Nicolas Fryder
a7d7bc94de
Nouveau service apps/admin (admin.metalfrom.eu / admin.dev.metalfrom.eu) : - Frontend statique vanilla JS/CSS reprenant le design system du site (login, dashboard stats, table bands éditable, queue d'enrichissement, historique crawl_run, logs live, checkpoints, journal d'audit) - nginx reverse-proxy /admin/api/* et /admin/auth/* vers le service api interne (same-origin côté navigateur, pas de CORS cross-site nécessaire pour le cookie de session) apps/api : - Nouvelle auth dédiée au dashboard, séparée du token BM_IMPORT_TOKEN existant : login bcrypt + session JWT en cookie httpOnly/secure/ sameSite=strict, rate-limit + lockout après 5 échecs/15min, seeding du compte admin via env vars (jamais de mot de passe en clair en DB ou en git) - Routes /admin/api/* : stats, queue (breakdown priorité identique au crawler Python), bands (recherche/tri/pagination/édition + audit log), crawl-runs, crawl-checkpoints, logs, audit-log - trustProxy activé (Traefik + nginx en amont) apps/crawler : - log_event() écrit dans la nouvelle table crawl_log (run start/finish/ erreurs) pour que le dashboard affiche les logs sans exposer le socket Docker (choix délibéré : pas de docker.sock monté, accès DB only) migration 006_admin_dashboard.sql : admin_users, admin_login_attempts, admin_audit_log, crawl_log Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
52 lines
1.8 KiB
HTML
52 lines
1.8 KiB
HTML
<!doctype html>
|
|
<html lang="fr">
|
|
<head>
|
|
<meta charset="utf-8">
|
|
<meta name="viewport" content="width=device-width, initial-scale=1">
|
|
<meta name="robots" content="noindex, nofollow">
|
|
<title>Admin — metalfrom.eu</title>
|
|
<link rel="preconnect" href="https://fonts.googleapis.com">
|
|
<link href="https://fonts.googleapis.com/css2?family=UnifrakturCook:wght@700&family=Inter:wght@400;600;700;800&display=swap" rel="stylesheet">
|
|
<link rel="stylesheet" href="styles.css">
|
|
</head>
|
|
<body>
|
|
|
|
<div id="login-screen" class="login-screen">
|
|
<form id="login-form" class="login-card">
|
|
<div class="brand">Admin</div>
|
|
<p class="login-sub">metalfrom.eu — accès restreint</p>
|
|
<label>Utilisateur
|
|
<input type="text" id="login-username" autocomplete="username" required>
|
|
</label>
|
|
<label>Mot de passe
|
|
<input type="password" id="login-password" autocomplete="current-password" required>
|
|
</label>
|
|
<button type="submit" class="btn btn-primary">Se connecter</button>
|
|
<div id="login-error" class="login-error"></div>
|
|
</form>
|
|
</div>
|
|
|
|
<div id="app" class="app hidden">
|
|
<header id="topbar">
|
|
<div class="brand">Admin</div>
|
|
<nav id="nav" class="nav">
|
|
<a href="#/dashboard" data-view="dashboard">Dashboard</a>
|
|
<a href="#/bands" data-view="bands">Bands</a>
|
|
<a href="#/queue" data-view="queue">Queue</a>
|
|
<a href="#/runs" data-view="runs">Crawl runs</a>
|
|
<a href="#/logs" data-view="logs">Logs</a>
|
|
<a href="#/checkpoints" data-view="checkpoints">Checkpoints</a>
|
|
<a href="#/audit" data-view="audit">Audit</a>
|
|
</nav>
|
|
<div class="topbar-right">
|
|
<span id="whoami" class="whoami"></span>
|
|
<button id="logout-btn" class="btn btn-mini">Déconnexion</button>
|
|
</div>
|
|
</header>
|
|
|
|
<main id="content" class="content"></main>
|
|
</div>
|
|
|
|
<script src="app.js"></script>
|
|
</body>
|
|
</html>
|