initial commit

app/Http/Controllers/Web/VmFirewallController.php

@@ -0,0 +1,53 @@
+<?php
+
+namespace App\Http\Controllers\Web;
+
+use App\Http\Controllers\Controller;
+use App\Models\Customer;
+use App\Services\Hosting\Firewall\FirewallService;
+use Illuminate\Http\RedirectResponse;
+use Illuminate\Http\Request;
+use Illuminate\Validation\Rule;
+
+class VmFirewallController extends Controller
+{
+    public function store(Request $request, Customer $vm, FirewallService $firewall): RedirectResponse
+    {
+        $this->authorize('manage', $vm);
+
+        $data = $request->validate([
+            'direction' => ['required', Rule::in(['in', 'out'])],
+            'action' => ['required', Rule::in(['ACCEPT', 'DROP', 'REJECT'])],
+            'protocol' => ['required', Rule::in(['tcp', 'udp', 'icmp'])],
+            'port' => ['nullable', 'string', 'max:32'],
+            'source' => ['nullable', 'string', 'max:64'],
+        ]);
+
+        $vm->firewallRules()->create([
+            ...$data,
+            'sort_order' => $vm->firewallRules()->count(),
+        ]);
+
+        try {
+            $firewall->syncToProxmox($vm);
+        } catch (\Throwable $e) {
+            return back()->with('warning', 'Regel gespeichert, Proxmox-Sync fehlgeschlagen: '.$e->getMessage());
+        }
+
+        return back()->with('success', 'Firewall-Regel hinzugefügt.');
+    }
+
+    public function destroy(Customer $vm, int $rule, FirewallService $firewall): RedirectResponse
+    {
+        $this->authorize('manage', $vm);
+        $vm->firewallRules()->whereKey($rule)->delete();
+
+        try {
+            $firewall->syncToProxmox($vm);
+        } catch (\Throwable) {
+            //
+        }
+
+        return back()->with('success', 'Regel entfernt.');
+    }
+}