From f83e0e219e99b197e291def4954658471825bb20 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=D0=92=D0=B8=D0=BA=D1=82=D0=BE=D1=80?=
 <78488229+viktor138irk@users.noreply.github.com>
Date: Thu, 7 May 2026 00:21:26 +0900
Subject: [PATCH] =?UTF-8?q?=D0=94=D0=BE=D0=B1=D0=B0=D0=B2=D0=BB=D0=B5?=
 =?UTF-8?q?=D0=BD=D1=8B=20=D1=88=D0=B0=D0=B1=D0=BB=D0=BE=D0=BD=D1=8B=20?=
 =?UTF-8?q?=D0=BF=D1=83=D0=B1=D0=BB=D0=B8=D1=87=D0=BD=D0=BE=D0=B3=D0=BE=20?=
 =?UTF-8?q?=D0=B4=D0=BE=D1=81=D1=82=D1=83=D0=BF=D0=B0=20VM?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 web/network_templates.py | 99 ++++++++++++++++++++++++++++++++++++++++
 1 file changed, 99 insertions(+)
 create mode 100644 web/network_templates.py

diff --git a/web/network_templates.py b/web/network_templates.py
new file mode 100644
index 0000000..685a2de
--- /dev/null
+++ b/web/network_templates.py
@@ -0,0 +1,99 @@
+from __future__ import annotations
+
+from typing import Any
+
+import network_core
+from network_core import NetworkError
+
+
+PUBLIC_ACCESS_TEMPLATES: dict[str, dict[str, Any]] = {
+    'web': {
+        'title': 'Web 80/443',
+        'description': 'HTTP и HTTPS к web-сервису внутри VM',
+        'rules': [
+            {'external_port': 80, 'guest_port': 80, 'protocol': 'tcp', 'note': 'web-http'},
+            {'external_port': 443, 'guest_port': 443, 'protocol': 'tcp', 'note': 'web-https'},
+        ],
+    },
+    'ssh': {
+        'title': 'SSH 2222 → 22',
+        'description': 'SSH-доступ к VM через нестандартный внешний порт',
+        'rules': [
+            {'external_port': 2222, 'guest_port': 22, 'protocol': 'tcp', 'note': 'ssh'},
+        ],
+    },
+    'mikopbx-web': {
+        'title': 'MikoPBX Web',
+        'description': 'Web-интерфейс MikoPBX: 80 и 443',
+        'rules': [
+            {'external_port': 80, 'guest_port': 80, 'protocol': 'tcp', 'note': 'mikopbx-http'},
+            {'external_port': 443, 'guest_port': 443, 'protocol': 'tcp', 'note': 'mikopbx-https'},
+        ],
+    },
+    'mikopbx-voip-basic': {
+        'title': 'MikoPBX SIP basic',
+        'description': 'Базовые SIP-порты. RTP-диапазон добавляй по необходимости.',
+        'rules': [
+            {'external_port': 5060, 'guest_port': 5060, 'protocol': 'udp', 'note': 'sip-udp'},
+            {'external_port': 5060, 'guest_port': 5060, 'protocol': 'tcp', 'note': 'sip-tcp'},
+            {'external_port': 5061, 'guest_port': 5061, 'protocol': 'tcp', 'note': 'sip-tls'},
+        ],
+    },
+}
+
+
+def list_templates() -> dict[str, dict[str, Any]]:
+    return PUBLIC_ACCESS_TEMPLATES
+
+
+def apply_template(vm_name: str, template_key: str, external_base_port: int | None = None) -> dict[str, Any]:
+    if template_key not in PUBLIC_ACCESS_TEMPLATES:
+        raise NetworkError('Неизвестный шаблон публичного доступа')
+    if not vm_name:
+        raise NetworkError('Не выбрана VM')
+
+    vm_ip = network_core.resolve_vm_ip(vm_name)
+    if not vm_ip:
+        raise NetworkError('Не удалось определить IP VM. Запусти VM и дождись DHCP.')
+
+    template = PUBLIC_ACCESS_TEMPLATES[template_key]
+    existing = network_core.load_port_forwards()
+    created: list[dict[str, Any]] = []
+    skipped: list[dict[str, Any]] = []
+
+    for rule in template['rules']:
+        external_port = int(rule['external_port'])
+        if external_base_port and template_key == 'ssh':
+            external_port = int(external_base_port)
+        protocol = rule['protocol']
+        guest_port = int(rule['guest_port'])
+
+        conflict = next((item for item in existing if int(item['external_port']) == external_port and item['protocol'] == protocol), None)
+        if conflict:
+            skipped.append({'reason': 'external port already used', 'rule': rule, 'conflict': conflict})
+            continue
+
+        forward = {
+            'id': network_core.uuid.uuid4().__str__(),
+            'vm_name': vm_name,
+            'guest_ip': vm_ip,
+            'external_port': external_port,
+            'guest_port': guest_port,
+            'protocol': protocol,
+            'note': rule.get('note', template_key),
+        }
+        existing.append(forward)
+        created.append(forward)
+
+    network_core.save_port_forwards(existing)
+    apply_result = network_core.apply_port_forwards()
+
+    return {
+        'template_key': template_key,
+        'template': template,
+        'vm_name': vm_name,
+        'vm_ip': vm_ip,
+        'created': created,
+        'skipped': skipped,
+        'apply_result': apply_result,
+    }