A pass over every feature against a real Docker daemon, then clicking through the UI as admin and read-only user, on a desktop and a phone. Security. /ws/deploy ran compose up for the read-only role; it is admin-only now. A container's inspect view, a stack's compose file (POSTGRES_PASSWORD: hunter2) and the viewer's .env tab no longer show credentials to that role. Git branch and URL values that git would read as options (-x, ext::) are refused. SFTP host keys are checked: pinned on first use or entered by hand (key line or SHA256 fingerprint), a different key is refused before the password is sent. A backup name from the API can no longer reach outside the destination folder. The file browser refuses to move or rename a browse root, as delete did. Docker lifecycle. Closing the deploy console released the stack lock while compose was still running and logged rc=None as success; deploys and updates are now background runs that hold the lock to the end, report the real exit code and can be re-attached to. Every closed log view left a `compose logs -f` behind. A dozen open tabs exhausted the default thread pool and hung the API; event and exec streams have their own threads. Auto-update and the update endpoint ignored failed pulls. A deleted git stack was recreated and started by the next webhook or poll; deleting a stack now drops its git source, auto-update policy and schedule entries. Deleting no longer walks into mounted shares, is refused while a backup runs, and removes the containers even when the compose file is broken. Stack folders compose has to normalise (Nextcloud -> nextcloud) work everywhere and group correctly on the volumes, networks and images pages. Detection. Host port conflicts read the container's own network namespace; /proc/1/net is read instead. Images referenced as docker.io/… were never update-checked; local builds no longer report "needs credentials". NVIDIA GPUs are read from the driver's procfs. The backup dialog's "path mismatch" warning came from mountinfo's filesystem-relative root and fired for any stacks folder on its own disk, ZFS dataset or btrfs subvolume; the host path now comes from Docker's mounts. Backups and destinations. The download ignored the folder/volume selection (axios sent binds[]). Restoring under a new name kept the old one. A report header past nginx's buffer turned a good backup into a 502. SFTP/S3 errors were bare 500s and "Test" did not try to write. A destination used by a schedule could be deleted. Backup file names are in the schedule's or the browser's time zone instead of UTC. Editor and converter. `docker run` conversion produced invalid compose for --network host, named volumes and -dit; --gpus and --mount were dropped; a multi-line command pasted into the one-line field became `image: ' '` (now a textarea, and flattened continuations are read). Validation failed for env_file stacks. The editor overwrote unsaved edits on every container event, lost them on a stray click (now asks), threw when closing the diff, and its helper panel listed the starter service "app" for every existing stack. Monaco is bundled instead of loaded from jsdelivr, so the editor works offline (and monaco-editor 0.57 drops the dompurify advisory; axios and react-router updated). UI. All times were two hours off: offset-less UTC from SQLite was read as local time, and "next run" always said "just now". A token refresh mid-session duplicated deploys, reset terminals and doubled logs. A backend restart (update, self-update) signed everyone out on reload; the page now waits for it. The editor was unusable on a phone, tables and tabs overflowed, dialog text was black on the dark theme, and the file browser opened on an error with the default roots. Read-only users get "Admin only" pages instead of 403s; in-use networks offer no delete; "Scan all" covers StackPilot's own stacks only and runs in the background instead of timing out at 600s. Deployment. nginx passes the port in Host (the OIDC redirect URI lost :5009) and keeps an outer proxy's X-Forwarded-Proto. The frontend waits for a healthy backend (healthcheck probes every 2s while starting). The frontend image builds with npm ci. Secrets are 0644 in a 0700 folder so non-root containers can read them; existing files are fixed at startup. The test suite no longer starts real containers on a host with Docker. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Fx7gcuy8d6nPd95g43rGHu
311 lines
11 KiB
TypeScript
311 lines
11 KiB
TypeScript
import { useState } from "react";
|
|
import { Link, useNavigate, useParams } from "react-router-dom";
|
|
import { useQuery, useQueryClient } from "@tanstack/react-query";
|
|
import {
|
|
Play,
|
|
Square,
|
|
RotateCw,
|
|
DownloadCloud,
|
|
ArrowUpCircle,
|
|
Pencil,
|
|
Power,
|
|
Trash2,
|
|
LayoutTemplate,
|
|
} from "lucide-react";
|
|
import { toast } from "sonner";
|
|
import { Badge, Button, Card, Input, Spinner } from "@/components/ui";
|
|
import { ConfirmDialog } from "@/components/ui/ConfirmDialog";
|
|
import { LogViewer } from "@/components/stacks/LogViewer";
|
|
import { ContainerCard } from "@/components/stacks/ContainerCard";
|
|
import { ActionStatusList } from "@/components/stacks/ActionStatusBanner";
|
|
import { StackLockBanner } from "@/components/stacks/StackLockBanner";
|
|
import { AutoUpdatePanel } from "@/components/stacks/AutoUpdatePanel";
|
|
import { SecretsPanel } from "@/components/stacks/SecretsPanel";
|
|
import { GitPanel } from "@/components/stacks/GitPanel";
|
|
import { StackIconEditor } from "@/components/stacks/IconPicker";
|
|
import { BackupButton } from "@/components/stacks/BackupRestore";
|
|
import { stacksApi } from "@/api/stacks";
|
|
import { templatesApi } from "@/api/templates";
|
|
import { apiErrorMessage } from "@/api/client";
|
|
import { useAuthStore } from "@/store/auth";
|
|
import { useStackActions } from "@/hooks/useStackActions";
|
|
import type { ContainerInfo } from "@/types";
|
|
|
|
const TABS = ["Overview", "Logs", "Environment", "Compose", "Secrets", "Git"] as const;
|
|
type Tab = (typeof TABS)[number];
|
|
|
|
export function StackDetail() {
|
|
const { id = "" } = useParams();
|
|
const isAdmin = useAuthStore((s) => s.user?.role === "admin");
|
|
const [tab, setTab] = useState<Tab>("Overview");
|
|
const actions = useStackActions();
|
|
const queryClient = useQueryClient();
|
|
|
|
const { data, isLoading } = useQuery({
|
|
queryKey: ["stack", id],
|
|
queryFn: () => stacksApi.get(id),
|
|
// Container state arrives over /ws/events; this is the fallback. A stack
|
|
// held by an operation is watched closely instead — the banner's "stop
|
|
// the backup" has to turn back into the normal page once it worked.
|
|
refetchInterval: (query) => (query.state.data?.lock ? 3000 : 30000),
|
|
});
|
|
|
|
if (isLoading || !data) return <Spinner />;
|
|
const busy = actions.isBusy(id);
|
|
|
|
return (
|
|
<div className="flex h-full flex-col space-y-4">
|
|
<div className="flex flex-wrap items-center justify-between gap-3">
|
|
<div className="flex items-center gap-3">
|
|
{/* Clicking the icon opens the picker — the way an existing stack
|
|
gets one without a trip through the editor. */}
|
|
<StackIconEditor stack={data} status={data.status} editable={isAdmin} />
|
|
<div>
|
|
<div className="flex items-center gap-2">
|
|
<h1 className="sp-heading text-xl">{data.name}</h1>
|
|
<Badge status={data.status}>{data.status}</Badge>
|
|
</div>
|
|
{data.description && (
|
|
<p className="mt-1 text-sm text-slate-500">{data.description}</p>
|
|
)}
|
|
</div>
|
|
</div>
|
|
{isAdmin && (
|
|
<div className="flex flex-wrap gap-2">
|
|
<Button variant="outline" onClick={() => actions.start(id)} loading={busy}>
|
|
<Play className="h-4 w-4 text-green-500" /> Start
|
|
</Button>
|
|
<Button variant="outline" onClick={() => actions.stop(id)} loading={busy}>
|
|
<Square className="h-4 w-4 text-red-500" /> Stop
|
|
</Button>
|
|
<Button variant="outline" onClick={() => actions.restart(id)} loading={busy}>
|
|
<RotateCw className="h-4 w-4 text-sky-500" /> Restart
|
|
</Button>
|
|
<Button variant="outline" onClick={() => actions.pull(id)} loading={busy}>
|
|
<DownloadCloud className="h-4 w-4" /> Pull
|
|
</Button>
|
|
<Button variant="outline" onClick={() => actions.updateImages(id)} loading={busy}>
|
|
<ArrowUpCircle className="h-4 w-4" /> Update
|
|
</Button>
|
|
<Button variant="outline" onClick={() => actions.down(id)} loading={busy}>
|
|
<Power className="h-4 w-4" /> Down
|
|
</Button>
|
|
<BackupButton stackId={id} />
|
|
<SaveAsTemplateButton stackId={id} defaultName={data.name} />
|
|
<Link to={`/stacks/${id}/edit`}>
|
|
<Button>
|
|
<Pencil className="h-4 w-4" /> Edit
|
|
</Button>
|
|
</Link>
|
|
<DeleteStackButton stackId={id} />
|
|
</div>
|
|
)}
|
|
</div>
|
|
|
|
{data.lock && isAdmin && <StackLockBanner stackId={id} lock={data.lock} />}
|
|
|
|
<ActionStatusList statuses={actions.statuses} onDismiss={actions.dismissStatus} />
|
|
|
|
{/* Tabs */}
|
|
<div className="flex gap-1 overflow-x-auto border-b border-slate-200 dark:border-slate-700">
|
|
{TABS.map((t) => (
|
|
<button
|
|
key={t}
|
|
onClick={() => setTab(t)}
|
|
className={
|
|
tab === t
|
|
? "shrink-0 whitespace-nowrap border-b-2 border-accent px-4 py-2 text-sm font-medium text-accent dark:border-accent-dark dark:text-accent-dark"
|
|
: "shrink-0 whitespace-nowrap px-4 py-2 text-sm text-slate-500 hover:text-slate-700 dark:hover:text-slate-300"
|
|
}
|
|
>
|
|
{t}
|
|
</button>
|
|
))}
|
|
</div>
|
|
|
|
<div className="flex-1 overflow-hidden">
|
|
{tab === "Overview" && (
|
|
<Overview
|
|
data={data}
|
|
isAdmin={isAdmin}
|
|
onChanged={() => queryClient.invalidateQueries({ queryKey: ["stack", id] })}
|
|
/>
|
|
)}
|
|
{tab === "Logs" && <LogViewer stackId={id} />}
|
|
{tab === "Environment" && <EnvView env={data.env} isAdmin={isAdmin} />}
|
|
{tab === "Compose" && <ComposeView yaml={data.yaml} />}
|
|
{tab === "Git" && <GitPanel stackId={id} isAdmin={isAdmin} />}
|
|
{tab === "Secrets" && (
|
|
<SecretsPanel
|
|
stackId={id}
|
|
yaml={data.yaml}
|
|
isAdmin={isAdmin}
|
|
onChanged={() => queryClient.invalidateQueries({ queryKey: ["stack", id] })}
|
|
/>
|
|
)}
|
|
</div>
|
|
</div>
|
|
);
|
|
}
|
|
|
|
function Overview({
|
|
data,
|
|
isAdmin,
|
|
onChanged,
|
|
}: {
|
|
data: ReturnType<typeof Object> & any;
|
|
isAdmin: boolean;
|
|
onChanged: () => void;
|
|
}) {
|
|
return (
|
|
<div className="space-y-2 overflow-auto">
|
|
<AutoUpdatePanel stackId={data.id} isAdmin={isAdmin} />
|
|
{data.containers.length === 0 && (
|
|
<Card>
|
|
<p className="text-sm text-slate-500">
|
|
No containers running. Start the stack to see services.
|
|
</p>
|
|
</Card>
|
|
)}
|
|
{data.containers.map((c: ContainerInfo) => (
|
|
<ContainerCard key={c.id} container={c} isAdmin={isAdmin} onChanged={onChanged} />
|
|
))}
|
|
</div>
|
|
);
|
|
}
|
|
|
|
function EnvView({ env, isAdmin }: { env: string; isAdmin: boolean }) {
|
|
return (
|
|
<Card className="h-full overflow-auto">
|
|
{env ? (
|
|
<pre className="whitespace-pre-wrap font-mono text-xs">{env}</pre>
|
|
) : isAdmin ? (
|
|
<p className="text-sm text-slate-500">No .env file for this stack.</p>
|
|
) : (
|
|
// The server leaves it out for this role; "no .env file" was untrue.
|
|
<p className="text-sm text-slate-500">The .env file is shown to administrators only.</p>
|
|
)}
|
|
</Card>
|
|
);
|
|
}
|
|
|
|
function ComposeView({ yaml }: { yaml: string }) {
|
|
return (
|
|
<Card className="h-full overflow-auto">
|
|
<pre className="whitespace-pre-wrap font-mono text-xs">{yaml}</pre>
|
|
</Card>
|
|
);
|
|
}
|
|
|
|
function DeleteStackButton({ stackId }: { stackId: string }) {
|
|
const navigate = useNavigate();
|
|
const qc = useQueryClient();
|
|
const [open, setOpen] = useState(false);
|
|
const [deleteFiles, setDeleteFiles] = useState(true);
|
|
const [busy, setBusy] = useState(false);
|
|
|
|
const remove = async () => {
|
|
setBusy(true);
|
|
const t = toast.loading(`Deleting ${stackId}…`);
|
|
try {
|
|
const res = await stacksApi.remove(stackId, deleteFiles);
|
|
if (res.kept?.length) {
|
|
toast.success(`Deleted ${stackId}`, {
|
|
id: t,
|
|
description: `Left in place (another filesystem is mounted there): ${res.kept.join(", ")}`,
|
|
});
|
|
} else {
|
|
toast.success(`Deleted ${stackId}`, { id: t });
|
|
}
|
|
qc.invalidateQueries({ queryKey: ["stacks"] });
|
|
navigate("/stacks");
|
|
} catch (e) {
|
|
toast.error(apiErrorMessage(e), { id: t });
|
|
setBusy(false);
|
|
}
|
|
};
|
|
|
|
return (
|
|
<>
|
|
<Button variant="danger" onClick={() => setOpen(true)}>
|
|
<Trash2 className="h-4 w-4" /> Delete
|
|
</Button>
|
|
{open && (
|
|
<ConfirmDialog
|
|
title={`Delete stack “${stackId}”?`}
|
|
message="The stack's containers are stopped and removed. Named volumes are kept. This cannot be undone."
|
|
confirmLabel="Delete stack"
|
|
danger
|
|
busy={busy}
|
|
onConfirm={remove}
|
|
onCancel={() => setOpen(false)}
|
|
>
|
|
<label className="flex items-start gap-2 text-sm">
|
|
<input
|
|
type="checkbox"
|
|
checked={deleteFiles}
|
|
onChange={(e) => setDeleteFiles(e.target.checked)}
|
|
className="mt-0.5 h-4 w-4"
|
|
/>
|
|
<span>
|
|
Also delete the stack folder from disk
|
|
<span className="block text-xs text-slate-500">
|
|
Everything in <code>{stackId}/</code> goes — the compose file, <code>.env</code> and
|
|
any data folders inside it (e.g. <code>./config</code>). Shares or disks mounted
|
|
inside are left alone. Uncheck to keep the folder; StackPilot will then list it
|
|
again as a stopped stack.
|
|
</span>
|
|
</span>
|
|
</label>
|
|
</ConfirmDialog>
|
|
)}
|
|
</>
|
|
);
|
|
}
|
|
|
|
function SaveAsTemplateButton({ stackId, defaultName }: { stackId: string; defaultName: string }) {
|
|
const [open, setOpen] = useState(false);
|
|
const [name, setName] = useState(defaultName);
|
|
const [busy, setBusy] = useState(false);
|
|
|
|
const save = async () => {
|
|
if (!name.trim()) {
|
|
toast.error("Template name required");
|
|
return;
|
|
}
|
|
setBusy(true);
|
|
try {
|
|
await templatesApi.saveFromStack({ stack_id: stackId, name: name.trim() });
|
|
toast.success(`Saved template “${name.trim()}”`);
|
|
setOpen(false);
|
|
} catch (e) {
|
|
toast.error(apiErrorMessage(e));
|
|
} finally {
|
|
setBusy(false);
|
|
}
|
|
};
|
|
|
|
return (
|
|
<>
|
|
<Button variant="outline" onClick={() => setOpen(true)}>
|
|
<LayoutTemplate className="h-4 w-4" /> Save as template
|
|
</Button>
|
|
{open && (
|
|
<ConfirmDialog
|
|
title="Save as template"
|
|
message="Snapshots this stack's compose and .env into a reusable custom template."
|
|
confirmLabel="Save template"
|
|
busy={busy}
|
|
onConfirm={save}
|
|
onCancel={() => setOpen(false)}
|
|
>
|
|
<label className="block space-y-1">
|
|
<span className="text-xs font-medium text-slate-500">Template name</span>
|
|
<Input value={name} onChange={(e) => setName(e.target.value)} />
|
|
</label>
|
|
</ConfirmDialog>
|
|
)}
|
|
</>
|
|
);
|
|
}
|