Add acknowledged alert history and HTML email digests

README.md

@@ -28,6 +28,19 @@
 информационные сообщения по CPU, памяти, storage, SMART, ZFS, UPS, VM/LXC и
 резервным копиям. Критические события всегда отображаются первыми.
 
+Во вкладке `Настройки → Почта` настраиваются SMTP-сервер, получатель и интервал
+агрегированной сводки. Можно отдельно выбрать уровни важности и источники
+событий — например, полностью исключить уведомления о резервных копиях. Там же
+доступна отправка тестового письма. Поддерживаются STARTTLS (обычно порт 587) и
+SMTP поверх TLS (порт 465).
+
+Тема письма кодируется по MIME и корректно отображает кириллицу. Сам дайджест
+оформлен как HTML-письмо и содержит только новые неподтверждённые события — уже
+отправленные или принятые события повторно не рассылаются. В центре уведомлений
+есть вкладки активных событий и 30-дневной истории. Кнопка `Принято` скрывает
+событие из активных, не удаляя его из журнала; повторное возникновение проблемы
+создаёт новое событие.
+
 Пороги уведомлений сохраняются в SQLite и настраиваются через вкладку
 `Настройки → Уведомления`. Панель раз в минуту сохраняет историю CPU,
 температуры, памяти, swap, сети, storage, ZFS, UPS и гостей. Данные старше семи
@@ -47,7 +60,9 @@
 Проверка обновлений выполняется отдельным systemd-таймером раз в сутки. Статус
 виден во вкладке `Настройки → Обновления` и в центре уведомлений. Доступны два
 режима: `notify` только сообщает о новой версии, `auto` скачивает её, сохраняет
-предыдущий бинарник как резервный и перезапускает панель.
+предыдущий бинарник как резервный и перезапускает панель. В режиме `notify`
+обновление можно запустить кнопкой `Проверить и установить обновление` в
+настройках. Запрос выполняет отдельная системная служба.
 
 На главном экране находятся компактные карточки CPU, памяти, диска и сети.
 Нажатие на карточку открывает подробные показатели.

alert_events.go

@@ -0,0 +1,150 @@
+package main
+
+import (
+	"database/sql"
+	"time"
+)
+
+type AlertEvent struct {
+	EventID        int64  `json:"eventId"`
+	ID             string `json:"id"`
+	Severity       string `json:"severity"`
+	Source         string `json:"source"`
+	Title          string `json:"title"`
+	Message        string `json:"message"`
+	FirstSeen      int64  `json:"firstSeen"`
+	LastSeen       int64  `json:"lastSeen"`
+	ResolvedAt     *int64 `json:"resolvedAt,omitempty"`
+	AcknowledgedAt *int64 `json:"acknowledgedAt,omitempty"`
+}
+
+func (s *Store) SyncAlerts(alerts []Alert) ([]Alert, error) {
+	tx, err := s.db.Begin()
+	if err != nil {
+		return alerts, err
+	}
+	defer tx.Rollback()
+	now := time.Now().Unix()
+	rows, err := tx.Query(`SELECT id,alert_key FROM alert_events WHERE resolved_at IS NULL`)
+	if err != nil {
+		return alerts, err
+	}
+	active := map[string]int64{}
+	for rows.Next() {
+		var id int64
+		var key string
+		if err := rows.Scan(&id, &key); err != nil {
+			rows.Close()
+			return alerts, err
+		}
+		active[key] = id
+	}
+	rows.Close()
+	seen := map[string]bool{}
+	for _, alert := range alerts {
+		seen[alert.ID] = true
+		if id, ok := active[alert.ID]; ok {
+			_, err = tx.Exec(`UPDATE alert_events SET severity=?,source=?,title=?,message=?,last_seen=? WHERE id=?`, alert.Severity, alert.Source, alert.Title, alert.Message, now, id)
+		} else {
+			result, insertErr := tx.Exec(`INSERT INTO alert_events(alert_key,severity,source,title,message,first_seen,last_seen) VALUES(?,?,?,?,?,?,?)`, alert.ID, alert.Severity, alert.Source, alert.Title, alert.Message, now, now)
+			if insertErr != nil {
+				return alerts, insertErr
+			}
+			active[alert.ID], _ = result.LastInsertId()
+		}
+		if err != nil {
+			return alerts, err
+		}
+	}
+	for key, id := range active {
+		if !seen[key] {
+			if _, err = tx.Exec(`UPDATE alert_events SET resolved_at=? WHERE id=?`, now, id); err != nil {
+				return alerts, err
+			}
+		}
+	}
+	if _, err = tx.Exec(`DELETE FROM alert_events WHERE (resolved_at IS NOT NULL OR acknowledged_at IS NOT NULL) AND last_seen < ?`, now-int64(30*24*time.Hour/time.Second)); err != nil {
+		return alerts, err
+	}
+	if err = tx.Commit(); err != nil {
+		return alerts, err
+	}
+	rows, err = s.db.Query(`SELECT id,alert_key,severity,source,title,message FROM alert_events WHERE resolved_at IS NULL AND acknowledged_at IS NULL ORDER BY CASE severity WHEN 'critical' THEN 0 WHEN 'warning' THEN 1 ELSE 2 END,first_seen DESC`)
+	if err != nil {
+		return alerts, err
+	}
+	defer rows.Close()
+	var visible []Alert
+	for rows.Next() {
+		var a Alert
+		if err = rows.Scan(&a.EventID, &a.ID, &a.Severity, &a.Source, &a.Title, &a.Message); err != nil {
+			return alerts, err
+		}
+		visible = append(visible, a)
+	}
+	return visible, rows.Err()
+}
+
+func (s *Store) AcknowledgeAlert(eventID int64) error {
+	_, err := s.db.Exec(`UPDATE alert_events SET acknowledged_at=? WHERE id=? AND acknowledged_at IS NULL`, time.Now().Unix(), eventID)
+	return err
+}
+
+func (s *Store) AlertHistory(limit int) ([]AlertEvent, error) {
+	if limit < 1 || limit > 500 {
+		limit = 200
+	}
+	rows, err := s.db.Query(`SELECT id,alert_key,severity,source,title,message,first_seen,last_seen,resolved_at,acknowledged_at FROM alert_events ORDER BY first_seen DESC LIMIT ?`, limit)
+	if err != nil {
+		return nil, err
+	}
+	defer rows.Close()
+	var result []AlertEvent
+	for rows.Next() {
+		var e AlertEvent
+		var resolved, acked sql.NullInt64
+		if err = rows.Scan(&e.EventID, &e.ID, &e.Severity, &e.Source, &e.Title, &e.Message, &e.FirstSeen, &e.LastSeen, &resolved, &acked); err != nil {
+			return nil, err
+		}
+		if resolved.Valid {
+			e.ResolvedAt = &resolved.Int64
+		}
+		if acked.Valid {
+			e.AcknowledgedAt = &acked.Int64
+		}
+		result = append(result, e)
+	}
+	return result, rows.Err()
+}
+
+func (s *Store) PendingEmailAlerts() ([]Alert, error) {
+	rows, err := s.db.Query(`SELECT id,alert_key,severity,source,title,message FROM alert_events WHERE resolved_at IS NULL AND acknowledged_at IS NULL AND email_sent_at IS NULL ORDER BY first_seen`)
+	if err != nil {
+		return nil, err
+	}
+	defer rows.Close()
+	var result []Alert
+	for rows.Next() {
+		var a Alert
+		if err = rows.Scan(&a.EventID, &a.ID, &a.Severity, &a.Source, &a.Title, &a.Message); err != nil {
+			return nil, err
+		}
+		result = append(result, a)
+	}
+	return result, rows.Err()
+}
+
+func (s *Store) MarkAlertsEmailed(alerts []Alert) error {
+	tx, err := s.db.Begin()
+	if err != nil {
+		return err
+	}
+	defer tx.Rollback()
+	now := time.Now().Unix()
+	for _, a := range alerts {
+		if _, err = tx.Exec(`UPDATE alert_events SET email_sent_at=? WHERE id=?`, now, a.EventID); err != nil {
+			return err
+		}
+	}
+	return tx.Commit()
+}

alert_events_test.go

@@ -0,0 +1,58 @@
+package main
+
+import "testing"
+
+func TestAlertLifecycle(t *testing.T) {
+	store, err := openStore(":memory:")
+	if err != nil {
+		t.Fatal(err)
+	}
+	defer store.Close()
+	alert := Alert{ID: "disk", Severity: "warning", Source: "Диски", Title: "SMART", Message: "Проверьте диск"}
+	visible, err := store.SyncAlerts([]Alert{alert})
+	if err != nil || len(visible) != 1 || visible[0].EventID == 0 {
+		t.Fatalf("unexpected new alert: %+v %v", visible, err)
+	}
+	firstID := visible[0].EventID
+	if err = store.AcknowledgeAlert(firstID); err != nil {
+		t.Fatal(err)
+	}
+	visible, err = store.SyncAlerts([]Alert{alert})
+	if err != nil || len(visible) != 0 {
+		t.Fatalf("acknowledged alert became visible: %+v %v", visible, err)
+	}
+	if _, err = store.SyncAlerts(nil); err != nil {
+		t.Fatal(err)
+	}
+	visible, err = store.SyncAlerts([]Alert{alert})
+	if err != nil || len(visible) != 1 || visible[0].EventID == firstID {
+		t.Fatalf("recurring alert was not new: %+v %v", visible, err)
+	}
+	history, err := store.AlertHistory(20)
+	if err != nil || len(history) != 2 {
+		t.Fatalf("unexpected history: %+v %v", history, err)
+	}
+}
+
+func TestPendingEmailAlerts(t *testing.T) {
+	store, err := openStore(":memory:")
+	if err != nil {
+		t.Fatal(err)
+	}
+	defer store.Close()
+	visible, err := store.SyncAlerts([]Alert{{ID: "cpu", Severity: "critical", Source: "CPU", Title: "Load"}})
+	if err != nil {
+		t.Fatal(err)
+	}
+	pending, err := store.PendingEmailAlerts()
+	if err != nil || len(pending) != 1 {
+		t.Fatalf("unexpected pending: %+v %v", pending, err)
+	}
+	if err = store.MarkAlertsEmailed(visible); err != nil {
+		t.Fatal(err)
+	}
+	pending, err = store.PendingEmailAlerts()
+	if err != nil || len(pending) != 0 {
+		t.Fatalf("emailed alert repeated: %+v %v", pending, err)
+	}
+}

alerts.go

@@ -8,6 +8,7 @@ import (
 )
 
 type Alert struct {
+	EventID  int64  `json:"eventId,omitempty"`
 	ID       string `json:"id"`
 	Severity string `json:"severity"`
 	Source   string `json:"source"`

email.go

@@ -0,0 +1,144 @@
+package main
+
+import (
+	"crypto/tls"
+	"fmt"
+	"html"
+	"log"
+	"mime"
+	"net"
+	"net/smtp"
+	"sort"
+	"strings"
+	"time"
+)
+
+func filterEmailAlerts(alerts []Alert, settings EmailSettings) []Alert {
+	allowedSeverity, allowedSource := map[string]bool{}, map[string]bool{}
+	for _, value := range settings.Severities {
+		allowedSeverity[value] = true
+	}
+	for _, value := range settings.Sources {
+		allowedSource[value] = true
+	}
+	var result []Alert
+	for _, alert := range alerts {
+		if allowedSeverity[alert.Severity] && allowedSource[alert.Source] {
+			result = append(result, alert)
+		}
+	}
+	return result
+}
+
+func sendAlertEmail(settings EmailSettings, alerts []Alert, test bool) error {
+	subject := "Proxmox Dashboard: сводка уведомлений"
+	body := `<div style="padding:32px;background:#0b1117;color:#edf3f7;font-family:Arial,sans-serif"><div style="max-width:680px;margin:auto"><div style="color:#55d58a;font-size:12px;letter-spacing:2px">PROXMOX DASHBOARD</div><h1 style="margin:10px 0 24px">Сводка событий</h1>`
+	if test {
+		subject = "Proxmox Dashboard: тест почты"
+		body += `<div style="padding:22px;border:1px solid #2b3944;border-radius:14px;background:#111a22"><b style="font-size:18px">Почта настроена</b><p style="color:#9aabb7;margin-bottom:0">Тестовое сообщение успешно отправлено вашим сервером.</p></div>`
+	}
+	if len(alerts) > 0 {
+		groups := map[string][]Alert{}
+		for _, alert := range alerts {
+			groups[alert.Severity] = append(groups[alert.Severity], alert)
+		}
+		var sections []string
+		for _, severity := range []string{"critical", "warning", "info"} {
+			items := groups[severity]
+			if len(items) == 0 {
+				continue
+			}
+			title := map[string]string{"critical": "Критические", "warning": "Предупреждения", "info": "Информация"}[severity]
+			color := map[string]string{"critical": "#ff665c", "warning": "#ffb35c", "info": "#6ba8ff"}[severity]
+			sort.Slice(items, func(i, j int) bool { return items[i].Title < items[j].Title })
+			cards := ""
+			for _, item := range items {
+				cards += fmt.Sprintf(`<div style="margin:10px 0;padding:16px 18px;border:1px solid #2b3944;border-left:4px solid %s;border-radius:10px;background:#111a22"><div style="color:#8fa0ac;font-size:11px;text-transform:uppercase">%s</div><div style="font-weight:bold;font-size:16px;margin:5px 0">%s</div><div style="color:#aab7c0;font-size:14px">%s</div></div>`, color, html.EscapeString(item.Source), html.EscapeString(item.Title), html.EscapeString(item.Message))
+			}
+			sections = append(sections, fmt.Sprintf(`<h2 style="font-size:14px;color:%s;margin:24px 0 8px">%s · %d</h2>%s`, color, title, len(items), cards))
+		}
+		body += strings.Join(sections, "")
+		subject = fmt.Sprintf("Proxmox Dashboard: событий — %d", len(alerts))
+	}
+	body += `<div style="color:#687985;font-size:12px;margin-top:28px">События собраны напрямую с Proxmox-хоста. Подтверждённые события повторно не отправляются.</div></div></div>`
+	message := []byte("From: " + settings.From + "\r\nTo: " + settings.To + "\r\nSubject: " + mime.QEncoding.Encode("UTF-8", subject) + "\r\nMIME-Version: 1.0\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Transfer-Encoding: 8bit\r\n\r\n" + body + "\r\n")
+	address := net.JoinHostPort(settings.Host, fmt.Sprint(settings.Port))
+	tlsConfig := &tls.Config{ServerName: settings.Host, MinVersion: tls.VersionTLS12, InsecureSkipVerify: settings.SkipTLSVerify} //nolint:gosec -- explicit private-network option
+	var client *smtp.Client
+	if settings.Port == 465 {
+		connection, err := tls.Dial("tcp", address, tlsConfig)
+		if err != nil {
+			return err
+		}
+		client, err = smtp.NewClient(connection, settings.Host)
+		if err != nil {
+			return err
+		}
+	} else {
+		var err error
+		client, err = smtp.Dial(address)
+		if err != nil {
+			return err
+		}
+		if ok, _ := client.Extension("STARTTLS"); ok {
+			if err = client.StartTLS(tlsConfig); err != nil {
+				return err
+			}
+		}
+	}
+	defer client.Close()
+	if settings.Username != "" {
+		if err := client.Auth(smtp.PlainAuth("", settings.Username, settings.Password, settings.Host)); err != nil {
+			return err
+		}
+	}
+	if err := client.Mail(settings.From); err != nil {
+		return err
+	}
+	if err := client.Rcpt(settings.To); err != nil {
+		return err
+	}
+	writer, err := client.Data()
+	if err != nil {
+		return err
+	}
+	if _, err = writer.Write(message); err != nil {
+		return err
+	}
+	if err = writer.Close(); err != nil {
+		return err
+	}
+	return client.Quit()
+}
+
+func runEmailNotifier(collect func() (dashboardMetrics, error), store *Store) {
+	ticker := time.NewTicker(time.Minute)
+	defer ticker.Stop()
+	for range ticker.C {
+		settings := store.EmailSettings(true)
+		if !settings.Enabled || time.Since(store.LastEmailAt()) < time.Duration(settings.IntervalMinutes)*time.Minute {
+			continue
+		}
+		_, err := collect()
+		if err != nil {
+			continue
+		}
+		pending, err := store.PendingEmailAlerts()
+		if err != nil {
+			continue
+		}
+		alerts := filterEmailAlerts(pending, settings)
+		if len(alerts) == 0 {
+			continue
+		}
+		if err := sendAlertEmail(settings, alerts, false); err != nil {
+			log.Printf("Не удалось отправить почтовую сводку: %v", err)
+			continue
+		}
+		if err := store.MarkAlertsEmailed(alerts); err != nil {
+			log.Printf("Не удалось отметить отправленные события: %v", err)
+			continue
+		}
+		store.SetLastEmailAt(time.Now())
+	}
+}

email_test.go

@@ -0,0 +1,40 @@
+package main
+
+import "testing"
+
+func TestFilterEmailAlerts(t *testing.T) {
+	alerts := []Alert{
+		{ID: "cpu", Severity: "critical", Source: "CPU"},
+		{ID: "backup", Severity: "critical", Source: "Backups"},
+		{ID: "info", Severity: "info", Source: "CPU"},
+	}
+	settings := EmailSettings{Severities: []string{"critical"}, Sources: []string{"CPU"}}
+	filtered := filterEmailAlerts(alerts, settings)
+	if len(filtered) != 1 || filtered[0].ID != "cpu" {
+		t.Fatalf("unexpected filtered alerts: %+v", filtered)
+	}
+}
+
+func TestEmailPasswordIsPreserved(t *testing.T) {
+	store, err := openStore(":memory:")
+	if err != nil {
+		t.Fatal(err)
+	}
+	defer store.Close()
+	settings := defaultEmailSettings()
+	settings.Host, settings.From, settings.To, settings.Password = "smtp.example.com", "dash@example.com", "admin@example.com", "secret"
+	if err := store.SaveEmailSettings(settings); err != nil {
+		t.Fatal(err)
+	}
+	settings.Password = ""
+	settings.IntervalMinutes = 120
+	if err := store.SaveEmailSettings(settings); err != nil {
+		t.Fatal(err)
+	}
+	if got := store.EmailSettings(true); got.Password != "secret" || got.IntervalMinutes != 120 {
+		t.Fatalf("unexpected settings: %+v", got)
+	}
+	if got := store.EmailSettings(false); got.Password != "" || !got.HasPassword {
+		t.Fatalf("password leaked or marker lost: %+v", got)
+	}
+}

proxmox-dashboard-update.path

@@ -0,0 +1,9 @@
+[Unit]
+Description=Watch for manual Proxmox Dashboard update requests
+
+[Path]
+PathExists=/var/lib/proxmox-dashboard/update-request
+Unit=proxmox-dashboard-update.service
+
+[Install]
+WantedBy=multi-user.target

scripts/install.sh

@@ -18,6 +18,7 @@ install -m 0755 "$SOURCE_DIR/scripts/proxmox-dashboard-update" /usr/local/sbin/p
 install -m 0644 "$SOURCE_DIR/proxmox-cpu-dashboard.service" /etc/systemd/system/proxmox-cpu-dashboard.service
 install -m 0644 "$SOURCE_DIR/proxmox-dashboard-update.service" /etc/systemd/system/proxmox-dashboard-update.service
 install -m 0644 "$SOURCE_DIR/proxmox-dashboard-update.timer" /etc/systemd/system/proxmox-dashboard-update.timer
+install -m 0644 "$SOURCE_DIR/proxmox-dashboard-update.path" /etc/systemd/system/proxmox-dashboard-update.path
 
 umask 077
 {
@@ -28,7 +29,9 @@ umask 077
 } > /etc/proxmox-dashboard/update.env
 
 systemctl daemon-reload
-systemctl enable --now proxmox-cpu-dashboard.service
+systemctl enable proxmox-cpu-dashboard.service
+systemctl restart proxmox-cpu-dashboard.service
 systemctl enable --now proxmox-dashboard-update.timer
+systemctl enable --now proxmox-dashboard-update.path
 systemctl start proxmox-dashboard-update.service
 echo "Proxmox Dashboard установлен. Откройте http://$(hostname -I | awk '{print $1}'):9105"

scripts/proxmox-dashboard-update

@@ -4,6 +4,7 @@ set -eu
 CONFIG_FILE=${DASHBOARD_UPDATE_CONFIG:-/etc/proxmox-dashboard/update.env}
 STATUS_FILE=${DASHBOARD_UPDATE_STATUS_PATH:-/var/lib/proxmox-dashboard/update-status.json}
 BINARY_PATH=${DASHBOARD_BINARY_PATH:-/usr/local/bin/proxmox-cpu-dashboard}
+REQUEST_FILE=${DASHBOARD_UPDATE_REQUEST_PATH:-/var/lib/proxmox-dashboard/update-request}
 
 if [ -f "$CONFIG_FILE" ]; then
   # shellcheck disable=SC1090
@@ -15,6 +16,11 @@ GITEA_REPOSITORY=${GITEA_REPOSITORY:-maxim/ProxmoxDash}
 GITEA_TOKEN=${GITEA_TOKEN:-}
 UPDATE_MODE=${UPDATE_MODE:-notify}
 ASSET_NAME=${ASSET_NAME:-proxmox-dashboard-linux-amd64}
+manual_request=false
+if [ -f "$REQUEST_FILE" ]; then
+  manual_request=true
+  rm -f "$REQUEST_FILE"
+fi
 
 mkdir -p "$(dirname "$STATUS_FILE")"
 tmp_dir=$(mktemp -d /tmp/proxmox-dashboard-update.XXXXXX)
@@ -86,11 +92,12 @@ if [ "$current_version" = "$latest_version" ] || [ "$newest" = "$current_version
   exit 0
 fi
 
-if [ "$UPDATE_MODE" != "auto" ]; then
+if [ "$UPDATE_MODE" != "auto" ] && [ "$manual_request" != "true" ]; then
   write_status "$current_version" "$latest_version" available "$UPDATE_MODE" "Доступна новая версия $latest_version." "$release_url"
   exit 0
 fi
 
+write_status "$current_version" "$latest_version" installing "$UPDATE_MODE" "Скачиваем и проверяем $latest_version." "$release_url"
 api_get "$binary_url" > "$tmp_dir/$ASSET_NAME"
 if [ -n "$checksum_url" ]; then
   api_get "$checksum_url" > "$tmp_dir/$ASSET_NAME.sha256"

store.go

@@ -6,6 +6,7 @@ import (
 	"fmt"
 	"os"
 	"path/filepath"
+	"strings"
 	"time"
 
 	_ "modernc.org/sqlite"
@@ -59,6 +60,21 @@ type HistoryPoint struct {
 
 type Store struct{ db *sql.DB }
 
+type EmailSettings struct {
+	Enabled         bool     `json:"enabled"`
+	Host            string   `json:"host"`
+	Port            int      `json:"port"`
+	Username        string   `json:"username"`
+	Password        string   `json:"password,omitempty"`
+	HasPassword     bool     `json:"hasPassword"`
+	SkipTLSVerify   bool     `json:"skipTlsVerify"`
+	From            string   `json:"from"`
+	To              string   `json:"to"`
+	IntervalMinutes int      `json:"intervalMinutes"`
+	Severities      []string `json:"severities"`
+	Sources         []string `json:"sources"`
+}
+
 func openStore(path string) (*Store, error) {
 	if path != ":memory:" {
 		if err := os.MkdirAll(filepath.Dir(path), 0o750); err != nil {
@@ -81,6 +97,13 @@ func openStore(path string) (*Store, error) {
 			zfs_usage REAL NOT NULL, guests_cpu REAL NOT NULL, guests_memory REAL NOT NULL
 		)`,
 		`CREATE INDEX IF NOT EXISTS history_ts_idx ON history(ts)`,
+		`CREATE TABLE IF NOT EXISTS alert_events (
+			id INTEGER PRIMARY KEY AUTOINCREMENT, alert_key TEXT NOT NULL, severity TEXT NOT NULL,
+			source TEXT NOT NULL, title TEXT NOT NULL, message TEXT NOT NULL,
+			first_seen INTEGER NOT NULL, last_seen INTEGER NOT NULL, resolved_at INTEGER,
+			acknowledged_at INTEGER, email_sent_at INTEGER
+		)`,
+		`CREATE INDEX IF NOT EXISTS alert_events_active_idx ON alert_events(alert_key,resolved_at)`,
 	}
 	for _, statement := range statements {
 		if _, err := db.Exec(statement); err != nil {
@@ -114,6 +137,55 @@ func (s *Store) SaveThresholds(value AlertThresholds) error {
 	return err
 }
 
+func defaultEmailSettings() EmailSettings {
+	return EmailSettings{Port: 587, IntervalMinutes: 60, Severities: []string{"critical", "warning"}, Sources: []string{"CPU", "Память", "Storage", "Диски", "ZFS", "UPS", "VM/LXC", "Dashboard"}}
+}
+
+func (s *Store) EmailSettings(includePassword bool) EmailSettings {
+	settings := defaultEmailSettings()
+	var value string
+	if s.db.QueryRow(`SELECT value FROM settings WHERE key='email_notifications'`).Scan(&value) == nil {
+		_ = json.Unmarshal([]byte(value), &settings)
+	}
+	settings.HasPassword = settings.Password != ""
+	if !includePassword {
+		settings.Password = ""
+	}
+	return settings
+}
+
+func (s *Store) SaveEmailSettings(settings EmailSettings) error {
+	if settings.Port < 1 || settings.Port > 65535 || settings.IntervalMinutes < 5 || settings.IntervalMinutes > 10080 {
+		return fmt.Errorf("проверьте порт и интервал (от 5 минут до 7 дней)")
+	}
+	if settings.Enabled && (settings.Host == "" || settings.From == "" || settings.To == "") {
+		return fmt.Errorf("для отправки нужны SMTP-сервер, отправитель и получатель")
+	}
+	if strings.ContainsAny(settings.Host+settings.From+settings.To+settings.Username, "\r\n") {
+		return fmt.Errorf("поля почты содержат недопустимые символы")
+	}
+	if settings.Password == "" {
+		settings.Password = s.EmailSettings(true).Password
+	}
+	settings.HasPassword = settings.Password != ""
+	data, _ := json.Marshal(settings)
+	_, err := s.db.Exec(`INSERT INTO settings(key,value) VALUES('email_notifications',?) ON CONFLICT(key) DO UPDATE SET value=excluded.value`, string(data))
+	return err
+}
+
+func (s *Store) LastEmailAt() time.Time {
+	var value string
+	if s.db.QueryRow(`SELECT value FROM settings WHERE key='email_last_sent'`).Scan(&value) != nil {
+		return time.Time{}
+	}
+	result, _ := time.Parse(time.RFC3339, value)
+	return result
+}
+
+func (s *Store) SetLastEmailAt(value time.Time) {
+	_, _ = s.db.Exec(`INSERT INTO settings(key,value) VALUES('email_last_sent',?) ON CONFLICT(key) DO UPDATE SET value=excluded.value`, value.Format(time.RFC3339))
+}
+
 func validateThresholds(t AlertThresholds) error {
 	percentages := []float64{t.CPUWarning, t.CPUCritical, t.MemoryWarning, t.MemoryCritical, t.SwapWarning, t.StorageWarning, t.StorageCritical, t.ZFSWarning, t.ZFSCritical, t.UPSChargeCritical}
 	for _, value := range percentages {

update.go

@@ -2,11 +2,14 @@ package main
 
 import (
 	"encoding/json"
+	"fmt"
 	"os"
+	"path/filepath"
 	"time"
 )
 
 const defaultUpdateStatusPath = "/var/lib/proxmox-dashboard/update-status.json"
+const defaultUpdateRequestPath = "/var/lib/proxmox-dashboard/update-request"
 
 type UpdateStatus struct {
 	CurrentVersion   string    `json:"currentVersion"`
@@ -31,3 +34,44 @@ func readUpdateStatus() UpdateStatus {
 	status.CurrentVersion = version
 	return status
 }
+
+func requestUpdate() (UpdateStatus, error) {
+	requestPath := os.Getenv("DASHBOARD_UPDATE_REQUEST_PATH")
+	if requestPath == "" {
+		requestPath = defaultUpdateRequestPath
+	}
+	if err := os.MkdirAll(filepath.Dir(requestPath), 0o750); err != nil {
+		return UpdateStatus{}, err
+	}
+	status := readUpdateStatus()
+	status.State = "queued"
+	status.Message = "Обновление поставлено в очередь."
+	status.CheckedAt = time.Now()
+	statusPath := os.Getenv("DASHBOARD_UPDATE_STATUS_PATH")
+	if statusPath == "" {
+		statusPath = defaultUpdateStatusPath
+	}
+	data, _ := json.Marshal(status)
+	temporary, err := os.CreateTemp(filepath.Dir(statusPath), ".update-status-")
+	if err != nil {
+		return UpdateStatus{}, err
+	}
+	temporaryPath := temporary.Name()
+	defer os.Remove(temporaryPath)
+	if _, err = temporary.Write(data); err == nil {
+		err = temporary.Chmod(0o644)
+	}
+	if closeErr := temporary.Close(); err == nil {
+		err = closeErr
+	}
+	if err == nil {
+		err = os.Rename(temporaryPath, statusPath)
+	}
+	if err != nil {
+		return UpdateStatus{}, fmt.Errorf("не удалось сохранить запрос обновления: %w", err)
+	}
+	if err := os.WriteFile(requestPath, []byte(time.Now().Format(time.RFC3339Nano)), 0o640); err != nil {
+		return UpdateStatus{}, err
+	}
+	return status, nil
+}

update_test.go

@@ -25,3 +25,21 @@ func TestReadUpdateStatusWithoutFile(t *testing.T) {
 		t.Fatalf("unexpected default update status: %+v", status)
 	}
 }
+
+func TestRequestUpdate(t *testing.T) {
+	directory := t.TempDir()
+	statusPath := filepath.Join(directory, "status.json")
+	requestPath := filepath.Join(directory, "request")
+	t.Setenv("DASHBOARD_UPDATE_STATUS_PATH", statusPath)
+	t.Setenv("DASHBOARD_UPDATE_REQUEST_PATH", requestPath)
+	status, err := requestUpdate()
+	if err != nil {
+		t.Fatal(err)
+	}
+	if status.State != "queued" {
+		t.Fatalf("unexpected queued status: %+v", status)
+	}
+	if _, err := os.Stat(requestPath); err != nil {
+		t.Fatalf("update request was not created: %v", err)
+	}
+}

web.go

@@ -48,6 +48,10 @@ func collectDashboard(cpuCollector *cpuCollector, networkCollector *networkColle
 		Guests: guestCollector.collect(), Backups: backupCollector.collect(), Update: readUpdateStatus(), Timestamp: time.Now(),
 	}
 	metrics.Alerts = evaluateAlerts(metrics, store.Thresholds())
+	metrics.Alerts, err = store.SyncAlerts(metrics.Alerts)
+	if err != nil {
+		return dashboardMetrics{}, err
+	}
 	return metrics, nil
 }
 
@@ -63,6 +67,7 @@ func routes(collector *cpuCollector, store *Store) http.Handler {
 		return collectDashboard(collector, network, disks, zfs, ups, guests, backups, store)
 	}
 	go runHistoryCollector(collect, store)
+	go runEmailNotifier(collect, store)
 	mux.HandleFunc("/", func(w http.ResponseWriter, r *http.Request) {
 		if r.URL.Path != "/" {
 			http.NotFound(w, r)
@@ -77,6 +82,14 @@ func routes(collector *cpuCollector, store *Store) http.Handler {
 	})
 	mux.HandleFunc("/api/version", func(w http.ResponseWriter, _ *http.Request) { writeJSON(w, map[string]string{"version": version}, nil) })
 	mux.HandleFunc("/api/update/status", func(w http.ResponseWriter, _ *http.Request) { writeJSON(w, readUpdateStatus(), nil) })
+	mux.HandleFunc("/api/update/request", func(w http.ResponseWriter, r *http.Request) {
+		if r.Method != http.MethodPost {
+			w.WriteHeader(http.StatusMethodNotAllowed)
+			return
+		}
+		status, err := requestUpdate()
+		writeJSON(w, status, err)
+	})
 	mux.HandleFunc("/api/system", func(w http.ResponseWriter, _ *http.Request) {
 		if networkErr != nil {
 			writeJSON(w, nil, networkErr)
@@ -104,6 +117,55 @@ func routes(collector *cpuCollector, store *Store) http.Handler {
 			w.WriteHeader(http.StatusMethodNotAllowed)
 		}
 	})
+	mux.HandleFunc("/api/alerts/history", func(w http.ResponseWriter, r *http.Request) {
+		if r.Method != http.MethodGet {
+			w.WriteHeader(http.StatusMethodNotAllowed)
+			return
+		}
+		events, err := store.AlertHistory(200)
+		writeJSON(w, events, err)
+	})
+	mux.HandleFunc("/api/alerts/acknowledge", func(w http.ResponseWriter, r *http.Request) {
+		if r.Method != http.MethodPost {
+			w.WriteHeader(http.StatusMethodNotAllowed)
+			return
+		}
+		var request struct {
+			EventID int64 `json:"eventId"`
+		}
+		if err := json.NewDecoder(io.LimitReader(r.Body, 1024)).Decode(&request); err != nil || request.EventID < 1 {
+			http.Error(w, "Некорректное событие", http.StatusBadRequest)
+			return
+		}
+		writeJSON(w, map[string]bool{"acknowledged": true}, store.AcknowledgeAlert(request.EventID))
+	})
+	mux.HandleFunc("/api/settings/email", func(w http.ResponseWriter, r *http.Request) {
+		switch r.Method {
+		case http.MethodGet:
+			writeJSON(w, store.EmailSettings(false), nil)
+		case http.MethodPut:
+			var settings EmailSettings
+			if err := json.NewDecoder(io.LimitReader(r.Body, 64<<10)).Decode(&settings); err != nil {
+				http.Error(w, "Некорректные настройки", http.StatusBadRequest)
+				return
+			}
+			if err := store.SaveEmailSettings(settings); err != nil {
+				http.Error(w, err.Error(), http.StatusBadRequest)
+				return
+			}
+			writeJSON(w, store.EmailSettings(false), nil)
+		default:
+			w.WriteHeader(http.StatusMethodNotAllowed)
+		}
+	})
+	mux.HandleFunc("/api/settings/email/test", func(w http.ResponseWriter, r *http.Request) {
+		if r.Method != http.MethodPost {
+			w.WriteHeader(http.StatusMethodNotAllowed)
+			return
+		}
+		settings := store.EmailSettings(true)
+		writeJSON(w, map[string]bool{"sent": true}, sendAlertEmail(settings, nil, true))
+	})
 	mux.HandleFunc("/api/history", func(w http.ResponseWriter, r *http.Request) {
 		hours, _ := strconv.Atoi(r.URL.Query().Get("hours"))
 		points, err := store.History(hours)
@@ -178,6 +240,7 @@ dialog{width:min(760px,calc(100% - 28px));max-height:calc(100vh - 32px);padding:
 html[data-theme="light"] body{background:radial-gradient(circle at 78% -8%,#cde9da 0,transparent 34%),var(--bg)}html[data-theme="light"] .card{background:linear-gradient(145deg,#fff,#f7f9fa)}html[data-theme="light"] dialog{background:#fff;box-shadow:0 30px 80px #4e64752b}html[data-theme="light"] .modal-head{background:rgba(255,255,255,.94)}html[data-theme="light"] .close{background:#f1f4f6}html[data-theme="light"] .disk-item,html[data-theme="light"] .alert-item{background:#f7f9fa}html[data-theme="light"] .bar{background:#e2e8ec}html[data-theme="light"] dialog::backdrop{background:rgba(30,45,55,.35)}html[data-theme="light"] .badge[data-reason]:hover::after,html[data-theme="light"] .badge[data-reason]:focus::after,html[data-theme="light"] .chart-tooltip{background:#fff;box-shadow:0 12px 32px #4e647533}
 footer{color:#657581;font-size:12px;margin-top:17px}
 @media(max-width:700px){main{padding:28px 0}.cards{grid-template-columns:1fr}header{align-items:flex-start;flex-direction:column;gap:14px}.detail-grid{grid-template-columns:repeat(2,1fr)}.detail:nth-child(3n){border-right:1px solid var(--line)}.detail:nth-child(2n){border-right:0}.name{max-width:220px}.disk-stats,.setting-list,.threshold-grid{grid-template-columns:repeat(2,1fr)}.chart-head{align-items:flex-start;flex-direction:column}.detail-tabs{overflow-x:auto}}
+.save-settings:disabled{cursor:wait;opacity:.55}[data-settings-panel="email"] .threshold-item input{width:min(210px,52vw)}.ack-alert{margin-top:11px;padding:6px 10px;border:1px solid var(--line);border-radius:8px;background:var(--panel);color:var(--text);font-size:11px;cursor:pointer}.history-state{display:inline-block;margin-top:8px;color:var(--muted);font-size:11px}.alert-panel[hidden]{display:none}
 </style>
 </head>
 <body><main>
@@ -243,7 +306,9 @@ footer{color:#657581;font-size:12px;margin-top:17px}
 
 <dialog id="alertsDialog">
  <div class="modal-head"><div><div class="label">Notification center</div><h2>Центр уведомлений</h2></div><button class="close" aria-label="Закрыть">×</button></div>
- <div class="alert-list" id="alertList"><span class="empty">Проверка состояния системы…</span></div>
+ <div class="settings-tabs"><button class="settings-tab active" data-alert-tab="active">Активные</button><button class="settings-tab" data-alert-tab="history">История</button></div>
+ <div class="alert-list alert-panel" data-alert-panel="active" id="alertList"><span class="empty">Проверка состояния системы…</span></div>
+ <div class="alert-list alert-panel" data-alert-panel="history" id="alertHistory" hidden><span class="empty">Загрузка истории…</span></div>
 </dialog>
 
 <dialog id="cpuDialog">
@@ -316,7 +381,7 @@ footer{color:#657581;font-size:12px;margin-top:17px}
 
 <dialog id="settingsDialog">
  <div class="modal-head"><div><div class="label">Dashboard</div><h2>Настройки</h2></div><button class="close" aria-label="Закрыть">×</button></div>
- <div class="settings-tabs"><button class="settings-tab active" data-settings-tab="appearance">Интерфейс</button><button class="settings-tab" data-settings-tab="alerts">Уведомления</button><button class="settings-tab" data-settings-tab="updates">Обновления</button></div>
+ <div class="settings-tabs"><button class="settings-tab active" data-settings-tab="appearance">Интерфейс</button><button class="settings-tab" data-settings-tab="alerts">Пороги</button><button class="settings-tab" data-settings-tab="email">Почта</button><button class="settings-tab" data-settings-tab="updates">Обновления</button></div>
  <div class="settings-body settings-panel" data-settings-panel="appearance">
    <div class="settings-group"><div class="label">Тема оформления</div><div class="theme-options"><button class="theme-option" data-theme-choice="dark">Тёмная</button><button class="theme-option" data-theme-choice="light">Светлая</button></div></div>
    <div class="settings-group"><div class="label">Видимые карточки</div><div class="setting-list">
@@ -340,11 +405,25 @@ footer{color:#657581;font-size:12px;margin-top:17px}
   </div>
   <button class="save-settings" id="saveThresholds">Сохранить пороги</button><div class="settings-note" id="thresholdStatus">Настройки хранятся на сервере и применяются для всех браузеров.</div>
  </div>
+ <div class="settings-body settings-panel" data-settings-panel="email" hidden>
+  <div class="settings-group"><div class="setting-list"><label class="setting-item"><input type="checkbox" id="emailEnabled"> Включить почтовые дайджесты</label><label class="setting-item"><input type="checkbox" id="emailSkipTLS"> Не проверять TLS-сертификат</label></div><div class="settings-note">Только для доверенного сервера во внутренней сети.</div></div>
+  <div class="settings-group"><div class="label">SMTP и получатель</div><div class="threshold-grid">
+   <label class="threshold-item"><span>SMTP-сервер</span><input id="emailHost" type="text"></label><label class="threshold-item"><span>Порт</span><input id="emailPort" type="number"></label>
+   <label class="threshold-item"><span>Логин</span><input id="emailUsername" type="text"></label><label class="threshold-item"><span>Пароль</span><input id="emailPassword" type="password" placeholder="Не изменять"></label>
+   <label class="threshold-item"><span>Отправитель</span><input id="emailFrom" type="email"></label><label class="threshold-item"><span>Получатель</span><input id="emailTo" type="email"></label>
+   <label class="threshold-item"><span>Интервал, минут</span><input id="emailInterval" type="number" min="5"></label>
+  </div></div>
+  <div class="settings-group"><div class="label">Важность</div><div class="setting-list"><label class="setting-item"><input type="checkbox" data-email-severity="critical"> Критические</label><label class="setting-item"><input type="checkbox" data-email-severity="warning"> Предупреждения</label><label class="setting-item"><input type="checkbox" data-email-severity="info"> Информация</label></div></div>
+  <div class="settings-group"><div class="label">Какие разделы отправлять</div><div class="setting-list">
+   <label class="setting-item"><input type="checkbox" data-email-source="CPU"> CPU</label><label class="setting-item"><input type="checkbox" data-email-source="Память"> Память</label><label class="setting-item"><input type="checkbox" data-email-source="Storage"> Storage</label><label class="setting-item"><input type="checkbox" data-email-source="Диски"> Диски</label><label class="setting-item"><input type="checkbox" data-email-source="ZFS"> ZFS</label><label class="setting-item"><input type="checkbox" data-email-source="UPS"> UPS</label><label class="setting-item"><input type="checkbox" data-email-source="VM/LXC"> VM и LXC</label><label class="setting-item"><input type="checkbox" data-email-source="Backups"> Резервные копии</label><label class="setting-item"><input type="checkbox" data-email-source="Dashboard"> Dashboard</label>
+  </div></div>
+  <button class="save-settings" id="saveEmail">Сохранить настройки почты</button><button class="theme-option" id="testEmail" style="width:100%;margin-top:9px">Отправить тестовое письмо</button><div class="settings-note" id="emailStatus">Пароль хранится в локальной базе сервера и не возвращается в браузер.</div>
+ </div>
  <div class="settings-body settings-panel" data-settings-panel="updates" hidden>
   <div class="detail-grid">
    <div class="detail"><span class="label">Установлена</span><strong id="updateCurrent">—</strong></div><div class="detail"><span class="label">Доступна</span><strong id="updateAvailable">—</strong></div><div class="detail"><span class="label">Режим</span><strong id="updateMode">—</strong></div>
   </div>
-  <div class="wide"><div class="label">Состояние обновлений</div><div class="temps"><span class="temp" id="updateMessage">Проверка ещё не выполнялась</span></div><div class="settings-note" id="updateChecked">Проверка запускается автоматически раз в сутки.</div></div>
+  <div class="wide"><div class="label">Состояние обновлений</div><div class="temps"><span class="temp" id="updateMessage">Проверка ещё не выполнялась</span></div><button class="save-settings" id="installUpdate">Проверить и установить обновление</button><div class="settings-note" id="updateChecked">Проверка запускается автоматически раз в сутки.</div></div>
  </div>
 </dialog>
 
@@ -356,9 +435,9 @@ const safe=v=>String(v??'').replace(/[&<>"']/g,c=>({'&':'&amp;','<':'&lt;','>':'
 const uptime=s=>{const d=Math.floor(s/86400),h=Math.floor(s%86400/3600),m=Math.floor(s%3600/60);return d?d+'д '+h+'ч':h?h+'ч '+m+'м':m+'м'};
 let alertSettings={backupMaxAgeHours:48};
 function render(x){const c=x.cpu,m=x.memory,s=x.storage,n=x.network,z=x.zfs||{available:false,pools:[]},u=x.ups||{available:false},g=x.guests||{available:false,guests:[]},b=x.backups||{available:false,items:[]},alerts=x.alerts||[],disks=x.disks||[],avg=c.temperatures.length?c.temperatures.reduce((a,t)=>a+t.celsius,0)/c.temperatures.length:null;
- const update=x.update||{};el('updateCurrent').textContent=update.currentVersion||'—';el('updateAvailable').textContent=update.availableVersion||'—';el('updateMode').textContent=update.mode==='auto'?'Автоматически':'Уведомлять';el('updateMessage').textContent=update.message||'Проверка ещё не выполнялась';el('updateChecked').textContent=update.checkedAt?'Последняя проверка: '+new Date(update.checkedAt).toLocaleString('ru-RU'):'Проверка запускается автоматически раз в сутки.';
+ const update=x.update||{},updating=['queued','installing'].includes(update.state);el('updateCurrent').textContent=update.currentVersion||'—';el('updateAvailable').textContent=update.availableVersion||'—';el('updateMode').textContent=update.mode==='auto'?'Автоматически':'Уведомлять';el('updateMessage').textContent=update.message||'Проверка ещё не выполнялась';el('updateChecked').textContent=update.checkedAt?'Последняя проверка: '+new Date(update.checkedAt).toLocaleString('ru-RU'):'Проверка запускается автоматически раз в сутки.';el('installUpdate').disabled=updating;el('installUpdate').textContent=updating?'Обновление выполняется…':'Проверить и установить обновление';
  const critical=alerts.filter(a=>a.severity==='critical').length,warnings=alerts.filter(a=>a.severity==='warning').length,infos=alerts.filter(a=>a.severity==='info').length;el('alertCount').textContent=alerts.length;el('alertCritical').textContent=critical;el('alertWarnings').textContent=warnings;el('alertHeadline').textContent=critical?'Требуется срочное внимание':warnings?'Есть предупреждения':infos?'Есть информационные события':'Система в норме';el('alertBar').style.width=(critical?100:warnings?65:infos?30:0)+'%';
- el('alertList').innerHTML=alerts.length?alerts.map(a=>'<article class="alert-item '+safe(a.severity)+'"><i class="alert-icon"></i><div><div class="alert-source">'+safe(a.source)+' · '+(a.severity==='critical'?'Критическое':a.severity==='warning'?'Предупреждение':'Информация')+'</div><div class="alert-title">'+safe(a.title)+'</div><div class="alert-message">'+safe(a.message)+'</div></div></article>').join(''):'<div class="all-good"><strong>Всё в порядке</strong><span>Активных предупреждений сейчас нет.</span></div>';
+ el('alertList').innerHTML=alerts.length?alerts.map(a=>'<article class="alert-item '+safe(a.severity)+'"><i class="alert-icon"></i><div><div class="alert-source">'+safe(a.source)+' · '+(a.severity==='critical'?'Критическое':a.severity==='warning'?'Предупреждение':'Информация')+'</div><div class="alert-title">'+safe(a.title)+'</div><div class="alert-message">'+safe(a.message)+'</div><button class="ack-alert" data-ack="'+a.eventId+'">Принято</button></div></article>').join(''):'<div class="all-good"><strong>Всё в порядке</strong><span>Новых неподтверждённых событий нет.</span></div>';
  el('cpuName').textContent=el('cpuDetailName').textContent=c.model;el('cpuUsage').textContent=fixed(c.usagePercent);el('cpuBar').style.width=Math.min(c.usagePercent,100)+'%';el('cpuTemp').textContent=avg===null?'Нет датчика':fixed(avg)+' °C';el('cpuTopology').textContent=c.physicalCores+' / '+c.logicalCpus;
  el('dCpuUsage').textContent=fixed(c.usagePercent)+'%';el('dSockets').textContent=c.sockets;el('dCores').textContent=c.physicalCores;el('dThreads').textContent=c.logicalCpus;el('dFreq').textContent=(c.frequencyMhz/1000).toFixed(2)+' GHz';el('dUptime').textContent=uptime(c.uptimeSeconds);el('dLoad1').textContent=fixed(c.load1);el('dLoad5').textContent=fixed(c.load5);el('dLoad15').textContent=fixed(c.load15);el('dTemps').innerHTML=c.temperatures.length?c.temperatures.map(t=>'<span class="temp">'+t.label+'<b>'+fixed(t.celsius)+'°C</b></span>').join(''):'<span class="empty">Датчики температуры не найдены</span>';
  el('memUsage').textContent=fixed(m.usagePercent);el('memBar').style.width=Math.min(m.usagePercent,100)+'%';el('memUsed').textContent=size(m.usedBytes);el('memAvailable').textContent=size(m.availableBytes);el('dMemUsed').textContent=size(m.usedBytes);el('dMemAvailable').textContent=size(m.availableBytes);el('dMemTotal').textContent=size(m.totalBytes);el('dMemCache').textContent=size(m.cachedBytes);el('dMemBuffers').textContent=size(m.buffersBytes);el('dMemPercent').textContent=fixed(m.usagePercent)+'%';el('dSwapUsed').textContent=size(m.swapUsedBytes);el('dSwapTotal').textContent=size(m.swapTotalBytes);el('dSwapPercent').textContent=fixed(m.swapPercent)+'%';
@@ -386,6 +465,9 @@ function setupDetailTabs(){document.querySelectorAll('dialog').forEach(dialog=>{
 setupDetailTabs();
 document.querySelectorAll('[data-open]').forEach(b=>b.onclick=()=>el(b.dataset.open).showModal());
 document.querySelectorAll('dialog').forEach(d=>{d.querySelector('.close').onclick=()=>d.close();d.onclick=e=>{if(e.target===d)d.close()}});
+el('alertList').onclick=async event=>{const button=event.target.closest('[data-ack]');if(!button)return;button.disabled=true;const response=await fetch('/api/alerts/acknowledge',{method:'POST',headers:{'Content-Type':'application/json'},body:JSON.stringify({eventId:Number(button.dataset.ack)})});if(response.ok)button.closest('.alert-item').remove();else button.disabled=false};
+async function loadAlertHistory(){const response=await fetch('/api/alerts/history');if(!response.ok)return;const events=await response.json()||[];el('alertHistory').innerHTML=events.length?events.map(a=>{const state=a.acknowledgedAt?'Принято · '+new Date(a.acknowledgedAt*1000).toLocaleString('ru-RU'):a.resolvedAt?'Завершено · '+new Date(a.resolvedAt*1000).toLocaleString('ru-RU'):'Активно';return '<article class="alert-item '+safe(a.severity)+'"><i class="alert-icon"></i><div><div class="alert-source">'+safe(a.source)+' · '+new Date(a.firstSeen*1000).toLocaleString('ru-RU')+'</div><div class="alert-title">'+safe(a.title)+'</div><div class="alert-message">'+safe(a.message)+'</div><span class="history-state">'+state+'</span></div></article>'}).join(''):'<div class="all-good"><strong>История пока пуста</strong><span>Новые события появятся здесь автоматически.</span></div>'}
+document.querySelectorAll('[data-alert-tab]').forEach(tab=>tab.onclick=()=>{document.querySelectorAll('[data-alert-tab]').forEach(t=>t.classList.toggle('active',t===tab));document.querySelectorAll('[data-alert-panel]').forEach(p=>p.hidden=p.dataset.alertPanel!==tab.dataset.alertTab);if(tab.dataset.alertTab==='history')loadAlertHistory()});
 const cardNames=['alerts','cpu','memory','storage','network','zfs','ups','guests','backups'];let hiddenCards=[];try{hiddenCards=JSON.parse(localStorage.getItem('proxmox-hidden-cards')||'[]')}catch(e){}
 function applyCardSettings(){cardNames.forEach(name=>{const visible=!hiddenCards.includes(name),card=document.querySelector('[data-card="'+name+'"]'),toggle=document.querySelector('[data-card-toggle="'+name+'"]');if(card)card.hidden=!visible;if(toggle)toggle.checked=visible})}
 document.querySelectorAll('[data-card-toggle]').forEach(toggle=>toggle.onchange=()=>{const name=toggle.dataset.cardToggle;hiddenCards=toggle.checked?hiddenCards.filter(v=>v!==name):[...new Set([...hiddenCards,name])];localStorage.setItem('proxmox-hidden-cards',JSON.stringify(hiddenCards));applyCardSettings()});applyCardSettings();
@@ -393,5 +475,10 @@ function setTheme(theme){document.documentElement.dataset.theme=theme;localStora
 document.querySelectorAll('[data-settings-tab]').forEach(tab=>tab.onclick=()=>{document.querySelectorAll('[data-settings-tab]').forEach(t=>t.classList.toggle('active',t===tab));document.querySelectorAll('[data-settings-panel]').forEach(p=>p.hidden=p.dataset.settingsPanel!==tab.dataset.settingsTab)});
 async function loadThresholds(){const response=await fetch('/api/settings/alerts');if(!response.ok)return;alertSettings=await response.json();document.querySelectorAll('[data-threshold]').forEach(input=>input.value=alertSettings[input.dataset.threshold]??'')}
 el('saveThresholds').onclick=async()=>{const values={};document.querySelectorAll('[data-threshold]').forEach(input=>values[input.dataset.threshold]=Number(input.value));const status=el('thresholdStatus');status.textContent='Сохранение…';const response=await fetch('/api/settings/alerts',{method:'PUT',headers:{'Content-Type':'application/json'},body:JSON.stringify(values)});if(response.ok){alertSettings=await response.json();status.textContent='Пороги сохранены и уже применяются.'}else{status.textContent=await response.text()||'Не удалось сохранить настройки.'}};loadThresholds().catch(()=>{});
+function emailForm(){return {enabled:el('emailEnabled').checked,skipTlsVerify:el('emailSkipTLS').checked,host:el('emailHost').value.trim(),port:Number(el('emailPort').value),username:el('emailUsername').value.trim(),password:el('emailPassword').value,from:el('emailFrom').value.trim(),to:el('emailTo').value.trim(),intervalMinutes:Number(el('emailInterval').value),severities:[...document.querySelectorAll('[data-email-severity]:checked')].map(x=>x.dataset.emailSeverity),sources:[...document.querySelectorAll('[data-email-source]:checked')].map(x=>x.dataset.emailSource)}}
+async function loadEmail(){const response=await fetch('/api/settings/email');if(!response.ok)return;const s=await response.json();el('emailEnabled').checked=s.enabled;el('emailSkipTLS').checked=!!s.skipTlsVerify;el('emailHost').value=s.host||'';el('emailPort').value=s.port||587;el('emailUsername').value=s.username||'';el('emailPassword').value='';el('emailPassword').placeholder=s.hasPassword?'Сохранён · не изменять':'Пароль';el('emailFrom').value=s.from||'';el('emailTo').value=s.to||'';el('emailInterval').value=s.intervalMinutes||60;document.querySelectorAll('[data-email-severity]').forEach(x=>x.checked=(s.severities||[]).includes(x.dataset.emailSeverity));document.querySelectorAll('[data-email-source]').forEach(x=>x.checked=(s.sources||[]).includes(x.dataset.emailSource))}
+el('saveEmail').onclick=async()=>{const status=el('emailStatus');status.textContent='Сохранение…';const response=await fetch('/api/settings/email',{method:'PUT',headers:{'Content-Type':'application/json'},body:JSON.stringify(emailForm())});status.textContent=response.ok?'Настройки сохранены.':await response.text();if(response.ok)loadEmail()};
+el('testEmail').onclick=async()=>{const status=el('emailStatus');status.textContent='Отправляем тестовое письмо…';const saved=await fetch('/api/settings/email',{method:'PUT',headers:{'Content-Type':'application/json'},body:JSON.stringify(emailForm())});if(!saved.ok){status.textContent=await saved.text();return}const response=await fetch('/api/settings/email/test',{method:'POST'});status.textContent=response.ok?'Тестовое письмо отправлено.':await response.text()};loadEmail().catch(()=>{});
+el('installUpdate').onclick=async()=>{const button=el('installUpdate');button.disabled=true;button.textContent='Ставим в очередь…';el('updateMessage').textContent='Создаём запрос на обновление…';try{const response=await fetch('/api/update/request',{method:'POST'});if(!response.ok)throw new Error(await response.text());const status=await response.json();el('updateMessage').textContent=status.message;button.textContent='Обновление выполняется…'}catch(e){button.disabled=false;button.textContent='Попробовать ещё раз';el('updateMessage').textContent='Не удалось запустить обновление.'}};
 const events=new EventSource('/api/events');events.onmessage=e=>render(JSON.parse(e.data));events.onerror=()=>{el('dot').classList.remove('live');el('status').textContent='Переподключение…'};
 </script></body></html>`