feat(tls): add optional nginx setup and gateway preview

backend/internal/api/api.go

@@ -39,6 +39,7 @@ import (
 type Server struct {
 	mgr     *core.Manager
 	taskMgr *taskmgr.Manager
+	router  *gin.Engine
 }
 
 func NewServer(mgr *core.Manager) *Server { return &Server{mgr: mgr, taskMgr: taskmgr.NewManager()} }
@@ -210,6 +211,7 @@ func requirePasswordChanged() gin.HandlerFunc {
 
 // RegisterRoutes 权限：viewer 只读；operator 专线运维；admin 用户/LDAP/插件/审计
 func (s *Server) RegisterRoutes(r *gin.Engine) {
+	s.router = r
 	r.Use(securityHeaders())
 	api := r.Group("/api")
 	api.POST("/login", s.login)
@@ -286,6 +288,10 @@ func (s *Server) RegisterRoutes(r *gin.Engine) {
 		admin.POST("/system/fix", s.systemFix)
 		admin.GET("/system/tls", s.tlsStatus)
 		admin.PUT("/system/tls/domain", s.setTLSDomain)
+		admin.PUT("/system/tls/mode", s.setTLSMode)
+		admin.GET("/system/tls/nginx-preview", s.nginxPreview)
+		admin.GET("/system/tls/nginx-setup", s.nginxSetupStatus)
+		admin.POST("/system/tls/nginx-setup", s.initializeNginx)
 		admin.GET("/users", s.listUsers)
 		admin.POST("/users", s.createUser)
 		admin.PUT("/users/:id", s.updateUser)