Manager (Backend API)

The manager/ component is the control plane: a Go service (Gin + GORM) that owns users, nodes, plans, orders, traffic, and system config, and exposes both the human-facing REST API and the node data plane.

Build & run

cd manager
go build -o vgate-manager .
./vgate-manager --config config.yml     # defaults to ./config.yml; HTTP on server.port (8081)

Other commands (cobra subcommands):

vgate-manager admin create --username X --password Y --role admin|super_admin

Data migrations run automatically on startup (cmd/migrate.go, idempotent). On first start the DB is auto-migrated and an initial admin is bootstrapped from admin.bootstrap in config.yml (default admin / change-me); the generated password is printed only once.

Test & lint

go test ./...
go vet ./... && gofmt -l .

Layered structure (internal/)

• api/ — HTTP layer: router.go (Gin engine + middleware wiring), handler/ (one file per resource: admin_node.go, admin_user.go, server.go, user.go, order.go, plan.go, …), dto/ (request/response structs). Tests: admin_test.go, server_test.go, sub_test.go, auth-level tests.
• middleware/ — cors.go, jwt.go (user/admin auth), node_auth.go (node token auth), logger.go, ratelimit.go.
• service/ — business logic: auth, user, node, plan, order/billing, traffic, stats, subscription, system_config, email/invite, announcement. Many have _test.go.
• model/ — GORM models. util/ — helpers. wire/ — dependency wiring. pkg/crypto/ — shared crypto (VLESS credential helpers).

Startup sequence (run())

1. Load config (viper).
2. Open DB (SQLite default via glebarez/sqlite, or Postgres via db.dialect / db.dsn).
3. AutoMigrate all GORM models.
4. Run ordered data migrations.
5. Merge DB-backed system-config overrides on top of config.yml.
6. Bootstrap the admin.
7. Build router via api.NewRouter.
8. Start background tickers: expired-order closer (5 min), hourly traffic aggregation, daily quota reset.

API surface (all under /api/v1)

Group	Endpoints
Public / user	/user/login, /sub/:sub_token, profile / subscribe / plans / orders, /billing/alipay/notify
Node data plane	GET /server/config, GET /server/users, POST /server/traffic
Admin	nodes, users, traffic, stats, system-config, orders, plans, admins
Health	GET /health

Auth

• JWT access + refresh tokens. Login returns both; a 401 on a protected endpoint triggers one automatic refresh.
• Roles: admin vs super_admin gate plan/admins endpoints.
• Node endpoints use a separate node token (node_auth middleware).

Config split

File / env only	DB-backed (hot-reloadable)
server.port	jwt TTLs
db.*	log.level / log.format
jwt.secret	cors.allowed_origins
admin.bootstrap.*	timeouts

viper maps SERVER_PORT-style env vars. See Configuration Reference.

Database

• SQLite by default (glebarez/sqlite) — zero external dependencies, great for small deployments.
• Postgres via db.dialect: postgres and db.dsn.

Production notes

• Set jwt.secret in the config; the bootstrap admin password is shown only once.
• Put the manager behind a reverse proxy (nginx/Caddy) for TLS and to serve the frontends.
• Enable ratelimit middleware for public endpoints.