librenms/LibreNMS/Validations/Configuration.php
Tony Murray 7a0d604cdd
Automatic fixes for validation failures (#13930)
* Automatic fixes for validations

* webui

* lint fixes

* Fix an install issue with ConfigSeeder requesting cli input in web page.

* Do not use c_echo in validate.php print_fail()
2022-06-10 16:25:33 -05:00

80 lines
2.7 KiB
PHP

<?php
/**
* Configuration.php
*
* Checks various config settings are correct.
*
* This program is free software: you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation, either version 3 of the License, or
* (at your option) any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with this program. If not, see <https://www.gnu.org/licenses/>.
*
* @link https://www.librenms.org
*
* @copyright 2017 Tony Murray
* @author Tony Murray <murraytony@gmail.com>
*/
namespace LibreNMS\Validations;
use Illuminate\Contracts\Encryption\DecryptException;
use LibreNMS\Config;
use LibreNMS\DB\Eloquent;
use LibreNMS\Validator;
class Configuration extends BaseValidation
{
/**
* Validate this module.
* To return ValidationResults, call ok, warn, fail, or result methods on the $validator
*
* @param Validator $validator
*/
public function validate(Validator $validator): void
{
// Test transports
if (Config::get('alerts.email.enable') == true) {
$validator->warn('You have the old alerting system enabled - this is to be deprecated on the 1st of June 2015: https://groups.google.com/forum/#!topic/librenms-project/1llxos4m0p4');
}
if (config('app.debug')) {
$validator->warn('Debug enabled. This is a security risk.');
}
if (Eloquent::isConnected() && ! \DB::table('devices')->exists()) {
$validator->warn('You have no devices.', 'Consider adding a device such as localhost: ' . $validator->getBaseURL() . '/addhost');
}
if (Config::has('validation.encryption.test')) {
try {
if (\Crypt::decryptString(Config::get('validation.encryption.test')) !== 'librenms') {
$this->failKeyChanged($validator);
}
} catch (DecryptException $e) {
$this->failKeyChanged($validator);
}
} else {
Config::persist('validation.encryption.test', \Crypt::encryptString('librenms'));
}
}
/**
* @param \LibreNMS\Validator $validator
*/
private function failKeyChanged(Validator $validator): void
{
$validator->fail(
'APP_KEY does not match key used to encrypt data. APP_KEY must be the same on all nodes.',
'If you rotated APP_KEY, run lnms key:rotate to resolve.'
);
}
}