🎈 Sync 2026-09-09 01:06:03

luci-app-haproxy-manager/root/usr/libexec/haproxy-manager/migrate

@@ -0,0 +1,150 @@
+#!/bin/sh
+set -eu
+. /usr/libexec/haproxy-manager/common.sh
+
+migrate_firewall_markers() {
+	local section marker name changed
+	changed=0
+
+	for section in $(uci -q show firewall | sed -n 's/^firewall\.\(@redirect\[[0-9][0-9]*\]\)=redirect/\1/p'); do
+		marker="$(uci -q get "firewall.$section.hm_disabled_by_haproxy_manager" 2>/dev/null || true)"
+		[ -n "$marker" ] || continue
+		if [ "$marker" = 1 ]; then
+			name="$(uci -q get "firewall.$section.name" 2>/dev/null || true)"
+			case "$name" in
+				"$FIREWALL_DISABLED_PREFIX"*) ;;
+				*) uci set "firewall.$section.name=$FIREWALL_DISABLED_PREFIX$name" ;;
+			esac
+		fi
+		uci -q delete "firewall.$section.hm_disabled_by_haproxy_manager" || true
+		changed=1
+	done
+
+	for section in $(uci -q show firewall | sed -n 's/^firewall\.\(@rule\[[0-9][0-9]*\]\)=rule/\1/p'); do
+		marker="$(uci -q get "firewall.$section.hm_managed" 2>/dev/null || true)"
+		[ -n "$marker" ] || continue
+		[ "$marker" != 1 ] || uci set "firewall.$section.name=$FIREWALL_RULE_NAME"
+		uci -q delete "firewall.$section.hm_managed" || true
+		changed=1
+	done
+
+	[ "$changed" != 1 ] || uci commit firewall
+}
+
+migrate_firewall_markers
+
+SCHEMA_VERSION="$(uci_get main schema_version 1)"
+MIGRATED=0
+if [ "$SCHEMA_VERSION" -lt 2 ] 2>/dev/null; then
+
+SECTIONS="$(route_sections)"
+[ -z "$SECTIONS" ] || /usr/libexec/haproxy-manager/backup >/dev/null
+
+CONSUMED=/tmp/haproxy-manager-migrate-consumed.$$
+: > "$CONSUMED"
+trap 'rm -f "$CONSUMED"' EXIT
+
+is_consumed() {
+	grep -qx "$1" "$CONSUMED"
+}
+
+to_web() {
+	local section="$1" http_enabled="$2" https_enabled="$3" http_backend="$4" https_backend="$5"
+
+	uci set "$CONFIG.$section.kind=web"
+	uci set "$CONFIG.$section.web_http=$http_enabled"
+	uci set "$CONFIG.$section.web_https=$https_enabled"
+	[ "$http_enabled" != 1 ] || uci set "$CONFIG.$section.backend_http_port=$http_backend"
+	[ "$https_enabled" != 1 ] || uci set "$CONFIG.$section.backend_https_port=$https_backend"
+	uci -q delete "$CONFIG.$section.protocol" || true
+	uci -q delete "$CONFIG.$section.listen_port" || true
+	uci -q delete "$CONFIG.$section.backend_port" || true
+}
+
+clean_web_name() {
+	local section="$1" host="$2" name clean
+	name="$(uci_get "$section" name)"
+	clean="$name"
+
+	case "$name" in
+		"$host 80"|"$host:80"|"$host HTTP"|"$host http") clean="$host" ;;
+		*" HTTP") clean="${name% HTTP}" ;;
+		*" http") clean="${name% http}" ;;
+	esac
+
+	[ -z "$clean" ] || [ "$clean" = "$name" ] || uci set "$CONFIG.$section.name=$clean"
+}
+
+for section in $SECTIONS; do
+	protocol="$(uci_get "$section" protocol)"
+	case "$protocol" in
+		http)
+			host="$(uci_get "$section" host)"
+			backend_host="$(uci_get "$section" backend_host)"
+			enabled="$(uci_get "$section" enabled 1)"
+			http_backend="$(uci_get "$section" backend_port 80)"
+			match=""
+
+			for candidate in $SECTIONS; do
+				is_consumed "$candidate" && continue
+				[ "$(uci_get "$candidate" protocol)" = https ] || continue
+				[ "$(uci_get "$candidate" host)" = "$host" ] || continue
+				[ "$(uci_get "$candidate" backend_host)" = "$backend_host" ] || continue
+				[ "$(uci_get "$candidate" enabled 1)" = "$enabled" ] || continue
+				match="$candidate"
+				break
+			done
+
+			if [ -n "$match" ]; then
+				clean_web_name "$section" "$host"
+				to_web "$section" 1 1 "$http_backend" "$(uci_get "$match" backend_port 443)"
+				printf '%s\n' "$match" >> "$CONSUMED"
+			else
+				clean_web_name "$section" "$host"
+				to_web "$section" 1 0 "$http_backend" 443
+			fi
+		;;
+		both)
+			backend="$(uci_get "$section" backend_port 80)"
+			clean_web_name "$section" "$(uci_get "$section" host)"
+			to_web "$section" 1 1 "$backend" "$backend"
+		;;
+		tcp)
+			public_port="$(uci_get "$section" listen_port "$(uci_get "$section" backend_port)")"
+			backend_port="$(uci_get "$section" backend_port)"
+			uci set "$CONFIG.$section.kind=custom"
+			uci -q delete "$CONFIG.$section.port_map" || true
+			uci add_list "$CONFIG.$section.port_map=$public_port:$backend_port"
+			uci -q delete "$CONFIG.$section.protocol" || true
+			uci -q delete "$CONFIG.$section.listen_port" || true
+			uci -q delete "$CONFIG.$section.backend_port" || true
+		;;
+	esac
+done
+
+for section in $SECTIONS; do
+	is_consumed "$section" && continue
+	[ "$(uci_get "$section" protocol)" = https ] || continue
+	to_web "$section" 0 1 80 "$(uci_get "$section" backend_port 443)"
+done
+
+sed -n 's/^@route\[\([0-9][0-9]*\)\]$/\1/p' "$CONSUMED" | sort -rn | while read -r index; do
+	uci -q delete "$CONFIG.@route[$index]" || true
+done
+	MIGRATED=1
+
+fi
+
+if [ "$SCHEMA_VERSION" -lt 3 ] 2>/dev/null; then
+	if [ "$(uci_get main enabled 0)" = 1 ] &&
+		grep -q '^# Generated by luci-app-haproxy-manager\.' "$HAPROXY_CFG" 2>/dev/null; then
+		uci set "$CONFIG.main.active_mode=generated"
+	else
+		uci set "$CONFIG.main.active_mode=none"
+	fi
+	uci set "$CONFIG.main.schema_version=3"
+	uci commit "$CONFIG"
+	MIGRATED=1
+fi
+
+[ "$MIGRATED" != 1 ] || echo "Configuration schema upgraded to version 3"