Files
vpn/app/models.py
T

93 lines
4.5 KiB
Python

from datetime import datetime
from enum import Enum
from sqlalchemy import Boolean, DateTime, ForeignKey, Integer, String, Text, UniqueConstraint, func
from sqlalchemy.orm import Mapped, mapped_column, relationship
from app.database import Base
class Protocol(str, Enum):
WIREGUARD = "wireguard"
AWG2 = "awg2"
class UserRole(str, Enum):
ADMIN = "admin"
class AdminUser(Base):
__tablename__ = "admin_users"
id: Mapped[int] = mapped_column(Integer, primary_key=True)
username: Mapped[str] = mapped_column(String(64), unique=True, index=True)
email: Mapped[str] = mapped_column(String(255), unique=True)
password_hash: Mapped[str] = mapped_column(String(255))
role: Mapped[str] = mapped_column(String(32), default=UserRole.ADMIN.value)
is_active: Mapped[bool] = mapped_column(Boolean, default=True)
created_at: Mapped[datetime] = mapped_column(DateTime(timezone=True), server_default=func.now())
class VpnServer(Base):
__tablename__ = "vpn_servers"
id: Mapped[int] = mapped_column(Integer, primary_key=True)
name: Mapped[str] = mapped_column(String(120))
protocol: Mapped[str] = mapped_column(String(32), index=True)
public_host: Mapped[str] = mapped_column(String(255))
public_port: Mapped[int] = mapped_column(Integer)
interface_name: Mapped[str] = mapped_column(String(32))
subnet: Mapped[str] = mapped_column(String(64))
dns: Mapped[str] = mapped_column(String(255), default="1.1.1.1")
server_private_key: Mapped[str] = mapped_column(Text)
server_public_key: Mapped[str] = mapped_column(Text)
# SSH access to the VPS
ssh_host: Mapped[str | None] = mapped_column(String(255), nullable=True)
ssh_port: Mapped[int] = mapped_column(Integer, default=22)
ssh_username: Mapped[str | None] = mapped_column(String(128), nullable=True)
ssh_password: Mapped[str | None] = mapped_column(Text, nullable=True)
ssh_private_key: Mapped[str | None] = mapped_column(Text, nullable=True)
ssh_server_info: Mapped[str | None] = mapped_column(Text, nullable=True)
ssh_reachable: Mapped[bool] = mapped_column(Boolean, default=False)
ssh_last_checked: Mapped[datetime | None] = mapped_column(DateTime(timezone=True), nullable=True)
# AmneziaWG 2.0 obfuscation params (ignored for plain WireGuard)
jc: Mapped[int | None] = mapped_column(Integer, nullable=True)
jmin: Mapped[int | None] = mapped_column(Integer, nullable=True)
jmax: Mapped[int | None] = mapped_column(Integer, nullable=True)
s1: Mapped[int | None] = mapped_column(Integer, nullable=True)
s2: Mapped[int | None] = mapped_column(Integer, nullable=True)
s3: Mapped[int | None] = mapped_column(Integer, nullable=True)
s4: Mapped[int | None] = mapped_column(Integer, nullable=True)
h1: Mapped[int | None] = mapped_column(Integer, nullable=True)
h2: Mapped[int | None] = mapped_column(Integer, nullable=True)
h3: Mapped[int | None] = mapped_column(Integer, nullable=True)
h4: Mapped[int | None] = mapped_column(Integer, nullable=True)
mtu: Mapped[int] = mapped_column(Integer, default=1420)
vpn_installed: Mapped[bool] = mapped_column(Boolean, default=False)
is_enabled: Mapped[bool] = mapped_column(Boolean, default=True)
created_at: Mapped[datetime] = mapped_column(DateTime(timezone=True), server_default=func.now())
clients: Mapped[list["VpnClient"]] = relationship(back_populates="server", cascade="all, delete-orphan")
class VpnClient(Base):
__tablename__ = "vpn_clients"
__table_args__ = (UniqueConstraint("server_id", "name", name="uq_client_name_per_server"),)
id: Mapped[int] = mapped_column(Integer, primary_key=True)
server_id: Mapped[int] = mapped_column(ForeignKey("vpn_servers.id", ondelete="CASCADE"), index=True)
name: Mapped[str] = mapped_column(String(120))
private_key: Mapped[str] = mapped_column(Text)
public_key: Mapped[str] = mapped_column(Text)
preshared_key: Mapped[str] = mapped_column(Text)
address: Mapped[str] = mapped_column(String(64))
allowed_ips: Mapped[str] = mapped_column(String(255), default="0.0.0.0/0, ::/0")
is_enabled: Mapped[bool] = mapped_column(Boolean, default=True)
notes: Mapped[str | None] = mapped_column(Text, nullable=True)
created_at: Mapped[datetime] = mapped_column(DateTime(timezone=True), server_default=func.now())
updated_at: Mapped[datetime] = mapped_column(
DateTime(timezone=True), server_default=func.now(), onupdate=func.now()
)
server: Mapped[VpnServer] = relationship(back_populates="clients")