+ @php $devices = old('devices', $devices ?? []); @endphp
+ @forelse($devices as $i => $device)
+ @include('partials.vm-device-row', ['index' => $i, 'device' => $device, 'deviceTypes' => $deviceTypes])
+ @empty
+ @endforelse
+
+
+ Hinweis: Der Browser muss Proxmox unter {{ parse_url(config('hosting.proxmox.console_ws_url') ?: config('hosting.proxmox.url'), PHP_URL_HOST) }} erreichen können.
+
+
+
diff --git a/resources/views/vms/create.blade.php b/resources/views/vms/create.blade.php
new file mode 100644
index 0000000..e0c3c21
--- /dev/null
+++ b/resources/views/vms/create.blade.php
@@ -0,0 +1,98 @@
+@extends('layouts.app')
+@section('title', 'VM erstellen')
+@section('heading', 'Neue VM erstellen')
+
+@section('content')
+{{ $vms->links() }}
+@endsection
diff --git a/resources/views/vms/show.blade.php b/resources/views/vms/show.blade.php
new file mode 100644
index 0000000..b559a53
--- /dev/null
+++ b/resources/views/vms/show.blade.php
@@ -0,0 +1,250 @@
+@extends('layouts.app')
+@section('title', $vm->name)
+@section('heading', $vm->displayName())
+
+@section('content')
+@php
+ $canManage = auth()->user()->can('manage', $vm);
+ $isRunning = ($liveStatus['status'] ?? $vm->proxmox_status) === 'running';
+@endphp
+
+
+
+@if($errors->has('power'))
+
{{ $errors->first('power') }}
+@endif
+@if($errors->has('iso'))
+
{{ $errors->first('iso') }}
+@endif
+
+@if($canManage)
+
+
+
VM-Steuerung
+
+
+ {{ $liveStatus['status'] ?? $vm->proxmox_status ?? 'unbekannt' }}
+
+
+ @if(($liveStatus['uptime'] ?? $vm->proxmox_uptime ?? 0) > 0)
+ Uptime: {{ gmdate('H:i:s', $liveStatus['uptime'] ?? $vm->proxmox_uptime) }}
+ @endif
+
+
+
+
+
Installations-ISO
+ @if($vm->attached_iso)
+
{{ $vm->attached_iso }}
+
+ @else
+
Keine ISO eingebunden.
+ @endif
+
+
Nach dem Einbinden: VM neu starten und von CD booten.
+
+
+
Live-Ressourcen
+
+ @if($liveStatus)
+
CPU {{ number_format(($liveStatus['cpu'] ?? 0) * 100, 1) }}%
+
RAM {{ number_format(($liveStatus['mem'] ?? 0) / 1024 / 1024 / 1024, 2) }} / {{ number_format(($liveStatus['maxmem'] ?? 0) / 1024 / 1024 / 1024, 2) }} GB
+ @else
+ Status nicht abrufbar (Proxmox-Verbindung prüfen).
+ @endif
+
+
+
+@endif
+
+
+
+ Status
+
+
Provisioning @include('partials.status-badge', ['status' => $vm->status])
+
Schritt {{ $vm->provisioning_step ?? '—' }}
+ @if($vm->error_message)
+ {{ $vm->error_message }}
+ @endif
+
VMID {{ $vm->vmid ?? '—' }}
+ @if(auth()->user()->isAdmin())
+
Besitzer {{ $vm->owner?->name ?? '—' }}
+ @endif
+
+
+
+
+ Netzwerk
+
+
Private IP {{ $vm->ip_address ?? '—' }}
+
Öffentliche IP {{ $vm->public_ip ?? '—' }}
+
Traefik {{ $vm->behind_traefik ? 'Ja' : 'Nein' }}
+
Domain {{ str_ends_with($vm->domain ?? '', '.internal') ? '—' : $vm->domain }}
+
+
+
+
+ Ressourcen (Konfiguration)
+
+
vCPUs {{ $vm->cpu }}
+
RAM {{ $vm->ram }} MB
+
Disk {{ $vm->disk }} GB
+
+
+
+
+ Aktivitätsprotokoll
+
+ @forelse($vm->activityLogs as $log)
+
+ {{ $log->action }}
+ {{ $log->created_at->diffForHumans() }}
+
+ @empty
+
Noch keine Aktionen.
+ @endforelse
+
+
+
+@if($canManage && $vm->vmid)
+
+ Snapshots (48h)
+
+
+ @forelse($vm->snapshots as $snap)
+
+ {{ $snap->name }} @if($snap->auto_created)(auto) @endif
+ bis {{ $snap->expires_at?->format('d.m. H:i') }}
+
+
+
+
+
+ @empty
+ Keine Snapshots.
+ @endforelse
+
+
+
+
+ Backups @if(!config('hosting.backups.enabled'))(PBS deaktiviert) @endif
+ @if(config('hosting.backups.enabled'))
+
+ @endif
+
+ @forelse($vm->backups as $backup)
+ {{ $backup->status }} – {{ $backup->created_at->format('d.m.Y H:i') }}
+ @empty
+ Keine Backups.
+ @endforelse
+
+
+
+
+ Firewall
+
+
+ @forelse($vm->firewallRules as $rule)
+ {{ $rule->direction }} {{ $rule->protocol }} {{ $rule->port }} → {{ $rule->action }}
+ Keine Regeln.
+ @endforelse
+
+
+
+
+@endif
+
+@if($canManage && $vm->vmid)
+@push('scripts')
+
+@endpush
+@endif
+@endsection
diff --git a/resources/views/welcome.blade.php b/resources/views/welcome.blade.php
new file mode 100644
index 0000000..26e294a
--- /dev/null
+++ b/resources/views/welcome.blade.php
@@ -0,0 +1,223 @@
+
+
+
+
+
+
+
{{ config('app.name', 'Laravel') }}
+
+ @fonts
+
+
+ @if (file_exists(public_path('build/manifest.json')) || file_exists(public_path('hot')))
+ @vite(['resources/css/app.css', 'resources/js/app.js'])
+ @else
+
+ @endif
+
+
+
+ @if (Route::has('login'))
+
+ @auth
+
+ Dashboard
+
+ @else
+
+ Log in
+
+
+ @if (Route::has('register'))
+
+ Register
+
+ @endif
+ @endauth
+
+ @endif
+
+
+
+
+
Let's get started
+
With so many options available to you,
+
+
+
+
+ v{{ app()->version() }}
+
+ View changelog
+
+
+
+
+
+ {{-- Laravel Logo --}}
+
+
+
+ {{-- 13 --}}
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ @if (Route::has('login'))
+
+ @endif
+
+
diff --git a/routes/api.php b/routes/api.php
new file mode 100644
index 0000000..e3f8013
--- /dev/null
+++ b/routes/api.php
@@ -0,0 +1,22 @@
+middleware(['api', 'whmcs'])
+ ->group(function () {
+ Route::post('/services', [WhmcsServiceController::class, 'provision']);
+ Route::get('/services/{whmcsServiceId}', [WhmcsServiceController::class, 'status']);
+ Route::post('/services/{whmcsServiceId}/suspend', [WhmcsServiceController::class, 'suspend']);
+ Route::post('/services/{whmcsServiceId}/unsuspend', [WhmcsServiceController::class, 'unsuspend']);
+ Route::delete('/services/{whmcsServiceId}', [WhmcsServiceController::class, 'terminate']);
+ });
diff --git a/routes/console.php b/routes/console.php
new file mode 100644
index 0000000..c5d58d8
--- /dev/null
+++ b/routes/console.php
@@ -0,0 +1,14 @@
+comment(Inspiring::quote());
+})->purpose('Display an inspiring quote');
+
+Schedule::command('hosting:release-vmids')->everyFifteenMinutes();
+Schedule::command('hosting:purge-iso-uploads')->hourly();
+Schedule::command('hosting:prune-snapshots')->hourly();
+Schedule::command('hosting:collect-metrics')->everyFiveMinutes();
diff --git a/routes/web.php b/routes/web.php
new file mode 100644
index 0000000..b627192
--- /dev/null
+++ b/routes/web.php
@@ -0,0 +1,80 @@
+ Customer::query()->findOrFail($value));
+
+Route::middleware('guest')->group(function () {
+ Route::get('login', [LoginController::class, 'create'])->name('login');
+ Route::post('login', [LoginController::class, 'store'])->middleware('throttle:login');
+});
+
+Route::middleware('auth')->group(function () {
+ Route::post('logout', [LoginController::class, 'destroy'])->name('logout');
+
+ Route::get('two-factor/setup', [TwoFactorController::class, 'setup'])->name('two-factor.setup');
+ Route::post('two-factor/enable', [TwoFactorController::class, 'enable'])->name('two-factor.enable');
+ Route::get('two-factor/challenge', [TwoFactorController::class, 'challenge'])->name('two-factor.challenge');
+ Route::post('two-factor/challenge', [TwoFactorController::class, 'verifyChallenge'])->name('two-factor.challenge.store');
+
+ Route::get('/', DashboardController::class)->name('dashboard');
+
+ Route::resource('vms', VmController::class)->except(['destroy']);
+ Route::delete('vms/{vm}', [VmController::class, 'destroy'])->name('vms.destroy');
+
+ Route::middleware('throttle:vm-power')->group(function () {
+ Route::post('vms/{vm}/power', VmPowerController::class)->name('vms.power');
+ });
+ Route::get('vms/{vm}/status', VmStatusController::class)->name('vms.status');
+ Route::get('vms/{vm}/console', [VmConsoleController::class, 'create'])->name('vms.console');
+ Route::get('console/{token}', [VmConsoleController::class, 'show'])->name('vms.console.session');
+ Route::post('vms/{vm}/iso', [VmIsoController::class, 'store'])->name('vms.iso.mount');
+ Route::delete('vms/{vm}/iso', [VmIsoController::class, 'destroy'])->name('vms.iso.unmount');
+ Route::get('api/isos', [VmIsoController::class, 'index'])->name('api.isos');
+
+ Route::post('vms/{vm}/snapshots', [VmSnapshotController::class, 'store'])->name('vms.snapshots.store');
+ Route::post('vms/{vm}/snapshots/{snapshot}/rollback', [VmSnapshotController::class, 'rollback'])->name('vms.snapshots.rollback');
+ Route::delete('vms/{vm}/snapshots/{snapshot}', [VmSnapshotController::class, 'destroy'])->name('vms.snapshots.destroy');
+
+ Route::post('vms/{vm}/backups', [VmBackupController::class, 'store'])->name('vms.backups.store');
+ Route::post('vms/{vm}/reinstall', VmReinstallController::class)->name('vms.reinstall');
+
+ Route::post('vms/{vm}/firewall', [VmFirewallController::class, 'store'])->name('vms.firewall.store');
+ Route::delete('vms/{vm}/firewall/{rule}', [VmFirewallController::class, 'destroy'])->name('vms.firewall.destroy');
+
+ Route::get('iso-uploads', [IsoUploadController::class, 'index'])->name('iso-uploads.index');
+ Route::post('iso-uploads', [IsoUploadController::class, 'store'])->name('iso-uploads.store');
+
+ Route::get('ip-pools', [IpPoolController::class, 'index'])->name('ip-pools.index');
+
+ Route::middleware('admin')->group(function () {
+ Route::get('ip-pools/create', [IpPoolController::class, 'create'])->name('ip-pools.create');
+ Route::post('ip-pools', [IpPoolController::class, 'store'])->name('ip-pools.store');
+ Route::get('ip-pools/{ipPool}/edit', [IpPoolController::class, 'edit'])->name('ip-pools.edit');
+ Route::put('ip-pools/{ipPool}', [IpPoolController::class, 'update'])->name('ip-pools.update');
+ Route::delete('ip-pools/{ipPool}', [IpPoolController::class, 'destroy'])->name('ip-pools.destroy');
+
+ Route::resource('users', UserController::class)->except(['show']);
+
+ Route::get('admin/system-health', SystemHealthController::class)->name('admin.health');
+ Route::resource('admin/templates', VmTemplateController::class)->names('admin.templates');
+ });
+});
diff --git a/scripts/console-ws-proxy.mjs b/scripts/console-ws-proxy.mjs
new file mode 100644
index 0000000..023afad
--- /dev/null
+++ b/scripts/console-ws-proxy.mjs
@@ -0,0 +1,49 @@
+#!/usr/bin/env node
+/**
+ * WebSocket-Proxy: Browser → Panel → Proxmox VNC
+ * Start: CONSOLE_PROXY_SECRET=... CONSOLE_VALIDATE_URL=https://panel/api/console/validate node scripts/console-ws-proxy.mjs
+ */
+import http from 'http';
+import { WebSocketServer, WebSocket } from 'ws';
+
+const PORT = parseInt(process.env.CONSOLE_PROXY_PORT || '6090', 10);
+const SECRET = process.env.CONSOLE_PROXY_SECRET || '';
+const VALIDATE = process.env.CONSOLE_PROXY_VALIDATE_URL || 'http://127.0.0.1:8000/api/console/validate';
+
+const server = http.createServer();
+const wss = new WebSocketServer({ server, path: '/ws/vm' });
+
+wss.on('connection', async (clientWs, req) => {
+ const token = req.url?.split('/').pop()?.split('?')[0];
+ if (!token) {
+ clientWs.close(4001, 'missing token');
+ return;
+ }
+
+ try {
+ const res = await fetch(`${VALIDATE}/${token}`, {
+ headers: { 'X-Console-Proxy-Secret': SECRET },
+ });
+ if (!res.ok) {
+ clientWs.close(4003, 'invalid session');
+ return;
+ }
+ const data = await res.json();
+ const proxmoxWs = new WebSocket(data.proxmox_ws_url, ['binary']);
+
+ proxmoxWs.on('open', () => {
+ clientWs.on('message', (msg) => proxmoxWs.readyState === WebSocket.OPEN && proxmoxWs.send(msg));
+ proxmoxWs.on('message', (msg) => clientWs.readyState === WebSocket.OPEN && clientWs.send(msg));
+ });
+
+ proxmoxWs.on('error', () => clientWs.close(1011, 'upstream error'));
+ clientWs.on('close', () => proxmoxWs.close());
+ proxmoxWs.on('close', () => clientWs.close());
+ } catch {
+ clientWs.close(1011, 'proxy error');
+ }
+});
+
+server.listen(PORT, '127.0.0.1', () => {
+ console.log(`Console WS proxy on 127.0.0.1:${PORT}/ws/vm/{token}`);
+});
diff --git a/storage/app/.gitignore b/storage/app/.gitignore
new file mode 100644
index 0000000..fedb287
--- /dev/null
+++ b/storage/app/.gitignore
@@ -0,0 +1,4 @@
+*
+!private/
+!public/
+!.gitignore
diff --git a/storage/app/private/.gitignore b/storage/app/private/.gitignore
new file mode 100644
index 0000000..d6b7ef3
--- /dev/null
+++ b/storage/app/private/.gitignore
@@ -0,0 +1,2 @@
+*
+!.gitignore
diff --git a/storage/app/public/.gitignore b/storage/app/public/.gitignore
new file mode 100644
index 0000000..d6b7ef3
--- /dev/null
+++ b/storage/app/public/.gitignore
@@ -0,0 +1,2 @@
+*
+!.gitignore
diff --git a/storage/framework/.gitignore b/storage/framework/.gitignore
new file mode 100644
index 0000000..05c4471
--- /dev/null
+++ b/storage/framework/.gitignore
@@ -0,0 +1,9 @@
+compiled.php
+config.php
+down
+events.scanned.php
+maintenance.php
+routes.php
+routes.scanned.php
+schedule-*
+services.json
diff --git a/storage/framework/cache/.gitignore b/storage/framework/cache/.gitignore
new file mode 100644
index 0000000..01e4a6c
--- /dev/null
+++ b/storage/framework/cache/.gitignore
@@ -0,0 +1,3 @@
+*
+!data/
+!.gitignore
diff --git a/storage/framework/cache/data/.gitignore b/storage/framework/cache/data/.gitignore
new file mode 100644
index 0000000..d6b7ef3
--- /dev/null
+++ b/storage/framework/cache/data/.gitignore
@@ -0,0 +1,2 @@
+*
+!.gitignore
diff --git a/storage/framework/sessions/.gitignore b/storage/framework/sessions/.gitignore
new file mode 100644
index 0000000..d6b7ef3
--- /dev/null
+++ b/storage/framework/sessions/.gitignore
@@ -0,0 +1,2 @@
+*
+!.gitignore
diff --git a/storage/framework/testing/.gitignore b/storage/framework/testing/.gitignore
new file mode 100644
index 0000000..d6b7ef3
--- /dev/null
+++ b/storage/framework/testing/.gitignore
@@ -0,0 +1,2 @@
+*
+!.gitignore
diff --git a/storage/framework/views/.gitignore b/storage/framework/views/.gitignore
new file mode 100644
index 0000000..d6b7ef3
--- /dev/null
+++ b/storage/framework/views/.gitignore
@@ -0,0 +1,2 @@
+*
+!.gitignore
diff --git a/storage/logs/.gitignore b/storage/logs/.gitignore
new file mode 100644
index 0000000..d6b7ef3
--- /dev/null
+++ b/storage/logs/.gitignore
@@ -0,0 +1,2 @@
+*
+!.gitignore
diff --git a/storage/traefik/dynamic/.gitkeep b/storage/traefik/dynamic/.gitkeep
new file mode 100644
index 0000000..8b13789
--- /dev/null
+++ b/storage/traefik/dynamic/.gitkeep
@@ -0,0 +1 @@
+
diff --git a/tests/Feature/Api/WhmcsApiTest.php b/tests/Feature/Api/WhmcsApiTest.php
new file mode 100644
index 0000000..05ba69e
--- /dev/null
+++ b/tests/Feature/Api/WhmcsApiTest.php
@@ -0,0 +1,86 @@
+ true,
+ 'hosting.whmcs.api_secret' => 'test-secret',
+ 'hosting.whmcs.allowed_ips' => [],
+ ]);
+
+ HostingPlan::query()->create([
+ 'slug' => 'small',
+ 'name' => 'Small',
+ 'cpu' => 2,
+ 'ram' => 4096,
+ 'disk' => 40,
+ 'max_backups' => 4,
+ 'is_active' => true,
+ ]);
+ }
+
+ public function test_provision_requires_valid_signature(): void
+ {
+ $this->postJson('/api/whmcs/services', [])
+ ->assertStatus(401);
+ }
+
+ public function test_provision_with_valid_signature(): void
+ {
+ Queue::fake();
+ Http::fake(['*' => Http::response(['data' => null], 200)]);
+
+ $body = [
+ 'whmcs_service_id' => 1001,
+ 'whmcs_client_id' => 42,
+ 'client_email' => 'kunde@example.com',
+ 'client_name' => 'Max Kunde',
+ 'plan_slug' => 'small',
+ 'hostname' => 'vm-test',
+ 'subdomain' => 'vmtest',
+ 'behind_traefik' => true,
+ 'provision_mode' => 'template',
+ 'template_slug' => 'debian-12',
+ ];
+
+ $json = json_encode($body);
+ $timestamp = time();
+ $signature = hash_hmac('sha256', $timestamp.'.'.$json, 'test-secret');
+
+ $this->postJson('/api/whmcs/services', $body, [
+ 'X-Whmcs-Timestamp' => $timestamp,
+ 'X-Whmcs-Signature' => $signature,
+ ])
+ ->assertStatus(202)
+ ->assertJsonPath('vmid', 2000);
+
+ $this->assertDatabaseHas('whmcs_services', ['whmcs_service_id' => 1001]);
+ $this->assertDatabaseHas('vmid_reservations', ['vmid' => 2000, 'status' => 'reserved']);
+ }
+
+ private function signedRequest(string $method, string $uri, array $body = []): \Illuminate\Testing\TestResponse
+ {
+ $json = json_encode($body);
+ $timestamp = time();
+ $signature = hash_hmac('sha256', $timestamp.'.'.$json, 'test-secret');
+
+ return $this->json($method, $uri, $body, [
+ 'X-Whmcs-Timestamp' => $timestamp,
+ 'X-Whmcs-Signature' => $signature,
+ ]);
+ }
+}
diff --git a/tests/Feature/ExampleTest.php b/tests/Feature/ExampleTest.php
new file mode 100644
index 0000000..6533db0
--- /dev/null
+++ b/tests/Feature/ExampleTest.php
@@ -0,0 +1,13 @@
+get('/')->assertRedirect(route('login'));
+ }
+}
diff --git a/tests/Feature/Web/VmAuthorizationTest.php b/tests/Feature/Web/VmAuthorizationTest.php
new file mode 100644
index 0000000..6748eb5
--- /dev/null
+++ b/tests/Feature/Web/VmAuthorizationTest.php
@@ -0,0 +1,66 @@
+create(['role' => UserRole::Customer]);
+ $otherUser = User::factory()->create(['role' => UserRole::Customer]);
+
+ $ownVm = Customer::query()->create([
+ 'user_id' => $customerUser->id,
+ 'name' => 'own-vm',
+ 'domain' => 'own.hexahost.de',
+ 'status' => 'active',
+ ]);
+
+ Customer::query()->create([
+ 'user_id' => $otherUser->id,
+ 'name' => 'other-vm',
+ 'domain' => 'other.hexahost.de',
+ 'status' => 'active',
+ ]);
+
+ $this->actingAs($customerUser)
+ ->get(route('vms.index'))
+ ->assertOk()
+ ->assertSee('own-vm')
+ ->assertDontSee('other-vm');
+
+ $this->actingAs($customerUser)
+ ->get(route('vms.show', $ownVm))
+ ->assertOk();
+
+ $otherVm = Customer::query()->where('name', 'other-vm')->first();
+ $this->actingAs($customerUser)
+ ->get(route('vms.show', $otherVm))
+ ->assertForbidden();
+ }
+
+ public function test_admin_sees_all_vms(): void
+ {
+ $admin = User::factory()->create(['role' => UserRole::Admin]);
+
+ Customer::query()->create([
+ 'user_id' => User::factory()->create()->id,
+ 'name' => 'vm-a',
+ 'domain' => 'a.hexahost.de',
+ 'status' => 'active',
+ ]);
+
+ $this->actingAs($admin)
+ ->get(route('vms.index'))
+ ->assertOk()
+ ->assertSee('vm-a');
+ }
+}
diff --git a/tests/Feature/Web/VmManagementTest.php b/tests/Feature/Web/VmManagementTest.php
new file mode 100644
index 0000000..30ba358
--- /dev/null
+++ b/tests/Feature/Web/VmManagementTest.php
@@ -0,0 +1,107 @@
+create([
+ 'user_id' => $owner->id,
+ 'name' => 'test-vm',
+ 'domain' => 'test.hexahost.de',
+ 'vmid' => 200,
+ 'ip_address' => '10.12.10.50',
+ 'cpu' => 2,
+ 'ram' => 2048,
+ 'disk' => 32,
+ 'status' => 'active',
+ 'provisioning_step' => 'completed',
+ ]);
+ }
+
+ public function test_customer_can_trigger_power_action(): void
+ {
+ Http::fake([
+ '*' => Http::sequence()
+ ->push(['data' => ['status' => 'running', 'uptime' => 100, 'cpu' => 0.1, 'mem' => 1, 'maxmem' => 2, 'disk' => 0, 'maxdisk' => 0]], 200)
+ ->push(['data' => null], 200)
+ ->push(['data' => ['status' => 'running', 'uptime' => 100, 'cpu' => 0.1, 'mem' => 1, 'maxmem' => 2, 'disk' => 0, 'maxdisk' => 0]], 200),
+ ]);
+
+ $user = User::factory()->create(['role' => UserRole::Customer]);
+ $vm = $this->activeVm($user);
+
+ $this->actingAs($user)
+ ->post(route('vms.power', $vm), ['action' => VmPowerAction::Shutdown->value])
+ ->assertRedirect()
+ ->assertSessionHas('success');
+
+ $this->assertDatabaseHas('vm_activity_logs', [
+ 'customer_id' => $vm->id,
+ 'action' => 'power.shutdown',
+ 'status' => 'success',
+ ]);
+ }
+
+ public function test_other_customer_cannot_manage_vm(): void
+ {
+ $owner = User::factory()->create(['role' => UserRole::Customer]);
+ $other = User::factory()->create(['role' => UserRole::Customer]);
+ $vm = $this->activeVm($owner);
+
+ $this->actingAs($other)
+ ->post(route('vms.power', $vm), ['action' => VmPowerAction::Start->value])
+ ->assertForbidden();
+ }
+
+ public function test_live_status_json(): void
+ {
+ Http::fake([
+ '*' => Http::response([
+ 'data' => ['status' => 'running', 'uptime' => 3600, 'cpu' => 0.05, 'mem' => 512000000, 'maxmem' => 2147483648, 'disk' => 0, 'maxdisk' => 0],
+ ], 200),
+ ]);
+
+ $user = User::factory()->create(['role' => UserRole::Customer]);
+ $vm = $this->activeVm($user);
+
+ $this->actingAs($user)
+ ->getJson(route('vms.status', $vm))
+ ->assertOk()
+ ->assertJsonPath('proxmox.status', 'running');
+ }
+
+ public function test_mount_iso(): void
+ {
+ Http::fake([
+ '*/storage/*/content*' => Http::response([
+ 'data' => [['volid' => 'local:iso/debian.iso', 'content' => 'iso', 'size' => 500000000]],
+ ], 200),
+ '*' => Http::response(['data' => null], 200),
+ ]);
+
+ $user = User::factory()->create(['role' => UserRole::Customer]);
+ $vm = $this->activeVm($user);
+
+ $this->actingAs($user)
+ ->post(route('vms.iso.mount', $vm), ['iso_volid' => 'local:iso/debian.iso'])
+ ->assertRedirect()
+ ->assertSessionHas('success');
+
+ $this->assertDatabaseHas('customers', [
+ 'id' => $vm->id,
+ 'attached_iso' => 'local:iso/debian.iso',
+ ]);
+ }
+}
diff --git a/tests/TestCase.php b/tests/TestCase.php
new file mode 100644
index 0000000..b39f821
--- /dev/null
+++ b/tests/TestCase.php
@@ -0,0 +1,19 @@
+ 'test@pam!test=secret',
+ 'hosting.proxmox.url' => 'https://proxmox.test:8006',
+ 'hosting.security.admin_2fa_required' => false,
+ ]);
+ }
+}
diff --git a/tests/Unit/ExampleTest.php b/tests/Unit/ExampleTest.php
new file mode 100644
index 0000000..5773b0c
--- /dev/null
+++ b/tests/Unit/ExampleTest.php
@@ -0,0 +1,16 @@
+assertTrue(true);
+ }
+}
diff --git a/tests/Unit/TraefikGeneratorTest.php b/tests/Unit/TraefikGeneratorTest.php
new file mode 100644
index 0000000..c01baee
--- /dev/null
+++ b/tests/Unit/TraefikGeneratorTest.php
@@ -0,0 +1,78 @@
+configPath = storage_path('framework/testing/traefik-customers.yaml');
+ config(['hosting.traefik.dynamic_config_path' => $this->configPath]);
+
+ if (File::exists($this->configPath)) {
+ File::delete($this->configPath);
+ }
+ }
+
+ protected function tearDown(): void
+ {
+ if (File::exists($this->configPath)) {
+ File::delete($this->configPath);
+ }
+
+ parent::tearDown();
+ }
+
+ public function test_adds_customer_route_with_tls(): void
+ {
+ $generator = app(TraefikGenerator::class);
+ $generator->addCustomerRoute('kunde1.hexahost.de', '10.12.10.11');
+
+ $yaml = File::get($this->configPath);
+
+ $this->assertStringContainsString('kunde1.hexahost.de', $yaml);
+ $this->assertStringContainsString('10.12.10.11', $yaml);
+ $this->assertStringContainsString('letsencrypt', $yaml);
+ $this->assertStringContainsString('websecure', $yaml);
+ }
+
+ public function test_preserves_existing_non_managed_routes(): void
+ {
+ File::ensureDirectoryExists(dirname($this->configPath));
+ File::put($this->configPath, <<<'YAML'
+http:
+ routers:
+ admin-panel:
+ rule: "Host(`admin.example.com`)"
+ service: admin-panel
+ services:
+ admin-panel:
+ loadBalancer:
+ servers:
+ - url: "http://127.0.0.1:8080"
+YAML);
+
+ $generator = app(TraefikGenerator::class);
+ $generator->addCustomerRoute('kunde1.hexahost.de', '10.12.10.12');
+
+ $yaml = File::get($this->configPath);
+
+ $this->assertStringContainsString('admin-panel', $yaml);
+ $this->assertStringContainsString('kunde1.hexahost.de', $yaml);
+ }
+
+ public function test_rejects_invalid_domain(): void
+ {
+ $this->expectException(\App\Exceptions\Hosting\TraefikException::class);
+
+ app(TraefikGenerator::class)->addCustomerRoute('not a domain!', '10.12.10.11');
+ }
+}
diff --git a/vite.config.js b/vite.config.js
new file mode 100644
index 0000000..1fd66d5
--- /dev/null
+++ b/vite.config.js
@@ -0,0 +1,24 @@
+import { defineConfig } from 'vite';
+import laravel from 'laravel-vite-plugin';
+import { bunny } from 'laravel-vite-plugin/fonts';
+import tailwindcss from '@tailwindcss/vite';
+
+export default defineConfig({
+ plugins: [
+ laravel({
+ input: ['resources/css/app.css', 'resources/js/app.js'],
+ refresh: true,
+ fonts: [
+ bunny('Instrument Sans', {
+ weights: [400, 500, 600],
+ }),
+ ],
+ }),
+ tailwindcss(),
+ ],
+ server: {
+ watch: {
+ ignored: ['**/storage/framework/views/**'],
+ },
+ },
+});
diff --git a/whmcs-module/hexahost/hexahost.php b/whmcs-module/hexahost/hexahost.php
new file mode 100644
index 0000000..7ce0015
--- /dev/null
+++ b/whmcs-module/hexahost/hexahost.php
@@ -0,0 +1,148 @@
+ 'HexaHost Proxmox Panel',
+ 'APIVersion' => '1.1',
+ 'RequiresServer' => true,
+ 'DefaultNonSSLPort' => '443',
+ 'DefaultSSLPort' => '443',
+ ];
+}
+
+function hexahost_ConfigOptions(): array
+{
+ return [
+ 'plan_slug' => [
+ 'FriendlyName' => 'Hosting Plan (Slug)',
+ 'Type' => 'text',
+ 'Size' => '32',
+ 'Description' => 'z.B. small, medium, large',
+ ],
+ 'behind_traefik' => [
+ 'FriendlyName' => 'Hinter Traefik',
+ 'Type' => 'yesno',
+ 'Description' => 'Subdomain + DNS via Traefik',
+ ],
+ 'provision_mode' => [
+ 'FriendlyName' => 'Provisionierungsmodus',
+ 'Type' => 'dropdown',
+ 'Options' => 'template,iso,empty',
+ 'Description' => 'template | iso | empty',
+ ],
+ ];
+}
+
+function hexahost_CreateAccount(array $params): string
+{
+ $payload = [
+ 'whmcs_service_id' => (int) $params['serviceid'],
+ 'whmcs_client_id' => (int) $params['clientsdetails']['userid'],
+ 'whmcs_order_id' => (int) ($params['model']['orderid'] ?? 0),
+ 'client_email' => $params['clientsdetails']['email'],
+ 'client_name' => trim($params['clientsdetails']['firstname'].' '.$params['clientsdetails']['lastname']),
+ 'plan_slug' => $params['configoption1'] ?: 'small',
+ 'hostname' => $params['domain'] ?: 'vm-'.$params['serviceid'],
+ 'subdomain' => $params['customfields']['subdomain'] ?? explode('.', $params['domain'])[0] ?? 'vm'.$params['serviceid'],
+ 'behind_traefik' => ($params['configoption2'] ?? '') === 'on',
+ 'provision_mode' => $params['configoption3'] ?: 'template',
+ 'template_slug' => $params['customfields']['template_slug'] ?? null,
+ 'iso_volid' => $params['customfields']['iso_volid'] ?? null,
+ ];
+
+ $response = hexahost_apiRequest($params, 'POST', '/api/whmcs/services', $payload);
+
+ if (! empty($response['error'])) {
+ return $response['error'];
+ }
+
+ return 'success';
+}
+
+function hexahost_SuspendAccount(array $params): string
+{
+ $response = hexahost_apiRequest($params, 'POST', '/api/whmcs/services/'.$params['serviceid'].'/suspend', []);
+
+ return ! empty($response['error']) ? $response['error'] : 'success';
+}
+
+function hexahost_UnsuspendAccount(array $params): string
+{
+ $response = hexahost_apiRequest($params, 'POST', '/api/whmcs/services/'.$params['serviceid'].'/unsuspend', []);
+
+ return ! empty($response['error']) ? $response['error'] : 'success';
+}
+
+function hexahost_TerminateAccount(array $params): string
+{
+ $response = hexahost_apiRequest($params, 'DELETE', '/api/whmcs/services/'.$params['serviceid'], []);
+
+ return ! empty($response['error']) ? $response['error'] : 'success';
+}
+
+function hexahost_AdminServicesTabFields(array $params): array
+{
+ $response = hexahost_apiRequest($params, 'GET', '/api/whmcs/services/'.$params['serviceid'], []);
+
+ if (! empty($response['customer'])) {
+ return [
+ 'Panel VMID' => $response['customer']['vmid'] ?? '—',
+ 'Status' => $response['customer']['status'] ?? '—',
+ 'IP' => $response['customer']['ip_address'] ?? '—',
+ ];
+ }
+
+ return ['Status' => $response['error'] ?? 'Keine Daten'];
+}
+
+function hexahost_apiRequest(array $params, string $method, string $path, array $body): array
+{
+ $baseUrl = rtrim($params['serverhostname'] ?: $params['serverip'], '/');
+ if (! str_starts_with($baseUrl, 'http')) {
+ $baseUrl = 'https://'.$baseUrl;
+ }
+
+ $secret = $params['serverpassword'] ?: $params['serveraccesshash'];
+ $json = json_encode($body);
+ $timestamp = time();
+ $signature = hash_hmac('sha256', $timestamp.'.'.$json, $secret);
+
+ $ch = curl_init($baseUrl.$path);
+ curl_setopt_array($ch, [
+ CURLOPT_RETURNTRANSFER => true,
+ CURLOPT_CUSTOMREQUEST => $method,
+ CURLOPT_POSTFIELDS => $method === 'GET' || $method === 'DELETE' ? null : $json,
+ CURLOPT_HTTPHEADER => [
+ 'Content-Type: application/json',
+ 'Accept: application/json',
+ 'X-Whmcs-Timestamp: '.$timestamp,
+ 'X-Whmcs-Signature: '.$signature,
+ ],
+ CURLOPT_TIMEOUT => 120,
+ CURLOPT_SSL_VERIFYPEER => true,
+ ]);
+
+ $raw = curl_exec($ch);
+ $code = (int) curl_getinfo($ch, CURLINFO_HTTP_CODE);
+ curl_close($ch);
+
+ $data = json_decode($raw ?: '{}', true) ?: [];
+
+ if ($code >= 400) {
+ return ['error' => $data['message'] ?? $data['error'] ?? 'HTTP '.$code];
+ }
+
+ return $data;
+}
