feat(tls): manage ACME domain and add desktop client settings

backend/internal/api/tls.go

@@ -0,0 +1,32 @@
+package api
+
+import (
+	"net/http"
+
+	"github.com/gin-gonic/gin"
+
+	"vpn-platform/backend/internal/service"
+	"vpn-platform/backend/internal/store"
+	"vpn-platform/backend/internal/tlsservice"
+)
+
+func (s *Server) tlsStatus(c *gin.Context) {
+	c.JSON(http.StatusOK, tlsservice.Status())
+}
+
+func (s *Server) setTLSDomain(c *gin.Context) {
+	var req struct {
+		Domain string `json:"domain"`
+	}
+	if err := c.ShouldBindJSON(&req); err != nil {
+		c.JSON(http.StatusBadRequest, gin.H{"error": "请输入域名"})
+		return
+	}
+	if err := tlsservice.ConfigureDomain(service.BaseDir(), req.Domain); err != nil {
+		c.JSON(http.StatusBadRequest, gin.H{"error": err.Error()})
+		return
+	}
+	store.Audit(c.GetString("username"), "tls_domain_configured", req.Domain, "需重启后生效")
+	status := tlsservice.Status()
+	c.JSON(http.StatusOK, gin.H{"status": status, "restart_required": status.RestartRequired})
+}