API

REST unter /api/* und /auth/*. Frontend-Wrapper in frontend/src/lib/api.ts.

Endpunkt-Gruppen (api.ts)

Gruppe	Domäne
authApi, meApi	Login/Session, eigenes Konto
nodesApi	Nodes, Status, Provisioning
vmsApi, ctsApi	VMs / Container (start/stop/create, Status)
dockerApi	Docker in VMs
tenantsApi, usersApi	Mandanten + User (Superadmin)
updateApi, bulkRunApi, upgradeApi	Updates, Cross-Tenant-Bulk, Distro/PVE-Upgrade
backupApi	Backups (vzdump), Sync
scheduleApi	Zeitgesteuerte Jobs
monitorApi, temperatureApi	Ressourcen, Tasks, Temperatur
netApi	Netzwerk, DNS, Ping
tunnelApi, rdpApi	Reverse-Tunnel / RDP-VNC (guaclite)
securityApi	Security-Scans, CVEs
commandApi, auditApi, logsApi	Command-Log, Audit, Logs
vmTemplatesApi	VM-Templates
notificationApi, settingsApi	Benachrichtigungen, Systemkonfig

Router-Mapping (server/routers/)

admin, auth, me, monitor, deploy, docker, backup, update, upgrade, schedule, net, tunnel, rdp, security, command, audit, log, temperature, template, notification — plus settings/settings_router.

WebSocket

Endpoint	Zweck
/ws/agent	Host-Agent ↔ Backend (Commands, Scans) — über :8765 public
/ws/terminal/*	Browser ↔ Backend ↔ Agent-PTY

Command-Pattern (websocket/manager.py): REST ruft send_command(node,…), AgentManager korreliert Result per Request-ID (Future).

Install / Binary (öffentlich, include_in_schema=False)

Endpoint	Zweck
GET /install/{token}	Node-Agent Install-Script (Bash)
GET /vm-install/{token}	VM-Guest-Agent Install-Script
GET /vm-agent-binary/{arch}	VM-Agent-Binary (theprox-vm-agent-{arch})

Ausgewählte Endpunkte

• GET/PUT /api/nodes/{node}/vms/{vmid}/notes — VM-Notizen
• GET /api/nodes/{node}/vms/notes-present — Batch-Notiz-Check
• GET /api/nodes/{node}/ct-templates — CT-Templates live vom Node
• GET/POST /api/nodes/{node}/vms/managed — Managed-VM-Config
• POST /api/backup/nodes/{node}/sync-history — Backup-Sync