first commit

Co-authored-by: Cursor <cursoragent@cursor.com>

app/models.py

@@ -0,0 +1,79 @@
+from datetime import datetime
+from enum import Enum
+
+from sqlalchemy import Boolean, DateTime, ForeignKey, Integer, String, Text, UniqueConstraint, func
+from sqlalchemy.orm import Mapped, mapped_column, relationship
+
+from app.database import Base
+
+
+class Protocol(str, Enum):
+    WIREGUARD = "wireguard"
+    AWG2 = "awg2"
+
+
+class UserRole(str, Enum):
+    ADMIN = "admin"
+
+
+class AdminUser(Base):
+    __tablename__ = "admin_users"
+
+    id: Mapped[int] = mapped_column(Integer, primary_key=True)
+    username: Mapped[str] = mapped_column(String(64), unique=True, index=True)
+    email: Mapped[str] = mapped_column(String(255), unique=True)
+    password_hash: Mapped[str] = mapped_column(String(255))
+    role: Mapped[str] = mapped_column(String(32), default=UserRole.ADMIN.value)
+    is_active: Mapped[bool] = mapped_column(Boolean, default=True)
+    created_at: Mapped[datetime] = mapped_column(DateTime(timezone=True), server_default=func.now())
+
+
+class VpnServer(Base):
+    __tablename__ = "vpn_servers"
+
+    id: Mapped[int] = mapped_column(Integer, primary_key=True)
+    name: Mapped[str] = mapped_column(String(120))
+    protocol: Mapped[str] = mapped_column(String(32), index=True)
+    public_host: Mapped[str] = mapped_column(String(255))
+    public_port: Mapped[int] = mapped_column(Integer)
+    interface_name: Mapped[str] = mapped_column(String(32))
+    subnet: Mapped[str] = mapped_column(String(64))
+    dns: Mapped[str] = mapped_column(String(255), default="1.1.1.1")
+    server_private_key: Mapped[str] = mapped_column(Text)
+    server_public_key: Mapped[str] = mapped_column(Text)
+    # AmneziaWG 2.0 obfuscation params (ignored for plain WireGuard)
+    jc: Mapped[int | None] = mapped_column(Integer, nullable=True)
+    jmin: Mapped[int | None] = mapped_column(Integer, nullable=True)
+    jmax: Mapped[int | None] = mapped_column(Integer, nullable=True)
+    s1: Mapped[int | None] = mapped_column(Integer, nullable=True)
+    s2: Mapped[int | None] = mapped_column(Integer, nullable=True)
+    h1: Mapped[int | None] = mapped_column(Integer, nullable=True)
+    h2: Mapped[int | None] = mapped_column(Integer, nullable=True)
+    h3: Mapped[int | None] = mapped_column(Integer, nullable=True)
+    h4: Mapped[int | None] = mapped_column(Integer, nullable=True)
+    is_enabled: Mapped[bool] = mapped_column(Boolean, default=True)
+    created_at: Mapped[datetime] = mapped_column(DateTime(timezone=True), server_default=func.now())
+
+    clients: Mapped[list["VpnClient"]] = relationship(back_populates="server", cascade="all, delete-orphan")
+
+
+class VpnClient(Base):
+    __tablename__ = "vpn_clients"
+    __table_args__ = (UniqueConstraint("server_id", "name", name="uq_client_name_per_server"),)
+
+    id: Mapped[int] = mapped_column(Integer, primary_key=True)
+    server_id: Mapped[int] = mapped_column(ForeignKey("vpn_servers.id", ondelete="CASCADE"), index=True)
+    name: Mapped[str] = mapped_column(String(120))
+    private_key: Mapped[str] = mapped_column(Text)
+    public_key: Mapped[str] = mapped_column(Text)
+    preshared_key: Mapped[str] = mapped_column(Text)
+    address: Mapped[str] = mapped_column(String(64))
+    allowed_ips: Mapped[str] = mapped_column(String(255), default="0.0.0.0/0, ::/0")
+    is_enabled: Mapped[bool] = mapped_column(Boolean, default=True)
+    notes: Mapped[str | None] = mapped_column(Text, nullable=True)
+    created_at: Mapped[datetime] = mapped_column(DateTime(timezone=True), server_default=func.now())
+    updated_at: Mapped[datetime] = mapped_column(
+        DateTime(timezone=True), server_default=func.now(), onupdate=func.now()
+    )
+
+    server: Mapped[VpnServer] = relationship(back_populates="clients")