0.1.0 • Published yesterdayCLI

dawu-manager

Licence

MIT

Version

0.1.0

Deps

Size

64.0 MB

Vulns

Weekly

Install scriptsThis package runs scripts during installation (preinstall/install/postinstall)

Summary Dependency Versions

dawu-manager

Web management dashboard for dawos-agent BNG nodes.

Manage multiple dawos-agent instances from a single, responsive web UI. Think Portainer or Teleport — but purpose-built for PPPoE/BNG infrastructure powered by accel-ppp.

Features

Multi-node management — Add, monitor, and control multiple BNG nodes from one dashboard
Real-time health monitoring — Live status checks with online/offline/degraded indicators
Role-based access control (RBAC) — Admin, operator, and viewer roles with route-level enforcement
Secure API proxy — All dawos-agent communication goes through Next.js API routes; BNG credentials never reach the browser
API key encryption — AES-256-GCM with scrypt-derived keys; API keys are encrypted at rest
Audit logging — Central audit trail for all node operations
Responsive design — Mobile-first UI with sidebar, mobile nav, skeleton loading, and toast notifications
Dark mode ready — CSS variable-based theming with Tailwind dark variant support
Zero-config database — Embedded SQLite via Prisma; no external database server required
One-command install — npx dawu-manager gets you running in seconds

Quick Start

Option 1: npx (recommended)

npx dawu-manager

Open http://localhost:3789 and complete the first-time setup.

Option 2: Docker

curl -O https://raw.githubusercontent.com/Cepat-Kilat-Teknologi/dawu-manager/main/docker-compose.yml
docker compose up -d

Option 3: Development

git clone https://github.com/Cepat-Kilat-Teknologi/dawu-manager.git
cd dawu-manager
pnpm install
pnpm exec prisma migrate dev
pnpm dev

First-Time Setup

On first launch, you'll be redirected to /setup to create your admin account. Enter your name, email, and a strong password — there are no hardcoded defaults.

Tip: The first account created is always assigned the admin role.

Tech Stack

Layer	Technology
Framework	Next.js 16 (App Router, Turbopack)
UI	shadcn/ui v5 (@base-ui/react) + Tailwind CSS v4
Database	SQLite via Prisma 7 + @prisma/adapter-libsql
Auth	NextAuth.js v5 (beta.31), JWT + credentials
Charts	Recharts 3
Forms	React Hook Form + Zod 4
State	TanStack Query 5
Testing	Vitest 4 + React Testing Library + happy-dom
Package mgr	pnpm

Architecture

Operator Workstation                    dawu-manager Server
+-------------------+                  +-------------------------------+
|                   |                  |  Next.js 16 (App Router)      |
|  Browser          | --- HTTPS --->   |    |                          |
|  (React 19 SPA)   |   JWT auth       |    +-- Auth (NextAuth v5)     |
|                   |                  |    +-- API Routes             |
+-------------------+                  |    |    +-- /api/nodes CRUD   |
                                       |    |    +-- /api/nodes/proxy  |
                                       |    +-- SQLite (Prisma 7)      |
                                       |         +-- Users             |
                                       |         +-- Nodes (encrypted) |
                                       |         +-- AuditLog          |
                                       +-------------------------------+
                                                   |
                                          HTTP + X-API-Key
                                                   |
                          +------------------------+------------------------+
                          |                        |                        |
                   +------+------+          +------+------+          +------+------+
                   | dawos-agent |          | dawos-agent |          | dawos-agent |
                   | BNG Node 1  |          | BNG Node 2  |          | BNG Node N  |
                   | :8470       |          | :8470       |          | :8470       |
                   +-------------+          +-------------+          +-------------+

Data Flow

Browser authenticates with dawu-manager via NextAuth.js (JWT)
API routes decrypt the stored API key for the target node
Proxy forwards the request to the dawos-agent instance with X-API-Key header
Response flows back through the proxy to the browser

BNG node credentials (API keys) are never exposed to the browser.

Routes

dawu-manager exposes 40 routes (26 pages + 14 API endpoints):

Pages (26)

Route	Auth	Purpose
`/login`	No	Login page
`/setup`	No	First-run admin setup
`/`	Yes	Dashboard overview (fleet stats)
`/nodes`	Yes	Node list
`/nodes/new`	Yes	Add node form
`/nodes/[nodeId]`	Yes	Node detail + health
`/nodes/[nodeId]/sessions`	Yes	PPPoE session management
`/nodes/[nodeId]/service`	Yes	accel-ppp service control
`/nodes/[nodeId]/config`	Yes	Configuration editor
`/nodes/[nodeId]/firewall`	Yes	Firewall rules + NAT + groups
`/nodes/[nodeId]/network`	Yes	Interfaces, routes, VLANs
`/nodes/[nodeId]/traffic`	Yes	Traffic monitoring + shaping
`/nodes/[nodeId]/pppoe`	Yes	PPPoE interfaces + MAC filters
`/nodes/[nodeId]/routing`	Yes	BGP, OSPF, RIP, BFD
`/nodes/[nodeId]/ip-pool`	Yes	IP address pool management
`/nodes/[nodeId]/monitoring`	Yes	Monitoring exporters + metrics
`/nodes/[nodeId]/logs`	Yes	Log viewer + streaming
`/nodes/[nodeId]/system`	Yes	System info + metrics
`/nodes/[nodeId]/dhcp`	Yes	DHCP server + relay
`/nodes/[nodeId]/diagnostics`	Yes	Diagnostics + zones + conntrack
`/nodes/[nodeId]/events`	Yes	Event hooks + webhooks
`/audit`	Yes	Central audit trail (filters + CSV export)
`/alerts`	Yes	Alert rules + history
`/operations`	Yes	Cross-node fleet operations
`/users`	Yes	User management (admin)
`/settings`	Yes	Global settings (admin)

API Endpoints (14)

Route	Method(s)	Auth	Purpose
`/api/auth/[...nextauth]`	GET, POST	—	NextAuth handler
`/api/setup`	POST	No	First-run admin creation
`/api/nodes`	GET, POST	Yes	Node list + create
`/api/nodes/[nodeId]`	GET, PUT, DELETE	Yes	Node CRUD
`/api/nodes/[nodeId]/health`	GET	Yes	Health check + status update
`/api/nodes/[nodeId]/proxy/[...path]`	ANY	Yes	Universal dawos-agent proxy
`/api/nodes/[nodeId]/stream/[...path]`	GET	Yes	SSE streaming proxy
`/api/activity`	GET	Yes	Audit log entries
`/api/activity/export`	GET	Yes	Audit log CSV export
`/api/alerts/rules`	GET, POST	Yes	Alert rules CRUD
`/api/alerts/rules/[id]`	GET, PUT, DELETE	Yes	Alert rule by ID
`/api/alerts/events`	GET	Yes	Alert event history
`/api/fleet/operations`	POST	Yes	Cross-node fan-out operations
`/api/fleet/overview`	GET	Yes	Fleet aggregate stats

Configuration

Environment Variables

Variable	Required	Default	Description
`DATABASE_URL`	No	`file:~/.dawu-manager/data.db`	SQLite database path
`NEXTAUTH_SECRET`	Yes	Auto-generated (dev only)	Secret for JWT signing + API key encryption
`NEXTAUTH_URL`	No	`http://localhost:3789`	Canonical URL for auth callbacks
`PORT`	No	`3789`	Server listen port

CLI Options

npx dawu-manager --port 4000    # Custom port

Development

Prerequisites

Node.js 20+
pnpm 9+

Commands

Command	Description
`pnpm dev`	Start dev server (port 3789, Turbopack)
`pnpm build`	Production build (standalone output)
`pnpm start`	Start production server
`pnpm lint`	Run ESLint
`pnpm test`	Run all tests
`pnpm test:watch`	Run tests in watch mode
`pnpm test:coverage`	Run tests with coverage report

Project Structure

src/
├── app/
│   ├── (auth)/             # Login + setup pages (centered layout)
│   ├── (dashboard)/        # Protected pages (sidebar + header layout)
│   │   ├── alerts/         # Alert rules + history
│   │   ├── audit/          # Audit trail (filters + CSV export)
│   │   ├── nodes/          # Node list, add, detail
│   │   │   └── [nodeId]/   # 15 category pages (sessions, firewall, config, etc.)
│   │   ├── operations/     # Cross-node fleet operations
│   │   ├── settings/       # Global settings
│   │   ├── users/          # User management
│   │   └── page.tsx        # Dashboard overview (fleet stats)
│   └── api/
│       ├── activity/       # Audit log API + CSV export
│       ├── alerts/         # Alert rules + events API
│       ├── auth/           # NextAuth handler
│       ├── fleet/          # Fleet operations + overview API
│       ├── nodes/          # CRUD + health + proxy + SSE stream
│       └── setup/          # First-run admin creation
├── components/
│   ├── ui/                 # shadcn/ui primitives
│   ├── layout/             # Sidebar, header, mobile-nav
│   ├── dashboard/          # Stat card, node card
│   └── shared/             # Status badge, loading skeleton, confirm dialog
├── hooks/                  # TanStack Query hooks (node proxy, mutations)
├── lib/                    # Auth, DB, crypto, dawos-client, utils
├── config/                 # Navigation data
├── types/                  # NextAuth type augmentation
└── __tests__/              # 88 test files (mirrors src/ structure)

Testing

1115 tests across 88 test files
100% coverage (statements, branches, functions, lines)
Framework: Vitest 4 + React Testing Library + happy-dom

pnpm test              # Run all tests
pnpm test:coverage     # Run with coverage thresholds enforced

Coverage Thresholds

Statements: 100%
Branches:   100%
Functions:  100%
Lines:      100%

Database Schema

dawu-manager uses an embedded SQLite database with four models:

Model	Purpose
`User`	Dashboard users with roles (admin/operator/viewer)
`Session`	Browser sessions (JWT-backed)
`Node`	Managed dawos-agent instances
`AuditLog`	Central audit trail for all operations
`Setting`	Key-value configuration store

User Roles

Role	Permissions
`admin`	Full access: manage nodes, users, settings, view audit log
`operator`	Manage nodes: add, edit, delete, proxy operations
`viewer`	Read-only: view dashboard, node list, node detail

Distribution

Method	Command / File	Use Case
npx	`npx dawu-manager`	Quick trial, small deployments
Docker	`docker compose up -d`	Production deployments
Dev	`pnpm dev`	Development

Project	Description
dawos-agent	REST API daemon for BNG nodes
dawos-cli	Remote CLI client for dawos-agent

Contributing

See CODE_OF_CONDUCT.md for community guidelines.

Fork the repository
Create a feature branch (git checkout -b feat/amazing-feature)
Make your changes with tests
Ensure all quality gates pass:
```
pnpm lint
pnpm test:coverage
pnpm build
```
Commit with conventional commits (feat:, fix:, docs:, etc.)
Open a Pull Request

Security

See SECURITY.md for our security policy and reporting instructions.

License

MIT 2026 Cepat Kilat Teknologi

Keywords

bng pppoe accel-ppp dawos isp noc network-management dashboard