feat(scheduler): добавить расписание бэкапов и автообновление сертификатов

backend/src/routes/backups.ts

@@ -1,23 +1,21 @@
 import { randomUUID } from "node:crypto"
-import { mkdir, readFile, rm, stat, writeFile } from "node:fs/promises"
+import { readFile, rm } from "node:fs/promises"
 import path from "node:path"
 import { z } from "zod"
 import type { FastifyPluginAsyncZod } from "@fastify/type-provider-zod"
+import { putBackupScheduleSettingsSchema } from "@mmapp/contracts/backups"
 import { listServersRead } from "../modules/servers/service/servers-service.js"
-import { getServerRowById } from "../modules/servers/repository/servers-repository.js"
-import { MikrotikClient } from "../services/mikrotik.js"
 import { appendEvent } from "../modules/events/service/events-service.js"
-
-type BackupMeta = {
-  id: string
-  serverId: string
-  serverName: string
-  filename: string
-  sizeBytes: number
-  createdAt: string
-  kind: "manual"
-  notes?: string
-}
+import { refreshScheduler } from "../services/scheduler.js"
+import {
+  getBackupsDir,
+  getBackupScheduleSettings,
+  readBackupIndex,
+  runBackupForServer,
+  updateBackupScheduleSettings,
+  writeBackupIndex,
+  type BackupMeta,
+} from "../services/backup-service.js"
 
 type BackupJobStatus = "queued" | "running" | "done" | "failed"
 type BackupJob = {
@@ -32,36 +30,8 @@ type BackupJob = {
   failures: Array<{ serverId: string; error: string }>
 }
 
-const BACKUPS_DIR = path.resolve(process.cwd(), "storage", "backups")
-const INDEX_PATH = path.join(BACKUPS_DIR, "index.json")
 const backupJobs = new Map<string, BackupJob>()
 
-async function ensureStorage() {
-  await mkdir(BACKUPS_DIR, { recursive: true })
-}
-
-async function readIndex(): Promise<BackupMeta[]> {
-  await ensureStorage()
-  try {
-    const raw = await readFile(INDEX_PATH, "utf8")
-    const parsed = JSON.parse(raw) as unknown
-    if (!Array.isArray(parsed)) return []
-    return parsed as BackupMeta[]
-  } catch {
-    return []
-  }
-}
-
-async function writeIndex(rows: BackupMeta[]): Promise<void> {
-  await ensureStorage()
-  await writeFile(INDEX_PATH, JSON.stringify(rows, null, 2), "utf8")
-}
-
-function fmtTs(d = new Date()): string {
-  const p = (n: number) => String(n).padStart(2, "0")
-  return `${d.getFullYear()}-${p(d.getMonth() + 1)}-${p(d.getDate())}_${p(d.getHours())}-${p(d.getMinutes())}-${p(d.getSeconds())}`
-}
-
 const CreateBackupBodySchema = z.object({
   serverIds: z.array(z.union([z.string(), z.number()])).min(1),
   notes: z.string().max(500).optional(),
@@ -74,42 +44,13 @@ const BackupJobIdParamSchema = z.object({
   jobId: z.string().min(1),
 })
 
-async function runBackupForServer(id: string, notes?: string): Promise<BackupMeta> {
-  const serverIdNum = Number.parseInt(id, 10)
-  if (!Number.isFinite(serverIdNum)) {
-    throw new Error("Невалидный id сервера")
-  }
-  const row = getServerRowById(serverIdNum)
-  if (!row) {
-    throw new Error("Сервер не найден")
-  }
-  const client = MikrotikClient.fromServer(row)
-  const script = await client.exportConfigScript()
-  const ts = fmtTs()
-  const safeServer = row.name.replace(/[^a-zA-Z0-9._-]+/g, "_")
-  const filename = `${safeServer}_${ts}.rsc`
-  const filePath = path.join(BACKUPS_DIR, filename)
-  await writeFile(filePath, script, "utf8")
-  const st = await stat(filePath)
-  return {
-    id: randomUUID(),
-    serverId: String(row.id),
-    serverName: row.name,
-    filename,
-    sizeBytes: st.size,
-    createdAt: new Date().toISOString(),
-    kind: "manual",
-    notes,
-  }
-}
-
 async function processBackupJob(job: BackupJob, ids: string[], notes?: string) {
   job.status = "running"
   job.startedAt = new Date().toISOString()
-  const indexRows = await readIndex()
+  const indexRows = await readBackupIndex()
   for (const id of ids) {
     try {
-      const meta = await runBackupForServer(id, notes)
+      const meta = await runBackupForServer(id, "manual", notes)
       indexRows.unshift(meta)
       job.created.push(meta)
     } catch (err) {
@@ -119,7 +60,7 @@ async function processBackupJob(job: BackupJob, ids: string[], notes?: string) {
       job.completed += 1
     }
   }
-  await writeIndex(indexRows)
+  await writeBackupIndex(indexRows)
   job.status = "done"
   job.finishedAt = new Date().toISOString()
   appendEvent({
@@ -141,11 +82,25 @@ async function processBackupJob(job: BackupJob, ids: string[], notes?: string) {
 
 const backupsRoutes: FastifyPluginAsyncZod = async (app) => {
   app.get("/backups", async (_req, reply) => {
-    const rows = await readIndex()
+    const rows = await readBackupIndex()
     rows.sort((a, b) => b.createdAt.localeCompare(a.createdAt))
     return reply.send(rows)
   })
 
+  app.get("/backups/schedule", async (_req, reply) => {
+    return reply.send(getBackupScheduleSettings())
+  })
+
+  app.put("/backups/schedule", async (req, reply) => {
+    const parsed = putBackupScheduleSettingsSchema.safeParse(req.body ?? {})
+    if (!parsed.success) {
+      return reply.status(400).send({ error: "Некорректное тело запроса", details: parsed.error.flatten() })
+    }
+    const result = updateBackupScheduleSettings(parsed.data)
+    refreshScheduler()
+    return reply.send(result)
+  })
+
   app.post("/backups/create", { schema: { body: CreateBackupBodySchema } }, async (req, reply) => {
     const inputIds = req.body.serverIds.map((x) => String(x))
     const notes = req.body.notes?.trim() || undefined
@@ -216,10 +171,10 @@ const backupsRoutes: FastifyPluginAsyncZod = async (app) => {
   })
 
   app.get("/backups/:id/download", { schema: { params: BackupIdParamSchema } }, async (req, reply) => {
-    const rows = await readIndex()
+    const rows = await readBackupIndex()
     const hit = rows.find((r) => r.id === req.params.id)
     if (!hit) return reply.status(404).send({ error: "Бэкап не найден" })
-    const filePath = path.join(BACKUPS_DIR, hit.filename)
+    const filePath = path.join(getBackupsDir(), hit.filename)
     const content = await readFile(filePath, "utf8").catch(() => null)
     if (content == null) return reply.status(404).send({ error: "Файл бэкапа не найден" })
     reply.header("Content-Type", "text/plain; charset=utf-8")
@@ -228,12 +183,12 @@ const backupsRoutes: FastifyPluginAsyncZod = async (app) => {
   })
 
   app.delete("/backups/:id", { schema: { params: BackupIdParamSchema } }, async (req, reply) => {
-    const rows = await readIndex()
+    const rows = await readBackupIndex()
     const idx = rows.findIndex((r) => r.id === req.params.id)
     if (idx < 0) return reply.status(404).send({ error: "Бэкап не найден" })
     const [hit] = rows.splice(idx, 1)
-    await writeIndex(rows)
-    await rm(path.join(BACKUPS_DIR, hit.filename), { force: true })
+    await writeBackupIndex(rows)
+    await rm(path.join(getBackupsDir(), hit.filename), { force: true })
     return reply.status(204).send()
   })
 }

backend/src/routes/certificates.ts

@@ -3,101 +3,25 @@ import type { FastifyPluginAsyncZod } from "@fastify/type-provider-zod"
 import {
   certificateIssueRequestSchema,
   putAcmeCloudflareSettingsSchema,
+  putCertificateRenewSettingsSchema,
   testAcmeCloudflareSettingsSchema,
 } from "@mmapp/contracts/certificates"
-import { appendEvent } from "../modules/events/service/events-service.js"
-import { issueCertificateWithCloudflareDns, testCloudflareToken } from "../services/acme-cloudflare.js"
+import { refreshScheduler } from "../services/scheduler.js"
+import { testCloudflareToken } from "../services/acme-cloudflare.js"
+import { queueCertificateIssueJob } from "../services/certificate-issue-runner.js"
 import {
   createIssueJobRecord,
   getAcmeCloudflareToken,
   getAcmeSettingsPublic,
+  getCertificateRenewSettings,
   getIssueJobRecord,
   getServerRowByIdString,
   listCertificatesFromServers,
   toIssueJobDto,
   updateAcmeSettings,
-  updateIssueJobRecord,
+  updateCertificateRenewSettings,
 } from "../services/certificates-service.js"
 
-const runningJobs = new Set<string>()
-
-async function runIssueJob(jobId: string) {
-  if (runningJobs.has(jobId)) return
-  runningJobs.add(jobId)
-  const row = getIssueJobRecord(jobId)
-  if (!row) {
-    runningJobs.delete(jobId)
-    return
-  }
-
-  const server = getServerRowByIdString(row.serverId)
-  if (!server) {
-    updateIssueJobRecord(jobId, {
-      status: "failed",
-      step: "failed",
-      finishedAt: new Date().toISOString(),
-      error: "Сервер не найден",
-    })
-    runningJobs.delete(jobId)
-    return
-  }
-
-  let domainNames: string[] = []
-  try {
-    domainNames = JSON.parse(row.domainNames) as string[]
-  } catch {
-    domainNames = []
-  }
-
-  const trustStore = row.trustStore.split(",").map((s) => s.trim()).filter(Boolean)
-  const startedAt = new Date().toISOString()
-  updateIssueJobRecord(jobId, { status: "running", step: "acme_order", startedAt, error: null })
-
-  try {
-    await issueCertificateWithCloudflareDns({
-      server,
-      certName: row.certName,
-      domainNames,
-      keyType: row.keyType === "ec256" ? "ec256" : "rsa2048",
-      trustStore: trustStore.length > 0 ? trustStore : ["www", "api"],
-      onStep: (step) => updateIssueJobRecord(jobId, { step }),
-    })
-    updateIssueJobRecord(jobId, {
-      status: "done",
-      step: "done",
-      finishedAt: new Date().toISOString(),
-      error: null,
-    })
-    appendEvent({
-      level: "info",
-      eventType: "certificates.issue.done",
-      sourceModule: "certificates",
-      title: "Сертификат выпущен",
-      message: `${row.certName} · ${domainNames.join(", ")} · ${server.name}`,
-      entityType: "server",
-      entityId: String(server.id),
-    })
-  } catch (e) {
-    updateIssueJobRecord(jobId, {
-      status: "failed",
-      step: "failed",
-      finishedAt: new Date().toISOString(),
-      error: e instanceof Error ? e.message : String(e),
-    })
-    appendEvent({
-      level: "warning",
-      eventType: "certificates.issue.failed",
-      sourceModule: "certificates",
-      title: "Ошибка выпуска сертификата",
-      message: e instanceof Error ? e.message : String(e),
-      entityType: "server",
-      entityId: String(server.id),
-    })
-  } finally {
-    runningJobs.delete(jobId)
-  }
-}
-
 const certificatesRoutes: FastifyPluginAsyncZod = async (app) => {
   app.get("/certificates", async (_req, reply) => {
     return reply.send(await listCertificatesFromServers())
@@ -119,6 +43,20 @@ const certificatesRoutes: FastifyPluginAsyncZod = async (app) => {
     return reply.send(updateAcmeSettings(parsed.data))
   })
 
+  app.get("/certificates/renew-settings", async (_req, reply) => {
+    return reply.send(getCertificateRenewSettings())
+  })
+
+  app.put("/certificates/renew-settings", async (req, reply) => {
+    const parsed = putCertificateRenewSettingsSchema.safeParse(req.body ?? {})
+    if (!parsed.success) {
+      return reply.status(400).send({ error: "Некорректное тело запроса", details: parsed.error.flatten() })
+    }
+    const result = updateCertificateRenewSettings(parsed.data)
+    refreshScheduler()
+    return reply.send(result)
+  })
+
   app.post("/certificates/acme-settings/test", async (req, reply) => {
     const parsed = testAcmeCloudflareSettingsSchema.safeParse(req.body ?? {})
     if (!parsed.success) {
@@ -157,8 +95,9 @@ const certificatesRoutes: FastifyPluginAsyncZod = async (app) => {
       domainNames: parsed.data.domainNames.map((d) => d.trim()).filter(Boolean),
       keyType: parsed.data.keyType ?? "rsa2048",
       trustStore,
+      source: "manual",
     })
-    queueMicrotask(() => { void runIssueJob(jobId) })
+    queueCertificateIssueJob(jobId)
     return reply.send({ jobId })
   })