import json from polymorphic.admin import ( PolymorphicParentModelAdmin, ) from django.contrib import admin from django.utils.safestring import mark_safe from django.utils.html import format_html from django.db.models import Count from django.shortcuts import render, redirect from django.contrib import messages from django.urls import path, reverse from django.http import HttpResponseRedirect from django.contrib.auth.admin import UserAdmin from .models import User, AccessLog, TaskExecutionLog from django.utils.timezone import localtime from vpn.models import User, ACL, ACLLink from vpn.forms import UserForm from mysite.settings import EXTERNAL_ADDRESS from .server_plugins import ( Server, WireguardServer, WireguardServerAdmin, OutlineServer, OutlineServerAdmin) @admin.register(TaskExecutionLog) class TaskExecutionLogAdmin(admin.ModelAdmin): list_display = ('task_name_display', 'action', 'status_display', 'server', 'user', 'execution_time_display', 'created_at') list_filter = ('task_name', 'status', 'server', 'created_at') search_fields = ('task_id', 'task_name', 'action', 'user__username', 'server__name', 'message') readonly_fields = ('task_id', 'task_name', 'server', 'user', 'action', 'status', 'message_formatted', 'execution_time', 'created_at') ordering = ('-created_at',) list_per_page = 100 date_hierarchy = 'created_at' fieldsets = ( ('Task Information', { 'fields': ('task_id', 'task_name', 'action', 'status') }), ('Related Objects', { 'fields': ('server', 'user') }), ('Execution Details', { 'fields': ('message_formatted', 'execution_time', 'created_at') }), ) @admin.display(description='Task', ordering='task_name') def task_name_display(self, obj): task_names = { 'sync_all_servers': '🔄 Sync All', 'sync_all_users_on_server': '👥 Server Sync', 'sync_server_info': '⚙️ Server Info', 'sync_user_on_server': '👤 User Sync', 'cleanup_task_logs': '🧹 Cleanup', } return task_names.get(obj.task_name, obj.task_name) @admin.display(description='Status', ordering='status') def status_display(self, obj): status_icons = { 'STARTED': '🟡 Started', 'SUCCESS': '✅ Success', 'FAILURE': '❌ Failed', 'RETRY': '🔄 Retry', } return status_icons.get(obj.status, obj.status) @admin.display(description='Time', ordering='execution_time') def execution_time_display(self, obj): if obj.execution_time: if obj.execution_time < 1: return f"{obj.execution_time*1000:.0f}ms" else: return f"{obj.execution_time:.2f}s" return '-' @admin.display(description='Message') def message_formatted(self, obj): if obj.message: return mark_safe(f"
{obj.message}
") return '-' def has_add_permission(self, request): return False def has_change_permission(self, request, obj=None): return False admin.site.site_title = "VPN Manager" admin.site.site_header = "VPN Manager" admin.site.index_title = "OutFleet" def format_object(data): try: if isinstance(data, dict): formatted_data = json.dumps(data, indent=2) return mark_safe(f"
{formatted_data}
") elif isinstance(data, str): return mark_safe(f"
{data}
") else: return mark_safe(f"
{str(data)}
") except Exception as e: return mark_safe(f"Error: {e}") class UserNameFilter(admin.SimpleListFilter): title = 'User' parameter_name = 'user' def lookups(self, request, model_admin): users = set(User.objects.values_list('username', flat=True)) return [(user, user) for user in users] def queryset(self, request, queryset): if self.value(): return queryset.filter(user__username=self.value()) return queryset class ServerNameFilter(admin.SimpleListFilter): title = 'Server Name' parameter_name = 'acl__server__name' def lookups(self, request, model_admin): servers = set(ACL.objects.values_list('server__name', flat=True)) return [(server, server) for server in servers] def queryset(self, request, queryset): if self.value(): return queryset.filter(acl__server__name=self.value()) return queryset @admin.register(Server) class ServerAdmin(PolymorphicParentModelAdmin): base_model = Server child_models = (OutlineServer, WireguardServer) list_display = ('name', 'server_type', 'comment', 'registration_date', 'user_count', 'server_status_inline') search_fields = ('name', 'comment') list_filter = ('server_type', ) actions = ['move_clients_action'] def get_urls(self): urls = super().get_urls() custom_urls = [ path('move-clients/', self.admin_site.admin_view(self.move_clients_view), name='server_move_clients'), ] return custom_urls + urls def move_clients_action(self, request, queryset): """Кастомное действие для перехода к странице переноса клиентов""" if queryset.count() == 0: self.message_user(request, "Выберите хотя бы один сервер.", level=messages.ERROR) return # Перенаправляем на страницу переноса клиентов selected_ids = ','.join(str(server.id) for server in queryset) return HttpResponseRedirect(f"{reverse('admin:server_move_clients')}?servers={selected_ids}") move_clients_action.short_description = "Move client links between servers" def move_clients_view(self, request): """View for moving clients between servers""" if request.method == 'GET': # Get selected servers from URL parameters server_ids = request.GET.get('servers', '').split(',') if not server_ids or server_ids == ['']: messages.error(request, "No servers selected.") return redirect('admin:vpn_server_changelist') try: # Only work with database objects, don't check server connectivity servers = Server.objects.filter(id__in=server_ids) all_servers = Server.objects.all() # Get ACL links for selected servers with related data # This is purely database operation, no server connectivity required links_by_server = {} for server in servers: try: # Get all ACL links for this server with user and ACL data links = ACLLink.objects.filter( acl__server=server ).select_related('acl__user', 'acl__server').order_by('acl__user__username', 'comment') links_by_server[server] = links except Exception as e: # Log the error but continue with other servers messages.warning(request, f"Warning: Could not load links for server {server.name}: {e}") links_by_server[server] = [] context = { 'title': 'Move Client Links Between Servers', 'servers': servers, 'all_servers': all_servers, 'links_by_server': links_by_server, } return render(request, 'admin/move_clients.html', context) except Exception as e: messages.error(request, f"Database error while loading data: {e}") return redirect('admin:vpn_server_changelist') elif request.method == 'POST': # Process the transfer of ACL links - purely database operations try: source_server_id = request.POST.get('source_server') target_server_id = request.POST.get('target_server') selected_link_ids = request.POST.getlist('selected_links') comment_regex = request.POST.get('comment_regex', '').strip() if not source_server_id or not target_server_id: messages.error(request, "Please select both source and target servers.") return redirect(request.get_full_path()) if source_server_id == target_server_id: messages.error(request, "Source and target servers cannot be the same.") return redirect(request.get_full_path()) if not selected_link_ids: messages.error(request, "Please select at least one link to move.") return redirect(request.get_full_path()) # Parse and validate regex pattern if provided regex_pattern = None regex_replacement = None regex_parts = None if comment_regex: try: import re regex_parts = comment_regex.split(' -> ') if len(regex_parts) != 2: messages.error(request, "Invalid regex format. Use: pattern -> replacement") return redirect(request.get_full_path()) pattern_str = regex_parts[0] replacement_str = regex_parts[1] # Convert JavaScript-style $1, $2, $3 to Python-style \1, \2, \3 python_replacement = replacement_str import re as regex_module # Replace $1, $2, etc. with \1, \2, etc. for Python regex python_replacement = regex_module.sub(r'\$(\d+)', r'\\\1', replacement_str) # Test compile the regex pattern regex_pattern = re.compile(pattern_str) regex_replacement = python_replacement # Test the replacement on a sample string to validate syntax test_result = regex_pattern.sub(regex_replacement, "test sample") except re.error as e: messages.error(request, f"Invalid regular expression pattern '{regex_parts[0] if regex_parts else comment_regex}': {e}") return redirect(request.get_full_path()) except Exception as e: messages.error(request, f"Error in regex replacement '{replacement_str if 'replacement_str' in locals() else 'unknown'}': {e}") return redirect(request.get_full_path()) # Get server objects from database only try: source_server = Server.objects.get(id=source_server_id) target_server = Server.objects.get(id=target_server_id) except Server.DoesNotExist: messages.error(request, "One of the selected servers was not found in database.") return redirect('admin:vpn_server_changelist') moved_count = 0 errors = [] users_processed = set() comments_transformed = 0 # Process each selected link - database operations only for link_id in selected_link_ids: try: # Get the ACL link with related ACL and user data acl_link = ACLLink.objects.select_related('acl__user', 'acl__server').get( id=link_id, acl__server=source_server ) user = acl_link.acl.user # Apply regex transformation to comment if provided original_comment = acl_link.comment if regex_pattern and regex_replacement is not None: try: # Use Python's re.sub for replacement, which properly handles $1, $2 groups new_comment = regex_pattern.sub(regex_replacement, original_comment) if new_comment != original_comment: acl_link.comment = new_comment comments_transformed += 1 # Debug logging - shows both original and converted patterns print(f"DEBUG: Transformed '{original_comment}' -> '{new_comment}'") print(f" Original pattern: '{regex_parts[0]}' -> '{regex_parts[1]}'") print(f" Python pattern: '{regex_parts[0]}' -> '{regex_replacement}'") except Exception as e: errors.append(f"Error applying regex to link {link_id} ('{original_comment}'): {e}") # Continue with original comment # Check if user already has ACL on target server target_acl = ACL.objects.filter(user=user, server=target_server).first() if target_acl: created = False else: # Create new ACL without auto-creating default link target_acl = ACL(user=user, server=target_server) target_acl.save(auto_create_link=False) created = True # Move the link to target ACL - pure database operation acl_link.acl = target_acl acl_link.save() moved_count += 1 users_processed.add(user.username) if created: messages.info(request, f"Created new ACL for user {user.username} on server {target_server.name}") except ACLLink.DoesNotExist: errors.append(f"Link with ID {link_id} not found on source server") except Exception as e: errors.append(f"Database error moving link {link_id}: {e}") # Clean up empty ACLs on source server - database operation only try: empty_acls = ACL.objects.filter( server=source_server, links__isnull=True ) deleted_acls_count = empty_acls.count() empty_acls.delete() except Exception as e: messages.warning(request, f"Warning: Could not clean up empty ACLs: {e}") deleted_acls_count = 0 if moved_count > 0: success_msg = ( f"Successfully moved {moved_count} link(s) for {len(users_processed)} user(s) " f"from '{source_server.name}' to '{target_server.name}'. " f"Cleaned up {deleted_acls_count} empty ACL(s)." ) if comments_transformed > 0: success_msg += f" Transformed {comments_transformed} comment(s) using regex." messages.success(request, success_msg) if errors: for error in errors: messages.error(request, error) return redirect('admin:vpn_server_changelist') except Exception as e: messages.error(request, f"Database error during link transfer: {e}") return redirect('admin:vpn_server_changelist') @admin.display(description='User Count', ordering='user_count') def user_count(self, obj): return obj.user_count @admin.display(description='Status') def server_status_inline(self, obj): try: status = obj.get_server_status() if 'error' in status: return mark_safe(f"Error: {status['error']}") import json pretty_status = ", ".join(f"{key}: {value}" for key, value in status.items()) return mark_safe(f"
{pretty_status}
") except Exception as e: # Don't let server connectivity issues break the admin interface return mark_safe(f"Status unavailable: {e}") server_status_inline.short_description = "Status" def get_queryset(self, request): qs = super().get_queryset(request) qs = qs.annotate(user_count=Count('acl')) return qs #admin.site.register(User, UserAdmin) @admin.register(User) class UserAdmin(admin.ModelAdmin): form = UserForm list_display = ('username', 'comment', 'registration_date', 'hash_link', 'server_count') search_fields = ('username', 'hash') readonly_fields = ('hash_link',) @admin.display(description='API access', ordering='hash') def hash_link(self, obj): url = f"{EXTERNAL_ADDRESS}/stat/{obj.hash}" return format_html('JSON server list', url, obj.hash) @admin.display(description='Allowed servers', ordering='server_count') def server_count(self, obj): return obj.server_count def get_queryset(self, request): qs = super().get_queryset(request) qs = qs.annotate(server_count=Count('acl')) return qs def save_model(self, request, obj, form, change): import logging logger = logging.getLogger(__name__) super().save_model(request, obj, form, change) selected_servers = form.cleaned_data.get('servers', []) # Remove ACLs that are no longer selected removed_acls = ACL.objects.filter(user=obj).exclude(server__in=selected_servers) for acl in removed_acls: logger.info(f"Removing ACL for user {obj.username} from server {acl.server.name}") removed_acls.delete() # Create new ACLs for newly selected servers (with default links) for server in selected_servers: acl, created = ACL.objects.get_or_create(user=obj, server=server) if created: logger.info(f"Created new ACL for user {obj.username} on server {server.name}") # Note: get_or_create will use the default save() method which creates default links @admin.register(AccessLog) class AccessLogAdmin(admin.ModelAdmin): list_display = ('user', 'server', 'action', 'formatted_timestamp') list_filter = ('user', 'server', 'action', 'timestamp') search_fields = ('user', 'server', 'action', 'timestamp', 'data') readonly_fields = ('server', 'user', 'formatted_timestamp', 'action', 'formated_data') @admin.display(description='Timestamp') def formatted_timestamp(self, obj): local_time = localtime(obj.timestamp) return local_time.strftime('%Y-%m-%d %H:%M:%S %Z') @admin.display(description='Details') def formated_data(self, obj): return format_object(obj.data) class ACLLinkInline(admin.TabularInline): model = ACLLink extra = 1 help_text = 'Add or change ACL links' verbose_name = 'Dynamic link' verbose_name_plural = 'Dynamic links' fields = ('link', 'generate_link_button', 'comment') readonly_fields = ('generate_link_button',) @admin.display(description="Generate") def generate_link_button(self, obj=None): return format_html( '' ) class Media: js = ('admin/js/generate_link.js',) @admin.register(ACL) class ACLAdmin(admin.ModelAdmin): list_display = ('user', 'server', 'server_type', 'display_links', 'created_at') list_filter = (UserNameFilter, 'server__server_type', ServerNameFilter) # Fixed search_fields - removed problematic polymorphic server fields search_fields = ('user__username', 'user__comment', 'links__link') readonly_fields = ('user_info',) inlines = [ACLLinkInline] @admin.display(description='Server Type', ordering='server__server_type') def server_type(self, obj): return obj.server.get_server_type_display() @admin.display(description='Client info') def user_info(self, obj): server = obj.server user = obj.user try: data = server.get_user(user) return format_object(data) except Exception as e: import logging logger = logging.getLogger(__name__) logger.error(f"Failed to get user info for {user.username} on {server.name}: {e}") return mark_safe(f"Server connection error: {e}") @admin.display(description='Dynamic Config Links') def display_links(self, obj): links = obj.links.all() formatted_links = [f"{link.comment} - {EXTERNAL_ADDRESS}/ss/{link.link}#{link.acl.server.name}" for link in links] return mark_safe('
'.join(formatted_links)) try: from django_celery_results.models import GroupResult, TaskResult from django_celery_beat.models import ( PeriodicTask, ClockedSchedule, CrontabSchedule, IntervalSchedule, SolarSchedule ) admin.site.unregister(GroupResult) admin.site.unregister(PeriodicTask) admin.site.unregister(ClockedSchedule) admin.site.unregister(CrontabSchedule) admin.site.unregister(IntervalSchedule) admin.site.unregister(SolarSchedule) admin.site.unregister(TaskResult) except (ImportError, admin.sites.NotRegistered): pass # Custom Celery admin interfaces try: from django_celery_results.models import TaskResult from django_celery_beat.models import PeriodicTask @admin.register(TaskResult) class CustomTaskResultAdmin(admin.ModelAdmin): list_display = ('task_name_display', 'status', 'date_created', 'date_done', 'worker', 'result_display', 'traceback_display') list_filter = ('status', 'date_created', 'worker', 'task_name') search_fields = ('task_name', 'task_id', 'worker') readonly_fields = ('task_id', 'task_name', 'status', 'result_formatted', 'date_created', 'date_done', 'traceback', 'worker', 'task_args', 'task_kwargs', 'meta') ordering = ('-date_created',) list_per_page = 50 fieldsets = ( ('Task Information', { 'fields': ('task_id', 'task_name', 'status', 'worker') }), ('Timing', { 'fields': ('date_created', 'date_done') }), ('Result', { 'fields': ('result_formatted',), 'classes': ('collapse',) }), ('Arguments', { 'fields': ('task_args', 'task_kwargs'), 'classes': ('collapse',) }), ('Error Details', { 'fields': ('traceback',), 'classes': ('collapse',) }), ('Metadata', { 'fields': ('meta',), 'classes': ('collapse',) }), ) @admin.display(description='Task Name', ordering='task_name') def task_name_display(self, obj): task_names = { 'sync_all_servers': '🔄 Sync All Servers', 'sync_all_users_on_server': '👥 Sync Users on Server', 'sync_server_info': '⚙️ Sync Server Info', 'sync_user_on_server': '👤 Sync User on Server', 'cleanup_task_logs': '🧹 Cleanup Old Logs', } return task_names.get(obj.task_name, obj.task_name) @admin.display(description='Result') def result_display(self, obj): if obj.status == 'SUCCESS' and obj.result: try: import json result = json.loads(obj.result) if isinstance(obj.result, str) else obj.result if isinstance(result, str): return result[:100] + '...' if len(result) > 100 else result elif isinstance(result, dict): return ', '.join(f'{k}: {v}' for k, v in result.items())[:100] except: return str(obj.result)[:100] if obj.result else '-' elif obj.status == 'FAILURE': return '❌ Failed' elif obj.status == 'PENDING': return '⏳ Pending' elif obj.status == 'RETRY': return '🔄 Retrying' return '-' @admin.display(description='Result Details') def result_formatted(self, obj): if obj.result: try: import json result = json.loads(obj.result) if isinstance(obj.result, str) else obj.result formatted = json.dumps(result, indent=2) return mark_safe(f"
{formatted}
") except: return mark_safe(f"
{obj.result}
") return '-' @admin.display(description='Error Info') def traceback_display(self, obj): if obj.traceback: # Show first 200 chars of traceback short_tb = obj.traceback[:200] + '...' if len(obj.traceback) > 200 else obj.traceback return mark_safe(f"
{short_tb}
") return '-' def has_add_permission(self, request): return False def has_change_permission(self, request, obj=None): return False @admin.register(PeriodicTask) class CustomPeriodicTaskAdmin(admin.ModelAdmin): list_display = ('name', 'task', 'enabled', 'last_run_at', 'total_run_count') list_filter = ('enabled', 'last_run_at') search_fields = ('name', 'task') readonly_fields = ('last_run_at', 'total_run_count') except ImportError: pass