92559af8e7
The dashboard, its API, the swagger UI and the agent routes move to their own vhost, `swarm.dashboardDomain` = `<hive>.hives.<swarm.domain>`, under the swarm domain so authelia's session cookie reaches it. `/`, `/api/` and `/api/docs/` ask authelia through `auth_request`, and authelia's `operatorsOnly` rule for each hive's dashboard name lets only the admins group in. The hive domain keeps matrix discovery and redirects every other path to the new name. The name rides as a SAN on the hive's own gateway leaf: the per-hive bao role allows it, and hive-tls asks for it and checks coverage. HTTP Basic auth is gone: the htpasswd writer and its test, the `hivectl gateway` verbs and host-socket requests, the `gateway.auth` options (now a removed-option error), the unauthorized page and the bcrypt dependency. tmpfiles deletes a leftover gateway.htpasswd, which held bcrypt hashes at 0644. c0re hands out dashboard and agent URLs on the new name (HYPERHIVE_DASHBOARD_DOMAIN), and the swarm controller's hive roster carries each hive's dashboard name for the swarm UI's hive list. Closes #3469
46 lines
2 KiB
Rust
46 lines
2 KiB
Rust
//! `hivectl open <home|forge|matrix>` — resolve a hive surface URL from the
|
|
//! daemon, print it, and best-effort `xdg-open` it.
|
|
|
|
use std::path::Path;
|
|
|
|
use anyhow::{Context as _, Result};
|
|
|
|
use crate::cli::OpenTarget;
|
|
use crate::util::query_hive_urls;
|
|
|
|
/// `open <home|forge|matrix>` — resolve the surface URL from the daemon,
|
|
/// print it, then best-effort `xdg-open` it. Printing is the reliable
|
|
/// core (headless / SSH hosts where no browser opener exists); the open
|
|
/// is convenience on top, so a missing/failed `xdg-open` is not an error.
|
|
pub(crate) async fn open_url(socket: &Path, target: OpenTarget) -> Result<()> {
|
|
// The connect error is already actionable (`client::request` classifies
|
|
// it), so propagate it rather than restating a guess about the cause.
|
|
let urls = query_hive_urls(socket)
|
|
.await
|
|
.context("could not read this hive's URLs from the daemon")?
|
|
.context("the daemon reported no URLs — `services.hyperhive.domain` is unset")?;
|
|
let (url, hint) = match target {
|
|
OpenTarget::Home => (
|
|
urls.home,
|
|
"the dashboard URL needs `services.hyperhive.swarm.domain` set and this hive in `swarm.hives`",
|
|
),
|
|
OpenTarget::Forge => (
|
|
urls.forge,
|
|
"the public forge URL needs `services.hyperhive.swarm.forge.publicUrl` to be set",
|
|
),
|
|
OpenTarget::Matrix => (
|
|
urls.matrix,
|
|
"the matrix GUI URL needs `services.hyperhive.swarm.matrix.gatewayHost` set",
|
|
),
|
|
};
|
|
let url = url.with_context(|| format!("no URL available for this surface — {hint}"))?;
|
|
println!("{url}");
|
|
// Best-effort: many hosts are headless, so a missing opener or a
|
|
// non-zero exit is fine — the URL is already printed.
|
|
match std::process::Command::new("xdg-open").arg(&url).status() {
|
|
Ok(status) if status.success() => {}
|
|
Ok(status) => eprintln!("note: xdg-open exited with {status} (URL printed above)"),
|
|
Err(e) => eprintln!("note: could not run xdg-open ({e}) (URL printed above)"),
|
|
}
|
|
Ok(())
|
|
}
|