Add configurable email notification digests

README.md

@@ -28,6 +28,12 @@
 информационные сообщения по CPU, памяти, storage, SMART, ZFS, UPS, VM/LXC и
 резервным копиям. Критические события всегда отображаются первыми.
 
+Во вкладке `Настройки → Почта` настраиваются SMTP-сервер, получатель и интервал
+агрегированной сводки. Можно отдельно выбрать уровни важности и источники
+событий — например, полностью исключить уведомления о резервных копиях. Там же
+доступна отправка тестового письма. Поддерживаются STARTTLS (обычно порт 587) и
+SMTP поверх TLS (порт 465).
+
 Пороги уведомлений сохраняются в SQLite и настраиваются через вкладку
 `Настройки → Уведомления`. Панель раз в минуту сохраняет историю CPU,
 температуры, памяти, swap, сети, storage, ZFS, UPS и гостей. Данные старше семи
@@ -44,6 +50,13 @@
 Готовые версии для Linux публикуются в разделе Releases репозитория. Бинарник
 не требует установки Go или системной библиотеки SQLite.
 
+Проверка обновлений выполняется отдельным systemd-таймером раз в сутки. Статус
+виден во вкладке `Настройки → Обновления` и в центре уведомлений. Доступны два
+режима: `notify` только сообщает о новой версии, `auto` скачивает её, сохраняет
+предыдущий бинарник как резервный и перезапускает панель. В режиме `notify`
+обновление можно запустить кнопкой `Проверить и установить обновление` в
+настройках. Запрос выполняет отдельная системная служба.
+
 На главном экране находятся компактные карточки CPU, памяти, диска и сети.
 Нажатие на карточку открывает подробные показатели.
 
@@ -56,6 +69,32 @@ chmod +x proxmox-cpu-dashboard-linux-amd64
 ./proxmox-cpu-dashboard-linux-amd64
 ```
 
+## Установка на сервер и обновления
+
+Скачайте из Releases архив `proxmox-dashboard-install-amd64.tar.gz`, распакуйте
+его на Proxmox и запустите от root:
+
+```bash
+tar -xzf proxmox-dashboard-install-amd64.tar.gz
+cd proxmox-dashboard-install
+UPDATE_MODE=notify ./scripts/install.sh
+```
+
+Для полностью автоматических обновлений используйте `UPDATE_MODE=auto`.
+Приватному репозиторию нужен read-only API-токен Gitea:
+
+```bash
+GITEA_TOKEN='read-only-token' UPDATE_MODE=auto ./scripts/install.sh
+```
+
+Токен сохраняется с правами `0600` в `/etc/proxmox-dashboard/update.env`.
+Проверить обновления вручную можно командой:
+
+```bash
+systemctl start proxmox-dashboard-update.service
+systemctl status proxmox-dashboard-update.service
+```
+
 Откройте:
 
 ```text

alerts.go

@@ -20,6 +20,11 @@ func evaluateAlerts(metrics dashboardMetrics, thresholds AlertThresholds) []Aler
 	add := func(id, severity, source, title, message string) {
 		alerts = append(alerts, Alert{ID: id, Severity: severity, Source: source, Title: title, Message: message})
 	}
+	if metrics.Update.State == "available" {
+		add("dashboard-update", "info", "Dashboard", "Доступно обновление "+metrics.Update.AvailableVersion, "Режим обновлений: только уведомлять. Установите обновление с сервера или включите автоматический режим.")
+	} else if metrics.Update.State == "error" {
+		add("dashboard-update-error", "warning", "Dashboard", "Не удалось проверить обновления", metrics.Update.Message)
+	}
 
 	if metrics.CPU.UsagePercent >= thresholds.CPUCritical {
 		add("cpu-usage", "critical", "CPU", "Очень высокая загрузка CPU", fmt.Sprintf("Текущая загрузка %.1f%%.", metrics.CPU.UsagePercent))

email.go

@@ -0,0 +1,130 @@
+package main
+
+import (
+	"crypto/tls"
+	"fmt"
+	"log"
+	"net"
+	"net/smtp"
+	"sort"
+	"strings"
+	"time"
+)
+
+func filterEmailAlerts(alerts []Alert, settings EmailSettings) []Alert {
+	allowedSeverity, allowedSource := map[string]bool{}, map[string]bool{}
+	for _, value := range settings.Severities {
+		allowedSeverity[value] = true
+	}
+	for _, value := range settings.Sources {
+		allowedSource[value] = true
+	}
+	var result []Alert
+	for _, alert := range alerts {
+		if allowedSeverity[alert.Severity] && allowedSource[alert.Source] {
+			result = append(result, alert)
+		}
+	}
+	return result
+}
+
+func sendAlertEmail(settings EmailSettings, alerts []Alert, test bool) error {
+	subject := "Proxmox Dashboard: сводка уведомлений"
+	body := "Система не обнаружила выбранных активных событий."
+	if test {
+		subject = "Proxmox Dashboard: тест почты"
+		body = "Почтовые уведомления настроены правильно."
+	}
+	if len(alerts) > 0 {
+		groups := map[string][]Alert{}
+		for _, alert := range alerts {
+			groups[alert.Severity] = append(groups[alert.Severity], alert)
+		}
+		var lines []string
+		for _, severity := range []string{"critical", "warning", "info"} {
+			items := groups[severity]
+			if len(items) == 0 {
+				continue
+			}
+			title := map[string]string{"critical": "КРИТИЧЕСКИЕ", "warning": "ПРЕДУПРЕЖДЕНИЯ", "info": "ИНФОРМАЦИЯ"}[severity]
+			lines = append(lines, title)
+			sort.Slice(items, func(i, j int) bool { return items[i].Title < items[j].Title })
+			for _, item := range items {
+				lines = append(lines, fmt.Sprintf("• [%s] %s\n  %s", item.Source, item.Title, item.Message))
+			}
+		}
+		body = strings.Join(lines, "\n\n")
+		subject = fmt.Sprintf("Proxmox Dashboard: событий — %d", len(alerts))
+	}
+	message := []byte("From: " + settings.From + "\r\nTo: " + settings.To + "\r\nSubject: " + subject + "\r\nMIME-Version: 1.0\r\nContent-Type: text/plain; charset=UTF-8\r\nContent-Transfer-Encoding: 8bit\r\n\r\n" + body + "\r\n")
+	address := net.JoinHostPort(settings.Host, fmt.Sprint(settings.Port))
+	var client *smtp.Client
+	if settings.Port == 465 {
+		connection, err := tls.Dial("tcp", address, &tls.Config{ServerName: settings.Host, MinVersion: tls.VersionTLS12})
+		if err != nil {
+			return err
+		}
+		client, err = smtp.NewClient(connection, settings.Host)
+		if err != nil {
+			return err
+		}
+	} else {
+		var err error
+		client, err = smtp.Dial(address)
+		if err != nil {
+			return err
+		}
+		if ok, _ := client.Extension("STARTTLS"); ok {
+			if err = client.StartTLS(&tls.Config{ServerName: settings.Host, MinVersion: tls.VersionTLS12}); err != nil {
+				return err
+			}
+		}
+	}
+	defer client.Close()
+	if settings.Username != "" {
+		if err := client.Auth(smtp.PlainAuth("", settings.Username, settings.Password, settings.Host)); err != nil {
+			return err
+		}
+	}
+	if err := client.Mail(settings.From); err != nil {
+		return err
+	}
+	if err := client.Rcpt(settings.To); err != nil {
+		return err
+	}
+	writer, err := client.Data()
+	if err != nil {
+		return err
+	}
+	if _, err = writer.Write(message); err != nil {
+		return err
+	}
+	if err = writer.Close(); err != nil {
+		return err
+	}
+	return client.Quit()
+}
+
+func runEmailNotifier(collect func() (dashboardMetrics, error), store *Store) {
+	ticker := time.NewTicker(time.Minute)
+	defer ticker.Stop()
+	for range ticker.C {
+		settings := store.EmailSettings(true)
+		if !settings.Enabled || time.Since(store.LastEmailAt()) < time.Duration(settings.IntervalMinutes)*time.Minute {
+			continue
+		}
+		metrics, err := collect()
+		if err != nil {
+			continue
+		}
+		alerts := filterEmailAlerts(metrics.Alerts, settings)
+		if len(alerts) == 0 {
+			continue
+		}
+		if err := sendAlertEmail(settings, alerts, false); err != nil {
+			log.Printf("Не удалось отправить почтовую сводку: %v", err)
+			continue
+		}
+		store.SetLastEmailAt(time.Now())
+	}
+}

email_test.go

@@ -0,0 +1,40 @@
+package main
+
+import "testing"
+
+func TestFilterEmailAlerts(t *testing.T) {
+	alerts := []Alert{
+		{ID: "cpu", Severity: "critical", Source: "CPU"},
+		{ID: "backup", Severity: "critical", Source: "Backups"},
+		{ID: "info", Severity: "info", Source: "CPU"},
+	}
+	settings := EmailSettings{Severities: []string{"critical"}, Sources: []string{"CPU"}}
+	filtered := filterEmailAlerts(alerts, settings)
+	if len(filtered) != 1 || filtered[0].ID != "cpu" {
+		t.Fatalf("unexpected filtered alerts: %+v", filtered)
+	}
+}
+
+func TestEmailPasswordIsPreserved(t *testing.T) {
+	store, err := openStore(":memory:")
+	if err != nil {
+		t.Fatal(err)
+	}
+	defer store.Close()
+	settings := defaultEmailSettings()
+	settings.Host, settings.From, settings.To, settings.Password = "smtp.example.com", "dash@example.com", "admin@example.com", "secret"
+	if err := store.SaveEmailSettings(settings); err != nil {
+		t.Fatal(err)
+	}
+	settings.Password = ""
+	settings.IntervalMinutes = 120
+	if err := store.SaveEmailSettings(settings); err != nil {
+		t.Fatal(err)
+	}
+	if got := store.EmailSettings(true); got.Password != "secret" || got.IntervalMinutes != 120 {
+		t.Fatalf("unexpected settings: %+v", got)
+	}
+	if got := store.EmailSettings(false); got.Password != "" || !got.HasPassword {
+		t.Fatalf("password leaked or marker lost: %+v", got)
+	}
+}

main.go

@@ -3,6 +3,7 @@ package main
 import (
 	"context"
 	"errors"
+	"flag"
 	"fmt"
 	"log"
 	"net/http"
@@ -18,6 +19,13 @@ const defaultDatabasePath = "/var/lib/proxmox-dashboard/dashboard.db"
 var version = "dev"
 
 func main() {
+	showVersion := flag.Bool("version", false, "show version")
+	flag.Parse()
+	if *showVersion {
+		fmt.Println(version)
+		return
+	}
+
 	address := os.Getenv("DASHBOARD_ADDR")
 	if address == "" {
 		address = defaultAddress

proxmox-dashboard-update.path

@@ -0,0 +1,9 @@
+[Unit]
+Description=Watch for manual Proxmox Dashboard update requests
+
+[Path]
+PathExists=/var/lib/proxmox-dashboard/update-request
+Unit=proxmox-dashboard-update.service
+
+[Install]
+WantedBy=multi-user.target

proxmox-dashboard-update.service

@@ -0,0 +1,10 @@
+[Unit]
+Description=Check and install Proxmox Dashboard updates
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+Type=oneshot
+ExecStart=/usr/local/sbin/proxmox-dashboard-update
+Nice=10
+IOSchedulingClass=idle

proxmox-dashboard-update.timer

@@ -0,0 +1,11 @@
+[Unit]
+Description=Check Proxmox Dashboard updates daily
+
+[Timer]
+OnBootSec=10min
+OnUnitActiveSec=24h
+RandomizedDelaySec=30min
+Persistent=true
+
+[Install]
+WantedBy=timers.target

scripts/install.sh

@@ -0,0 +1,37 @@
+#!/bin/sh
+set -eu
+
+if [ "$(id -u)" -ne 0 ]; then
+  echo "Запустите установщик от root." >&2
+  exit 1
+fi
+
+SOURCE_DIR=$(CDPATH= cd -- "$(dirname -- "$0")/.." && pwd)
+UPDATE_MODE=${UPDATE_MODE:-notify}
+GITEA_URL=${GITEA_URL:-https://git.myown.center}
+GITEA_REPOSITORY=${GITEA_REPOSITORY:-maxim/ProxmoxDash}
+GITEA_TOKEN=${GITEA_TOKEN:-}
+
+install -d -m 0750 /etc/proxmox-dashboard /var/lib/proxmox-dashboard
+install -m 0755 "$SOURCE_DIR/dist/proxmox-dashboard-linux-amd64" /usr/local/bin/proxmox-cpu-dashboard
+install -m 0755 "$SOURCE_DIR/scripts/proxmox-dashboard-update" /usr/local/sbin/proxmox-dashboard-update
+install -m 0644 "$SOURCE_DIR/proxmox-cpu-dashboard.service" /etc/systemd/system/proxmox-cpu-dashboard.service
+install -m 0644 "$SOURCE_DIR/proxmox-dashboard-update.service" /etc/systemd/system/proxmox-dashboard-update.service
+install -m 0644 "$SOURCE_DIR/proxmox-dashboard-update.timer" /etc/systemd/system/proxmox-dashboard-update.timer
+install -m 0644 "$SOURCE_DIR/proxmox-dashboard-update.path" /etc/systemd/system/proxmox-dashboard-update.path
+
+umask 077
+{
+  printf 'GITEA_URL=%s\n' "$GITEA_URL"
+  printf 'GITEA_REPOSITORY=%s\n' "$GITEA_REPOSITORY"
+  printf 'GITEA_TOKEN=%s\n' "$GITEA_TOKEN"
+  printf 'UPDATE_MODE=%s\n' "$UPDATE_MODE"
+} > /etc/proxmox-dashboard/update.env
+
+systemctl daemon-reload
+systemctl enable proxmox-cpu-dashboard.service
+systemctl restart proxmox-cpu-dashboard.service
+systemctl enable --now proxmox-dashboard-update.timer
+systemctl enable --now proxmox-dashboard-update.path
+systemctl start proxmox-dashboard-update.service
+echo "Proxmox Dashboard установлен. Откройте http://$(hostname -I | awk '{print $1}'):9105"

scripts/proxmox-dashboard-update

@@ -0,0 +1,111 @@
+#!/bin/sh
+set -eu
+
+CONFIG_FILE=${DASHBOARD_UPDATE_CONFIG:-/etc/proxmox-dashboard/update.env}
+STATUS_FILE=${DASHBOARD_UPDATE_STATUS_PATH:-/var/lib/proxmox-dashboard/update-status.json}
+BINARY_PATH=${DASHBOARD_BINARY_PATH:-/usr/local/bin/proxmox-cpu-dashboard}
+REQUEST_FILE=${DASHBOARD_UPDATE_REQUEST_PATH:-/var/lib/proxmox-dashboard/update-request}
+
+if [ -f "$CONFIG_FILE" ]; then
+  # shellcheck disable=SC1090
+  . "$CONFIG_FILE"
+fi
+
+GITEA_URL=${GITEA_URL:-https://git.myown.center}
+GITEA_REPOSITORY=${GITEA_REPOSITORY:-maxim/ProxmoxDash}
+GITEA_TOKEN=${GITEA_TOKEN:-}
+UPDATE_MODE=${UPDATE_MODE:-notify}
+ASSET_NAME=${ASSET_NAME:-proxmox-dashboard-linux-amd64}
+manual_request=false
+if [ -f "$REQUEST_FILE" ]; then
+  manual_request=true
+  rm -f "$REQUEST_FILE"
+fi
+
+mkdir -p "$(dirname "$STATUS_FILE")"
+tmp_dir=$(mktemp -d /tmp/proxmox-dashboard-update.XXXXXX)
+trap 'rm -rf "$tmp_dir"' EXIT INT TERM
+
+auth_header=""
+if [ -n "$GITEA_TOKEN" ]; then
+  auth_header="Authorization: token $GITEA_TOKEN"
+fi
+
+api_get() {
+  if [ -n "$auth_header" ]; then
+    curl --fail --silent --show-error --location --header "$auth_header" "$1"
+  else
+    curl --fail --silent --show-error --location "$1"
+  fi
+}
+
+write_status() {
+  python3 - "$STATUS_FILE" "$1" "$2" "$3" "$4" "$5" "$6" <<'PY'
+import datetime, json, os, sys, tempfile
+path, current, available, state, mode, message, release_url = sys.argv[1:]
+payload = {
+    "currentVersion": current,
+    "availableVersion": available,
+    "state": state,
+    "mode": mode,
+    "message": message,
+    "releaseUrl": release_url,
+    "checkedAt": datetime.datetime.now(datetime.timezone.utc).isoformat(),
+}
+fd, temporary = tempfile.mkstemp(dir=os.path.dirname(path), prefix=".update-status-")
+with os.fdopen(fd, "w") as stream:
+    json.dump(payload, stream)
+os.chmod(temporary, 0o644)
+os.replace(temporary, path)
+PY
+}
+
+current_version=$($BINARY_PATH -version 2>/dev/null || printf 'dev')
+release_json=$(api_get "$GITEA_URL/api/v1/repos/$GITEA_REPOSITORY/releases/latest")
+printf '%s' "$release_json" > "$tmp_dir/release.json"
+release_data=$(python3 - "$tmp_dir/release.json" "$ASSET_NAME" <<'PY'
+import json, sys
+release = json.load(open(sys.argv[1]))
+asset_name = sys.argv[2]
+assets = {item.get("name"): item.get("browser_download_url") for item in release.get("assets", [])}
+binary = assets.get(asset_name, "")
+checksum = assets.get(asset_name + ".sha256", "")
+print(release.get("tag_name", ""))
+print(release.get("html_url", ""))
+print(binary)
+print(checksum)
+PY
+)
+latest_version=$(printf '%s\n' "$release_data" | sed -n '1p')
+release_url=$(printf '%s\n' "$release_data" | sed -n '2p')
+binary_url=$(printf '%s\n' "$release_data" | sed -n '3p')
+checksum_url=$(printf '%s\n' "$release_data" | sed -n '4p')
+
+if [ -z "$latest_version" ] || [ -z "$binary_url" ]; then
+  write_status "$current_version" "$latest_version" error "$UPDATE_MODE" "В свежем релизе не найден бинарник $ASSET_NAME." "$release_url"
+  exit 1
+fi
+
+newest=$(printf '%s\n%s\n' "$current_version" "$latest_version" | sort -V | tail -n 1)
+if [ "$current_version" = "$latest_version" ] || [ "$newest" = "$current_version" ]; then
+  write_status "$current_version" "$latest_version" current "$UPDATE_MODE" "Установлена свежая версия." "$release_url"
+  exit 0
+fi
+
+if [ "$UPDATE_MODE" != "auto" ] && [ "$manual_request" != "true" ]; then
+  write_status "$current_version" "$latest_version" available "$UPDATE_MODE" "Доступна новая версия $latest_version." "$release_url"
+  exit 0
+fi
+
+write_status "$current_version" "$latest_version" installing "$UPDATE_MODE" "Скачиваем и проверяем $latest_version." "$release_url"
+api_get "$binary_url" > "$tmp_dir/$ASSET_NAME"
+if [ -n "$checksum_url" ]; then
+  api_get "$checksum_url" > "$tmp_dir/$ASSET_NAME.sha256"
+  (cd "$tmp_dir" && sha256sum -c "$ASSET_NAME.sha256")
+fi
+chmod 0755 "$tmp_dir/$ASSET_NAME"
+file "$tmp_dir/$ASSET_NAME" | grep -q 'ELF 64-bit'
+cp -p "$BINARY_PATH" "$BINARY_PATH.previous"
+install -m 0755 "$tmp_dir/$ASSET_NAME" "$BINARY_PATH"
+write_status "$latest_version" "$latest_version" updated "$UPDATE_MODE" "Обновление $latest_version установлено." "$release_url"
+systemctl restart proxmox-cpu-dashboard.service

store.go

@@ -6,6 +6,7 @@ import (
 	"fmt"
 	"os"
 	"path/filepath"
+	"strings"
 	"time"
 
 	_ "modernc.org/sqlite"
@@ -59,6 +60,20 @@ type HistoryPoint struct {
 
 type Store struct{ db *sql.DB }
 
+type EmailSettings struct {
+	Enabled         bool     `json:"enabled"`
+	Host            string   `json:"host"`
+	Port            int      `json:"port"`
+	Username        string   `json:"username"`
+	Password        string   `json:"password,omitempty"`
+	HasPassword     bool     `json:"hasPassword"`
+	From            string   `json:"from"`
+	To              string   `json:"to"`
+	IntervalMinutes int      `json:"intervalMinutes"`
+	Severities      []string `json:"severities"`
+	Sources         []string `json:"sources"`
+}
+
 func openStore(path string) (*Store, error) {
 	if path != ":memory:" {
 		if err := os.MkdirAll(filepath.Dir(path), 0o750); err != nil {
@@ -114,6 +129,55 @@ func (s *Store) SaveThresholds(value AlertThresholds) error {
 	return err
 }
 
+func defaultEmailSettings() EmailSettings {
+	return EmailSettings{Port: 587, IntervalMinutes: 60, Severities: []string{"critical", "warning"}, Sources: []string{"CPU", "Память", "Storage", "Диски", "ZFS", "UPS", "VM/LXC", "Dashboard"}}
+}
+
+func (s *Store) EmailSettings(includePassword bool) EmailSettings {
+	settings := defaultEmailSettings()
+	var value string
+	if s.db.QueryRow(`SELECT value FROM settings WHERE key='email_notifications'`).Scan(&value) == nil {
+		_ = json.Unmarshal([]byte(value), &settings)
+	}
+	settings.HasPassword = settings.Password != ""
+	if !includePassword {
+		settings.Password = ""
+	}
+	return settings
+}
+
+func (s *Store) SaveEmailSettings(settings EmailSettings) error {
+	if settings.Port < 1 || settings.Port > 65535 || settings.IntervalMinutes < 5 || settings.IntervalMinutes > 10080 {
+		return fmt.Errorf("проверьте порт и интервал (от 5 минут до 7 дней)")
+	}
+	if settings.Enabled && (settings.Host == "" || settings.From == "" || settings.To == "") {
+		return fmt.Errorf("для отправки нужны SMTP-сервер, отправитель и получатель")
+	}
+	if strings.ContainsAny(settings.Host+settings.From+settings.To+settings.Username, "\r\n") {
+		return fmt.Errorf("поля почты содержат недопустимые символы")
+	}
+	if settings.Password == "" {
+		settings.Password = s.EmailSettings(true).Password
+	}
+	settings.HasPassword = settings.Password != ""
+	data, _ := json.Marshal(settings)
+	_, err := s.db.Exec(`INSERT INTO settings(key,value) VALUES('email_notifications',?) ON CONFLICT(key) DO UPDATE SET value=excluded.value`, string(data))
+	return err
+}
+
+func (s *Store) LastEmailAt() time.Time {
+	var value string
+	if s.db.QueryRow(`SELECT value FROM settings WHERE key='email_last_sent'`).Scan(&value) != nil {
+		return time.Time{}
+	}
+	result, _ := time.Parse(time.RFC3339, value)
+	return result
+}
+
+func (s *Store) SetLastEmailAt(value time.Time) {
+	_, _ = s.db.Exec(`INSERT INTO settings(key,value) VALUES('email_last_sent',?) ON CONFLICT(key) DO UPDATE SET value=excluded.value`, value.Format(time.RFC3339))
+}
+
 func validateThresholds(t AlertThresholds) error {
 	percentages := []float64{t.CPUWarning, t.CPUCritical, t.MemoryWarning, t.MemoryCritical, t.SwapWarning, t.StorageWarning, t.StorageCritical, t.ZFSWarning, t.ZFSCritical, t.UPSChargeCritical}
 	for _, value := range percentages {

update.go

@@ -0,0 +1,77 @@
+package main
+
+import (
+	"encoding/json"
+	"fmt"
+	"os"
+	"path/filepath"
+	"time"
+)
+
+const defaultUpdateStatusPath = "/var/lib/proxmox-dashboard/update-status.json"
+const defaultUpdateRequestPath = "/var/lib/proxmox-dashboard/update-request"
+
+type UpdateStatus struct {
+	CurrentVersion   string    `json:"currentVersion"`
+	AvailableVersion string    `json:"availableVersion"`
+	State            string    `json:"state"`
+	Mode             string    `json:"mode"`
+	Message          string    `json:"message"`
+	ReleaseURL       string    `json:"releaseUrl"`
+	CheckedAt        time.Time `json:"checkedAt"`
+}
+
+func readUpdateStatus() UpdateStatus {
+	status := UpdateStatus{CurrentVersion: version, State: "unknown", Mode: "notify"}
+	path := os.Getenv("DASHBOARD_UPDATE_STATUS_PATH")
+	if path == "" {
+		path = defaultUpdateStatusPath
+	}
+	data, err := os.ReadFile(path)
+	if err != nil || json.Unmarshal(data, &status) != nil {
+		return status
+	}
+	status.CurrentVersion = version
+	return status
+}
+
+func requestUpdate() (UpdateStatus, error) {
+	requestPath := os.Getenv("DASHBOARD_UPDATE_REQUEST_PATH")
+	if requestPath == "" {
+		requestPath = defaultUpdateRequestPath
+	}
+	if err := os.MkdirAll(filepath.Dir(requestPath), 0o750); err != nil {
+		return UpdateStatus{}, err
+	}
+	status := readUpdateStatus()
+	status.State = "queued"
+	status.Message = "Обновление поставлено в очередь."
+	status.CheckedAt = time.Now()
+	statusPath := os.Getenv("DASHBOARD_UPDATE_STATUS_PATH")
+	if statusPath == "" {
+		statusPath = defaultUpdateStatusPath
+	}
+	data, _ := json.Marshal(status)
+	temporary, err := os.CreateTemp(filepath.Dir(statusPath), ".update-status-")
+	if err != nil {
+		return UpdateStatus{}, err
+	}
+	temporaryPath := temporary.Name()
+	defer os.Remove(temporaryPath)
+	if _, err = temporary.Write(data); err == nil {
+		err = temporary.Chmod(0o644)
+	}
+	if closeErr := temporary.Close(); err == nil {
+		err = closeErr
+	}
+	if err == nil {
+		err = os.Rename(temporaryPath, statusPath)
+	}
+	if err != nil {
+		return UpdateStatus{}, fmt.Errorf("не удалось сохранить запрос обновления: %w", err)
+	}
+	if err := os.WriteFile(requestPath, []byte(time.Now().Format(time.RFC3339Nano)), 0o640); err != nil {
+		return UpdateStatus{}, err
+	}
+	return status, nil
+}

update_test.go

@@ -0,0 +1,45 @@
+package main
+
+import (
+	"os"
+	"path/filepath"
+	"testing"
+)
+
+func TestReadUpdateStatus(t *testing.T) {
+	path := filepath.Join(t.TempDir(), "status.json")
+	if err := os.WriteFile(path, []byte(`{"currentVersion":"old","availableVersion":"v2.0.0","state":"available","mode":"notify","message":"Доступно обновление"}`), 0o600); err != nil {
+		t.Fatal(err)
+	}
+	t.Setenv("DASHBOARD_UPDATE_STATUS_PATH", path)
+	status := readUpdateStatus()
+	if status.CurrentVersion != version || status.AvailableVersion != "v2.0.0" || status.State != "available" {
+		t.Fatalf("unexpected update status: %+v", status)
+	}
+}
+
+func TestReadUpdateStatusWithoutFile(t *testing.T) {
+	t.Setenv("DASHBOARD_UPDATE_STATUS_PATH", filepath.Join(t.TempDir(), "missing.json"))
+	status := readUpdateStatus()
+	if status.CurrentVersion != version || status.State != "unknown" {
+		t.Fatalf("unexpected default update status: %+v", status)
+	}
+}
+
+func TestRequestUpdate(t *testing.T) {
+	directory := t.TempDir()
+	statusPath := filepath.Join(directory, "status.json")
+	requestPath := filepath.Join(directory, "request")
+	t.Setenv("DASHBOARD_UPDATE_STATUS_PATH", statusPath)
+	t.Setenv("DASHBOARD_UPDATE_REQUEST_PATH", requestPath)
+	status, err := requestUpdate()
+	if err != nil {
+		t.Fatal(err)
+	}
+	if status.State != "queued" {
+		t.Fatalf("unexpected queued status: %+v", status)
+	}
+	if _, err := os.Stat(requestPath); err != nil {
+		t.Fatalf("update request was not created: %v", err)
+	}
+}

web.go

@@ -20,6 +20,7 @@ type dashboardMetrics struct {
 	Guests    GuestsMetrics  `json:"guests"`
 	Backups   BackupMetrics  `json:"backups"`
 	Alerts    []Alert        `json:"alerts"`
+	Update    UpdateStatus   `json:"update"`
 	Timestamp time.Time      `json:"timestamp"`
 }
 
@@ -44,7 +45,7 @@ func collectDashboard(cpuCollector *cpuCollector, networkCollector *networkColle
 		CPU: cpu, Memory: memory, Storage: storage,
 		Disks: diskCollector.collect(), Network: network,
 		ZFS: zfsCollector.collect(), UPS: upsCollector.collect(),
-		Guests: guestCollector.collect(), Backups: backupCollector.collect(), Timestamp: time.Now(),
+		Guests: guestCollector.collect(), Backups: backupCollector.collect(), Update: readUpdateStatus(), Timestamp: time.Now(),
 	}
 	metrics.Alerts = evaluateAlerts(metrics, store.Thresholds())
 	return metrics, nil
@@ -62,6 +63,7 @@ func routes(collector *cpuCollector, store *Store) http.Handler {
 		return collectDashboard(collector, network, disks, zfs, ups, guests, backups, store)
 	}
 	go runHistoryCollector(collect, store)
+	go runEmailNotifier(collect, store)
 	mux.HandleFunc("/", func(w http.ResponseWriter, r *http.Request) {
 		if r.URL.Path != "/" {
 			http.NotFound(w, r)
@@ -75,6 +77,15 @@ func routes(collector *cpuCollector, store *Store) http.Handler {
 		writeJSON(w, metrics, err)
 	})
 	mux.HandleFunc("/api/version", func(w http.ResponseWriter, _ *http.Request) { writeJSON(w, map[string]string{"version": version}, nil) })
+	mux.HandleFunc("/api/update/status", func(w http.ResponseWriter, _ *http.Request) { writeJSON(w, readUpdateStatus(), nil) })
+	mux.HandleFunc("/api/update/request", func(w http.ResponseWriter, r *http.Request) {
+		if r.Method != http.MethodPost {
+			w.WriteHeader(http.StatusMethodNotAllowed)
+			return
+		}
+		status, err := requestUpdate()
+		writeJSON(w, status, err)
+	})
 	mux.HandleFunc("/api/system", func(w http.ResponseWriter, _ *http.Request) {
 		if networkErr != nil {
 			writeJSON(w, nil, networkErr)
@@ -102,6 +113,33 @@ func routes(collector *cpuCollector, store *Store) http.Handler {
 			w.WriteHeader(http.StatusMethodNotAllowed)
 		}
 	})
+	mux.HandleFunc("/api/settings/email", func(w http.ResponseWriter, r *http.Request) {
+		switch r.Method {
+		case http.MethodGet:
+			writeJSON(w, store.EmailSettings(false), nil)
+		case http.MethodPut:
+			var settings EmailSettings
+			if err := json.NewDecoder(io.LimitReader(r.Body, 64<<10)).Decode(&settings); err != nil {
+				http.Error(w, "Некорректные настройки", http.StatusBadRequest)
+				return
+			}
+			if err := store.SaveEmailSettings(settings); err != nil {
+				http.Error(w, err.Error(), http.StatusBadRequest)
+				return
+			}
+			writeJSON(w, store.EmailSettings(false), nil)
+		default:
+			w.WriteHeader(http.StatusMethodNotAllowed)
+		}
+	})
+	mux.HandleFunc("/api/settings/email/test", func(w http.ResponseWriter, r *http.Request) {
+		if r.Method != http.MethodPost {
+			w.WriteHeader(http.StatusMethodNotAllowed)
+			return
+		}
+		settings := store.EmailSettings(true)
+		writeJSON(w, map[string]bool{"sent": true}, sendAlertEmail(settings, nil, true))
+	})
 	mux.HandleFunc("/api/history", func(w http.ResponseWriter, r *http.Request) {
 		hours, _ := strconv.Atoi(r.URL.Query().Get("hours"))
 		points, err := store.History(hours)
@@ -176,6 +214,7 @@ dialog{width:min(760px,calc(100% - 28px));max-height:calc(100vh - 32px);padding:
 html[data-theme="light"] body{background:radial-gradient(circle at 78% -8%,#cde9da 0,transparent 34%),var(--bg)}html[data-theme="light"] .card{background:linear-gradient(145deg,#fff,#f7f9fa)}html[data-theme="light"] dialog{background:#fff;box-shadow:0 30px 80px #4e64752b}html[data-theme="light"] .modal-head{background:rgba(255,255,255,.94)}html[data-theme="light"] .close{background:#f1f4f6}html[data-theme="light"] .disk-item,html[data-theme="light"] .alert-item{background:#f7f9fa}html[data-theme="light"] .bar{background:#e2e8ec}html[data-theme="light"] dialog::backdrop{background:rgba(30,45,55,.35)}html[data-theme="light"] .badge[data-reason]:hover::after,html[data-theme="light"] .badge[data-reason]:focus::after,html[data-theme="light"] .chart-tooltip{background:#fff;box-shadow:0 12px 32px #4e647533}
 footer{color:#657581;font-size:12px;margin-top:17px}
 @media(max-width:700px){main{padding:28px 0}.cards{grid-template-columns:1fr}header{align-items:flex-start;flex-direction:column;gap:14px}.detail-grid{grid-template-columns:repeat(2,1fr)}.detail:nth-child(3n){border-right:1px solid var(--line)}.detail:nth-child(2n){border-right:0}.name{max-width:220px}.disk-stats,.setting-list,.threshold-grid{grid-template-columns:repeat(2,1fr)}.chart-head{align-items:flex-start;flex-direction:column}.detail-tabs{overflow-x:auto}}
+.save-settings:disabled{cursor:wait;opacity:.55}[data-settings-panel="email"] .threshold-item input{width:min(210px,52vw)}
 </style>
 </head>
 <body><main>
@@ -314,7 +353,7 @@ footer{color:#657581;font-size:12px;margin-top:17px}
 
 <dialog id="settingsDialog">
  <div class="modal-head"><div><div class="label">Dashboard</div><h2>Настройки</h2></div><button class="close" aria-label="Закрыть">×</button></div>
- <div class="settings-tabs"><button class="settings-tab active" data-settings-tab="appearance">Интерфейс</button><button class="settings-tab" data-settings-tab="alerts">Уведомления</button></div>
+ <div class="settings-tabs"><button class="settings-tab active" data-settings-tab="appearance">Интерфейс</button><button class="settings-tab" data-settings-tab="alerts">Пороги</button><button class="settings-tab" data-settings-tab="email">Почта</button><button class="settings-tab" data-settings-tab="updates">Обновления</button></div>
  <div class="settings-body settings-panel" data-settings-panel="appearance">
    <div class="settings-group"><div class="label">Тема оформления</div><div class="theme-options"><button class="theme-option" data-theme-choice="dark">Тёмная</button><button class="theme-option" data-theme-choice="light">Светлая</button></div></div>
    <div class="settings-group"><div class="label">Видимые карточки</div><div class="setting-list">
@@ -338,6 +377,26 @@ footer{color:#657581;font-size:12px;margin-top:17px}
   </div>
   <button class="save-settings" id="saveThresholds">Сохранить пороги</button><div class="settings-note" id="thresholdStatus">Настройки хранятся на сервере и применяются для всех браузеров.</div>
  </div>
+ <div class="settings-body settings-panel" data-settings-panel="email" hidden>
+  <div class="settings-group"><label class="setting-item"><input type="checkbox" id="emailEnabled"> Включить почтовые дайджесты</label></div>
+  <div class="settings-group"><div class="label">SMTP и получатель</div><div class="threshold-grid">
+   <label class="threshold-item"><span>SMTP-сервер</span><input id="emailHost" type="text"></label><label class="threshold-item"><span>Порт</span><input id="emailPort" type="number"></label>
+   <label class="threshold-item"><span>Логин</span><input id="emailUsername" type="text"></label><label class="threshold-item"><span>Пароль</span><input id="emailPassword" type="password" placeholder="Не изменять"></label>
+   <label class="threshold-item"><span>Отправитель</span><input id="emailFrom" type="email"></label><label class="threshold-item"><span>Получатель</span><input id="emailTo" type="email"></label>
+   <label class="threshold-item"><span>Интервал, минут</span><input id="emailInterval" type="number" min="5"></label>
+  </div></div>
+  <div class="settings-group"><div class="label">Важность</div><div class="setting-list"><label class="setting-item"><input type="checkbox" data-email-severity="critical"> Критические</label><label class="setting-item"><input type="checkbox" data-email-severity="warning"> Предупреждения</label><label class="setting-item"><input type="checkbox" data-email-severity="info"> Информация</label></div></div>
+  <div class="settings-group"><div class="label">Какие разделы отправлять</div><div class="setting-list">
+   <label class="setting-item"><input type="checkbox" data-email-source="CPU"> CPU</label><label class="setting-item"><input type="checkbox" data-email-source="Память"> Память</label><label class="setting-item"><input type="checkbox" data-email-source="Storage"> Storage</label><label class="setting-item"><input type="checkbox" data-email-source="Диски"> Диски</label><label class="setting-item"><input type="checkbox" data-email-source="ZFS"> ZFS</label><label class="setting-item"><input type="checkbox" data-email-source="UPS"> UPS</label><label class="setting-item"><input type="checkbox" data-email-source="VM/LXC"> VM и LXC</label><label class="setting-item"><input type="checkbox" data-email-source="Backups"> Резервные копии</label><label class="setting-item"><input type="checkbox" data-email-source="Dashboard"> Dashboard</label>
+  </div></div>
+  <button class="save-settings" id="saveEmail">Сохранить настройки почты</button><button class="theme-option" id="testEmail" style="width:100%;margin-top:9px">Отправить тестовое письмо</button><div class="settings-note" id="emailStatus">Пароль хранится в локальной базе сервера и не возвращается в браузер.</div>
+ </div>
+ <div class="settings-body settings-panel" data-settings-panel="updates" hidden>
+  <div class="detail-grid">
+   <div class="detail"><span class="label">Установлена</span><strong id="updateCurrent">—</strong></div><div class="detail"><span class="label">Доступна</span><strong id="updateAvailable">—</strong></div><div class="detail"><span class="label">Режим</span><strong id="updateMode">—</strong></div>
+  </div>
+  <div class="wide"><div class="label">Состояние обновлений</div><div class="temps"><span class="temp" id="updateMessage">Проверка ещё не выполнялась</span></div><button class="save-settings" id="installUpdate">Проверить и установить обновление</button><div class="settings-note" id="updateChecked">Проверка запускается автоматически раз в сутки.</div></div>
+ </div>
 </dialog>
 
 <script>
@@ -348,6 +407,7 @@ const safe=v=>String(v??'').replace(/[&<>"']/g,c=>({'&':'&amp;','<':'&lt;','>':'
 const uptime=s=>{const d=Math.floor(s/86400),h=Math.floor(s%86400/3600),m=Math.floor(s%3600/60);return d?d+'д '+h+'ч':h?h+'ч '+m+'м':m+'м'};
 let alertSettings={backupMaxAgeHours:48};
 function render(x){const c=x.cpu,m=x.memory,s=x.storage,n=x.network,z=x.zfs||{available:false,pools:[]},u=x.ups||{available:false},g=x.guests||{available:false,guests:[]},b=x.backups||{available:false,items:[]},alerts=x.alerts||[],disks=x.disks||[],avg=c.temperatures.length?c.temperatures.reduce((a,t)=>a+t.celsius,0)/c.temperatures.length:null;
+ const update=x.update||{},updating=['queued','installing'].includes(update.state);el('updateCurrent').textContent=update.currentVersion||'—';el('updateAvailable').textContent=update.availableVersion||'—';el('updateMode').textContent=update.mode==='auto'?'Автоматически':'Уведомлять';el('updateMessage').textContent=update.message||'Проверка ещё не выполнялась';el('updateChecked').textContent=update.checkedAt?'Последняя проверка: '+new Date(update.checkedAt).toLocaleString('ru-RU'):'Проверка запускается автоматически раз в сутки.';el('installUpdate').disabled=updating;el('installUpdate').textContent=updating?'Обновление выполняется…':'Проверить и установить обновление';
  const critical=alerts.filter(a=>a.severity==='critical').length,warnings=alerts.filter(a=>a.severity==='warning').length,infos=alerts.filter(a=>a.severity==='info').length;el('alertCount').textContent=alerts.length;el('alertCritical').textContent=critical;el('alertWarnings').textContent=warnings;el('alertHeadline').textContent=critical?'Требуется срочное внимание':warnings?'Есть предупреждения':infos?'Есть информационные события':'Система в норме';el('alertBar').style.width=(critical?100:warnings?65:infos?30:0)+'%';
  el('alertList').innerHTML=alerts.length?alerts.map(a=>'<article class="alert-item '+safe(a.severity)+'"><i class="alert-icon"></i><div><div class="alert-source">'+safe(a.source)+' · '+(a.severity==='critical'?'Критическое':a.severity==='warning'?'Предупреждение':'Информация')+'</div><div class="alert-title">'+safe(a.title)+'</div><div class="alert-message">'+safe(a.message)+'</div></div></article>').join(''):'<div class="all-good"><strong>Всё в порядке</strong><span>Активных предупреждений сейчас нет.</span></div>';
  el('cpuName').textContent=el('cpuDetailName').textContent=c.model;el('cpuUsage').textContent=fixed(c.usagePercent);el('cpuBar').style.width=Math.min(c.usagePercent,100)+'%';el('cpuTemp').textContent=avg===null?'Нет датчика':fixed(avg)+' °C';el('cpuTopology').textContent=c.physicalCores+' / '+c.logicalCpus;
@@ -384,5 +444,10 @@ function setTheme(theme){document.documentElement.dataset.theme=theme;localStora
 document.querySelectorAll('[data-settings-tab]').forEach(tab=>tab.onclick=()=>{document.querySelectorAll('[data-settings-tab]').forEach(t=>t.classList.toggle('active',t===tab));document.querySelectorAll('[data-settings-panel]').forEach(p=>p.hidden=p.dataset.settingsPanel!==tab.dataset.settingsTab)});
 async function loadThresholds(){const response=await fetch('/api/settings/alerts');if(!response.ok)return;alertSettings=await response.json();document.querySelectorAll('[data-threshold]').forEach(input=>input.value=alertSettings[input.dataset.threshold]??'')}
 el('saveThresholds').onclick=async()=>{const values={};document.querySelectorAll('[data-threshold]').forEach(input=>values[input.dataset.threshold]=Number(input.value));const status=el('thresholdStatus');status.textContent='Сохранение…';const response=await fetch('/api/settings/alerts',{method:'PUT',headers:{'Content-Type':'application/json'},body:JSON.stringify(values)});if(response.ok){alertSettings=await response.json();status.textContent='Пороги сохранены и уже применяются.'}else{status.textContent=await response.text()||'Не удалось сохранить настройки.'}};loadThresholds().catch(()=>{});
+function emailForm(){return {enabled:el('emailEnabled').checked,host:el('emailHost').value.trim(),port:Number(el('emailPort').value),username:el('emailUsername').value.trim(),password:el('emailPassword').value,from:el('emailFrom').value.trim(),to:el('emailTo').value.trim(),intervalMinutes:Number(el('emailInterval').value),severities:[...document.querySelectorAll('[data-email-severity]:checked')].map(x=>x.dataset.emailSeverity),sources:[...document.querySelectorAll('[data-email-source]:checked')].map(x=>x.dataset.emailSource)}}
+async function loadEmail(){const response=await fetch('/api/settings/email');if(!response.ok)return;const s=await response.json();el('emailEnabled').checked=s.enabled;el('emailHost').value=s.host||'';el('emailPort').value=s.port||587;el('emailUsername').value=s.username||'';el('emailPassword').value='';el('emailPassword').placeholder=s.hasPassword?'Сохранён · не изменять':'Пароль';el('emailFrom').value=s.from||'';el('emailTo').value=s.to||'';el('emailInterval').value=s.intervalMinutes||60;document.querySelectorAll('[data-email-severity]').forEach(x=>x.checked=(s.severities||[]).includes(x.dataset.emailSeverity));document.querySelectorAll('[data-email-source]').forEach(x=>x.checked=(s.sources||[]).includes(x.dataset.emailSource))}
+el('saveEmail').onclick=async()=>{const status=el('emailStatus');status.textContent='Сохранение…';const response=await fetch('/api/settings/email',{method:'PUT',headers:{'Content-Type':'application/json'},body:JSON.stringify(emailForm())});status.textContent=response.ok?'Настройки сохранены.':await response.text();if(response.ok)loadEmail()};
+el('testEmail').onclick=async()=>{const status=el('emailStatus');status.textContent='Отправляем тестовое письмо…';const saved=await fetch('/api/settings/email',{method:'PUT',headers:{'Content-Type':'application/json'},body:JSON.stringify(emailForm())});if(!saved.ok){status.textContent=await saved.text();return}const response=await fetch('/api/settings/email/test',{method:'POST'});status.textContent=response.ok?'Тестовое письмо отправлено.':await response.text()};loadEmail().catch(()=>{});
+el('installUpdate').onclick=async()=>{const button=el('installUpdate');button.disabled=true;button.textContent='Ставим в очередь…';el('updateMessage').textContent='Создаём запрос на обновление…';try{const response=await fetch('/api/update/request',{method:'POST'});if(!response.ok)throw new Error(await response.text());const status=await response.json();el('updateMessage').textContent=status.message;button.textContent='Обновление выполняется…'}catch(e){button.disabled=false;button.textContent='Попробовать ещё раз';el('updateMessage').textContent='Не удалось запустить обновление.'}};
 const events=new EventSource('/api/events');events.onmessage=e=>render(JSON.parse(e.data));events.onerror=()=>{el('dot').classList.remove('live');el('status').textContent='Переподключение…'};
 </script></body></html>`