feat(audit): F1+F2 告警静默规则标记完成 + 审计日志CSV导出实现

F1 告警静默规则 [done]: - 后端 alert_silence.go: CRUD + Toggle (onetime/daily/weekly 三模式) - 告警引擎 isSilenced 集成 (alert_engine.go) - 前端 SilenceRuleTab + SilenceDialog - 路由 /alerts/silences 已注册 F2 审计日志导出 [done]: - 重写 ExportAuditLogs: 真正的 CSV 导出 (encoding/csv + UTF-8 BOM) - 支持 module/action/username/startTime/endTime 筛选 - 导出限制 10000 条防溢出，自动记录审计日志 - JSON 格式向后兼容 (format=json) - 前端 exportLogs 传递查询参数同时包含累积的前期工作: - 目录重构 internal/ -> controller/model/router (v0.55-v0.57) - 后端分层架构 dto/repository/service/utils - 审计模块全功能 (终端审计/操作审计/登录日志) - asciicast v2 录制格式 - SFTP 文件浏览器 - StatStrip 紧凑统计条 - 在线会话自动刷新 - LiveMonitor WebSocket 诊断修复验证: go build ✅ | npm run build ✅ | Docker 部署 ✅ | 10 回归端点 ✅ | CSV 导出 ✅ | 静默 CRUD ✅
2026-06-25 20:16:30 +08:00
1 parent e57718998a
commit 77c234b060
@@ -0,0 +1,417 @@
+package controller
+
+import (
+	"context"
+	"encoding/json"
+	"net/http"
+	"strconv"
+	"time"
+
+	"ezops/model"
+	"ezops/pkg/crypto"
+	ezredis "ezops/pkg/redis"
+
+	"github.com/gin-gonic/gin"
+	"gorm.io/gorm"
+)
+
+// ServerHandler 服务器处理器
+type ServerHandler struct {
+	db    *gorm.DB
+	cache ezredis.Cache
+	crypt *crypto.SecretBox
+}
+
+// NewServerHandler 创建服务器处理器
+func NewServerHandler(db *gorm.DB, masterKey string, cache ezredis.Cache) *ServerHandler {
+	return &ServerHandler{db: db, crypt: crypto.NewSecretBox(masterKey), cache: cache}
+}
+
+// recordServerAudit 记录服务器操作审计日志 // Logan.Li
+func (h *ServerHandler) recordServerAudit(c *gin.Context, action, resource string, resourceID string, status int, errMsg string) {
+	userID, _ := c.Get("userID")
+	username, _ := c.Get("username")
+	uid, _ := userID.(uint)
+	uname, _ := username.(string)
+
+	h.db.Create(&model.AuditLog{
+		UserID:     &uid,
+		Username:   uname,
+		IP:         c.ClientIP(),
+		UserAgent:  c.Request.UserAgent(),
+		Module:     "server",
+		Action:     action,
+		Resource:   resource,
+		ResourceID: resourceID,
+		Status:     status,
+		Error:      errMsg,
+	})
+}
+
+// ListServers 获取服务器列表
+// @Summary 获取服务器列表
+// @Description 获取所有服务器列表
+// @Tags 服务器
+// @Produce json
+// @Security Bearer
+// @Param page query int false "页码"
+// @Param page_size query int false "每页数量"
+// @Param keyword query string false "搜索关键词"
+// @Param status query string false "状态过滤"
+// @Param region_id query int false "区域ID"
+// @Success 200 {object} model.Response{data=model.ListResponse}
+// @Router /servers [get]
+func (h *ServerHandler) ListServers(c *gin.Context) {
+	var query model.PageQuery
+	if err := c.ShouldBindQuery(&query); err != nil {
+		c.JSON(http.StatusBadRequest, model.Response{
+			Code:    400,
+			Message: "请求参数错误",
+		})
+		return
+	}
+
+	status := c.Query("status")
+	regionID := c.Query("region_id")
+
+	// 构建缓存键（按查询参数区分）
+	cacheKey := "servers:list:" + query.Keyword + ":" + status + ":" + regionID +
+		":" + strconv.Itoa(query.Page) + ":" + strconv.Itoa(query.PageSize)
+	const cacheTTL = 10 * time.Second
+
+	// 尝试从 Redis 缓存读取
+	if h.cache != nil {
+		if cached, err := h.cache.Get(c.Request.Context(), cacheKey); err == nil && cached != "" {
+			var resp model.Response
+			if json.Unmarshal([]byte(cached), &resp) == nil {
+				c.JSON(http.StatusOK, resp)
+				return
+			}
+		}
+	}
+
+	db := h.db.Model(&model.Server{})
+
+	// 关键词搜索
+	if query.Keyword != "" {
+		db = db.Where("hostname LIKE ? OR ip LIKE ? OR public_ip LIKE ?",
+			"%"+query.Keyword+"%", "%"+query.Keyword+"%", "%"+query.Keyword+"%")
+	}
+
+	// 状态过滤
+	if status := c.Query("status"); status != "" {
+		db = db.Where("status = ?", status)
+	}
+
+	// 区域过滤
+	if regionID := c.Query("region_id"); regionID != "" {
+		db = db.Where("region_id = ?", regionID)
+	}
+
+	var total int64
+	db.Count(&total)
+
+	var servers []model.Server
+	db.Preload("Region").Preload("Cloud").
+		Offset(query.GetOffset()).Limit(query.GetLimit()).
+		Order("created_at DESC").
+		Find(&servers)
+
+	// 填充 has_auth 字段（密码和SSH密钥在JSON中隐藏，但前端需知道是否有凭据） // Logan.Li
+	for i := range servers {
+		servers[i].HasAuth = servers[i].Password != "" || servers[i].SSHKey != ""
+	}
+
+	resp := model.Response{
+		Code:    200,
+		Message: "success",
+		Data: model.ListResponse{
+			List:  servers,
+			Total: total,
+		},
+	}
+
+	// 写入 Redis 缓存（异步，缓存失败不影响响应）
+	if h.cache != nil {
+		if data, err := json.Marshal(resp); err == nil {
+			_ = h.cache.Set(context.Background(), cacheKey, string(data), cacheTTL)
+		}
+	}
+
+	c.JSON(http.StatusOK, resp)
+}
+
+// GetServer 获取服务器详情
+// @Summary 获取服务器详情
+// @Description 获取指定服务器的详细信息
+// @Tags 服务器
+// @Produce json
+// @Security Bearer
+// @Param id path int true "服务器ID"
+// @Success 200 {object} model.Response{data=model.Server}
+// @Router /servers/{id} [get]
+func (h *ServerHandler) GetServer(c *gin.Context) {
+	id, _ := strconv.Atoi(c.Param("id"))
+
+	var server model.Server
+	if err := h.db.Preload("Region").Preload("Cloud").First(&server, id).Error; err != nil {
+		c.JSON(http.StatusNotFound, model.Response{
+			Code:    404,
+			Message: "服务器不存在",
+		})
+		return
+	}
+
+	c.JSON(http.StatusOK, model.Response{
+		Code:    200,
+		Message: "success",
+		Data:    server,
+	})
+}
+
+// CreateServer 创建服务器
+// @Summary 创建服务器
+// @Description 创建新服务器
+// @Tags 服务器
+// @Accept json
+// @Produce json
+// @Security Bearer
+// @Param request body model.CreateServerRequest true "创建请求"
+// @Success 200 {object} model.Response{data=model.Server}
+// @Router /servers [post]
+func (h *ServerHandler) CreateServer(c *gin.Context) {
+	var req model.CreateServerRequest
+	if err := c.ShouldBindJSON(&req); err != nil {
+		c.JSON(http.StatusBadRequest, model.Response{
+			Code:    400,
+			Message: "请求参数错误: " + err.Error(),
+		})
+		return
+	}
+
+	server := model.Server{
+		Hostname:    req.Hostname,
+		IP:          req.IP,
+		PublicIP:    req.PublicIP,
+		Port:        req.Port,
+		Username:    req.Username,
+		Password:    req.Password,
+		SSHKey:      req.SSHKey,
+		AuthType:    req.AuthType,
+		OS:          req.OS,
+		CPU:         req.CPU,
+		Memory:      req.Memory,
+		Disk:        req.Disk,
+		RegionID:    req.RegionID,
+		CloudID:     req.CloudID,
+		Tags:        req.Tags,
+		Description: req.Description,
+		Status:      "stopped",
+	}
+
+	if req.Status != "" {
+		server.Status = req.Status
+	}
+
+	if server.Port == 0 {
+		server.Port = 22
+	}
+	if server.Username == "" {
+		server.Username = "root"
+	}
+	if server.AuthType == "" {
+		server.AuthType = "password"
+	}
+
+	if err := h.db.Create(&server).Error; err != nil {
+		c.JSON(http.StatusInternalServerError, model.Response{
+			Code:    500,
+			Message: "创建服务器失败",
+		})
+		return
+	}
+
+	h.recordServerAudit(c, "create", server.Hostname+" ("+server.IP+")", strconv.Itoa(int(server.ID)), 1, "")
+
+	c.JSON(http.StatusOK, model.Response{
+		Code:    200,
+		Message: "创建成功",
+		Data:    server,
+	})
+}
+
+// UpdateServer 更新服务器
+// @Summary 更新服务器
+// @Description 更新指定服务器信息
+// @Tags 服务器
+// @Accept json
+// @Produce json
+// @Security Bearer
+// @Param id path int true "服务器ID"
+// @Param request body model.UpdateServerRequest true "更新请求"
+// @Success 200 {object} model.Response{data=model.Server}
+// @Router /servers/{id} [put]
+func (h *ServerHandler) UpdateServer(c *gin.Context) {
+	id, _ := strconv.Atoi(c.Param("id"))
+
+	var req model.UpdateServerRequest
+	if err := c.ShouldBindJSON(&req); err != nil {
+		c.JSON(http.StatusBadRequest, model.Response{
+			Code:    400,
+			Message: "请求参数错误: " + err.Error(),
+		})
+		return
+	}
+
+	var server model.Server
+	if err := h.db.First(&server, id).Error; err != nil {
+		c.JSON(http.StatusNotFound, model.Response{
+			Code:    404,
+			Message: "服务器不存在",
+		})
+		return
+	}
+
+	updates := map[string]interface{}{}
+	if req.Hostname != "" {
+		updates["hostname"] = req.Hostname
+	}
+	if req.IP != "" {
+		updates["ip"] = req.IP
+	}
+	if req.PublicIP != "" {
+		updates["public_ip"] = req.PublicIP
+	}
+	if req.Port > 0 {
+		updates["port"] = req.Port
+	}
+	if req.Username != "" {
+		updates["username"] = req.Username
+	}
+	if req.Password != "" {
+		updates["password"] = req.Password
+	}
+	if req.SSHKey != "" {
+		updates["ssh_key"] = req.SSHKey
+	}
+	if req.AuthType != "" {
+		updates["auth_type"] = req.AuthType
+	}
+	if req.OS != "" {
+		updates["os"] = req.OS
+	}
+	if req.CPU > 0 {
+		updates["cpu"] = req.CPU
+	}
+	if req.Memory > 0 {
+		updates["memory"] = req.Memory
+	}
+	if req.Disk > 0 {
+		updates["disk"] = req.Disk
+	}
+	if req.Status != "" {
+		updates["status"] = req.Status
+	}
+	if req.RegionID != nil {
+		updates["region_id"] = *req.RegionID
+	}
+	if req.CloudID != nil {
+		updates["cloud_id"] = *req.CloudID
+	}
+	if req.Tags != "" {
+		updates["tags"] = req.Tags
+	}
+	if req.Description != "" {
+		updates["description"] = req.Description
+	}
+
+	if err := h.db.Model(&server).Updates(updates).Error; err != nil {
+		c.JSON(http.StatusInternalServerError, model.Response{
+			Code:    500,
+			Message: "更新失败",
+		})
+		return
+	}
+
+	h.db.Preload("Region").Preload("Cloud").First(&server, id)
+	h.recordServerAudit(c, "update", server.Hostname+" ("+server.IP+")", strconv.Itoa(int(server.ID)), 1, "")
+
+	c.JSON(http.StatusOK, model.Response{
+		Code:    200,
+		Message: "更新成功",
+		Data:    server,
+	})
+}
+
+// DeleteServer 删除服务器
+// @Summary 删除服务器
+// @Description 删除指定服务器
+// @Tags 服务器
+// @Produce json
+// @Security Bearer
+// @Param id path int true "服务器ID"
+// @Success 200 {object} model.Response
+// @Router /servers/{id} [delete]
+func (h *ServerHandler) DeleteServer(c *gin.Context) {
+	id, _ := strconv.Atoi(c.Param("id"))
+
+	var server model.Server
+	if err := h.db.First(&server, id).Error; err != nil {
+		c.JSON(http.StatusNotFound, model.Response{
+			Code:    404,
+			Message: "服务器不存在",
+		})
+		return
+	}
+
+	// 硬删除：先清理关联数据，再物理删除服务器记录
+	h.db.Unscoped().Where("hostname = ?", server.Hostname).Delete(&model.AgentReport{})
+	h.db.Unscoped().Where("hostname = ?", server.Hostname).Delete(&model.MetricsAggregate{})
+
+	if err := h.db.Unscoped().Delete(&model.Server{}, id).Error; err != nil {
+		c.JSON(http.StatusInternalServerError, model.Response{
+			Code:    500,
+			Message: "删除失败",
+		})
+		return
+	}
+
+	h.recordServerAudit(c, "delete", server.Hostname+" ("+server.IP+")", strconv.Itoa(int(server.ID)), 1, "")
+	c.JSON(http.StatusOK, model.Response{
+		Code:    200,
+		Message: "服务器已彻底删除",
+	})
+}
+
+// GetServerStats 获取服务器统计
+// @Summary 获取服务器统计
+// @Description 获取服务器统计数据
+// @Tags 服务器
+// @Produce json
+// @Security Bearer
+// @Success 200 {object} model.Response{data=model.ServerStats}
+// @Router /servers/stats [get]
+func (h *ServerHandler) GetServerStats(c *gin.Context) {
+	var stats model.ServerStats
+
+	h.db.Model(&model.Server{}).Count(&stats.Total)
+	h.db.Model(&model.Server{}).Where("status = ?", "running").Count(&stats.Running)
+	h.db.Model(&model.Server{}).Where("status = ?", "stopped").Count(&stats.Stopped)
+	h.db.Model(&model.Server{}).Where("status = ?", "maintenance").Count(&stats.Maintenance)
+	h.db.Model(&model.Server{}).Where("status = ?", "error").Count(&stats.Error)
+
+	var avgCPU, avgMemory, avgDisk float64
+	h.db.Model(&model.Server{}).Select("AVG(cpu_usage)").Scan(&avgCPU)
+	h.db.Model(&model.Server{}).Select("AVG(memory_usage)").Scan(&avgMemory)
+	h.db.Model(&model.Server{}).Select("AVG(disk_usage)").Scan(&avgDisk)
+
+	stats.AvgCPU = avgCPU
+	stats.AvgMemory = avgMemory
+	stats.AvgDisk = avgDisk
+
+	c.JSON(http.StatusOK, model.Response{
+		Code:    200,
+		Message: "success",
+		Data:    stats,
+	})
+}