風雪
5fa916d982
security: restrict SQLite database filesystem permissions security: restrict SQLite database filesystem permissions security: restrict SQLite database filesystem permissions security: restrict SQLite database filesystem permissions security: restrict SQLite database filesystem permissions security: restrict SQLite database filesystem permissions security: restrict SQLite database filesystem permissions security: restrict SQLite database filesystem permissions security: restrict SQLite database filesystem permissions security: restrict SQLite database filesystem permissions security: restrict SQLite database filesystem permissions
44 lines
1.3 KiB
Go
44 lines
1.3 KiB
Go
package database
|
|
|
|
import (
|
|
"fmt"
|
|
"os"
|
|
"path/filepath"
|
|
|
|
"github.com/kazeyukiro/3m-ui/backend/internal/database/models"
|
|
"gorm.io/driver/sqlite"
|
|
"gorm.io/gorm"
|
|
)
|
|
|
|
var GlobalDB *gorm.DB
|
|
|
|
func InitDB(dbPath string) (*gorm.DB, error) {
|
|
dir := filepath.Dir(dbPath)
|
|
if err := os.MkdirAll(dir, 0700); err != nil {
|
|
return nil, fmt.Errorf("failed to create database directory: %w", err)
|
|
}
|
|
// The database contains password hashes, proxy credentials and subscription
|
|
// tokens. Do not leave it readable by other local users.
|
|
_ = os.Chmod(dir, 0700)
|
|
|
|
db, err := gorm.Open(sqlite.New(sqlite.Config{DriverName: sqliteDriverName, DSN: dbPath}), &gorm.Config{})
|
|
if err != nil {
|
|
return nil, fmt.Errorf("failed to connect to sqlite database: %w", err)
|
|
}
|
|
if err := os.Chmod(dbPath, 0600); err != nil {
|
|
return nil, fmt.Errorf("failed to secure database file: %w", err)
|
|
}
|
|
|
|
err = db.AutoMigrate(
|
|
&models.User{}, &models.Listener{}, &models.ListenerUser{}, &models.ListenerVersion{},
|
|
&models.ListenerTemplate{}, &models.Subscription{}, &models.AccessToken{}, &models.Config{},
|
|
&models.ProxyUser{}, &models.TrafficRecord{}, &models.PanelSetting{}, &models.RemoteServer{},
|
|
)
|
|
if err != nil {
|
|
return nil, fmt.Errorf("failed to run database auto-migration: %w", err)
|
|
}
|
|
|
|
GlobalDB = db
|
|
return db, nil
|
|
}
|