ArclineIT/migrate
1
0
Fork 0
Code Issues 13 Pull Requests Actions Packages Projects Releases Wiki Activity

feat: MVP phase 1 complete

Browse Source
This commit is contained in:
Blake Ridgway
2026-03-25 02:41:17 -05:00
parent 81ae5c6c7b
commit bfa03e6fbf
32 changed files with 3503 additions and 39 deletions
Download Patch File Download Diff File Expand all files Collapse all files

111
README.md
View File

@@ -1,41 +1,110 @@
# arcline-portal
Customer dashboard for arclineit.com. Provides SSL expiry monitoring, one-click static site deployment, a log viewer, and a basic support ticket system — without requiring customers to SSH into anything.
Customer dashboard for arclineit.com. Provides SSL expiry monitoring and a support ticket system — without requiring customers to SSH into anything.
Sits alongside WHMCS for billing; handles everything WHMCS doesn't.
## Status
Planned. Not yet started.
## Stack
- Go backend, vanilla HTML/CSS/JS (Arcline design system)
- PostgreSQL or SQLite
- Session-based auth with optional TOTP 2FA
- Ships as a single binary with embedded static assets
- SQLite (single file, no server required)
- Session-based auth (bcrypt + secure cookies)
- Ships as a single binary with embedded static assets and templates
## Modules
### SSL Expiry Dashboard
Customers add domains; the system checks cert expiry daily and sends alerts at 30/14/7 days. Color-coded: green > 30d, amber 14–30d, red < 14d.
### Static Deployment
Connect a GitLab repo or upload a zip. On push to main, Arcline pulls, builds, and deploys via rsync. Supports static HTML, Hugo, Jekyll, plain PHP. Last 3 deployments kept for rollback.
### Log Viewer
Browse access/error logs in the browser. Filter by date, status code, IP, path. Live tail via SSE.
Customers add domains; the system checks cert expiry daily via TLS dial and displays status color-coded: green > 30d, amber 14–30d, red < 14d.
### Support Tickets
Customer opens a ticket; Blake gets an email. Replies go back into the thread. No third-party helpdesk.
## Environment variables
To be documented once scaffold is started.
Customer opens a ticket; Blake gets an email. Replies go back into the thread from the portal UI. No third-party helpdesk.
## Deployment
Single binary + systemd unit behind nginx. See [todo.md](todo.md) for the full task list.
### Prerequisites
- Linux server (amd64 or arm64)
- nginx
- An `arcline` system user
### Build
```sh
# Local binary
make build
# Cross-compile for Linux
make linux-amd64
make linux-arm64
```
### Install
```sh
# Create directories and user
sudo useradd -r -s /sbin/nologin -d /opt/arcline-portal arcline
sudo mkdir -p /opt/arcline-portal
sudo chown arcline:arcline /opt/arcline-portal
# Copy binary
sudo cp arcline-portal-linux-amd64 /opt/arcline-portal/arcline-portal
sudo chmod +x /opt/arcline-portal/arcline-portal
# Copy and populate env file
sudo cp .env.example /opt/arcline-portal/.env
sudo chown arcline:arcline /opt/arcline-portal/.env
sudo chmod 600 /opt/arcline-portal/.env
# Edit /opt/arcline-portal/.env and fill in real values
```
### systemd
```sh
sudo cp deploy/arcline-portal.service /etc/systemd/system/
sudo systemctl daemon-reload
sudo systemctl enable --now arcline-portal
sudo systemctl status arcline-portal
```
### nginx
```sh
sudo cp deploy/nginx-portal.conf /etc/nginx/sites-available/arcline-portal
sudo ln -s /etc/nginx/sites-available/arcline-portal /etc/nginx/sites-enabled/
sudo nginx -t && sudo systemctl reload nginx
```
Expects TLS certificates at:
- `/etc/ssl/arclineit.com/fullchain.pem`
- `/etc/ssl/arclineit.com/privkey.pem`
### Seed first admin account
```sh
sudo -u arcline /opt/arcline-portal/arcline-portal \
-seed \
-username blake \
-name "Blake" \
-password "changeme"
```
## Environment variables
Copy `.env.example` to `.env` and set the following:
| Variable | Default | Description |
|---|---|---|
| `PORT` | `8082` | HTTP listen port (nginx proxies to this) |
| `DB_PATH` | `./portal.db` | Path to the portal SQLite database |
| `UPTIME_DB_PATH` | `../arcline-uptime/uptime.db` | Path to arcline-uptime's database (read-only); omit if not using uptime integration |
| `SESSION_SECRET` | — | 32-byte hex secret for session tokens. Generate with: `openssl rand -hex 32` |
| `SMTP_HOST` | `mail.arclineit.com` | SMTP server hostname |
| `SMTP_PORT` | `587` | SMTP port (STARTTLS) |
| `SMTP_USER` | — | SMTP username |
| `SMTP_PASS` | — | SMTP password |
| `SMTP_FROM` | `portal@arclineit.com` | From address for outbound email |
| `ADMIN_EMAIL` | `blake@arclineit.com` | Receives new ticket notifications |
| `BASE_URL` | `https://portal.arclineit.com` | Base URL used in email links (no trailing slash) |
## License