Robert Syrnicki
3a9d18fcd5
wg-easy + Traefik docker-compose stack (Phase 1) plus a stdlib-only control-plane API for box registration, WireGuard peer provisioning via wg-easy, and per-box route publish/unpublish backed by Traefik's file provider (Phase 2, single-tenant mode). SQLite holds accounts/boxes/routes so a later multi-tenant shared instance is the same schema with more rows, not a reshape. wg-easy's actual REST API was verified against its source rather than assumed: it has no bearer-token auth (session-cookie login via POST /api/auth/password) and no way to accept an externally-generated public key (it always mints the keypair itself, private key included) — both corrected from the original plan during implementation.
43 lines
1.4 KiB
SQL
43 lines
1.4 KiB
SQL
-- Applied idempotently on every startup (CREATE TABLE IF NOT EXISTS).
|
|
--
|
|
-- Single-tenant deployments (GATEWAY_MODE=single) use this exact schema
|
|
-- with one implicit account row auto-seeded at startup — see
|
|
-- accounts.ensure_single_tenant_account(). Multi-tenant is not a later
|
|
-- reshape of this; it's the same tables with more than one account row.
|
|
|
|
CREATE TABLE IF NOT EXISTS accounts (
|
|
id TEXT PRIMARY KEY,
|
|
email TEXT,
|
|
created_at TEXT NOT NULL,
|
|
registration_token_hash TEXT NOT NULL,
|
|
account_token_hash TEXT NOT NULL,
|
|
box_limit INTEGER NOT NULL DEFAULT 5,
|
|
route_limit_per_box INTEGER NOT NULL DEFAULT 5
|
|
);
|
|
|
|
CREATE TABLE IF NOT EXISTS boxes (
|
|
id TEXT PRIMARY KEY,
|
|
account_id TEXT NOT NULL REFERENCES accounts(id),
|
|
name TEXT NOT NULL,
|
|
wg_public_key TEXT NOT NULL UNIQUE,
|
|
wg_peer_id TEXT NOT NULL,
|
|
wg_allowed_ip TEXT NOT NULL,
|
|
box_token_hash TEXT NOT NULL,
|
|
registered_at TEXT NOT NULL,
|
|
last_seen_at TEXT
|
|
);
|
|
|
|
CREATE TABLE IF NOT EXISTS routes (
|
|
id TEXT PRIMARY KEY,
|
|
box_id TEXT NOT NULL REFERENCES boxes(id),
|
|
account_id TEXT NOT NULL,
|
|
app_name TEXT NOT NULL,
|
|
subdomain TEXT NOT NULL UNIQUE,
|
|
target_port INTEGER NOT NULL,
|
|
enabled INTEGER NOT NULL DEFAULT 1,
|
|
created_at TEXT NOT NULL
|
|
);
|
|
|
|
CREATE INDEX IF NOT EXISTS idx_boxes_account ON boxes(account_id);
|
|
CREATE INDEX IF NOT EXISTS idx_routes_box ON routes(box_id);
|
|
CREATE INDEX IF NOT EXISTS idx_routes_account ON routes(account_id);
|