Expand guest metrics and add Proxmox maintenance overview

README.md

@@ -19,10 +19,17 @@
 - состояние, заполнение, фрагментацию и scrub/resilver ZFS-пулов;
 - состояние UPS через NUT или apcupsd, заряд, автономность, нагрузку и напряжение.
 - состояние VM и LXC, CPU, память, выделенные ядра и uptime.
+- IP-адреса VM через QEMU Guest Agent, автозапуск, storage, заполнение диска и
+  суммарный сетевой трафик гостей;
 - последнюю найденную резервную копию каждой VM/LXC, storage, размер и возраст.
+- версию Proxmox, запущенное и последнее установленное ядро, доступные
+  обновления, необходимость перезагрузки, последнее обновление системы,
+  ближайшие backup и ZFS scrub.
 
 Через кнопку настроек можно скрывать неиспользуемые карточки и переключать
-светлую или тёмную тему. Выбор сохраняется локально в браузере.
+светлую или тёмную тему. Карточки можно переставлять перетаскиванием или
+стрелками в настройках. Видимость, порядок и тема сохраняются локально в
+браузере.
 
 Центр уведомлений объединяет критические события, предупреждения и
 информационные сообщения по CPU, памяти, storage, SMART, ZFS, UPS, VM/LXC и

alerts.go

@@ -26,6 +26,12 @@ func evaluateAlerts(metrics dashboardMetrics, thresholds AlertThresholds) []Aler
 	} else if metrics.Update.State == "error" {
 		add("dashboard-update-error", "warning", "Dashboard", "Не удалось проверить обновления", metrics.Update.Message)
 	}
+	if metrics.Maintenance.RebootRequired || metrics.Maintenance.NewKernelAvailable {
+		add("maintenance-reboot", "warning", "Proxmox", "Требуется перезагрузка хоста", "Установлено новое ядро или система запросила перезагрузку.")
+	}
+	if metrics.Maintenance.AvailableUpdates > 0 {
+		add("maintenance-updates", "info", "Proxmox", "Доступны обновления системы", fmt.Sprintf("Пакетов для обновления: %d.", metrics.Maintenance.AvailableUpdates))
+	}
 
 	if metrics.CPU.UsagePercent >= thresholds.CPUCritical {
 		add("cpu-usage", "critical", "CPU", "Очень высокая загрузка CPU", fmt.Sprintf("Текущая загрузка %.1f%%.", metrics.CPU.UsagePercent))

guests.go

@@ -3,24 +3,35 @@ package main
 import (
 	"context"
 	"encoding/json"
+	"fmt"
 	"os/exec"
 	"sort"
+	"strconv"
+	"strings"
 	"sync"
 	"time"
 )
 
 type GuestMetrics struct {
-	VMID        int     `json:"vmid"`
-	Name        string  `json:"name"`
-	Type        string  `json:"type"`
-	Node        string  `json:"node"`
-	Status      string  `json:"status"`
-	CPU         float64 `json:"cpu"`
-	MaxCPU      float64 `json:"maxcpu"`
-	MemoryBytes uint64  `json:"mem"`
-	MaxMemory   uint64  `json:"maxmem"`
-	Uptime      uint64  `json:"uptime"`
-	Template    int     `json:"template"`
+	VMID        int      `json:"vmid"`
+	Name        string   `json:"name"`
+	Type        string   `json:"type"`
+	Node        string   `json:"node"`
+	Status      string   `json:"status"`
+	CPU         float64  `json:"cpu"`
+	MaxCPU      float64  `json:"maxcpu"`
+	MemoryBytes uint64   `json:"mem"`
+	MaxMemory   uint64   `json:"maxmem"`
+	Uptime      uint64   `json:"uptime"`
+	Template    int      `json:"template"`
+	DiskBytes   uint64   `json:"disk"`
+	MaxDisk     uint64   `json:"maxdisk"`
+	NetInBytes  uint64   `json:"netin"`
+	NetOutBytes uint64   `json:"netout"`
+	OnBoot      bool     `json:"onboot"`
+	Agent       bool     `json:"agent"`
+	IPAddresses []string `json:"ipAddresses"`
+	Storage     []string `json:"storage"`
 }
 
 type GuestsMetrics struct {
@@ -29,9 +40,17 @@ type GuestsMetrics struct {
 }
 
 type guestCollector struct {
-	mu        sync.Mutex
-	cached    GuestsMetrics
-	updatedAt time.Time
+	mu                sync.Mutex
+	cached            GuestsMetrics
+	updatedAt         time.Time
+	details           map[int]guestDetails
+	detailsUpdatedAt  time.Time
+	detailsRefreshing bool
+}
+
+type guestDetails struct {
+	OnBoot, Agent        bool
+	IPAddresses, Storage []string
 }
 
 func (c *guestCollector) collect() GuestsMetrics {
@@ -41,10 +60,143 @@ func (c *guestCollector) collect() GuestsMetrics {
 		return c.cached
 	}
 	c.cached = readGuests()
+	if time.Since(c.detailsUpdatedAt) > time.Minute && !c.detailsRefreshing {
+		c.detailsRefreshing = true
+		guests := append([]GuestMetrics(nil), c.cached.Guests...)
+		go func() {
+			details := readGuestDetails(guests)
+			c.mu.Lock()
+			c.details = details
+			c.detailsUpdatedAt = time.Now()
+			c.detailsRefreshing = false
+			c.mu.Unlock()
+		}()
+	}
+	for i := range c.cached.Guests {
+		if detail, ok := c.details[c.cached.Guests[i].VMID]; ok {
+			c.cached.Guests[i].OnBoot = detail.OnBoot
+			c.cached.Guests[i].Agent = detail.Agent
+			c.cached.Guests[i].IPAddresses = detail.IPAddresses
+			c.cached.Guests[i].Storage = detail.Storage
+		}
+	}
 	c.updatedAt = time.Now()
 	return c.cached
 }
 
+func readGuestDetails(guests []GuestMetrics) map[int]guestDetails {
+	result := map[int]guestDetails{}
+	for _, guest := range guests {
+		if guest.Template != 0 {
+			continue
+		}
+		kind := guest.Type
+		if kind != "qemu" {
+			kind = "lxc"
+		}
+		data := commandOutput(5*time.Second, "pvesh", "get", "/nodes/"+guest.Node+"/"+kind+"/"+strconv.Itoa(guest.VMID)+"/config", "--output-format", "json")
+		var config map[string]any
+		if json.Unmarshal([]byte(data), &config) != nil {
+			continue
+		}
+		detail := guestDetails{}
+		detail.OnBoot = numberValue(config["onboot"]) == 1
+		detail.Agent = agentEnabled(config["agent"])
+		storageSet := map[string]bool{}
+		ipSet := map[string]bool{}
+		for key, value := range config {
+			s := fmt.Sprint(value)
+			if key == "rootfs" || strings.HasPrefix(key, "scsi") || strings.HasPrefix(key, "sata") || strings.HasPrefix(key, "virtio") {
+				if name := storageName(s); name != "" {
+					storageSet[name] = true
+				}
+			}
+			if strings.HasPrefix(key, "net") || strings.HasPrefix(key, "ipconfig") {
+				for _, ip := range ipsFromConfig(s) {
+					ipSet[ip] = true
+				}
+			}
+		}
+		if guest.Status == "running" && kind == "qemu" {
+			agent := commandOutput(5*time.Second, "pvesh", "get", "/nodes/"+guest.Node+"/qemu/"+strconv.Itoa(guest.VMID)+"/agent/network-get-interfaces", "--output-format", "json")
+			for _, ip := range ipsFromAgent(agent) {
+				ipSet[ip] = true
+			}
+			if agent != "" {
+				detail.Agent = true
+			}
+		}
+		for value := range storageSet {
+			detail.Storage = append(detail.Storage, value)
+		}
+		for value := range ipSet {
+			detail.IPAddresses = append(detail.IPAddresses, value)
+		}
+		sort.Strings(detail.Storage)
+		sort.Strings(detail.IPAddresses)
+		result[guest.VMID] = detail
+	}
+	return result
+}
+
+func numberValue(value any) float64 {
+	switch v := value.(type) {
+	case float64:
+		return v
+	case string:
+		n, _ := strconv.ParseFloat(v, 64)
+		return n
+	}
+	return 0
+}
+func agentEnabled(value any) bool {
+	s := strings.ToLower(fmt.Sprint(value))
+	return s == "1" || strings.Contains(s, "enabled=1")
+}
+func storageName(value string) string {
+	first := strings.SplitN(value, ",", 2)[0]
+	parts := strings.SplitN(first, ":", 2)
+	if len(parts) == 2 {
+		return parts[0]
+	}
+	return ""
+}
+func ipsFromConfig(value string) []string {
+	var result []string
+	for _, part := range strings.Split(value, ",") {
+		part = strings.TrimSpace(part)
+		if strings.HasPrefix(part, "ip=") || strings.HasPrefix(part, "ip6=") {
+			ip := strings.SplitN(part, "=", 2)[1]
+			if ip != "dhcp" && ip != "auto" {
+				result = append(result, strings.SplitN(ip, "/", 2)[0])
+			}
+		}
+	}
+	return result
+}
+func ipsFromAgent(data string) []string {
+	var payload struct {
+		Result []struct {
+			IPAddresses []struct {
+				Address string `json:"ip-address"`
+				Type    string `json:"ip-address-type"`
+			} `json:"ip-addresses"`
+		} `json:"result"`
+	}
+	if json.Unmarshal([]byte(data), &payload) != nil {
+		return nil
+	}
+	var result []string
+	for _, iface := range payload.Result {
+		for _, ip := range iface.IPAddresses {
+			if ip.Address != "127.0.0.1" && ip.Address != "::1" && !strings.HasPrefix(ip.Address, "fe80:") {
+				result = append(result, ip.Address)
+			}
+		}
+	}
+	return result
+}
+
 func readGuests() GuestsMetrics {
 	if _, err := exec.LookPath("pvesh"); err != nil {
 		return GuestsMetrics{}

guests_test.go

@@ -15,3 +15,16 @@ func TestGuestJSON(t *testing.T) {
 		t.Fatalf("неожиданные данные гостя: %+v", guest)
 	}
 }
+
+func TestGuestConfigHelpers(t *testing.T) {
+	if got := storageName("local-zfs:vm-101-disk-0,size=32G"); got != "local-zfs" {
+		t.Fatalf("storage: %s", got)
+	}
+	ips := ipsFromConfig("name=eth0,bridge=vmbr0,ip=192.168.0.20/24,ip6=auto")
+	if len(ips) != 1 || ips[0] != "192.168.0.20" {
+		t.Fatalf("ips: %+v", ips)
+	}
+	if !agentEnabled("enabled=1,fstrim_cloned_disks=1") {
+		t.Fatal("agent should be enabled")
+	}
+}

maintenance.go

@@ -0,0 +1,264 @@
+package main
+
+import (
+	"bufio"
+	"compress/gzip"
+	"context"
+	"encoding/json"
+	"io"
+	"os"
+	"os/exec"
+	"path/filepath"
+	"regexp"
+	"sort"
+	"strconv"
+	"strings"
+	"sync"
+	"time"
+)
+
+type MaintenanceMetrics struct {
+	Available             bool      `json:"available"`
+	ProxmoxVersion        string    `json:"proxmoxVersion"`
+	KernelVersion         string    `json:"kernelVersion"`
+	LatestInstalledKernel string    `json:"latestInstalledKernel"`
+	NewKernelAvailable    bool      `json:"newKernelAvailable"`
+	RebootRequired        bool      `json:"rebootRequired"`
+	AvailableUpdates      int       `json:"availableUpdates"`
+	LastSystemUpdate      time.Time `json:"lastSystemUpdate"`
+	NextBackup            string    `json:"nextBackup"`
+	NextScrub             string    `json:"nextScrub"`
+	CheckedAt             time.Time `json:"checkedAt"`
+}
+
+type maintenanceCollector struct {
+	mu         sync.Mutex
+	cached     MaintenanceMetrics
+	updatedAt  time.Time
+	refreshing bool
+}
+
+func (c *maintenanceCollector) collect() MaintenanceMetrics {
+	c.mu.Lock()
+	if time.Since(c.updatedAt) >= 15*time.Minute && !c.refreshing {
+		c.refreshing = true
+		go func() {
+			metrics := readMaintenance()
+			c.mu.Lock()
+			c.cached = metrics
+			c.updatedAt = time.Now()
+			c.refreshing = false
+			c.mu.Unlock()
+		}()
+	}
+	result := c.cached
+	c.mu.Unlock()
+	return result
+}
+
+func commandOutput(timeout time.Duration, name string, args ...string) string {
+	ctx, cancel := context.WithTimeout(context.Background(), timeout)
+	defer cancel()
+	command := exec.CommandContext(ctx, name, args...)
+	command.Env = append(os.Environ(), "LC_ALL=C")
+	output, err := command.Output()
+	if err != nil {
+		return ""
+	}
+	return strings.TrimSpace(string(output))
+}
+
+func readMaintenance() MaintenanceMetrics {
+	result := MaintenanceMetrics{Available: true, CheckedAt: time.Now()}
+	result.ProxmoxVersion = firstLine(commandOutput(5*time.Second, "pveversion"))
+	result.KernelVersion = commandOutput(3*time.Second, "uname", "-r")
+	result.RebootRequired = fileExists("/var/run/reboot-required")
+	apt := commandOutput(45*time.Second, "apt-get", "-s", "-o", "Debug::NoLocking=1", "upgrade")
+	for _, line := range strings.Split(apt, "\n") {
+		if strings.HasPrefix(line, "Inst ") {
+			result.AvailableUpdates++
+		}
+	}
+	result.LastSystemUpdate = lastAPTUpdate("/var/log/apt/history.log")
+	installed := commandOutput(8*time.Second, "dpkg-query", "-W", "-f=${Package} ${Version}\\n", "pve-kernel-*", "proxmox-kernel-*")
+	result.LatestInstalledKernel = newestKernel(installed)
+	result.NewKernelAvailable = result.LatestInstalledKernel != "" && !strings.Contains(result.KernelVersion, result.LatestInstalledKernel)
+	result.NextBackup = nextBackupSchedule()
+	result.NextScrub = nextScrubTimer(commandOutput(8*time.Second, "systemctl", "list-timers", "--all", "--no-legend", "--plain"))
+	if result.NextScrub == "" {
+		result.NextScrub = nextZFSScrubCron("/etc/cron.d/zfsutils-linux", time.Now())
+	}
+	return result
+}
+
+func firstLine(value string) string {
+	if i := strings.IndexByte(value, '\n'); i >= 0 {
+		return value[:i]
+	}
+	return value
+}
+func fileExists(path string) bool { _, err := os.Stat(path); return err == nil }
+
+func lastAPTUpdate(path string) time.Time {
+	file, err := os.Open(path)
+	if err == nil {
+		defer file.Close()
+		if result := scanAPTUpdate(file); !result.IsZero() {
+			return result
+		}
+	}
+	files, _ := filepath.Glob(path + ".*.gz")
+	sort.Slice(files, func(i, j int) bool {
+		a, _ := os.Stat(files[i])
+		b, _ := os.Stat(files[j])
+		return a.ModTime().After(b.ModTime())
+	})
+	for _, name := range files {
+		compressed, err := os.Open(name)
+		if err != nil {
+			continue
+		}
+		reader, err := gzip.NewReader(compressed)
+		if err != nil {
+			compressed.Close()
+			continue
+		}
+		result := scanAPTUpdate(reader)
+		reader.Close()
+		compressed.Close()
+		if !result.IsZero() {
+			return result
+		}
+	}
+	return time.Time{}
+}
+func scanAPTUpdate(reader io.Reader) time.Time {
+	scanner := bufio.NewScanner(reader)
+	var result time.Time
+	for scanner.Scan() {
+		line := strings.TrimSpace(scanner.Text())
+		if strings.HasPrefix(line, "End-Date:") {
+			value := strings.TrimSpace(strings.TrimPrefix(line, "End-Date:"))
+			if parsed, err := time.ParseInLocation("2006-01-02  15:04:05", value, time.Local); err == nil {
+				result = parsed
+			}
+		}
+	}
+	return result
+}
+
+var versionNumbers = regexp.MustCompile(`\d+`)
+
+func newestKernel(output string) string {
+	var versions []string
+	for _, line := range strings.Split(output, "\n") {
+		fields := strings.Fields(line)
+		if len(fields) > 1 && !strings.Contains(fields[0], "helper") {
+			versions = append(versions, fields[1])
+		}
+	}
+	sort.Slice(versions, func(i, j int) bool { return compareNumericVersion(versions[i], versions[j]) > 0 })
+	if len(versions) > 0 {
+		return versions[0]
+	}
+	return ""
+}
+func compareNumericVersion(a, b string) int {
+	aa, bb := versionNumbers.FindAllString(a, -1), versionNumbers.FindAllString(b, -1)
+	for i := 0; i < len(aa) || i < len(bb); i++ {
+		av, bv := "0", "0"
+		if i < len(aa) {
+			av = aa[i]
+		}
+		if i < len(bb) {
+			bv = bb[i]
+		}
+		if len(av) != len(bv) {
+			if len(av) > len(bv) {
+				return 1
+			}
+			return -1
+		}
+		if av != bv {
+			if av > bv {
+				return 1
+			}
+			return -1
+		}
+	}
+	return 0
+}
+
+func nextBackupSchedule() string {
+	data := commandOutput(8*time.Second, "pvesh", "get", "/cluster/backup", "--output-format", "json")
+	if data == "" {
+		return ""
+	}
+	var jobs []struct {
+		Enabled  *int   `json:"enabled"`
+		Schedule string `json:"schedule"`
+	}
+	if json.Unmarshal([]byte(data), &jobs) != nil {
+		return ""
+	}
+	var next []string
+	for _, job := range jobs {
+		if (job.Enabled != nil && *job.Enabled == 0) || job.Schedule == "" {
+			continue
+		}
+		calendar := commandOutput(5*time.Second, "systemd-analyze", "calendar", "--iterations=1", job.Schedule)
+		for _, line := range strings.Split(calendar, "\n") {
+			if strings.Contains(line, "Next elapse:") {
+				trimmed := strings.TrimSpace(line)
+				next = append(next, strings.TrimSpace(strings.TrimPrefix(trimmed, "Next elapse:")))
+			}
+		}
+	}
+	sort.Strings(next)
+	if len(next) > 0 {
+		return next[0]
+	}
+	return ""
+}
+func nextScrubTimer(output string) string {
+	for _, line := range strings.Split(output, "\n") {
+		if strings.Contains(strings.ToLower(line), "zfs") && strings.Contains(strings.ToLower(line), "scrub") {
+			fields := strings.Fields(line)
+			if len(fields) >= 4 {
+				return strings.Join(fields[:4], " ")
+			}
+		}
+	}
+	return ""
+}
+
+func nextZFSScrubCron(path string, now time.Time) string {
+	data, err := os.ReadFile(path)
+	if err != nil {
+		return ""
+	}
+	for _, line := range strings.Split(string(data), "\n") {
+		if !strings.Contains(line, "/usr/lib/zfs-linux/scrub") {
+			continue
+		}
+		fields := strings.Fields(line)
+		if len(fields) < 5 {
+			return ""
+		}
+		minute, _ := strconv.Atoi(fields[0])
+		hour, _ := strconv.Atoi(fields[1])
+		rangeParts := strings.SplitN(fields[2], "-", 2)
+		if len(rangeParts) != 2 {
+			return ""
+		}
+		from, _ := strconv.Atoi(rangeParts[0])
+		to, _ := strconv.Atoi(rangeParts[1])
+		for offset := 0; offset < 70; offset++ {
+			day := time.Date(now.Year(), now.Month(), now.Day()+offset, hour, minute, 0, 0, now.Location())
+			if day.After(now) && day.Day() >= from && day.Day() <= to && day.Weekday() == time.Sunday {
+				return day.Format("Mon 2006-01-02 15:04 MST")
+			}
+		}
+	}
+	return ""
+}

maintenance_test.go

@@ -0,0 +1,33 @@
+package main
+
+import (
+	"os"
+	"path/filepath"
+	"testing"
+	"time"
+)
+
+func TestNewestKernel(t *testing.T) {
+	output := "proxmox-kernel-6.8 6.8.12-5\nproxmox-kernel-6.14 6.14.8-2"
+	if got := newestKernel(output); got != "6.14.8-2" {
+		t.Fatalf("unexpected newest kernel: %s", got)
+	}
+}
+
+func TestNextZFSScrubCron(t *testing.T) {
+	path := filepath.Join(t.TempDir(), "zfs")
+	if err := os.WriteFile(path, []byte("24 0 8-14 * * root /usr/lib/zfs-linux/scrub\n"), 0600); err != nil {
+		t.Fatal(err)
+	}
+	now := time.Date(2026, 8, 1, 12, 0, 0, 0, time.UTC)
+	if got := nextZFSScrubCron(path, now); got != "Sun 2026-08-09 00:24 UTC" {
+		t.Fatalf("unexpected cron scrub: %s", got)
+	}
+}
+
+func TestNextScrubTimer(t *testing.T) {
+	line := "Sun 2026-08-02 00:24:00 MSK 1 day left zfs-scrub-weekly@tank.timer"
+	if got := nextScrubTimer(line); got != "Sun 2026-08-02 00:24:00 MSK" {
+		t.Fatalf("unexpected scrub: %s", got)
+	}
+}

store.go

@@ -138,7 +138,7 @@ func (s *Store) SaveThresholds(value AlertThresholds) error {
 }
 
 func defaultEmailSettings() EmailSettings {
-	return EmailSettings{Port: 587, IntervalMinutes: 60, Severities: []string{"critical", "warning"}, Sources: []string{"CPU", "Память", "Storage", "Диски", "ZFS", "UPS", "VM/LXC", "Dashboard"}}
+	return EmailSettings{Port: 587, IntervalMinutes: 60, Severities: []string{"critical", "warning"}, Sources: []string{"CPU", "Память", "Storage", "Диски", "ZFS", "UPS", "VM/LXC", "Proxmox", "Dashboard"}}
 }
 
 func (s *Store) EmailSettings(includePassword bool) EmailSettings {

web.go

@@ -10,21 +10,22 @@ import (
 )
 
 type dashboardMetrics struct {
-	CPU       CPUMetrics     `json:"cpu"`
-	Memory    MemoryMetrics  `json:"memory"`
-	Storage   StorageMetrics `json:"storage"`
-	Disks     []DiskMetrics  `json:"disks"`
-	Network   NetworkMetrics `json:"network"`
-	ZFS       ZFSMetrics     `json:"zfs"`
-	UPS       UPSMetrics     `json:"ups"`
-	Guests    GuestsMetrics  `json:"guests"`
-	Backups   BackupMetrics  `json:"backups"`
-	Alerts    []Alert        `json:"alerts"`
-	Update    UpdateStatus   `json:"update"`
-	Timestamp time.Time      `json:"timestamp"`
+	CPU         CPUMetrics         `json:"cpu"`
+	Memory      MemoryMetrics      `json:"memory"`
+	Storage     StorageMetrics     `json:"storage"`
+	Disks       []DiskMetrics      `json:"disks"`
+	Network     NetworkMetrics     `json:"network"`
+	ZFS         ZFSMetrics         `json:"zfs"`
+	UPS         UPSMetrics         `json:"ups"`
+	Guests      GuestsMetrics      `json:"guests"`
+	Backups     BackupMetrics      `json:"backups"`
+	Alerts      []Alert            `json:"alerts"`
+	Update      UpdateStatus       `json:"update"`
+	Maintenance MaintenanceMetrics `json:"maintenance"`
+	Timestamp   time.Time          `json:"timestamp"`
 }
 
-func collectDashboard(cpuCollector *cpuCollector, networkCollector *networkCollector, diskCollector *diskCollector, zfsCollector *zfsCollector, upsCollector *upsCollector, guestCollector *guestCollector, backupCollector *backupCollector, store *Store) (dashboardMetrics, error) {
+func collectDashboard(cpuCollector *cpuCollector, networkCollector *networkCollector, diskCollector *diskCollector, zfsCollector *zfsCollector, upsCollector *upsCollector, guestCollector *guestCollector, backupCollector *backupCollector, maintenanceCollector *maintenanceCollector, store *Store) (dashboardMetrics, error) {
 	cpu, err := cpuCollector.collect()
 	if err != nil {
 		return dashboardMetrics{}, err
@@ -45,7 +46,7 @@ func collectDashboard(cpuCollector *cpuCollector, networkCollector *networkColle
 		CPU: cpu, Memory: memory, Storage: storage,
 		Disks: diskCollector.collect(), Network: network,
 		ZFS: zfsCollector.collect(), UPS: upsCollector.collect(),
-		Guests: guestCollector.collect(), Backups: backupCollector.collect(), Update: readUpdateStatus(), Timestamp: time.Now(),
+		Guests: guestCollector.collect(), Backups: backupCollector.collect(), Maintenance: maintenanceCollector.collect(), Update: readUpdateStatus(), Timestamp: time.Now(),
 	}
 	metrics.Alerts = evaluateAlerts(metrics, store.Thresholds())
 	metrics.Alerts, err = store.SyncAlerts(metrics.Alerts)
@@ -63,8 +64,9 @@ func routes(collector *cpuCollector, store *Store) http.Handler {
 	ups := &upsCollector{}
 	guests := &guestCollector{}
 	backups := &backupCollector{}
+	maintenance := &maintenanceCollector{}
 	collect := func() (dashboardMetrics, error) {
-		return collectDashboard(collector, network, disks, zfs, ups, guests, backups, store)
+		return collectDashboard(collector, network, disks, zfs, ups, guests, backups, maintenance, store)
 	}
 	go runHistoryCollector(collect, store)
 	go runEmailNotifier(collect, store)
@@ -241,6 +243,7 @@ html[data-theme="light"] body{background:radial-gradient(circle at 78% -8%,#cde9
 footer{color:#657581;font-size:12px;margin-top:17px}
 @media(max-width:700px){main{padding:28px 0}.cards{grid-template-columns:1fr}header{align-items:flex-start;flex-direction:column;gap:14px}.detail-grid{grid-template-columns:repeat(2,1fr)}.detail:nth-child(3n){border-right:1px solid var(--line)}.detail:nth-child(2n){border-right:0}.name{max-width:220px}.disk-stats,.setting-list,.threshold-grid{grid-template-columns:repeat(2,1fr)}.chart-head{align-items:flex-start;flex-direction:column}.detail-tabs{overflow-x:auto}}
 .save-settings:disabled{cursor:wait;opacity:.55}[data-settings-panel="email"] .threshold-item input{width:min(210px,52vw)}.ack-alert{margin-top:11px;padding:6px 10px;border:1px solid var(--line);border-radius:8px;background:var(--panel);color:var(--text);font-size:11px;cursor:pointer}.history-state{display:inline-block;margin-top:8px;color:var(--muted);font-size:11px}.alert-panel[hidden]{display:none}
+.maintenance .fill{background:linear-gradient(90deg,#55d58a,#43c6d9)}.card-order{display:grid;gap:7px;margin-top:11px}.order-item{display:flex;align-items:center;gap:10px;padding:9px 10px;border:1px solid var(--line);border-radius:10px;background:var(--panel)}.order-item.dragging{opacity:.45}.order-handle{cursor:grab;color:var(--muted);font-size:17px}.order-item span:nth-child(2){flex:1}.order-button{width:30px;height:28px;border:1px solid var(--line);border-radius:7px;background:var(--bg);color:var(--text);cursor:pointer}
 </style>
 </head>
 <body><main>
@@ -294,6 +297,12 @@ footer{color:#657581;font-size:12px;margin-top:17px}
  <div class="quick"><div><span class="label">CPU гостей</span><strong id="guestCPU">—</strong></div><div><span class="label">Память гостей</span><strong id="guestMemory">—</strong></div></div>
  <div class="hint">Нажмите, чтобы посмотреть подробности →</div>
 </button>
+<button class="card maintenance" data-card="maintenance" data-open="maintenanceDialog" aria-label="Открыть сведения Proxmox">
+ <div class="card-head"><div><div class="label">Proxmox</div><div class="name" id="maintenanceVersion">Обслуживание хоста</div></div><div class="percent"><span id="maintenanceUpdates">—</span><small> updates</small></div></div>
+ <div class="bar"><div class="fill" id="maintenanceBar"></div></div>
+ <div class="quick"><div><span class="label">Перезагрузка</span><strong id="maintenanceReboot">—</strong></div><div><span class="label">Ядро</span><strong id="maintenanceKernel">—</strong></div></div>
+ <div class="hint">Нажмите, чтобы посмотреть обслуживание →</div>
+</button>
 <button class="card backups" data-card="backups" data-open="backupsDialog" aria-label="Открыть подробности резервных копий">
  <div class="card-head"><div><div class="label">Backups</div><div class="name">Резервные копии</div></div><div class="percent"><span id="backupProtected">—</span><small id="backupTotal"> / —</small></div></div>
  <div class="bar"><div class="fill" id="backupBar"></div></div>
@@ -379,6 +388,15 @@ footer{color:#657581;font-size:12px;margin-top:17px}
  <div class="disk-list" id="backupList"><span class="empty">Получение списка резервных копий…</span></div>
 </dialog>
 
+<dialog id="maintenanceDialog">
+ <div class="modal-head"><div><div class="label">Proxmox maintenance</div><h2>Система и обслуживание</h2></div><button class="close" aria-label="Закрыть">×</button></div>
+ <div class="detail-grid">
+  <div class="detail"><span class="label">Proxmox</span><strong id="dPveVersion">—</strong></div><div class="detail"><span class="label">Запущенное ядро</span><strong id="dKernel">—</strong></div><div class="detail"><span class="label">Новое ядро</span><strong id="dLatestKernel">—</strong></div>
+  <div class="detail"><span class="label">Обновления</span><strong id="dUpdates">—</strong></div><div class="detail"><span class="label">Перезагрузка</span><strong id="dReboot">—</strong></div><div class="detail"><span class="label">Последнее обновление</span><strong id="dLastUpdate">—</strong></div>
+ </div>
+ <div class="wide"><span class="label">Ближайшие задания</span><div class="disk-stats"><div class="disk-stat"><span>Backup</span><b id="dNextBackup">—</b></div><div class="disk-stat"><span>ZFS scrub</span><b id="dNextScrub">—</b></div><div class="disk-stat"><span>Проверено</span><b id="dMaintenanceChecked">—</b></div></div></div>
+</dialog>
+
 <dialog id="settingsDialog">
  <div class="modal-head"><div><div class="label">Dashboard</div><h2>Настройки</h2></div><button class="close" aria-label="Закрыть">×</button></div>
  <div class="settings-tabs"><button class="settings-tab active" data-settings-tab="appearance">Интерфейс</button><button class="settings-tab" data-settings-tab="alerts">Пороги</button><button class="settings-tab" data-settings-tab="email">Почта</button><button class="settings-tab" data-settings-tab="updates">Обновления</button></div>
@@ -389,8 +407,9 @@ footer{color:#657581;font-size:12px;margin-top:17px}
     <label class="setting-item"><input type="checkbox" data-card-toggle="cpu"> CPU</label><label class="setting-item"><input type="checkbox" data-card-toggle="memory"> Память</label>
     <label class="setting-item"><input type="checkbox" data-card-toggle="storage"> Диски</label><label class="setting-item"><input type="checkbox" data-card-toggle="network"> Сеть</label>
     <label class="setting-item"><input type="checkbox" data-card-toggle="zfs"> ZFS</label><label class="setting-item"><input type="checkbox" data-card-toggle="ups"> UPS</label>
-    <label class="setting-item"><input type="checkbox" data-card-toggle="guests"> VM и LXC</label><label class="setting-item"><input type="checkbox" data-card-toggle="backups"> Резервные копии</label>
+    <label class="setting-item"><input type="checkbox" data-card-toggle="guests"> VM и LXC</label><label class="setting-item"><input type="checkbox" data-card-toggle="maintenance"> Proxmox</label><label class="setting-item"><input type="checkbox" data-card-toggle="backups"> Резервные копии</label>
    </div></div>
+   <div class="settings-group"><div class="label">Порядок карточек</div><div class="settings-note">Перетаскивайте строки или используйте стрелки.</div><div class="card-order" id="cardOrder"></div></div>
  </div>
  <div class="settings-body settings-panel" data-settings-panel="alerts" hidden>
   <div class="threshold-grid">
@@ -415,7 +434,7 @@ footer{color:#657581;font-size:12px;margin-top:17px}
   </div></div>
   <div class="settings-group"><div class="label">Важность</div><div class="setting-list"><label class="setting-item"><input type="checkbox" data-email-severity="critical"> Критические</label><label class="setting-item"><input type="checkbox" data-email-severity="warning"> Предупреждения</label><label class="setting-item"><input type="checkbox" data-email-severity="info"> Информация</label></div></div>
   <div class="settings-group"><div class="label">Какие разделы отправлять</div><div class="setting-list">
-   <label class="setting-item"><input type="checkbox" data-email-source="CPU"> CPU</label><label class="setting-item"><input type="checkbox" data-email-source="Память"> Память</label><label class="setting-item"><input type="checkbox" data-email-source="Storage"> Storage</label><label class="setting-item"><input type="checkbox" data-email-source="Диски"> Диски</label><label class="setting-item"><input type="checkbox" data-email-source="ZFS"> ZFS</label><label class="setting-item"><input type="checkbox" data-email-source="UPS"> UPS</label><label class="setting-item"><input type="checkbox" data-email-source="VM/LXC"> VM и LXC</label><label class="setting-item"><input type="checkbox" data-email-source="Backups"> Резервные копии</label><label class="setting-item"><input type="checkbox" data-email-source="Dashboard"> Dashboard</label>
+   <label class="setting-item"><input type="checkbox" data-email-source="CPU"> CPU</label><label class="setting-item"><input type="checkbox" data-email-source="Память"> Память</label><label class="setting-item"><input type="checkbox" data-email-source="Storage"> Storage</label><label class="setting-item"><input type="checkbox" data-email-source="Диски"> Диски</label><label class="setting-item"><input type="checkbox" data-email-source="ZFS"> ZFS</label><label class="setting-item"><input type="checkbox" data-email-source="UPS"> UPS</label><label class="setting-item"><input type="checkbox" data-email-source="VM/LXC"> VM и LXC</label><label class="setting-item"><input type="checkbox" data-email-source="Proxmox"> Proxmox</label><label class="setting-item"><input type="checkbox" data-email-source="Backups"> Резервные копии</label><label class="setting-item"><input type="checkbox" data-email-source="Dashboard"> Dashboard</label>
   </div></div>
   <button class="save-settings" id="saveEmail">Сохранить настройки почты</button><button class="theme-option" id="testEmail" style="width:100%;margin-top:9px">Отправить тестовое письмо</button><div class="settings-note" id="emailStatus">Пароль хранится в локальной базе сервера и не возвращается в браузер.</div>
  </div>
@@ -434,7 +453,7 @@ const rate=n=>size(n)+'/s';
 const safe=v=>String(v??'').replace(/[&<>"']/g,c=>({'&':'&amp;','<':'&lt;','>':'&gt;','"':'&quot;',"'":'&#39;'}[c]));
 const uptime=s=>{const d=Math.floor(s/86400),h=Math.floor(s%86400/3600),m=Math.floor(s%3600/60);return d?d+'д '+h+'ч':h?h+'ч '+m+'м':m+'м'};
 let alertSettings={backupMaxAgeHours:48};
-function render(x){const c=x.cpu,m=x.memory,s=x.storage,n=x.network,z=x.zfs||{available:false,pools:[]},u=x.ups||{available:false},g=x.guests||{available:false,guests:[]},b=x.backups||{available:false,items:[]},alerts=x.alerts||[],disks=x.disks||[],avg=c.temperatures.length?c.temperatures.reduce((a,t)=>a+t.celsius,0)/c.temperatures.length:null;
+function render(x){const c=x.cpu,m=x.memory,s=x.storage,n=x.network,z=x.zfs||{available:false,pools:[]},u=x.ups||{available:false},g=x.guests||{available:false,guests:[]},b=x.backups||{available:false,items:[]},mt=x.maintenance||{},alerts=x.alerts||[],disks=x.disks||[],avg=c.temperatures.length?c.temperatures.reduce((a,t)=>a+t.celsius,0)/c.temperatures.length:null;
  const update=x.update||{},updating=['queued','installing'].includes(update.state);el('updateCurrent').textContent=update.currentVersion||'—';el('updateAvailable').textContent=update.availableVersion||'—';el('updateMode').textContent=update.mode==='auto'?'Автоматически':'Уведомлять';el('updateMessage').textContent=update.message||'Проверка ещё не выполнялась';el('updateChecked').textContent=update.checkedAt?'Последняя проверка: '+new Date(update.checkedAt).toLocaleString('ru-RU'):'Проверка запускается автоматически раз в сутки.';el('installUpdate').disabled=updating;el('installUpdate').textContent=updating?'Обновление выполняется…':'Проверить и установить обновление';
  const critical=alerts.filter(a=>a.severity==='critical').length,warnings=alerts.filter(a=>a.severity==='warning').length,infos=alerts.filter(a=>a.severity==='info').length;el('alertCount').textContent=alerts.length;el('alertCritical').textContent=critical;el('alertWarnings').textContent=warnings;el('alertHeadline').textContent=critical?'Требуется срочное внимание':warnings?'Есть предупреждения':infos?'Есть информационные события':'Система в норме';el('alertBar').style.width=(critical?100:warnings?65:infos?30:0)+'%';
  el('alertList').innerHTML=alerts.length?alerts.map(a=>'<article class="alert-item '+safe(a.severity)+'"><i class="alert-icon"></i><div><div class="alert-source">'+safe(a.source)+' · '+(a.severity==='critical'?'Критическое':a.severity==='warning'?'Предупреждение':'Информация')+'</div><div class="alert-title">'+safe(a.title)+'</div><div class="alert-message">'+safe(a.message)+'</div><button class="ack-alert" data-ack="'+a.eventId+'">Принято</button></div></article>').join(''):'<div class="all-good"><strong>Всё в порядке</strong><span>Новых неподтверждённых событий нет.</span></div>';
@@ -449,7 +468,8 @@ function render(x){const c=x.cpu,m=x.memory,s=x.storage,n=x.network,z=x.zfs||{av
  el('zfsList').innerHTML=pools.length?pools.map(p=>{const bad=p.health!=='ONLINE',reason=(p.attentionReasons||[]).join(' · '),tip=reason?' tabindex="0" data-reason="'+safe(reason)+'"':'';return '<article class="disk-item"><div class="disk-top"><div><div class="disk-model">'+safe(p.name)+'</div><div class="disk-meta">'+safe(p.scan||'Данные scrub отсутствуют')+'</div></div><span class="badge '+(bad?'bad':'')+'"'+tip+'>'+safe(p.health)+'</span></div><div class="disk-stats"><div class="disk-stat"><span>Объём</span><b>'+size(p.sizeBytes)+'</b></div><div class="disk-stat"><span>Занято</span><b>'+size(p.allocatedBytes)+'</b></div><div class="disk-stat"><span>Свободно</span><b>'+size(p.freeBytes)+'</b></div><div class="disk-stat"><span>Заполнение</span><b>'+fixed(p.capacityPercent)+'%</b></div><div class="disk-stat"><span>Фрагментация</span><b>'+fixed(p.fragmentationPercent)+'%</b></div><div class="disk-stat"><span>Dedup</span><b>'+safe(p.dedupRatio)+'</b></div></div></article>'}).join(''):'<span class="empty">'+(z.available?'ZFS-пулы не найдены':'Команда zpool недоступна')+'</span>';
  const val=(v,suffix='')=>v==null?'—':fixed(v)+suffix;el('upsName').textContent=u.available?(u.model||u.name||'Источник бесперебойного питания'):'UPS не настроен';el('upsCharge').textContent=u.chargePercent==null?'—':fixed(u.chargePercent);el('upsBar').style.width=u.chargePercent==null?'0%':Math.min(u.chargePercent,100)+'%';el('upsStatus').textContent=u.available?u.statusLabel:'Не найден';el('upsRuntime').textContent=u.runtimeSeconds==null?'—':uptime(u.runtimeSeconds);el('dUpsName').textContent=u.model||u.name||'Источник бесперебойного питания';el('dUpsStatus').textContent=u.available?u.statusLabel:'Не настроен';el('dUpsCharge').textContent=val(u.chargePercent,'%');el('dUpsRuntime').textContent=u.runtimeSeconds==null?'—':uptime(u.runtimeSeconds);el('dUpsLoad').textContent=val(u.loadPercent,'%');el('dUpsInput').textContent=val(u.inputVoltage,' V');el('dUpsOutput').textContent=val(u.outputVoltage,' V');el('dUpsFrequency').textContent=val(u.inputFrequency,' Hz');el('dUpsBattery').textContent=val(u.batteryVoltage,' V');el('dUpsTemp').textContent=val(u.temperatureCelsius,' °C');el('dUpsSource').textContent=u.available?(u.source+' · '+(u.name||'UPS')):'Установите и настройте NUT или apcupsd';
  const guests=(g.guests||[]).filter(v=>!v.template),running=guests.filter(v=>v.status==='running'),guestCores=running.reduce((a,v)=>a+v.maxcpu,0),guestCPU=guestCores?running.reduce((a,v)=>a+v.cpu*v.maxcpu,0)/guestCores*100:0,guestMem=running.reduce((a,v)=>a+v.mem,0),guestMaxMem=running.reduce((a,v)=>a+v.maxmem,0);el('guestRunning').textContent=running.length;el('guestTotal').textContent=' / '+guests.length;el('guestBar').style.width=guests.length?(running.length/guests.length*100)+'%':'0%';el('guestCPU').textContent=g.available?fixed(guestCPU)+'%':'Не найдено';el('guestMemory').textContent=g.available?(size(guestMem)+' / '+size(guestMaxMem)):'—';
- el('guestList').innerHTML=guests.length?guests.map(v=>{const live=v.status==='running',type=v.type==='qemu'?'VM':'LXC',memPercent=v.maxmem?v.mem/v.maxmem*100:0;return '<article class="disk-item"><div class="disk-top"><div><div class="disk-model">'+safe(v.name||('Guest '+v.vmid))+'</div><div class="disk-meta">VMID '+v.vmid+' · '+type+' · '+safe(v.node)+'</div></div><span class="badge '+(live?'':'warn')+'">'+(live?'Запущен':'Остановлен')+'</span></div><div class="disk-stats"><div class="disk-stat"><span>Тип</span><b>'+type+'</b></div><div class="disk-stat"><span>CPU</span><b>'+(live?fixed(v.cpu*100)+'%':'—')+'</b></div><div class="disk-stat"><span>Ядра</span><b>'+v.maxcpu+'</b></div><div class="disk-stat"><span>Память</span><b>'+(live?size(v.mem)+' · '+fixed(memPercent)+'%':size(v.maxmem))+'</b></div><div class="disk-stat"><span>Лимит RAM</span><b>'+size(v.maxmem)+'</b></div><div class="disk-stat"><span>Uptime</span><b>'+(live?uptime(v.uptime):'—')+'</b></div></div></article>'}).join(''):'<span class="empty">'+(g.available?'VM и LXC не найдены':'Команда pvesh недоступна')+'</span>';
+ el('guestList').innerHTML=guests.length?guests.map(v=>{const live=v.status==='running',type=v.type==='qemu'?'VM':'LXC',memPercent=v.maxmem?v.mem/v.maxmem*100:0,diskPercent=v.maxdisk?v.disk/v.maxdisk*100:0,ips=(v.ipAddresses||[]).join(', ')||'IP не найден';return '<article class="disk-item"><div class="disk-top"><div><div class="disk-model">'+safe(v.name||('Guest '+v.vmid))+'</div><div class="disk-meta">VMID '+v.vmid+' · '+type+' · '+safe(v.node)+' · '+safe(ips)+'</div></div><span class="badge '+(live?'':'warn')+'">'+(live?'Запущен':'Остановлен')+'</span></div><div class="disk-stats"><div class="disk-stat"><span>CPU</span><b>'+(live?fixed(v.cpu*100)+'%':'—')+' / '+v.maxcpu+'</b></div><div class="disk-stat"><span>Память</span><b>'+(live?size(v.mem)+' · '+fixed(memPercent)+'%':size(v.maxmem))+'</b></div><div class="disk-stat"><span>Диск</span><b>'+(v.maxdisk?size(v.disk)+' · '+fixed(diskPercent)+'%':'—')+'</b></div><div class="disk-stat"><span>Сеть</span><b>↓ '+size(v.netin)+' · ↑ '+size(v.netout)+'</b></div><div class="disk-stat"><span>Guest Agent</span><b>'+(v.agent?'Доступен':'Нет')+'</b></div><div class="disk-stat"><span>Автозапуск</span><b>'+(v.onboot?'Да':'Нет')+'</b></div><div class="disk-stat"><span>Storage</span><b>'+safe((v.storage||[]).join(', ')||'—')+'</b></div><div class="disk-stat"><span>Uptime</span><b>'+(live?uptime(v.uptime):'—')+'</b></div></div></article>'}).join(''):'<span class="empty">'+(g.available?'VM и LXC не найдены':'Команда pvesh недоступна')+'</span>';
+ el('maintenanceVersion').textContent=mt.proxmoxVersion||'Proxmox VE';el('maintenanceUpdates').textContent=mt.availableUpdates??'—';el('maintenanceBar').style.width=Math.min((mt.availableUpdates||0)*5,100)+'%';el('maintenanceReboot').textContent=(mt.rebootRequired||mt.newKernelAvailable)?'Требуется':'Не требуется';el('maintenanceKernel').textContent=mt.kernelVersion||'—';el('dPveVersion').textContent=mt.proxmoxVersion||'—';el('dKernel').textContent=mt.kernelVersion||'—';el('dLatestKernel').textContent=mt.latestInstalledKernel||'—';el('dUpdates').textContent=(mt.availableUpdates??'—')+' пакетов';el('dReboot').textContent=(mt.rebootRequired||mt.newKernelAvailable)?'Требуется':'Не требуется';el('dLastUpdate').textContent=mt.lastSystemUpdate?new Date(mt.lastSystemUpdate).toLocaleString('ru-RU'):'—';el('dNextBackup').textContent=mt.nextBackup||'Расписание не найдено';el('dNextScrub').textContent=mt.nextScrub||'Таймер не найден';el('dMaintenanceChecked').textContent=mt.checkedAt?new Date(mt.checkedAt).toLocaleString('ru-RU'):'—';
  const backupLimitHours=alertSettings.backupMaxAgeHours||48,backupLimit=backupLimitHours*3600,backupMap=new Map((b.items||[]).map(item=>[item.vmid,item])),now=Date.now()/1000,protectedGuests=guests.filter(v=>backupMap.has(v.vmid)),freshGuests=protectedGuests.filter(v=>now-backupMap.get(v.vmid).ctime<=backupLimit),missing=guests.length-protectedGuests.length;el('backupFreshLabel').textContent='Свежие · '+backupLimitHours+' часов';el('backupProtected').textContent=protectedGuests.length;el('backupTotal').textContent=' / '+guests.length;el('backupBar').style.width=guests.length?(protectedGuests.length/guests.length*100)+'%':'0%';el('backupFresh').textContent=b.available?freshGuests.length:'Не найдено';el('backupMissing').textContent=b.available?missing:'—';
  el('backupList').innerHTML=guests.length?guests.map(v=>{const item=backupMap.get(v.vmid),type=v.type==='qemu'?'VM':'LXC';if(!item)return '<article class="disk-item"><div class="disk-top"><div><div class="disk-model">'+safe(v.name||('Guest '+v.vmid))+'</div><div class="disk-meta">VMID '+v.vmid+' · '+type+'</div></div><span class="badge bad">Копии нет</span></div></article>';const age=now-item.ctime,fresh=age<=backupLimit,date=new Date(item.ctime*1000).toLocaleString('ru-RU');return '<article class="disk-item"><div class="disk-top"><div><div class="disk-model">'+safe(v.name||('Guest '+v.vmid))+'</div><div class="disk-meta">VMID '+v.vmid+' · '+type+' · '+date+'</div></div><span class="badge '+(fresh?'':'warn')+'">'+(fresh?'Актуальна':'Старше '+backupLimitHours+' ч')+'</span></div><div class="disk-stats"><div class="disk-stat"><span>Хранилище</span><b>'+safe(item.storage)+'</b></div><div class="disk-stat"><span>Размер</span><b>'+size(item.size)+'</b></div><div class="disk-stat"><span>Формат</span><b>'+safe(item.format)+'</b></div><div class="disk-stat"><span>Возраст</span><b>'+uptime(age)+'</b></div><div class="disk-stat"><span>Создана</span><b>'+date+'</b></div><div class="disk-stat"><span>VMID</span><b>'+v.vmid+'</b></div></div></article>'}).join(''):'<span class="empty">'+(b.available?'VM и LXC не найдены':'Данные резервных копий недоступны')+'</span>';
  el('dot').classList.add('live');el('status').textContent='Данные поступают';
@@ -468,9 +488,12 @@ document.querySelectorAll('dialog').forEach(d=>{d.querySelector('.close').onclic
 el('alertList').onclick=async event=>{const button=event.target.closest('[data-ack]');if(!button)return;button.disabled=true;const response=await fetch('/api/alerts/acknowledge',{method:'POST',headers:{'Content-Type':'application/json'},body:JSON.stringify({eventId:Number(button.dataset.ack)})});if(response.ok)button.closest('.alert-item').remove();else button.disabled=false};
 async function loadAlertHistory(){const response=await fetch('/api/alerts/history');if(!response.ok)return;const events=await response.json()||[];el('alertHistory').innerHTML=events.length?events.map(a=>{const state=a.acknowledgedAt?'Принято · '+new Date(a.acknowledgedAt*1000).toLocaleString('ru-RU'):a.resolvedAt?'Завершено · '+new Date(a.resolvedAt*1000).toLocaleString('ru-RU'):'Активно';return '<article class="alert-item '+safe(a.severity)+'"><i class="alert-icon"></i><div><div class="alert-source">'+safe(a.source)+' · '+new Date(a.firstSeen*1000).toLocaleString('ru-RU')+'</div><div class="alert-title">'+safe(a.title)+'</div><div class="alert-message">'+safe(a.message)+'</div><span class="history-state">'+state+'</span></div></article>'}).join(''):'<div class="all-good"><strong>История пока пуста</strong><span>Новые события появятся здесь автоматически.</span></div>'}
 document.querySelectorAll('[data-alert-tab]').forEach(tab=>tab.onclick=()=>{document.querySelectorAll('[data-alert-tab]').forEach(t=>t.classList.toggle('active',t===tab));document.querySelectorAll('[data-alert-panel]').forEach(p=>p.hidden=p.dataset.alertPanel!==tab.dataset.alertTab);if(tab.dataset.alertTab==='history')loadAlertHistory()});
-const cardNames=['alerts','cpu','memory','storage','network','zfs','ups','guests','backups'];let hiddenCards=[];try{hiddenCards=JSON.parse(localStorage.getItem('proxmox-hidden-cards')||'[]')}catch(e){}
-function applyCardSettings(){cardNames.forEach(name=>{const visible=!hiddenCards.includes(name),card=document.querySelector('[data-card="'+name+'"]'),toggle=document.querySelector('[data-card-toggle="'+name+'"]');if(card)card.hidden=!visible;if(toggle)toggle.checked=visible})}
-document.querySelectorAll('[data-card-toggle]').forEach(toggle=>toggle.onchange=()=>{const name=toggle.dataset.cardToggle;hiddenCards=toggle.checked?hiddenCards.filter(v=>v!==name):[...new Set([...hiddenCards,name])];localStorage.setItem('proxmox-hidden-cards',JSON.stringify(hiddenCards));applyCardSettings()});applyCardSettings();
+const cardNames=['alerts','cpu','memory','storage','network','zfs','ups','guests','maintenance','backups'],cardLabels={alerts:'Центр уведомлений',cpu:'CPU',memory:'Память',storage:'Диски',network:'Сеть',zfs:'ZFS',ups:'UPS',guests:'VM и LXC',maintenance:'Proxmox',backups:'Резервные копии'};let hiddenCards=[],cardOrder=[];try{hiddenCards=JSON.parse(localStorage.getItem('proxmox-hidden-cards')||'[]');cardOrder=JSON.parse(localStorage.getItem('proxmox-card-order')||'[]')}catch(e){}cardOrder=[...cardOrder.filter(x=>cardNames.includes(x)),...cardNames.filter(x=>!cardOrder.includes(x))];
+function renderCardOrder(){el('cardOrder').innerHTML=cardOrder.map(name=>'<div class="order-item" draggable="true" data-order-card="'+name+'"><span class="order-handle">⠿</span><span>'+cardLabels[name]+'</span><button class="order-button" data-move="up" aria-label="Выше">↑</button><button class="order-button" data-move="down" aria-label="Ниже">↓</button></div>').join('')}
+function saveCardOrder(){localStorage.setItem('proxmox-card-order',JSON.stringify(cardOrder));applyCardSettings();renderCardOrder()}
+function applyCardSettings(){const container=document.querySelector('.cards');cardOrder.forEach(name=>{const card=document.querySelector('[data-card="'+name+'"]');if(card)container.appendChild(card)});cardNames.forEach(name=>{const visible=!hiddenCards.includes(name),card=document.querySelector('[data-card="'+name+'"]'),toggle=document.querySelector('[data-card-toggle="'+name+'"]');if(card)card.hidden=!visible;if(toggle)toggle.checked=visible})}
+document.querySelectorAll('[data-card-toggle]').forEach(toggle=>toggle.onchange=()=>{const name=toggle.dataset.cardToggle;hiddenCards=toggle.checked?hiddenCards.filter(v=>v!==name):[...new Set([...hiddenCards,name])];localStorage.setItem('proxmox-hidden-cards',JSON.stringify(hiddenCards));applyCardSettings()});renderCardOrder();applyCardSettings();
+el('cardOrder').onclick=event=>{const button=event.target.closest('[data-move]'),item=event.target.closest('[data-order-card]');if(!button||!item)return;const index=cardOrder.indexOf(item.dataset.orderCard),next=button.dataset.move==='up'?index-1:index+1;if(next<0||next>=cardOrder.length)return;[cardOrder[index],cardOrder[next]]=[cardOrder[next],cardOrder[index]];saveCardOrder()};let draggedCard='';el('cardOrder').addEventListener('dragstart',event=>{const item=event.target.closest('[data-order-card]');if(!item)return;draggedCard=item.dataset.orderCard;item.classList.add('dragging')});el('cardOrder').addEventListener('dragend',event=>{event.target.closest('[data-order-card]')?.classList.remove('dragging');draggedCard=''});el('cardOrder').addEventListener('dragover',event=>event.preventDefault());el('cardOrder').addEventListener('drop',event=>{event.preventDefault();const target=event.target.closest('[data-order-card]');if(!target||!draggedCard||target.dataset.orderCard===draggedCard)return;const from=cardOrder.indexOf(draggedCard),to=cardOrder.indexOf(target.dataset.orderCard);cardOrder.splice(from,1);cardOrder.splice(to,0,draggedCard);saveCardOrder()});
 function setTheme(theme){document.documentElement.dataset.theme=theme;localStorage.setItem('proxmox-theme',theme);document.querySelectorAll('[data-theme-choice]').forEach(b=>b.classList.toggle('active',b.dataset.themeChoice===theme));document.querySelectorAll('.chart-section:not([hidden])').forEach(showHistory)}document.querySelectorAll('[data-theme-choice]').forEach(b=>b.onclick=()=>setTheme(b.dataset.themeChoice));setTheme(document.documentElement.dataset.theme);el('settingsButton').onclick=()=>el('settingsDialog').showModal();
 document.querySelectorAll('[data-settings-tab]').forEach(tab=>tab.onclick=()=>{document.querySelectorAll('[data-settings-tab]').forEach(t=>t.classList.toggle('active',t===tab));document.querySelectorAll('[data-settings-panel]').forEach(p=>p.hidden=p.dataset.settingsPanel!==tab.dataset.settingsTab)});
 async function loadThresholds(){const response=await fetch('/api/settings/alerts');if(!response.ok)return;alertSettings=await response.json();document.querySelectorAll('[data-threshold]').forEach(input=>input.value=alertSettings[input.dataset.threshold]??'')}