queueable actions

This commit is contained in:
2025-04-07 12:15:54 +01:00
parent 9e826e5f18
commit ce8b201a1c
7 changed files with 168 additions and 50 deletions

View File

@@ -0,0 +1,30 @@
<?php
namespace App\Actions\FirewallRules;
use App\Enums\FirewallRuleStatus;
use App\Models\FirewallRule;
use Spatie\QueueableAction\QueueableAction;
class InstallFirewallRule
{
use QueueableAction;
public function execute(
FirewallRule $firewallRule,
) {
$ssh = $firewallRule->server->sshClient();
$result = $ssh->execute($firewallRule->command());
if (! $result->isSuccessful()) {
$firewallRule->update([
'status' => FirewallRuleStatus::FAILED,
]);
return;
}
$firewallRule->update([
'status' => FirewallRuleStatus::INSTALLED,
]);
}
}

View File

@@ -0,0 +1,30 @@
<?php
namespace App\Actions\FirewallRules;
use App\Enums\FirewallRuleStatus;
use App\Models\FirewallRule;
use Spatie\QueueableAction\QueueableAction;
class UninstallFirewallRule
{
use QueueableAction;
public function execute(
FirewallRule $firewallRule,
) {
$ssh = $firewallRule->server->sshClient();
$result = $ssh->execute($firewallRule->command(true));
if (! $result->isSuccessful()) {
$firewallRule->update([
'status' => FirewallRuleStatus::FAILED,
]);
return;
}
$firewallRule->update([
'status' => FirewallRuleStatus::UNINSTALLED,
]);
}
}

View File

@@ -8,8 +8,8 @@ enum FirewallRuleStatus: string
{
use Arrayable;
case NOT_APPLIED = 'not-applied';
case APPLIED = 'applied';
case UNINSTALLED = 'uninstalled';
case INSTALLED = 'installed';
case FAILED = 'failed';
case REMOVED = 'removed';
}

View File

@@ -0,0 +1,9 @@
<?php
namespace App\Enums;
enum FirewallRuleType: string
{
case ALLOW = 'allow';
case DENY = 'deny';
}

View File

@@ -2,7 +2,9 @@
namespace App\Models;
use App\Actions\FirewallRules\InstallFirewallRule;
use App\Enums\FirewallRuleStatus;
use App\Enums\FirewallRuleType;
use Illuminate\Database\Eloquent\Model;
use Illuminate\Database\Eloquent\Relations\BelongsTo;
@@ -15,7 +17,7 @@ class FirewallRule extends Model
parent::boot();
static::created(function (self $firewallRule) {
$firewallRule->install();
app(InstallFirewallRule::class)->execute($firewallRule);
});
}
@@ -23,6 +25,7 @@ class FirewallRule extends Model
{
return [
'status' => FirewallRuleStatus::class,
'type' => FirewallRuleType::class,
];
}
@@ -31,12 +34,14 @@ class FirewallRule extends Model
return $this->belongsTo(Server::class);
}
public function install(): void
public function command(bool $delete = false): string
{
$ssh = $this->server->sshClient();
$command = "ufw";
if ($delete) {
$command .= " delete";
}
if ($this->type === 'allow') {
$command .= " allow";
} elseif ($this->type === 'deny') {
@@ -50,48 +55,6 @@ class FirewallRule extends Model
$command .= " {$this->ports}";
$result = $ssh->execute($command);
if (! $result->isSuccessful()) {
$this->update([
'status' => FirewallRuleStatus::FAILED,
]);
return;
}
$this->update([
'status' => FirewallRuleStatus::APPLIED,
]);
}
public function remove(): void
{
$ssh = $this->server->sshClient();
$command = "ufw";
if ($this->type === 'allow') {
$command .= " delete allow";
} elseif ($this->type === 'deny') {
$command .= " delete deny";
}
if ($this->from) {
$command .= " from {$this->from}";
$command .= " to any port";
}
$command .= " {$this->ports}";
$result = $ssh->execute($command);
if (! $result->isSuccessful()) {
$this->update([
'status' => FirewallRuleStatus::FAILED,
]);
return;
}
$this->update([
'status' => FirewallRuleStatus::REMOVED,
]);
return $command;
}
}