http.Request) {
 	raw, err := shell.Execf("timedatectl | grep zone")
 	if err != nil {
-		service.Error(w, http.StatusUnprocessableEntity, "获取时区信息失败")
+		service.Error(w, http.StatusInternalServerError, "获取时区信息失败")
 		return
 	}
 
 	match := regexp.MustCompile(`zone:\s+(\S+)`).FindStringSubmatch(raw)
 	if len(match) == 0 {
-		service.Error(w, http.StatusUnprocessableEntity, "找不到时区信息")
+		service.Error(w, http.StatusInternalServerError, "找不到时区信息")
 		return
 	}
 
 	zonesRaw, err := shell.Execf("timedatectl list-timezones")
 	if err != nil {
-		service.Error(w, http.StatusUnprocessableEntity, "获取时区列表失败")
+		service.Error(w, http.StatusInternalServerError, "获取时区列表失败")
 		return
 	}
 	zones := strings.Split(zonesRaw, "\n")
@@ -219,7 +214,7 @@ func (s *Service) UpdateTimezone(w http.ResponseWriter, r *http.Request) {
 	}
 
 	if _, err = shell.Execf("timedatectl set-timezone '%s'", req.Timezone); err != nil {
-		service.Error(w, http.StatusUnprocessableEntity, "%v", err)
+		service.Error(w, http.StatusInternalServerError, "%v", err)
 		return
 	}
 
@@ -228,12 +223,7 @@ func (s *Service) UpdateTimezone(w http.ResponseWriter, r *http.Request) {
 
 // GetHosts 获取 hosts 信息
 func (s *Service) GetHosts(w http.ResponseWriter, r *http.Request) {
-	hosts, err := io.Read("/etc/hosts")
-	if err != nil {
-		service.Error(w, http.StatusUnprocessableEntity, "%v", err)
-		return
-	}
-
+	hosts, _ := io.Read("/etc/hosts")
 	service.Success(w, hosts)
 }
 
@@ -246,7 +236,7 @@ func (s *Service) UpdateHosts(w http.ResponseWriter, r *http.Request) {
 	}
 
 	if err = io.Write("/etc/hosts", req.Hosts, 0644); err != nil {
-		service.Error(w, http.StatusUnprocessableEntity, "写入 hosts 信息失败")
+		service.Error(w, http.StatusInternalServerError, "写入 hosts 信息失败")
 		return
 	}
 
@@ -268,7 +258,7 @@ func (s *Service) UpdateRootPassword(w http.ResponseWriter, r *http.Request) {
 
 	req.Password = strings.ReplaceAll(req.Password, `'`, `\'`)
 	if _, err = shell.Execf(`yes '%s' | passwd root`, req.Password); err != nil {
-		service.Error(w, http.StatusUnprocessableEntity, "%v", err)
+		service.Error(w, http.StatusInternalServerError, "%v", err)
 		return
 	}
 

internal/biz/backup.go

@@ -0,0 +1,24 @@
+package biz
+
+import "github.com/TheTNB/panel/pkg/types"
+
+type BackupType string
+
+const (
+	BackupTypePath     BackupType = "path"
+	BackupTypeWebsite  BackupType = "website"
+	BackupTypeMySQL    BackupType = "mysql"
+	BackupTypePostgres BackupType = "postgres"
+	BackupTypeRedis    BackupType = "redis"
+	BackupTypePanel    BackupType = "panel"
+)
+
+type BackupRepo interface {
+	List(typ BackupType) ([]*types.BackupFile, error)
+	Create(typ BackupType, target string, path ...string) error
+	Delete(typ BackupType, name string) error
+	Restore(typ BackupType, backup, target string) error
+	ClearExpired(path, prefix string, save int) error
+	CutoffLog(path, target string) error
+	GetPath(typ BackupType) (string, error)
+}

internal/biz/monitor.go

@@ -4,14 +4,14 @@ import (
 	"time"
 
 	"github.com/TheTNB/panel/internal/http/request"
-	"github.com/TheTNB/panel/pkg/tools"
+	"github.com/TheTNB/panel/pkg/types"
 )
 
 type Monitor struct {
-	ID        uint                 `gorm:"primaryKey" json:"id"`
-	Info      tools.MonitoringInfo `gorm:"not null;serializer:json" json:"info"`
-	CreatedAt time.Time            `json:"created_at"`
-	UpdatedAt time.Time            `json:"updated_at"`
+	ID        uint              `gorm:"primaryKey" json:"id"`
+	Info      types.CurrentInfo `gorm:"not null;serializer:json" json:"info"`
+	CreatedAt time.Time         `json:"created_at"`
+	UpdatedAt time.Time         `json:"updated_at"`
 }
 
 type MonitorRepo interface {

internal/biz/setting.go

@@ -21,6 +21,7 @@ const (
 	SettingKeySshPort           SettingKey = "ssh_port"
 	SettingKeySshUser           SettingKey = "ssh_user"
 	SettingKeySshPassword       SettingKey = "ssh_password"
+	SettingKeyOfflineMode       SettingKey = "offline_mode"
 )
 
 type Setting struct {
@@ -33,9 +34,11 @@ type Setting struct {
 
 type SettingRepo interface {
 	Get(key SettingKey, defaultValue ...string) (string, error)
+	GetBool(key SettingKey, defaultValue ...bool) (bool, error)
 	Set(key SettingKey, value string) error
 	Delete(key SettingKey) error
 	GetPanelSetting(ctx context.Context) (*request.PanelSetting, error)
 	UpdatePanelSetting(ctx context.Context, setting *request.PanelSetting) (bool, error)
 	UpdatePanel(version, url, checksum string) error
+	FixPanel() error
 }

internal/biz/task.go

@@ -28,5 +28,5 @@ type TaskRepo interface {
 	Delete(id uint) error
 	UpdateStatus(id uint, status TaskStatus) error
 	Push(task *Task) error
-	DispatchWaiting() error
+	DispatchWaiting()
 }

internal/biz/website.go

@@ -12,8 +12,7 @@ type Website struct {
 	Name      string    `gorm:"not null;unique" json:"name"`
 	Status    bool      `gorm:"not null;default:true" json:"status"`
 	Path      string    `gorm:"not null" json:"path"`
-	PHP       int       `gorm:"not null" json:"php"`
-	SSL       bool      `gorm:"not null" json:"ssl"`
+	Https     bool      `gorm:"not null" json:"https"`
 	Remark    string    `gorm:"not null" json:"remark"`
 	CreatedAt time.Time `json:"created_at"`
 	UpdatedAt time.Time `json:"updated_at"`

internal/bootstrap/app.go

@@ -19,8 +19,8 @@ func BootWeb() {
 	boot()
 	initValidator()
 	initSession()
-	initCron()
 	initQueue()
+	initCron()
 	initHttp()
 
 	select {}

internal/bootstrap/cli.go

@@ -2,6 +2,7 @@ package bootstrap
 
 import (
 	"context"
+	"fmt"
 	"os"
 	"strings"
 
@@ -13,6 +14,8 @@ import (
 )
 
 func initCli() {
+	app.IsCli = true
+
 	cli.RootCommandHelpTemplate = strings.ReplaceAll(cli.RootCommandHelpTemplate, "NAME", "名称")
 	cli.RootCommandHelpTemplate = strings.ReplaceAll(cli.RootCommandHelpTemplate, "USAGE", "用法")
 	cli.RootCommandHelpTemplate = strings.ReplaceAll(cli.RootCommandHelpTemplate, "VERSION", "版本")
@@ -43,6 +46,6 @@ func initCli() {
 		Commands: route.Cli(),
 	}
 	if err := cmd.Run(context.Background(), os.Args); err != nil {
-		color.Redln(err.Error())
+		color.Redln(fmt.Sprintf("|-%v", err))
 	}
 }

internal/bootstrap/conf.go

@@ -26,7 +26,7 @@ func initConf() {
 
 func initGlobal() {
 	app.Root = app.Conf.MustString("app.root")
-	app.Version = "2.3.2"
+	app.Version = "2.3.7"
 	app.Locale = app.Conf.MustString("app.locale")
 
 	// 初始化时区

internal/bootstrap/validator.go

@@ -9,6 +9,7 @@ import (
 	"github.com/go-playground/validator/v10/translations/zh"
 
 	"github.com/TheTNB/panel/internal/app"
+	"github.com/TheTNB/panel/internal/http/rule"
 )
 
 func initValidator() {
@@ -23,4 +24,7 @@ func initValidator() {
 
 	app.Translator = &trans
 	app.Validator = validate
+	if err := rule.RegisterRules(validate); err != nil {
+		log.Fatalf("failed to register validator rules: %v", err)
+	}
 }

internal/data/app.go

@@ -288,7 +288,7 @@ func (r *appRepo) Update(slug string) error {
 	}
 
 	task := new(biz.Task)
-	task.Name = "更新应用 " + item.Name
+	task.Name = "升级应用 " + item.Name
 	task.Status = biz.TaskStatusWaiting
 	task.Shell = fmt.Sprintf(`curl -fsLm 10 --retry 3 "%s" | bash -s -- "%s" "%s" >> /tmp/%s.log 2>&1`, shellUrl, shellChannel, shellVersion, item.Slug)
 	task.Log = "/tmp/" + item.Slug + ".log"

internal/data/backup.go

@@ -0,0 +1,549 @@
+package data
+
+import (
+	"errors"
+	"fmt"
+	"os"
+	"path/filepath"
+	"slices"
+	"strings"
+	"time"
+
+	"github.com/gookit/color"
+	"github.com/shirou/gopsutil/disk"
+
+	"github.com/TheTNB/panel/internal/app"
+	"github.com/TheTNB/panel/internal/biz"
+	"github.com/TheTNB/panel/pkg/db"
+	"github.com/TheTNB/panel/pkg/io"
+	"github.com/TheTNB/panel/pkg/shell"
+	"github.com/TheTNB/panel/pkg/str"
+	"github.com/TheTNB/panel/pkg/types"
+)
+
+type backupRepo struct {
+	setting biz.SettingRepo
+	website biz.WebsiteRepo
+}
+
+func NewBackupRepo() biz.BackupRepo {
+	return &backupRepo{
+		setting: NewSettingRepo(),
+		website: NewWebsiteRepo(),
+	}
+}
+
+// List 备份列表
+func (r *backupRepo) List(typ biz.BackupType) ([]*types.BackupFile, error) {
+	path, err := r.GetPath(typ)
+	if err != nil {
+		return nil, err
+	}
+
+	files, err := io.ReadDir(path)
+	if err != nil {
+		return nil, err
+	}
+
+	list := make([]*types.BackupFile, 0)
+	for _, file := range files {
+		info, err := file.Info()
+		if err != nil {
+			continue
+		}
+		list = append(list, &types.BackupFile{
+			Name: file.Name(),
+			Path: filepath.Join(path, file.Name()),
+			Size: str.FormatBytes(float64(info.Size())),
+			Time: info.ModTime(),
+		})
+	}
+
+	return list, nil
+}
+
+// Create 创建备份
+// typ 备份类型
+// target 目标名称
+// path 可选备份保存路径
+func (r *backupRepo) Create(typ biz.BackupType, target string, path ...string) error {
+	defPath, err := r.GetPath(typ)
+	if err != nil {
+		return err
+	}
+	if len(path) > 0 && path[0] != "" {
+		defPath = path[0]
+	}
+
+	switch typ {
+	case biz.BackupTypeWebsite:
+		return r.createWebsite(defPath, target)
+	case biz.BackupTypeMySQL:
+		return r.createMySQL(defPath, target)
+	case biz.BackupTypePostgres:
+		return r.createPostgres(defPath, target)
+	case biz.BackupTypePanel:
+		return r.createPanel(defPath)
+
+	}
+
+	return errors.New("未知备份类型")
+}
+
+// Delete 删除备份
+func (r *backupRepo) Delete(typ biz.BackupType, name string) error {
+	path, err := r.GetPath(typ)
+	if err != nil {
+		return err
+	}
+
+	file := filepath.Join(path, name)
+	return io.Remove(file)
+}
+
+// Restore 恢复备份
+// typ 备份类型
+// backup 备份压缩包，可以是绝对路径或者相对路径
+// target 目标名称
+func (r *backupRepo) Restore(typ biz.BackupType, backup, target string) error {
+	if !io.Exists(backup) {
+		path, err := r.GetPath(typ)
+		if err != nil {
+			return err
+		}
+		backup = filepath.Join(path, backup)
+	}
+
+	switch typ {
+	case biz.BackupTypeWebsite:
+		return r.restoreWebsite(backup, target)
+	case biz.BackupTypeMySQL:
+		return r.restoreMySQL(backup, target)
+	case biz.BackupTypePostgres:
+		return r.restorePostgres(backup, target)
+	}
+
+	return errors.New("未知备份类型")
+}
+
+// CutoffLog 切割日志
+// path 保存目录绝对路径
+// target 待切割日志文件绝对路径
+func (r *backupRepo) CutoffLog(path, target string) error {
+	if !io.Exists(target) {
+		return errors.New("日志文件不存在")
+	}
+
+	to := filepath.Join(path, fmt.Sprintf("%s_%s.zip", time.Now().Format("20060102150405"), filepath.Base(target)))
+	if err := io.Compress([]string{target}, to, io.Zip); err != nil {
+		return err
+	}
+
+	return io.Remove(target)
+}
+
+// ClearExpired 清理过期备份
+// path 备份目录绝对路径
+// prefix 目标文件前缀
+// save 保存份数
+func (r *backupRepo) ClearExpired(path, prefix string, save int) error {
+	files, err := io.ReadDir(path)
+	if err != nil {
+		return err
+	}
+
+	var filtered []os.FileInfo
+	for _, file := range files {
+		if strings.HasPrefix(file.Name(), prefix) && strings.HasSuffix(file.Name(), ".zip") {
+			info, err := os.Stat(filepath.Join(path, file.Name()))
+			if err != nil {
+				continue
+			}
+			filtered = append(filtered, info)
+		}
+	}
+
+	// 排序所有备份文件，从新到旧
+	slices.SortFunc(filtered, func(a, b os.FileInfo) int {
+		if a.ModTime().After(b.ModTime()) {
+			return -1
+		}
+		if a.ModTime().Before(b.ModTime()) {
+			return 1
+		}
+		return 0
+	})
+	if len(filtered) <= save {
+		return nil
+	}
+
+	// 切片保留 save 份，删除剩余
+	toDelete := filtered[save:]
+	for _, file := range toDelete {
+		filePath := filepath.Join(path, file.Name())
+		if app.IsCli {
+			color.Greenln(fmt.Sprintf("|-清理过期文件：%s", filePath))
+		}
+		if err = os.Remove(filePath); err != nil {
+			if app.IsCli {
+				color.Redln(fmt.Sprintf("|-清理失败：%v", err))
+			} else {
+				return fmt.Errorf("清理失败：%v", err)
+			}
+		}
+	}
+
+	return nil
+}
+
+// GetPath 获取备份路径
+func (r *backupRepo) GetPath(typ biz.BackupType) (string, error) {
+	backupPath, err := r.setting.Get(biz.SettingKeyBackupPath)
+	if err != nil {
+		return "", err
+	}
+	if !slices.Contains([]biz.BackupType{biz.BackupTypePath, biz.BackupTypeWebsite, biz.BackupTypeMySQL, biz.BackupTypePostgres, biz.BackupTypeRedis, biz.BackupTypePanel}, typ) {
+		return "", errors.New("未知备份类型")
+	}
+
+	backupPath = filepath.Join(backupPath, string(typ))
+	if !io.Exists(backupPath) {
+		if err = io.Mkdir(backupPath, 0644); err != nil {
+			return "", err
+		}
+	}
+
+	return backupPath, nil
+}
+
+// createWebsite 创建网站备份
+func (r *backupRepo) createWebsite(to string, name string) error {
+	website, err := r.website.GetByName(name)
+	if err != nil {
+		return err
+	}
+
+	if err = r.preCheckPath(to, website.Path); err != nil {
+		return err
+	}
+
+	var paths []string
+	dirs, err := io.ReadDir(website.Path)
+	if err != nil {
+		return err
+	}
+	for _, item := range dirs {
+		paths = append(paths, filepath.Join(website.Path, item.Name()))
+	}
+
+	start := time.Now()
+	backup := filepath.Join(to, fmt.Sprintf("%s_%s.zip", website.Name, time.Now().Format("20060102150405")))
+	if err = io.Compress(paths, backup, io.Zip); err != nil {
+		return err
+	}
+
+	if app.IsCli {
+		color.Greenln(fmt.Sprintf("|-备份耗时：%s", time.Since(start).String()))
+		color.Greenln(fmt.Sprintf("|-已备份至文件：%s", filepath.Base(backup)))
+	}
+	return nil
+}
+
+// createMySQL 创建 MySQL 备份
+func (r *backupRepo) createMySQL(to string, name string) error {
+	rootPassword, err := r.setting.Get(biz.SettingKeyMySQLRootPassword)
+	if err != nil {
+		return err
+	}
+	mysql, err := db.NewMySQL("root", rootPassword, "/tmp/mysql.sock")
+	if err != nil {
+		return err
+	}
+	if exist, _ := mysql.DatabaseExists(name); !exist {
+		return fmt.Errorf("数据库不存在：%s", name)
+	}
+	size, err := mysql.DatabaseSize(name)
+	if err != nil {
+		return err
+	}
+	if err = r.preCheckDB(to, size); err != nil {
+		return err
+	}
+
+	if err = os.Setenv("MYSQL_PWD", rootPassword); err != nil {
+		return err
+	}
+	start := time.Now()
+	backup := filepath.Join(to, fmt.Sprintf("%s_%s.sql", name, time.Now().Format("20060102150405")))
+	if _, err = shell.Execf(`mysqldump -u root '%s' > '%s'`, name, backup); err != nil {
+		return err
+	}
+	if err = os.Unsetenv("MYSQL_PWD"); err != nil {
+		return err
+	}
+
+	if err = io.Compress([]string{backup}, backup+".zip", io.Zip); err != nil {
+		return err
+	}
+	if err = io.Remove(backup); err != nil {
+		return err
+	}
+
+	if app.IsCli {
+		color.Greenln(fmt.Sprintf("|-备份耗时：%s", time.Since(start).String()))
+		color.Greenln(fmt.Sprintf("|-已备份至文件：%s", filepath.Base(backup+".zip")))
+	}
+	return nil
+}
+
+// createPostgres 创建 PostgreSQL 备份
+func (r *backupRepo) createPostgres(to string, name string) error {
+	postgres, err := db.NewPostgres("postgres", "", "127.0.0.1", fmt.Sprintf("%s/server/postgresql/data/pg_hba.conf", app.Root), 5432)
+	if err != nil {
+		return err
+	}
+	if exist, _ := postgres.DatabaseExist(name); !exist {
+		return fmt.Errorf("数据库不存在：%s", name)
+	}
+	size, err := postgres.DatabaseSize(name)
+	if err != nil {
+		return err
+	}
+	if err = r.preCheckDB(to, size); err != nil {
+		return err
+	}
+
+	start := time.Now()
+	backup := filepath.Join(to, fmt.Sprintf("%s_%s.sql", name, time.Now().Format("20060102150405")))
+	if _, err = shell.Execf(`su - postgres -c "pg_dump '%s'" > '%s'`, name, backup); err != nil {
+		return err
+	}
+
+	if err = io.Compress([]string{backup}, backup+".zip", io.Zip); err != nil {
+		return err
+	}
+	if err = io.Remove(backup); err != nil {
+		return err
+	}
+
+	if app.IsCli {
+		color.Greenln(fmt.Sprintf("|-备份耗时：%s", time.Since(start).String()))
+		color.Greenln(fmt.Sprintf("|-已备份至文件：%s", filepath.Base(backup+".zip")))
+	}
+	return nil
+}
+
+// createPanel 创建面板备份
+func (r *backupRepo) createPanel(to string) error {
+	backup := filepath.Join(to, fmt.Sprintf("panel_%s.zip", time.Now().Format("20060102150405")))
+
+	if err := r.preCheckPath(to, filepath.Join(app.Root, "panel")); err != nil {
+		return err
+	}
+
+	start := time.Now()
+	if err := io.Compress([]string{
+		filepath.Join(app.Root, "panel"),
+		"/usr/local/sbin/panel-cli",
+		"/usr/local/etc/panel/config.yml",
+	}, backup, io.Zip); err != nil {
+		return err
+	}
+	if err := io.Chmod(backup, 0600); err != nil {
+		return err
+	}
+
+	if app.IsCli {
+		color.Greenln(fmt.Sprintf("|-备份耗时：%s", time.Since(start).String()))
+		color.Greenln(fmt.Sprintf("|-已备份至文件：%s", filepath.Base(backup)))
+	}
+	return nil
+}
+
+// restoreWebsite 恢复网站备份
+func (r *backupRepo) restoreWebsite(backup, target string) error {
+	if !io.Exists(backup) {
+		return errors.New("备份文件不存在")
+	}
+
+	website, err := r.website.GetByName(target)
+	if err != nil {
+		return err
+	}
+	format, err := io.FormatArchiveByPath(backup)
+	if err != nil {
+		return err
+	}
+
+	if err = io.Remove(website.Path); err != nil {
+		return err
+	}
+	if err = io.UnCompress(backup, website.Path, format); err != nil {
+		return err
+	}
+	if err = io.Chmod(website.Path, 0755); err != nil {
+		return err
+	}
+	if err = io.Chown(website.Path, "www", "www"); err != nil {
+		return err
+	}
+
+	return nil
+}
+
+// restoreMySQL 恢复 MySQL 备份
+func (r *backupRepo) restoreMySQL(backup, target string) error {
+	if !io.Exists(backup) {
+		return errors.New("备份文件不存在")
+	}
+
+	rootPassword, err := r.setting.Get(biz.SettingKeyMySQLRootPassword)
+	if err != nil {
+		return err
+	}
+	mysql, err := db.NewMySQL("root", rootPassword, "/tmp/mysql.sock")
+	if err != nil {
+		return err
+	}
+	if exist, _ := mysql.DatabaseExists(target); !exist {
+		return fmt.Errorf("数据库不存在：%s", target)
+	}
+	if err = os.Setenv("MYSQL_PWD", rootPassword); err != nil {
+		return err
+	}
+
+	if !strings.HasSuffix(backup, ".sql") {
+		backup, err = r.autoUnCompressSQL(backup)
+		if err != nil {
+			return err
+		}
+	}
+
+	if _, err = shell.Execf(`mysql -u root '%s' < '%s'`, target, backup); err != nil {
+		return err
+	}
+	if err = os.Unsetenv("MYSQL_PWD"); err != nil {
+		return err
+	}
+
+	_ = io.Remove(filepath.Dir(backup))
+	return nil
+}
+
+// restorePostgres 恢复 PostgreSQL 备份
+func (r *backupRepo) restorePostgres(backup, target string) error {
+	if !io.Exists(backup) {
+		return errors.New("备份文件不存在")
+	}
+
+	postgres, err := db.NewPostgres("postgres", "", "127.0.0.1", fmt.Sprintf("%s/server/postgresql/data/pg_hba.conf", app.Root), 5432)
+	if err != nil {
+		return err
+	}
+	if exist, _ := postgres.DatabaseExist(target); !exist {
+		return fmt.Errorf("数据库不存在：%s", target)
+	}
+
+	if !strings.HasSuffix(backup, ".sql") {
+		backup, err = r.autoUnCompressSQL(backup)
+		if err != nil {
+			return err
+		}
+	}
+
+	if _, err = shell.Execf(`su - postgres -c "psql '%s'" < '%s'`, target, backup); err != nil {
+		return err
+	}
+
+	_ = io.Remove(filepath.Dir(backup))
+	return nil
+}
+
+// preCheckPath 预检空间和 inode 是否足够
+// to 备份保存目录
+// path 待备份目录
+func (r *backupRepo) preCheckPath(to, path string) error {
+	size, err := io.SizeX(path)
+	if err != nil {
+		return err
+	}
+	files, err := io.CountX(path)
+	if err != nil {
+		return err
+	}
+
+	usage, err := disk.Usage(to)
+	if err != nil {
+		return err
+	}
+
+	if app.IsCli {
+		color.Greenln(fmt.Sprintf("|-目标大小：%s", str.FormatBytes(float64(size))))
+		color.Greenln(fmt.Sprintf("|-目标文件数：%d", files))
+		color.Greenln(fmt.Sprintf("|-备份目录可用空间：%s", str.FormatBytes(float64(usage.Free))))
+		color.Greenln(fmt.Sprintf("|-备份目录可用Inode：%d", usage.InodesFree))
+	}
+
+	if uint64(size) > usage.Free {
+		return errors.New("备份目录空间不足")
+	}
+	if uint64(files) > usage.InodesFree {
+		return errors.New("备份目录Inode不足")
+	}
+
+	return nil
+}
+
+// preCheckDB 预检空间和 inode 是否足够
+// to 备份保存目录
+// size 数据库大小
+func (r *backupRepo) preCheckDB(to string, size int64) error {
+	usage, err := disk.Usage(to)
+	if err != nil {
+		return err
+	}
+
+	if app.IsCli {
+		color.Greenln(fmt.Sprintf("|-目标大小：%s", str.FormatBytes(float64(size))))
+		color.Greenln(fmt.Sprintf("|-备份目录可用空间：%s", str.FormatBytes(float64(usage.Free))))
+		color.Greenln(fmt.Sprintf("|-备份目录可用Inode：%d", usage.InodesFree))
+	}
+
+	if uint64(size) > usage.Free {
+		return errors.New("备份目录空间不足")
+	}
+
+	return nil
+}
+
+// autoUnCompressSQL 自动处理压缩文件
+func (r *backupRepo) autoUnCompressSQL(backup string) (string, error) {
+	temp, err := io.TempDir(backup)
+	if err != nil {
+		return "", err
+	}
+
+	format, err := io.FormatArchiveByPath(backup)
+	if err != nil {
+		return "", err
+	}
+	if err = io.UnCompress(backup, temp, format); err != nil {
+		return "", err
+	}
+
+	backup = "" // 置空，防止干扰后续判断
+	if files, err := os.ReadDir(temp); err == nil {
+		if len(files) != 1 {
+			return "", fmt.Errorf("压缩文件中包含的文件数量不为1，实际为%d", len(files))
+		}
+		if strings.HasSuffix(files[0].Name(), ".sql") {
+			backup = filepath.Join(temp, files[0].Name())
+		}
+	}
+
+	if backup == "" {
+		return "", errors.New("无法找到.sql备份文件")
+	}
+
+	return backup, nil
+}

internal/data/cert.go

@@ -97,7 +97,7 @@ func (r *certRepo) ObtainAuto(id uint) (*acme.Certificate, error) {
 		}
 	}
 
-	ssl, err := client.ObtainSSL(context.Background(), cert.Domains, acme.KeyType(cert.Type))
+	ssl, err := client.ObtainCertificate(context.Background(), cert.Domains, acme.KeyType(cert.Type))
 	if err != nil {
 		return nil, err
 	}
@@ -126,7 +126,7 @@ func (r *certRepo) ObtainManual(id uint) (*acme.Certificate, error) {
 		return nil, errors.New("请重新获取 DNS 解析记录")
 	}
 
-	ssl, err := r.client.ObtainSSLManual()
+	ssl, err := r.client.ObtainCertificateManual()
 	if err != nil {
 		return nil, err
 	}
@@ -176,7 +176,7 @@ func (r *certRepo) Renew(id uint) (*acme.Certificate, error) {
 		}
 	}
 
-	ssl, err := client.RenewSSL(context.Background(), cert.CertURL, cert.Domains, acme.KeyType(cert.Type))
+	ssl, err := client.RenewCertificate(context.Background(), cert.CertURL, cert.Domains, acme.KeyType(cert.Type))
 	if err != nil {
 		return nil, err
 	}
@@ -236,10 +236,10 @@ func (r *certRepo) Deploy(ID, WebsiteID uint) error {
 		return err
 	}
 
-	if err = io.Write(fmt.Sprintf("%s/server/vhost/ssl/%s.pem", app.Root, website.Name), cert.Cert, 0644); err != nil {
+	if err = io.Write(fmt.Sprintf("%s/server/vhost/cert/%s.pem", app.Root, website.Name), cert.Cert, 0644); err != nil {
 		return err
 	}
-	if err = io.Write(fmt.Sprintf("%s/server/vhost/ssl/%s.key", app.Root, website.Name), cert.Key, 0644); err != nil {
+	if err = io.Write(fmt.Sprintf("%s/server/vhost/cert/%s.key", app.Root, website.Name), cert.Key, 0644); err != nil {
 		return err
 	}
 	if err = systemctl.Reload("nginx"); err != nil {

internal/data/cron.go

@@ -60,26 +60,26 @@ func (r *cronRepo) Create(req *request.CronCreate) error {
 
 	var script string
 	if req.Type == "backup" {
-		if len(req.BackupPath) == 0 {
-			req.BackupPath, _ = r.settingRepo.Get(biz.SettingKeyBackupPath)
-			if len(req.BackupPath) == 0 {
-				return errors.New("备份路径不能为空")
-			}
-			req.BackupPath = filepath.Join(req.BackupPath, req.BackupType)
-		}
-		script = fmt.Sprintf(`#!/bin/bash
+		if req.BackupType == "website" {
+			script = fmt.Sprintf(`#!/bin/bash
 export PATH=/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin:$PATH
 
-# 耗子面板 - 数据备份脚本
+# 耗子面板 - 网站备份脚本
 
-type=%s
-path=%s
-name=%s
-save=%d
+panel-cli backup website -n '%s' -p '%s'
+panel-cli backup clear -t website -f '%s' -s '%d' -p '%s'
+`, req.Target, req.BackupPath, req.Target, req.Save, req.BackupPath)
+		}
+		if req.BackupType == "mysql" || req.BackupType == "postgres" {
+			script = fmt.Sprintf(`#!/bin/bash
+export PATH=/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin:$PATH
 
-# 执行备份
-panel backup ${type} ${name} ${path} ${save}
-`, req.BackupType, req.BackupPath, req.Target, req.Save)
+# 耗子面板 - 数据库备份脚本
+
+panel-cli backup database -t '%s' -n '%s' -p '%s'
+panel-cli backup clear -t '%s' -f '%s' -s '%d' -p '%s'
+`, req.BackupType, req.Target, req.BackupPath, req.BackupType, req.Target, req.Save, req.BackupPath)
+		}
 	}
 	if req.Type == "cutoff" {
 		script = fmt.Sprintf(`#!/bin/bash
@@ -87,12 +87,10 @@ export PATH=/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin:$PATH
 
 # 耗子面板 - 日志切割脚本
 
-name=%s
-save=%d
-
 # 执行切割
-panel cutoff ${name} ${save}
-`, req.Target, req.Save)
+panel-cli cutoff website -n %s -p %s
+panel-cli cutoff clear -t website -f %s -s %d -p %s
+`, req.Target, req.BackupPath, req.Target, req.Save, req.BackupPath)
 	}
 
 	shellDir := fmt.Sprintf("%s/server/cron/", app.Root)

internal/data/monitor.go

@@ -50,7 +50,7 @@ func (r monitorRepo) UpdateSetting(setting *request.MonitorSetting) error {
 }
 
 func (r monitorRepo) Clear() error {
-	return app.Orm.Delete(&biz.Monitor{}).Error
+	return app.Orm.Where("1 = 1").Delete(&biz.Monitor{}).Error
 }
 
 func (r monitorRepo) List(start, end time.Time) ([]*biz.Monitor, error) {

internal/data/setting.go

@@ -5,7 +5,7 @@ import (
 	"errors"
 	"fmt"
 	"path/filepath"
-	"time"
+	"slices"
 
 	"github.com/go-rat/utils/hash"
 	"github.com/goccy/go-yaml"
@@ -16,16 +16,21 @@ import (
 	"github.com/TheTNB/panel/internal/app"
 	"github.com/TheTNB/panel/internal/biz"
 	"github.com/TheTNB/panel/internal/http/request"
+	"github.com/TheTNB/panel/pkg/firewall"
 	"github.com/TheTNB/panel/pkg/io"
 	"github.com/TheTNB/panel/pkg/shell"
 	"github.com/TheTNB/panel/pkg/tools"
 	"github.com/TheTNB/panel/pkg/types"
 )
 
-type settingRepo struct{}
+type settingRepo struct {
+	taskRepo biz.TaskRepo
+}
 
 func NewSettingRepo() biz.SettingRepo {
-	return &settingRepo{}
+	return &settingRepo{
+		taskRepo: NewTaskRepo(),
+	}
 }
 
 func (r *settingRepo) Get(key biz.SettingKey, defaultValue ...string) (string, error) {
@@ -43,6 +48,21 @@ func (r *settingRepo) Get(key biz.SettingKey, defaultValue ...string) (string, e
 	return setting.Value, nil
 }
 
+func (r *settingRepo) GetBool(key biz.SettingKey, defaultValue ...bool) (bool, error) {
+	setting := new(biz.Setting)
+	if err := app.Orm.Where("key = ?", key).First(setting).Error; err != nil {
+		if !errors.Is(err, gorm.ErrRecordNotFound) {
+			return false, err
+		}
+	}
+
+	if setting.Value == "" && len(defaultValue) > 0 {
+		return defaultValue[0], nil
+	}
+
+	return cast.ToBool(setting.Value), nil
+}
+
 func (r *settingRepo) Set(key biz.SettingKey, value string) error {
 	setting := new(biz.Setting)
 	if err := app.Orm.Where("key = ?", key).First(setting).Error; err != nil {
@@ -66,16 +86,20 @@ func (r *settingRepo) Delete(key biz.SettingKey) error {
 }
 
 func (r *settingRepo) GetPanelSetting(ctx context.Context) (*request.PanelSetting, error) {
-	name := new(biz.Setting)
-	if err := app.Orm.Where("key = ?", biz.SettingKeyName).First(name).Error; err != nil {
+	name, err := r.Get(biz.SettingKeyName)
+	if err != nil {
 		return nil, err
 	}
-	websitePath := new(biz.Setting)
-	if err := app.Orm.Where("key = ?", biz.SettingKeyWebsitePath).First(websitePath).Error; err != nil {
+	offlineMode, err := r.Get(biz.SettingKeyOfflineMode)
+	if err != nil {
 		return nil, err
 	}
-	backupPath := new(biz.Setting)
-	if err := app.Orm.Where("key = ?", biz.SettingKeyBackupPath).First(backupPath).Error; err != nil {
+	websitePath, err := r.Get(biz.SettingKeyWebsitePath)
+	if err != nil {
+		return nil, err
+	}
+	backupPath, err := r.Get(biz.SettingKeyBackupPath)
+	if err != nil {
 		return nil, err
 	}
 
@@ -95,11 +119,12 @@ func (r *settingRepo) GetPanelSetting(ctx context.Context) (*request.PanelSettin
 	}
 
 	return &request.PanelSetting{
-		Name:        name.Value,
+		Name:        name,
 		Locale:      app.Conf.String("app.locale"),
 		Entrance:    app.Conf.String("http.entrance"),
-		WebsitePath: websitePath.Value,
-		BackupPath:  backupPath.Value,
+		OfflineMode: cast.ToBool(offlineMode),
+		WebsitePath: websitePath,
+		BackupPath:  backupPath,
 		Username:    user.Username,
 		Email:       user.Email,
 		Port:        app.Conf.Int("http.port"),
@@ -113,6 +138,9 @@ func (r *settingRepo) UpdatePanelSetting(ctx context.Context, setting *request.P
 	if err := r.Set(biz.SettingKeyName, setting.Name); err != nil {
 		return false, err
 	}
+	if err := r.Set(biz.SettingKeyOfflineMode, cast.ToString(setting.OfflineMode)); err != nil {
+		return false, err
+	}
 	if err := r.Set(biz.SettingKeyWebsitePath, setting.WebsitePath); err != nil {
 		return false, err
 	}
@@ -120,6 +148,37 @@ func (r *settingRepo) UpdatePanelSetting(ctx context.Context, setting *request.P
 		return false, err
 	}
 
+	// 用户
+	user := new(biz.User)
+	userID := cast.ToUint(ctx.Value("user_id"))
+	if err := app.Orm.Where("id = ?", userID).First(user).Error; err != nil {
+		return false, err
+	}
+
+	user.Username = setting.Username
+	user.Email = setting.Email
+	if setting.Password != "" {
+		value, err := hash.NewArgon2id().Make(setting.Password)
+		if err != nil {
+			return false, err
+		}
+		user.Password = value
+	}
+	if err := app.Orm.Save(user).Error; err != nil {
+		return false, err
+	}
+
+	// 下面是需要需要重启的设置
+	// 面板HTTPS
+	restartFlag := false
+	oldCert, _ := io.Read(filepath.Join(app.Root, "panel/storage/cert.pem"))
+	oldKey, _ := io.Read(filepath.Join(app.Root, "panel/storage/cert.key"))
+	if oldCert != setting.Cert || oldKey != setting.Key {
+		if r.taskRepo.HasRunningTask() {
+			return false, errors.New("后台任务正在运行，禁止修改部分设置，请稍后再试")
+		}
+		restartFlag = true
+	}
 	if err := io.Write(filepath.Join(app.Root, "panel/storage/cert.pem"), setting.Cert, 0644); err != nil {
 		return false, err
 	}
@@ -127,7 +186,7 @@ func (r *settingRepo) UpdatePanelSetting(ctx context.Context, setting *request.P
 		return false, err
 	}
 
-	restartFlag := false
+	// 面板主配置
 	config := new(types.PanelConfig)
 	cm := yaml.CommentMap{}
 	raw, err := io.Read("/usr/local/etc/panel/config.yml")
@@ -143,33 +202,28 @@ func (r *settingRepo) UpdatePanelSetting(ctx context.Context, setting *request.P
 	config.HTTP.Entrance = setting.Entrance
 	config.HTTP.TLS = setting.HTTPS
 
+	// 放行端口
+	fw := firewall.NewFirewall()
+	err = fw.Port(firewall.FireInfo{
+		PortStart: uint(config.HTTP.Port),
+		PortEnd:   uint(config.HTTP.Port),
+		Protocol:  "tcp",
+	}, firewall.OperationAdd)
+	if err != nil {
+		return false, err
+	}
+
 	encoded, err := yaml.MarshalWithOptions(config, yaml.WithComment(cm))
 	if err != nil {
 		return false, err
 	}
-	if err = io.Write("/usr/local/etc/panel/config.yml", string(encoded), 0644); err != nil {
-		return false, err
-	}
 	if raw != string(encoded) {
+		if r.taskRepo.HasRunningTask() {
+			return false, errors.New("后台任务正在运行，禁止修改部分设置，请稍后再试")
+		}
 		restartFlag = true
 	}
-
-	user := new(biz.User)
-	userID := cast.ToUint(ctx.Value("user_id"))
-	if err = app.Orm.Where("id = ?", userID).First(user).Error; err != nil {
-		return false, err
-	}
-
-	user.Username = setting.Username
-	user.Email = setting.Email
-	if setting.Password != "" {
-		value, err := hash.NewArgon2id().Make(setting.Password)
-		if err != nil {
-			return false, err
-		}
-		user.Password = value
-	}
-	if err = app.Orm.Save(user).Error; err != nil {
+	if err = io.Write("/usr/local/etc/panel/config.yml", string(encoded), 0644); err != nil {
 		return false, err
 	}
 
@@ -177,108 +231,128 @@ func (r *settingRepo) UpdatePanelSetting(ctx context.Context, setting *request.P
 }
 
 func (r *settingRepo) UpdatePanel(version, url, checksum string) error {
-	name := filepath.Base(url)
-	color.Greenln("目标版本: ", version)
-	color.Greenln("下载链接: ", url)
-	color.Greenln("文件名: ", name)
-
-	color.Greenln("前置检查...")
-	if io.Exists("/tmp/panel-storage.zip") {
-		return errors.New("检测到 /tmp 存在临时文件，可能是上次更新失败导致的，请排除后重试")
+	// 预先优化数据库
+	if err := app.Orm.Exec("VACUUM").Error; err != nil {
+		return err
+	}
+	if err := app.Orm.Exec("PRAGMA wal_checkpoint(TRUNCATE);").Error; err != nil {
+		return err
 	}
 
-	color.Greenln("备份面板数据...")
+	name := filepath.Base(url)
+	if app.IsCli {
+		color.Greenln(fmt.Sprintf("|-目标版本：%s", version))
+		color.Greenln(fmt.Sprintf("|-下载链接：%s", url))
+		color.Greenln(fmt.Sprintf("|-文件名：%s", name))
+	}
+
+	if app.IsCli {
+		color.Greenln("|-正在下载...")
+	}
+	if _, err := shell.Execf("wget -T 120 -t 3 -O /tmp/%s %s", name, url); err != nil {
+		return fmt.Errorf("下载失败：%w", err)
+	}
+	if _, err := shell.Execf("wget -T 20 -t 3 -O /tmp/%s %s", name+".sha256", checksum); err != nil {
+		return fmt.Errorf("下载失败：%w", err)
+	}
+	if !io.Exists(filepath.Join("/tmp", name)) || !io.Exists(filepath.Join("/tmp", name+".sha256")) {
+		return errors.New("下载文件检查失败")
+	}
+
+	if app.IsCli {
+		color.Greenln("|-校验下载文件...")
+	}
+	if check, err := shell.Execf("cd /tmp && sha256sum -c %s --ignore-missing", name+".sha256"); check != name+": OK" || err != nil {
+		return errors.New("下载文件校验失败")
+	}
+	if err := io.Remove(filepath.Join("/tmp", name+".sha256")); err != nil {
+		if app.IsCli {
+			color.Redln("|-清理校验文件失败：", err)
+		}
+		return fmt.Errorf("清理校验文件失败：%w", err)
+	}
+
+	if app.IsCli {
+		color.Greenln("|-前置检查...")
+	}
+	if io.Exists("/tmp/panel-storage.zip") {
+		return errors.New("检测到 /tmp 存在临时文件，可能是上次升级失败所致，请运行 panel-cli fix 修复后重试")
+	}
+
+	if app.IsCli {
+		color.Greenln("|-备份面板数据...")
+	}
 	// 备份面板
-	if err := io.Compress([]string{filepath.Join(app.Root, "panel")}, filepath.Join(app.Root, fmt.Sprintf("backup/panel/panel-%s.zip", time.Now().Format("20060102150405"))), io.Zip); err != nil {
-		color.Redln("备份面板失败：", err)
-		return err
+	backup := NewBackupRepo()
+	if err := backup.Create(biz.BackupTypePanel, ""); err != nil {
+		if app.IsCli {
+			color.Redln("|-备份面板失败：", err)
+		}
+		return fmt.Errorf("备份面板失败：%w", err)
 	}
 	if err := io.Compress([]string{filepath.Join(app.Root, "panel/storage")}, "/tmp/panel-storage.zip", io.Zip); err != nil {
-		color.Redln("备份面板数据失败：", err)
-		return err
+		if app.IsCli {
+			color.Redln("|-备份面板数据失败：", err)
+		}
+		return fmt.Errorf("备份面板数据失败：%w", err)
 	}
 	if !io.Exists("/tmp/panel-storage.zip") {
 		return errors.New("已备份面板数据检查失败")
 	}
-	color.Greenln("备份完成")
 
-	color.Greenln("清理旧版本...")
+	if app.IsCli {
+		color.Greenln("|-清理旧版本...")
+	}
 	if _, err := shell.Execf("rm -rf %s/panel/*", app.Root); err != nil {
-		color.Redln("清理旧版本失败：", err)
-		return err
+		return fmt.Errorf("清理旧版本失败：%w", err)
 	}
-	color.Greenln("清理完成")
 
-	color.Greenln("正在下载...")
-	if _, err := shell.Execf("wget -T 120 -t 3 -O %s/panel/%s %s", app.Root, name, url); err != nil {
-		color.Redln("下载失败：", err)
-		return err
+	if app.IsCli {
+		color.Greenln("|-解压新版本...")
 	}
-	if _, err := shell.Execf("wget -T 20 -t 3 -O %s/panel/%s %s", app.Root, name+".sha256", checksum); err != nil {
-		color.Redln("下载失败：", err)
-		return err
-	}
-	if !io.Exists(filepath.Join(app.Root, "panel", name)) || !io.Exists(filepath.Join(app.Root, "panel", name+".sha256")) {
-		return errors.New("下载文件检查失败")
-	}
-	color.Greenln("下载完成")
-
-	color.Greenln("校验下载文件...")
-	check, err := shell.Execf("cd %s/panel && sha256sum -c %s --ignore-missing", app.Root, name+".sha256")
-	if check != name+": OK" || err != nil {
-		return errors.New("下载文件校验失败")
-	}
-	if err = io.Remove(filepath.Join(app.Root, "panel", name+".sha256")); err != nil {
-		color.Redln("清理校验文件失败：", err)
-		return err
-	}
-	color.Greenln("文件校验完成")
-
-	color.Greenln("更新新版本...")
-	if _, err = shell.Execf("cd %s/panel && unzip -o %s && rm -rf %s", app.Root, name, name); err != nil {
-		color.Redln("更新失败：", err)
-		return err
+	if err := io.UnCompress(filepath.Join("/tmp", name), filepath.Join(app.Root, "panel"), io.Zip); err != nil {
+		return fmt.Errorf("解压失败：%w", err)
 	}
 	if !io.Exists(filepath.Join(app.Root, "panel", "web")) {
-		return errors.New("更新失败，可能是下载过程中出现了问题")
+		return errors.New("解压失败，缺失文件")
 	}
-	color.Greenln("更新完成")
 
-	color.Greenln("恢复面板数据...")
-	if err = io.UnCompress("/tmp/panel-storage.zip", filepath.Join(app.Root, "panel"), io.Zip); err != nil {
-		color.Redln("恢复面板数据失败：", err)
-		return err
+	if app.IsCli {
+		color.Greenln("|-恢复面板数据...")
+	}
+	if err := io.UnCompress("/tmp/panel-storage.zip", filepath.Join(app.Root, "panel"), io.Zip); err != nil {
+		return fmt.Errorf("恢复面板数据失败：%w", err)
 	}
 	if !io.Exists(filepath.Join(app.Root, "panel/storage/app.db")) {
 		return errors.New("恢复面板数据失败")
 	}
-	color.Greenln("恢复完成")
 
-	color.Greenln("运行升级后脚本...")
-	if _, err = shell.Execf("curl -fsLm 10 https://dl.cdn.haozi.net/panel/auto_update.sh | bash"); err != nil {
-		color.Redln("运行面板升级后脚本失败：", err)
-		return err
+	if app.IsCli {
+		color.Greenln("|-运行升级后脚本...")
 	}
-	if _, err = shell.Execf(`wget -O /etc/systemd/system/panel.service https://dl.cdn.haozi.net/panel/panel.service && sed -i "s|/www|%s|g" /etc/systemd/system/panel.service`, app.Root); err != nil {
-		color.Redln("下载面板服务文件失败：", err)
-		return err
+	if _, err := shell.Execf("curl -fsLm 10 https://dl.cdn.haozi.net/panel/auto_update.sh | bash"); err != nil {
+		return fmt.Errorf("运行面板升级后脚本失败：%w", err)
 	}
-	if _, err = shell.Execf("panel-cli setting write version %s", version); err != nil {
-		color.Redln("写入面板版本号失败：", err)
-		return err
+	if _, err := shell.Execf(`wget -O /etc/systemd/system/panel.service https://dl.cdn.haozi.net/panel/panel.service && sed -i "s|/www|%s|g" /etc/systemd/system/panel.service`, app.Root); err != nil {
+		return fmt.Errorf("下载面板服务文件失败：%w", err)
 	}
-	if err = io.Mv(filepath.Join(app.Root, "panel/cli"), "/usr/local/sbin/panel-cli"); err != nil {
-		color.Redln("移动面板命令行工具失败：", err)
-		return err
+	if _, err := shell.Execf("panel-cli setting write version %s", version); err != nil {
+		return fmt.Errorf("写入面板版本号失败：%w", err)
+	}
+	if err := io.Mv(filepath.Join(app.Root, "panel/cli"), "/usr/local/sbin/panel-cli"); err != nil {
+		return fmt.Errorf("移动面板命令行工具失败：%w", err)
 	}
 
-	color.Greenln("设置面板文件权限...")
+	if app.IsCli {
+		color.Greenln("|-设置关键文件权限...")
+	}
 	_ = io.Chmod("/usr/local/sbin/panel-cli", 0700)
 	_ = io.Chmod("/etc/systemd/system/panel.service", 0700)
 	_ = io.Chmod(filepath.Join(app.Root, "panel"), 0700)
-	color.Greenln("设置完成")
 
-	color.Greenln("升级完成")
+	if app.IsCli {
+		color.Greenln("|-升级完成")
+	}
 
 	_, _ = shell.Execf("systemctl daemon-reload")
 	_ = io.Remove("/tmp/panel-storage.zip")
@@ -287,3 +361,134 @@ func (r *settingRepo) UpdatePanel(version, url, checksum string) error {
 
 	return nil
 }
+
+func (r *settingRepo) FixPanel() error {
+	if app.IsCli {
+		color.Greenln("|-开始修复面板...")
+	}
+	// 检查关键文件是否正常
+	flag := false
+	if !io.Exists(filepath.Join(app.Root, "panel", "web")) {
+		flag = true
+	}
+	if !io.Exists(filepath.Join(app.Root, "panel", "storage", "app.db")) {
+		flag = true
+	}
+	if io.Exists("/tmp/panel-storage.zip") {
+		flag = true
+	}
+	if !flag {
+		return fmt.Errorf("文件正常无需修复，请运行 panel-cli update 升级面板")
+	}
+
+	// 再次确认是否需要修复
+	if io.Exists("/tmp/panel-storage.zip") {
+		// 文件齐全情况下只移除临时文件
+		if io.Exists(filepath.Join(app.Root, "panel", "web")) &&
+			io.Exists(filepath.Join(app.Root, "panel", "storage", "app.db")) &&
+			io.Exists("/usr/local/etc/panel/config.yml") {
+			if err := io.Remove("/tmp/panel-storage.zip"); err != nil {
+				return fmt.Errorf("清理临时文件失败：%w", err)
+			}
+			if app.IsCli {
+				color.Greenln("已清理临时文件，请运行 panel-cli update 升级面板")
+			}
+			return nil
+		}
+	}
+
+	// 从备份目录中找最新的备份文件
+	backup := NewBackupRepo()
+	list, err := backup.List(biz.BackupTypePanel)
+	if err != nil {
+		return err
+	}
+	slices.SortFunc(list, func(a *types.BackupFile, b *types.BackupFile) int {
+		return int(b.Time.Unix() - a.Time.Unix())
+	})
+	if len(list) == 0 {
+		return fmt.Errorf("未找到备份文件，无法自动修复")
+	}
+	latest := list[0]
+	if app.IsCli {
+		color.Greenln(fmt.Sprintf("|-使用备份文件：%s", latest.Name))
+	}
+
+	// 解压备份文件
+	if app.IsCli {
+		color.Greenln("|-解压备份文件...")
+	}
+	if err = io.Remove("/tmp/panel-fix"); err != nil {
+		return fmt.Errorf("清理临时目录失败：%w", err)
+	}
+	if err = io.UnCompress(latest.Path, "/tmp/panel-fix", io.Zip); err != nil {
+		return fmt.Errorf("解压备份文件失败：%w", err)
+	}
+
+	// 移动文件到对应位置
+	if app.IsCli {
+		color.Greenln("|-移动备份文件...")
+	}
+	if io.Exists(filepath.Join("/tmp/panel-fix", "panel")) && io.IsDir(filepath.Join("/tmp/panel-fix", "panel")) {
+		if err = io.Remove(filepath.Join(app.Root, "panel")); err != nil {
+			return fmt.Errorf("删除目录失败：%w", err)
+		}
+		if err = io.Mv(filepath.Join("/tmp/panel-fix", "panel"), filepath.Join(app.Root)); err != nil {
+			return fmt.Errorf("移动目录失败：%w", err)
+		}
+	}
+	if io.Exists(filepath.Join("/tmp/panel-fix", "config.yml")) {
+		if err = io.Mv(filepath.Join("/tmp/panel-fix", "config.yml"), "/usr/local/etc/panel/config.yml"); err != nil {
+			return fmt.Errorf("移动文件失败：%w", err)
+		}
+	}
+	if io.Exists(filepath.Join("/tmp/panel-fix", "panel-cli")) {
+		if err = io.Mv(filepath.Join("/tmp/panel-fix", "panel-cli"), "/usr/local/sbin/panel-cli"); err != nil {
+			return fmt.Errorf("移动文件失败：%w", err)
+		}
+	}
+
+	// tmp目录下如果有storage备份，则解压回去
+	if app.IsCli {
+		color.Greenln("|-恢复面板数据...")
+	}
+	if io.Exists("/tmp/panel-storage.zip") {
+		if err = io.UnCompress("/tmp/panel-storage.zip", filepath.Join(app.Root, "panel"), io.Zip); err != nil {
+			return fmt.Errorf("恢复面板数据失败：%w", err)
+		}
+		if err = io.Remove("/tmp/panel-storage.zip"); err != nil {
+			return fmt.Errorf("清理临时文件失败：%w", err)
+		}
+	}
+
+	// 下载服务文件
+	if !io.Exists("/etc/systemd/system/panel.service") {
+		if _, err = shell.Execf(`wget -O /etc/systemd/system/panel.service https://dl.cdn.haozi.net/panel/panel.service && sed -i "s|/www|%s|g" /etc/systemd/system/panel.service`, app.Root); err != nil {
+			return err
+		}
+	}
+
+	// 处理权限
+	if app.IsCli {
+		color.Greenln("|-设置关键文件权限...")
+	}
+	if err = io.Chmod("/usr/local/etc/panel/config.yml", 0600); err != nil {
+		return err
+	}
+	if err = io.Chmod("/etc/systemd/system/panel.service", 0700); err != nil {
+		return err
+	}
+	if err = io.Chmod("/usr/local/sbin/panel-cli", 0700); err != nil {
+		return err
+	}
+	if err = io.Chmod(filepath.Join(app.Root, "panel"), 0700); err != nil {
+		return err
+	}
+
+	if app.IsCli {
+		color.Greenln("|-修复完成")
+	}
+
+	tools.RestartPanel()
+	return nil
+}

internal/data/task.go

@@ -1,14 +1,22 @@
 package data
 
 import (
+	"sync"
+
+	"go.uber.org/zap"
+
 	"github.com/TheTNB/panel/internal/app"
 	"github.com/TheTNB/panel/internal/biz"
 	"github.com/TheTNB/panel/internal/queuejob"
 )
 
+var taskDispatchOnce sync.Once
+
 type taskRepo struct{}
 
 func NewTaskRepo() biz.TaskRepo {
+	task := &taskRepo{}
+	taskDispatchOnce.Do(task.DispatchWaiting)
 	return &taskRepo{}
 }
 
@@ -48,17 +56,24 @@ func (r *taskRepo) Push(task *biz.Task) error {
 	})
 }
 
-func (r *taskRepo) DispatchWaiting() error {
+func (r *taskRepo) DispatchWaiting() {
+	// cli下不处理
+	if app.IsCli {
+		return
+	}
+
 	var tasks []biz.Task
 	if err := app.Orm.Where("status = ?", biz.TaskStatusWaiting).Find(&tasks).Error; err != nil {
-		return err
+		app.Logger.Error("获取待处理任务失败", zap.Error(err))
+		return
 	}
 
 	for _, task := range tasks {
-		if err := r.Push(&task); err != nil {
-			return err
+		if err := app.Queue.Push(queuejob.NewProcessTask(r), []any{
+			task.ID,
+		}); err != nil {
+			app.Logger.Error("推送任务失败", zap.Error(err))
+			return
 		}
 	}
-
-	return nil
 }

internal/data/website.go

@@ -4,12 +4,9 @@ import (
 	"errors"
 	"fmt"
 	"path/filepath"
-	"regexp"
-	"slices"
-	"strconv"
 	"strings"
 
-	"github.com/spf13/cast"
+	"github.com/samber/lo"
 
 	"github.com/TheTNB/panel/internal/app"
 	"github.com/TheTNB/panel/internal/biz"
@@ -18,8 +15,9 @@ import (
 	"github.com/TheTNB/panel/pkg/cert"
 	"github.com/TheTNB/panel/pkg/db"
 	"github.com/TheTNB/panel/pkg/io"
+	"github.com/TheTNB/panel/pkg/nginx"
+	"github.com/TheTNB/panel/pkg/punycode"
 	"github.com/TheTNB/panel/pkg/shell"
-	"github.com/TheTNB/panel/pkg/str"
 	"github.com/TheTNB/panel/pkg/systemctl"
 	"github.com/TheTNB/panel/pkg/types"
 )
@@ -59,78 +57,84 @@ func (r *websiteRepo) Get(id uint) (*types.WebsiteSetting, error) {
 	if err := app.Orm.Where("id", id).First(website).Error; err != nil {
 		return nil, err
 	}
-
+	// 解析nginx配置
 	config, err := io.Read(filepath.Join(app.Root, "server/vhost", website.Name+".conf"))
 	if err != nil {
 		return nil, err
 	}
+	p, err := nginx.NewParser(config)
+	if err != nil {
+		return nil, err
+	}
 
 	setting := new(types.WebsiteSetting)
+	setting.ID = website.ID
 	setting.Name = website.Name
 	setting.Path = website.Path
-	setting.SSL = website.SSL
-	setting.PHP = website.PHP
+	setting.HTTPS = website.Https
+	setting.PHP = p.GetPHP()
 	setting.Raw = config
-
-	portStr := str.Cut(config, "# port标记位开始", "# port标记位结束")
-	matches := regexp.MustCompile(`listen\s+([^;]*);?`).FindAllStringSubmatch(portStr, -1)
-	for _, match := range matches {
-		if len(match) < 2 {
-			continue
-		}
-		// 跳过 ipv6
-		if strings.Contains(match[1], "[::]") {
-			continue
-		}
-
-		// 处理 443 ssl 之类的情况
-		ports := strings.Fields(match[1])
-		if len(ports) == 0 {
-			continue
-		}
-		if !slices.Contains(setting.Ports, cast.ToUint(ports[0])) {
-			setting.Ports = append(setting.Ports, cast.ToUint(ports[0]))
-		}
-		if len(ports) > 1 && ports[1] == "ssl" {
-			setting.SSLPorts = append(setting.SSLPorts, cast.ToUint(ports[0]))
-		} else if len(ports) > 1 && ports[1] == "quic" {
-			setting.QUICPorts = append(setting.QUICPorts, cast.ToUint(ports[0]))
-		}
+	// 监听地址
+	listens, err := p.GetListen()
+	if err != nil {
+		return nil, err
 	}
-	serverName := str.Cut(config, "# server_name标记位开始", "# server_name标记位结束")
-	match := regexp.MustCompile(`server_name\s+([^;]*);?`).FindStringSubmatch(serverName)
-	if len(match) > 1 {
-		setting.Domains = strings.Split(match[1], " ")
+	setting.Listens = lo.Map(
+		lo.UniqBy(listens, func(listen []string) string {
+			if len(listen) == 0 {
+				return ""
+			}
+			return listen[0]
+		}),
+		func(listen []string, _ int) types.WebsiteListen {
+			addr := listen[0]
+			grouped := lo.GroupBy(listens, func(listen []string) string {
+				if len(listen) == 0 {
+					return ""
+				}
+				return listen[0]
+			})[addr]
+			return types.WebsiteListen{
+				Address: addr,
+				HTTPS:   lo.SomeBy(grouped, func(listen []string) bool { return lo.Contains(listen, "ssl") }),
+				QUIC:    lo.SomeBy(grouped, func(listen []string) bool { return lo.Contains(listen, "quic") }),
+			}
+		},
+	)
+	// 域名
+	domains, err := p.GetServerName()
+	if err != nil {
+		return nil, err
 	}
-	root := str.Cut(config, "# root标记位开始", "# root标记位结束")
-	match = regexp.MustCompile(`root\s+([^;]*);?`).FindStringSubmatch(root)
-	if len(match) > 1 {
-		setting.Root = match[1]
+	domains, err = punycode.DecodeDomains(domains)
+	if err != nil {
+		return nil, err
 	}
-	index := str.Cut(config, "# index标记位开始", "# index标记位结束")
-	match = regexp.MustCompile(`index\s+([^;]*);?`).FindStringSubmatch(index)
-	if len(match) > 1 {
-		setting.Index = match[1]
-	}
-
+	setting.Domains = domains
+	// 运行目录
+	root, _ := p.GetRoot()
+	setting.Root = root
+	// 默认文档
+	index, _ := p.GetIndex()
+	setting.Index = index
+	// 防跨站
 	if io.Exists(filepath.Join(setting.Root, ".user.ini")) {
 		userIni, _ := io.Read(filepath.Join(setting.Root, ".user.ini"))
 		if strings.Contains(userIni, "open_basedir") {
 			setting.OpenBasedir = true
 		}
 	}
-
-	crt, _ := io.Read(filepath.Join(app.Root, "server/vhost/ssl", website.Name+".pem"))
-	setting.SSLCertificate = crt
-	key, _ := io.Read(filepath.Join(app.Root, "server/vhost/ssl", website.Name+".key"))
-	setting.SSLCertificateKey = key
-	if setting.SSL {
-		ssl := str.Cut(config, "# ssl标记位开始", "# ssl标记位结束")
-		setting.HTTPRedirect = strings.Contains(ssl, "# http重定向标记位")
-		setting.HSTS = strings.Contains(ssl, "# hsts标记位")
-		setting.OCSP = strings.Contains(ssl, "# ocsp标记位")
+	// HTTPS
+	if setting.HTTPS {
+		setting.HTTPRedirect = p.GetHTTPSRedirect()
+		setting.HSTS = p.GetHSTS()
+		setting.OCSP = p.GetOCSP()
 	}
-
+	// 证书
+	crt, _ := io.Read(filepath.Join(app.Root, "server/vhost/cert", website.Name+".pem"))
+	setting.SSLCertificate = crt
+	key, _ := io.Read(filepath.Join(app.Root, "server/vhost/cert", website.Name+".key"))
+	setting.SSLCertificateKey = key
 	// 解析证书信息
 	if decode, err := cert.ParseCert(crt); err == nil {
 		setting.SSLNotBefore = decode.NotBefore.Format("2006-01-02 15:04:05")
@@ -139,9 +143,10 @@ func (r *websiteRepo) Get(id uint) (*types.WebsiteSetting, error) {
 		setting.SSLOCSPServer = decode.OCSPServer
 		setting.SSLDNSNames = decode.DNSNames
 	}
-
+	// 伪静态
 	rewrite, _ := io.Read(filepath.Join(app.Root, "server/vhost/rewrite", website.Name+".conf"))
 	setting.Rewrite = rewrite
+	// 访问日志
 	log, _ := shell.Execf(`tail -n 100 '%s/wwwlogs/%s.log'`, app.Root, website.Name)
 	setting.Log = log
 
@@ -174,21 +179,59 @@ func (r *websiteRepo) List(page, limit uint) ([]*biz.Website, int64, error) {
 }
 
 func (r *websiteRepo) Create(req *request.WebsiteCreate) (*biz.Website, error) {
-	w := &biz.Website{
-		Name:   req.Name,
-		Status: true,
-		Path:   req.Path,
-		PHP:    req.PHP,
-		SSL:    false,
+	// 初始化nginx配置
+	p, err := nginx.NewParser()
+	if err != nil {
+		return nil, err
 	}
-	if err := app.Orm.Create(w).Error; err != nil {
+	// 监听地址
+	var listens [][]string
+	for _, listen := range req.Listens {
+		listens = append(listens, []string{listen})
+	}
+	if err = p.SetListen(listens); err != nil {
+		return nil, err
+	}
+	// 域名
+	domains, err := punycode.EncodeDomains(req.Domains)
+	if err != nil {
+		return nil, err
+	}
+	if err = p.SetServerName(domains); err != nil {
+		return nil, err
+	}
+	// 运行目录
+	if err = p.SetRoot(req.Path); err != nil {
+		return nil, err
+	}
+	// PHP
+	if err = p.SetPHP(req.PHP); err != nil {
+		return nil, err
+	}
+	// 伪静态和acme
+	includes, comments, err := p.GetIncludes()
+	if err != nil {
+		return nil, err
+	}
+	includes = append(includes, filepath.Join(app.Root, "server/vhost/rewrite", req.Name+".conf"))
+	includes = append(includes, filepath.Join(app.Root, "server/vhost/acme", req.Name+".conf"))
+	comments = append(comments, []string{"# 伪静态规则"})
+	comments = append(comments, []string{"# acme http-01"})
+	if err = p.SetIncludes(includes, comments); err != nil {
+		return nil, err
+	}
+	// 日志
+	if err = p.SetAccessLog(filepath.Join(app.Root, "wwwlogs", req.Name+".log")); err != nil {
+		return nil, err
+	}
+	if err = p.SetErrorLog(filepath.Join(app.Root, "wwwlogs", req.Name+".error.log")); err != nil {
 		return nil, err
 	}
 
-	if err := io.Mkdir(req.Path, 0755); err != nil {
+	// 初始化网站目录
+	if err = io.Mkdir(req.Path, 0755); err != nil {
 		return nil, err
 	}
-
 	index, err := embed.WebsiteFS.ReadFile(filepath.Join("website", "index.html"))
 	if err != nil {
 		return nil, fmt.Errorf("获取index模板文件失败: %w", err)
@@ -196,92 +239,16 @@ func (r *websiteRepo) Create(req *request.WebsiteCreate) (*biz.Website, error) {
 	if err = io.Write(filepath.Join(req.Path, "index.html"), string(index), 0644); err != nil {
 		return nil, err
 	}
-
 	notFound, err := embed.WebsiteFS.ReadFile(filepath.Join("website", "404.html"))
 	if err != nil {
 		return nil, fmt.Errorf("获取404模板文件失败: %w", err)
 	}
-	if err = io.Write(req.Path+"/404.html", string(notFound), 0644); err != nil {
+	if err = io.Write(filepath.Join(req.Path, "404.html"), string(notFound), 0644); err != nil {
 		return nil, err
 	}
 
-	portList := ""
-	domainList := ""
-	portUsed := make(map[uint]bool)
-	domainUsed := make(map[string]bool)
-
-	for i, port := range req.Ports {
-		if _, ok := portUsed[port]; !ok {
-			if i == len(req.Ports)-1 {
-				portList += "    listen " + cast.ToString(port) + ";\n"
-				portList += "    listen [::]:" + cast.ToString(port) + ";"
-			} else {
-				portList += "    listen " + cast.ToString(port) + ";\n"
-				portList += "    listen [::]:" + cast.ToString(port) + ";\n"
-			}
-			portUsed[port] = true
-		}
-	}
-	for _, domain := range req.Domains {
-		if _, ok := domainUsed[domain]; !ok {
-			domainList += " " + domain
-			domainUsed[domain] = true
-		}
-	}
-
-	nginxConf := fmt.Sprintf(`# 配置文件中的标记位请勿随意修改，改错将导致面板无法识别！
-# 有自定义配置需求的，请将自定义的配置写在各标记位下方。
-server
-{
-    # port标记位开始
-%s
-    # port标记位结束
-    # server_name标记位开始
-    server_name%s;
-    # server_name标记位结束
-    # index标记位开始
-    index index.php index.html;
-    # index标记位结束
-    # root标记位开始
-    root %s;
-    # root标记位结束
-
-    # ssl标记位开始
-    # ssl标记位结束
-
-    # php标记位开始
-    include enable-php-%d.conf;
-    # php标记位结束
-
-    # 错误页配置，可自行设置
-    error_page 404 /404.html;
-    #error_page 502 /502.html;
-
-    # acme证书签发配置，不可修改
-    include %s/server/vhost/acme/%s.conf;
-
-    # 伪静态规则引入，修改后将导致面板设置的伪静态规则失效
-    include %s/server/vhost/rewrite/%s.conf;
-
-    # 面板默认禁止访问部分敏感目录，可自行修改
-    location ~ ^/(\.user.ini|\.htaccess|\.git|\.svn)
-    {
-        return 404;
-    }
-    # 面板默认不记录静态资源的访问日志并开启1小时浏览器缓存，可自行修改
-    location ~ .*\.(js|css)$
-    {
-        expires 1h;
-        error_log /dev/null;
-        access_log /dev/null;
-    }
-
-    access_log %s/wwwlogs/%s.log;
-    error_log %s/wwwlogs/%s.log;
-}
-`, portList, domainList, req.Path, req.PHP, app.Root, req.Name, app.Root, req.Name, app.Root, req.Name, app.Root, req.Name)
-
-	if err = io.Write(filepath.Join(app.Root, "server/vhost", req.Name+".conf"), nginxConf, 0644); err != nil {
+	// 写nginx配置
+	if err = io.Write(filepath.Join(app.Root, "server/vhost", req.Name+".conf"), p.Dump(), 0644); err != nil {
 		return nil, err
 	}
 	if err = io.Write(filepath.Join(app.Root, "server/vhost/rewrite", req.Name+".conf"), "", 0644); err != nil {
@@ -290,13 +257,14 @@ server
 	if err = io.Write(filepath.Join(app.Root, "server/vhost/acme", req.Name+".conf"), "", 0644); err != nil {
 		return nil, err
 	}
-	if err = io.Write(filepath.Join(app.Root, "server/vhost/ssl", req.Name+".pem"), "", 0644); err != nil {
+	if err = io.Write(filepath.Join(app.Root, "server/vhost/cert", req.Name+".pem"), "", 0644); err != nil {
 		return nil, err
 	}
-	if err = io.Write(filepath.Join(app.Root, "server/vhost/ssl", req.Name+".key"), "", 0644); err != nil {
+	if err = io.Write(filepath.Join(app.Root, "server/vhost/cert", req.Name+".key"), "", 0644); err != nil {
 		return nil, err
 	}
 
+	// 设置目录权限
 	if err = io.Chmod(req.Path, 0755); err != nil {
 		return nil, err
 	}
@@ -304,11 +272,23 @@ server
 		return nil, err
 	}
 
+	// 创建面板网站
+	w := &biz.Website{
+		Name:   req.Name,
+		Status: true,
+		Path:   req.Path,
+		Https:  false,
+	}
+	if err = app.Orm.Create(w).Error; err != nil {
+		return nil, err
+	}
+
 	if err = systemctl.Reload("nginx"); err != nil {
 		_, err = shell.Execf("nginx -t")
 		return nil, err
 	}
 
+	// 创建数据库
 	rootPassword, err := r.settingRepo.Get(biz.SettingKeyMySQLRootPassword)
 	if err == nil && req.DB && req.DBType == "mysql" {
 		mysql, err := db.NewMySQL("root", rootPassword, "/tmp/mysql.sock", "unix")
@@ -343,17 +323,17 @@ func (r *websiteRepo) Update(req *request.WebsiteUpdate) error {
 	if err := app.Orm.Where("id", req.ID).First(website).Error; err != nil {
 		return err
 	}
-
 	if !website.Status {
 		return errors.New("网站已停用，请先启用")
 	}
 
-	// 原文
-	raw, err := io.Read(filepath.Join(app.Root, "server/vhost", website.Name+".conf"))
+	// 解析nginx配置
+	config, err := io.Read(filepath.Join(app.Root, "server/vhost", website.Name+".conf"))
 	if err != nil {
 		return err
 	}
-	if strings.TrimSpace(raw) != strings.TrimSpace(req.Raw) {
+	// 如果修改了原文，直接写入返回
+	if strings.TrimSpace(config) != strings.TrimSpace(req.Raw) {
 		if err = io.Write(filepath.Join(app.Root, "server/vhost", website.Name+".conf"), req.Raw, 0644); err != nil {
 			return err
 		}
@@ -361,188 +341,133 @@ func (r *websiteRepo) Update(req *request.WebsiteUpdate) error {
 			_, err = shell.Execf("nginx -t")
 			return err
 		}
-
 		return nil
 	}
 
-	// 目录
-	path := req.Path
-	if !io.Exists(path) {
+	// 初始化nginx配置
+	p, err := nginx.NewParser(config)
+	if err != nil {
+		return err
+	}
+	// 监听地址
+	var listens [][]string
+	for _, listen := range req.Listens {
+		if !listen.HTTPS && !listen.QUIC {
+			listens = append(listens, []string{listen.Address})
+		}
+		if listen.HTTPS {
+			listens = append(listens, []string{listen.Address, "ssl"})
+		}
+		if listen.QUIC {
+			listens = append(listens, []string{listen.Address, "quic"})
+		}
+	}
+	if err = p.SetListen(listens); err != nil {
+		return err
+	}
+	// 域名
+	domains, err := punycode.EncodeDomains(req.Domains)
+	if err != nil {
+		return err
+	}
+	if err = p.SetServerName(domains); err != nil {
+		return err
+	}
+	// 首页文件
+	if err = p.SetIndex(req.Index); err != nil {
+		return err
+	}
+	// 运行目录
+	if !io.Exists(req.Root) {
+		return errors.New("运行目录不存在")
+	}
+	if err = p.SetRoot(req.Root); err != nil {
+		return err
+	}
+	// 运行目录
+	if !io.Exists(req.Path) {
 		return errors.New("网站目录不存在")
 	}
-	website.Path = path
-
-	// 域名
-	domain := "server_name"
-	domains := req.Domains
-	for _, v := range domains {
-		if v == "" {
-			continue
+	website.Path = req.Path
+	// PHP
+	if err = p.SetPHP(req.PHP); err != nil {
+		return err
+	}
+	// HTTPS
+	certPath := filepath.Join(app.Root, "server/vhost/cert", website.Name+".pem")
+	keyPath := filepath.Join(app.Root, "server/vhost/cert", website.Name+".key")
+	if err = io.Write(certPath, req.SSLCertificate, 0644); err != nil {
+		return err
+	}
+	if err = io.Write(keyPath, req.SSLCertificateKey, 0644); err != nil {
+		return err
+	}
+	website.Https = req.HTTPS
+	if req.HTTPS {
+		if err = p.SetHTTPS(certPath, keyPath); err != nil {
+			return err
 		}
-		domain += " " + v
-	}
-	domain += ";"
-	domainConfigOld := str.Cut(raw, "# server_name标记位开始", "# server_name标记位结束")
-	if len(strings.TrimSpace(domainConfigOld)) == 0 {
-		return errors.New("配置文件中缺少server_name标记位")
-	}
-	raw = strings.Replace(raw, domainConfigOld, "\n    "+domain+"\n    ", -1)
-
-	// 端口
-	var portConf strings.Builder
-	ports := req.Ports
-	for _, port := range ports {
-		https := ""
-		quic := false
-		if slices.Contains(req.SSLPorts, port) {
-			https = " ssl"
-			if slices.Contains(req.QUICPorts, port) {
-				quic = true
-			}
+		if err = p.SetHTTPRedirect(req.HTTPRedirect); err != nil {
+			return err
+		}
+		if err = p.SetHSTS(req.HSTS); err != nil {
+			return err
+		}
+		if err = p.SetOCSP(req.OCSP); err != nil {
+			return err
 		}
 
-		portConf.WriteString(fmt.Sprintf("    listen %d%s;\n", port, https))
-		portConf.WriteString(fmt.Sprintf("    listen [::]:%d%s;\n", port, https))
-		if quic {
-			portConf.WriteString(fmt.Sprintf("    listen %d%s;\n", port, " quic"))
-			portConf.WriteString(fmt.Sprintf("    listen [::]:%d%s;\n", port, " quic"))
+	} else {
+		if err = p.ClearSetHTTPS(); err != nil {
+			return err
+		}
+		if err = p.SetHTTPRedirect(false); err != nil {
+			return err
+		}
+		if err = p.SetHSTS(false); err != nil {
+			return err
+		}
+		if err = p.SetOCSP(false); err != nil {
+			return err
 		}
 	}
-	portConf.WriteString("    ")
-	portConfNew := portConf.String()
-	portConfOld := str.Cut(raw, "# port标记位开始", "# port标记位结束")
-	if len(strings.TrimSpace(portConfOld)) == 0 {
-		return errors.New("配置文件中缺少port标记位")
-	}
-	raw = strings.Replace(raw, portConfOld, "\n"+portConfNew, -1)
-
-	// 运行目录
-	root := str.Cut(raw, "# root标记位开始", "# root标记位结束")
-	if len(strings.TrimSpace(root)) == 0 {
-		return errors.New("配置文件中缺少root标记位")
-	}
-	match := regexp.MustCompile(`root\s+(.+);`).FindStringSubmatch(root)
-	if len(match) != 2 {
-		return errors.New("配置文件中root标记位格式错误")
-	}
-	rootNew := strings.Replace(root, match[1], req.Root, -1)
-	raw = strings.Replace(raw, root, rootNew, -1)
-
-	// 默认文件
-	index := str.Cut(raw, "# index标记位开始", "# index标记位结束")
-	if len(strings.TrimSpace(index)) == 0 {
-		return errors.New("配置文件中缺少index标记位")
-	}
-	match = regexp.MustCompile(`index\s+(.+);`).FindStringSubmatch(index)
-	if len(match) != 2 {
-		return errors.New("配置文件中index标记位格式错误")
-	}
-	indexNew := strings.Replace(index, match[1], req.Index, -1)
-	raw = strings.Replace(raw, index, indexNew, -1)
-
 	// 防跨站
 	if !strings.HasSuffix(req.Root, "/") {
 		req.Root += "/"
 	}
+	userIni := filepath.Join(req.Root, ".user.ini")
 	if req.OpenBasedir {
-		if err = io.Write(req.Root+".user.ini", "open_basedir="+path+":/tmp/", 0644); err != nil {
+		_, _ = shell.Execf(`chattr -i '%s'`, userIni)
+		if err = io.Write(userIni, fmt.Sprintf("open_basedir=%s:/tmp/", req.Root), 0644); err != nil {
 			return err
 		}
+		_, _ = shell.Execf(`chattr +i '%s'`, userIni)
 	} else {
-		if io.Exists(req.Root + ".user.ini") {
-			if err = io.Remove(req.Root + ".user.ini"); err != nil {
+		if io.Exists(userIni) {
+			_, _ = shell.Execf(`chattr -i '%s'`, userIni)
+			if err = io.Remove(userIni); err != nil {
 				return err
 			}
 		}
 	}
 
-	// SSL
-	if err = io.Write(filepath.Join(app.Root, "server/vhost/ssl", website.Name+".pem"), req.SSLCertificate, 0644); err != nil {
-		return err
-	}
-	if err = io.Write(filepath.Join(app.Root, "server/vhost/ssl", website.Name+".key"), req.SSLCertificateKey, 0644); err != nil {
-		return err
-	}
-	website.SSL = req.SSL
-	if req.SSL {
-		if _, err = cert.ParseCert(req.SSLCertificate); err != nil {
-			return errors.New("TLS证书格式错误")
-		}
-		if _, err = cert.ParseKey(req.SSLCertificateKey); err != nil {
-			return errors.New("TLS私钥格式错误")
-		}
-		sslConfig := fmt.Sprintf(`# ssl标记位开始
-    ssl_certificate %s/server/vhost/ssl/%s.pem;
-    ssl_certificate_key %s/server/vhost/ssl/%s.key;
-    ssl_session_timeout 1d;
-    ssl_session_cache shared:SSL:10m;
-    ssl_protocols TLSv1.2 TLSv1.3;
-    ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384;
-    ssl_prefer_server_ciphers off;
-    ssl_early_data on;
-    `, app.Root, website.Name, app.Root, website.Name)
-		if req.HTTPRedirect {
-			sslConfig += `# http重定向标记位开始
-    if ($server_port !~ 443){
-        return 301 https://$host$request_uri;
-    }
-    error_page 497  https://$host$request_uri;
-    # http重定向标记位结束
-    `
-		}
-		if req.HSTS {
-			sslConfig += `# hsts标记位开始
-    add_header Strict-Transport-Security "max-age=63072000" always;
-    # hsts标记位结束
-    `
-		}
-		if req.OCSP {
-			sslConfig += `# ocsp标记位开始
-    ssl_stapling on;
-    ssl_stapling_verify on;
-    # ocsp标记位结束
-    `
-		}
-		sslConfigOld := str.Cut(raw, "# ssl标记位开始", "# ssl标记位结束")
-		if len(strings.TrimSpace(sslConfigOld)) != 0 {
-			raw = strings.Replace(raw, sslConfigOld, "", -1)
-		}
-		raw = strings.Replace(raw, "# ssl标记位开始", sslConfig, -1)
-	} else {
-		sslConfigOld := str.Cut(raw, "# ssl标记位开始", "# ssl标记位结束")
-		if len(strings.TrimSpace(sslConfigOld)) != 0 {
-			raw = strings.Replace(raw, sslConfigOld, "\n    ", -1)
-		}
-	}
-
-	if website.PHP != req.PHP {
-		website.PHP = req.PHP
-		phpConfigOld := str.Cut(raw, "# php标记位开始", "# php标记位结束")
-		phpConfig := `
-    include enable-php-` + strconv.Itoa(website.PHP) + `.conf;
-    `
-		if len(strings.TrimSpace(phpConfigOld)) != 0 {
-			raw = strings.Replace(raw, phpConfigOld, phpConfig, -1)
-		}
-	}
-
-	if err = app.Orm.Save(website).Error; err != nil {
-		return err
-	}
-
-	if err = io.Write(filepath.Join(app.Root, "server/vhost", website.Name+".conf"), raw, 0644); err != nil {
+	if err = io.Write(filepath.Join(app.Root, "server/vhost", website.Name+".conf"), p.Dump(), 0644); err != nil {
 		return err
 	}
 	if err = io.Write(filepath.Join(app.Root, "server/vhost/rewrite", website.Name+".conf"), req.Rewrite, 0644); err != nil {
 		return err
 	}
 
-	err = systemctl.Reload("nginx")
-	if err != nil {
-		_, err = shell.Execf("nginx -t")
+	if err = app.Orm.Save(website).Error; err != nil {
+		return err
 	}
 
-	return err
+	if err = systemctl.Reload("nginx"); err != nil {
+		_, err = shell.Execf("nginx -t")
+		return err
+	}
+
+	return nil
 }
 
 func (r *websiteRepo) Delete(req *request.WebsiteDelete) error {
@@ -550,20 +475,15 @@ func (r *websiteRepo) Delete(req *request.WebsiteDelete) error {
 	if err := app.Orm.Preload("Cert").Where("id", req.ID).First(website).Error; err != nil {
 		return err
 	}
-
 	if website.Cert != nil {
-		return errors.New("网站" + website.Name + "已绑定SSL证书，请先删除证书")
-	}
-
-	if err := app.Orm.Delete(website).Error; err != nil {
-		return err
+		return errors.New("网站" + website.Name + "已绑定证书，请先删除证书")
 	}
 
 	_ = io.Remove(filepath.Join(app.Root, "server/vhost", website.Name+".conf"))
 	_ = io.Remove(filepath.Join(app.Root, "server/vhost/rewrite", website.Name+".conf"))
 	_ = io.Remove(filepath.Join(app.Root, "server/vhost/acme", website.Name+".conf"))
-	_ = io.Remove(filepath.Join(app.Root, "server/vhost/ssl", website.Name+".pem"))
-	_ = io.Remove(filepath.Join(app.Root, "server/vhost/ssl", website.Name+".key"))
+	_ = io.Remove(filepath.Join(app.Root, "server/vhost/cert", website.Name+".pem"))
+	_ = io.Remove(filepath.Join(app.Root, "server/vhost/cert", website.Name+".key"))
 
 	if req.Path {
 		_ = io.Remove(website.Path)
@@ -583,12 +503,16 @@ func (r *websiteRepo) Delete(req *request.WebsiteDelete) error {
 		_, _ = shell.Execf(`echo "DROP USER IF EXISTS '%s';" | su - postgres -c "psql"`, website.Name)
 	}
 
-	err := systemctl.Reload("nginx")
-	if err != nil {
-		_, err = shell.Execf("nginx -t")
+	if err := app.Orm.Delete(website).Error; err != nil {
+		return err
 	}
 
-	return err
+	if err := systemctl.Reload("nginx"); err != nil {
+		_, err = shell.Execf("nginx -t")
+		return err
+	}
+
+	return nil
 }
 
 func (r *websiteRepo) ClearLog(id uint) error {
@@ -617,75 +541,52 @@ func (r *websiteRepo) ResetConfig(id uint) error {
 		return err
 	}
 
-	website.Status = true
-	website.SSL = false
-	if err := app.Orm.Save(website).Error; err != nil {
+	// 初始化nginx配置
+	p, err := nginx.NewParser()
+	if err != nil {
+		return err
+	}
+	// 运行目录
+	if err = p.SetRoot(website.Path); err != nil {
+		return err
+	}
+	// 伪静态
+	includes, comments, err := p.GetIncludes()
+	if err != nil {
+		return err
+	}
+	includes = append(includes, filepath.Join(app.Root, "server/vhost/rewrite", website.Name+".conf"))
+	includes = append(includes, filepath.Join(app.Root, "server/vhost/acme", website.Name+".conf"))
+	comments = append(comments, []string{"# 伪静态规则"})
+	comments = append(comments, []string{"# acme http-01"})
+	if err = p.SetIncludes(includes, comments); err != nil {
+		return err
+	}
+	// 日志
+	if err = p.SetAccessLog(filepath.Join(app.Root, "wwwlogs", website.Name+".log")); err != nil {
+		return err
+	}
+	if err = p.SetErrorLog(filepath.Join(app.Root, "wwwlogs", website.Name+".error.log")); err != nil {
 		return err
 	}
 
-	raw := fmt.Sprintf(`
-# 配置文件中的标记位请勿随意修改，改错将导致面板无法识别！
-# 有自定义配置需求的，请将自定义的配置写在各标记位下方。
-server
-{
-    # port标记位开始
-    listen 80;
-    # port标记位结束
-    # server_name标记位开始
-    server_name localhost;
-    # server_name标记位结束
-    # index标记位开始
-    index index.php index.html;
-    # index标记位结束
-    # root标记位开始
-    root %s;
-    # root标记位结束
-
-    # ssl标记位开始
-    # ssl标记位结束
-
-    # php标记位开始
-    include enable-php-%d.conf;
-    # php标记位结束
-
-    # 错误页配置，可自行设置
-    error_page 404 /404.html;
-    #error_page 502 /502.html;
-
-    # acme证书签发配置，不可修改
-    include %s/server/vhost/acme/%s.conf;
-
-    # 伪静态规则引入，修改后将导致面板设置的伪静态规则失效
-    include %s/server/vhost/rewrite/%s.conf;
-
-    # 面板默认禁止访问部分敏感目录，可自行修改
-    location ~ ^/(\.user.ini|\.htaccess|\.git|\.svn)
-    {
-        return 404;
-    }
-    # 面板默认不记录静态资源的访问日志并开启1小时浏览器缓存，可自行修改
-    location ~ .*\.(js|css)$
-    {
-        expires 1h;
-        error_log /dev/null;
-        access_log /dev/null;
-    }
-
-    access_log %s/wwwlogs/%s.log;
-    error_log %s/wwwlogs/%s.log;
-}
-
-`, website.Path, website.PHP, app.Root, website.Name, app.Root, website.Name, app.Root, website.Name, app.Root, website.Name)
-	if err := io.Write(filepath.Join(app.Root, "server/vhost", website.Name+".conf"), raw, 0644); err != nil {
+	if err = io.Write(filepath.Join(app.Root, "server/vhost", website.Name+".conf"), p.Dump(), 0644); err != nil {
 		return nil
 	}
-	if err := io.Write(filepath.Join(app.Root, "server/vhost/rewrite", website.Name+".conf"), "", 0644); err != nil {
+	if err = io.Write(filepath.Join(app.Root, "server/vhost/rewrite", website.Name+".conf"), "", 0644); err != nil {
 		return nil
 	}
-	if err := io.Write(filepath.Join(app.Root, "server/vhost/acme", website.Name+".conf"), "", 0644); err != nil {
-		return nil
+	if err = io.Write(filepath.Join(app.Root, "server/vhost/acme", website.Name+".conf"), "", 0644); err != nil {
+		return err
 	}
-	if err := systemctl.Reload("nginx"); err != nil {
+
+	website.Status = true
+	website.Https = false
+	if err = app.Orm.Save(website).Error; err != nil {
+		return err
+	}
+
+	if err = systemctl.Reload("nginx"); err != nil {
 		_, err = shell.Execf("nginx -t")
 		return err
 	}
@@ -699,43 +600,69 @@ func (r *websiteRepo) UpdateStatus(id uint, status bool) error {
 		return err
 	}
 
-	website.Status = status
-	if err := app.Orm.Save(website).Error; err != nil {
+	// 解析nginx配置
+	config, err := io.Read(filepath.Join(app.Root, "server/vhost", website.Name+".conf"))
+	if err != nil {
 		return err
 	}
-
-	raw, err := io.Read(filepath.Join(app.Root, "server/vhost", website.Name+".conf"))
+	p, err := nginx.NewParser(config)
 	if err != nil {
 		return err
 	}
 
-	// 运行目录
-	rootConfig := str.Cut(raw, "# root标记位开始\n", "# root标记位结束")
-	match := regexp.MustCompile(`root\s+(.+);`).FindStringSubmatch(rootConfig)
-	if len(match) == 2 {
-		if website.Status {
-			root := regexp.MustCompile(`# root\s+(.+);`).FindStringSubmatch(rootConfig)
-			raw = strings.ReplaceAll(raw, rootConfig, fmt.Sprintf("    root %s;\n    ", root[1]))
-		} else {
-			raw = strings.ReplaceAll(raw, rootConfig, fmt.Sprintf("    root %s/server/nginx/html;\n    # root %s;\n    ", app.Root, match[1]))
-		}
-	}
-
-	// 默认文件
-	indexConfig := str.Cut(raw, "# index标记位开始\n", "# index标记位结束")
-	match = regexp.MustCompile(`index\s+(.+);`).FindStringSubmatch(indexConfig)
-	if len(match) == 2 {
-		if website.Status {
-			index := regexp.MustCompile(`# index\s+(.+);`).FindStringSubmatch(indexConfig)
-			raw = strings.ReplaceAll(raw, indexConfig, "    index "+index[1]+";\n    ")
-		} else {
-			raw = strings.ReplaceAll(raw, indexConfig, "    index stop.html;\n    # index "+match[1]+";\n    ")
-		}
-	}
-
-	if err = io.Write(filepath.Join(app.Root, "server/vhost", website.Name+".conf"), raw, 0644); err != nil {
+	// 取运行目录和默认文档
+	root, rootComment, err := p.GetRootWithComment()
+	if err != nil {
 		return err
 	}
+	index, indexComment, err := p.GetIndexWithComment()
+	if err != nil {
+		return err
+	}
+	indexStr := strings.Join(index, " ")
+
+	if status {
+		if len(rootComment) == 0 {
+			return fmt.Errorf("未找到运行目录注释")
+		}
+		if len(rootComment) != 1 {
+			return fmt.Errorf("运行目录注释数量不正确，预期1个，实际%d个", len(rootComment))
+		}
+		rootComment[0] = strings.TrimPrefix(rootComment[0], "# ")
+		if !io.Exists(rootComment[0]) {
+			return fmt.Errorf("运行目录不存在")
+		}
+		if err = p.SetRoot(rootComment[0]); err != nil {
+			return err
+		}
+		if len(indexComment) == 0 {
+			return fmt.Errorf("未找到默认文档注释")
+		}
+		if len(indexComment) != 1 {
+			return fmt.Errorf("默认文档注释数量不正确，预期1个，实际%d个", len(indexComment))
+		}
+		indexComment[0] = strings.TrimPrefix(indexComment[0], "# ")
+		if err = p.SetIndex(strings.Fields(indexComment[0])); err != nil {
+			return err
+		}
+	} else {
+		if err = p.SetRootWithComment(filepath.Join(app.Root, "server/nginx/html"), []string{"# " + root}); err != nil {
+			return err
+		}
+		if err = p.SetIndexWithComment([]string{"stop.html"}, []string{"# " + indexStr}); err != nil {
+			return err
+		}
+	}
+
+	if err = io.Write(filepath.Join(app.Root, "server/vhost", website.Name+".conf"), p.Dump(), 0644); err != nil {
+		return err
+	}
+
+	website.Status = status
+	if err = app.Orm.Save(website).Error; err != nil {
+		return err
+	}
+
 	if err = systemctl.Reload("nginx"); err != nil {
 		_, err = shell.Execf("nginx -t")
 		return err

internal/http/middleware/status.go

@@ -5,35 +5,35 @@ import (
 
 	"github.com/go-rat/chix"
 
-	"github.com/TheTNB/panel/pkg/types"
+	"github.com/TheTNB/panel/internal/app"
 )
 
 // Status 检查程序状态
 func Status(next http.Handler) http.Handler {
 	return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
-		switch types.Status {
-		case types.StatusUpgrade:
+		switch app.Status {
+		case app.StatusUpgrade:
 			render := chix.NewRender(w)
 			render.Status(http.StatusServiceUnavailable)
 			render.JSON(chix.M{
 				"message": "面板升级中，请稍后刷新",
 			})
 			return
-		case types.StatusMaintain:
+		case app.StatusMaintain:
 			render := chix.NewRender(w)
 			render.Status(http.StatusServiceUnavailable)
 			render.JSON(chix.M{
 				"message": "面板正在运行维护任务，请稍后刷新",
 			})
 			return
-		case types.StatusClosed:
+		case app.StatusClosed:
 			render := chix.NewRender(w)
 			render.Status(http.StatusForbidden)
 			render.JSON(chix.M{
 				"message": "面板已关闭",
 			})
 			return
-		case types.StatusFailed:
+		case app.StatusFailed:
 			render := chix.NewRender(w)
 			render.Status(http.StatusInternalServerError)
 			render.JSON(chix.M{

internal/http/request/app.go

@@ -1,15 +1,15 @@
 package request
 
 type App struct {
-	Slug    string `json:"slug" form:"slug"`
-	Channel string `json:"channel" form:"channel"`
+	Slug    string `json:"slug" form:"slug" validate:"required,not_exists=apps slug"`
+	Channel string `json:"channel" form:"channel" validate:"required"`
 }
 
 type AppSlug struct {
-	Slug string `json:"slug" form:"slug"`
+	Slug string `json:"slug" form:"slug" validate:"required,exists=apps slug"`
 }
 
 type AppUpdateShow struct {
-	Slug string `json:"slug" form:"slug"`
+	Slug string `json:"slug" form:"slug" validate:"required,exists=apps slug"`
 	Show bool   `json:"show" form:"show"`
 }

internal/http/request/backup.go

@@ -0,0 +1,22 @@
+package request
+
+type BackupList struct {
+	Type string `json:"type" form:"type" validate:"required,oneof=path website mysql postgres redis panel"`
+}
+
+type BackupCreate struct {
+	Type   string `json:"type" form:"type" validate:"required,oneof=website mysql postgres redis panel"`
+	Target string `json:"target" form:"target" validate:"required"`
+	Path   string `json:"path" form:"path"`
+}
+
+type BackupFile struct {
+	Type string `json:"type" form:"type" validate:"required,oneof=website mysql postgres redis panel"`
+	File string `json:"file" form:"file" validate:"required"`
+}
+
+type BackupRestore struct {
+	Type   string `json:"type" form:"type" validate:"required,oneof=website mysql postgres redis panel"`
+	File   string `json:"file" form:"file" validate:"required"`
+	Target string `json:"target" form:"target" validate:"required"`
+}

internal/http/request/cert.go

@@ -1,8 +1,8 @@
 package request
 
 type CertCreate struct {
-	Type      string   `form:"type" json:"type"`
-	Domains   []string `form:"domains" json:"domains"`
+	Type      string   `form:"type" json:"type" validate:"required"`
+	Domains   []string `form:"domains" json:"domains" validate:"min=1,dive,required"`
 	AutoRenew bool     `form:"auto_renew" json:"auto_renew"`
 	AccountID uint     `form:"account_id" json:"account_id"`
 	DNSID     uint     `form:"dns_id" json:"dns_id"`
@@ -10,9 +10,9 @@ type CertCreate struct {
 }
 
 type CertUpdate struct {
-	ID        uint     `form:"id" json:"id"`
-	Type      string   `form:"type" json:"type"`
-	Domains   []string `form:"domains" json:"domains"`
+	ID        uint     `form:"id" json:"id" validate:"required,exists=certs id"`
+	Type      string   `form:"type" json:"type" validate:"required"`
+	Domains   []string `form:"domains" json:"domains" validate:"min=1,dive,required"`
 	AutoRenew bool     `form:"auto_renew" json:"auto_renew"`
 	AccountID uint     `form:"account_id" json:"account_id"`
 	DNSID     uint     `form:"dns_id" json:"dns_id"`
@@ -20,6 +20,6 @@ type CertUpdate struct {
 }
 
 type CertDeploy struct {
-	ID        uint `form:"id" json:"id"`
-	WebsiteID uint `form:"website_id" json:"website_id"`
+	ID        uint `form:"id" json:"id" validate:"required,exists=certs id"`
+	WebsiteID uint `form:"website_id" json:"website_id" validate:"required"`
 }

internal/http/request/cert_account.go

@@ -1,18 +1,18 @@
 package request
 
 type CertAccountCreate struct {
-	CA          string `form:"ca" json:"ca"`
-	Email       string `form:"email" json:"email"`
+	CA          string `form:"ca" json:"ca" validate:"required"`
+	Email       string `form:"email" json:"email" validate:"required"`
 	Kid         string `form:"kid" json:"kid"`
 	HmacEncoded string `form:"hmac_encoded" json:"hmac_encoded"`
-	KeyType     string `form:"key_type" json:"key_type"`
+	KeyType     string `form:"key_type" json:"key_type" validate:"required"`
 }
 
 type CertAccountUpdate struct {
-	ID          uint   `form:"id" json:"id"`
-	CA          string `form:"ca" json:"ca"`
-	Email       string `form:"email" json:"email"`
+	ID          uint   `form:"id" json:"id" validate:"required,exists=cert_accounts id"`
+	CA          string `form:"ca" json:"ca" validate:"required"`
+	Email       string `form:"email" json:"email" validate:"required"`
 	Kid         string `form:"kid" json:"kid"`
 	HmacEncoded string `form:"hmac_encoded" json:"hmac_encoded"`
-	KeyType     string `form:"key_type" json:"key_type"`
+	KeyType     string `form:"key_type" json:"key_type" validate:"required"`
 }

internal/http/request/cert_dns.go

@@ -3,14 +3,14 @@ package request
 import "github.com/TheTNB/panel/pkg/acme"
 
 type CertDNSCreate struct {
-	Type string        `form:"type" json:"type"`
-	Name string        `form:"name" json:"name"`
+	Type string        `form:"type" json:"type" validate:"required"`
+	Name string        `form:"name" json:"name" validate:"required"`
 	Data acme.DNSParam `form:"data" json:"data"`
 }
 
 type CertDNSUpdate struct {
-	ID   uint          `form:"id" json:"id"`
-	Type string        `form:"type" json:"type"`
-	Name string        `form:"name" json:"name"`
+	ID   uint          `form:"id" json:"id" validate:"required,exists=cert_dns id"`
+	Type string        `form:"type" json:"type" validate:"required"`
+	Name string        `form:"name" json:"name" validate:"required"`
 	Data acme.DNSParam `form:"data" json:"data"`
 }

internal/http/request/container.go

@@ -3,17 +3,17 @@ package request
 import "github.com/TheTNB/panel/pkg/types"
 
 type ContainerID struct {
-	ID string `json:"id" form:"id"`
+	ID string `json:"id" form:"id" validate:"required"`
 }
 
 type ContainerRename struct {
-	ID   string `form:"id" json:"id"`
-	Name string `form:"name" json:"name"`
+	ID   string `form:"id" json:"id" validate:"required"`
+	Name string `form:"name" json:"name" validate:"required"`
 }
 
 type ContainerCreate struct {
-	Name            string                  `form:"name" json:"name"`
-	Image           string                  `form:"image" json:"image"`
+	Name            string                  `form:"name" json:"name" validate:"required"`
+	Image           string                  `form:"image" json:"image" validate:"required"`
 	Ports           []types.ContainerPort   `form:"ports" json:"ports"`
 	Network         string                  `form:"network" json:"network"`
 	Volumes         []types.ContainerVolume `form:"volumes" json:"volumes"`

internal/http/request/container_image.go

@@ -5,7 +5,7 @@ type ContainerImageID struct {
 }
 
 type ContainerImagePull struct {
-	Name     string `form:"name" json:"name"`
+	Name     string `form:"name" json:"name" validate:"required"`
 	Auth     bool   `form:"auth" json:"auth"`
 	Username string `form:"username" json:"username"`
 	Password string `form:"password" json:"password"`

internal/http/request/container_network.go

@@ -3,11 +3,11 @@ package request
 import "github.com/TheTNB/panel/pkg/types"
 
 type ContainerNetworkID struct {
-	ID string `json:"id" form:"id"`
+	ID string `json:"id" form:"id" validate:"required"`
 }
 
 type ContainerNetworkCreate struct {
-	Name    string                 `form:"name" json:"name"`
+	Name    string                 `form:"name" json:"name" validate:"required"`
 	Driver  string                 `form:"driver" json:"driver"`
 	Ipv4    types.ContainerNetwork `form:"ipv4" json:"ipv4"`
 	Ipv6    types.ContainerNetwork `form:"ipv6" json:"ipv6"`
@@ -16,6 +16,6 @@ type ContainerNetworkCreate struct {
 }
 
 type ContainerNetworkConnect struct {
-	Network   string `form:"network" json:"network"`
-	Container string `form:"container" json:"container"`
+	Network   string `form:"network" json:"network" validate:"required"`
+	Container string `form:"container" json:"container" validate:"required"`
 }

internal/http/request/container_volume.go

@@ -3,11 +3,11 @@ package request
 import "github.com/TheTNB/panel/pkg/types"
 
 type ContainerVolumeID struct {
-	ID string `json:"id" form:"id"`
+	ID string `json:"id" form:"id" validate:"required"`
 }
 
 type ContainerVolumeCreate struct {
-	Name    string     `form:"name" json:"name"`
+	Name    string     `form:"name" json:"name" validate:"required"`
 	Driver  string     `form:"driver" json:"driver"`
 	Labels  []types.KV `form:"labels" json:"labels"`
 	Options []types.KV `form:"options" json:"options"`

internal/http/request/cron.go

@@ -1,24 +1,24 @@
 package request
 
 type CronCreate struct {
-	Name       string `form:"name" json:"name"`
-	Type       string `form:"type" json:"type"`
-	Time       string `form:"time" json:"time"`
+	Name       string `form:"name" json:"name" validate:"required,not_exists=crons name"`
+	Type       string `form:"type" json:"type" validate:"required"`
+	Time       string `form:"time" json:"time" validate:"required,cron"`
 	Script     string `form:"script" json:"script"`
-	BackupType string `form:"backup_type" json:"backup_type"`
+	BackupType string `form:"backup_type" json:"backup_type" validate:"required"`
 	BackupPath string `form:"backup_path" json:"backup_path"`
-	Target     string `form:"target" json:"target"`
-	Save       int    `form:"save" json:"save"`
+	Target     string `form:"target" json:"target" validate:"required"`
+	Save       int    `form:"save" json:"save" validate:"required"`
 }
 
 type CronUpdate struct {
-	ID     uint   `form:"id" json:"id"`
-	Name   string `form:"name" json:"name"`
-	Time   string `form:"time" json:"time"`
-	Script string `form:"script" json:"script"`
+	ID     uint   `form:"id" json:"id" validate:"required,exists=crons id"`
+	Name   string `form:"name" json:"name" validate:"required"`
+	Time   string `form:"time" json:"time" validate:"required,cron"`
+	Script string `form:"script" json:"script" validate:"required"`
 }
 
 type CronStatus struct {
-	ID     uint `form:"id" json:"id"`
+	ID     uint `form:"id" json:"id" validate:"required,exists=crons id"`
 	Status bool `form:"status" json:"status"`
 }

internal/http/request/dashboard.go

@@ -0,0 +1,6 @@
+package request
+
+type DashboardCurrent struct {
+	Nets  []string `json:"nets" form:"nets"`
+	Disks []string `json:"disks" form:"disks"`
+}

internal/http/request/file.go

@@ -1,54 +1,49 @@
 package request
 
 type FilePath struct {
-	Path string `json:"path" form:"path"`
+	Path string `json:"path" form:"path" validate:"required"`
 }
 
 type FileCreate struct {
 	Dir  bool   `json:"dir" form:"dir"`
-	Path string `json:"path" form:"path"`
+	Path string `json:"path" form:"path" validate:"required"`
 }
 
 type FileSave struct {
-	Path    string `form:"path" json:"path"`
-	Content string `form:"content" json:"content"`
-}
-
-type FileUpload struct {
-	Path string `json:"path" form:"path"`
-	File []byte `json:"file" form:"file"`
+	Path    string `form:"path" json:"path" validate:"required"`
+	Content string `form:"content" json:"content" validate:"required"`
 }
 
 type FileMove struct {
-	Source string `form:"source" json:"source"`
-	Target string `form:"target" json:"target"`
+	Source string `form:"source" json:"source" validate:"required"`
+	Target string `form:"target" json:"target" validate:"required"`
 	Force  bool   `form:"force" json:"force"`
 }
 
 type FileCopy struct {
-	Source string `form:"source" json:"source"`
-	Target string `form:"target" json:"target"`
+	Source string `form:"source" json:"source" validate:"required"`
+	Target string `form:"target" json:"target" validate:"required"`
 	Force  bool   `form:"force" json:"force"`
 }
 
 type FilePermission struct {
-	Path  string `form:"path" json:"path"`
-	Mode  string `form:"mode" json:"mode"`
-	Owner string `form:"owner" json:"owner"`
-	Group string `form:"group" json:"group"`
+	Path  string `form:"path" json:"path" validate:"required"`
+	Mode  string `form:"mode" json:"mode" validate:"required"`
+	Owner string `form:"owner" json:"owner" validate:"required"`
+	Group string `form:"group" json:"group" validate:"required"`
 }
 
 type FileCompress struct {
-	Paths []string `form:"paths" json:"paths"`
-	File  string   `form:"file" json:"file"`
+	Paths []string `form:"paths" json:"paths" validate:"min=1,dive,required"`
+	File  string   `form:"file" json:"file" validate:"required"`
 }
 
 type FileUnCompress struct {
-	File string `form:"file" json:"file"`
-	Path string `form:"path" json:"path"`
+	File string `form:"file" json:"file" validate:"required"`
+	Path string `form:"path" json:"path" validate:"required"`
 }
 
 type FileSearch struct {
-	Path    string `form:"path" json:"path"`
-	KeyWord string `form:"keyword" json:"keyword"`
+	Path    string `form:"path" json:"path" validate:"required"`
+	KeyWord string `form:"keyword" json:"keyword" validate:"required"`
 }

internal/http/request/firewall.go

@@ -4,7 +4,12 @@ type FirewallStatus struct {
 	Status bool `json:"status" form:"status"`
 }
 
-type FirewallCreateRule struct {
-	Port     uint   `json:"port"`
-	Protocol string `json:"protocol"`
+type FirewallRule struct {
+	Family    string `json:"family" validate:"required,oneof=ipv4 ipv6"`
+	PortStart uint   `json:"port_start" validate:"required,gte=1,lte=65535"`
+	PortEnd   uint   `json:"port_end" validate:"required,gte=1,lte=65535"`
+	Protocol  string `json:"protocol" validate:"min=1,oneof=tcp udp tcp/udp"`
+	Address   string `json:"address"`
+	Strategy  string `json:"strategy" validate:"required,oneof=accept drop reject"`
+	Direction string `json:"direction"`
 }

internal/http/request/safe.go

@@ -1,7 +1,7 @@
 package request
 
 type SafeUpdateSSH struct {
-	Port   uint `json:"port" form:"port"`
+	Port   uint `json:"port" form:"port"  validate:"required,number,gte=1,lte=65535"`
 	Status bool `json:"status" form:"status"`
 }
 

internal/http/request/setting.go

@@ -1,16 +1,17 @@
 package request
 
 type PanelSetting struct {
-	Name        string `json:"name"`
-	Locale      string `json:"locale"`
-	Entrance    string `json:"entrance"`
-	WebsitePath string `json:"website_path"`
-	BackupPath  string `json:"backup_path"`
-	Username    string `json:"username"`
+	Name        string `json:"name" validate:"required"`
+	Locale      string `json:"locale" validate:"required"`
+	Entrance    string `json:"entrance" validate:"required"`
+	OfflineMode bool   `json:"offline_mode"`
+	WebsitePath string `json:"website_path" validate:"required"`
+	BackupPath  string `json:"backup_path" validate:"required"`
+	Username    string `json:"username" validate:"required"`
 	Password    string `json:"password"`
-	Email       string `json:"email"`
-	Port        int    `json:"port"`
+	Email       string `json:"email" validate:"required"`
+	Port        int    `json:"port" validate:"required,number,gte=1,lte=65535"`
 	HTTPS       bool   `json:"https"`
-	Cert        string `json:"cert"`
-	Key         string `json:"key"`
+	Cert        string `json:"cert" validate:"required"`
+	Key         string `json:"key" validate:"required"`
 }

internal/http/request/ssh.go

@@ -1,8 +1,8 @@
 package request
 
 type SSHUpdateInfo struct {
-	Host     string `json:"host" form:"host"`
-	Port     int    `json:"port" form:"port"`
-	User     string `json:"user" form:"user"`
-	Password string `json:"password" form:"password"`
+	Host     string `json:"host" form:"host" validate:"required"`
+	Port     int    `json:"port" form:"port" validate:"required,number,gte=1,lte=65535"`
+	User     string `json:"user" form:"user" validate:"required"`
+	Password string `json:"password" form:"password" validate:"required"`
 }

internal/http/request/systemctl.go

@@ -1,5 +1,5 @@
 package request
 
 type SystemctlService struct {
-	Service string `json:"service"`
+	Service string `json:"service" validate:"required"`
 }

internal/http/request/user.go

@@ -4,11 +4,3 @@ type UserLogin struct {
 	Username string `json:"username" form:"username" validate:"required,min=3,max=255"`
 	Password string `json:"password" form:"password" validate:"required,min=6,max=255"`
 }
-
-type UserID struct {
-	ID uint `uri:"id" validate:"required,number"`
-}
-
-type AddUser struct {
-	Name string `json:"name" form:"name" validate:"required,min=3,max=255" comment:"用户名"`
-}

internal/http/request/website.go

@@ -1,16 +1,18 @@
 package request
 
+import "github.com/TheTNB/panel/pkg/types"
+
 type WebsiteDefaultConfig struct {
-	Index string `json:"index" form:"index"`
-	Stop  string `json:"stop" form:"stop"`
+	Index string `json:"index" form:"index" validate:"required"`
+	Stop  string `json:"stop" form:"stop" validate:"required"`
 }
 
 type WebsiteCreate struct {
-	Name       string   `form:"name" json:"name"`
-	Domains    []string `form:"domains" json:"domains"`
-	Ports      []uint   `form:"ports" json:"ports"`
+	Name       string   `form:"name" json:"name" validate:"required,not_exists=websites name"`
+	Listens    []string `form:"listens" json:"listens" validate:"min=1,dive,required"`
+	Domains    []string `form:"domains" json:"domains" validate:"min=1,dive,required"`
 	Path       string   `form:"path" json:"path"`
-	PHP        int      `form:"php" json:"php"`
+	PHP        int      `form:"php" json:"php" validate:"number,gte=0"`
 	DB         bool     `form:"db" json:"db"`
 	DBType     string   `form:"db_type" json:"db_type"`
 	DBName     string   `form:"db_name" json:"db_name"`
@@ -19,38 +21,36 @@ type WebsiteCreate struct {
 }
 
 type WebsiteDelete struct {
-	ID   uint `form:"id" json:"id"`
+	ID   uint `form:"id" json:"id" validate:"required,exists=websites id"`
 	Path bool `form:"path" json:"path"`
 	DB   bool `form:"db" json:"db"`
 }
 
 type WebsiteUpdate struct {
-	ID                uint     `form:"id" json:"id"`
-	Domains           []string `form:"domains" json:"domains"`
-	Ports             []uint   `form:"ports" json:"ports"`
-	SSLPorts          []uint   `form:"ssl_ports" json:"ssl_ports"`
-	QUICPorts         []uint   `form:"quic_ports" json:"quic_ports"`
-	OCSP              bool     `form:"ocsp" json:"ocsp"`
-	HSTS              bool     `form:"hsts" json:"hsts"`
-	SSL               bool     `form:"ssl" json:"ssl"`
-	HTTPRedirect      bool     `form:"http_redirect" json:"http_redirect"`
-	OpenBasedir       bool     `form:"open_basedir" json:"open_basedir"`
-	Index             string   `form:"index" json:"index"`
-	Path              string   `form:"path" json:"path"`
-	Root              string   `form:"root" json:"root"`
-	Raw               string   `form:"raw" json:"raw"`
-	Rewrite           string   `form:"rewrite" json:"rewrite"`
-	PHP               int      `form:"php" json:"php"`
-	SSLCertificate    string   `form:"ssl_certificate" json:"ssl_certificate"`
-	SSLCertificateKey string   `form:"ssl_certificate_key" json:"ssl_certificate_key"`
+	ID                uint                  `form:"id" json:"id" validate:"required,exists=websites id"`
+	Listens           []types.WebsiteListen `form:"listens" json:"listens" validate:"min=1"`
+	Domains           []string              `form:"domains" json:"domains" validate:"min=1,dive,required"`
+	HTTPS             bool                  `form:"https" json:"https"`
+	OCSP              bool                  `form:"ocsp" json:"ocsp"`
+	HSTS              bool                  `form:"hsts" json:"hsts"`
+	HTTPRedirect      bool                  `form:"http_redirect" json:"http_redirect"`
+	OpenBasedir       bool                  `form:"open_basedir" json:"open_basedir"`
+	Index             []string              `form:"index" json:"index" validate:"min=1,dive,required"`
+	Path              string                `form:"path" json:"path" validate:"required"` // 网站目录
+	Root              string                `form:"root" json:"root" validate:"required"` // 运行目录
+	Raw               string                `form:"raw" json:"raw"`
+	Rewrite           string                `form:"rewrite" json:"rewrite"`
+	PHP               int                   `form:"php" json:"php"`
+	SSLCertificate    string                `form:"ssl_certificate" json:"ssl_certificate" validate:"required_if=HTTPS true"`
+	SSLCertificateKey string                `form:"ssl_certificate_key" json:"ssl_certificate_key" validate:"required_if=HTTPS true"`
 }
 
 type WebsiteUpdateRemark struct {
-	ID     uint   `form:"id" json:"id"`
+	ID     uint   `form:"id" json:"id" validate:"required,exists=websites id"`
 	Remark string `form:"remark" json:"remark"`
 }
 
 type WebsiteUpdateStatus struct {
-	ID     uint `json:"id" form:"id"`
+	ID     uint `json:"id" form:"id" validate:"required,exists=websites id"`
 	Status bool `json:"status" form:"status"`
 }

internal/http/rule/exists.go

@@ -0,0 +1,42 @@
+package rule
+
+import (
+	"fmt"
+	"strings"
+
+	"github.com/go-playground/validator/v10"
+	"gorm.io/gorm"
+)
+
+type Exists struct {
+	DB *gorm.DB
+}
+
+func NewExists(db *gorm.DB) *Exists {
+	return &Exists{DB: db}
+}
+
+// Exists 格式 `exists=categories id other_field`
+func (r *Exists) Exists(fl validator.FieldLevel) bool {
+	requestValue := fl.Field().Interface()
+	params := strings.Fields(fl.Param())
+	if len(params) < 2 {
+		return false
+	}
+
+	tableName := params[0]
+	fieldNames := params[1:]
+
+	query := r.DB.Table(tableName).Where(fmt.Sprintf("%s = ?", fieldNames[0]), requestValue)
+	for _, fieldName := range fieldNames[1:] {
+		query = query.Or(fmt.Sprintf("%s = ?", fieldName), requestValue)
+	}
+
+	var count int64
+	err := query.Count(&count).Error
+	if err != nil {
+		return false
+	}
+
+	return count != 0
+}

internal/http/rule/not_exists.go

@@ -0,0 +1,42 @@
+package rule
+
+import (
+	"fmt"
+	"strings"
+
+	"github.com/go-playground/validator/v10"
+	"gorm.io/gorm"
+)
+
+type NotExists struct {
+	DB *gorm.DB
+}
+
+func NewNotExists(db *gorm.DB) *NotExists {
+	return &NotExists{DB: db}
+}
+
+// NotExists 格式 `not_exists=categories id other_field`
+func (r *NotExists) NotExists(fl validator.FieldLevel) bool {
+	requestValue := fl.Field().Interface()
+	params := strings.Fields(fl.Param())
+	if len(params) < 2 {
+		return false
+	}
+
+	tableName := params[0]
+	fieldNames := params[1:]
+
+	query := r.DB.Table(tableName).Where(fmt.Sprintf("%s = ?", fieldNames[0]), requestValue)
+	for _, fieldName := range fieldNames[1:] {
+		query = query.Or(fmt.Sprintf("%s = ?", fieldName), requestValue)
+	}
+
+	var count int64
+	err := query.Count(&count).Error
+	if err != nil {
+		return false
+	}
+
+	return count == 0
+}

internal/http/rule/regexp.go

@@ -0,0 +1,26 @@
+package rule
+
+import (
+	"regexp"
+
+	"github.com/go-playground/validator/v10"
+)
+
+type Regexp struct{}
+
+func NewRegexp() *Regexp {
+	return &Regexp{}
+}
+
+func (r *Regexp) Regexp(fl validator.FieldLevel) bool {
+	// 从标签中获取正则，格式类似于 `regexp=^[a-zA-Z0-9_]+$`
+	pattern := fl.Param()
+	value := fl.Field().String()
+
+	re, err := regexp.Compile(pattern)
+	if err != nil {
+		return false
+	}
+
+	return re.MatchString(value)
+}

internal/http/rule/rule.go

@@ -0,0 +1,53 @@
+package rule
+
+import (
+	ut "github.com/go-playground/universal-translator"
+	"github.com/go-playground/validator/v10"
+
+	"github.com/TheTNB/panel/internal/app"
+)
+
+func RegisterRules(v *validator.Validate) error {
+	if err := v.RegisterValidation("exists", NewExists(app.Orm).Exists); err != nil {
+		return err
+	}
+	if err := v.RegisterValidation("not_exists", NewNotExists(app.Orm).NotExists); err != nil {
+		return err
+	}
+	if err := v.RegisterValidation("regexp", NewRegexp().Regexp); err != nil {
+		return err
+	}
+
+	if err := v.RegisterTranslation("exists", *app.Translator,
+		func(ut ut.Translator) error {
+			return ut.Add("exists", "{0} 不存在", true)
+		},
+		func(ut ut.Translator, fe validator.FieldError) string {
+			t, _ := ut.T("exists", fe.Field())
+			return t
+		}); err != nil {
+		return err
+	}
+	if err := v.RegisterTranslation("not_exists", *app.Translator,
+		func(ut ut.Translator) error {
+			return ut.Add("not_exists", "{0} 已存在", true)
+		},
+		func(ut ut.Translator, fe validator.FieldError) string {
+			t, _ := ut.T("not_exists", fe.Field())
+			return t
+		}); err != nil {
+		return err
+	}
+	if err := v.RegisterTranslation("regexp", *app.Translator,
+		func(ut ut.Translator) error {
+			return ut.Add("regexp", "{0} 格式不正确", true)
+		},
+		func(ut ut.Translator, fe validator.FieldError) string {
+			t, _ := ut.T("regexp", fe.Field())
+			return t
+		}); err != nil {
+		return err
+	}
+
+	return nil
+}

internal/job/cert_renew.go

@@ -9,7 +9,6 @@ import (
 	"github.com/TheTNB/panel/internal/biz"
 	"github.com/TheTNB/panel/internal/data"
 	pkgcert "github.com/TheTNB/panel/pkg/cert"
-	"github.com/TheTNB/panel/pkg/types"
 )
 
 // CertRenew 证书续签
@@ -23,8 +22,8 @@ func NewCertRenew() *CertRenew {
 	}
 }
 
-func (receiver *CertRenew) Run() {
-	if types.Status != types.StatusNormal {
+func (r *CertRenew) Run() {
+	if app.Status != app.StatusNormal {
 		return
 	}
 
@@ -50,7 +49,7 @@ func (receiver *CertRenew) Run() {
 			continue
 		}
 
-		_, err = receiver.certRepo.Renew(cert.ID)
+		_, err = r.certRepo.Renew(cert.ID)
 		if err != nil {
 			app.Logger.Error("续签证书失败", zap.Error(err))
 		}

internal/job/monitoring.go

@@ -10,7 +10,6 @@ import (
 	"github.com/TheTNB/panel/internal/biz"
 	"github.com/TheTNB/panel/internal/data"
 	"github.com/TheTNB/panel/pkg/tools"
-	"github.com/TheTNB/panel/pkg/types"
 )
 
 // Monitoring 系统监控
@@ -24,8 +23,8 @@ func NewMonitoring() *Monitoring {
 	}
 }
 
-func (receiver *Monitoring) Run() {
-	if types.Status != types.StatusNormal {
+func (r *Monitoring) Run() {
+	if app.Status != app.StatusNormal {
 		return
 	}
 
@@ -33,18 +32,18 @@ func (receiver *Monitoring) Run() {
 	//task := data.NewTaskRepo()
 	//_ = task.DispatchWaiting()
 
-	monitor, err := receiver.settingRepo.Get(biz.SettingKeyMonitor)
+	monitor, err := r.settingRepo.Get(biz.SettingKeyMonitor)
 	if err != nil || !cast.ToBool(monitor) {
 		return
 	}
 
-	info := tools.GetMonitoringInfo()
+	info := tools.CurrentInfo(nil, nil)
 
 	// 去除部分数据以减少数据库存储
 	info.Disk = nil
 	info.Cpus = nil
 
-	if types.Status != types.StatusNormal {
+	if app.Status != app.StatusNormal {
 		return
 	}
 
@@ -54,12 +53,12 @@ func (receiver *Monitoring) Run() {
 	}
 
 	// 删除过期数据
-	dayStr, err := receiver.settingRepo.Get(biz.SettingKeyMonitorDays)
+	dayStr, err := r.settingRepo.Get(biz.SettingKeyMonitorDays)
 	if err != nil {
 		return
 	}
 	day := cast.ToInt(dayStr)
-	if day <= 0 || types.Status != types.StatusNormal {
+	if day <= 0 || app.Status != app.StatusNormal {
 		return
 	}
 	if err = app.Orm.Where("created_at < ?", time.Now().AddDate(0, 0, -day).Format("2006-01-02 15:04:05")).Delete(&biz.Monitor{}).Error; err != nil {

internal/job/panel_task.go

@@ -1,61 +1,67 @@
 package job
 
 import (
-	"path/filepath"
 	"runtime"
 	"runtime/debug"
-	"time"
 
 	"go.uber.org/zap"
 
 	"github.com/TheTNB/panel/internal/app"
 	"github.com/TheTNB/panel/internal/biz"
 	"github.com/TheTNB/panel/internal/data"
-	"github.com/TheTNB/panel/pkg/io"
-	"github.com/TheTNB/panel/pkg/shell"
-	"github.com/TheTNB/panel/pkg/types"
 )
 
 // PanelTask 面板每日任务
 type PanelTask struct {
-	appRepo biz.AppRepo
+	appRepo     biz.AppRepo
+	backupRepo  biz.BackupRepo
+	settingRepo biz.SettingRepo
 }
 
 func NewPanelTask() *PanelTask {
 	return &PanelTask{
-		appRepo: data.NewAppRepo(),
+		appRepo:     data.NewAppRepo(),
+		backupRepo:  data.NewBackupRepo(),
+		settingRepo: data.NewSettingRepo(),
 	}
 }
 
-func (receiver *PanelTask) Run() {
-	types.Status = types.StatusMaintain
+func (r *PanelTask) Run() {
+	app.Status = app.StatusMaintain
 
 	// 优化数据库
 	if err := app.Orm.Exec("VACUUM").Error; err != nil {
-		types.Status = types.StatusFailed
+		app.Status = app.StatusFailed
+		app.Logger.Error("优化面板数据库失败", zap.Error(err))
+	}
+	if err := app.Orm.Exec("PRAGMA wal_checkpoint(TRUNCATE);").Error; err != nil {
+		app.Status = app.StatusFailed
 		app.Logger.Error("优化面板数据库失败", zap.Error(err))
 	}
 
 	// 备份面板
-	if err := io.Compress([]string{"/www/panel"}, filepath.Join(app.Root, "backup", "panel", "panel-"+time.Now().Format(time.DateOnly)+".zip"), io.Zip); err != nil {
-		types.Status = types.StatusFailed
+	if err := r.backupRepo.Create(biz.BackupTypePanel, ""); err != nil {
 		app.Logger.Error("备份面板失败", zap.Error(err))
 	}
 
-	// 清理 7 天前的备份
-	if _, err := shell.Execf(`find %s -mtime +7 -name "*.zip" -exec rm -rf {} \;`, filepath.Join(app.Root, "backup", "panel")); err != nil {
-		types.Status = types.StatusFailed
-		app.Logger.Error("清理面板备份失败", zap.Error(err))
+	// 清理备份
+	path, err := r.backupRepo.GetPath("panel")
+	if err == nil {
+		if err = r.backupRepo.ClearExpired(path, "panel_", 10); err != nil {
+			app.Logger.Error("清理面板备份失败", zap.Error(err))
+		}
 	}
 
 	// 更新商店缓存
-	if err := receiver.appRepo.UpdateCache(); err != nil {
-		app.Logger.Error("更新商店缓存失败", zap.Error(err))
+	if offline, err := r.settingRepo.GetBool(biz.SettingKeyOfflineMode); err == nil && !offline {
+		if err = r.appRepo.UpdateCache(); err != nil {
+			app.Logger.Error("更新商店缓存失败", zap.Error(err))
+		}
 	}
 
 	// 回收内存
 	runtime.GC()
 	debug.FreeOSMemory()
 
-	types.Status = types.StatusNormal
+	app.Status = app.StatusNormal
 }

internal/queuejob/process_task.go

@@ -20,19 +20,19 @@ func NewProcessTask(taskRepo biz.TaskRepo) *ProcessTask {
 	}
 }
 
-func (receiver *ProcessTask) Handle(args ...any) error {
+func (r *ProcessTask) Handle(args ...any) error {
 	taskID, ok := args[0].(uint)
 	if !ok {
 		return errors.New("参数错误")
 	}
-	receiver.taskID = taskID
+	r.taskID = taskID
 
-	task, err := receiver.taskRepo.Get(taskID)
+	task, err := r.taskRepo.Get(taskID)
 	if err != nil {
 		return err
 	}
 
-	if err = receiver.taskRepo.UpdateStatus(taskID, biz.TaskStatusRunning); err != nil {
+	if err = r.taskRepo.UpdateStatus(taskID, biz.TaskStatusRunning); err != nil {
 		return err
 	}
 
@@ -40,13 +40,13 @@ func (receiver *ProcessTask) Handle(args ...any) error {
 		return err
 	}
 
-	if err = receiver.taskRepo.UpdateStatus(taskID, biz.TaskStatusSuccess); err != nil {
+	if err = r.taskRepo.UpdateStatus(taskID, biz.TaskStatusSuccess); err != nil {
 		return err
 	}
 
 	return nil
 }
 
-func (receiver *ProcessTask) ErrHandle(err error) {
-	_ = receiver.taskRepo.UpdateStatus(receiver.taskID, biz.TaskStatusFailed)
+func (r *ProcessTask) ErrHandle(err error) {
+	_ = r.taskRepo.UpdateStatus(r.taskID, biz.TaskStatusFailed)
 }

internal/route/cli.go

@@ -29,6 +29,11 @@ func Cli() []*cli.Command {
 			Usage:  "升级面板",
 			Action: cliService.Update,
 		},
+		{
+			Name:   "fix",
+			Usage:  "修复面板",
+			Action: cliService.Fix,
+		},
 		{
 			Name:   "info",
 			Usage:  "输出面板基本信息",
@@ -98,18 +103,62 @@ func Cli() []*cli.Command {
 			Commands: []*cli.Command{
 				{
 					Name:   "create",
-					Usage:  "创建新站点",
+					Usage:  "创建新网站",
 					Action: cliService.WebsiteCreate,
+					Flags: []cli.Flag{
+						&cli.StringFlag{
+							Name:     "name",
+							Usage:    "网站名称",
+							Aliases:  []string{"n"},
+							Required: true,
+						},
+						&cli.StringSliceFlag{
+							Name:     "domains",
+							Usage:    "与网站关联的域名列表",
+							Aliases:  []string{"d"},
+							Required: true,
+						},
+						&cli.StringSliceFlag{
+							Name:     "listens",
+							Usage:    "与网站关联的监听地址列表",
+							Aliases:  []string{"l"},
+							Required: true,
+						},
+						&cli.StringFlag{
+							Name:  "path",
+							Usage: "网站托管的路径（不填则默认路径）",
+						},
+						&cli.IntFlag{
+							Name:  "php",
+							Usage: "网站使用的 PHP 版本（不填不使用）",
+						},
+					},
 				},
 				{
 					Name:   "remove",
-					Usage:  "移除站点",
+					Usage:  "移除网站",
 					Action: cliService.WebsiteRemove,
+					Flags: []cli.Flag{
+						&cli.StringFlag{
+							Name:     "name",
+							Usage:    "网站名称",
+							Aliases:  []string{"n"},
+							Required: true,
+						},
+					},
 				},
 				{
 					Name:   "delete",
-					Usage:  "删除站点（包括站点目录、同名数据库）",
+					Usage:  "删除网站（包括网站目录、同名数据库）",
 					Action: cliService.WebsiteDelete,
+					Flags: []cli.Flag{
+						&cli.StringFlag{
+							Name:     "name",
+							Usage:    "网站名称",
+							Aliases:  []string{"n"},
+							Required: true,
+						},
+					},
 				},
 				{
 					Name:   "write",
@@ -121,22 +170,91 @@ func Cli() []*cli.Command {
 		},
 		{
 			Name:  "backup",
-			Usage: "备份数据",
+			Usage: "数据备份",
 			Commands: []*cli.Command{
 				{
 					Name:   "website",
 					Usage:  "备份网站",
 					Action: cliService.BackupWebsite,
+					Flags: []cli.Flag{
+						&cli.StringFlag{
+							Name:     "name",
+							Aliases:  []string{"n"},
+							Usage:    "网站名称",
+							Required: true,
+						},
+						&cli.StringFlag{
+							Name:    "path",
+							Aliases: []string{"p"},
+							Usage:   "保存目录（不填则默认路径）",
+						},
+					},
 				},
 				{
 					Name:   "database",
 					Usage:  "备份数据库",
 					Action: cliService.BackupDatabase,
+					Flags: []cli.Flag{
+						&cli.StringFlag{
+							Name:     "type",
+							Aliases:  []string{"t"},
+							Usage:    "数据库类型",
+							Required: true,
+						},
+						&cli.StringFlag{
+							Name:     "name",
+							Aliases:  []string{"n"},
+							Usage:    "数据库名称",
+							Required: true,
+						},
+						&cli.StringFlag{
+							Name:    "path",
+							Aliases: []string{"p"},
+							Usage:   "保存目录（不填则默认路径）",
+						},
+					},
 				},
 				{
 					Name:   "panel",
 					Usage:  "备份面板",
 					Action: cliService.BackupPanel,
+					Flags: []cli.Flag{
+						&cli.StringFlag{
+							Name:    "path",
+							Aliases: []string{"p"},
+							Usage:   "保存目录（不填则默认路径）",
+						},
+					},
+				},
+				{
+					Name:   "clear",
+					Usage:  "清理备份",
+					Action: cliService.BackupClear,
+					Flags: []cli.Flag{
+						&cli.StringFlag{
+							Name:     "type",
+							Aliases:  []string{"t"},
+							Usage:    "备份类型",
+							Required: true,
+						},
+						&cli.StringFlag{
+							Name:     "file",
+							Aliases:  []string{"f"},
+							Usage:    "备份文件",
+							Required: true,
+						},
+						&cli.IntFlag{
+							Name:     "save",
+							Aliases:  []string{"s"},
+							Usage:    "保存份数",
+							Required: true,
+						},
+						&cli.StringFlag{
+							Name:    "path",
+							Aliases: []string{"p"},
+							Usage:   "备份目录（不填则默认路径）",
+						},
+					},
 				},
 			},
 		},
@@ -148,6 +266,50 @@ func Cli() []*cli.Command {
 					Name:   "website",
 					Usage:  "网站",
 					Action: cliService.CutoffWebsite,
+					Flags: []cli.Flag{
+						&cli.StringFlag{
+							Name:     "name",
+							Aliases:  []string{"n"},
+							Usage:    "网站名称",
+							Required: true,
+						},
+
+						&cli.StringFlag{
+							Name:    "path",
+							Aliases: []string{"p"},
+							Usage:   "保存目录（不填则默认路径）",
+						},
+					},
+				},
+				{
+					Name:   "clear",
+					Usage:  "清理切割的日志",
+					Action: cliService.CutoffClear,
+					Flags: []cli.Flag{
+						&cli.StringFlag{
+							Name:     "type",
+							Aliases:  []string{"t"},
+							Usage:    "切割类型",
+							Required: true,
+						},
+						&cli.StringFlag{
+							Name:     "file",
+							Aliases:  []string{"f"},
+							Usage:    "切割文件",
+							Required: true,
+						},
+						&cli.IntFlag{
+							Name:     "save",
+							Aliases:  []string{"s"},
+							Usage:    "保存份数",
+							Required: true,
+						},
+						&cli.StringFlag{
+							Name:    "path",
+							Aliases: []string{"p"},
+							Usage:   "切割目录（不填则默认路径）",
+						},
+					},
 				},
 			},
 		},

internal/route/http.go

@@ -23,18 +23,18 @@ func Http(r chi.Router) {
 			r.With(middleware.MustLogin).Get("/info", user.Info)
 		})
 
-		r.Route("/info", func(r chi.Router) {
-			info := service.NewInfoService()
-			r.Get("/panel", info.Panel)
-			r.With(middleware.MustLogin).Get("/homeApps", info.HomeApps)
-			r.With(middleware.MustLogin).Get("/realtime", info.Realtime)
-			r.With(middleware.MustLogin).Get("/systemInfo", info.SystemInfo)
-			r.With(middleware.MustLogin).Get("/countInfo", info.CountInfo)
-			r.With(middleware.MustLogin).Get("/installedDbAndPhp", info.InstalledDbAndPhp)
-			r.With(middleware.MustLogin).Get("/checkUpdate", info.CheckUpdate)
-			r.With(middleware.MustLogin).Get("/updateInfo", info.UpdateInfo)
-			r.With(middleware.MustLogin).Post("/update", info.Update)
-			r.With(middleware.MustLogin).Post("/restart", info.Restart)
+		r.Route("/dashboard", func(r chi.Router) {
+			dashboard := service.NewDashboardService()
+			r.Get("/panel", dashboard.Panel)
+			r.With(middleware.MustLogin).Get("/homeApps", dashboard.HomeApps)
+			r.With(middleware.MustLogin).Post("/current", dashboard.Current)
+			r.With(middleware.MustLogin).Get("/systemInfo", dashboard.SystemInfo)
+			r.With(middleware.MustLogin).Get("/countInfo", dashboard.CountInfo)
+			r.With(middleware.MustLogin).Get("/installedDbAndPhp", dashboard.InstalledDbAndPhp)
+			r.With(middleware.MustLogin).Get("/checkUpdate", dashboard.CheckUpdate)
+			r.With(middleware.MustLogin).Get("/updateInfo", dashboard.UpdateInfo)
+			r.With(middleware.MustLogin).Post("/update", dashboard.Update)
+			r.With(middleware.MustLogin).Post("/restart", dashboard.Restart)
 		})
 
 		r.Route("/task", func(r chi.Router) {
@@ -62,16 +62,14 @@ func Http(r chi.Router) {
 			r.Post("/{id}/status", website.UpdateStatus)
 		})
 
-		// TODO
 		r.Route("/backup", func(r chi.Router) {
 			r.Use(middleware.MustLogin)
 			backup := service.NewBackupService()
-			r.Get("/backup", backup.List)
-			r.Post("/create", backup.Create)
-			r.Post("/update", backup.Update)
-			r.Get("/{id}", backup.Get)
-			r.Delete("/{id}", backup.Delete)
-			r.Delete("/{id}/restore", backup.Restore)
+			r.Get("/{type}", backup.List)
+			r.Post("/{type}", backup.Create)
+			r.Post("/{type}/upload", backup.Upload)
+			r.Delete("/{type}/delete", backup.Delete)
+			r.Post("/{type}/restore", backup.Restore)
 		})
 
 		r.Route("/cert", func(r chi.Router) {
@@ -219,7 +217,7 @@ func Http(r chi.Router) {
 			r.Get("/content", file.Content)
 			r.Post("/save", file.Save)
 			r.Post("/delete", file.Delete)
-			r.Post("/upload", file.Upload) // TODO fix
+			r.Post("/upload", file.Upload)
 			r.Post("/move", file.Move)
 			r.Post("/copy", file.Copy)
 			r.Get("/download", file.Download)

internal/service/app.go

@@ -12,12 +12,14 @@ import (
 )
 
 type AppService struct {
-	appRepo biz.AppRepo
+	appRepo     biz.AppRepo
+	settingRepo biz.SettingRepo
 }
 
 func NewAppService() *AppService {
 	return &AppService{
-		appRepo: data.NewAppRepo(),
+		appRepo:     data.NewAppRepo(),
+		settingRepo: data.NewSettingRepo(),
 	}
 }
 
@@ -162,6 +164,11 @@ func (s *AppService) IsInstalled(w http.ResponseWriter, r *http.Request) {
 }
 
 func (s *AppService) UpdateCache(w http.ResponseWriter, r *http.Request) {
+	if offline, _ := s.settingRepo.GetBool(biz.SettingKeyOfflineMode); offline {
+		Error(w, http.StatusForbidden, "离线模式下无法更新应用列表缓存")
+		return
+	}
+
 	if err := s.appRepo.UpdateCache(); err != nil {
 		Error(w, http.StatusInternalServerError, "%v", err)
 		return

internal/service/backup.go

@@ -1,34 +1,126 @@
 package service
 
-import "net/http"
+import (
+	stdio "io"
+	"net/http"
+	"os"
+	"path/filepath"
+
+	"github.com/go-rat/chix"
+
+	"github.com/TheTNB/panel/internal/biz"
+	"github.com/TheTNB/panel/internal/data"
+	"github.com/TheTNB/panel/internal/http/request"
+	"github.com/TheTNB/panel/pkg/io"
+)
 
 type BackupService struct {
+	backupRepo biz.BackupRepo
 }
 
 func NewBackupService() *BackupService {
-	return &BackupService{}
+	return &BackupService{
+		backupRepo: data.NewBackupRepo(),
+	}
 }
 
 func (s *BackupService) List(w http.ResponseWriter, r *http.Request) {
+	req, err := Bind[request.BackupList](r)
+	if err != nil {
+		Error(w, http.StatusUnprocessableEntity, "%v", err)
+		return
+	}
 
+	list, _ := s.backupRepo.List(biz.BackupType(req.Type))
+	paged, total := Paginate(r, list)
+
+	Success(w, chix.M{
+		"total": total,
+		"items": paged,
+	})
 }
 
 func (s *BackupService) Create(w http.ResponseWriter, r *http.Request) {
+	req, err := Bind[request.BackupCreate](r)
+	if err != nil {
+		Error(w, http.StatusUnprocessableEntity, "%v", err)
+		return
+	}
 
+	if err = s.backupRepo.Create(biz.BackupType(req.Type), req.Target, req.Path); err != nil {
+		Error(w, http.StatusInternalServerError, "%v", err)
+		return
+	}
+
+	Success(w, nil)
 }
 
-func (s *BackupService) Update(w http.ResponseWriter, r *http.Request) {
+func (s *BackupService) Upload(w http.ResponseWriter, r *http.Request) {
+	if err := r.ParseMultipartForm(2 << 30); err != nil {
+		Error(w, http.StatusUnprocessableEntity, "%v", err)
+		return
+	}
 
-}
+	_, handler, err := r.FormFile("file")
+	if err != nil {
+		Error(w, http.StatusInternalServerError, "上传文件失败：%v", err)
+		return
+	}
+	path, err := s.backupRepo.GetPath(biz.BackupType(r.FormValue("type")))
+	if err != nil {
+		Error(w, http.StatusInternalServerError, "%v", err)
+		return
+	}
 
-func (s *BackupService) Get(w http.ResponseWriter, r *http.Request) {
+	if !io.Exists(filepath.Dir(path)) {
+		if err = io.Mkdir(filepath.Dir(path), 0755); err != nil {
+			Error(w, http.StatusInternalServerError, "创建文件夹失败：%v", err)
+			return
+		}
+	}
 
+	src, _ := handler.Open()
+	out, err := os.OpenFile(filepath.Join(path, handler.Filename), os.O_CREATE|os.O_RDWR|os.O_TRUNC, 0644)
+	if err != nil {
+		Error(w, http.StatusInternalServerError, "打开文件失败：%v", err)
+		return
+	}
+
+	if _, err = stdio.Copy(out, src); err != nil {
+		Error(w, http.StatusInternalServerError, "写入文件失败：%v", err)
+		return
+	}
+
+	_ = src.Close()
+	Success(w, nil)
 }
 
 func (s *BackupService) Delete(w http.ResponseWriter, r *http.Request) {
+	req, err := Bind[request.BackupFile](r)
+	if err != nil {
+		Error(w, http.StatusUnprocessableEntity, "%v", err)
+		return
+	}
 
+	if err = s.backupRepo.Delete(biz.BackupType(req.Type), req.File); err != nil {
+		Error(w, http.StatusInternalServerError, "%v", err)
+		return
+	}
+
+	Success(w, nil)
 }
 
 func (s *BackupService) Restore(w http.ResponseWriter, r *http.Request) {
+	req, err := Bind[request.BackupRestore](r)
+	if err != nil {
+		Error(w, http.StatusUnprocessableEntity, "%v", err)
+		return
+	}
 
+	if err = s.backupRepo.Restore(biz.BackupType(req.Type), req.File, req.Target); err != nil {
+		Error(w, http.StatusInternalServerError, "%v", err)
+		return
+	}
+
+	Success(w, nil)
 }

internal/service/base.go

@@ -68,7 +68,7 @@ func Bind[T any](r *http.Request) (*T, error) {
 	if err := binder.Query(req); err != nil {
 		return nil, err
 	}
-	if slices.Contains([]string{"POST", "PUT", "PATCH"}, strings.ToUpper(r.Method)) {
+	if slices.Contains([]string{"POST", "PUT", "PATCH", "DELETE"}, strings.ToUpper(r.Method)) {
 		if err := binder.Body(req); err != nil {
 			return nil, err
 		}

internal/service/cli.go

@@ -5,6 +5,7 @@ import (
 	"errors"
 	"fmt"
 	"path/filepath"
+	"time"
 
 	"github.com/go-rat/utils/hash"
 	"github.com/goccy/go-yaml"
@@ -16,6 +17,7 @@ import (
 	"github.com/TheTNB/panel/internal/app"
 	"github.com/TheTNB/panel/internal/biz"
 	"github.com/TheTNB/panel/internal/data"
+	"github.com/TheTNB/panel/internal/http/request"
 	"github.com/TheTNB/panel/pkg/api"
 	"github.com/TheTNB/panel/pkg/io"
 	"github.com/TheTNB/panel/pkg/str"
@@ -25,33 +27,54 @@ import (
 )
 
 type CliService struct {
-	api     *api.API
-	app     biz.AppRepo
-	user    biz.UserRepo
-	setting biz.SettingRepo
-	hash    hash.Hasher
+	hr          string
+	api         *api.API
+	appRepo     biz.AppRepo
+	userRepo    biz.UserRepo
+	settingRepo biz.SettingRepo
+	backupRepo  biz.BackupRepo
+	websiteRepo biz.WebsiteRepo
+	hash        hash.Hasher
 }
 
 func NewCliService() *CliService {
 	return &CliService{
-		api:     api.NewAPI(app.Version),
-		app:     data.NewAppRepo(),
-		user:    data.NewUserRepo(),
-		setting: data.NewSettingRepo(),
-		hash:    hash.NewArgon2id(),
+		hr:          `+----------------------------------------------------`,
+		api:         api.NewAPI(app.Version),
+		appRepo:     data.NewAppRepo(),
+		userRepo:    data.NewUserRepo(),
+		settingRepo: data.NewSettingRepo(),
+		backupRepo:  data.NewBackupRepo(),
+		websiteRepo: data.NewWebsiteRepo(),
+		hash:        hash.NewArgon2id(),
 	}
 }
 
 func (s *CliService) Restart(ctx context.Context, cmd *cli.Command) error {
-	return systemctl.Restart("panel")
+	if err := systemctl.Restart("panel"); err != nil {
+		return err
+	}
+
+	color.Greenln("面板服务已重启")
+	return nil
 }
 
 func (s *CliService) Stop(ctx context.Context, cmd *cli.Command) error {
-	return systemctl.Stop("panel")
+	if err := systemctl.Stop("panel"); err != nil {
+		return err
+	}
+
+	color.Greenln("面板服务已停止")
+	return nil
 }
 
 func (s *CliService) Start(ctx context.Context, cmd *cli.Command) error {
-	return systemctl.Start("panel")
+	if err := systemctl.Start("panel"); err != nil {
+		return err
+	}
+
+	color.Greenln("面板服务已启动")
+	return nil
 }
 
 func (s *CliService) Update(ctx context.Context, cmd *cli.Command) error {
@@ -66,7 +89,11 @@ func (s *CliService) Update(ctx context.Context, cmd *cli.Command) error {
 	}
 	ver, url, checksum := panel.Version, download.URL, download.Checksum
 
-	return s.setting.UpdatePanel(ver, url, checksum)
+	return s.settingRepo.UpdatePanel(ver, url, checksum)
+}
+
+func (s *CliService) Fix(ctx context.Context, cmd *cli.Command) error {
+	return s.settingRepo.FixPanel()
 }
 
 func (s *CliService) Info(ctx context.Context, cmd *cli.Command) error {
@@ -153,6 +180,7 @@ func (s *CliService) UserName(ctx context.Context, cmd *cli.Command) error {
 		return fmt.Errorf("用户名修改失败：%v", err)
 	}
 
+	color.Greenln(fmt.Sprintf("用户 %s 修改为 %s 成功", oldUsername, newUsername))
 	return nil
 }
 
@@ -184,6 +212,7 @@ func (s *CliService) UserPassword(ctx context.Context, cmd *cli.Command) error {
 		return fmt.Errorf("密码修改失败：%v", err)
 	}
 
+	color.Greenln(fmt.Sprintf("用户 %s 密码修改成功", username))
 	return nil
 }
 
@@ -209,6 +238,7 @@ func (s *CliService) HTTPSOn(ctx context.Context, cmd *cli.Command) error {
 		return err
 	}
 
+	color.Greenln("已开启HTTPS")
 	return s.Restart(ctx, cmd)
 }
 
@@ -234,6 +264,7 @@ func (s *CliService) HTTPSOff(ctx context.Context, cmd *cli.Command) error {
 		return err
 	}
 
+	color.Greenln("已关闭HTTPS")
 	return s.Restart(ctx, cmd)
 }
 
@@ -259,6 +290,8 @@ func (s *CliService) EntranceOn(ctx context.Context, cmd *cli.Command) error {
 		return err
 	}
 
+	color.Greenln("已开启访问入口")
+	color.Greenln(fmt.Sprintf("访问入口：%s", config.HTTP.Entrance))
 	return s.Restart(ctx, cmd)
 }
 
@@ -284,6 +317,7 @@ func (s *CliService) EntranceOff(ctx context.Context, cmd *cli.Command) error {
 		return err
 	}
 
+	color.Greenln("已关闭访问入口")
 	return s.Restart(ctx, cmd)
 }
 
@@ -314,46 +348,184 @@ func (s *CliService) Port(ctx context.Context, cmd *cli.Command) error {
 		return err
 	}
 
+	color.Greenln(fmt.Sprintf("已修改端口为 %d", port))
 	return s.Restart(ctx, cmd)
 }
 
 func (s *CliService) WebsiteCreate(ctx context.Context, cmd *cli.Command) error {
-	println("Hello, World!")
+	req := &request.WebsiteCreate{
+		Name:    cmd.String("name"),
+		Domains: cmd.StringSlice("domains"),
+		Listens: cmd.StringSlice("listens"),
+		Path:    cmd.String("path"),
+		PHP:     int(cmd.Int("php")),
+		DB:      false,
+	}
+
+	website, err := s.websiteRepo.Create(req)
+	if err != nil {
+		return err
+	}
+
+	color.Greenln(fmt.Sprintf("网站 %s 创建成功", website.Name))
 	return nil
 }
 
 func (s *CliService) WebsiteRemove(ctx context.Context, cmd *cli.Command) error {
-	println("Hello, World!")
+	website, err := s.websiteRepo.GetByName(cmd.String("name"))
+	if err != nil {
+		return err
+	}
+	req := &request.WebsiteDelete{
+		ID: website.ID,
+	}
+
+	if err = s.websiteRepo.Delete(req); err != nil {
+		return err
+	}
+
+	color.Greenln(fmt.Sprintf("网站 %s 移除成功", website.Name))
 	return nil
 }
 
 func (s *CliService) WebsiteDelete(ctx context.Context, cmd *cli.Command) error {
-	println("Hello, World!")
+	website, err := s.websiteRepo.GetByName(cmd.String("name"))
+	if err != nil {
+		return err
+	}
+	req := &request.WebsiteDelete{
+		ID:   website.ID,
+		Path: true,
+		DB:   true,
+	}
+
+	if err = s.websiteRepo.Delete(req); err != nil {
+		return err
+	}
+
+	color.Greenln(fmt.Sprintf("网站 %s 删除成功", website.Name))
 	return nil
 }
 
 func (s *CliService) WebsiteWrite(ctx context.Context, cmd *cli.Command) error {
-	println("Hello, World!")
+	println("not support")
 	return nil
 }
 
 func (s *CliService) BackupWebsite(ctx context.Context, cmd *cli.Command) error {
-	println("Hello, World!")
+	color.Greenln(s.hr)
+	color.Greenln(fmt.Sprintf("★ 开始备份 [%s]", time.Now().Format(time.DateTime)))
+	color.Greenln(s.hr)
+	color.Greenln("|-备份类型：网站")
+	color.Greenln(fmt.Sprintf("|-备份目标：%s", cmd.String("name")))
+	if err := s.backupRepo.Create(biz.BackupTypeWebsite, cmd.String("name"), cmd.String("path")); err != nil {
+		return fmt.Errorf("|-备份失败：%v", err)
+	}
+	color.Greenln(s.hr)
+	color.Greenln(fmt.Sprintf("☆ 备份成功 [%s]", time.Now().Format(time.DateTime)))
+	color.Greenln(s.hr)
 	return nil
 }
 
 func (s *CliService) BackupDatabase(ctx context.Context, cmd *cli.Command) error {
-	println("Hello, World!")
+	color.Greenln(s.hr)
+	color.Greenln(fmt.Sprintf("★ 开始备份 [%s]", time.Now().Format(time.DateTime)))
+	color.Greenln(s.hr)
+	color.Greenln("|-备份类型：数据库")
+	color.Greenln(fmt.Sprintf("|-数据库：%s", cmd.String("type")))
+	color.Greenln(fmt.Sprintf("|-备份目标：%s", cmd.String("name")))
+	if err := s.backupRepo.Create(biz.BackupType(cmd.String("type")), cmd.String("name"), cmd.String("path")); err != nil {
+		return fmt.Errorf("|-备份失败：%v", err)
+	}
+	color.Greenln(s.hr)
+	color.Greenln(fmt.Sprintf("☆ 备份成功 [%s]", time.Now().Format(time.DateTime)))
+	color.Greenln(s.hr)
 	return nil
 }
 
 func (s *CliService) BackupPanel(ctx context.Context, cmd *cli.Command) error {
-	println("Hello, World!")
+	color.Greenln(s.hr)
+	color.Greenln(fmt.Sprintf("★ 开始备份 [%s]", time.Now().Format(time.DateTime)))
+	color.Greenln(s.hr)
+	color.Greenln("|-备份类型：面板")
+	if err := s.backupRepo.Create(biz.BackupTypePanel, "", cmd.String("path")); err != nil {
+		return fmt.Errorf("|-备份失败：%v", err)
+	}
+	color.Greenln(s.hr)
+	color.Greenln(fmt.Sprintf("☆ 备份成功 [%s]", time.Now().Format(time.DateTime)))
+	color.Greenln(s.hr)
+	return nil
+}
+
+func (s *CliService) BackupClear(ctx context.Context, cmd *cli.Command) error {
+	path, err := s.backupRepo.GetPath(biz.BackupType(cmd.String("type")))
+	if err != nil {
+		return err
+	}
+	if cmd.String("path") != "" {
+		path = cmd.String("path")
+	}
+
+	color.Greenln(s.hr)
+	color.Greenln(fmt.Sprintf("★ 开始清理 [%s]", time.Now().Format(time.DateTime)))
+	color.Greenln(s.hr)
+	color.Greenln(fmt.Sprintf("|-清理类型：%s", cmd.String("type")))
+	color.Greenln(fmt.Sprintf("|-清理目标：%s", cmd.String("file")))
+	color.Greenln(fmt.Sprintf("|-保留份数：%d", cmd.Int("save")))
+	if err = s.backupRepo.ClearExpired(path, cmd.String("file"), int(cmd.Int("save"))); err != nil {
+		return fmt.Errorf("|-清理失败：%v", err)
+	}
+	color.Greenln(s.hr)
+	color.Greenln(fmt.Sprintf("☆ 清理成功 [%s]", time.Now().Format(time.DateTime)))
+	color.Greenln(s.hr)
 	return nil
 }
 
 func (s *CliService) CutoffWebsite(ctx context.Context, cmd *cli.Command) error {
-	println("Hello, World!")
+	website, err := s.websiteRepo.GetByName(cmd.String("name"))
+	if err != nil {
+		return err
+	}
+	path := filepath.Join(app.Root, "wwwlogs")
+	if cmd.String("path") != "" {
+		path = cmd.String("path")
+	}
+
+	color.Greenln(s.hr)
+	color.Greenln(fmt.Sprintf("★ 开始切割日志 [%s]", time.Now().Format(time.DateTime)))
+	color.Greenln(s.hr)
+	color.Greenln("|-切割类型：网站")
+	color.Greenln(fmt.Sprintf("|-切割目标：%s", website.Name))
+	if err = s.backupRepo.CutoffLog(path, filepath.Join(app.Root, "wwwlogs", website.Name+".log")); err != nil {
+		return err
+	}
+	color.Greenln(s.hr)
+	color.Greenln(fmt.Sprintf("☆ 切割成功 [%s]", time.Now().Format(time.DateTime)))
+	color.Greenln(s.hr)
+	return nil
+}
+
+func (s *CliService) CutoffClear(ctx context.Context, cmd *cli.Command) error {
+	if cmd.String("type") != "website" {
+		return errors.New("当前仅支持网站日志切割")
+	}
+	path := filepath.Join(app.Root, "wwwlogs")
+	if cmd.String("path") != "" {
+		path = cmd.String("path")
+	}
+
+	color.Greenln(s.hr)
+	color.Greenln(fmt.Sprintf("★ 开始清理切割日志 [%s]", time.Now().Format(time.DateTime)))
+	color.Greenln(s.hr)
+	color.Greenln(fmt.Sprintf("|-清理类型：%s", cmd.String("type")))
+	color.Greenln(fmt.Sprintf("|-清理目标：%s", cmd.String("file")))
+	color.Greenln(fmt.Sprintf("|-保留份数：%d", cmd.Int("save")))
+	if err := s.backupRepo.ClearExpired(path, cmd.String("file"), int(cmd.Int("save"))); err != nil {
+		return err
+	}
+	color.Greenln(s.hr)
+	color.Greenln(fmt.Sprintf("☆ 清理成功 [%s]", time.Now().Format(time.DateTime)))
+	color.Greenln(s.hr)
 	return nil
 }
 
@@ -364,7 +536,7 @@ func (s *CliService) AppInstall(ctx context.Context, cmd *cli.Command) error {
 		return fmt.Errorf("参数不能为空")
 	}
 
-	if err := s.app.Install(channel, slug); err != nil {
+	if err := s.appRepo.Install(channel, slug); err != nil {
 		return fmt.Errorf("应用安装失败：%v", err)
 	}
 
@@ -379,7 +551,7 @@ func (s *CliService) AppUnInstall(ctx context.Context, cmd *cli.Command) error {
 		return fmt.Errorf("参数不能为空")
 	}
 
-	if err := s.app.UnInstall(slug); err != nil {
+	if err := s.appRepo.UnInstall(slug); err != nil {
 		return fmt.Errorf("应用卸载失败：%v", err)
 	}
 
@@ -496,7 +668,14 @@ func (s *CliService) Init(ctx context.Context, cmd *cli.Command) error {
 		return fmt.Errorf("已经初始化过了")
 	}
 
-	settings := []biz.Setting{{Key: biz.SettingKeyName, Value: "耗子面板"}, {Key: biz.SettingKeyMonitor, Value: "1"}, {Key: biz.SettingKeyMonitorDays, Value: "30"}, {Key: biz.SettingKeyBackupPath, Value: filepath.Join(app.Root, "backup")}, {Key: biz.SettingKeyWebsitePath, Value: filepath.Join(app.Root, "wwwroot")}, {Key: biz.SettingKeyVersion, Value: app.Version}}
+	settings := []biz.Setting{
+		{Key: biz.SettingKeyName, Value: "耗子面板"},
+		{Key: biz.SettingKeyMonitor, Value: "1"},
+		{Key: biz.SettingKeyMonitorDays, Value: "30"},
+		{Key: biz.SettingKeyBackupPath, Value: filepath.Join(app.Root, "backup")},
+		{Key: biz.SettingKeyWebsitePath, Value: filepath.Join(app.Root, "wwwroot")},
+		{Key: biz.SettingKeyVersion, Value: app.Version},
+	}
 	if err := app.Orm.Create(&settings).Error; err != nil {
 		return fmt.Errorf("初始化失败：%v", err)
 	}
@@ -534,5 +713,5 @@ func (s *CliService) Init(ctx context.Context, cmd *cli.Command) error {
 	}
 
 	// 初始化应用中心缓存
-	return s.app.UpdateCache()
+	return s.appRepo.UpdateCache()
 }

internal/service/dashboard.go

@@ -2,17 +2,21 @@ package service
 
 import (
 	"fmt"
+	"net"
 	"net/http"
 	"regexp"
 	"strings"
 
 	"github.com/go-rat/chix"
 	"github.com/hashicorp/go-version"
+	"github.com/shirou/gopsutil/disk"
+	"github.com/shirou/gopsutil/host"
 	"github.com/spf13/cast"
 
 	"github.com/TheTNB/panel/internal/app"
 	"github.com/TheTNB/panel/internal/biz"
 	"github.com/TheTNB/panel/internal/data"
+	"github.com/TheTNB/panel/internal/http/request"
 	"github.com/TheTNB/panel/pkg/api"
 	"github.com/TheTNB/panel/pkg/db"
 	"github.com/TheTNB/panel/pkg/shell"
@@ -21,7 +25,7 @@ import (
 	"github.com/TheTNB/panel/pkg/types"
 )
 
-type InfoService struct {
+type DashboardService struct {
 	api         *api.API
 	taskRepo    biz.TaskRepo
 	websiteRepo biz.WebsiteRepo
@@ -30,8 +34,8 @@ type InfoService struct {
 	cronRepo    biz.CronRepo
 }
 
-func NewInfoService() *InfoService {
-	return &InfoService{
+func NewDashboardService() *DashboardService {
+	return &DashboardService{
 		api:         api.NewAPI(app.Version),
 		taskRepo:    data.NewTaskRepo(),
 		websiteRepo: data.NewWebsiteRepo(),
@@ -41,7 +45,7 @@ func NewInfoService() *InfoService {
 	}
 }
 
-func (s *InfoService) Panel(w http.ResponseWriter, r *http.Request) {
+func (s *DashboardService) Panel(w http.ResponseWriter, r *http.Request) {
 	name, _ := s.settingRepo.Get(biz.SettingKeyName)
 	if name == "" {
 		name = "耗子面板"
@@ -53,31 +57,67 @@ func (s *InfoService) Panel(w http.ResponseWriter, r *http.Request) {
 	})
 }
 
-func (s *InfoService) HomeApps(w http.ResponseWriter, r *http.Request) {
+func (s *DashboardService) HomeApps(w http.ResponseWriter, r *http.Request) {
 	apps, err := s.appRepo.GetHomeShow()
 	if err != nil {
-		Error(w, http.StatusInternalServerError, "获取首页应用失败")
+		Error(w, http.StatusInternalServerError, "获取首页应用失败: %v", err)
 		return
 	}
 
 	Success(w, apps)
 }
 
-func (s *InfoService) Realtime(w http.ResponseWriter, r *http.Request) {
-	Success(w, tools.GetMonitoringInfo())
+func (s *DashboardService) Current(w http.ResponseWriter, r *http.Request) {
+	req, err := Bind[request.DashboardCurrent](r)
+	if err != nil {
+		Error(w, http.StatusUnprocessableEntity, "%v", err)
+		return
+	}
+
+	Success(w, tools.CurrentInfo(req.Nets, req.Disks))
 }
 
-func (s *InfoService) SystemInfo(w http.ResponseWriter, r *http.Request) {
-	monitorInfo := tools.GetMonitoringInfo()
+func (s *DashboardService) SystemInfo(w http.ResponseWriter, r *http.Request) {
+	hostInfo, err := host.Info()
+	if err != nil {
+		Error(w, http.StatusInternalServerError, "获取系统信息失败")
+		return
+	}
+
+	// 所有网卡名称
+	var nets []types.LV
+	netInterfaces, _ := net.Interfaces()
+	for _, v := range netInterfaces {
+		nets = append(nets, types.LV{
+			Value: v.Name,
+			Label: v.Name,
+		})
+	}
+	// 所有硬盘名称
+	var disks []types.LV
+	partitions, _ := disk.Partitions(false)
+	for _, v := range partitions {
+		disks = append(disks, types.LV{
+			Value: v.Device,
+			Label: fmt.Sprintf("%s (%s)", v.Device, v.Mountpoint),
+		})
+	}
 
 	Success(w, chix.M{
-		"os_name":       monitorInfo.Host.Platform + " " + monitorInfo.Host.PlatformVersion,
-		"uptime":        fmt.Sprintf("%.2f", float64(monitorInfo.Host.Uptime)/86400),
-		"panel_version": app.Version,
+		"procs":          hostInfo.Procs,
+		"hostname":       hostInfo.Hostname,
+		"panel_version":  app.Version,
+		"kernel_arch":    hostInfo.KernelArch,
+		"kernel_version": hostInfo.KernelVersion,
+		"os_name":        hostInfo.Platform + " " + hostInfo.PlatformVersion,
+		"boot_time":      hostInfo.BootTime,
+		"uptime":         hostInfo.Uptime,
+		"nets":           nets,
+		"disks":          disks,
 	})
 }
 
-func (s *InfoService) CountInfo(w http.ResponseWriter, r *http.Request) {
+func (s *DashboardService) CountInfo(w http.ResponseWriter, r *http.Request) {
 	websiteCount, err := s.websiteRepo.Count()
 	if err != nil {
 		Error(w, http.StatusInternalServerError, "获取网站数量失败")
@@ -173,7 +213,7 @@ func (s *InfoService) CountInfo(w http.ResponseWriter, r *http.Request) {
 	})
 }
 
-func (s *InfoService) InstalledDbAndPhp(w http.ResponseWriter, r *http.Request) {
+func (s *DashboardService) InstalledDbAndPhp(w http.ResponseWriter, r *http.Request) {
 	mysqlInstalled, _ := s.appRepo.IsInstalled("slug like ?", "mysql%")
 	postgresqlInstalled, _ := s.appRepo.IsInstalled("slug like ?", "postgresql%")
 	php, _ := s.appRepo.GetInstalledAll("slug like ?", "php%")
@@ -206,7 +246,12 @@ func (s *InfoService) InstalledDbAndPhp(w http.ResponseWriter, r *http.Request)
 	})
 }
 
-func (s *InfoService) CheckUpdate(w http.ResponseWriter, r *http.Request) {
+func (s *DashboardService) CheckUpdate(w http.ResponseWriter, r *http.Request) {
+	if offline, _ := s.settingRepo.GetBool(biz.SettingKeyOfflineMode); offline {
+		Error(w, http.StatusForbidden, "离线模式下无法检查更新")
+		return
+	}
+
 	current := app.Version
 	latest, err := s.api.LatestVersion()
 	if err != nil {
@@ -236,7 +281,12 @@ func (s *InfoService) CheckUpdate(w http.ResponseWriter, r *http.Request) {
 	})
 }
 
-func (s *InfoService) UpdateInfo(w http.ResponseWriter, r *http.Request) {
+func (s *DashboardService) UpdateInfo(w http.ResponseWriter, r *http.Request) {
+	if offline, _ := s.settingRepo.GetBool(biz.SettingKeyOfflineMode); offline {
+		Error(w, http.StatusForbidden, "离线模式下无法检查更新")
+		return
+	}
+
 	current := app.Version
 	latest, err := s.api.LatestVersion()
 	if err != nil {
@@ -261,21 +311,21 @@ func (s *InfoService) UpdateInfo(w http.ResponseWriter, r *http.Request) {
 
 	versions, err := s.api.IntermediateVersions()
 	if err != nil {
-		Error(w, http.StatusInternalServerError, "获取更新信息失败：%v", err)
+		Error(w, http.StatusInternalServerError, "获取升级信息失败：%v", err)
 		return
 	}
 
 	Success(w, versions)
 }
 
-func (s *InfoService) Update(w http.ResponseWriter, r *http.Request) {
-	if s.taskRepo.HasRunningTask() {
-		Error(w, http.StatusInternalServerError, "当前有任务正在执行，禁止更新")
+func (s *DashboardService) Update(w http.ResponseWriter, r *http.Request) {
+	if offline, _ := s.settingRepo.GetBool(biz.SettingKeyOfflineMode); offline {
+		Error(w, http.StatusForbidden, "离线模式下无法升级")
 		return
 	}
-	if err := app.Orm.Exec("PRAGMA wal_checkpoint(TRUNCATE)").Error; err != nil {
-		types.Status = types.StatusFailed
-		Error(w, http.StatusInternalServerError, "面板数据库异常，已终止操作：%v", err)
+
+	if s.taskRepo.HasRunningTask() {
+		Error(w, http.StatusInternalServerError, "后台任务正在运行，禁止升级，请稍后再试")
 		return
 	}
 
@@ -292,21 +342,21 @@ func (s *InfoService) Update(w http.ResponseWriter, r *http.Request) {
 	}
 	ver, url, checksum := panel.Version, download.URL, download.Checksum
 
-	types.Status = types.StatusUpgrade
+	app.Status = app.StatusUpgrade
 	if err = s.settingRepo.UpdatePanel(ver, url, checksum); err != nil {
-		types.Status = types.StatusFailed
+		app.Status = app.StatusFailed
 		Error(w, http.StatusInternalServerError, "%v", err)
 		return
 	}
 
-	types.Status = types.StatusNormal
-	tools.RestartPanel()
+	app.Status = app.StatusNormal
 	Success(w, nil)
+	tools.RestartPanel()
 }
 
-func (s *InfoService) Restart(w http.ResponseWriter, r *http.Request) {
+func (s *DashboardService) Restart(w http.ResponseWriter, r *http.Request) {
 	if s.taskRepo.HasRunningTask() {
-		Error(w, http.StatusInternalServerError, "当前有任务正在执行，禁止重启")
+		Error(w, http.StatusInternalServerError, "后台任务正在运行，禁止重启，请稍后再试")
 		return
 	}
 

internal/service/file.go

@@ -4,6 +4,7 @@ package service
 
 import (
 	"fmt"
+	stdio "io"
 	"net/http"
 	stdos "os"
 	"path/filepath"
@@ -119,18 +120,43 @@ func (s *FileService) Delete(w http.ResponseWriter, r *http.Request) {
 }
 
 func (s *FileService) Upload(w http.ResponseWriter, r *http.Request) {
-	req, err := Bind[request.FileUpload](r)
+	if err := r.ParseMultipartForm(2 << 30); err != nil {
+		Error(w, http.StatusUnprocessableEntity, "%v", err)
+		return
+	}
+
+	path := r.FormValue("path")
+	_, handler, err := r.FormFile("file")
 	if err != nil {
-		Error(w, http.StatusInternalServerError, "%v", err)
+		Error(w, http.StatusInternalServerError, "上传文件失败：%v", err)
+		return
+	}
+	if io.Exists(path) {
+		Error(w, http.StatusForbidden, "目标路径%s已存在", path)
 		return
 	}
 
-	if err = io.Write(req.Path, string(req.File), 0755); err != nil {
-		Error(w, http.StatusInternalServerError, "%v", err)
+	if !io.Exists(filepath.Dir(path)) {
+		if err = io.Mkdir(filepath.Dir(path), 0755); err != nil {
+			Error(w, http.StatusInternalServerError, "创建文件夹失败：%v", err)
+			return
+		}
+	}
+
+	src, _ := handler.Open()
+	out, err := stdos.OpenFile(path, stdos.O_CREATE|stdos.O_RDWR|stdos.O_TRUNC, 0644)
+	if err != nil {
+		Error(w, http.StatusInternalServerError, "打开文件失败：%v", err)
 		return
 	}
 
-	s.setPermission(req.Path, 0755, "www", "www")
+	if _, err = stdio.Copy(out, src); err != nil {
+		Error(w, http.StatusInternalServerError, "写入文件失败：%v", err)
+		return
+	}
+
+	_ = src.Close()
+	s.setPermission(path, 0755, "www", "www")
 	Success(w, nil)
 }
 

internal/service/file_windows.go

@@ -6,6 +6,7 @@ package service
 
 import (
 	"fmt"
+	stdio "io"
 	"net/http"
 	stdos "os"
 	"path/filepath"
@@ -119,18 +120,43 @@ func (s *FileService) Delete(w http.ResponseWriter, r *http.Request) {
 }
 
 func (s *FileService) Upload(w http.ResponseWriter, r *http.Request) {
-	req, err := Bind[request.FileUpload](r)
+	if err := r.ParseMultipartForm(2 << 30); err != nil {
+		Error(w, http.StatusUnprocessableEntity, "%v", err)
+		return
+	}
+
+	path := r.FormValue("path")
+	_, handler, err := r.FormFile("file")
 	if err != nil {
-		Error(w, http.StatusInternalServerError, "%v", err)
+		Error(w, http.StatusInternalServerError, "上传文件失败：%v", err)
+		return
+	}
+	if io.Exists(path) {
+		Error(w, http.StatusForbidden, "目标路径%s已存在", path)
 		return
 	}
 
-	if err = io.Write(req.Path, string(req.File), 0755); err != nil {
-		Error(w, http.StatusInternalServerError, "%v", err)
+	if !io.Exists(filepath.Dir(path)) {
+		if err = io.Mkdir(filepath.Dir(path), 0755); err != nil {
+			Error(w, http.StatusInternalServerError, "创建文件夹失败：%v", err)
+			return
+		}
+	}
+
+	src, _ := handler.Open()
+	out, err := stdos.OpenFile(path, stdos.O_CREATE|stdos.O_RDWR|stdos.O_TRUNC, 0644)
+	if err != nil {
+		Error(w, http.StatusInternalServerError, "打开文件失败：%v", err)
 		return
 	}
 
-	s.setPermission(req.Path, 0755, "www", "www")
+	if _, err = stdio.Copy(out, src); err != nil {
+		Error(w, http.StatusInternalServerError, "写入文件失败：%v", err)
+		return
+	}
+
+	_ = src.Close()
+	s.setPermission(path, 0755, "www", "www")
 	Success(w, nil)
 }
 

internal/service/firewall.go

@@ -15,7 +15,6 @@ type FirewallService struct {
 }
 
 func NewFirewallService() *FirewallService {
-
 	return &FirewallService{
 		firewall: firewall.NewFirewall(),
 	}
@@ -74,13 +73,15 @@ func (s *FirewallService) GetRules(w http.ResponseWriter, r *http.Request) {
 }
 
 func (s *FirewallService) CreateRule(w http.ResponseWriter, r *http.Request) {
-	req, err := Bind[request.FirewallCreateRule](r)
+	req, err := Bind[request.FirewallRule](r)
 	if err != nil {
 		Error(w, http.StatusUnprocessableEntity, "%v", err)
 		return
 	}
 
-	if err = s.firewall.Port(firewall.FireInfo{Port: req.Port, Protocol: req.Protocol}, "add"); err != nil {
+	if err = s.firewall.Port(firewall.FireInfo{
+		Family: req.Family, PortStart: req.PortStart, PortEnd: req.PortEnd, Protocol: req.Protocol, Address: req.Address, Strategy: req.Strategy, Direction: req.Direction,
+	}, firewall.OperationAdd); err != nil {
 		Error(w, http.StatusInternalServerError, "%v", err)
 		return
 	}
@@ -89,13 +90,15 @@ func (s *FirewallService) CreateRule(w http.ResponseWriter, r *http.Request) {
 }
 
 func (s *FirewallService) DeleteRule(w http.ResponseWriter, r *http.Request) {
-	req, err := Bind[request.FirewallCreateRule](r)
+	req, err := Bind[request.FirewallRule](r)
 	if err != nil {
 		Error(w, http.StatusUnprocessableEntity, "%v", err)
 		return
 	}
 
-	if err = s.firewall.Port(firewall.FireInfo{Port: req.Port, Protocol: req.Protocol}, "remove"); err != nil {
+	if err = s.firewall.Port(firewall.FireInfo{
+		Family: req.Family, PortStart: req.PortStart, PortEnd: req.PortEnd, Protocol: req.Protocol, Address: req.Address, Strategy: req.Strategy, Direction: req.Direction,
+	}, firewall.OperationRemove); err != nil {
 		Error(w, http.StatusInternalServerError, "%v", err)
 		return
 	}

internal/service/monitor.go

@@ -101,7 +101,7 @@ func (s *MonitorService) List(w http.ResponseWriter, r *http.Request) {
 		list.Load.Load1 = append(list.Load.Load1, monitor.Info.Load.Load1)
 		list.Load.Load5 = append(list.Load.Load5, monitor.Info.Load.Load5)
 		list.Load.Load15 = append(list.Load.Load15, monitor.Info.Load.Load15)
-		list.CPU.Percent = append(list.CPU.Percent, fmt.Sprintf("%.2f", monitor.Info.Percent[0]))
+		list.CPU.Percent = append(list.CPU.Percent, fmt.Sprintf("%.2f", monitor.Info.Percent))
 		list.Mem.Available = append(list.Mem.Available, fmt.Sprintf("%.2f", float64(monitor.Info.Mem.Available)/1024/1024))
 		list.Mem.Used = append(list.Mem.Used, fmt.Sprintf("%.2f", float64(monitor.Info.Mem.Used)/1024/1024))
 		list.SWAP.Used = append(list.SWAP.Used, fmt.Sprintf("%.2f", float64(monitor.Info.Swap.Used)/1024/1024))

pkg/acme/client.go

@@ -60,8 +60,8 @@ func (c *Client) UseHTTP(conf, path string) {
 	}
 }
 
-// ObtainSSL 签发 SSL 证书
-func (c *Client) ObtainSSL(ctx context.Context, domains []string, keyType KeyType) (Certificate, error) {
+// ObtainCertificate 签发 SSL 证书
+func (c *Client) ObtainCertificate(ctx context.Context, domains []string, keyType KeyType) (Certificate, error) {
 	certPrivateKey, err := generatePrivateKey(keyType)
 	if err != nil {
 		return Certificate{}, err
@@ -76,12 +76,12 @@ func (c *Client) ObtainSSL(ctx context.Context, domains []string, keyType KeyTyp
 		return Certificate{}, err
 	}
 
-	cert := c.selectPreferredChain(certs)
-	return Certificate{PrivateKey: pemPrivateKey, Certificate: cert}, nil
+	crt := c.selectPreferredChain(certs)
+	return Certificate{PrivateKey: pemPrivateKey, Certificate: crt}, nil
 }
 
-// ObtainSSLManual 手动验证 SSL 证书
-func (c *Client) ObtainSSLManual() (Certificate, error) {
+// ObtainCertificateManual 手动验证 SSL 证书
+func (c *Client) ObtainCertificateManual() (Certificate, error) {
 	// 发送信号，开始验证
 	c.controlChan <- struct{}{}
 	// 等待验证完成
@@ -94,20 +94,20 @@ func (c *Client) ObtainSSLManual() (Certificate, error) {
 	return data.(Certificate), nil
 }
 
-// RenewSSL 续签 SSL 证书
-func (c *Client) RenewSSL(ctx context.Context, certUrl string, domains []string, keyType KeyType) (Certificate, error) {
+// RenewCertificate 续签 SSL 证书
+func (c *Client) RenewCertificate(ctx context.Context, certUrl string, domains []string, keyType KeyType) (Certificate, error) {
 	_, err := c.zClient.GetCertificateChain(ctx, c.Account, certUrl)
 	if err != nil {
 		return Certificate{}, err
 	}
 
-	return c.ObtainSSL(ctx, domains, keyType)
+	return c.ObtainCertificate(ctx, domains, keyType)
 }
 
 // GetDNSRecords 获取 DNS 解析（手动设置）
 func (c *Client) GetDNSRecords(ctx context.Context, domains []string, keyType KeyType) ([]DNSRecord, error) {
 	go func(ctx context.Context, domains []string, keyType KeyType) {
-		certs, err := c.ObtainSSL(ctx, domains, keyType)
+		certs, err := c.ObtainCertificate(ctx, domains, keyType)
 		// 将证书和错误信息发送到 dataChan
 		if err != nil {
 			c.dataChan <- err

pkg/acme/client_test.go

@@ -34,8 +34,8 @@ func (s *ClientTestSuite) TestObtainSSL() {
 
 	time.Sleep(2 * time.Minute)
 
-	ssl, err := client.ObtainSSLManual()*/
-	ssl, err := client.ObtainSSL(ctx, []string{"*.haozi.net", "haozi.net"}, KeyEC256)
+	ssl, err := client.ObtainCertificateManual()*/
+	ssl, err := client.ObtainCertificate(ctx, []string{"*.haozi.net", "haozi.net"}, KeyEC256)
 	s.Error(err)
 	s.NotNil(ssl)
 }

pkg/acme/solvers.go

@@ -45,11 +45,11 @@ func (s httpSolver) Present(_ context.Context, challenge acme.Challenge) error {
 }
 `, challenge.Token, challenge.KeyAuthorization)
 	if err = os.WriteFile(s.conf, []byte(conf), 0644); err != nil {
-		return fmt.Errorf("无法写入OpenResty配置文件: %w", err)
+		return fmt.Errorf("无法写入Nginx配置文件: %w", err)
 	}
 	if err = systemctl.Reload("nginx"); err != nil {
 		_, err = shell.Execf("nginx -t")
-		return fmt.Errorf("无法重载OpenResty: %w", err)
+		return fmt.Errorf("无法重载Nginx: %w", err)
 	}
 
 	return nil

pkg/db/mysql.go

@@ -72,6 +72,31 @@ func (m *MySQL) DatabaseDrop(name string) error {
 	return err
 }
 
+func (m *MySQL) DatabaseExists(name string) (bool, error) {
+	rows, err := m.Query("SHOW DATABASES")
+	if err != nil {
+		return false, err
+	}
+	defer rows.Close()
+
+	for rows.Next() {
+		var database string
+		if err := rows.Scan(&database); err != nil {
+			continue
+		}
+		if database == name {
+			return true, nil
+		}
+	}
+	return false, nil
+}
+
+func (m *MySQL) DatabaseSize(name string) (int64, error) {
+	var size int64
+	err := m.QueryRow(fmt.Sprintf("SELECT SUM(data_length + index_length) FROM information_schema.tables WHERE table_schema = '%s'", name)).Scan(&size)
+	return size, err
+}
+
 func (m *MySQL) UserCreate(user, password string) error {
 	_, err := m.Exec(fmt.Sprintf("CREATE USER IF NOT EXISTS '%s'@'localhost' IDENTIFIED BY '%s'", user, password))
 	m.flushPrivileges()

pkg/db/postgres.go

@@ -77,6 +77,23 @@ func (m *Postgres) DatabaseDrop(name string) error {
 	return err
 }
 
+func (m *Postgres) DatabaseExist(name string) (bool, error) {
+	var count int
+	if err := m.QueryRow("SELECT COUNT(*) FROM pg_database WHERE datname = $1", name).Scan(&count); err != nil {
+		return false, err
+	}
+	return count > 0, nil
+}
+
+func (m *Postgres) DatabaseSize(name string) (int64, error) {
+	query := fmt.Sprintf("SELECT pg_database_size('%s')", name)
+	var size int64
+	if err := m.QueryRow(query).Scan(&size); err != nil {
+		return 0, err
+	}
+	return size, nil
+}
+
 func (m *Postgres) UserCreate(user, password string) error {
 	_, err := m.Exec(fmt.Sprintf("CREATE USER %s WITH PASSWORD '%s'", user, password))
 	if err != nil {