Revert "Cypress debugging"

This reverts commit 437b06b64b.

.dockerignore

@@ -0,0 +1,8 @@
+# Ignore everything
+*
+
+# Only allow the following for docker build:
+!backend/
+!docker/
+!scripts/
+!test/

.github/ISSUE_TEMPLATE/bug_report.md

@@ -0,0 +1,55 @@
+---
+name: Bug report
+about: Create a report to help us improve
+title: ''
+labels: bug
+assignees: ''
+
+---
+<!--
+ 
+Are you in the right place?
+- If you are looking for support on how to get your upstream server forwarding, please consider asking the community on Reddit.
+- If you are writing code changes to contribute and need to ask about the internals of the software, Gitter is the best place to ask.
+- If you think you found a bug with NPM (not Nginx, or your upstream server or MySql) then you are in the *right place.*
+
+-->
+
+**Checklist**
+- Have you pulled and found the error with `jc21/nginx-proxy-manager:latest` docker image?
+  - Yes / No
+- Are you sure you're not using someone else's docker image?
+  - Yes / No
+- Have you searched for similar issues (both open and closed)?
+  - Yes / No
+
+**Describe the bug**
+<!-- A clear and concise description of what the bug is. -->
+
+
+**Nginx Proxy Manager Version**
+<!-- What version of Nginx Proxy Manager is reported on the login page? -->
+
+
+**To Reproduce**
+Steps to reproduce the behavior:
+1. Go to '...'
+2. Click on '....'
+3. Scroll down to '....'
+4. See error
+
+
+**Expected behavior**
+<!-- A clear and concise description of what you expected to happen. -->
+
+
+**Screenshots**
+<!-- If applicable, add screenshots to help explain your problem. -->
+
+
+**Operating System**
+<!-- Please specify if using a Rpi, Mac, orchestration tool or any other setups that might affect the reproduction of this error. -->
+
+
+**Additional context**
+<!-- Add any other context about the problem here, docker version, browser version, logs if applicable to the problem. Too much info is better than too little. -->

.github/ISSUE_TEMPLATE/dns_challenge_request.md

@@ -0,0 +1,18 @@
+---
+name: DNS challenge provider request
+about: Suggest a new provider to be available for a certificate DNS challenge
+title: ''
+labels: dns provider request
+assignees: ''
+
+---
+
+**What provider would you like to see added to NPM?**
+<!-- What is this provider called? -->
+
+
+**Have you checked if a certbot plugin exists?**
+<!-- 
+Currently NPM only supports DNS challenge providers for which a certbot plugin exists. 
+You can visit pypi.org, and search for a package with the name `certbot-dns-<privider>`.
+-->

.github/ISSUE_TEMPLATE/feature_request.md

@@ -0,0 +1,32 @@
+---
+name: Feature request
+about: Suggest an idea for this project
+title: ''
+labels: enhancement
+assignees: ''
+
+---
+
+<!--
+
+Are you in the right place?
+- If you are looking for support on how to get your upstream server forwarding, please consider asking the community on Reddit.
+- If you are writing code changes to contribute and need to ask about the internals of the software, Gitter is the best place to ask.
+- If you think you found a bug with NPM (not Nginx, or your upstream server or MySql) then you are in the *right place.*
+
+-->
+
+**Is your feature request related to a problem? Please describe.**
+<!-- A clear and concise description of what the problem is. Ex. I'm always frustrated when [...] -->
+
+
+**Describe the solution you'd like**
+<!-- A clear and concise description of what you want to happen. -->
+
+
+**Describe alternatives you've considered**
+<!-- A clear and concise description of any alternative solutions or features you've considered. -->
+
+
+**Additional context**
+<!-- Add any other context or screenshots about the feature request here. -->

.gitignore

@@ -1,9 +1,25 @@
+git.idea
+.env
 .DS_Store
-.idea
 ._*
-manager/node_modules
+*.code-workspace
-manager/core*
+vendor
-manager/dist
+bin/*
-manager/webpack_stats.html
+backend/config.json
-config/*
+backend/embed/assets
-letsencrypt/*
+test/node_modules
+*/node_modules
+docs/.vuepress/dist
+frontend/build
+frontend/yarn-error.log
+frontend/.npmrc
+frontend/src/locale/lang
+test/cypress/fixtures/example.json
+.vscode
+docker-build
+data
+dist
+backend/embed/acme.sh
+docker/dev/resolv.conf
+docker/dev/dnsrouter-config.json.tmp
+

.version

@@ -0,0 +1 @@
+3.0.0a

DEV-README.md

@@ -0,0 +1,93 @@
+# Development
+
+```bash
+git clone nginxproxymanager
+cd nginxproxymanager
+./scripts/start-dev
+# wait a minute or 2 for the package to build after container start
+curl http://127.0.0.1:3081/api/
+```
+
+## Using Local Test Certificate Authorities
+
+It's handy to use these instead of hitting production or staging acme servers
+when testing lots of stuff.
+
+Firstly create your first user using the api:
+
+```bash
+curl --request POST \
+  --url http://127.0.0.1:3081/api/users \
+  --header 'Content-Type: application/json' \
+  --data '{
+    "name": "Bobby Tables",
+    "nickname": "Bobby",
+    "email": "you@example.com",
+    "roles": ["admin"],
+    "is_disabled": false,
+    "auth": {
+      "type": "password",
+      "secret": "changeme"
+    }
+}'
+```
+
+Then login in with those credentials to get your JWT token and set
+that as an environment variable:
+
+```bash
+NPM_TOKEN=$(curl --request POST \
+  --url http://127.0.0.1:3081/api/tokens \
+  --header 'Content-Type: application/json' \
+  --data '{
+    "type": "password",
+    "identity": "you@example.com",
+    "secret": "changeme"
+}' | jq -r '.result.token')
+```
+
+Then choose one or both of the following CA's to set up.
+
+### SmallStep Acme CA
+
+[StepCA](https://github.com/smallstep/certificates) is SmallSteps's test CA server.
+
+- ✅ HTTP Validation
+- ✅ DNS Validation
+
+Create a Certificate Authority that points to the Step CA:
+
+```bash
+curl --request POST \
+  --url http://127.0.0.1:3081/api/certificate-authorities \
+  --header "Authorization: Bearer ${NPM_TOKEN}" \
+  --header 'Content-Type: application/json' \
+  --data '{
+    "name": "Step CA",
+    "acmesh_server": "https://ca.internal/acme/acme/directory",
+    "ca_bundle": "/etc/ssl/certs/NginxProxyManager.crt",
+    "max_domains": 2
+}'
+```
+
+### Pebble Test Acme CA
+
+[Pebble](https://github.com/letsencrypt/pebble) is Let's Encrypt's own test CA server.
+
+- ✅ HTTP Validation
+- ❌ DNS Validation
+
+Create a Certificate Authority that points to the Pebble CA:
+
+```bash
+curl --request POST \
+  --url http://127.0.0.1:3081/api/certificate-authorities \
+  --header "Authorization: Bearer ${NPM_TOKEN}" \
+  --header 'Content-Type: application/json' \
+  --data '{
+    "name": "Pebble CA",
+    "acmesh_server": "https://pebble/dir",
+    "ca_bundle": "/etc/ssl/certs/pebble.minica.pem",
+    "max_domains": 2
+}'
+```

Dockerfile

@@ -1,28 +0,0 @@
-FROM jc21/nginx-proxy-manager-base
-
-ENV SUPPRESS_NO_CONFIG_WARNING=1
-ENV S6_FIX_ATTRS_HIDDEN=1
-RUN echo "fs.file-max = 65535" > /etc/sysctl.conf
-
-# root filesystem
-COPY rootfs /
-
-# s6 overlay
-RUN curl -L -o /tmp/s6-overlay-amd64.tar.gz "https://github.com/just-containers/s6-overlay/releases/download/v1.21.2.1/s6-overlay-amd64.tar.gz" \
-    && tar xzf /tmp/s6-overlay-amd64.tar.gz -C /
-
-# App
-ENV NODE_ENV=production
-
-#ADD LICENCE                     /srv/manager/LICENCE
-#ADD README.md                   /srv/manager/README.md
-ADD manager/dist                /srv/manager/dist
-ADD manager/node_modules        /srv/manager/node_modules
-ADD manager/src/backend         /srv/manager/src/backend
-ADD manager/package.json        /srv/manager/package.json
-
-# Volumes
-VOLUME [ "/config", "/etc/letsencrypt" ]
-CMD [ "/init" ]
-
-HEALTHCHECK --interval=15s --timeout=3s CMD curl -f http://localhost:9876/health || exit 1

Jenkinsfile

@@ -0,0 +1,247 @@
+pipeline {
+	agent {
+		label 'docker-multiarch'
+	}
+	options {
+		buildDiscarder(logRotator(numToKeepStr: '5'))
+		disableConcurrentBuilds()
+		ansiColor('xterm')
+	}
+	environment {
+		DOCKER_ORG                 = 'jc21'
+		IMAGE                      = 'nginx-proxy-manager'
+		BUILD_VERSION              = getVersion()
+		BUILD_COMMIT               = getCommit()
+		MAJOR_VERSION              = '3'
+		BRANCH_LOWER               = "${BRANCH_NAME.toLowerCase().replaceAll('/', '-')}"
+		COMPOSE_PROJECT_NAME       = "npm_${BRANCH_LOWER}_${BUILD_NUMBER}"
+		COMPOSE_FILE               = 'docker/docker-compose.ci.yml'
+		COMPOSE_INTERACTIVE_NO_CLI = 1
+		BUILDX_NAME                = "${COMPOSE_PROJECT_NAME}"
+		DOCS_BUCKET                = 'jc21-npm-site-next' // TODO: change to prod when official
+		DOCS_CDN                   = 'E2Z0128EHS0Q23'     // TODO: same
+	}
+	stages {
+		stage('Environment') {
+			parallel {
+				stage('Master') {
+					when {
+						branch 'master'
+					}
+					steps {
+						script {
+							env.BUILDX_PUSH_TAGS = "-t docker.io/${DOCKER_ORG}/${IMAGE}:${BUILD_VERSION} -t docker.io/${DOCKER_ORG}/${IMAGE}:${MAJOR_VERSION} -t docker.io/${DOCKER_ORG}/${IMAGE}:latest"
+							echo 'Building on Master is disabled!'
+							sh 'exit 1'
+						}
+					}
+				}
+				stage('Other') {
+					when {
+						not {
+							branch 'master'
+						}
+					}
+					steps {
+						script {
+							// Defaults to the Branch name, which is applies to all branches AND pr's
+							// env.BUILDX_PUSH_TAGS = "-t docker.io/jc21/${IMAGE}:github-${BRANCH_LOWER}"
+							env.BUILDX_PUSH_TAGS = "-t docker.io/${DOCKER_ORG}/${IMAGE}:v3"
+						}
+					}
+				}
+			}
+		}
+		stage('Frontend') {
+			steps {
+				sh './scripts/ci/build-frontend'
+			}
+			/*
+			post {
+				always {
+					junit 'frontend/eslint.xml'
+					junit 'frontend/junit.xml'
+				}
+			}
+			*/
+		}
+		stage('Backend') {
+			steps {
+				withCredentials([string(credentialsId: 'npm-sentry-dsn', variable: 'SENTRY_DSN')]) {
+					withCredentials([usernamePassword(credentialsId: 'oss-index-token', passwordVariable: 'NANCY_TOKEN', usernameVariable: 'NANCY_USER')]) {
+						sh './scripts/ci/test-backend'
+					}
+					sh './scripts/ci/build-backend'
+					sh '''docker build --pull --no-cache \\
+						-t "${IMAGE}:${BRANCH_LOWER}-ci-${BUILD_NUMBER}" \\
+						-f docker/Dockerfile \\
+						--build-arg BUILD_COMMIT="${BUILD_COMMIT}" \\
+						--build-arg BUILD_DATE="$(date '+%Y-%m-%d %T %Z')" \\
+						--build-arg BUILD_VERSION="${BUILD_VERSION}" \\
+						.
+					'''
+				}
+			}
+			post {
+				success {
+					archiveArtifacts allowEmptyArchive: false, artifacts: 'bin/*'
+				}
+			}
+		}
+		stage('Test') {
+			when {
+				not {
+					equals expected: 'UNSTABLE', actual: currentBuild.result
+				}
+			}
+			steps {
+				// Docker image check
+				/*
+				sh '''docker run --rm \
+					-v /var/run/docker.sock:/var/run/docker.sock \
+					-v "$(pwd)/docker:/app" \
+					-e CI=true \
+					wagoodman/dive:latest --ci-config /app/.dive-ci \
+					"${IMAGE}:${BRANCH_LOWER}-ci-${BUILD_NUMBER}"
+				'''
+				*/
+				sh './scripts/ci/fulltest-cypress'
+			}
+			post {
+				always {
+					// Dumps to analyze later
+					sh 'mkdir -p debug'
+					sh 'docker-compose logs fullstack > debug/docker_fullstack.log'
+					sh 'docker-compose logs stepca > debug/docker_stepca.log'
+					sh 'docker-compose logs pdns > debug/docker_pdns.log'
+					sh 'docker-compose logs pdns-db > debug/docker_pdns-db.log'
+					sh 'docker-compose logs dnsrouter > debug/docker_dnsrouter.log'
+					junit 'test/results/junit/*'
+				}
+			}
+		}
+		stage('Docs') {
+			when {
+				not {
+					equals expected: 'UNSTABLE', actual: currentBuild.result
+				}
+			}
+			steps {
+				dir(path: 'docs') {
+					sh 'yarn install'
+					sh 'yarn build'
+				}
+
+				// API Docs:
+				sh 'docker-compose exec -T fullstack curl -s --output /temp-docs/api-schema.json "http://fullstack:81/api/schema"'
+				sh 'mkdir -p "docs/.vuepress/dist/api"'
+				sh 'mv docs/api-schema.json docs/.vuepress/dist/api/'
+
+				dir(path: 'docs/.vuepress/dist') {
+					sh 'tar -czf ../../docs.tgz *'
+				}
+			}
+		}
+		stage('MultiArch Build') {
+			when {
+				not {
+					equals expected: 'UNSTABLE', actual: currentBuild.result
+				}
+			}
+			steps {
+				withCredentials([string(credentialsId: 'npm-sentry-dsn', variable: 'SENTRY_DSN')]) {
+					withCredentials([usernamePassword(credentialsId: 'jc21-dockerhub', passwordVariable: 'dpass', usernameVariable: 'duser')]) {
+						sh 'docker login -u "${duser}" -p "${dpass}"'
+						sh './scripts/buildx --push ${BUILDX_PUSH_TAGS}'
+						// sh './scripts/buildx -o type=local,dest=docker-build'
+					}
+				}
+			}
+		}
+		stage('Docs Deploy') {
+			when {
+				allOf {
+					branch 'v3' // TOODO: change to master when ready
+					not {
+						equals expected: 'UNSTABLE', actual: currentBuild.result
+					}
+				}
+			}
+			steps {
+				withCredentials([[$class: 'AmazonWebServicesCredentialsBinding', accessKeyVariable: 'AWS_ACCESS_KEY_ID', credentialsId: 'npm-s3-docs', secretKeyVariable: 'AWS_SECRET_ACCESS_KEY']]) {
+					sh """docker run --rm \\
+						--name \${COMPOSE_PROJECT_NAME}-docs-upload \\
+						-e S3_BUCKET=$DOCS_BUCKET \\
+						-e AWS_ACCESS_KEY_ID=$AWS_ACCESS_KEY_ID \\
+						-e AWS_SECRET_ACCESS_KEY=$AWS_SECRET_ACCESS_KEY \\
+						-v \$(pwd):/app \\
+						-w /app \\
+						jc21/ci-tools \\
+						scripts/docs-upload /app/docs/.vuepress/dist/
+					"""
+
+					sh """docker run --rm \\
+						--name \${COMPOSE_PROJECT_NAME}-docs-invalidate \\
+						-e AWS_ACCESS_KEY_ID=$AWS_ACCESS_KEY_ID \\
+						-e AWS_SECRET_ACCESS_KEY=$AWS_SECRET_ACCESS_KEY \\
+						jc21/ci-tools \\
+						aws cloudfront create-invalidation --distribution-id $DOCS_CDN --paths '/*'
+					"""
+				}
+			}
+		}
+		stage('PR Comment') {
+			when {
+				allOf {
+					changeRequest()
+					not {
+						equals expected: 'UNSTABLE', actual: currentBuild.result
+					}
+				}
+			}
+			steps {
+				script {
+					def comment = pullRequest.comment("This is an automated message from CI:\n\nDocker Image for build ${BUILD_NUMBER} is available on [DockerHub](https://cloud.docker.com/repository/docker/${DOCKER_ORG}/${IMAGE}) as `${DOCKER_ORG}/${IMAGE}:github-${BRANCH_LOWER}`\n\n**Note:** ensure you backup your NPM instance before testing this PR image! Especially if this PR contains database changes.")
+				}
+			}
+		}
+	}
+	post {
+		always {
+			sh 'docker-compose down --rmi all --remove-orphans --volumes -t 30 || true'
+			sh './scripts/ci/build-cleanup'
+			echo 'Reverting ownership'
+			sh 'docker run --rm -v $(pwd):/data jc21/gotools:latest chown -R "$(id -u):$(id -g)" /data'
+		}
+		success {
+			juxtapose event: 'success'
+			sh 'figlet "SUCCESS"'
+		}
+		failure {
+			dir(path: 'test') {
+				archiveArtifacts allowEmptyArchive: true, artifacts: 'results/**/*', excludes: '**/*.xml'
+			}
+			archiveArtifacts(artifacts: 'debug/**.*', allowEmptyArchive: true)
+			juxtapose event: 'failure'
+			sh 'figlet "FAILURE"'
+		}
+		unstable {
+			dir(path: 'test') {
+				archiveArtifacts allowEmptyArchive: true, artifacts: 'results/**/*', excludes: '**/*.xml'
+			}
+			archiveArtifacts(artifacts: 'debug/**.*', allowEmptyArchive: true)
+			juxtapose event: 'unstable'
+			sh 'figlet "UNSTABLE"'
+		}
+	}
+}
+
+def getVersion() {
+	ver = sh(script: 'cat .version', returnStdout: true)
+	return ver.trim()
+}
+
+def getCommit() {
+	ver = sh(script: 'git log -n 1 --format=%h', returnStdout: true)
+	return ver.trim()
+}

README.md

@@ -1,84 +1,40 @@
-![Nginx Proxy Manager](https://public.jc21.com/nginx-proxy-manager/github.png "Nginx Proxy Manager")
+<p align="center">
-
+	<img src="https://nginxproxymanager.com/github.png">
-# Nginx Proxy Manager
+	<br><br>
-
+	<img src="https://img.shields.io/badge/version-2.9.19-green.svg?style=for-the-badge">
-![Version](https://img.shields.io/badge/version-1.0.1-green.svg)
+	<a href="https://hub.docker.com/repository/docker/jc21/nginx-proxy-manager">
-![Stars](https://img.shields.io/docker/stars/jc21/nginx-proxy-manager.svg)
+		<img src="https://img.shields.io/docker/stars/jc21/nginx-proxy-manager.svg?style=for-the-badge">
-![Pulls](https://img.shields.io/docker/pulls/jc21/nginx-proxy-manager.svg)
+	</a>
-
+	<a href="https://hub.docker.com/repository/docker/jc21/nginx-proxy-manager">
-![Build Status](http://bamboo.jc21.com/plugins/servlet/wittified/build-status/AB-NPM)
+		<img src="https://img.shields.io/docker/pulls/jc21/nginx-proxy-manager.svg?style=for-the-badge">
+	</a>
+</p>
 
 This project comes as a pre-built docker image that enables you to easily forward to your websites
 running at home or otherwise, including free SSL, without having to know too much about Nginx or Letsencrypt.
 
+- [Quick Setup](#quick-setup)
+- [Full Setup](https://nginxproxymanager.com/setup/)
+- [Screenshots](https://nginxproxymanager.com/screenshots/)
+
+## Project Goal
+
+I created this project to fill a personal need to provide users with a easy way to accomplish reverse
+proxying hosts with SSL termination and it had to be so easy that a monkey could do it. This goal hasn't changed.
+While there might be advanced options they are optional and the project should be as simple as possible
+so that the barrier for entry here is low.
+
+<a href="https://www.buymeacoffee.com/jc21" target="_blank"><img src="http://public.jc21.com/github/by-me-a-coffee.png" alt="Buy Me A Coffee" style="height: 51px !important;width: 217px !important;" ></a>
+
 
 ## Features
 
-- Clean and simple interface
+- Beautiful and Secure Admin Interface based on [Chakra UI](https://chakra-ui.com/)
-- Create an unlimited number of hosts and forward them to any IPv4/Port combination running HTTP
+- Easily create forwarding domains, redirections, streams and 404 hosts without knowing anything about Nginx
-- Secure your sites with SSL and optionally force SSL
+- Free SSL using Let's Encrypt or provide your own custom SSL certificates
-- Secure your sites with Basic HTTP Authentication Access Lists
+- Access Lists and basic HTTP Authentication for your hosts
-- Advanced Nginx config option for super users
+- Advanced Nginx configuration available for super users
-- 3 domain uses:
+- User management, permissions and audit log
-  - Proxy requests to upstream server
-  - Redirect requests to another domain
-  - Return immediate 404's
-
-
-## Getting started
-
-### Method 1: Using docker-compose
-
-By far the easiest way to get up and running. Create this `docker-compose.yml`
-
-```yml
-version: "2"
-services:
-  app:
-    image: jc21/nginx-proxy-manager
-    restart: always
-    ports:
-      - 80:80
-      - 81:81
-      - 443:443
-    volumes:
-      - ./config:/config
-      - ./letsencrypt:/etc/letsencrypt
-```
-
-Then:
-
-```bash
-docker-compose up -d
-```
-
-
-### Method 2: Using vanilla docker
-
-```bash
-docker run -d \
-    -p 80:80 \
-    -p 81:81 \
-    -p 443:443 \
-    -v /path/to/config:/config \
-    -v /path/to/letsencrypt:/etc/letsencrypt \
-    --restart always \
-    jc21/nginx-proxy-manager
-```
-
-
-## Administration
-
-Now that your docker container is running, connect to it on port `81` for the admin interface.
-
-[http://localhost:81](http://localhost:81)
-
-There is no authentication on this interface to keep things simple. It is expected that you would not
-expose port 81 to the outside world.
-
-From here, the rest should be self explanatory.
-
-Note: Requesting SSL Certificates won't work until this project is accessible from the outside world, as explained below.
 
 
 ## Hosting your home network
@@ -87,23 +43,59 @@ I won't go in to too much detail here but here are the basics for someone new to
 
 1. Your home router will have a Port Forwarding section somewhere. Log in and find it
 2. Add port forwarding for port 80 and 443 to the server hosting this project
-3. Configure your domain name details to point to your home, either with a static ip or a service like DuckDNS
+3. Configure your domain name details to point to your home, either with a static ip or a service like DuckDNS or [Amazon Route53](https://github.com/jc21/route53-ddns)
-4. Use the Nginx Proxy Manager here as your gateway to forward to your other web based services
+4. Use the Nginx Proxy Manager as your gateway to forward to your other web based services
 
 
-## Screenshots
+## Quickest Setup
 
-[![Screenshot](https://public.jc21.com/nginx-proxy-manager/npm-1-sm.jpg "Screenshot")](https://public.jc21.com/nginx-proxy-manager/npm-1.jpg)
+1. Install Docker and Docker-Compose
-[![Screenshot](https://public.jc21.com/nginx-proxy-manager/npm-2-sm.jpg "Screenshot")](https://public.jc21.com/nginx-proxy-manager/npm-2.jpg)
-[![Screenshot](https://public.jc21.com/nginx-proxy-manager/npm-3-sm.jpg "Screenshot")](https://public.jc21.com/nginx-proxy-manager/npm-3.jpg)
-[![Screenshot](https://public.jc21.com/nginx-proxy-manager/npm-4-sm.jpg "Screenshot")](https://public.jc21.com/nginx-proxy-manager/npm-4.jpg)
 
-## TODO
+- [Docker Install documentation](https://docs.docker.com/install/)
+- [Docker-Compose Install documentation](https://docs.docker.com/compose/install/)
 
-- Pass on human readable ssl cert errors to the ui
+2. Create a docker-compose.yml file similar to this:
-- Allow a host to be a redirection to another domain
-- UI: Allow column sorting on tables
-- UI: Allow filtering hosts by types
-- Advanced option to overwrite the default location block (or regex to do it automatically)
-- Add nice upstream error pages
 
+```yml
+version: '3'
+services:
+  app:
+    image: 'jc21/nginx-proxy-manager:v3'
+    restart: unless-stopped
+    ports:
+      - '80:80'
+      - '81:81'
+      - '443:443'
+    volumes:
+      - ./data:/data
+```
+
+3. Bring up your stack by running
+
+```bash
+docker-compose up -d
+
+# If using docker-compose-plugin
+docker compose up -d
+```
+
+4. Log in to the Admin UI
+
+When your docker container is running, connect to it on port `81` for the admin interface.
+
+[http://127.0.0.1:81](http://127.0.0.1:81)
+
+## Contributors
+
+Special thanks to [all of our contributors](https://github.com/NginxProxyManager/nginx-proxy-manager/graphs/contributors).
+
+## Getting Support
+
+1. [Found a bug?](https://github.com/NginxProxyManager/nginx-proxy-manager/issues)
+2. [Discussions](https://github.com/NginxProxyManager/nginx-proxy-manager/discussions)
+3. [Development Gitter](https://gitter.im/nginx-proxy-manager/community)
+4. [Reddit](https://reddit.com/r/nginxproxymanager)
+
+## Become a Contributor
+
+A guide to setting up your own development environment [is found here](DEV-README.md).

backend/.editorconfig

@@ -0,0 +1,8 @@
+root = true
+
+[*]
+indent_style = tab
+indent_size = 4
+charset = utf-8
+trim_trailing_whitespace = true
+insert_final_newline = false

backend/.golangci.yml

@@ -0,0 +1,56 @@
+linters:
+    enable:
+        - bodyclose
+        - errcheck
+        - gosimple
+        - govet
+        - gosec
+        - goconst
+        - gocritic
+        - gocyclo
+        - gofmt
+        - goimports
+        - ineffassign
+        - misspell
+        - nakedret
+        - prealloc
+        #- revive
+        - staticcheck
+        - typecheck
+        - unused
+        - unconvert
+        - unparam
+linters-settings:
+    goconst:
+        # minimal length of string constant
+        # default: 3
+        min-len: 2
+        # minimum number of occurrences of string constant
+        # default: 3
+        min-occurences: 2
+    misspell:
+        locale: UK
+        ignore-words:
+            - color
+issues:
+    # Maximum count of issues with the same text. Set to 0 to disable. Default is 3.
+    # We have chosen an arbitrary value that works based on practical usage.
+    max-same: 20
+    # See cmdline flag documentation for more info about default excludes --exclude-use-default
+    # Nothing is excluded by default
+    exclude-use-default: false
+    # Excluding configuration per-path, per-linter, per-text and per-source
+    exclude-rules:
+        # Exclude some linters from running on tests files. # TODO: Add examples why this is good
+
+        - path: _test\.go
+          linters:
+              # Tests should be simple? Add example why this is good?
+              - gocyclo
+              # Error checking adds verbosity and complexity for minimal value
+              - errcheck
+              # Table test encourage duplication in defining the table tests.
+              - dupl
+              # Hard coded example tokens, SQL injection and other bad practices may
+              # want to be tested
+              - gosec

backend/.nancy-ignore

@@ -0,0 +1,41 @@
+# If you need to ignore any of nancy's warnings add them
+
+# here with a reference to the package/version that
+
+# triggers them and rational for ignoring it.
+
+# pkg:golang/github.com/coreos/etcd@3.3.10
+
+# etcd before versions 3.3.23 and 3.4.10 does not perform any password length validation
+
+CVE-2020-15115
+
+# pkg:golang/github.com/coreos/etcd@3.3.10
+
+# In ectd before versions 3.4.10 and 3.3.23, gateway TLS authentication is only applied to endpoints detected in DNS SRV records
+
+CVE-2020-15136
+
+# pkg:golang/github.com/coreos/etcd@3.3.10
+
+# In etcd before versions 3.3.23 and 3.4.10, the etcd gateway is a simple TCP proxy to allow for basic service discovery and access
+
+CVE-2020-15114
+
+# pkg:golang/github.com/gorilla/websocket@1.4.0
+
+# Integer Overflow or Wraparound
+
+CWE-190
+
+# jwt-go before 4.0.0-preview1 allows attackers to bypass intended access restrict...
+
+CVE-2020-26160
+
+# https://ossindex.sonatype.org/vulnerability/sonatype-2021-1485
+
+sonatype-2021-1485
+
+# CWE-770: Allocation of Resources Without Limits or Throttling
+
+CVE-2022-41717

backend/README.md

@@ -0,0 +1,6 @@
+# Backend
+
+## Guides and materials
+
+-   [Nginx Proxy Protocol](https://docs.nginx.com/nginx/admin-guide/load-balancer/using-proxy-protocol/)
+-

backend/Taskfile.yml

@@ -0,0 +1,69 @@
+version: "2"
+
+tasks:
+    default:
+        cmds:
+            - task: run
+
+    run:
+        desc: Build and run
+        sources:
+            - internal/**/*.go
+            - cmd/**/*.go
+            - ../frontend/src/locale/src/*.json
+        cmds:
+            - task: locale
+            - task: build
+            - cmd: echo -e "==> Running..."
+              silent: true
+            - cmd: ../dist/bin/server
+              ignore_error: true
+              silent: true
+        env:
+            LOG_LEVEL: debug
+
+    build:
+        desc: Build the server
+        cmds:
+            - cmd: echo -e "==> Building..."
+              silent: true
+            - cmd: rm -f dist/bin/*
+              silent: true
+            - cmd: go build -ldflags="-X main.commit={{.GIT_COMMIT}} -X main.version={{.VERSION}}" -o ../dist/bin/server ./cmd/server/main.go
+              silent: true
+            - task: lint
+        vars:
+            GIT_COMMIT:
+                sh: git log -n 1 --format=%h
+            VERSION:
+                sh: cat ../.version
+        env:
+            GO111MODULE: on
+            CGO_ENABLED: 1
+
+    lint:
+        desc: Linting
+        cmds:
+            - cmd: echo -e "==> Linting..."
+              silent: true
+            - cmd: bash scripts/lint.sh
+              silent: true
+
+    test:
+        desc: Testing
+        cmds:
+            - cmd: echo -e "==> Testing..."
+              silent: true
+            - cmd: bash scripts/test.sh
+              silent: true
+
+    locale:
+        desc: Locale
+        dir: /app/frontend
+        cmds:
+            - cmd: yarn locale-compile
+              silent: true
+              ignore_error: true
+            - cmd: chown -R "$PUID:$PGID" src/locale/lang
+              silent: true
+              ignore_error: true

backend/cmd/server/main.go

@@ -0,0 +1,54 @@
+package main
+
+import (
+	"os"
+	"os/signal"
+	"syscall"
+
+	"npm/internal/api"
+	"npm/internal/config"
+	"npm/internal/database"
+	"npm/internal/entity/certificate"
+	"npm/internal/entity/host"
+	"npm/internal/entity/setting"
+	"npm/internal/jobqueue"
+	"npm/internal/logger"
+)
+
+var commit string
+var version string
+var sentryDSN string
+
+func main() {
+	config.InitArgs(&version, &commit)
+	config.Init(&version, &commit, &sentryDSN)
+
+	database.Migrate(func() {
+		setting.ApplySettings()
+		database.CheckSetup()
+
+		// Internal Job Queue
+		jobqueue.Start()
+		certificate.AddPendingJobs()
+		host.AddPendingJobs()
+
+		// Http server
+		api.StartServer()
+		irqchan := make(chan os.Signal, 1)
+		signal.Notify(irqchan, syscall.SIGINT, syscall.SIGTERM)
+
+		for irq := range irqchan {
+			if irq == syscall.SIGINT || irq == syscall.SIGTERM {
+				logger.Info("Got ", irq, " shutting server down ...")
+				// Close db
+				err := database.GetInstance().Close()
+				if err != nil {
+					logger.Error("DatabaseCloseError", err)
+				}
+				// nolint
+				jobqueue.Shutdown()
+				break
+			}
+		}
+	})
+}

backend/embed/api_docs/api.swagger.json

@@ -0,0 +1,297 @@
+{
+	"openapi": "3.0.0",
+	"info": {
+		"title": "Nginx Proxy Manager API",
+		"version": "{{VERSION}}"
+	},
+	"paths": {
+		"/": {
+			"get": {
+				"$ref": "file://./paths/get.json"
+			}
+		},
+		"/certificates": {
+			"get": {
+				"$ref": "file://./paths/certificates/get.json"
+			},
+			"post": {
+				"$ref": "file://./paths/certificates/post.json"
+			}
+		},
+		"/certificates/{certificateID}": {
+			"get": {
+				"$ref": "file://./paths/certificates/certificateID/get.json"
+			},
+			"put": {
+				"$ref": "file://./paths/certificates/certificateID/put.json"
+			},
+			"delete": {
+				"$ref": "file://./paths/certificates/certificateID/delete.json"
+			}
+		},
+		"/certificates-authorities": {
+			"get": {
+				"$ref": "file://./paths/certificates-authorities/get.json"
+			},
+			"post": {
+				"$ref": "file://./paths/certificates-authorities/post.json"
+			}
+		},
+		"/certificates-authorities/{caID}": {
+			"get": {
+				"$ref": "file://./paths/certificates-authorities/caID/get.json"
+			},
+			"put": {
+				"$ref": "file://./paths/certificates-authorities/caID/put.json"
+			},
+			"delete": {
+				"$ref": "file://./paths/certificates-authorities/caID/delete.json"
+			}
+		},
+		"/config": {
+			"get": {
+				"$ref": "file://./paths/config/get.json"
+			}
+		},
+		"/dns-providers": {
+			"get": {
+				"$ref": "file://./paths/dns-providers/get.json"
+			},
+			"post": {
+				"$ref": "file://./paths/dns-providers/post.json"
+			}
+		},
+		"/dns-providers/{providerID}": {
+			"get": {
+				"$ref": "file://./paths/dns-providers/providerID/get.json"
+			},
+			"put": {
+				"$ref": "file://./paths/dns-providers/providerID/put.json"
+			},
+			"delete": {
+				"$ref": "file://./paths/dns-providers/providerID/delete.json"
+			}
+		},
+		"/hosts": {
+			"get": {
+				"$ref": "file://./paths/hosts/get.json"
+			},
+			"post": {
+				"$ref": "file://./paths/hosts/post.json"
+			}
+		},
+		"/hosts/{hostID}": {
+			"get": {
+				"$ref": "file://./paths/hosts/hostID/get.json"
+			},
+			"put": {
+				"$ref": "file://./paths/hosts/hostID/put.json"
+			},
+			"delete": {
+				"$ref": "file://./paths/hosts/hostID/delete.json"
+			}
+		},
+		"/hosts/{hostID}/nginx-config": {
+			"get": {
+				"$ref": "file://./paths/hosts/hostID/nginx-config/get.json"
+			}
+		},
+		"/nginx-templates": {
+			"get": {
+				"$ref": "file://./paths/nginx-templates/get.json"
+			},
+			"post": {
+				"$ref": "file://./paths/nginx-templates/post.json"
+			}
+		},
+		"/nginx-templates/{templateID}": {
+			"get": {
+				"$ref": "file://./paths/nginx-templates/templateID/get.json"
+			},
+			"put": {
+				"$ref": "file://./paths/nginx-templates/templateID/put.json"
+			},
+			"delete": {
+				"$ref": "file://./paths/nginx-templates/templateID/delete.json"
+			}
+		},
+		"/schema": {
+			"get": {
+				"$ref": "file://./paths/schema/get.json"
+			}
+		},
+		"/settings": {
+			"get": {
+				"$ref": "file://./paths/settings/get.json"
+			},
+			"post": {
+				"$ref": "file://./paths/settings/post.json"
+			}
+		},
+		"/settings/{name}": {
+			"get": {
+				"$ref": "file://./paths/settings/name/get.json"
+			},
+			"put": {
+				"$ref": "file://./paths/settings/name/put.json"
+			}
+		},
+		"/streams": {
+			"get": {
+				"$ref": "file://./paths/streams/get.json"
+			},
+			"post": {
+				"$ref": "file://./paths/streams/post.json"
+			}
+		},
+		"/streams/{streamID}": {
+			"get": {
+				"$ref": "file://./paths/streams/streamID/get.json"
+			},
+			"put": {
+				"$ref": "file://./paths/streams/streamID/put.json"
+			},
+			"delete": {
+				"$ref": "file://./paths/streams/streamID/delete.json"
+			}
+		},
+		"/tokens": {
+			"get": {
+				"$ref": "file://./paths/tokens/get.json"
+			},
+			"post": {
+				"$ref": "file://./paths/tokens/post.json"
+			}
+		},
+		"/upstreams": {
+			"get": {
+				"$ref": "file://./paths/upstreams/get.json"
+			},
+			"post": {
+				"$ref": "file://./paths/upstreams/post.json"
+			}
+		},
+		"/upstreams/{upstreamID}": {
+			"get": {
+				"$ref": "file://./paths/upstreams/upstreamID/get.json"
+			},
+			"put": {
+				"$ref": "file://./paths/upstreams/upstreamID/put.json"
+			},
+			"delete": {
+				"$ref": "file://./paths/upstreams/upstreamID/delete.json"
+			}
+		},
+		"/upstreams/{upstreamID}/nginx-config": {
+			"get": {
+				"$ref": "file://./paths/upstreams/upstreamID/nginx-config/get.json"
+			}
+		},
+		"/users": {
+			"get": {
+				"$ref": "file://./paths/users/get.json"
+			},
+			"post": {
+				"$ref": "file://./paths/users/post.json"
+			}
+		},
+		"/users/{userID}": {
+			"get": {
+				"$ref": "file://./paths/users/userID/get.json"
+			},
+			"put": {
+				"$ref": "file://./paths/users/userID/put.json"
+			},
+			"delete": {
+				"$ref": "file://./paths/users/userID/delete.json"
+			}
+		},
+		"/users/{userID}/auth": {
+			"post": {
+				"$ref": "file://./paths/users/userID/auth/post.json"
+			}
+		}
+	},
+	"components": {
+		"schemas": {
+			"CertificateAuthorityList": {
+				"$ref": "file://./components/CertificateAuthorityList.json"
+			},
+			"CertificateAuthorityObject": {
+				"$ref": "file://./components/CertificateAuthorityObject.json"
+			},
+			"CertificateList": {
+				"$ref": "file://./components/CertificateList.json"
+			},
+			"CertificateObject": {
+				"$ref": "file://./components/CertificateObject.json"
+			},
+			"ConfigObject": {
+				"$ref": "file://./components/ConfigObject.json"
+			},
+			"DeletedItemResponse": {
+				"$ref": "file://./components/DeletedItemResponse.json"
+			},
+			"DNSProviderList": {
+				"$ref": "file://./components/DNSProviderList.json"
+			},
+			"DNSProviderObject": {
+				"$ref": "file://./components/DNSProviderObject.json"
+			},
+			"ErrorObject": {
+				"$ref": "file://./components/ErrorObject.json"
+			},
+			"FilterObject": {
+				"$ref": "file://./components/FilterObject.json"
+			},
+			"HealthObject": {
+				"$ref": "file://./components/HealthObject.json"
+			},
+			"HostList": {
+				"$ref": "file://./components/HostList.json"
+			},
+			"HostObject": {
+				"$ref": "file://./components/HostObject.json"
+			},
+			"NginxTemplateList": {
+				"$ref": "file://./components/NginxTemplateList.json"
+			},
+			"NginxTemplateObject": {
+				"$ref": "file://./components/NginxTemplateObject.json"
+			},
+			"SettingList": {
+				"$ref": "file://./components/SettingList.json"
+			},
+			"SettingObject": {
+				"$ref": "file://./components/SettingObject.json"
+			},
+			"SortObject": {
+				"$ref": "file://./components/SortObject.json"
+			},
+			"StreamList": {
+				"$ref": "file://./components/StreamList.json"
+			},
+			"StreamObject": {
+				"$ref": "file://./components/StreamObject.json"
+			},
+			"TokenObject": {
+				"$ref": "file://./components/TokenObject.json"
+			},
+			"UpstreamList": {
+				"$ref": "file://./components/UpstreamList.json"
+			},
+			"UpstreamObject": {
+				"$ref": "file://./components/UpstreamObject.json"
+			},
+			"UserAuthObject": {
+				"$ref": "file://./components/UserAuthObject.json"
+			},
+			"UserList": {
+				"$ref": "file://./components/UserList.json"
+			},
+			"UserObject": {
+				"$ref": "file://./components/UserObject.json"
+			}
+		}
+	}
+}

backend/embed/api_docs/components/CertificateAuthorityList.json

@@ -0,0 +1,40 @@
+{
+	"type": "object",
+	"description": "CertificateAuthorityList",
+	"additionalProperties": false,
+	"required": ["total", "offset", "limit", "sort"],
+	"properties": {
+		"total": {
+			"type": "integer",
+			"description": "Total number of rows"
+		},
+		"offset": {
+			"type": "integer",
+			"description": "Pagination Offset"
+		},
+		"limit": {
+			"type": "integer",
+			"description": "Pagination Limit"
+		},
+		"sort": {
+			"type": "array",
+			"description": "Sorting",
+			"items": {
+				"$ref": "#/components/schemas/SortObject"
+			}
+		},
+		"filter": {
+			"type": "array",
+			"description": "Filters",
+			"items": {
+				"$ref": "#/components/schemas/FilterObject"
+			}
+		},
+		"items": {
+			"type": "array",
+			"items": {
+				"$ref": "#/components/schemas/CertificateAuthorityObject"
+			}
+		}
+	}
+}

backend/embed/api_docs/components/CertificateAuthorityObject.json

@@ -0,0 +1,55 @@
+{
+	"type": "object",
+	"description": "CertificateAuthorityObject",
+	"additionalProperties": false,
+	"required": [
+		"id",
+		"created_on",
+		"modified_on",
+		"name",
+		"acmesh_server",
+		"ca_bundle",
+		"max_domains",
+		"is_wildcard_supported",
+		"is_readonly"
+	],
+	"properties": {
+		"id": {
+			"type": "integer",
+			"minimum": 1
+		},
+		"created_on": {
+			"type": "integer",
+			"minimum": 1
+		},
+		"modified_on": {
+			"type": "integer",
+			"minimum": 1
+		},
+		"name": {
+			"type": "string",
+			"minLength": 1,
+			"maxLength": 100
+		},
+		"acmesh_server": {
+			"type": "string",
+			"minLength": 2,
+			"maxLength": 255
+		},
+		"ca_bundle": {
+			"type": "string",
+			"minLength": 0,
+			"maxLength": 255
+		},
+		"max_domains": {
+			"type": "integer",
+			"minimum": 1
+		},
+		"is_wildcard_supported": {
+			"type": "boolean"
+		},
+		"is_readonly": {
+			"type": "boolean"
+		}
+	}
+}

backend/embed/api_docs/components/CertificateList.json

@@ -0,0 +1,40 @@
+{
+	"type": "object",
+	"description": "CertificateList",
+	"additionalProperties": false,
+	"required": ["total", "offset", "limit", "sort"],
+	"properties": {
+		"total": {
+			"type": "integer",
+			"description": "Total number of rows"
+		},
+		"offset": {
+			"type": "integer",
+			"description": "Pagination Offset"
+		},
+		"limit": {
+			"type": "integer",
+			"description": "Pagination Limit"
+		},
+		"sort": {
+			"type": "array",
+			"description": "Sorting",
+			"items": {
+				"$ref": "#/components/schemas/SortObject"
+			}
+		},
+		"filter": {
+			"type": "array",
+			"description": "Filters",
+			"items": {
+				"$ref": "#/components/schemas/FilterObject"
+			}
+		},
+		"items": {
+			"type": "array",
+			"items": {
+				"$ref": "#/components/schemas/CertificateObject"
+			}
+		}
+	}
+}

backend/embed/api_docs/components/CertificateObject.json

@@ -0,0 +1,85 @@
+{
+	"type": "object",
+	"description": "CertificateObject",
+	"additionalProperties": false,
+	"required": [
+		"id",
+		"created_on",
+		"modified_on",
+		"expires_on",
+		"type",
+		"user_id",
+		"certificate_authority_id",
+		"dns_provider_id",
+		"name",
+		"is_ecc",
+		"status",
+		"domain_names"
+	],
+	"properties": {
+		"id": {
+			"type": "integer",
+			"minimum": 1
+		},
+		"created_on": {
+			"type": "integer",
+			"minimum": 1
+		},
+		"modified_on": {
+			"type": "integer",
+			"minimum": 1
+		},
+		"expires_on": {
+			"type": "integer",
+			"minimum": 1,
+			"nullable": true
+		},
+		"type": {
+			"type": "string",
+			"enum": ["custom", "http", "dns"]
+		},
+		"user_id": {
+			"type": "integer",
+			"minimum": 1
+		},
+		"certificate_authority_id": {
+			"type": "integer",
+			"minimum": 0
+		},
+		"certificate_authority": {
+			"$ref": "#/components/schemas/CertificateAuthorityObject"
+		},
+		"dns_provider_id": {
+			"type": "integer",
+			"minimum": 0
+		},
+		"name": {
+			"type": "string",
+			"minLength": 1,
+			"maxLength": 100
+		},
+		"domain_names": {
+			"type": "array",
+			"minItems": 1,
+			"items": {
+				"type": "string",
+				"minLength": 4
+			}
+		},
+		"status": {
+			"type": "string",
+			"enum": ["ready", "requesting", "failed", "provided"]
+		},
+		"is_ecc": {
+			"type": "integer",
+			"minimum": 0,
+			"maximum": 1
+		},
+		"error_message": {
+			"type": "string"
+		},
+		"user": {
+			"$ref": "#/components/schemas/UserObject"
+		}
+	}
+}

backend/embed/api_docs/components/ConfigObject.json

@@ -0,0 +1,4 @@
+{
+	"type": "object",
+	"description": "ConfigObject"
+}

backend/embed/api_docs/components/DNSProviderList.json

@@ -0,0 +1,40 @@
+{
+	"type": "object",
+	"description": "DNSProviderList",
+	"additionalProperties": false,
+	"required": ["total", "offset", "limit", "sort"],
+	"properties": {
+		"total": {
+			"type": "integer",
+			"description": "Total number of rows"
+		},
+		"offset": {
+			"type": "integer",
+			"description": "Pagination Offset"
+		},
+		"limit": {
+			"type": "integer",
+			"description": "Pagination Limit"
+		},
+		"sort": {
+			"type": "array",
+			"description": "Sorting",
+			"items": {
+				"$ref": "#/components/schemas/SortObject"
+			}
+		},
+		"filter": {
+			"type": "array",
+			"description": "Filters",
+			"items": {
+				"$ref": "#/components/schemas/FilterObject"
+			}
+		},
+		"items": {
+			"type": "array",
+			"items": {
+				"$ref": "#/components/schemas/DNSProviderObject"
+			}
+		}
+	}
+}

backend/embed/api_docs/components/DNSProviderObject.json

@@ -0,0 +1,49 @@
+{
+	"type": "object",
+	"description": "DNSProviderObject",
+	"additionalProperties": false,
+	"required": [
+		"id",
+		"created_on",
+		"modified_on",
+		"user_id",
+		"name",
+		"acmesh_name",
+		"dns_sleep",
+		"meta"
+	],
+	"properties": {
+		"id": {
+			"type": "integer",
+			"minimum": 1
+		},
+		"created_on": {
+			"type": "integer",
+			"minimum": 1
+		},
+		"modified_on": {
+			"type": "integer",
+			"minimum": 1
+		},
+		"user_id": {
+			"type": "integer",
+			"minimum": 1
+		},
+		"name": {
+			"type": "string",
+			"minLength": 1,
+			"maxLength": 100
+		},
+		"acmesh_name": {
+			"type": "string",
+			"minLength": 4,
+			"maxLength": 50
+		},
+		"dns_sleep": {
+			"type": "integer"
+		},
+		"meta": {
+			"type": "object"
+		}
+	}
+}

backend/embed/api_docs/components/DeletedItemResponse.json

@@ -0,0 +1,15 @@
+{
+	"type": "object",
+	"description": "DeletedItemResponse",
+	"additionalProperties": false,
+	"required": ["result"],
+	"properties": {
+		"result": {
+			"type": "boolean",
+			"nullable": true
+		},
+		"error": {
+			"$ref": "#/components/schemas/ErrorObject"
+		}
+	}
+}

backend/embed/api_docs/components/ErrorObject.json

@@ -0,0 +1,17 @@
+{
+	"type": "object",
+	"description": "ErrorObject",
+	"additionalProperties": false,
+	"required": ["code", "message"],
+	"properties": {
+		"code": {
+			"type": "integer",
+			"description": "Error code",
+			"minimum": 0
+		},
+		"message": {
+			"type": "string",
+			"description": "Error message"
+		}
+	}
+}

backend/embed/api_docs/components/FilterObject.json

@@ -0,0 +1,24 @@
+{
+	"type": "object",
+	"description": "FilterObject",
+	"additionalProperties": false,
+	"required": ["field", "modifier", "value"],
+	"properties": {
+		"field": {
+			"type": "string",
+			"description": "Field to filter with"
+		},
+		"modifier": {
+			"type": "string",
+			"description": "Filter modifier",
+			"pattern": "^(equals|not|min|max|greater|lesser|contains|starts|ends|in|notin)$"
+		},
+		"value": {
+			"type": "array",
+			"description": "Values used for filtering",
+			"items": {
+				"type": "string"
+			}
+		}
+	}
+}

backend/embed/api_docs/components/HealthObject.json

@@ -0,0 +1,41 @@
+{
+	"type": "object",
+	"description": "HealthObject",
+	"additionalProperties": false,
+	"required": ["version", "commit", "healthy", "setup", "error_reporting"],
+	"properties": {
+		"version": {
+			"type": "string",
+			"description": "Version",
+			"example": "3.0.0",
+			"minLength": 1
+		},
+		"commit": {
+			"type": "string",
+			"description": "Commit hash",
+			"example": "946b88f",
+			"minLength": 7
+		},
+		"healthy": {
+			"type": "boolean",
+			"description": "Healthy?",
+			"example": true
+		},
+		"setup": {
+			"type": "boolean",
+			"description": "Is the application set up?",
+			"example": true
+		},
+		"error_reporting": {
+			"type": "boolean",
+			"description": "Will the application send any error reporting?",
+			"example": true
+		},
+		"acme.sh": {
+			"type": "string",
+			"description": "Acme.sh version",
+			"example": "v3.0.0",
+			"minLength": 1
+		}
+	}
+}

backend/embed/api_docs/components/HostList.json

@@ -0,0 +1,40 @@
+{
+	"type": "object",
+	"description": "HostList",
+	"additionalProperties": false,
+	"required": ["total", "offset", "limit", "sort"],
+	"properties": {
+		"total": {
+			"type": "integer",
+			"description": "Total number of rows"
+		},
+		"offset": {
+			"type": "integer",
+			"description": "Pagination Offset"
+		},
+		"limit": {
+			"type": "integer",
+			"description": "Pagination Limit"
+		},
+		"sort": {
+			"type": "array",
+			"description": "Sorting",
+			"items": {
+				"$ref": "#/components/schemas/SortObject"
+			}
+		},
+		"filter": {
+			"type": "array",
+			"description": "Filters",
+			"items": {
+				"$ref": "#/components/schemas/FilterObject"
+			}
+		},
+		"items": {
+			"type": "array",
+			"items": {
+				"$ref": "#/components/schemas/HostObject"
+			}
+		}
+	}
+}

backend/embed/api_docs/components/HostObject.json

@@ -0,0 +1,58 @@
+{
+	"type": "object",
+	"description": "HostObject",
+	"additionalProperties": false,
+	"required": [
+		"id",
+		"created_on",
+		"modified_on",
+		"expires_on",
+		"user_id",
+		"provider",
+		"name",
+		"domain_names"
+	],
+	"properties": {
+		"id": {
+			"type": "integer",
+			"minimum": 1
+		},
+		"created_on": {
+			"type": "integer",
+			"minimum": 1
+		},
+		"modified_on": {
+			"type": "integer",
+			"minimum": 1
+		},
+		"expires_on": {
+			"type": "integer",
+			"minimum": 1
+		},
+		"user_id": {
+			"type": "integer",
+			"minimum": 1
+		},
+		"provider": {
+			"type": "string",
+			"minLength": 1,
+			"maxLength": 100
+		},
+		"name": {
+			"type": "string",
+			"minLength": 1,
+			"maxLength": 100
+		},
+		"domain_names": {
+			"type": "array",
+			"minItems": 1,
+			"items": {
+				"type": "string",
+				"minLength": 4
+			}
+		},
+		"user": {
+			"$ref": "#/components/schemas/UserObject"
+		}
+	}
+}

backend/embed/api_docs/components/NginxTemplateList.json

@@ -0,0 +1,40 @@
+{
+	"type": "object",
+	"description": "NginxTemplateList",
+	"additionalProperties": false,
+	"required": ["total", "offset", "limit", "sort"],
+	"properties": {
+		"total": {
+			"type": "integer",
+			"description": "Total number of rows"
+		},
+		"offset": {
+			"type": "integer",
+			"description": "Pagination Offset"
+		},
+		"limit": {
+			"type": "integer",
+			"description": "Pagination Limit"
+		},
+		"sort": {
+			"type": "array",
+			"description": "Sorting",
+			"items": {
+				"$ref": "#/components/schemas/SortObject"
+			}
+		},
+		"filter": {
+			"type": "array",
+			"description": "Filters",
+			"items": {
+				"$ref": "#/components/schemas/FilterObject"
+			}
+		},
+		"items": {
+			"type": "array",
+			"items": {
+				"$ref": "#/components/schemas/NginxTemplateObject"
+			}
+		}
+	}
+}

backend/embed/api_docs/components/NginxTemplateObject.json

@@ -0,0 +1,44 @@
+{
+	"type": "object",
+	"description": "NginxTemplateObject",
+	"additionalProperties": false,
+	"required": [
+		"id",
+		"created_on",
+		"modified_on",
+		"user_id",
+		"name",
+		"type",
+		"template"
+	],
+	"properties": {
+		"id": {
+			"type": "integer",
+			"minimum": 1
+		},
+		"created_on": {
+			"type": "integer",
+			"minimum": 1
+		},
+		"modified_on": {
+			"type": "integer",
+			"minimum": 1
+		},
+		"user_id": {
+			"type": "integer",
+			"minimum": 1
+		},
+		"name": {
+			"type": "string",
+			"minLength": 1
+		},
+		"type": {
+			"type": "string",
+			"pattern": "^proxy|redirect|dead|stream|upstream$"
+		},
+		"template": {
+			"type": "string",
+			"minLength": 20
+		}
+	}
+}

backend/embed/api_docs/components/SettingList.json

@@ -0,0 +1,40 @@
+{
+	"type": "object",
+	"description": "SettingList",
+	"additionalProperties": false,
+	"required": ["total", "offset", "limit", "sort"],
+	"properties": {
+		"total": {
+			"type": "integer",
+			"description": "Total number of rows"
+		},
+		"offset": {
+			"type": "integer",
+			"description": "Pagination Offset"
+		},
+		"limit": {
+			"type": "integer",
+			"description": "Pagination Limit"
+		},
+		"sort": {
+			"type": "array",
+			"description": "Sorting",
+			"items": {
+				"$ref": "#/components/schemas/SortObject"
+			}
+		},
+		"filter": {
+			"type": "array",
+			"description": "Filters",
+			"items": {
+				"$ref": "#/components/schemas/FilterObject"
+			}
+		},
+		"items": {
+			"type": "array",
+			"items": {
+				"$ref": "#/components/schemas/SettingObject"
+			}
+		}
+	}
+}

backend/embed/api_docs/components/SettingObject.json

@@ -0,0 +1,49 @@
+{
+	"type": "object",
+	"description": "SettingObject",
+	"additionalProperties": false,
+	"required": ["id", "name", "value"],
+	"properties": {
+		"id": {
+			"type": "integer",
+			"minimum": 1
+		},
+		"created_on": {
+			"type": "integer",
+			"minimum": 1
+		},
+		"modified_on": {
+			"type": "integer",
+			"minimum": 1
+		},
+		"name": {
+			"type": "string",
+			"minLength": 2,
+			"maxLength": 100
+		},
+		"description": {
+			"type": "string",
+			"minLength": 0,
+			"maxLength": 100
+		},
+		"value": {
+			"oneOf": [
+				{
+					"type": "array"
+				},
+				{
+					"type": "boolean"
+				},
+				{
+					"type": "object"
+				},
+				{
+					"type": "integer"
+				},
+				{
+					"type": "string"
+				}
+			]
+		}
+	}
+}

backend/embed/api_docs/components/SortObject.json

@@ -0,0 +1,17 @@
+{
+	"type": "object",
+	"description": "SortObject",
+	"additionalProperties": false,
+	"required": ["field", "direction"],
+	"properties": {
+		"field": {
+			"type": "string",
+			"description": "Field for sorting on"
+		},
+		"direction": {
+			"type": "string",
+			"description": "Sort order",
+			"pattern": "^(ASC|DESC)$"
+		}
+	}
+}

backend/embed/api_docs/components/StreamList.json

@@ -0,0 +1,40 @@
+{
+	"type": "object",
+	"description": "StreamList",
+	"additionalProperties": false,
+	"required": ["total", "offset", "limit", "sort"],
+	"properties": {
+		"total": {
+			"type": "integer",
+			"description": "Total number of rows"
+		},
+		"offset": {
+			"type": "integer",
+			"description": "Pagination Offset"
+		},
+		"limit": {
+			"type": "integer",
+			"description": "Pagination Limit"
+		},
+		"sort": {
+			"type": "array",
+			"description": "Sorting",
+			"items": {
+				"$ref": "#/components/schemas/SortObject"
+			}
+		},
+		"filter": {
+			"type": "array",
+			"description": "Filters",
+			"items": {
+				"$ref": "#/components/schemas/FilterObject"
+			}
+		},
+		"items": {
+			"type": "array",
+			"items": {
+				"$ref": "#/components/schemas/StreamObject"
+			}
+		}
+	}
+}

backend/embed/api_docs/components/StreamObject.json

@@ -0,0 +1,55 @@
+{
+	"type": "object",
+	"description": "StreamObject",
+	"additionalProperties": false,
+	"required": [
+		"id",
+		"created_on",
+		"modified_on",
+		"expires_on",
+		"user_id",
+		"provider",
+		"name",
+		"domain_names"
+	],
+	"properties": {
+		"id": {
+			"type": "integer",
+			"minimum": 1
+		},
+		"created_on": {
+			"type": "integer",
+			"minimum": 1
+		},
+		"modified_on": {
+			"type": "integer",
+			"minimum": 1
+		},
+		"expires_on": {
+			"type": "integer",
+			"minimum": 1
+		},
+		"user_id": {
+			"type": "integer",
+			"minimum": 1
+		},
+		"provider": {
+			"type": "string",
+			"minLength": 1,
+			"maxLength": 100
+		},
+		"name": {
+			"type": "string",
+			"minLength": 1,
+			"maxLength": 100
+		},
+		"domain_names": {
+			"type": "array",
+			"minItems": 1,
+			"items": {
+				"type": "string",
+				"minLength": 4
+			}
+		}
+	}
+}

backend/embed/api_docs/components/TokenObject.json

@@ -0,0 +1,19 @@
+{
+	"type": "object",
+	"description": "TokenObject",
+	"additionalProperties": false,
+	"required": ["expires", "token"],
+	"properties": {
+		"expires": {
+			"type": "number",
+			"description": "Token Expiry Unix Time",
+			"example": 1566540249,
+			"minimum": 1
+		},
+		"token": {
+			"type": "string",
+			"description": "JWT Token",
+			"example": "eyJhbGciOiJSUzUxMiIsInR5cCI6IkpXVCJ9.ey...xaHKYr3Kk6MvkUjcC4"
+		}
+	}
+}

backend/embed/api_docs/components/UpstreamList.json

@@ -0,0 +1,40 @@
+{
+	"type": "object",
+	"description": "UpstreamList",
+	"additionalProperties": false,
+	"required": ["total", "offset", "limit", "sort"],
+	"properties": {
+		"total": {
+			"type": "integer",
+			"description": "Total number of rows"
+		},
+		"offset": {
+			"type": "integer",
+			"description": "Pagination Offset"
+		},
+		"limit": {
+			"type": "integer",
+			"description": "Pagination Limit"
+		},
+		"sort": {
+			"type": "array",
+			"description": "Sorting",
+			"items": {
+				"$ref": "#/components/schemas/SortObject"
+			}
+		},
+		"filter": {
+			"type": "array",
+			"description": "Filters",
+			"items": {
+				"$ref": "#/components/schemas/FilterObject"
+			}
+		},
+		"items": {
+			"type": "array",
+			"items": {
+				"$ref": "#/components/schemas/UpstreamObject"
+			}
+		}
+	}
+}

backend/embed/api_docs/components/UpstreamObject.json

@@ -0,0 +1,136 @@
+{
+	"type": "object",
+	"description": "UpstreamObject",
+	"additionalProperties": false,
+	"required": [
+		"id",
+		"created_on",
+		"modified_on",
+		"user_id",
+		"name",
+		"nginx_template_id",
+		"ip_hash",
+		"ntlm",
+		"keepalive",
+		"keepalive_requests",
+		"keepalive_time",
+		"keepalive_timeout",
+		"advanced_config",
+		"status",
+		"error_message",
+		"servers"
+	],
+	"properties": {
+		"id": {
+			"type": "integer",
+			"minimum": 1
+		},
+		"created_on": {
+			"type": "integer",
+			"minimum": 1
+		},
+		"modified_on": {
+			"type": "integer",
+			"minimum": 1
+		},
+		"user_id": {
+			"type": "integer",
+			"minimum": 1
+		},
+		"name": {
+			"type": "string",
+			"minLength": 1,
+			"maxLength": 100
+		},
+		"nginx_template_id": {
+			"type": "integer",
+			"minimum": 1
+		},
+		"ip_hash": {
+			"type": "boolean"
+		},
+		"ntlm": {
+			"type": "boolean"
+		},
+		"keepalive": {
+			"type": "integer"
+		},
+		"keepalive_requests": {
+			"type": "integer"
+		},
+		"keepalive_time": {
+			"type": "string"
+		},
+		"keepalive_timeout": {
+			"type": "string"
+		},
+		"advanced_config": {
+			"type": "string"
+		},
+		"status": {
+			"type": "string"
+		},
+		"error_message": {
+			"type": "string"
+		},
+		"user": {
+			"$ref": "#/components/schemas/UserObject"
+		},
+		"servers": {
+			"type": "array",
+			"items": {
+				"type": "object",
+				"additionalProperties": false,
+				"required": [
+					"id",
+					"created_on",
+					"modified_on",
+					"upstream_id",
+					"server",
+					"weight",
+					"max_conns",
+					"max_fails",
+					"fail_timeout",
+					"backup"
+				],
+				"properties": {
+					"id": {
+						"type": "integer",
+						"minimum": 1
+					},
+					"created_on": {
+						"type": "integer",
+						"minimum": 1
+					},
+					"modified_on": {
+						"type": "integer",
+						"minimum": 1
+					},
+					"upstream_id": {
+						"type": "integer",
+						"minimum": 1
+					},
+					"server": {
+						"type": "string",
+						"minLength": 2
+					},
+					"weight": {
+						"type": "integer"
+					},
+					"max_conns": {
+						"type": "integer"
+					},
+					"max_fails": {
+						"type": "integer"
+					},
+					"fail_timeout": {
+						"type": "integer"
+					},
+					"backup": {
+						"type": "boolean"
+					}
+				}
+			}
+		}
+	}
+}

backend/embed/api_docs/components/UserAuthObject.json

@@ -0,0 +1,28 @@
+{
+	"type": "object",
+	"description": "UserAuthObject",
+	"additionalProperties": false,
+	"required": ["id", "user_id", "type", "created_on", "modified_on"],
+	"properties": {
+		"id": {
+			"type": "integer",
+			"minimum": 1
+		},
+		"user_id": {
+			"type": "integer",
+			"minimum": 1
+		},
+		"type": {
+			"type": "string",
+			"pattern": "^password$"
+		},
+		"created_on": {
+			"type": "integer",
+			"minimum": 1
+		},
+		"modified_on": {
+			"type": "integer",
+			"minimum": 1
+		}
+	}
+}

backend/embed/api_docs/components/UserList.json

@@ -0,0 +1,40 @@
+{
+	"type": "object",
+	"description": "UserList",
+	"additionalProperties": false,
+	"required": ["total", "offset", "limit", "sort"],
+	"properties": {
+		"total": {
+			"type": "integer",
+			"description": "Total number of rows"
+		},
+		"offset": {
+			"type": "integer",
+			"description": "Pagination Offset"
+		},
+		"limit": {
+			"type": "integer",
+			"description": "Pagination Limit"
+		},
+		"sort": {
+			"type": "array",
+			"description": "Sorting",
+			"items": {
+				"$ref": "#/components/schemas/SortObject"
+			}
+		},
+		"filter": {
+			"type": "array",
+			"description": "Filters",
+			"items": {
+				"$ref": "#/components/schemas/FilterObject"
+			}
+		},
+		"items": {
+			"type": "array",
+			"items": {
+				"$ref": "#/components/schemas/UserObject"
+			}
+		}
+	}
+}

backend/embed/api_docs/components/UserObject.json

@@ -0,0 +1,73 @@
+{
+	"type": "object",
+	"description": "UserObject",
+	"additionalProperties": false,
+	"required": [
+		"id",
+		"name",
+		"nickname",
+		"email",
+		"created_on",
+		"modified_on",
+		"is_disabled"
+	],
+	"properties": {
+		"id": {
+			"type": "integer",
+			"minimum": 1
+		},
+		"name": {
+			"type": "string",
+			"minLength": 2,
+			"maxLength": 100
+		},
+		"nickname": {
+			"type": "string",
+			"minLength": 2,
+			"maxLength": 100
+		},
+		"email": {
+			"type": "string",
+			"minLength": 5,
+			"maxLength": 150
+		},
+		"created_on": {
+			"type": "integer",
+			"minimum": 1
+		},
+		"modified_on": {
+			"type": "integer",
+			"minimum": 1
+		},
+		"gravatar_url": {
+			"type": "string"
+		},
+		"is_disabled": {
+			"type": "boolean"
+		},
+		"is_deleted": {
+			"type": "boolean"
+		},
+		"auth": {
+			"type": "object",
+			"required": ["type"],
+			"properties": {
+				"id": {
+					"type": "integer"
+				},
+				"type": {
+					"type": "string",
+					"pattern": "^password$"
+				}
+			}
+		},
+		"capabilities": {
+			"type": "array",
+			"minItems": 1,
+			"items": {
+				"type": "string",
+				"minLength": 1
+			}
+		}
+	}
+}

backend/embed/api_docs/main.go

@@ -0,0 +1,10 @@
+package doc
+
+import "embed"
+
+// SwaggerFiles contain all the files used for swagger schema generation
+//
+//go:embed api.swagger.json
+//go:embed components
+//go:embed paths
+var SwaggerFiles embed.FS

backend/embed/api_docs/paths/certificates-authorities/caID/delete.json

@@ -0,0 +1,39 @@
+{
+	"operationId": "deleteCertificateAuthority",
+	"summary": "Delete a Certificate Authority",
+	"tags": [
+		"Certificate Authorities"
+	],
+	"parameters": [
+		{
+			"in": "path",
+			"name": "caID",
+			"schema": {
+				"type": "integer",
+				"minimum": 1
+			},
+			"required": true,
+			"description": "Numeric ID of the Certificate Authority",
+			"example": 1
+		}
+	],
+	"responses": {
+		"200": {
+			"description": "200 response",
+			"content": {
+				"application/json": {
+					"schema": {
+						"$ref": "#/components/schemas/DeletedItemResponse"
+					},
+					"examples": {
+						"default": {
+							"value": {
+								"result": true
+							}
+						}
+					}
+				}
+			}
+		}
+	}
+}

backend/embed/api_docs/paths/certificates-authorities/caID/get.json

@@ -0,0 +1,52 @@
+{
+	"operationId": "getCertificateAuthority",
+	"summary": "Get a Certificate Authority object by ID",
+	"tags": ["Certificate Authorities"],
+	"parameters": [
+		{
+			"in": "path",
+			"name": "caID",
+			"schema": {
+				"type": "integer",
+				"minimum": 1
+			},
+			"required": true,
+			"description": "ID of the Certificate Authority",
+			"example": 1
+		}
+	],
+	"responses": {
+		"200": {
+			"description": "200 response",
+			"content": {
+				"application/json": {
+					"schema": {
+						"required": ["result"],
+						"properties": {
+							"result": {
+								"$ref": "#/components/schemas/CertificateAuthorityObject"
+							}
+						}
+					},
+					"examples": {
+						"default": {
+							"value": {
+								"result": {
+									"id": 1,
+									"created_on": 1627531400,
+									"modified_on": 1627531400,
+									"name": "ZeroSSL",
+									"acmesh_server": "zerossl",
+									"ca_bundle": "",
+									"max_domains": 10,
+									"is_wildcard_supported": true,
+									"is_readonly": false
+								}
+							}
+						}
+					}
+				}
+			}
+		}
+	}
+}

backend/embed/api_docs/paths/certificates-authorities/caID/put.json

@@ -0,0 +1,61 @@
+{
+	"operationId": "updateCertificateAuthority",
+	"summary": "Update an existing Certificate Authority",
+	"tags": ["Certificate Authorities"],
+	"parameters": [
+		{
+			"in": "path",
+			"name": "caID",
+			"schema": {
+				"type": "integer",
+				"minimum": 1
+			},
+			"required": true,
+			"description": "ID of the Certificate Authority",
+			"example": 1
+		}
+	],
+	"requestBody": {
+		"description": "Certificate Authority details to update",
+		"required": true,
+		"content": {
+			"application/json": {
+				"schema": "{{schema.UpdateCertificateAuthority}}"
+			}
+		}
+	},
+	"responses": {
+		"200": {
+			"description": "200 response",
+			"content": {
+				"application/json": {
+					"schema": {
+						"required": ["result"],
+						"properties": {
+							"result": {
+								"$ref": "#/components/schemas/CertificateAuthorityObject"
+							}
+						}
+					},
+					"examples": {
+						"default": {
+							"value": {
+								"result": {
+									"id": 1,
+									"created_on": 1627531400,
+									"modified_on": 1627531400,
+									"name": "ZeroSSL",
+									"acmesh_server": "zerossl",
+									"ca_bundle": "",
+									"max_domains": 10,
+									"is_wildcard_supported": true,
+									"is_readonly": false
+								}
+							}
+						}
+					}
+				}
+			}
+		}
+	}
+}

backend/embed/api_docs/paths/certificates-authorities/get.json

@@ -0,0 +1,92 @@
+{
+	"operationId": "getCertificateAuthorities",
+	"summary": "Get a list of Certificate Authorities",
+	"tags": ["Certificate Authorities"],
+	"parameters": [
+		{
+			"in": "query",
+			"name": "offset",
+			"schema": {
+				"type": "number"
+			},
+			"description": "The pagination row offset, default 0",
+			"example": 0
+		},
+		{
+			"in": "query",
+			"name": "limit",
+			"schema": {
+				"type": "number"
+			},
+			"description": "The pagination row limit, default 10",
+			"example": 10
+		},
+		{
+			"in": "query",
+			"name": "sort",
+			"schema": {
+				"type": "string"
+			},
+			"description": "The sorting of the list",
+			"example": "id,name.asc,value.desc"
+		}
+	],
+	"responses": {
+		"200": {
+			"description": "200 response",
+			"content": {
+				"application/json": {
+					"schema": {
+						"required": ["result"],
+						"properties": {
+							"result": {
+								"$ref": "#/components/schemas/CertificateAuthorityList"
+							}
+						}
+					},
+					"examples": {
+						"default": {
+							"value": {
+								"result": {
+									"total": 2,
+									"offset": 0,
+									"limit": 10,
+									"sort": [
+										{
+											"field": "name",
+											"direction": "ASC"
+										}
+									],
+									"items": [
+										{
+											"id": 1,
+											"created_on": 1627531400,
+											"modified_on": 1627531400,
+											"name": "ZeroSSL",
+											"acmesh_server": "zerossl",
+											"ca_bundle": "",
+											"max_domains": 10,
+											"is_wildcard_supported": true,
+											"is_setup": true
+										},
+										{
+											"id": 2,
+											"created_on": 1627531400,
+											"modified_on": 1627531400,
+											"name": "Let's Encrypt",
+											"acmesh_server": "https://acme-v02.api.letsencrypt.org/directory",
+											"ca_bundle": "",
+											"max_domains": 10,
+											"is_wildcard_supported": true,
+											"is_setup": true
+										}
+									]
+								}
+							}
+						}
+					}
+				}
+			}
+		}
+	}
+}

backend/embed/api_docs/paths/certificates-authorities/post.json

@@ -0,0 +1,48 @@
+{
+	"operationId": "createCertificateAuthority",
+	"summary": "Create a new Certificate Authority",
+	"tags": ["Certificate Authorities"],
+	"requestBody": {
+		"description": "Certificate Authority to Create",
+		"required": true,
+		"content": {
+			"application/json": {
+				"schema": "{{schema.CreateCertificateAuthority}}"
+			}
+		}
+	},
+	"responses": {
+		"201": {
+			"description": "201 response",
+			"content": {
+				"application/json": {
+					"schema": {
+						"required": ["result"],
+						"properties": {
+							"result": {
+								"$ref": "#/components/schemas/CertificateAuthorityObject"
+							}
+						}
+					},
+					"examples": {
+						"default": {
+							"value": {
+								"result": {
+									"id": 1,
+									"created_on": 1627531400,
+									"modified_on": 1627531400,
+									"name": "ZeroSSL",
+									"acmesh_server": "zerossl",
+									"ca_bundle": "",
+									"max_domains": 10,
+									"is_wildcard_supported": true,
+									"is_readonly": false
+								}
+							}
+						}
+					}
+				}
+			}
+		}
+	}
+}

backend/embed/api_docs/paths/certificates/certificateID/delete.json

@@ -0,0 +1,60 @@
+{
+	"operationId": "deleteCertificate",
+	"summary": "Delete a Certificate",
+	"tags": [
+		"Certificates"
+	],
+	"parameters": [
+		{
+			"in": "path",
+			"name": "certificateID",
+			"schema": {
+				"type": "integer",
+				"minimum": 1
+			},
+			"required": true,
+			"description": "Numeric ID of the certificate",
+			"example": 1
+		}
+	],
+	"responses": {
+		"200": {
+			"description": "200 response",
+			"content": {
+				"application/json": {
+					"schema": {
+						"$ref": "#/components/schemas/DeletedItemResponse"
+					},
+					"examples": {
+						"default": {
+							"value": {
+								"result": true
+							}
+						}
+					}
+				}
+			}
+		},
+		"400": {
+			"description": "400 response",
+			"content": {
+				"application/json": {
+					"schema": {
+						"$ref": "#/components/schemas/DeletedItemResponse"
+					},
+					"examples": {
+						"default": {
+							"value": {
+								"result": null,
+								"error": {
+									"code": 400,
+									"message": "You cannot delete a certificate that is in use!"
+								}
+							}
+						}
+					}
+				}
+			}
+		}
+	}
+}

backend/embed/api_docs/paths/certificates/certificateID/get.json

@@ -0,0 +1,61 @@
+{
+	"operationId": "getCertificate",
+	"summary": "Get a certificate object by ID",
+	"tags": [
+		"Certificates"
+	],
+	"parameters": [
+		{
+			"in": "path",
+			"name": "certificateID",
+			"schema": {
+				"type": "integer",
+				"minimum": 1
+			},
+			"required": true,
+			"description": "ID of the certificate",
+			"example": 1
+		}
+	],
+	"responses": {
+		"200": {
+			"description": "200 response",
+			"content": {
+				"application/json": {
+					"schema": {
+						"required": [
+							"result"
+						],
+						"properties": {
+							"result": {
+								"$ref": "#/components/schemas/CertificateObject"
+							}
+						}
+					},
+					"examples": {
+						"default": {
+							"value": {
+								"result": {
+									"id": 1,
+									"created_on": 1604536109,
+									"modified_on": 1604536109,
+									"expires_on": null,
+									"type": "dns",
+									"user_id": 1,
+									"certificate_authority_id": 2,
+									"dns_provider_id": 1,
+									"name": "test1.jc21.com.au",
+									"domain_names": [
+										"test1.jc21.com.au"
+									],
+									"is_ecc": 0,
+									"status": "ready"
+								}
+							}
+						}
+					}
+				}
+			}
+		}
+	}
+}

backend/embed/api_docs/paths/certificates/certificateID/put.json

@@ -0,0 +1,70 @@
+{
+	"operationId": "updateCertificate",
+	"summary": "Update an existing Certificate",
+	"tags": [
+		"Certificates"
+	],
+	"parameters": [
+		{
+			"in": "path",
+			"name": "certificateID",
+			"schema": {
+				"type": "integer",
+				"minimum": 1
+			},
+			"required": true,
+			"description": "ID of the certificate",
+			"example": 1
+		}
+	],
+	"requestBody": {
+		"description": "Certificate details to update",
+		"required": true,
+		"content": {
+			"application/json": {
+				"schema": "{{schema.UpdateCertificate}}"
+			}
+		}
+	},
+	"responses": {
+		"200": {
+			"description": "200 response",
+			"content": {
+				"application/json": {
+					"schema": {
+						"required": [
+							"result"
+						],
+						"properties": {
+							"result": {
+								"$ref": "#/components/schemas/CertificateObject"
+							}
+						}
+					},
+					"examples": {
+						"default": {
+							"value": {
+								"result": {
+									"id": 1,
+									"created_on": 1604536109,
+									"modified_on": 1604536109,
+									"expires_on": null,
+									"type": "dns",
+									"user_id": 1,
+									"certificate_authority_id": 2,
+									"dns_provider_id": 1,
+									"name": "test1.jc21.com.au",
+									"domain_names": [
+										"test1.jc21.com.au"
+									],
+									"is_ecc": 0,
+									"status": "ready"
+								}
+							}
+						}
+					}
+				}
+			}
+		}
+	}
+}

backend/embed/api_docs/paths/certificates/get.json

@@ -0,0 +1,90 @@
+{
+	"operationId": "getCertificates",
+	"summary": "Get a list of certificates",
+	"tags": [
+		"Certificates"
+	],
+	"parameters": [
+		{
+			"in": "query",
+			"name": "offset",
+			"schema": {
+				"type": "number"
+			},
+			"description": "The pagination row offset, default 0",
+			"example": 0
+		},
+		{
+			"in": "query",
+			"name": "limit",
+			"schema": {
+				"type": "number"
+			},
+			"description": "The pagination row limit, default 10",
+			"example": 10
+		},
+		{
+			"in": "query",
+			"name": "sort",
+			"schema": {
+				"type": "string"
+			},
+			"description": "The sorting of the list",
+			"example": "id,name.asc,value.desc"
+		}
+	],
+	"responses": {
+		"200": {
+			"description": "200 response",
+			"content": {
+				"application/json": {
+					"schema": {
+						"required": [
+							"result"
+						],
+						"properties": {
+							"result": {
+								"$ref": "#/components/schemas/CertificateList"
+							}
+						}
+					},
+					"examples": {
+						"default": {
+							"value": {
+								"result": {
+									"total": 1,
+									"offset": 0,
+									"limit": 10,
+									"sort": [
+										{
+											"field": "name",
+											"direction": "ASC"
+										}
+									],
+									"items": [
+										{
+											"id": 1,
+											"created_on": 1604536109,
+											"modified_on": 1604536109,
+											"expires_on": null,
+											"type": "dns",
+											"user_id": 1,
+											"certificate_authority_id": 2,
+											"dns_provider_id": 1,
+											"name": "test1.jc21.com.au",
+											"domain_names": [
+												"test1.jc21.com.au"
+											],
+											"is_ecc": 0,
+											"status": "ready"
+										}
+									]
+								}
+							}
+						}
+					}
+				}
+			}
+		}
+	}
+}

backend/embed/api_docs/paths/certificates/post.json

@@ -0,0 +1,57 @@
+{
+	"operationId": "createCertificate",
+	"summary": "Create a new Certificate",
+	"tags": [
+		"Certificates"
+	],
+	"requestBody": {
+		"description": "Certificate to create",
+		"required": true,
+		"content": {
+			"application/json": {
+				"schema": "{{schema.CreateCertificate}}"
+			}
+		}
+	},
+	"responses": {
+		"201": {
+			"description": "201 response",
+			"content": {
+				"application/json": {
+					"schema": {
+						"required": [
+							"result"
+						],
+						"properties": {
+							"result": {
+								"$ref": "#/components/schemas/CertificateObject"
+							}
+						}
+					},
+					"examples": {
+						"default": {
+							"value": {
+								"result": {
+									"id": 1,
+									"created_on": 1604536109,
+									"modified_on": 1604536109,
+									"expires_on": null,
+									"type": "dns",
+									"user_id": 1,
+									"certificate_authority_id": 2,
+									"dns_provider_id": 1,
+									"name": "test1.jc21.com.au",
+									"domain_names": [
+										"test1.jc21.com.au"
+									],
+									"is_ecc": 0,
+									"status": "ready"
+								}
+							}
+						}
+					}
+				}
+			}
+		}
+	}
+}

backend/embed/api_docs/paths/config/get.json

@@ -0,0 +1,36 @@
+{
+	"operationId": "config",
+	"summary": "Returns the API Service configuration",
+	"responses": {
+		"200": {
+			"description": "200 response",
+			"content": {
+				"application/json": {
+					"schema": {
+						"required": [
+							"result"
+						],
+						"properties": {
+							"result": {
+								"$ref": "#/components/schemas/ConfigObject"
+							}
+						}
+					},
+					"examples": {
+						"default": {
+							"value": {
+								"result": {
+									"data": "/data",
+									"log": {
+										"level": "debug",
+										"format": "nice"
+									}
+								}
+							}
+						}
+					}
+				}
+			}
+		}
+	}
+}

backend/embed/api_docs/paths/dns-providers/get.json

@@ -0,0 +1,82 @@
+{
+	"operationId": "getDNSProviders",
+	"summary": "Get a list of DNS Providers",
+	"tags": ["DNS Providers"],
+	"parameters": [
+		{
+			"in": "query",
+			"name": "offset",
+			"schema": {
+				"type": "number"
+			},
+			"description": "The pagination row offset, default 0",
+			"example": 0
+		},
+		{
+			"in": "query",
+			"name": "limit",
+			"schema": {
+				"type": "number"
+			},
+			"description": "The pagination row limit, default 10",
+			"example": 10
+		},
+		{
+			"in": "query",
+			"name": "sort",
+			"schema": {
+				"type": "string"
+			},
+			"description": "The sorting of the list",
+			"example": "id,name.asc,value.desc"
+		}
+	],
+	"responses": {
+		"200": {
+			"description": "200 response",
+			"content": {
+				"application/json": {
+					"schema": {
+						"required": ["result"],
+						"properties": {
+							"result": {
+								"$ref": "#/components/schemas/DNSProviderList"
+							}
+						}
+					},
+					"examples": {
+						"default": {
+							"value": {
+								"result": {
+									"total": 1,
+									"offset": 0,
+									"limit": 10,
+									"sort": [
+										{
+											"field": "name",
+											"direction": "ASC"
+										}
+									],
+									"items": [
+										{
+											"id": 1,
+											"created_on": 1602593653,
+											"modified_on": 1602593653,
+											"user_id": 1,
+											"name": "Route53",
+											"acmesh_name": "dns_aws",
+											"meta": {
+												"AWS_ACCESS_KEY_ID": "abc123",
+												"AWS_SECRET_ACCESS_KEY": "def098"
+											}
+										}
+									]
+								}
+							}
+						}
+					}
+				}
+			}
+		}
+	}
+}

backend/embed/api_docs/paths/dns-providers/post.json

@@ -0,0 +1,49 @@
+{
+	"operationId": "createDNSProvider",
+	"summary": "Create a new DNS Provider",
+	"tags": ["DNS Providers"],
+	"requestBody": {
+		"description": "DNS Provider to Create",
+		"required": true,
+		"content": {
+			"application/json": {
+				"schema": "{{schema.CreateDNSProvider}}"
+			}
+		}
+	},
+	"responses": {
+		"201": {
+			"description": "201 response",
+			"content": {
+				"application/json": {
+					"schema": {
+						"required": ["result"],
+						"properties": {
+							"result": {
+								"$ref": "#/components/schemas/DNSProviderObject"
+							}
+						}
+					},
+					"examples": {
+						"default": {
+							"value": {
+								"result": {
+									"id": 1,
+									"created_on": 1602593653,
+									"modified_on": 1602593653,
+									"user_id": 1,
+									"name": "Route53",
+									"acmesh_name": "dns_aws",
+									"meta": {
+										"AWS_ACCESS_KEY_ID": "abc123",
+										"AWS_SECRET_ACCESS_KEY": "def098"
+									}
+								}
+							}
+						}
+					}
+				}
+			}
+		}
+	}
+}

backend/embed/api_docs/paths/dns-providers/providerID/delete.json

@@ -0,0 +1,60 @@
+{
+	"operationId": "deleteDNSProvider",
+	"summary": "Delete a DNS Provider",
+	"tags": [
+		"DNS Providers"
+	],
+	"parameters": [
+		{
+			"in": "path",
+			"name": "providerID",
+			"schema": {
+				"type": "integer",
+				"minimum": 1
+			},
+			"required": true,
+			"description": "Numeric ID of the DNS Provider",
+			"example": 1
+		}
+	],
+	"responses": {
+		"200": {
+			"description": "200 response",
+			"content": {
+				"application/json": {
+					"schema": {
+						"$ref": "#/components/schemas/DeletedItemResponse"
+					},
+					"examples": {
+						"default": {
+							"value": {
+								"result": true
+							}
+						}
+					}
+				}
+			}
+		},
+		"400": {
+			"description": "400 response",
+			"content": {
+				"application/json": {
+					"schema": {
+						"$ref": "#/components/schemas/DeletedItemResponse"
+					},
+					"examples": {
+						"default": {
+							"value": {
+								"result": null,
+								"error": {
+									"code": 400,
+									"message": "You cannot delete a DNS Provider that is in use!"
+								}
+							}
+						}
+					}
+				}
+			}
+		}
+	}
+}

backend/embed/api_docs/paths/dns-providers/providerID/get.json

@@ -0,0 +1,53 @@
+{
+	"operationId": "getDNSProvider",
+	"summary": "Get a DNS Provider object by ID",
+	"tags": ["DNS Providers"],
+	"parameters": [
+		{
+			"in": "path",
+			"name": "providerID",
+			"schema": {
+				"type": "integer",
+				"minimum": 1
+			},
+			"required": true,
+			"description": "ID of the DNS Provider",
+			"example": 1
+		}
+	],
+	"responses": {
+		"200": {
+			"description": "200 response",
+			"content": {
+				"application/json": {
+					"schema": {
+						"required": ["result"],
+						"properties": {
+							"result": {
+								"$ref": "#/components/schemas/DNSProviderObject"
+							}
+						}
+					},
+					"examples": {
+						"default": {
+							"value": {
+								"result": {
+									"id": 1,
+									"created_on": 1602593653,
+									"modified_on": 1602593653,
+									"user_id": 1,
+									"name": "Route53",
+									"acmesh_name": "dns_aws",
+									"meta": {
+										"AWS_ACCESS_KEY_ID": "abc123",
+										"AWS_SECRET_ACCESS_KEY": "def098"
+									}
+								}
+							}
+						}
+					}
+				}
+			}
+		}
+	}
+}

backend/embed/api_docs/paths/dns-providers/providerID/put.json

@@ -0,0 +1,64 @@
+{
+	"operationId": "updateDNSProvider",
+	"summary": "Update an existing DNS Provider",
+	"tags": ["DNS Providers"],
+	"parameters": [
+		{
+			"in": "path",
+			"name": "providerID",
+			"schema": {
+				"type": "integer",
+				"minimum": 1
+			},
+			"required": true,
+			"description": "ID of the DNS Provider",
+			"example": 1
+		}
+	],
+	"requestBody": {
+		"description": "DNS Provider details to update",
+		"required": true,
+		"content": {
+			"application/json": {
+				"schema": "{{schema.UpdateDNSProvider}}"
+			}
+		}
+	},
+	"responses": {
+		"200": {
+			"description": "200 response",
+			"content": {
+				"application/json": {
+					"schema": {
+						"required": ["result"],
+						"properties": {
+							"result": {
+								"$ref": "#/components/schemas/DNSProviderObject"
+							}
+						}
+					},
+					"examples": {
+						"default": {
+							"value": {
+								"result": {
+									"result": {
+										"id": 1,
+										"created_on": 1602593653,
+										"modified_on": 1602593653,
+										"user_id": 1,
+										"name": "Route53",
+										"acmesh_name": "dns_aws",
+										"meta": {
+											"AWS_ACCESS_KEY_ID": "abc123",
+											"AWS_SECRET_ACCESS_KEY": "def098"
+										}
+									}
+								}
+							}
+						}
+					}
+				}
+			}
+		}
+	}
+}

backend/embed/api_docs/paths/get.json

@@ -0,0 +1,47 @@
+{
+	"operationId": "health",
+	"summary": "Returns the API health status",
+	"responses": {
+		"200": {
+			"description": "200 response",
+			"content": {
+				"application/json": {
+					"schema": {
+						"required": [
+							"result"
+						],
+						"properties": {
+							"result": {
+								"$ref": "#/components/schemas/HealthObject"
+							}
+						}
+					},
+					"examples": {
+						"default": {
+							"value": {
+								"result": {
+									"version": "3.0.0",
+									"commit": "9f119b6",
+									"healthy": true,
+									"setup": true,
+									"error_reporting": true
+								}
+							}
+						},
+						"unhealthy": {
+							"value": {
+								"result": {
+									"version": "3.0.0",
+									"commit": "9f119b6",
+									"healthy": false,
+									"setup": true,
+									"error_reporting": true
+								}
+							}
+						}
+					}
+				}
+			}
+		}
+	}
+}

backend/embed/api_docs/paths/hosts/get.json

@@ -0,0 +1,93 @@
+{
+	"operationId": "getHosts",
+	"summary": "Get a list of Hosts",
+	"tags": ["Hosts"],
+	"parameters": [
+		{
+			"in": "query",
+			"name": "offset",
+			"schema": {
+				"type": "number"
+			},
+			"description": "The pagination row offset, default 0",
+			"example": 0
+		},
+		{
+			"in": "query",
+			"name": "limit",
+			"schema": {
+				"type": "number"
+			},
+			"description": "The pagination row limit, default 10",
+			"example": 10
+		},
+		{
+			"in": "query",
+			"name": "sort",
+			"schema": {
+				"type": "string"
+			},
+			"description": "The sorting of the list",
+			"example": "id,name.asc,value.desc"
+		}
+	],
+	"responses": {
+		"200": {
+			"description": "200 response",
+			"content": {
+				"application/json": {
+					"schema": {
+						"required": ["result"],
+						"properties": {
+							"result": {
+								"$ref": "#/components/schemas/HostList"
+							}
+						}
+					},
+					"examples": {
+						"default": {
+							"value": {
+								"result": {
+									"total": 1,
+									"offset": 0,
+									"limit": 10,
+									"sort": [
+										{
+											"field": "domain_names",
+											"direction": "ASC"
+										}
+									],
+									"items": [
+										{
+											"id": 1,
+											"created_on": 1646279455,
+											"modified_on": 1646279455,
+											"user_id": 2,
+											"type": "proxy",
+											"nginx_template_id": 1,
+											"listen_interface": "",
+											"domain_names": ["jc21.com"],
+											"upstream_id": 0,
+											"certificate_id": 0,
+											"access_list_id": 0,
+											"ssl_forced": false,
+											"caching_enabled": false,
+											"block_exploits": false,
+											"allow_websocket_upgrade": false,
+											"http2_support": false,
+											"hsts_enabled": false,
+											"hsts_subdomains": false,
+											"paths": "",
+											"advanced_config": "",
+											"is_disabled": false
+										}
+									]
+								}
+							}
+						}
+					}
+				}
+			}
+		}
+	}
+}

backend/embed/api_docs/paths/hosts/hostID/delete.json

@@ -0,0 +1,60 @@
+{
+	"operationId": "deleteHost",
+	"summary": "Delete a Host",
+	"tags": [
+		"Hosts"
+	],
+	"parameters": [
+		{
+			"in": "path",
+			"name": "hostID",
+			"schema": {
+				"type": "integer",
+				"minimum": 1
+			},
+			"required": true,
+			"description": "Numeric ID of the Host",
+			"example": 1
+		}
+	],
+	"responses": {
+		"200": {
+			"description": "200 response",
+			"content": {
+				"application/json": {
+					"schema": {
+						"$ref": "#/components/schemas/DeletedItemResponse"
+					},
+					"examples": {
+						"default": {
+							"value": {
+								"result": true
+							}
+						}
+					}
+				}
+			}
+		},
+		"400": {
+			"description": "400 response",
+			"content": {
+				"application/json": {
+					"schema": {
+						"$ref": "#/components/schemas/DeletedItemResponse"
+					},
+					"examples": {
+						"default": {
+							"value": {
+								"result": null,
+								"error": {
+									"code": 400,
+									"message": "You cannot delete a host that is in use!"
+								}
+							}
+						}
+					}
+				}
+			}
+		}
+	}
+}

backend/embed/api_docs/paths/hosts/hostID/get.json

@@ -0,0 +1,64 @@
+{
+	"operationId": "getHost",
+	"summary": "Get a Host object by ID",
+	"tags": ["Hosts"],
+	"parameters": [
+		{
+			"in": "path",
+			"name": "hostID",
+			"schema": {
+				"type": "integer",
+				"minimum": 1
+			},
+			"required": true,
+			"description": "ID of the Host",
+			"example": 1
+		}
+	],
+	"responses": {
+		"200": {
+			"description": "200 response",
+			"content": {
+				"application/json": {
+					"schema": {
+						"required": ["result"],
+						"properties": {
+							"result": {
+								"$ref": "#/components/schemas/HostObject"
+							}
+						}
+					},
+					"examples": {
+						"default": {
+							"value": {
+								"result": {
+									"id": 1,
+									"created_on": 1646279455,
+									"modified_on": 1646279455,
+									"user_id": 2,
+									"type": "proxy",
+									"nginx_template_id": 1,
+									"listen_interface": "",
+									"domain_names": ["jc21.com"],
+									"upstream_id": 0,
+									"certificate_id": 0,
+									"access_list_id": 0,
+									"ssl_forced": false,
+									"caching_enabled": false,
+									"block_exploits": false,
+									"allow_websocket_upgrade": false,
+									"http2_support": false,
+									"hsts_enabled": false,
+									"hsts_subdomains": false,
+									"paths": "",
+									"advanced_config": "",
+									"is_disabled": false
+								}
+							}
+						}
+					}
+				}
+			}
+		}
+	}
+}

backend/embed/api_docs/paths/hosts/hostID/nginx-config/get.json

@@ -0,0 +1,42 @@
+{
+	"operationId": "getHostNginxConfig",
+	"summary": "Get a Host Nginx Config object by ID",
+	"tags": ["Hosts"],
+	"parameters": [
+		{
+			"in": "path",
+			"name": "hostID",
+			"schema": {
+				"type": "integer",
+				"minimum": 1
+			},
+			"required": true,
+			"description": "ID of the Host",
+			"example": 1
+		}
+	],
+	"responses": {
+		"200": {
+			"description": "200 response",
+			"content": {
+				"application/json": {
+					"schema": {
+						"required": ["result"],
+						"properties": {
+							"result": {
+								"type": "string"
+							}
+						}
+					},
+					"examples": {
+						"default": {
+							"value": {
+								"result": "# ------------------------------------------------------------\n# a.example.com\n# ------------------------------------------------------------\nserver {\n  listen 80;\n  server_name a.example.com ;\n  access_log /data/logs/host-1_access.log proxy;\n  error_log /data/logs/host-1_error.log warn;\n  # locations ?\n  # default location:\n  location / {\n    # Access Rules ? todo\n    # Access checks must...? todo\n    # Proxy!\n    add_header       X-Served-By $host;\n    proxy_set_header Host $host;\n    proxy_set_header X-Forwarded-Scheme $scheme;\n    proxy_set_header X-Forwarded-Proto  $scheme;\n    proxy_set_header X-Forwarded-For    $remote_addr;\n    proxy_http_version 1.1;\n    # proxy a single host\n    proxy_pass http://192.168.0.10:80;\n  }\n  # Legacy Custom Configuration\n  include /data/nginx/custom/server_proxy[.]conf;\n}\n"
+							}
+						}
+					}
+				}
+			}
+		}
+	}
+}

backend/embed/api_docs/paths/hosts/hostID/put.json

@@ -0,0 +1,73 @@
+{
+	"operationId": "updateHost",
+	"summary": "Update an existing Host",
+	"tags": ["Hosts"],
+	"parameters": [
+		{
+			"in": "path",
+			"name": "hostID",
+			"schema": {
+				"type": "integer",
+				"minimum": 1
+			},
+			"required": true,
+			"description": "ID of the Host",
+			"example": 1
+		}
+	],
+	"requestBody": {
+		"description": "Host details to update",
+		"required": true,
+		"content": {
+			"application/json": {
+				"schema": "{{schema.UpdateHost}}"
+			}
+		}
+	},
+	"responses": {
+		"200": {
+			"description": "200 response",
+			"content": {
+				"application/json": {
+					"schema": {
+						"required": ["result"],
+						"properties": {
+							"result": {
+								"$ref": "#/components/schemas/HostObject"
+							}
+						}
+					},
+					"examples": {
+						"default": {
+							"value": {
+								"result": {
+									"id": 1,
+									"created_on": 1646279455,
+									"modified_on": 1646279455,
+									"user_id": 2,
+									"type": "proxy",
+									"nginx_template_id": 1,
+									"listen_interface": "",
+									"domain_names": ["jc21.com"],
+									"upstream_id": 0,
+									"certificate_id": 0,
+									"access_list_id": 0,
+									"ssl_forced": false,
+									"caching_enabled": false,
+									"block_exploits": false,
+									"allow_websocket_upgrade": false,
+									"http2_support": false,
+									"hsts_enabled": false,
+									"hsts_subdomains": false,
+									"paths": "",
+									"advanced_config": "",
+									"is_disabled": false
+								}
+							}
+						}
+					}
+				}
+			}
+		}
+	}
+}

backend/embed/api_docs/paths/hosts/post.json

@@ -0,0 +1,60 @@
+{
+	"operationId": "createHost",
+	"summary": "Create a new Host",
+	"tags": ["Hosts"],
+	"requestBody": {
+		"description": "Host to Create",
+		"required": true,
+		"content": {
+			"application/json": {
+				"schema": "{{schema.CreateHost}}"
+			}
+		}
+	},
+	"responses": {
+		"201": {
+			"description": "201 response",
+			"content": {
+				"application/json": {
+					"schema": {
+						"required": ["result"],
+						"properties": {
+							"result": {
+								"$ref": "#/components/schemas/HostObject"
+							}
+						}
+					},
+					"examples": {
+						"default": {
+							"value": {
+								"result": {
+									"id": 1,
+									"created_on": 1645700556,
+									"modified_on": 1645700556,
+									"user_id": 2,
+									"type": "proxy",
+									"nginx_template_id": 1,
+									"listen_interface": "",
+									"domain_names": ["jc21.com"],
+									"upstream_id": 0,
+									"certificate_id": 0,
+									"access_list_id": 0,
+									"ssl_forced": false,
+									"caching_enabled": false,
+									"block_exploits": false,
+									"allow_websocket_upgrade": false,
+									"http2_support": false,
+									"hsts_enabled": false,
+									"hsts_subdomains": false,
+									"paths": "",
+									"advanced_config": "",
+									"is_disabled": false
+								}
+							}
+						}
+					}
+				}
+			}
+		}
+	}
+}

backend/embed/api_docs/paths/nginx-templates/get.json

@@ -0,0 +1,79 @@
+{
+	"operationId": "getNginxTemplates",
+	"summary": "Get a list of Nginx Templates",
+	"tags": ["Nginx Templates"],
+	"parameters": [
+		{
+			"in": "query",
+			"name": "offset",
+			"schema": {
+				"type": "number"
+			},
+			"description": "The pagination row offset, default 0",
+			"example": 0
+		},
+		{
+			"in": "query",
+			"name": "limit",
+			"schema": {
+				"type": "number"
+			},
+			"description": "The pagination row limit, default 10",
+			"example": 10
+		},
+		{
+			"in": "query",
+			"name": "sort",
+			"schema": {
+				"type": "string"
+			},
+			"description": "The sorting of the list",
+			"example": "id,name.asc,value.desc"
+		}
+	],
+	"responses": {
+		"200": {
+			"description": "200 response",
+			"content": {
+				"application/json": {
+					"schema": {
+						"required": ["result"],
+						"properties": {
+							"result": {
+								"$ref": "#/components/schemas/NginxTemplateList"
+							}
+						}
+					},
+					"examples": {
+						"default": {
+							"value": {
+								"result": {
+									"total": 1,
+									"offset": 0,
+									"limit": 10,
+									"sort": [
+										{
+											"field": "created_on",
+											"direction": "ASC"
+										}
+									],
+									"items": [
+										{
+											"id": 1,
+											"created_on": 1646218093,
+											"modified_on": 1646218093,
+											"user_id": 1,
+											"name": "Default Proxy Template",
+											"type": "proxy",
+											"template": "# this is a proxy template"
+										}
+									]
+								}
+							}
+						}
+					}
+				}
+			}
+		}
+	}
+}

backend/embed/api_docs/paths/nginx-templates/post.json

@@ -0,0 +1,46 @@
+{
+	"operationId": "createNginxTemplate",
+	"summary": "Create a new Nginx Template",
+	"tags": ["Nginx Templates"],
+	"requestBody": {
+		"description": "Template to Create",
+		"required": true,
+		"content": {
+			"application/json": {
+				"schema": "{{schema.CreateNginxTemplate}}"
+			}
+		}
+	},
+	"responses": {
+		"201": {
+			"description": "201 response",
+			"content": {
+				"application/json": {
+					"schema": {
+						"required": ["result"],
+						"properties": {
+							"result": {
+								"$ref": "#/components/schemas/NginxTemplateObject"
+							}
+						}
+					},
+					"examples": {
+						"default": {
+							"value": {
+								"result": {
+									"id": 10,
+									"created_on": 1646218093,
+									"modified_on": 1646218093,
+									"user_id": 1,
+									"name": "My proxy template",
+									"type": "proxy",
+									"template": "# this is a proxy template"
+								}
+							}
+						}
+					}
+				}
+			}
+		}
+	}
+}

backend/embed/api_docs/paths/nginx-templates/templateID/delete.json

@@ -0,0 +1,58 @@
+{
+	"operationId": "deleteNginxTemplate",
+	"summary": "Delete a Nginx Template",
+	"tags": ["Nginx Templates"],
+	"parameters": [
+		{
+			"in": "path",
+			"name": "templateID",
+			"schema": {
+				"type": "integer",
+				"minimum": 1
+			},
+			"required": true,
+			"description": "Numeric ID of the Template",
+			"example": 1
+		}
+	],
+	"responses": {
+		"200": {
+			"description": "200 response",
+			"content": {
+				"application/json": {
+					"schema": {
+						"$ref": "#/components/schemas/DeletedItemResponse"
+					},
+					"examples": {
+						"default": {
+							"value": {
+								"result": true
+							}
+						}
+					}
+				}
+			}
+		},
+		"400": {
+			"description": "400 response",
+			"content": {
+				"application/json": {
+					"schema": {
+						"$ref": "#/components/schemas/DeletedItemResponse"
+					},
+					"examples": {
+						"default": {
+							"value": {
+								"result": null,
+								"error": {
+									"code": 400,
+									"message": "You cannot delete a template that is in use!"
+								}
+							}
+						}
+					}
+				}
+			}
+		}
+	}
+}

backend/embed/api_docs/paths/nginx-templates/templateID/get.json

@@ -0,0 +1,50 @@
+{
+	"operationId": "getNginxTemplate",
+	"summary": "Get a Nginx Template object by ID",
+	"tags": ["Nginx Templates"],
+	"parameters": [
+		{
+			"in": "path",
+			"name": "templateID",
+			"schema": {
+				"type": "integer",
+				"minimum": 1
+			},
+			"required": true,
+			"description": "ID of the Host Template",
+			"example": 1
+		}
+	],
+	"responses": {
+		"200": {
+			"description": "200 response",
+			"content": {
+				"application/json": {
+					"schema": {
+						"required": ["result"],
+						"properties": {
+							"result": {
+								"$ref": "#/components/schemas/NginxTemplateObject"
+							}
+						}
+					},
+					"examples": {
+						"default": {
+							"value": {
+								"result": {
+									"id": 1,
+									"created_on": 1646218093,
+									"modified_on": 1646218093,
+									"user_id": 1,
+									"name": "Default Proxy Template",
+									"type": "proxy",
+									"template": "# this is a proxy template"
+								}
+							}
+						}
+					}
+				}
+			}
+		}
+	}
+}

backend/embed/api_docs/paths/nginx-templates/templateID/put.json

@@ -0,0 +1,59 @@
+{
+	"operationId": "updateNginxTemplate",
+	"summary": "Update an existing Nginx Template",
+	"tags": ["Nginx Templates"],
+	"parameters": [
+		{
+			"in": "path",
+			"name": "templateID",
+			"schema": {
+				"type": "integer",
+				"minimum": 1
+			},
+			"required": true,
+			"description": "ID of the Template",
+			"example": 1
+		}
+	],
+	"requestBody": {
+		"description": "Template details to update",
+		"required": true,
+		"content": {
+			"application/json": {
+				"schema": "{{schema.UpdateNginxTemplate}}"
+			}
+		}
+	},
+	"responses": {
+		"200": {
+			"description": "200 response",
+			"content": {
+				"application/json": {
+					"schema": {
+						"required": ["result"],
+						"properties": {
+							"result": {
+								"$ref": "#/components/schemas/NginxTemplateObject"
+							}
+						}
+					},
+					"examples": {
+						"default": {
+							"value": {
+								"result": {
+									"id": 1,
+									"created_on": 1646218093,
+									"modified_on": 1646218093,
+									"user_id": 1,
+									"name": "My renamed proxy template",
+									"type": "proxy",
+									"template": "# this is a proxy template"
+								}
+							}
+						}
+					}
+				}
+			}
+		}
+	}
+}

backend/embed/api_docs/paths/schema/get.json

@@ -0,0 +1,9 @@
+{
+	"operationId": "schema",
+	"summary": "Returns this swagger API schema",
+	"responses": {
+		"200": {
+			"description": "200 response"
+		}
+	}
+}

backend/embed/api_docs/paths/settings/get.json

@@ -0,0 +1,84 @@
+{
+	"operationId": "getSettings",
+	"summary": "Get a list of settings",
+	"tags": [
+		"Settings"
+	],
+	"parameters": [
+		{
+			"in": "query",
+			"name": "offset",
+			"schema": {
+				"type": "number"
+			},
+			"description": "The pagination row offset, default 0",
+			"example": 0
+		},
+		{
+			"in": "query",
+			"name": "limit",
+			"schema": {
+				"type": "number"
+			},
+			"description": "The pagination row limit, default 10",
+			"example": 10
+		},
+		{
+			"in": "query",
+			"name": "sort",
+			"schema": {
+				"type": "string"
+			},
+			"description": "The sorting of the list",
+			"example": "id,name.asc,value.desc"
+		}
+	],
+	"responses": {
+		"200": {
+			"description": "200 response",
+			"content": {
+				"application/json": {
+					"schema": {
+						"required": [
+							"result"
+						],
+						"properties": {
+							"result": {
+								"$ref": "#/components/schemas/SettingList"
+							}
+						}
+					},
+					"examples": {
+						"default": {
+							"value": {
+								"result": {
+									"total": 1,
+									"offset": 0,
+									"limit": 10,
+									"sort": [
+										{
+											"field": "name",
+											"direction": "ASC"
+										}
+									],
+									"items": [
+										{
+											"id": 1,
+											"created_on": 1578010090,
+											"modified_on": 1578010095,
+											"name": "default-site",
+											"value": {
+												"html": "<p>not found</p>",
+												"type": "custom"
+											}
+										}
+									]
+								}
+							}
+						}
+					}
+				}
+			}
+		}
+	}
+}

backend/embed/api_docs/paths/settings/name/get.json

@@ -0,0 +1,55 @@
+{
+	"operationId": "getSetting",
+	"summary": "Get a setting object by name",
+	"tags": [
+		"Settings"
+	],
+	"parameters": [
+		{
+			"in": "path",
+			"name": "name",
+			"schema": {
+				"type": "string",
+				"minLength": 2
+			},
+			"required": true,
+			"description": "Name of the setting",
+			"example": "default-site"
+		}
+	],
+	"responses": {
+		"200": {
+			"description": "200 response",
+			"content": {
+				"application/json": {
+					"schema": {
+						"required": [
+							"result"
+						],
+						"properties": {
+							"result": {
+								"$ref": "#/components/schemas/SettingObject"
+							}
+						}
+					},
+					"examples": {
+						"default": {
+							"value": {
+								"result": {
+									"id": 2,
+									"created_on": 1578010090,
+									"modified_on": 1578010095,
+									"name": "default-site",
+									"value": {
+										"html": "<p>not found</p>",
+										"type": "custom"
+									}
+								}
+							}
+						}
+					}
+				}
+			}
+		}
+	}
+}

backend/embed/api_docs/paths/settings/name/put.json

@@ -0,0 +1,64 @@
+{
+	"operationId": "updateSetting",
+	"summary": "Update an existing Setting",
+	"tags": [
+		"Settings"
+	],
+	"parameters": [
+		{
+			"in": "path",
+			"name": "name",
+			"schema": {
+				"type": "string",
+				"minLength": 2
+			},
+			"required": true,
+			"description": "Name of the setting",
+			"example": "default-site"
+		}
+	],
+	"requestBody": {
+		"description": "Setting details to update",
+		"required": true,
+		"content": {
+			"application/json": {
+				"schema": "{{schema.UpdateSetting}}"
+			}
+		}
+	},
+	"responses": {
+		"200": {
+			"description": "200 response",
+			"content": {
+				"application/json": {
+					"schema": {
+						"required": [
+							"result"
+						],
+						"properties": {
+							"result": {
+								"$ref": "#/components/schemas/SettingObject"
+							}
+						}
+					},
+					"examples": {
+						"default": {
+							"value": {
+								"result": {
+									"id": 2,
+									"created_on": 1578010090,
+									"modified_on": 1578010090,
+									"name": "default-site",
+									"value": {
+										"html": "<p>not found</p>",
+										"type": "custom"
+									}
+								}
+							}
+						}
+					}
+				}
+			}
+		}
+	}
+}

backend/embed/api_docs/paths/settings/post.json

@@ -0,0 +1,51 @@
+{
+	"operationId": "createSetting",
+	"summary": "Create a new Setting",
+	"tags": [
+		"Settings"
+	],
+	"requestBody": {
+		"description": "Setting to Create",
+		"required": true,
+		"content": {
+			"application/json": {
+				"schema": "{{schema.CreateSetting}}"
+			}
+		}
+	},
+	"responses": {
+		"201": {
+			"description": "201 response",
+			"content": {
+				"application/json": {
+					"schema": {
+						"required": [
+							"result"
+						],
+						"properties": {
+							"result": {
+								"$ref": "#/components/schemas/SettingObject"
+							}
+						}
+					},
+					"examples": {
+						"default": {
+							"value": {
+								"result": {
+									"id": 2,
+									"created_on": 1578010090,
+									"modified_on": 1578010090,
+									"name": "default-site",
+									"value": {
+										"html": "<p>not found</p>",
+										"type": "custom"
+									}
+								}
+							}
+						}
+					}
+				}
+			}
+		}
+	}
+}

backend/embed/api_docs/paths/streams/get.json

@@ -0,0 +1,75 @@
+{
+	"operationId": "getStreams",
+	"summary": "Get a list of Streams",
+	"tags": [
+		"Streams"
+	],
+	"parameters": [
+		{
+			"in": "query",
+			"name": "offset",
+			"schema": {
+				"type": "number"
+			},
+			"description": "The pagination row offset, default 0",
+			"example": 0
+		},
+		{
+			"in": "query",
+			"name": "limit",
+			"schema": {
+				"type": "number"
+			},
+			"description": "The pagination row limit, default 10",
+			"example": 10
+		},
+		{
+			"in": "query",
+			"name": "sort",
+			"schema": {
+				"type": "string"
+			},
+			"description": "The sorting of the list",
+			"example": "id,name.asc,value.desc"
+		}
+	],
+	"responses": {
+		"200": {
+			"description": "200 response",
+			"content": {
+				"application/json": {
+					"schema": {
+						"required": [
+							"result"
+						],
+						"properties": {
+							"result": {
+								"$ref": "#/components/schemas/StreamList"
+							}
+						}
+					},
+					"examples": {
+						"default": {
+							"value": {
+								"result": {
+									"total": 1,
+									"offset": 0,
+									"limit": 10,
+									"sort": [
+										{
+											"field": "name",
+											"direction": "ASC"
+										}
+									],
+									"items": [
+										"TODO"
+									]
+								}
+							}
+						}
+					}
+				}
+			}
+		}
+	}
+}

backend/embed/api_docs/paths/streams/post.json

@@ -0,0 +1,38 @@
+{
+	"operationId": "createStream",
+	"summary": "Create a new Stream",
+	"tags": ["Streams"],
+	"requestBody": {
+		"description": "Stream to Create",
+		"required": true,
+		"content": {
+			"application/json": {
+				"schema": "{{schema.CreateStream}}"
+			}
+		}
+	},
+	"responses": {
+		"201": {
+			"description": "201 response",
+			"content": {
+				"application/json": {
+					"schema": {
+						"required": ["result"],
+						"properties": {
+							"result": {
+								"$ref": "#/components/schemas/StreamObject"
+							}
+						}
+					},
+					"examples": {
+						"default": {
+							"value": {
+								"result": "TODO"
+							}
+						}
+					}
+				}
+			}
+		}
+	}
+}

backend/embed/api_docs/paths/streams/streamID/delete.json

@@ -0,0 +1,60 @@
+{
+	"operationId": "deleteStream",
+	"summary": "Delete a Stream",
+	"tags": [
+		"Streams"
+	],
+	"parameters": [
+		{
+			"in": "path",
+			"name": "streamID",
+			"schema": {
+				"type": "integer",
+				"minimum": 1
+			},
+			"required": true,
+			"description": "Numeric ID of the Stream",
+			"example": 1
+		}
+	],
+	"responses": {
+		"200": {
+			"description": "200 response",
+			"content": {
+				"application/json": {
+					"schema": {
+						"$ref": "#/components/schemas/DeletedItemResponse"
+					},
+					"examples": {
+						"default": {
+							"value": {
+								"result": true
+							}
+						}
+					}
+				}
+			}
+		},
+		"400": {
+			"description": "400 response",
+			"content": {
+				"application/json": {
+					"schema": {
+						"$ref": "#/components/schemas/DeletedItemResponse"
+					},
+					"examples": {
+						"default": {
+							"value": {
+								"result": null,
+								"error": {
+									"code": 400,
+									"message": "You cannot delete a Stream that is in use!"
+								}
+							}
+						}
+					}
+				}
+			}
+		}
+	}
+}

backend/embed/api_docs/paths/streams/streamID/get.json

@@ -0,0 +1,46 @@
+{
+	"operationId": "getStream",
+	"summary": "Get a Stream object by ID",
+	"tags": [
+		"Streams"
+	],
+	"parameters": [
+		{
+			"in": "path",
+			"name": "streamID",
+			"schema": {
+				"type": "integer",
+				"minimum": 1
+			},
+			"required": true,
+			"description": "ID of the Stream",
+			"example": 1
+		}
+	],
+	"responses": {
+		"200": {
+			"description": "200 response",
+			"content": {
+				"application/json": {
+					"schema": {
+						"required": [
+							"result"
+						],
+						"properties": {
+							"result": {
+								"$ref": "#/components/schemas/StreamObject"
+							}
+						}
+					},
+					"examples": {
+						"default": {
+							"value": {
+								"result": "TODO"
+							}
+						}
+					}
+				}
+			}
+		}
+	}
+}

backend/embed/api_docs/paths/streams/streamID/put.json

@@ -0,0 +1,55 @@
+{
+	"operationId": "updateStream",
+	"summary": "Update an existing Stream",
+	"tags": [
+		"Streams"
+	],
+	"parameters": [
+		{
+			"in": "path",
+			"name": "streamID",
+			"schema": {
+				"type": "integer",
+				"minimum": 1
+			},
+			"required": true,
+			"description": "ID of the Stream",
+			"example": 1
+		}
+	],
+	"requestBody": {
+		"description": "Stream details to update",
+		"required": true,
+		"content": {
+			"application/json": {
+				"schema": "{{schema.UpdateStream}}"
+			}
+		}
+	},
+	"responses": {
+		"200": {
+			"description": "200 response",
+			"content": {
+				"application/json": {
+					"schema": {
+						"required": [
+							"result"
+						],
+						"properties": {
+							"result": {
+								"$ref": "#/components/schemas/StreamObject"
+							}
+						}
+					},
+					"examples": {
+						"default": {
+							"value": {
+								"result": "TODO"
+							}
+						}
+					}
+				}
+			}
+		}
+	}
+}

backend/embed/api_docs/paths/tokens/get.json

@@ -0,0 +1,37 @@
+{
+	"operationId": "refreshToken",
+	"summary": "Refresh your access token",
+	"tags": [
+		"Tokens"
+	],
+	"responses": {
+		"200": {
+			"description": "200 response",
+			"content": {
+				"application/json": {
+					"schema": {
+						"required": [
+							"result"
+						],
+						"properties": {
+							"result": {
+								"$ref": "#/components/schemas/StreamObject"
+							}
+						}
+					},
+					"examples": {
+						"default": {
+							"value": {
+								"result": {
+									"expires": 1566540510,
+									"token": "eyJhbGciOiJSUzUxMiIsInR5cCI6IkpXVCJ9.ey...xaHKYr3Kk6MvkUjcC4",
+									"scope": "user"
+								}
+							}
+						}
+					}
+				}
+			}
+		}
+	}
+}

backend/embed/api_docs/paths/tokens/post.json

@@ -0,0 +1,79 @@
+{
+	"operationId": "requestToken",
+	"summary": "Request a new access token from credentials",
+	"tags": [
+		"Tokens"
+	],
+	"requestBody": {
+		"description": "Credentials Payload",
+		"required": true,
+		"content": {
+			"application/json": {
+				"schema": "{{schema.GetToken}}"
+			}
+		}
+	},
+	"responses": {
+		"200": {
+			"description": "200 response",
+			"content": {
+				"application/json": {
+					"schema": {
+						"required": [
+							"result"
+						],
+						"properties": {
+							"result": {
+								"$ref": "#/components/schemas/StreamObject"
+							}
+						}
+					},
+					"examples": {
+						"default": {
+							"value": {
+								"result": {
+									"expires": 1566540510,
+									"token": "eyJhbGciOiJSUzUxMiIsInR5cCI6IkpXVCJ9.ey...xaHKYr3Kk6MvkUjcC4",
+									"scope": "user"
+								}
+							}
+						}
+					}
+				}
+			}
+		},
+		"403": {
+			"description": "403 response",
+			"content": {
+				"application/json": {
+					"schema": {
+						"type": "object",
+						"additionalProperties": false,
+						"required": [
+							"error"
+						],
+						"properties": {
+							"result": {
+								"nullable": true
+							},
+							"error": {
+								"$ref": "#/components/schemas/ErrorObject"
+							}
+						}
+					},
+					"examples": {
+						"default": {
+							"value": {
+								"result": null,
+								"error": {
+									"code": 403,
+									"message": "Not available during setup phase"
+								}
+							}
+						}
+					}
+				}
+			}
+		}
+	}
+}

backend/embed/api_docs/paths/upstreams/get.json

@@ -0,0 +1,285 @@
+{
+	"operationId": "getUpstreams",
+	"summary": "Get a list of Upstreams",
+	"tags": ["Upstreams"],
+	"parameters": [
+		{
+			"in": "query",
+			"name": "offset",
+			"schema": {
+				"type": "number"
+			},
+			"description": "The pagination row offset, default 0",
+			"example": 0
+		},
+		{
+			"in": "query",
+			"name": "limit",
+			"schema": {
+				"type": "number"
+			},
+			"description": "The pagination row limit, default 10",
+			"example": 10
+		},
+		{
+			"in": "query",
+			"name": "sort",
+			"schema": {
+				"type": "string"
+			},
+			"description": "The sorting of the list",
+			"example": "id,name.asc,value.desc"
+		}
+	],
+	"responses": {
+		"200": {
+			"description": "200 response",
+			"content": {
+				"application/json": {
+					"schema": {
+						"required": ["result"],
+						"properties": {
+							"result": {
+								"$ref": "#/components/schemas/UpstreamList"
+							}
+						}
+					},
+					"examples": {
+						"default": {
+							"value": {
+								"result": {
+									"total": 5,
+									"offset": 0,
+									"limit": 10,
+									"sort": [
+										{
+											"field": "name",
+											"direction": "ASC"
+										}
+									],
+									"items": [
+										{
+											"id": 1,
+											"created_on": 1672804124,
+											"modified_on": 1672804124,
+											"user_id": 2,
+											"name": "API servers",
+											"nginx_template_id": 5,
+											"ip_hash": true,
+											"ntlm": false,
+											"keepalive": 10,
+											"keepalive_requests": 10,
+											"keepalive_time": "60s",
+											"keepalive_timeout": "3s",
+											"advanced_config": "",
+											"status": "ok",
+											"error_message": "",
+											"servers": [
+												{
+													"id": 1,
+													"created_on": 1672804124,
+													"modified_on": 1672804124,
+													"upstream_group_id": 1,
+													"server": "192.168.0.10:80",
+													"weight": 100,
+													"max_conns": 0,
+													"max_fails": 0,
+													"fail_timeout": 0,
+													"backup": false
+												},
+												{
+													"id": 2,
+													"created_on": 1672804124,
+													"modified_on": 1672804124,
+													"upstream_group_id": 1,
+													"server": "192.168.0.11:80",
+													"weight": 50,
+													"max_conns": 0,
+													"max_fails": 0,
+													"fail_timeout": 0,
+													"backup": false
+												}
+											]
+										},
+										{
+											"id": 2,
+											"created_on": 1672804197,
+											"modified_on": 1672804197,
+											"user_id": 2,
+											"name": "API servers 2",
+											"nginx_template_id": 5,
+											"ip_hash": false,
+											"ntlm": false,
+											"keepalive": 0,
+											"keepalive_requests": 0,
+											"keepalive_time": "",
+											"keepalive_timeout": "",
+											"advanced_config": "",
+											"status": "ok",
+											"error_message": "",
+											"servers": [
+												{
+													"id": 3,
+													"created_on": 1672804197,
+													"modified_on": 1672804197,
+													"upstream_group_id": 2,
+													"server": "192.168.0.10:80",
+													"weight": 100,
+													"max_conns": 0,
+													"max_fails": 0,
+													"fail_timeout": 0,
+													"backup": false
+												},
+												{
+													"id": 4,
+													"created_on": 1672804197,
+													"modified_on": 1672804197,
+													"upstream_group_id": 2,
+													"server": "192.168.0.11:80",
+													"weight": 50,
+													"max_conns": 0,
+													"max_fails": 0,
+													"fail_timeout": 0,
+													"backup": false
+												}
+											]
+										},
+										{
+											"id": 3,
+											"created_on": 1672804200,
+											"modified_on": 1672804200,
+											"user_id": 2,
+											"name": "API servers 2",
+											"nginx_template_id": 5,
+											"ip_hash": false,
+											"ntlm": false,
+											"keepalive": 0,
+											"keepalive_requests": 0,
+											"keepalive_time": "",
+											"keepalive_timeout": "",
+											"advanced_config": "",
+											"status": "ok",
+											"error_message": "",
+											"servers": [
+												{
+													"id": 5,
+													"created_on": 1672804200,
+													"modified_on": 1672804200,
+													"upstream_group_id": 3,
+													"server": "192.168.0.10:80",
+													"weight": 100,
+													"max_conns": 0,
+													"max_fails": 0,
+													"fail_timeout": 0,
+													"backup": false
+												},
+												{
+													"id": 6,
+													"created_on": 1672804200,
+													"modified_on": 1672804200,
+													"upstream_group_id": 3,
+													"server": "192.168.0.11:80",
+													"weight": 50,
+													"max_conns": 0,
+													"max_fails": 0,
+													"fail_timeout": 0,
+													"backup": false
+												}
+											]
+										},
+										{
+											"id": 4,
+											"created_on": 1672804201,
+											"modified_on": 1672804201,
+											"user_id": 2,
+											"name": "API servers 2",
+											"nginx_template_id": 5,
+											"ip_hash": false,
+											"ntlm": false,
+											"keepalive": 0,
+											"keepalive_requests": 0,
+											"keepalive_time": "",
+											"keepalive_timeout": "",
+											"advanced_config": "",
+											"status": "ok",
+											"error_message": "",
+											"servers": [
+												{
+													"id": 7,
+													"created_on": 1672804201,
+													"modified_on": 1672804201,
+													"upstream_group_id": 4,
+													"server": "192.168.0.10:80",
+													"weight": 100,
+													"max_conns": 0,
+													"max_fails": 0,
+													"fail_timeout": 0,
+													"backup": false
+												},
+												{
+													"id": 8,
+													"created_on": 1672804201,
+													"modified_on": 1672804201,
+													"upstream_group_id": 4,
+													"server": "192.168.0.11:80",
+													"weight": 50,
+													"max_conns": 0,
+													"max_fails": 0,
+													"fail_timeout": 0,
+													"backup": false
+												}
+											]
+										},
+										{
+											"id": 5,
+											"created_on": 1672804201,
+											"modified_on": 1672804201,
+											"user_id": 2,
+											"name": "API servers 2",
+											"nginx_template_id": 5,
+											"ip_hash": false,
+											"ntlm": false,
+											"keepalive": 0,
+											"keepalive_requests": 0,
+											"keepalive_time": "",
+											"keepalive_timeout": "",
+											"advanced_config": "",
+											"status": "ok",
+											"error_message": "",
+											"servers": [
+												{
+													"id": 9,
+													"created_on": 1672804201,
+													"modified_on": 1672804201,
+													"upstream_group_id": 5,
+													"server": "192.168.0.10:80",
+													"weight": 100,
+													"max_conns": 0,
+													"max_fails": 0,
+													"fail_timeout": 0,
+													"backup": false
+												},
+												{
+													"id": 10,
+													"created_on": 1672804201,
+													"modified_on": 1672804201,
+													"upstream_group_id": 5,
+													"server": "192.168.0.11:80",
+													"weight": 50,
+													"max_conns": 0,
+													"max_fails": 0,
+													"fail_timeout": 0,
+													"backup": false
+												}
+											]
+										}
+									]
+								}
+							}
+						}
+					}
+				}
+			}
+		}
+	}
+}

backend/embed/api_docs/paths/upstreams/post.json

@@ -0,0 +1,80 @@
+{
+	"operationId": "createUpstream",
+	"summary": "Create a new Upstream",
+	"tags": ["Upstreams"],
+	"requestBody": {
+		"description": "Upstream to Create",
+		"required": true,
+		"content": {
+			"application/json": {
+				"schema": "{{schema.CreateUpstream}}"
+			}
+		}
+	},
+	"responses": {
+		"201": {
+			"description": "201 response",
+			"content": {
+				"application/json": {
+					"schema": {
+						"required": ["result"],
+						"properties": {
+							"result": {
+								"$ref": "#/components/schemas/UpstreamObject"
+							}
+						}
+					},
+					"examples": {
+						"default": {
+							"value": {
+								"result": {
+									"id": 6,
+									"created_on": 1672806857,
+									"modified_on": 1672806857,
+									"user_id": 2,
+									"name": "API servers 2",
+									"nginx_template_id": 5,
+									"ip_hash": false,
+									"ntlm": false,
+									"keepalive": 0,
+									"keepalive_requests": 0,
+									"keepalive_time": "",
+									"keepalive_timeout": "",
+									"advanced_config": "",
+									"status": "ready",
+									"error_message": "",
+									"servers": [
+										{
+											"id": 11,
+											"created_on": 1672806857,
+											"modified_on": 1672806857,
+											"upstream_id": 6,
+											"server": "192.168.0.10:80",
+											"weight": 100,
+											"max_conns": 0,
+											"max_fails": 0,
+											"fail_timeout": 0,
+											"backup": false
+										},
+										{
+											"id": 12,
+											"created_on": 1672806857,
+											"modified_on": 1672806857,
+											"upstream_id": 6,
+											"server": "192.168.0.11:80",
+											"weight": 50,
+											"max_conns": 0,
+											"max_fails": 0,
+											"fail_timeout": 0,
+											"backup": false
+										}
+									]
+								}
+							}
+						}
+					}
+				}
+			}
+		}
+	}
+}

backend/embed/api_docs/paths/upstreams/upstreamID/delete.json

@@ -0,0 +1,58 @@
+{
+	"operationId": "deleteUpstream",
+	"summary": "Delete a Upstream",
+	"tags": ["Upstreams"],
+	"parameters": [
+		{
+			"in": "path",
+			"name": "upstreamID",
+			"schema": {
+				"type": "integer",
+				"minimum": 1
+			},
+			"required": true,
+			"description": "Numeric ID of the Upstream",
+			"example": 1
+		}
+	],
+	"responses": {
+		"200": {
+			"description": "200 response",
+			"content": {
+				"application/json": {
+					"schema": {
+						"$ref": "#/components/schemas/DeletedItemResponse"
+					},
+					"examples": {
+						"default": {
+							"value": {
+								"result": true
+							}
+						}
+					}
+				}
+			}
+		},
+		"400": {
+			"description": "400 response",
+			"content": {
+				"application/json": {
+					"schema": {
+						"$ref": "#/components/schemas/DeletedItemResponse"
+					},
+					"examples": {
+						"default": {
+							"value": {
+								"result": null,
+								"error": {
+									"code": 400,
+									"message": "You cannot delete a Upstream that is in use!"
+								}
+							}
+						}
+					}
+				}
+			}
+		}
+	}
+}

backend/embed/api_docs/paths/upstreams/upstreamID/get.json

@@ -0,0 +1,81 @@
+{
+	"operationId": "getUpstream",
+	"summary": "Get a Upstream object by ID",
+	"tags": ["Upstreams"],
+	"parameters": [
+		{
+			"in": "path",
+			"name": "upstreamID",
+			"schema": {
+				"type": "integer",
+				"minimum": 1
+			},
+			"required": true,
+			"description": "ID of the Upstream",
+			"example": 1
+		}
+	],
+	"responses": {
+		"200": {
+			"description": "200 response",
+			"content": {
+				"application/json": {
+					"schema": {
+						"required": ["result"],
+						"properties": {
+							"result": {
+								"$ref": "#/components/schemas/UpstreamObject"
+							}
+						}
+					},
+					"examples": {
+						"default": {
+							"value": {
+								"result": {
+									"id": 1,
+									"created_on": 1672786008,
+									"modified_on": 1672786008,
+									"user_id": 2,
+									"name": "API servers 3",
+									"ip_hash": true,
+									"ntlm": false,
+									"keepalive": 10,
+									"keepalive_requests": 10,
+									"keepalive_time": "60s",
+									"keepalive_timeout": "3s",
+									"advanced_config": "",
+									"servers": [
+										{
+											"id": 1,
+											"created_on": 1672786009,
+											"modified_on": 1672786009,
+											"upstream_id": 1,
+											"server": "api1.localhost:1234",
+											"weight": 100,
+											"max_conns": 0,
+											"max_fails": 0,
+											"fail_timeout": 0,
+											"backup": false
+										},
+										{
+											"id": 2,
+											"created_on": 1672786009,
+											"modified_on": 1672786009,
+											"upstream_id": 1,
+											"server": "api2.localhost:1234",
+											"weight": 50,
+											"max_conns": 0,
+											"max_fails": 0,
+											"fail_timeout": 0,
+											"backup": true
+										}
+									]
+								}
+							}
+						}
+					}
+				}
+			}
+		}
+	}
+}

backend/embed/api_docs/paths/upstreams/upstreamID/nginx-config/get.json

@@ -0,0 +1,42 @@
+{
+	"operationId": "getUpstreamNginxConfig",
+	"summary": "Get a Upstream Nginx Config object by ID",
+	"tags": ["Upstreams"],
+	"parameters": [
+		{
+			"in": "path",
+			"name": "upstreamID",
+			"schema": {
+				"type": "integer",
+				"minimum": 1
+			},
+			"required": true,
+			"description": "ID of the Upstream",
+			"example": 1
+		}
+	],
+	"responses": {
+		"200": {
+			"description": "200 response",
+			"content": {
+				"application/json": {
+					"schema": {
+						"required": ["result"],
+						"properties": {
+							"result": {
+								"type": "string"
+							}
+						}
+					},
+					"examples": {
+						"default": {
+							"value": {
+								"result": "# ------------------------------------------------------------\n# Upstream 1: API servers\n# ------------------------------------------------------------\nupstream npm_upstream_1 {\nserver 192.168.0.10:80 weight=100 ;\n  server 192.168.0.11:80 weight=50 ;\n}\n"
+							}
+						}
+					}
+				}
+			}
+		}
+	}
+}

backend/embed/api_docs/paths/upstreams/upstreamID/put.json

@@ -0,0 +1,93 @@
+{
+	"operationId": "updateUpstream",
+	"summary": "Update an existing Upstream",
+	"tags": ["Upstreams"],
+	"parameters": [
+		{
+			"in": "path",
+			"name": "upstreamID",
+			"schema": {
+				"type": "integer",
+				"minimum": 1
+			},
+			"required": true,
+			"description": "ID of the Upstream",
+			"example": 1
+		}
+	],
+	"requestBody": {
+		"description": "Upstream details to update",
+		"required": true,
+		"content": {
+			"application/json": {
+				"schema": "{{schema.UpdateUpstream}}"
+			}
+		}
+	},
+	"responses": {
+		"200": {
+			"description": "200 response",
+			"content": {
+				"application/json": {
+					"schema": {
+						"required": ["result"],
+						"properties": {
+							"result": {
+								"$ref": "#/components/schemas/UpstreamObject"
+							}
+						}
+					},
+					"examples": {
+						"default": {
+							"value": {
+								"result": {
+									"id": 1,
+									"created_on": 1673234177,
+									"modified_on": 1673244559,
+									"user_id": 2,
+									"name": "API servers 2",
+									"nginx_template_id": 5,
+									"ip_hash": false,
+									"ntlm": false,
+									"keepalive": 0,
+									"keepalive_requests": 0,
+									"keepalive_time": "",
+									"keepalive_timeout": "",
+									"advanced_config": "",
+									"status": "ready",
+									"error_message": "",
+									"servers": [
+										{
+											"id": 1,
+											"created_on": 1673234177,
+											"modified_on": 1673244559,
+											"upstream_id": 1,
+											"server": "192.168.0.10:80",
+											"weight": 100,
+											"max_conns": 0,
+											"max_fails": 0,
+											"fail_timeout": 0,
+											"backup": false
+										},
+										{
+											"id": 2,
+											"created_on": 1673234177,
+											"modified_on": 1673244559,
+											"upstream_id": 1,
+											"server": "192.168.0.11:80",
+											"weight": 50,
+											"max_conns": 0,
+											"max_fails": 0,
+											"fail_timeout": 0,
+											"backup": false
+										}
+									]
+								}
+							}
+						}
+					}
+				}
+			}
+		}
+	}
+}

backend/embed/api_docs/paths/users/get.json

@@ -0,0 +1,117 @@
+{
+	"operationId": "getUsers",
+	"summary": "Get a list of users",
+	"tags": ["Users"],
+	"parameters": [
+		{
+			"in": "query",
+			"name": "offset",
+			"schema": {
+				"type": "number"
+			},
+			"description": "The pagination row offset, default 0",
+			"example": 0
+		},
+		{
+			"in": "query",
+			"name": "limit",
+			"schema": {
+				"type": "number"
+			},
+			"description": "The pagination row limit, default 10",
+			"example": 10
+		},
+		{
+			"in": "query",
+			"name": "sort",
+			"schema": {
+				"type": "string"
+			},
+			"description": "The sorting of the list",
+			"example": "name,nickname.desc,email.asc"
+		}
+	],
+	"responses": {
+		"200": {
+			"description": "200 response",
+			"content": {
+				"application/json": {
+					"schema": {
+						"required": ["result"],
+						"properties": {
+							"result": {
+								"$ref": "#/components/schemas/UserList"
+							}
+						}
+					},
+					"examples": {
+						"default": {
+							"value": {
+								"result": {
+									"total": 3,
+									"offset": 0,
+									"limit": 100,
+									"sort": [
+										{
+											"field": "name",
+											"direction": "ASC"
+										},
+										{
+											"field": "nickname",
+											"direction": "DESC"
+										},
+										{
+											"field": "email",
+											"direction": "ASC"
+										}
+									],
+									"items": [
+										{
+											"id": 1,
+											"name": "Jamie Curnow",
+											"nickname": "James",
+											"email": "jc@jc21.com",
+											"created_on": 1578010090,
+											"modified_on": 1578010095,
+											"gravatar_url": "https://www.gravatar.com/avatar/6193176330f8d38747f038c170ddb193?d=mm&r=pg&s=128",
+											"is_disabled": false,
+											"capabilities": ["full-admin"]
+										},
+										{
+											"id": 2,
+											"name": "John Doe",
+											"nickname": "John",
+											"email": "johdoe@example.com",
+											"created_on": 1578010100,
+											"modified_on": 1578010105,
+											"gravatar_url": "https://www.gravatar.com/avatar/6193176330f8d38747f038c170ddb193?d=mm&r=pg&s=128",
+											"is_disabled": false,
+											"capabilities": [
+												"hosts.view",
+												"hosts.manage"
+											]
+										},
+										{
+											"id": 3,
+											"name": "Jane Doe",
+											"nickname": "Jane",
+											"email": "janedoe@example.com",
+											"created_on": 1578010110,
+											"modified_on": 1578010115,
+											"gravatar_url": "https://www.gravatar.com/avatar/6193176330f8d38747f038c170ddb193?d=mm&r=pg&s=128",
+											"is_disabled": false,
+											"capabilities": [
+												"hosts.view",
+												"hosts.manage"
+											]
+										}
+									]
+								}
+							}
+						}
+					}
+				}
+			}
+		}
+	}
+}

backend/embed/api_docs/paths/users/post.json

@@ -0,0 +1,79 @@
+{
+	"operationId": "createUser",
+	"summary": "Create a new User",
+	"tags": ["Users"],
+	"requestBody": {
+		"description": "User to Create",
+		"required": true,
+		"content": {
+			"application/json": {
+				"schema": "{{schema.CreateUser}}"
+			}
+		}
+	},
+	"responses": {
+		"201": {
+			"description": "201 response",
+			"content": {
+				"application/json": {
+					"schema": {
+						"required": ["result"],
+						"properties": {
+							"result": {
+								"$ref": "#/components/schemas/UserObject"
+							}
+						}
+					},
+					"examples": {
+						"default": {
+							"value": {
+								"result": {
+									"id": 1,
+									"name": "Jamie Curnow",
+									"nickname": "James",
+									"email": "jc@jc21.com",
+									"created_on": 1578010100,
+									"modified_on": 1578010100,
+									"gravatar_url": "https://www.gravatar.com/avatar/6193176330f8d38747f038c170ddb193?d=mm&r=pg&s=128",
+									"is_disabled": false,
+									"auth": {
+										"$ref": "#/components/schemas/UserAuthObject"
+									},
+									"capabilities": ["full-admin"]
+								}
+							}
+						}
+					}
+				}
+			}
+		},
+		"400": {
+			"description": "400 response",
+			"content": {
+				"application/json": {
+					"schema": {
+						"required": ["error"],
+						"properties": {
+							"result": {
+								"nullable": true
+							},
+							"error": {
+								"$ref": "#/components/schemas/ErrorObject"
+							}
+						}
+					},
+					"examples": {
+						"default": {
+							"value": {
+								"error": {
+									"code": 400,
+									"message": "An user already exists with this email address"
+								}
+							}
+						}
+					}
+				}
+			}
+		}
+	}
+}

backend/embed/api_docs/paths/users/userID/auth/post.json

@@ -0,0 +1,65 @@
+{
+	"operationId": "setPassword",
+	"summary": "Set a User's password",
+	"tags": ["Users"],
+	"parameters": [
+		{
+			"in": "path",
+			"name": "userID",
+			"schema": {
+				"oneOf": [
+					{
+						"type": "integer",
+						"minimum": 1
+					},
+					{
+						"type": "string",
+						"pattern": "^me$"
+					}
+				]
+			},
+			"required": true,
+			"description": "Numeric ID of the user or 'me' to set yourself",
+			"example": 1
+		}
+	],
+	"requestBody": {
+		"description": "Credentials to set",
+		"required": true,
+		"content": {
+			"application/json": {
+				"schema": "{{schema.SetAuth}}"
+			}
+		}
+	},
+	"responses": {
+		"200": {
+			"description": "200 response",
+			"content": {
+				"application/json": {
+					"schema": {
+						"required": ["result"],
+						"properties": {
+							"result": {
+								"$ref": "#/components/schemas/UserAuthObject"
+							}
+						}
+					},
+					"examples": {
+						"default": {
+							"value": {
+								"result": {
+									"id": 2,
+									"user_id": 3,
+									"type": "password",
+									"created_on": 1648422222,
+									"modified_on": 1648423979
+								}
+							}
+						}
+					}
+				}
+			}
+		}
+	}
+}

backend/embed/api_docs/paths/users/userID/delete.json

@@ -0,0 +1,60 @@
+{
+	"operationId": "deleteUser",
+	"summary": "Delete a User",
+	"tags": [
+		"Users"
+	],
+	"parameters": [
+		{
+			"in": "path",
+			"name": "userID",
+			"schema": {
+				"type": "integer",
+				"minimum": 1
+			},
+			"required": true,
+			"description": "Numeric ID of the user",
+			"example": 1
+		}
+	],
+	"responses": {
+		"200": {
+			"description": "200 response",
+			"content": {
+				"application/json": {
+					"schema": {
+						"$ref": "#/components/schemas/DeletedItemResponse"
+					},
+					"examples": {
+						"default": {
+							"value": {
+								"result": true
+							}
+						}
+					}
+				}
+			}
+		},
+		"400": {
+			"description": "400 response",
+			"content": {
+				"application/json": {
+					"schema": {
+						"$ref": "#/components/schemas/DeletedItemResponse"
+					},
+					"examples": {
+						"default": {
+							"value": {
+								"result": null,
+								"error": {
+									"code": 400,
+									"message": "You cannot delete yourself!"
+								}
+							}
+						}
+					}
+				}
+			}
+		}
+	}
+}

backend/embed/api_docs/paths/users/userID/get.json

@@ -0,0 +1,60 @@
+{
+	"operationId": "getUser",
+	"summary": "Get a user object by ID or 'me'",
+	"tags": ["Users"],
+	"parameters": [
+		{
+			"in": "path",
+			"name": "userID",
+			"schema": {
+				"anyOf": [
+					{
+						"type": "integer",
+						"minimum": 1
+					},
+					{
+						"type": "string",
+						"pattern": "^me$"
+					}
+				]
+			},
+			"required": true,
+			"description": "Numeric ID of the user or 'me' to get yourself",
+			"example": 1
+		}
+	],
+	"responses": {
+		"200": {
+			"description": "200 response",
+			"content": {
+				"application/json": {
+					"schema": {
+						"required": ["result"],
+						"properties": {
+							"result": {
+								"$ref": "#/components/schemas/UserObject"
+							}
+						}
+					},
+					"examples": {
+						"default": {
+							"value": {
+								"result": {
+									"id": 1,
+									"name": "Jamie Curnow",
+									"nickname": "James",
+									"email": "jc@jc21.com",
+									"created_on": 1578010100,
+									"modified_on": 1578010105,
+									"gravatar_url": "https://www.gravatar.com/avatar/6193176330f8d38747f038c170ddb193?d=mm&r=pg&s=128",
+									"is_disabled": false,
+									"capabilities": ["full-admin"]
+								}
+							}
+						}
+					}
+				}
+			}
+		}
+	}
+}

backend/embed/api_docs/paths/users/userID/put.json

@@ -0,0 +1,107 @@
+{
+	"operationId": "updateUser",
+	"summary": "Update an existing User",
+	"tags": ["Users"],
+	"parameters": [
+		{
+			"in": "path",
+			"name": "userID",
+			"schema": {
+				"anyOf": [
+					{
+						"type": "integer",
+						"minimum": 1
+					},
+					{
+						"type": "string",
+						"pattern": "^me$"
+					}
+				]
+			},
+			"required": true,
+			"description": "Numeric ID of the user or 'me' to update yourself",
+			"example": 1
+		}
+	],
+	"requestBody": {
+		"description": "User details to update",
+		"required": true,
+		"content": {
+			"application/json": {
+				"schema": "{{schema.UpdateUser}}"
+			}
+		}
+	},
+	"responses": {
+		"200": {
+			"description": "200 response",
+			"content": {
+				"application/json": {
+					"schema": {
+						"required": ["result"],
+						"properties": {
+							"result": {
+								"$ref": "#/components/schemas/UserObject"
+							}
+						}
+					},
+					"examples": {
+						"default": {
+							"value": {
+								"result": {
+									"id": 1,
+									"name": "Jamie Curnow",
+									"nickname": "James",
+									"email": "jc@jc21.com",
+									"created_on": 1578010100,
+									"modified_on": 1578010110,
+									"gravatar_url": "https://www.gravatar.com/avatar/6193176330f8d38747f038c170ddb193?d=mm&r=pg&s=128",
+									"is_disabled": false,
+									"capabilities": ["full-admin"]
+								}
+							}
+						}
+					}
+				}
+			}
+		},
+		"400": {
+			"description": "400 response",
+			"content": {
+				"application/json": {
+					"schema": {
+						"required": ["error"],
+						"properties": {
+							"result": {
+								"nullable": true
+							},
+							"error": {
+								"$ref": "#/components/schemas/ErrorObject"
+							}
+						}
+					},
+					"examples": {
+						"duplicateemail": {
+							"value": {
+								"result": null,
+								"error": {
+									"code": 400,
+									"message": "A user already exists with this email address"
+								}
+							}
+						},
+						"nodisable": {
+							"value": {
+								"result": null,
+								"error": {
+									"code": 400,
+									"message": "You cannot disable yourself!"
+								}
+							}
+						}
+					}
+				}
+			}
+		}
+	}
+}

backend/embed/main.go

@@ -0,0 +1,23 @@
+package embed
+
+import "embed"
+
+// APIDocFiles contain all the files used for swagger schema generation
+//
+//go:embed api_docs
+var APIDocFiles embed.FS
+
+// Assets are frontend assets served from within this app
+//
+//go:embed assets
+var Assets embed.FS
+
+// MigrationFiles are database migrations
+//
+//go:embed migrations/*.sql
+var MigrationFiles embed.FS
+
+// NginxFiles hold nginx config templates
+//
+//go:embed nginx
+var NginxFiles embed.FS

backend/embed/migrations/20201013035318_initial_schema.sql

@@ -0,0 +1,235 @@
+-- migrate:up
+
+CREATE TABLE IF NOT EXISTS `user`
+(
+	id INTEGER PRIMARY KEY AUTOINCREMENT,
+	created_on INTEGER NOT NULL DEFAULT 0,
+	modified_on INTEGER NOT NULL DEFAULT 0,
+	name TEXT NOT NULL,
+	nickname TEXT NOT NULL,
+	email TEXT NOT NULL,
+	is_system INTEGER NOT NULL DEFAULT 0,
+	is_disabled INTEGER NOT NULL DEFAULT 0,
+	is_deleted INTEGER NOT NULL DEFAULT 0
+);
+
+CREATE TABLE IF NOT EXISTS `capability`
+(
+	id INTEGER PRIMARY KEY AUTOINCREMENT,
+	name TEXT NOT NULL,
+	UNIQUE (name)
+);
+
+CREATE TABLE IF NOT EXISTS `user_has_capability`
+(
+	user_id INTEGER NOT NULL,
+	capability_id INTEGER NOT NULL,
+	UNIQUE (user_id, capability_id),
+	FOREIGN KEY (capability_id) REFERENCES capability (id)
+);
+
+CREATE TABLE IF NOT EXISTS `auth`
+(
+	id INTEGER PRIMARY KEY AUTOINCREMENT,
+	created_on INTEGER NOT NULL DEFAULT 0,
+	modified_on INTEGER NOT NULL DEFAULT 0,
+	user_id INTEGER NOT NULL,
+	type TEXT NOT NULL,
+	secret TEXT NOT NULL,
+	is_deleted INTEGER NOT NULL DEFAULT 0,
+	FOREIGN KEY (user_id) REFERENCES user (id),
+	UNIQUE (user_id, type)
+);
+
+CREATE TABLE IF NOT EXISTS `setting`
+(
+	id INTEGER PRIMARY KEY AUTOINCREMENT,
+	created_on INTEGER NOT NULL DEFAULT 0,
+	modified_on INTEGER NOT NULL DEFAULT 0,
+	name TEXT NOT NULL,
+	description TEXT NOT NULL DEFAULT "",
+	value TEXT NOT NULL,
+	UNIQUE (name)
+);
+
+CREATE TABLE IF NOT EXISTS `audit_log`
+(
+	id INTEGER PRIMARY KEY AUTOINCREMENT,
+	created_on INTEGER NOT NULL DEFAULT 0,
+	modified_on INTEGER NOT NULL DEFAULT 0,
+	user_id INTEGER NOT NULL,
+	object_type TEXT NOT NULL,
+	object_id INTEGER NOT NULL,
+	action TEXT NOT NULL,
+	meta TEXT NOT NULL,
+	FOREIGN KEY (user_id) REFERENCES user (id)
+);
+
+CREATE TABLE IF NOT EXISTS `certificate_authority`
+(
+	id INTEGER PRIMARY KEY AUTOINCREMENT,
+	created_on INTEGER NOT NULL DEFAULT 0,
+	modified_on INTEGER NOT NULL DEFAULT 0,
+	name TEXT NOT NULL,
+	acmesh_server TEXT NOT NULL DEFAULT "",
+	ca_bundle TEXT NOT NULL DEFAULT "",
+	is_wildcard_supported INTEGER NOT NULL DEFAULT 0, -- specific to each CA, acme v1 doesn't usually have wildcards
+	max_domains INTEGER NOT NULL DEFAULT 5, -- per request
+	is_readonly INTEGER NOT NULL DEFAULT 0,
+	is_deleted INTEGER NOT NULL DEFAULT 0
+);
+
+CREATE TABLE IF NOT EXISTS `dns_provider`
+(
+	id INTEGER PRIMARY KEY AUTOINCREMENT,
+	created_on INTEGER NOT NULL DEFAULT 0,
+	modified_on INTEGER NOT NULL DEFAULT 0,
+	user_id INTEGER NOT NULL,
+	name TEXT NOT NULL,
+	acmesh_name TEXT NOT NULL,
+	dns_sleep INTEGER NOT NULL DEFAULT 0,
+	meta TEXT NOT NULL,
+	is_deleted INTEGER NOT NULL DEFAULT 0,
+	FOREIGN KEY (user_id) REFERENCES user (id)
+);
+
+CREATE TABLE IF NOT EXISTS `certificate`
+(
+	id INTEGER PRIMARY KEY AUTOINCREMENT,
+	created_on INTEGER NOT NULL DEFAULT 0,
+	modified_on INTEGER NOT NULL DEFAULT 0,
+	type TEXT NOT NULL, -- custom,dns,http
+	user_id INTEGER NOT NULL,
+	certificate_authority_id INTEGER, -- 0 for a custom cert
+	dns_provider_id INTEGER, -- 0, for a http or custom cert
+	name TEXT NOT NULL,
+	domain_names TEXT NOT NULL,
+	expires_on INTEGER DEFAULT 0,
+	status TEXT NOT NULL, -- ready,requesting,failed,provided
+	error_message text NOT NULL DEFAULT "",
+	meta TEXT NOT NULL,
+	is_ecc INTEGER NOT NULL DEFAULT 0,
+	is_deleted INTEGER NOT NULL DEFAULT 0,
+	FOREIGN KEY (user_id) REFERENCES user (id),
+	FOREIGN KEY (certificate_authority_id) REFERENCES certificate_authority (id),
+	FOREIGN KEY (dns_provider_id) REFERENCES dns_provider (id)
+);
+
+CREATE TABLE IF NOT EXISTS `stream`
+(
+	id INTEGER PRIMARY KEY AUTOINCREMENT,
+	created_on INTEGER NOT NULL DEFAULT 0,
+	modified_on INTEGER NOT NULL DEFAULT 0,
+	user_id INTEGER NOT NULL,
+	listen_interface TEXT NOT NULL,
+	incoming_port INTEGER NOT NULL,
+	tcp_forwarding INTEGER NOT NULL DEFAULT 0,
+	udp_forwarding INTEGER NOT NULL DEFAULT 0,
+	advanced_config TEXT NOT NULL,
+	is_disabled INTEGER NOT NULL DEFAULT 0,
+	is_deleted INTEGER NOT NULL DEFAULT 0,
+	FOREIGN KEY (user_id) REFERENCES user (id)
+);
+
+CREATE TABLE IF NOT EXISTS `upstream`
+(
+	id INTEGER PRIMARY KEY AUTOINCREMENT,
+	created_on INTEGER NOT NULL DEFAULT 0,
+	modified_on INTEGER NOT NULL DEFAULT 0,
+	user_id INTEGER NOT NULL,
+	name TEXT NOT NULL,
+	nginx_template_id INTEGER NOT NULL,
+	ip_hash INTEGER NOT NULL DEFAULT 0,
+	ntlm INTEGER NOT NULL DEFAULT 0,
+	keepalive INTEGER NOT NULL DEFAULT 0,
+	keepalive_requests INTEGER NOT NULL DEFAULT 0,
+	keepalive_time TEXT NOT NULL DEFAULT "",
+	keepalive_timeout TEXT NOT NULL DEFAULT "",
+	advanced_config TEXT NOT NULL,
+	status TEXT NOT NULL DEFAULT "",
+	error_message TEXT NOT NULL DEFAULT "",
+	is_deleted INTEGER NOT NULL DEFAULT 0,
+	FOREIGN KEY (user_id) REFERENCES user (id),
+	FOREIGN KEY (nginx_template_id) REFERENCES nginx_template (id)
+);
+
+CREATE TABLE IF NOT EXISTS `upstream_server`
+(
+	id INTEGER PRIMARY KEY AUTOINCREMENT,
+	created_on INTEGER NOT NULL DEFAULT 0,
+	modified_on INTEGER NOT NULL DEFAULT 0,
+	upstream_id INTEGER NOT NULL,
+	server TEXT NOT NULL,
+	weight INTEGER NOT NULL DEFAULT 0,
+	max_conns INTEGER NOT NULL DEFAULT 0,
+	max_fails INTEGER NOT NULL DEFAULT 0,
+	fail_timeout INTEGER NOT NULL DEFAULT 0,
+	backup INTEGER NOT NULL DEFAULT 0,
+	is_deleted INTEGER NOT NULL DEFAULT 0,
+	FOREIGN KEY (upstream_id) REFERENCES upstream (id)
+);
+
+CREATE TABLE IF NOT EXISTS `access_list`
+(
+	id INTEGER PRIMARY KEY AUTOINCREMENT,
+	created_on INTEGER NOT NULL DEFAULT 0,
+	modified_on INTEGER NOT NULL DEFAULT 0,
+	user_id INTEGER NOT NULL,
+	name TEXT NOT NULL,
+	meta TEXT NOT NULL,
+	is_deleted INTEGER NOT NULL DEFAULT 0,
+	FOREIGN KEY (user_id) REFERENCES user (id)
+);
+
+CREATE TABLE IF NOT EXISTS `nginx_template`
+(
+	id INTEGER PRIMARY KEY AUTOINCREMENT,
+	created_on INTEGER NOT NULL DEFAULT 0,
+	modified_on INTEGER NOT NULL DEFAULT 0,
+	user_id INTEGER NOT NULL,
+	name TEXT NOT NULL,
+	type TEXT NOT NULL,
+	template TEXT NOT NULL,
+	is_deleted INTEGER NOT NULL DEFAULT 0,
+	FOREIGN KEY (user_id) REFERENCES user (id)
+);
+
+CREATE TABLE IF NOT EXISTS `host`
+(
+	id INTEGER PRIMARY KEY AUTOINCREMENT,
+	created_on INTEGER NOT NULL DEFAULT 0,
+	modified_on INTEGER NOT NULL DEFAULT 0,
+	user_id INTEGER NOT NULL,
+	type TEXT NOT NULL,
+	nginx_template_id INTEGER NOT NULL,
+	listen_interface TEXT NOT NULL DEFAULT "",
+	domain_names TEXT NOT NULL,
+	upstream_id INTEGER NOT NULL DEFAULT 0,
+	proxy_scheme TEXT NOT NULL DEFAULT "",
+	proxy_host TEXT NOT NULL DEFAULT "",
+	proxy_port INTEGER NOT NULL DEFAULT 0,
+	certificate_id INTEGER NOT NULL DEFAULT 0,
+	access_list_id INTEGER NOT NULL DEFAULT 0,
+	ssl_forced INTEGER NOT NULL DEFAULT 0,
+	caching_enabled INTEGER NOT NULL DEFAULT 0,
+	block_exploits INTEGER NOT NULL DEFAULT 0,
+	allow_websocket_upgrade INTEGER NOT NULL DEFAULT 0,
+	http2_support INTEGER NOT NULL DEFAULT 0,
+	hsts_enabled INTEGER NOT NULL DEFAULT 0,
+	hsts_subdomains INTEGER NOT NULL DEFAULT 0,
+	paths TEXT NOT NULL DEFAULT "",
+	advanced_config TEXT NOT NULL DEFAULT "",
+	status TEXT NOT NULL DEFAULT "",
+	error_message TEXT NOT NULL DEFAULT "",
+	is_disabled INTEGER NOT NULL DEFAULT 0,
+	is_deleted INTEGER NOT NULL DEFAULT 0,
+	FOREIGN KEY (user_id) REFERENCES user (id),
+	FOREIGN KEY (nginx_template_id) REFERENCES nginx_template (id),
+	FOREIGN KEY (upstream_id) REFERENCES upstream (id),
+	FOREIGN KEY (certificate_id) REFERENCES certificate (id),
+	FOREIGN KEY (access_list_id) REFERENCES access_list (id)
+);
+
+-- migrate:down
+
+-- Not allowed to go down from initial

backend/embed/migrations/20201013035839_initial_data.sql

@@ -0,0 +1,332 @@
+-- migrate:up
+
+-- User permissions
+INSERT INTO `capability` (
+	name
+) VALUES
+	("full-admin"),
+	("access-lists.view"),
+	("access-lists.manage"),
+	("audit-log.view"),
+	("certificates.view"),
+	("certificates.manage"),
+	("certificate-authorities.view"),
+	("certificate-authorities.manage"),
+	("dns-providers.view"),
+	("dns-providers.manage"),
+	("hosts.view"),
+	("hosts.manage"),
+	("nginx-templates.view"),
+	("nginx-templates.manage"),
+	("settings.manage"),
+	("streams.view"),
+	("streams.manage"),
+	("users.manage");
+
+-- Default error reporting setting
+INSERT INTO `setting` (
+	created_on,
+	modified_on,
+	name,
+	description,
+	value
+) VALUES (
+	strftime('%s', 'now'),
+	strftime('%s', 'now'),
+	"error-reporting",
+	"If enabled, any application errors are reported to Sentry. Sensitive information is not sent.",
+	"true" -- remember this is json
+);
+
+-- Default site
+INSERT INTO `setting` (
+	created_on,
+	modified_on,
+	name,
+	description,
+	value
+) VALUES (
+	strftime('%s', 'now'),
+	strftime('%s', 'now'),
+	"default-site",
+	"What to show users who hit your Nginx server by default",
+	'"welcome"' -- remember this is json
+);
+
+-- Default Certificate Authorities
+
+INSERT INTO `certificate_authority` (
+	created_on,
+	modified_on,
+	name,
+	acmesh_server,
+	is_wildcard_supported,
+	max_domains,
+	is_readonly
+) VALUES (
+	strftime('%s', 'now'),
+	strftime('%s', 'now'),
+	"ZeroSSL",
+	"zerossl",
+	1,
+	10,
+	1
+), (
+	strftime('%s', 'now'),
+	strftime('%s', 'now'),
+	"Let's Encrypt",
+	"https://acme-v02.api.letsencrypt.org/directory",
+	1,
+	10,
+	1
+), (
+	strftime('%s', 'now'),
+	strftime('%s', 'now'),
+	"Buypass Go SSL",
+	"https://api.buypass.com/acme/directory",
+	0,
+	5,
+	1
+), (
+	strftime('%s', 'now'),
+	strftime('%s', 'now'),
+	"Let's Encrypt (Testing)",
+	"https://acme-staging-v02.api.letsencrypt.org/directory",
+	1,
+	10,
+	1
+), (
+	strftime('%s', 'now'),
+	strftime('%s', 'now'),
+	"Buypass Go SSL (Testing)",
+	"https://api.test4.buypass.no/acme/directory",
+	0,
+	5,
+	1
+), (
+	strftime('%s', 'now'),
+	strftime('%s', 'now'),
+	"SSL.com",
+	"ssl.com",
+	0,
+	10,
+	1
+);
+
+-- System User
+INSERT INTO `user` (
+	created_on,
+	modified_on,
+	name,
+	nickname,
+	email,
+	is_system
+) VALUES (
+	strftime('%s', 'now'),
+	strftime('%s', 'now'),
+	"System",
+	"System",
+	"system@localhost",
+	1
+);
+
+-- Host Templates
+INSERT INTO `nginx_template` (
+	created_on,
+	modified_on,
+	user_id,
+	name,
+	type,
+	template
+) VALUES (
+	strftime('%s', 'now'),
+	strftime('%s', 'now'),
+	(SELECT id FROM user WHERE is_system = 1 LIMIT 1),
+	"Default Proxy Template",
+	"proxy",
+	"# ------------------------------------------------------------
+{{#each Host.DomainNames}}
+# {{this}}
+{{/each}}
+# ------------------------------------------------------------
+
+server {
+  {{#if Config.Ipv4}}
+  listen 80;
+  {{/if}}
+  {{#if Config.Ipv6}}
+  listen [::]:80;
+  {{/if}}
+
+  {{#if Certificate.ID}}
+  {{#if Config.Ipv4}}
+  listen 443 ssl {{#if Host.HTTP2Support}}http2{{/if}};
+  {{/if}}
+  {{#if Config.Ipv6}}
+  listen [::]:443 ssl {{#if Host.HTTP2Support}}http2{{/if}};
+  {{/if}}
+  {{/if}}
+
+  server_name {{#each Host.DomainNames}}{{this}} {{/each}};
+
+  {{#if Certificate.ID}}
+  include conf.d/include/ssl-ciphers.conf;
+  {{#if Certificate.IsAcme}}
+  ssl_certificate {{Certificate.Folder}}/fullchain.pem;
+  ssl_certificate_key {{Certificate.Folder}}/privkey.pem;
+  {{else}}
+  # Custom SSL
+  ssl_certificate /data/custom_ssl/npm-{{Certicicate.ID}}/fullchain.pem;
+  ssl_certificate_key /data/custom_ssl/npm-{{Certificate.ID}}/privkey.pem;
+  {{/if}}
+  {{/if}}
+
+  {{#if Host.CachingEnabled}}
+  include conf.d/include/assets.conf;
+  {{/if}}
+
+  {{#if Host.BlockExploits}}
+  include conf.d/include/block-exploits.conf;
+  {{/if}}
+
+  {{#if Certificate.ID}}
+  {{#if Host.SSLForced}}
+  {{#if Host.HSTSEnabled}}
+  # HSTS (ngx_http_headers_module is required) (63072000 seconds = 2 years)
+  add_header Strict-Transport-Security ""max-age=63072000;{{#if Host.HSTSSubdomains}} includeSubDomains;{{/if}} preload"" always;
+  {{/if}}
+  # Force SSL
+  include conf.d/include/force-ssl.conf;
+  {{/if}}
+  {{/if}}
+
+  {{#if Host.AllowWebsocketUpgrade}}
+  proxy_set_header Upgrade $http_upgrade;
+  proxy_set_header Connection $http_connection;
+  proxy_http_version 1.1;
+  {{/if}}
+
+  access_log /data/logs/host-{{Host.ID}}_access.log proxy;
+  error_log /data/logs/host-{{Host.ID}}_error.log warn;
+
+  {{Host.AdvancedConfig}}
+
+  # locations ?
+
+  # default location:
+  location / {
+    {{#if Host.AccessListID}}
+    # Authorization
+    auth_basic            ""Authorization required"";
+    auth_basic_user_file  /data/access/{{Host.AccessListID}};
+    # access_list.passauth ? todo
+    {{/if}}
+
+    # Access Rules ? todo
+
+    # Access checks must...? todo
+
+    {{#if Certificate.ID}}
+    {{#if Host.SSLForced}}
+    {{#if Host.HSTSEnabled}}
+    # HSTS (ngx_http_headers_module is required) (63072000 seconds = 2 years)
+    add_header Strict-Transport-Security ""max-age=63072000;{{#if Host.HSTSSubdomains}} includeSubDomains;{{/if}} preload"" always;
+    {{/if}}
+    {{/if}}
+    {{/if}}
+
+    {{#if Host.AllowWebsocketUpgrade}}
+    proxy_set_header Upgrade $http_upgrade;
+    proxy_set_header Connection $http_connection;
+    {{/if}}
+
+    # Proxy!
+    add_header       X-Served-By $host;
+    proxy_set_header Host $host;
+    proxy_set_header X-Forwarded-Scheme $scheme;
+    proxy_set_header X-Forwarded-Proto  $scheme;
+    proxy_set_header X-Forwarded-For    $remote_addr;
+    proxy_http_version 1.1;
+
+    {{#if Upstream.ID}}
+    # upstream
+    proxy_pass {{Host.ProxyScheme}}://npm_upstream_{{Upstream.ID}};
+    {{else}}
+    # proxy a single host
+    proxy_pass {{Host.ProxyScheme}}://{{Host.ProxyHost}}:{{Host.ProxyPort}};
+    {{/if}}
+  }
+
+  # Legacy Custom Configuration
+  include /data/nginx/custom/server_proxy[.]conf;
+}
+"
+), (
+	strftime('%s', 'now'),
+	strftime('%s', 'now'),
+	(SELECT id FROM user WHERE is_system = 1 LIMIT 1),
+	"Default Redirect Template",
+	"redirect",
+	"# this is a redirect template"
+), (
+	strftime('%s', 'now'),
+	strftime('%s', 'now'),
+	(SELECT id FROM user WHERE is_system = 1 LIMIT 1),
+	"Default Dead Template",
+	"dead",
+	"# this is a dead template"
+), (
+	strftime('%s', 'now'),
+	strftime('%s', 'now'),
+	(SELECT id FROM user WHERE is_system = 1 LIMIT 1),
+	"Default Stream Template",
+	"stream",
+	"# this is a stream template"
+), (
+	strftime('%s', 'now'),
+	strftime('%s', 'now'),
+	(SELECT id FROM user WHERE is_system = 1 LIMIT 1),
+	"Default Upstream Template",
+	"upstream",
+	"# ------------------------------------------------------------
+# Upstream {{Upstream.ID}}: {{Upstream.Name}}
+# ------------------------------------------------------------
+
+upstream npm_upstream_{{Upstream.ID}} {
+
+  {{#if Upstream.IPHash~}}
+  ip_hash;
+  {{~/if}}
+
+  {{#if Upstream.NTLM~}}
+  ntlm;
+  {{~/if}}
+
+  {{#if Upstream.Keepalive~}}
+  keepalive {{Upstream.Keepalive}};
+  {{~/if}}
+
+  {{#if Upstream.KeepaliveRequests~}}
+  keepalive_requests {{Upstream.KeepaliveRequests}};
+  {{~/if}}
+
+  {{#if Upstream.KeepaliveTime~}}
+  keepalive_time {{Upstream.KeepaliveTime}};
+  {{~/if}}
+
+  {{#if Upstream.KeepaliveTimeout~}}
+  keepalive_timeout {{Upstream.KeepaliveTimeout}};
+  {{~/if}}
+
+  {{Upstream.AdvancedConfig}}
+
+  {{#each Upstream.Servers~}}
+  {{#unless IsDeleted~}}
+  server {{Server}} {{#if Weight}}weight={{Weight}} {{/if}}{{#if MaxConns}}max_conns={{MaxConns}} {{/if}}{{#if MaxFails}}max_fails={{MaxFails}} {{/if}}{{#if FailTimeout}}fail_timeout={{FailTimeout}} {{/if}}{{#if Backup}}backup{{/if}};
+  {{/unless}}
+  {{/each}}
+}
+"
+);
+
+-- migrate:down

backend/embed/nginx/_assets.conf.hbs

@@ -0,0 +1,4 @@
+{{#if caching_enabled}}
+	# Asset Caching
+	include conf.d/include/assets.conf;
+{{/if}}