74b7f61437
- after_request hook sets X-Content-Type-Options=nosniff, X-Frame-Options=DENY, Referrer-Policy=strict-origin-when-cross-origin, and a strict CSP (default-src 'self', script-src self+nonce, frame-ancestors 'none', form-action 'self'); HSTS added on secure non-test responses - per-request CSP nonce minted in g.csp_nonce; servers.html's inline showModal script picks it up - 404 and 500 handlers return short plain-text responses so a misbehaving deployment can't leak tracebacks via Werkzeug's debug page
85 lines
3.1 KiB
HTML
85 lines
3.1 KiB
HTML
{% extends "base.html" %}
|
|
|
|
{% block title %}Servers | left4me{% endblock %}
|
|
|
|
{% block content %}
|
|
<section class="panel">
|
|
<div class="page-heading">
|
|
<h1>Servers</h1>
|
|
{% if blueprints %}
|
|
<button type="button" data-modal-open="create-server-modal">+ Create</button>
|
|
{% else %}
|
|
<a class="button" href="/blueprints">Create a blueprint first →</a>
|
|
{% endif %}
|
|
</div>
|
|
<table class="table">
|
|
<thead><tr><th>Name</th><th>Port</th><th>Blueprint</th><th>Desired</th><th>Actual</th><th>Live</th></tr></thead>
|
|
<tbody>
|
|
{% for server, blueprint in rows %}
|
|
{% set ls = live_state_by_server.get(server.id) %}
|
|
<tr>
|
|
<td><a href="/servers/{{ server.id }}">{{ server.name }}</a></td>
|
|
<td>{{ server.port }}</td>
|
|
<td><a href="/blueprints/{{ blueprint.id }}">{{ blueprint.name }}</a></td>
|
|
<td>{{ server.desired_state }}</td>
|
|
<td>{{ server.actual_state }}</td>
|
|
<td class="server-live">
|
|
{% if server.actual_state != 'running' %}
|
|
<span class="muted">—</span>
|
|
{% elif ls is none or not ls.fresh %}
|
|
<span class="muted" title="no recent data">?</span>
|
|
{% elif ls.hibernating %}
|
|
{{ ls.players }}/{{ ls.max_players }} · idle · {{ ls.map }}
|
|
{% else %}
|
|
{{ ls.players }}/{{ ls.max_players }} · {{ ls.map }}
|
|
{% endif %}
|
|
</td>
|
|
</tr>
|
|
{% else %}
|
|
<tr><td colspan="6" class="muted">No servers configured.</td></tr>
|
|
{% endfor %}
|
|
</tbody>
|
|
</table>
|
|
</section>
|
|
|
|
{% if blueprints %}
|
|
<dialog id="create-server-modal" class="modal" aria-labelledby="create-server-title">
|
|
<form method="post" action="/servers" class="stack">
|
|
<div class="modal-header">
|
|
<h2 id="create-server-title">Create server</h2>
|
|
<button type="button" class="modal-close" data-modal-close aria-label="Close">×</button>
|
|
</div>
|
|
<div class="modal-body">
|
|
<input type="hidden" name="csrf_token" value="{{ session.get('csrf_token', '') }}">
|
|
<label>Name <input name="name" required maxlength="128"></label>
|
|
<label>Port
|
|
<input name="port" type="number" min="1" max="65535" placeholder="auto">
|
|
<span class="field-hint">Leave empty for the next available port.</span>
|
|
</label>
|
|
<label>Blueprint
|
|
<select name="blueprint_id" required>
|
|
{% for blueprint in blueprints %}
|
|
<option value="{{ blueprint.id }}"{% if blueprint.id == prefill_blueprint_id %} selected{% endif %}>{{ blueprint.name }}</option>
|
|
{% endfor %}
|
|
</select>
|
|
</label>
|
|
</div>
|
|
<div class="modal-footer">
|
|
<button type="button" class="button-secondary" data-modal-close>Cancel</button>
|
|
<button type="submit">Create server</button>
|
|
</div>
|
|
</form>
|
|
</dialog>
|
|
{% endif %}
|
|
|
|
{% if prefill_blueprint_id %}
|
|
<script nonce="{{ g.csp_nonce }}">
|
|
document.addEventListener("DOMContentLoaded", () => {
|
|
const dialog = document.getElementById("create-server-modal");
|
|
if (dialog && typeof dialog.showModal === "function") {
|
|
dialog.showModal();
|
|
}
|
|
});
|
|
</script>
|
|
{% endif %}
|
|
{% endblock %}
|