REST API for ProxmoxAAS
Go to file
Arthur Lu 9f7b62cdff fix error handling in ticket endpoint
Signed-off-by: Arthur Lu <learthurgo@gmail.com>
2023-05-15 22:00:46 +00:00
.gitignore add basic local db utility functions 2023-02-27 01:28:01 +00:00
db.js separate user data endpoints 2023-05-12 20:51:07 +00:00
localdb.json.template separate user data endpoints 2023-05-12 20:51:07 +00:00
main.js fix error handling in ticket endpoint 2023-05-15 22:00:46 +00:00
package.json remove helmet 2023-05-13 05:17:48 +00:00
proxmoxaas-api.service add start script and sample systemd service 2023-02-10 21:58:22 +00:00
pve.js update to es6 and fix some syntax errors 2023-04-26 01:18:05 +00:00
README.md update README 2023-05-13 07:36:13 +00:00
start.sh add start script and sample systemd service 2023-02-10 21:58:22 +00:00
utils.js separate user data endpoints 2023-05-12 20:51:07 +00:00
vars.js.template implement safer pve ticket endpoint 2023-05-13 07:34:58 +00:00

ProxmoxAAS API - Client REST API

ProxmoxAAS API provides functionality to the Client by both providing a proxy API for the Proxmox API, and an API for requesting resources within a defined quota.

Prerequisites

  • ProxmoxAAS-Client
  • Proxmox VE Cluster (v7.0+)
  • Reverse proxy server which can proxy the client and API
    • FQDN
  • Server with NodeJS (v18.0+) and NPM installed

Configuring API Token and Permissions

In Proxmox VE, follow the following steps:

  1. Add a new user proxmoxaas-api to Proxmox VE
  2. Create a new API token for the user proxmoxaas-api and copy the secret key to a safe location
  3. Create a new role proxmoxaas-api with at least the following permissions:
    • VM.* except VM.Audit, VM.Backup, VM.Clone, VM.Console, VM.Monitor, VM.PowerMgmt, VM.Snapshot, VM.Snapshot.Rollback
    • Datastore.Allocate, Datastore.AllocateSpace, Datastore.Audit
    • User.Modify
  4. Add a new API Token Permission with path: /, select the API token created previously, and role: proxmoxaas-api
  5. Add a new User Permission with path: /, select the proxmoxaas-api user, and role: proxmoxaas-api

Installation - API

  1. Clone this repo onto Client Host
  2. Run npm install to initiaze the package requirements
  3. Copy vars.js.template as vars.js and modify the following values:
    • pveAPI - the URI to the Proxmox API, ie <proxmoxhost>:8006/api2/json or <proxmox URL>/api2/json if Proxmox VE is behind a reverse proxy.
    • hostname - the ProxmoxAAS-Client URL, ie host.domain.tld
    • domain - the base domain for the client and proxmox, ie domain.tld
    • listenPort - the port you want the API to listen on, ie 8080
    • pveAPIToken - the user(name), authentication realm, token id, and token secrey key (uuid)
  4. Start the service using node ., or call the provided shell script, or use the provided systemctl service script

Installation - Reverse Proxy

  1. Configure nginx or preferred reverse proxy to reverse proxy the client. The configuration should include at least the following:
server {
	listen 443 ssl;
	server_name client.<FQDN>;
	location / {
		proxy_pass http://<Client Host>:80;
	}
	location /api/ {
		proxy_pass http://<Client Host>:8080;
	}
}
  1. Start nginx with the new configurations by running systemctl reload nginx

Result

After these steps, the ProxmoxAAS Client should be avaliable and fully functional at client.<FQDN>.