feat: server management (Feature 1)

routers/maintenance.py

@@ -7,8 +7,10 @@ Server-Wartung hinein (siehe Roadmap: Server-Management).
 """
 
 import shlex
+import subprocess
 
 from fastapi import APIRouter, Depends, HTTPException
+from pydantic import BaseModel
 
 from auth import auth
 from config import UPDATE_CMD
@@ -16,6 +18,8 @@ from jobengine import start_job
 
 router = APIRouter(prefix="/api", dependencies=[Depends(auth)])
 
+class PwdReq(BaseModel):
+    password: str
 
 @router.post("/update")
 def update():
@@ -23,3 +27,22 @@ def update():
         raise HTTPException(400, "Kein Update-Befehl gesetzt (MC_UPDATE_CMD).")
     job_id = start_job(shlex.split(UPDATE_CMD), "update containers")
     return {"job_id": job_id}
+
+@router.post("/os-update")
+def os_update(req: PwdReq):
+    cmd = f"echo {shlex.quote(req.password)} | sudo -S bash -c 'apt-get update && DEBIAN_FRONTEND=noninteractive apt-get upgrade -y'"
+    job_id = start_job(["bash", "-c", cmd], "os update")
+    return {"job_id": job_id}
+
+@router.post("/service/{name}/restart")
+def service_restart(name: str):
+    if name not in ("llama-swap", "mission-control"):
+        raise HTTPException(400, "Dienst nicht erlaubt.")
+    subprocess.Popen(["sudo", "systemctl", "restart", name])
+    return {"ok": True, "note": f"Restart {name} getriggert."}
+
+@router.post("/reboot")
+def reboot(req: PwdReq):
+    cmd = f"echo {shlex.quote(req.password)} | sudo -S reboot"
+    subprocess.Popen(["bash", "-c", cmd])
+    return {"ok": True, "note": "Reboot getriggert."}