feat(postgres): in-panel backup/restore and consistent CLI backend

Two PostgreSQL gaps on the panel:

1. x-ui setting and other CLI subcommands read XUI_DB_TYPE/XUI_DB_DSN from
   the process environment, which systemd injects via EnvironmentFile but a
   plain shell invocation does not. On a PostgreSQL install the CLI silently
   fell back to SQLite, so changes made from the management menu never
   reached the panel's database. Load the systemd EnvironmentFile
   (/etc/default/x-ui and distro equivalents) at startup; godotenv.Load does
   not override existing vars, so it stays a no-op for the managed service.

2. DB backup/restore (panel endpoints and the Telegram bot) only handled the
   SQLite file, so on PostgreSQL Back Up returned a stale/absent x-ui.db and
   Restore silently did nothing. Add pg_dump/pg_restore based backup/restore:
   - GetDb/ImportDB run pg_dump (custom format) / pg_restore, passing
     credentials via the PG* environment instead of argv.
   - getDb downloads x-ui.dump on Postgres, x-ui.db on SQLite.
   - Telegram backup sends the matching file via GetDb.
   - BackupModal shows a Postgres note and accepts .dump; the dist page
     injects window.X_UI_DB_TYPE; new strings translated for all locales.
   - install.sh installs postgresql-client for the external-DSN path and
     points the user to in-panel Backup & Restore.

Closes #4658
This commit is contained in:
MHSanaei
2026-05-31 17:53:34 +02:00
parent a2f20f85f3
commit cc34dc381c
24 changed files with 311 additions and 29 deletions
+138
View File
@@ -9,6 +9,7 @@ import (
"io"
"mime/multipart"
"net/http"
"net/url"
"os"
"os/exec"
"path/filepath"
@@ -1071,6 +1072,9 @@ func (s *ServerService) GetConfigJson() (any, error) {
}
func (s *ServerService) GetDb() ([]byte, error) {
if database.IsPostgres() {
return s.exportPostgresDB()
}
// Update by manually trigger a checkpoint operation
err := database.Checkpoint()
if err != nil {
@@ -1093,6 +1097,9 @@ func (s *ServerService) GetDb() ([]byte, error) {
}
func (s *ServerService) ImportDB(file multipart.File) error {
if database.IsPostgres() {
return s.importPostgresDB(file)
}
// Check if the file is a SQLite database
isValidDb, err := database.IsSQLiteDB(file)
if err != nil {
@@ -1221,6 +1228,137 @@ func (s *ServerService) ImportDB(file multipart.File) error {
return nil
}
// pgConnEnv turns the configured PostgreSQL DSN into the PG* environment used by
// pg_dump/pg_restore, keeping the password out of the process argument list.
func pgConnEnv(dsn string) (env []string, dbname string, err error) {
u, err := url.Parse(strings.TrimSpace(dsn))
if err != nil {
return nil, "", err
}
if u.Scheme != "postgres" && u.Scheme != "postgresql" {
return nil, "", common.NewErrorf("unsupported DSN scheme %q", u.Scheme)
}
dbname = strings.TrimPrefix(u.Path, "/")
if dbname == "" {
return nil, "", common.NewError("PostgreSQL DSN is missing a database name")
}
host := u.Hostname()
if host == "" {
host = "127.0.0.1"
}
port := u.Port()
if port == "" {
port = "5432"
}
env = append(os.Environ(), "PGHOST="+host, "PGPORT="+port, "PGDATABASE="+dbname)
if user := u.User.Username(); user != "" {
env = append(env, "PGUSER="+user)
}
if pass, ok := u.User.Password(); ok {
env = append(env, "PGPASSWORD="+pass)
}
if sslmode := u.Query().Get("sslmode"); sslmode != "" {
env = append(env, "PGSSLMODE="+sslmode)
}
return env, dbname, nil
}
func (s *ServerService) exportPostgresDB() ([]byte, error) {
bin, err := exec.LookPath("pg_dump")
if err != nil {
return nil, common.NewError("pg_dump not found on the server; install the postgresql-client package to back up a PostgreSQL database")
}
env, dbname, err := pgConnEnv(config.GetDBDSN())
if err != nil {
return nil, common.NewErrorf("invalid PostgreSQL DSN: %v", err)
}
cmd := exec.Command(bin, "--format=custom", "--no-owner", "--no-privileges", "--dbname", dbname)
cmd.Env = env
var out, stderr bytes.Buffer
cmd.Stdout = &out
cmd.Stderr = &stderr
if err := cmd.Run(); err != nil {
return nil, common.NewErrorf("pg_dump failed: %v: %s", err, strings.TrimSpace(stderr.String()))
}
return out.Bytes(), nil
}
func (s *ServerService) importPostgresDB(file multipart.File) error {
header := make([]byte, 5)
if _, err := file.ReadAt(header, 0); err != nil {
return common.NewErrorf("Error reading dump file: %v", err)
}
if string(header) != "PGDMP" {
return common.NewError("Invalid file: expected a PostgreSQL custom-format dump (.dump) created by this panel's Back Up")
}
if _, err := file.Seek(0, 0); err != nil {
return common.NewErrorf("Error resetting file reader: %v", err)
}
bin, err := exec.LookPath("pg_restore")
if err != nil {
return common.NewError("pg_restore not found on the server; install the postgresql-client package to restore a PostgreSQL database")
}
env, dbname, err := pgConnEnv(config.GetDBDSN())
if err != nil {
return common.NewErrorf("invalid PostgreSQL DSN: %v", err)
}
tempFile, err := os.CreateTemp("", "x-ui-pg-restore-*.dump")
if err != nil {
return common.NewErrorf("Error creating temporary dump file: %v", err)
}
tempPath := tempFile.Name()
defer os.Remove(tempPath)
if _, err := io.Copy(tempFile, file); err != nil {
tempFile.Close()
return common.NewErrorf("Error saving dump: %v", err)
}
if err := tempFile.Close(); err != nil {
return common.NewErrorf("Error closing temporary dump file: %v", err)
}
xrayStopped := true
defer func() {
if xrayStopped {
if errR := s.RestartXrayService(); errR != nil {
logger.Warningf("Failed to restart Xray after DB restore error: %v", errR)
}
}
}()
if errStop := s.StopXrayService(); errStop != nil {
logger.Warningf("Failed to stop Xray before DB restore: %v", errStop)
}
if errClose := database.CloseDB(); errClose != nil {
logger.Warningf("Failed to close existing DB before restore: %v", errClose)
}
cmd := exec.Command(bin,
"--clean", "--if-exists", "--no-owner", "--no-privileges",
"--single-transaction", "--dbname", dbname, tempPath,
)
cmd.Env = env
var stderr bytes.Buffer
cmd.Stderr = &stderr
runErr := cmd.Run()
if errInit := database.InitDB(config.GetDBPath()); errInit != nil {
return common.NewErrorf("Restore finished but reopening the database failed: %v", errInit)
}
s.inboundService.MigrateDB()
if runErr != nil {
return common.NewErrorf("pg_restore failed (database left unchanged): %v: %s", runErr, strings.TrimSpace(stderr.String()))
}
xrayStopped = false
if err := s.RestartXrayService(); err != nil {
return common.NewErrorf("Restored DB but failed to start Xray: %v", err)
}
return nil
}
// IsValidGeofileName validates that the filename is safe for geofile operations.
// It checks for path traversal attempts and ensures the filename contains only safe characters.
func (s *ServerService) IsValidGeofileName(filename string) bool {
+10 -13
View File
@@ -3533,35 +3533,32 @@ func (t *Tgbot) sendBackup(chatId int64) {
output := t.I18nBot("tgbot.messages.backupTime", "Time=="+time.Now().Format("2006-01-02 15:04:05"))
t.SendMsgToTgbot(chatId, output)
// Update by manually trigger a checkpoint operation
err := database.Checkpoint()
if err != nil {
logger.Error("Error in trigger a checkpoint operation: ", err)
}
// Send database backup
file, err := os.Open(config.GetDBPath())
// Send database backup (SQLite file, or a pg_dump archive on PostgreSQL)
dbData, err := t.serverService.GetDb()
if err == nil {
defer file.Close()
dbFilename := "x-ui.db"
if database.IsPostgres() {
dbFilename = "x-ui.dump"
}
ctx, cancel := context.WithTimeout(context.Background(), 30*time.Second)
defer cancel()
document := tu.Document(
tu.ID(chatId),
tu.File(file),
tu.FileFromBytes(dbData, dbFilename),
)
_, err = bot.SendDocument(ctx, document)
cancel()
if err != nil {
logger.Error("Error in uploading backup: ", err)
}
} else {
logger.Error("Error in opening db file for backup: ", err)
logger.Error("Error in getting db backup: ", err)
}
// Small delay between file sends
time.Sleep(500 * time.Millisecond)
// Send config.json backup
file, err = os.Open(xray.GetConfigPath())
file, err := os.Open(xray.GetConfigPath())
if err == nil {
defer file.Close()
ctx, cancel := context.WithTimeout(context.Background(), 30*time.Second)