queueable actions
This commit is contained in:
30
app/Actions/FirewallRules/InstallFirewallRule.php
Normal file
30
app/Actions/FirewallRules/InstallFirewallRule.php
Normal file
@@ -0,0 +1,30 @@
|
||||
<?php
|
||||
|
||||
namespace App\Actions\FirewallRules;
|
||||
|
||||
use App\Enums\FirewallRuleStatus;
|
||||
use App\Models\FirewallRule;
|
||||
use Spatie\QueueableAction\QueueableAction;
|
||||
|
||||
class InstallFirewallRule
|
||||
{
|
||||
use QueueableAction;
|
||||
|
||||
public function execute(
|
||||
FirewallRule $firewallRule,
|
||||
) {
|
||||
$ssh = $firewallRule->server->sshClient();
|
||||
$result = $ssh->execute($firewallRule->command());
|
||||
|
||||
if (! $result->isSuccessful()) {
|
||||
$firewallRule->update([
|
||||
'status' => FirewallRuleStatus::FAILED,
|
||||
]);
|
||||
return;
|
||||
}
|
||||
|
||||
$firewallRule->update([
|
||||
'status' => FirewallRuleStatus::INSTALLED,
|
||||
]);
|
||||
}
|
||||
}
|
||||
30
app/Actions/FirewallRules/UninstallFirewallRule.php
Normal file
30
app/Actions/FirewallRules/UninstallFirewallRule.php
Normal file
@@ -0,0 +1,30 @@
|
||||
<?php
|
||||
|
||||
namespace App\Actions\FirewallRules;
|
||||
|
||||
use App\Enums\FirewallRuleStatus;
|
||||
use App\Models\FirewallRule;
|
||||
use Spatie\QueueableAction\QueueableAction;
|
||||
|
||||
class UninstallFirewallRule
|
||||
{
|
||||
use QueueableAction;
|
||||
|
||||
public function execute(
|
||||
FirewallRule $firewallRule,
|
||||
) {
|
||||
$ssh = $firewallRule->server->sshClient();
|
||||
$result = $ssh->execute($firewallRule->command(true));
|
||||
|
||||
if (! $result->isSuccessful()) {
|
||||
$firewallRule->update([
|
||||
'status' => FirewallRuleStatus::FAILED,
|
||||
]);
|
||||
return;
|
||||
}
|
||||
|
||||
$firewallRule->update([
|
||||
'status' => FirewallRuleStatus::UNINSTALLED,
|
||||
]);
|
||||
}
|
||||
}
|
||||
@@ -8,8 +8,8 @@ enum FirewallRuleStatus: string
|
||||
{
|
||||
use Arrayable;
|
||||
|
||||
case NOT_APPLIED = 'not-applied';
|
||||
case APPLIED = 'applied';
|
||||
case UNINSTALLED = 'uninstalled';
|
||||
case INSTALLED = 'installed';
|
||||
case FAILED = 'failed';
|
||||
case REMOVED = 'removed';
|
||||
}
|
||||
9
app/Enums/FirewallRuleType.php
Normal file
9
app/Enums/FirewallRuleType.php
Normal file
@@ -0,0 +1,9 @@
|
||||
<?php
|
||||
|
||||
namespace App\Enums;
|
||||
|
||||
enum FirewallRuleType: string
|
||||
{
|
||||
case ALLOW = 'allow';
|
||||
case DENY = 'deny';
|
||||
}
|
||||
@@ -2,7 +2,9 @@
|
||||
|
||||
namespace App\Models;
|
||||
|
||||
use App\Actions\FirewallRules\InstallFirewallRule;
|
||||
use App\Enums\FirewallRuleStatus;
|
||||
use App\Enums\FirewallRuleType;
|
||||
use Illuminate\Database\Eloquent\Model;
|
||||
use Illuminate\Database\Eloquent\Relations\BelongsTo;
|
||||
|
||||
@@ -15,7 +17,7 @@ class FirewallRule extends Model
|
||||
parent::boot();
|
||||
|
||||
static::created(function (self $firewallRule) {
|
||||
$firewallRule->install();
|
||||
app(InstallFirewallRule::class)->execute($firewallRule);
|
||||
});
|
||||
}
|
||||
|
||||
@@ -23,6 +25,7 @@ class FirewallRule extends Model
|
||||
{
|
||||
return [
|
||||
'status' => FirewallRuleStatus::class,
|
||||
'type' => FirewallRuleType::class,
|
||||
];
|
||||
}
|
||||
|
||||
@@ -31,12 +34,14 @@ class FirewallRule extends Model
|
||||
return $this->belongsTo(Server::class);
|
||||
}
|
||||
|
||||
public function install(): void
|
||||
public function command(bool $delete = false): string
|
||||
{
|
||||
$ssh = $this->server->sshClient();
|
||||
|
||||
$command = "ufw";
|
||||
|
||||
if ($delete) {
|
||||
$command .= " delete";
|
||||
}
|
||||
|
||||
if ($this->type === 'allow') {
|
||||
$command .= " allow";
|
||||
} elseif ($this->type === 'deny') {
|
||||
@@ -50,48 +55,6 @@ class FirewallRule extends Model
|
||||
|
||||
$command .= " {$this->ports}";
|
||||
|
||||
$result = $ssh->execute($command);
|
||||
|
||||
if (! $result->isSuccessful()) {
|
||||
$this->update([
|
||||
'status' => FirewallRuleStatus::FAILED,
|
||||
]);
|
||||
return;
|
||||
}
|
||||
$this->update([
|
||||
'status' => FirewallRuleStatus::APPLIED,
|
||||
]);
|
||||
}
|
||||
|
||||
public function remove(): void
|
||||
{
|
||||
$ssh = $this->server->sshClient();
|
||||
|
||||
$command = "ufw";
|
||||
|
||||
if ($this->type === 'allow') {
|
||||
$command .= " delete allow";
|
||||
} elseif ($this->type === 'deny') {
|
||||
$command .= " delete deny";
|
||||
}
|
||||
|
||||
if ($this->from) {
|
||||
$command .= " from {$this->from}";
|
||||
$command .= " to any port";
|
||||
}
|
||||
|
||||
$command .= " {$this->ports}";
|
||||
|
||||
$result = $ssh->execute($command);
|
||||
|
||||
if (! $result->isSuccessful()) {
|
||||
$this->update([
|
||||
'status' => FirewallRuleStatus::FAILED,
|
||||
]);
|
||||
return;
|
||||
}
|
||||
$this->update([
|
||||
'status' => FirewallRuleStatus::REMOVED,
|
||||
]);
|
||||
return $command;
|
||||
}
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user