deploy_dashboard.sh

#!/usr/bin/env bash
# Maps the rich dashboard files (shipped to /root) into the Apache web root
# under the names the live SPA expects. Run on the VPN server after
# provision_openvpn_lab.sh and setup_passive_detection.sh.
set -euo pipefail

WEB_ROOT="/var/www/html"
STUDENT_ROOT="/var/www/openvpn-student"
SRC_DIR="${1:-/root}"

declare -A FILES=(
  [dashboard_live.php]="index.php"      # live polling SPA -> default page
  [dashboard_api.php]="api.php"         # JSON feed consumed by index.php
  [dashboard_logs.php]="logs.php"       # export / report / clear-logs endpoint
  [dashboard_favicon.php]="favicon.php" # favicon proxy used by the SPA
  [dashboard_index.php]="classic.php"   # server-rendered no-JS fallback page
)

install -d -m 755 "$WEB_ROOT"
install -d -m 755 "$STUDENT_ROOT"

for src in "${!FILES[@]}"; do
  dst="${FILES[$src]}"
  if [ ! -f "$SRC_DIR/$src" ]; then
    echo "MISSING: $SRC_DIR/$src" >&2
    exit 1
  fi
  install -m 644 -o root -g root "$SRC_DIR/$src" "$WEB_ROOT/$dst"
  echo "installed $src -> $WEB_ROOT/$dst"
done

# Public read-only student view. It uses the same dashboard in read-only mode
# when served below /student/, plus public read-only data/favicon endpoints.
install -m 644 -o root -g root "$SRC_DIR/dashboard_live.php" "$STUDENT_ROOT/index.php"
install -m 644 -o root -g root "$SRC_DIR/dashboard_api.php" "$STUDENT_ROOT/api.php"
install -m 644 -o root -g root "$SRC_DIR/dashboard_favicon.php" "$STUDENT_ROOT/favicon.php"

cat > /etc/apache2/conf-available/openvpn-student.conf <<EOF
RedirectMatch 302 ^/student$ /student/
Alias /student/ $STUDENT_ROOT/

<Directory $STUDENT_ROOT>
    Options -Indexes
    AllowOverride None
    DirectoryIndex index.php
    Require all granted
</Directory>
EOF

if command -v a2enconf >/dev/null 2>&1; then
  a2enconf openvpn-student >/dev/null
fi

# The simple inline index.php written by provision_openvpn_lab.sh is now
# replaced by the live SPA above; drop any stale static index.
rm -f "$WEB_ROOT/index.html"

# favicon.php caches into this dir as www-data.
install -d -m 755 -o www-data -g www-data /var/cache/openvpn-lab-favicons 2>/dev/null || \
  install -d -m 755 /var/cache/openvpn-lab-favicons

if command -v apache2ctl >/dev/null 2>&1; then
  apache2ctl configtest
fi
systemctl reload apache2.service

echo "=== web root ==="
ls -l "$WEB_ROOT"
echo
echo "=== public student view ==="
ls -l "$STUDENT_ROOT"