Change config file name

.vs/ProjectSettings.json

@@ -0,0 +1,3 @@
+{
+  "CurrentProjectSetting": null
+}

CHANGELOG.md

@@ -1,5 +1,30 @@
 # OpenVPN-Admin Version History
 
+## 1.0.0
+- Upgrade UI from Bootstrap 3 to Bootstrap 5 with Bootstrap Icons (CDN-based; removes Bower/npm dependency entirely)
+- Replace x-editable inline editing with Bootstrap 5 modal-based row editing
+- Add live connection dashboard (polls OpenVPN status log every 10 seconds)
+- Add per-user certificate management: generate, revoke, download `.ovpn`, email config
+- Add role-based admin access: `super-admin` (full control) and `read-only`
+- Add SMTP configuration page with send-test functionality
+- Add email notification toggles: on-connect, on-disconnect, account-expiry
+- Add `include/mailer.php`: lightweight zero-dependency PHP SMTP client
+- Add `include/notify.php`: CLI script called by OpenVPN connect/disconnect hooks
+- Add `sql/schema-10.sql`: admin role column, `smtp_settings` table, fix missing admin columns
+- Fix `install.sh`: remove PHP 7.4 forcing; use system PHP; fix OpenVPN 2.5+ genkey syntax;
+  fix `iptables-save`; fix IP forwarding persistence via `sysctl.d`; fix hardcoded `eth0`;
+  detect MySQL vs MariaDB; add sudoers entry for EasyRSA; add 64-bit Raspberry Pi OS detection;
+  remove Bower/nodejs/npm; fix `apt-get upgrade` removal; add `systemctl enable`
+- Fix `online-install.sh`: remove non-ASCII chars from ASCII art; fix RPi 64-bit detection;
+  guard `needrestart` edit; remove `apt-get upgrade`; handle existing clone directory; add `set -e`
+- Fix `uninstall.sh`: add colors; fix MySQL socket auth; fix hardcoded `eth0`; fix `iptables-save`;
+  fix sysctl cleanup; stop/disable OpenVPN service before file removal; clean up all new artifacts
+  (sudoers, log dir, iptables persistence file, Apache conf); fix PHP timezone revert
+- Fix `update.sh`: add colors; add pre-update backup; fix `stat` for user/group detection;
+  add sudoers and log dir creation for existing installs; patch `server.conf` for OpenVPN 2.5+;
+  add Apache reload; add OpenVPN restart when server.conf changes
+- Connect and disconnect scripts now call `notify.php` for email alerts
+
 ## 0.3.2
 - Fix with MySQL NO_ZERO_DATE mode
 

README.md

@@ -1,96 +1,178 @@
 # OpenVPN Admin
 
-## Summary
-Administrate its OpenVPN with a web interface (logs visualisations, users managing...) and a SQL database.
+A web-based administration panel for OpenVPN servers — manage users, certificates, logs, and settings through a modern browser interface.
 
-![Previsualisation configuration](https://lutim.cpy.re/fUq2rxqz)
-![Previsualisation administration](https://lutim.cpy.re/wwYMkHcM)
+---
 
+## Features
 
-## Prerequisite
+| Feature | Description |
+|---|---|
+| **Live Dashboard** | Real-time table of connected clients with IP, bandwidth, and session duration |
+| **User Management** | Add, edit, enable/disable, and delete VPN users with expiry dates |
+| **Certificate Management** | Generate and revoke per-user certificates via EasyRSA; download individual `.ovpn` files |
+| **Connection Logs** | Aggregated session history with data transferred per user |
+| **Role-based Admin Access** | `super-admin` (full control) and `read-only` roles for web panel admins |
+| **Email Notifications** | SMTP configuration with optional alerts on user connect, disconnect, or account expiry |
+| **Client Configs** | Edit and version-history GNU/Linux, Windows, and macOS `.ovpn` templates in-browser |
+| **Modern UI** | Bootstrap 5 interface with dark sidebar, stats cards, and responsive layout |
 
-  * GNU/Linux with Bash and root access
-  * Fresh install of OpenVPN
-  * Web server (NGinx, Apache...)
-  * MySQL
-  * PHP >= 5.5 with modules:
-    * zip
-    * pdo_mysql
-  * bower
-  * unzip
-  * wget
-  * sed
-  * curl
+---
 
-### Debian 8 Jessie
+## Supported Platforms
 
-````
-# apt-get install openvpn apache2 php5-mysql mysql-server php5 nodejs unzip git wget sed npm curl
-# npm install -g bower
-# ln -s /usr/bin/nodejs /usr/bin/node
-````
+| OS | Versions |
+|---|---|
+| Ubuntu Server | 22.04 LTS, 24.04 LTS |
+| Debian | 11 (Bullseye), 12 (Bookworm) |
+| Raspberry Pi OS | 32-bit and 64-bit (Bullseye / Bookworm) |
 
-### Debian 9 Stretch
+> The installer auto-detects your OS, PHP version, and database engine (MySQL or MariaDB). No manual configuration required.
 
-In order to install `npm`, [stretch-backports need to be added to your sources.list](https://backports.debian.org/Instructions/#index2h2).
+---
 
-````
-# apt-get install -t stretch-backports npm nodejs
-# apt-get install openvpn apache2 php-mysql mysql-server php-zip php unzip git wget sed curl
-# npm install -g bower
-````
+## Installation
 
-### CentOS 7
+### Automatic (one-liner)
 
-````
-# yum install epel-release
-# yum install openvpn httpd php-mysql mariadb-server php nodejs unzip git wget sed npm
-# npm install -g bower
-# systemctl enable mariadb
-# systemctl start mariadb
-````
+```bash
+wget -O - https://raw.githubusercontent.com/arvage/OpenVPN-Admin/master/online-install.sh | bash
+```
 
-### Other distribution... (PR welcome)
+### Manual
 
-## Tests
+```bash
+sudo apt update && sudo apt install -y git
+git clone https://github.com/arvage/OpenVPN-Admin ~/openvpn-admin
+cd ~/openvpn-admin
+sudo ./install.sh /var/www www-data www-data
+```
 
-Only tested on Debian Jessie. Feel free to open issues.
+### First-time setup
 
-## Installation
+Once the installer finishes, open a browser and go to:
+
+```
+http://<your-server-ip>/index.php?installation
+```
+
+Create your first admin account there. The page will redirect to the admin panel when done.
+
+---
+
+## Admin Panel
+
+After logging in at `http://<your-server-ip>/`, the sidebar gives access to:
 
-  * Setup OpenVPN and the web application:
+### Dashboard
+Live table of currently connected VPN clients — username, real IP address, bytes received/sent, and connection time. Refreshes every 10 seconds automatically.
 
-        $ cd ~/my_coding_workspace
-        $ git clone https://github.com/Chocobozzz/OpenVPN-Admin openvpn-admin
-        $ cd openvpn-admin
-        # ./install.sh /var/www www-data www-data
+### Users
+Full user management: add users, reset passwords, set start/end dates, enable or disable accounts. Rows with expired end dates are highlighted automatically.
 
-  * Setup the web server (Apache, NGinx...) to serve the web application.
-  * Create the admin of the web application by visiting `http://your-installation/index.php?installation`
+### Certificates
+Per-user certificate management backed by EasyRSA:
+- **Generate** a certificate for a user (runs `easyrsa build-client-full`)
+- **Revoke** a certificate (runs `easyrsa revoke` + `gen-crl`)
+- **Download** a ready-to-use `.ovpn` file with the user's certificate embedded inline
+- **Email** the `.ovpn` file directly to the user (requires SMTP to be configured)
 
-## Usage
+> The installer automatically grants `www-data` passwordless sudo access to `easyrsa` via `/etc/sudoers.d/openvpn-admin`.
 
-  * Start OpenVPN on the server (for example `systemctl start openvpn@server`)
-  * Connect to the web application as an admin
-  * Create an user
-  * User get the configurations files via the web application (and put them in */etc/openvpn*)
-  * Users on GNU/Linux systems, run `chmod +x /etc/openvpn/update-resolv.sh` as root
-  * User run OpenVPN (for example `systemctl start openvpn@client`)
+### Logs
+Aggregated connection history per user: total sessions, data transferred, and last seen timestamp. Server-side paginated for large datasets.
+
+### Admins
+Manage web panel admin accounts. Each admin has a **role**:
+- `super-admin` — full read/write access to all pages
+- `read-only` — can view all pages but cannot make changes
+
+### Configs
+Edit the raw OpenVPN client configuration templates for GNU/Linux, Windows, and macOS directly in the browser. Changes are saved with a version history so you can review or restore previous configs.
+
+### Settings → SMTP
+Configure outgoing email:
+- SMTP host, port, username, password
+- Security: STARTTLS, SSL/TLS, or none
+- Send a test email to verify settings
+
+### Settings → Notifications
+Toggle email alerts sent to the user's registered address:
+- **On Connect** — email when the user connects to VPN
+- **On Disconnect** — email when the user disconnects
+- **Account Expiry** — email 7 days before the account's end date
+
+> Connect/disconnect notifications require the OpenVPN server scripts to be in place. The installer sets this up automatically via `/etc/openvpn/scripts/connect.sh` and `disconnect.sh`.
+
+---
 
 ## Update
 
-    $ git pull origin master
-    # ./update.sh /var/www
+```bash
+cd ~/openvpn-admin
+git pull origin master
+sudo ./update.sh /var/www
+```
+
+`update.sh` will:
+- Back up the current installation to `/root/openvpn-admin-backup-<timestamp>.tar.gz`
+- Copy updated web application files
+- Apply any pending database migrations automatically
+- Patch `server.conf` for OpenVPN 2.5+ compatibility if needed
+- Add missing infrastructure (sudoers entry, log directory) for existing installs
+- Reload Apache and restart OpenVPN if config changed
+
+---
+
+## Uninstall
+
+Removes all installed components: OpenVPN keys and configuration, the web application, the MySQL/MariaDB database and user, iptables NAT rules, the Apache virtual host, and sysctl forwarding settings.
+
+```bash
+sudo ./uninstall.sh /var/www
+```
+
+The script will show a full list of what will be deleted and require you to type `yes` to confirm. Installed packages (`openvpn`, `apache2`, `mysql`/`mariadb`, `php`) are **not** removed.
+
+---
+
+## How It Works
+
+```
+Browser ──► Apache ──► PHP (index.php / grids.php)
+                          │
+                          ├── MySQL/MariaDB  (users, admins, logs, SMTP config)
+                          ├── /etc/openvpn/  (server.conf, certs, client configs)
+                          └── /var/log/openvpn/openvpn-status.log  (live dashboard)
+
+OpenVPN server ──► connect.sh / disconnect.sh
+                          │
+                          └── notify.php  (sends email alerts via SMTP)
+```
+
+Users authenticate to OpenVPN with username + password (no client certificate required by default). The `login.sh` script validates credentials against the database. The certificate management feature generates optional per-user certs for environments that require them.
+
+---
+
+## Libraries Used
+
+All frontend libraries are loaded from CDN — no build tools or package managers required.
+
+| Library | Version | Purpose |
+|---|---|---|
+| [Bootstrap](https://getbootstrap.com/) | 5.3 | UI framework |
+| [Bootstrap Icons](https://icons.getbootstrap.com/) | 1.11 | Icon set |
+| [Bootstrap Table](https://bootstrap-table.wenzhixin.net.cn/) | 1.22 | Data grids with pagination and filtering |
+| [jQuery](https://jquery.com/) | 3.7 | DOM and AJAX |
 
-## Desinstall
-It will remove all installed components (OpenVPN keys and configurations, the web application, iptables rules...).
+---
 
-    # ./desinstall.sh /var/www
+## Reporting Issues
 
-## Use of
+Please open an issue at [github.com/arvage/OpenVPN-Admin/issues](https://github.com/arvage/OpenVPN-Admin/issues) and include:
 
-  * [Bootstrap](https://github.com/twbs/bootstrap)
-  * [Bootstrap Table](http://bootstrap-table.wenzhixin.net.cn/)
-  * [Bootstrap Datepicker](https://github.com/eternicode/bootstrap-datepicker)
-  * [JQuery](https://jquery.com/)
-  * [X-editable](https://github.com/vitalets/x-editable)
+- OS and version
+- PHP version (`php -v`)
+- MySQL/MariaDB version (`mysql --version`)
+- The error message or unexpected behaviour
+- Relevant Apache/PHP logs (`/var/log/apache2/error.log`)