1 files changed, 46 insertions, 1 deletions

diff --git a/internal/cli/cli.go b/internal/cli/cli.go
index 7882758..7dd7cb6 100644
--- a/internal/cli/cli.go
+++ b/internal/cli/cli.go
@@ -9,6 +9,7 @@ import (
 	"os/signal"
 	"syscall"
 
+	"codeberg.org/snonux/goprecords/internal/authkeys"
 	"codeberg.org/snonux/goprecords/internal/daemon"
 	"codeberg.org/snonux/goprecords/internal/goprecords"
 	"codeberg.org/snonux/goprecords/internal/version"
@@ -21,6 +22,12 @@ func Execute(args []string) error {
 		fmt.Println(version.Version)
 		return nil
 	}
+	if len(args) >= 1 && (args[0] == "--create-client-key" || args[0] == "-create-client-key") {
+		if len(args) < 2 {
+			return fmt.Errorf("create-client-key: hostname required")
+		}
+		return runCreateClientKey(args[1], args[2:])
+	}
 	if len(args) > 0 && (args[0] == "-daemon" || args[0] == "--daemon") {
 		return runDaemon(args[1:])
 	}
@@ -138,6 +145,7 @@ func runDaemon(args []string) error {
 	fs.SetOutput(os.Stdout)
 	statsDir := fs.String("stats-dir", os.Getenv("GOPRECORDS_STATS_DIR"), "Uptimed stats directory (required; env GOPRECORDS_STATS_DIR)")
 	listen := fs.String("listen", defaultListenFromEnv(), "TCP listen address (env GOPRECORDS_LISTEN, default :8080)")
+	authDB := fs.String("auth-db", "", "SQLite file for upload API keys (default: <stats-dir>/goprecords-auth.db)")
 	if err := fs.Parse(args); err != nil {
 		return err
 	}
@@ -148,9 +156,46 @@ func runDaemon(args []string) error {
 	}
 	ctx, stop := signal.NotifyContext(context.Background(), os.Interrupt, syscall.SIGTERM)
 	defer stop()
-	err := daemon.Run(ctx, daemon.Config{StatsDir: *statsDir, Addr: *listen})
+	err := daemon.Run(ctx, daemon.Config{StatsDir: *statsDir, Addr: *listen, AuthDB: *authDB})
 	if err != nil && !errors.Is(err, context.Canceled) {
 		return err
 	}
 	return nil
 }
+
+func runCreateClientKey(hostname string, args []string) error {
+	if hostname == "" {
+		return fmt.Errorf("create-client-key: hostname required")
+	}
+	fs := flag.NewFlagSet("create-client-key", flag.ExitOnError)
+	fs.SetOutput(os.Stderr)
+	statsDir := fs.String("stats-dir", "", "Uptimed stats directory (sets default auth-db path)")
+	authDB := fs.String("auth-db", "", "SQLite file for upload API keys (default: <stats-dir>/goprecords-auth.db)")
+	if err := fs.Parse(args); err != nil {
+		return err
+	}
+	authPath := *authDB
+	if authPath == "" {
+		if *statsDir == "" {
+			fmt.Fprintln(os.Stderr, "create-client-key: need -stats-dir or -auth-db")
+			fs.Usage()
+			return fmt.Errorf("missing -stats-dir or -auth-db")
+		}
+		authPath = authkeys.DefaultPath(*statsDir)
+	}
+	ctx := context.Background()
+	store, err := authkeys.OpenStore(ctx, authPath)
+	if err != nil {
+		return fmt.Errorf("open auth db: %w", err)
+	}
+	defer store.Close()
+	if err := store.EnsureSchema(ctx); err != nil {
+		return fmt.Errorf("schema: %w", err)
+	}
+	token, err := store.CreateKey(ctx, hostname)
+	if err != nil {
+		return fmt.Errorf("create key: %w", err)
+	}
+	fmt.Println(token)
+	return nil
+}