Initial import: nasmon health monitor, split out of home_nas

Go service (nasmon/) plus nfpm packaging (packaging/), carried over from the home_nas monorepo. Adds rpm packaging alongside the existing deb build (Fedora/RHEL/Rocky dependency names via nfpm overrides, per-format systemd unit path, dpkg+rpm-compatible maintainer scripts) and a Gitea Actions workflow that builds both formats on every push. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-09-19 10:24:34 +03:00
commit 09159a5f31
61 changed files with 7882 additions and 0 deletions
@@ -0,0 +1,179 @@
+// Package shares manages SMB (Samba) and NFS exports: the definitions live in
+// /etc/nasmon/shares.json, from which nasmon generates /etc/samba/smb.conf and
+// /etc/exports.d/nasmon.exports and reloads the daemons.
+package shares
+
+import (
+	"encoding/json"
+	"errors"
+	"fmt"
+	"os"
+	"path/filepath"
+	"sort"
+	"sync"
+)
+
+type SMBShare struct {
+	Name         string   `json:"name"`
+	Path         string   `json:"path"`
+	Comment      string   `json:"comment"`
+	ReadOnly     bool     `json:"read_only"`
+	Guest        bool     `json:"guest"` // anyone on the LAN, no password
+	Users        []string `json:"users"` // SMB users allowed when Guest is false
+	Browseable   bool     `json:"browseable"`
+	HideSysFiles bool     `json:"hide_sys_files"` // veto ._*, .DS_Store, Thumbs.db, desktop.ini
+}
+
+type SMBConfig struct {
+	Enabled      bool       `json:"enabled"`
+	Workgroup    string     `json:"workgroup"`
+	ServerString string     `json:"server_string"`
+	Shares       []SMBShare `json:"shares"`
+}
+
+type NFSExport struct {
+	Path     string   `json:"path"`
+	Clients  []string `json:"clients"` // host, IP, CIDR or *
+	ReadOnly bool     `json:"read_only"`
+	Squash   string   `json:"squash"` // root | all | none
+	Async    bool     `json:"async"`
+}
+
+type NFSConfig struct {
+	Enabled bool        `json:"enabled"`
+	Exports []NFSExport `json:"exports"`
+}
+
+type Config struct {
+	SMB SMBConfig `json:"smb"`
+	NFS NFSConfig `json:"nfs"`
+}
+
+func Defaults() Config {
+	return Config{
+		SMB: SMBConfig{Enabled: true, Workgroup: "WORKGROUP", ServerString: "Home NAS"},
+		NFS: NFSConfig{Enabled: true},
+	}
+}
+
+// FindSMB returns the index of the share with that name, or -1.
+func (c *Config) FindSMB(name string) int {
+	for i, s := range c.SMB.Shares {
+		if s.Name == name {
+			return i
+		}
+	}
+	return -1
+}
+
+// FindNFS returns the index of the export for that path, or -1.
+func (c *Config) FindNFS(path string) int {
+	for i, e := range c.NFS.Exports {
+		if e.Path == path {
+			return i
+		}
+	}
+	return -1
+}
+
+func (c *Config) sortShares() {
+	sort.Slice(c.SMB.Shares, func(i, j int) bool { return c.SMB.Shares[i].Name < c.SMB.Shares[j].Name })
+	sort.Slice(c.NFS.Exports, func(i, j int) bool { return c.NFS.Exports[i].Path < c.NFS.Exports[j].Path })
+}
+
+// Validate checks the whole configuration (pure; no filesystem access).
+func (c *Config) Validate() error {
+	if err := ValidateWorkgroup(c.SMB.Workgroup); err != nil {
+		return err
+	}
+	seen := map[string]bool{}
+	for _, s := range c.SMB.Shares {
+		if err := s.Validate(); err != nil {
+			return err
+		}
+		if seen[s.Name] {
+			return fmt.Errorf("duplicate share name %s", s.Name)
+		}
+		seen[s.Name] = true
+	}
+	paths := map[string]bool{}
+	for _, e := range c.NFS.Exports {
+		if err := e.Validate(); err != nil {
+			return err
+		}
+		if paths[e.Path] {
+			return fmt.Errorf("duplicate NFS export %s", e.Path)
+		}
+		paths[e.Path] = true
+	}
+	return nil
+}
+
+// Store is a thread-safe holder for the share definitions backed by a file.
+type Store struct {
+	path string
+	mu   sync.RWMutex
+	cur  Config
+}
+
+func Load(path string) (*Store, error) {
+	st := &Store{path: path, cur: Defaults()}
+	b, err := os.ReadFile(path)
+	switch {
+	case errors.Is(err, os.ErrNotExist):
+		return st, nil
+	case err != nil:
+		return nil, err
+	}
+	if err := json.Unmarshal(b, &st.cur); err != nil {
+		return nil, fmt.Errorf("parse %s: %w", path, err)
+	}
+	st.cur.sortShares()
+	return st, nil
+}
+
+func (st *Store) Get() Config {
+	st.mu.RLock()
+	defer st.mu.RUnlock()
+	return st.cur.clone()
+}
+
+func (c Config) clone() Config {
+	out := c
+	out.SMB.Shares = make([]SMBShare, len(c.SMB.Shares))
+	for i, s := range c.SMB.Shares {
+		s.Users = append([]string(nil), s.Users...)
+		out.SMB.Shares[i] = s
+	}
+	out.NFS.Exports = make([]NFSExport, len(c.NFS.Exports))
+	for i, e := range c.NFS.Exports {
+		e.Clients = append([]string(nil), e.Clients...)
+		out.NFS.Exports[i] = e
+	}
+	return out
+}
+
+func (st *Store) Save(c Config) error {
+	if err := c.Validate(); err != nil {
+		return err
+	}
+	c.sortShares()
+	b, err := json.MarshalIndent(c, "", "  ")
+	if err != nil {
+		return err
+	}
+	st.mu.Lock()
+	defer st.mu.Unlock()
+	if err := os.MkdirAll(filepath.Dir(st.path), 0o755); err != nil {
+		return err
+	}
+	tmp := st.path + ".tmp"
+	if err := os.WriteFile(tmp, append(b, '\n'), 0o644); err != nil {
+		return err
+	}
+	if err := os.Rename(tmp, st.path); err != nil {
+		return err
+	}
+	st.cur = c.clone()
+	return nil
+}