Merge pull request #3 from jorgedlcruz/features/v0.1.3

Features/v0.1.3

Author: jorgedlcruz

CONTAINER.md

@@ -1,6 +1,6 @@
 # Container Deployment Guide
 
-This guide covers building and running VBR Connect as a container using Podman or Docker.
+This guide covers building and running Veeam Single-UI as a container using Podman or Docker.
 
 ## Prerequisites
 
@@ -11,12 +11,12 @@ This guide covers building and running VBR Connect as a container using Podman o
 ## Build the Container
 
 ```bash
-podman build -t vbr-connect-mvp:latest .
+podman build -t veeam-single-ui:latest .
 ```
 
 Or with Docker:
 ```bash
-docker build -t vbr-connect-mvp:latest .
+docker build -t veeam-single-ui:latest .
 ```
 
 ## Run the Container
@@ -25,20 +25,20 @@ docker build -t vbr-connect-mvp:latest .
 
 ```bash
 podman run -d \
-  --name vbr-connect --replace \
+  --name veeam-single-ui --replace \
   -p 3000:3000 \
   -e VEEAM_API_URL="https://your-vbr-server:9419" \
   -e VEEAM_USERNAME="your-username" \
   -e VEEAM_PASSWORD="your-password" \
   -e NODE_TLS_REJECT_UNAUTHORIZED=0 \
-  vbr-connect-mvp:latest
+  veeam-single-ui:latest
 ```
 
 ### Full Run with All Products
 
 ```bash
 podman run -d \
-  --name vbr-connect --replace \
+  --name veeam-single-ui --replace \
   -p 3000:3000 \
   -e VEEAM_API_URL="https://your-vbr-server:9419" \
   -e VEEAM_USERNAME="your-username" \
@@ -50,7 +50,7 @@ podman run -d \
   -e VBM_USERNAME="your-vbm-username" \
   -e VBM_PASSWORD="your-vbm-password" \
   -e NODE_TLS_REJECT_UNAUTHORIZED=0 \
-  vbr-connect-mvp:latest
+  veeam-single-ui:latest
 ```
 
 ## Environment Variables
@@ -106,19 +106,19 @@ NODE_TLS_REJECT_UNAUTHORIZED=0
 Run with environment file:
 ```bash
 podman run -d \
-  --name vbr-connect --replace \
+  --name veeam-single-ui --replace \
   -p 3000:3000 \
   --env-file .env.local \
-  vbr-connect-mvp:latest
+  veeam-single-ui:latest
 ```
 
 With Docker:
 ```bash
 docker run -d \
-  --name vbr-connect --rm \
+  --name veeam-single-ui --rm \
   -p 3000:3000 \
   --env-file .env.local \
-  vbr-connect-mvp:latest
+  veeam-single-ui:latest
 ```
 
 **Important Notes:**
@@ -130,22 +130,22 @@ docker run -d \
 
 ### View logs
 ```bash
-podman logs vbr-connect
+podman logs veeam-single-ui
 ```
 
 ### Stop container
 ```bash
-podman stop vbr-connect
+podman stop veeam-single-ui
 ```
 
 ### Start container
 ```bash
-podman start vbr-connect
+podman start veeam-single-ui
 ```
 
 ### Remove container
 ```bash
-podman rm vbr-connect
+podman rm veeam-single-ui
 ```
 
 ## Access the Application
@@ -159,16 +159,16 @@ Scan the container image for vulnerabilities using Trivy:
 
 ```bash
 # Export image and scan (workaround for podman socket issues)
-podman save localhost/vbr-connect-mvp:latest -o /tmp/vbr-connect-mvp.tar
-trivy image --input /tmp/vbr-connect-mvp.tar
+podman save localhost/veeam-single-ui:latest -o /tmp/veeam-single-ui.tar
+trivy image --input /tmp/veeam-single-ui.tar
 
 # Alternative: Scan directly if podman socket is available
-trivy image localhost/vbr-connect-mvp:latest
+trivy image localhost/veeam-single-ui:latest
 ```
 
 To scan only for vulnerabilities (faster):
 ```bash
-trivy image --scanners vuln --input /tmp/vbr-connect-mvp.tar
+trivy image --scanners vuln --input /tmp/veeam-single-ui.tar
 ```
 
 ## Image Details
@@ -182,15 +182,15 @@ trivy image --scanners vuln --input /tmp/vbr-connect-mvp.tar
 ## Troubleshooting
 
 ### Container won't start
-1. Check logs: `podman logs vbr-connect`
+1. Check logs: `podman logs veeam-single-ui`
 2. Verify environment variables are set correctly
 3. Ensure VBR API URL is accessible from container
 4. Check if required environment variables (VEEAM_*) are present
 
 ### API connection errors
 1. Verify network connectivity:
    ```bash
-   podman exec vbr-connect ping your-vbr-server
+   podman exec veeam-single-ui ping your-vbr-server
    ```
 2. Check if `NODE_TLS_REJECT_UNAUTHORIZED=0` is set for self-signed certificates
 3. Verify credentials are correct and have appropriate permissions
@@ -203,7 +203,7 @@ trivy image --scanners vuln --input /tmp/vbr-connect-mvp.tar
 ### Port conflicts
 If port 3000 is already in use, map to a different port:
 ```bash
-podman run -d --name vbr-connect --replace -p 8080:3000 ... vbr-connect-mvp:latest
+podman run -d --name veeam-single-ui --replace -p 8080:3000 ... veeam-single-ui:latest
 ```
 Then access at http://localhost:8080
 
@@ -214,22 +214,22 @@ Then access at http://localhost:8080
 4. For VRO, ensure domain prefix is correct (e.g., `DOMAIN\username`)
 
 ### Build failures
-1. Ensure you're in the `vbr-connect-mvp` directory
+1. Ensure you're in the `veeam-single-ui` directory
 2. Check Docker/Podman daemon is running
 3. Verify internet connectivity for npm package downloads
 4. Clear build cache:
    ```bash
-   podman build --no-cache -t vbr-connect-mvp:latest .
+   podman build --no-cache -t veeam-single-ui:latest .
    ```
 
 ### Performance issues
 1. Check container resource limits:
    ```bash
-   podman stats vbr-connect
+   podman stats veeam-single-ui
    ```
 2. Allocate more resources if needed:
    ```bash
-   podman run -d --name vbr-connect --memory=2g --cpus=2 ...
+   podman run -d --name veeam-single-ui --memory=2g --cpus=2 ...
    ```
 3. Monitor Veeam API response times
 4. Consider adjusting auto-refresh intervals in the application

README.md

@@ -2,7 +2,7 @@
 
 A Next.js 15 application providing a unified monitoring dashboard for Veeam Data Protection products through an intuitive web interface.
 
-![VBR Connect Walkthrough](https://jorgedelacruz.uk/wp-content/uploads/2025/12/ezgif-656c493097a494bd.gif)
+![Veeam Single-UI Walkthrough](https://jorgedelacruz.uk/wp-content/uploads/2026/01/ezgif-668cdc4ebc95a18c.gif)
 
 ## Features
 
@@ -13,8 +13,10 @@ A Next.js 15 application providing a unified monitoring dashboard for Veeam Data
 - **Transferred Data Widget**: Visual representation of data transfer rates over time
 - **Real-time Statistics**: Active jobs, success rate, storage usage, protected VMs, and data processed
 - **Malware Detection**: Recent malware scan events and alerts
-- **Recent Sessions**: Overview of the latest backup sessions with status and details, defaulting to "BackupJob" type for clarity
-- **Time Range Selection**: 7-day and 30-day views for historical analysis
+- **Recent Sessions**: Overview of the latest backup sessions with status and details
+  - **Time Range Dropdown**: Quick selection for 7-day, 14-day, and 30-day views
+  - **Export Capability**: Export filtered session data to CSV or JSON format
+  - **Type Filtering**: Auto-filters to "BackupJob" type for clarity
 
 #### Jobs Management
 - **Comprehensive Jobs Table**: All backup jobs with status, type, and schedule information
@@ -51,8 +53,12 @@ A Next.js 15 application providing a unified monitoring dashboard for Veeam Data
   - **Rich Metadata**: Access detailed info including vCenter, Datacenter, Cluster, Guest OS, and DNS names
   - **Advanced Filtering**: Faceted filtering by protection status, platform, and state
 - **Protected Data**: 
-  - **Rich Grid View**: Detailed list of all protected workloads
-  - **Calendar View**: Toggleable monthly calendar view for restore points visualization, highlighting available recovery points by date
+  - **Rich Grid View**: Detailed list of all protected workloads with sortable columns
+  - **HexGrid Visualization**: Toggleable hexagonal protection map with RPO-based coloring
+    - Green (Protected within RPO), Orange (Unprotected/Outside RPO)
+    - Hover effects and click-to-detail dialog
+    - Filters by type and status with search capability
+  - **Calendar View**: Toggleable monthly calendar view for restore points visualization
   - **Restore Points**: Deep dive into restore points with derived type (Full/Incremental) and size data
 - **Physical & Cloud Infrastructure**:
   - **Protection Groups**: Monitor physical agent deployment and status
@@ -76,18 +82,29 @@ A Next.js 15 application providing a unified monitoring dashboard for Veeam Data
 - **Job Type Support**: Multiple M365 job types and configurations
 - **Calendar View**: Interactive calendar for visualizing restore points availability
 - **Organizations**: Track multiple M365 organizations and their storage usage
+- **Backup Infrastructure**:
+  - **Backup Proxies**: Status, CPU/Memory usage, version, roles, and actions (rescan, maintenance mode)
+  - **Backup Repositories**: Capacity visualization, retention settings, immutability, encryption status
 
 ### Administration & Branding
 - **Licensing**: 
-  - Detailed VBR license report generation
-  - Instance and capacity usage breakdown
-  - PDF/HTML report download capabilities
+  - **Tabbed Interface**: Toggle between VBR and VB365 license views
+  - **VBR License**: Detailed license report generation with PDF/HTML download
+  - **VB365 License**: Licensed users table with revoke capability
+  - **Instance and Capacity Usage**: Breakdown by workload type
+  - **PDF Report Generation**: Download license overview reports
 - **Theme Customizer**:
   - **Color Presets**: Blue, Green, Orange, Red, Violet, Yellow, and Default
   - **Radius Control**: Adjust UI corner roundness (0 to 1.0rem)
   - **Scaling**: Adjust font and element scaling (90% to 110%)
   - **Mode**: Seamless Dark/Light mode switching
   - **Cookie Persistence**: Theme settings persist across sessions via server-side cookies
+- **Identity Management**:
+  - **User Directory**: View and filter users with metadata
+- **Security Settings**:
+  - **MFA Enforcement**: Toggle with real-time API sync
+  - **Service Accounts**: Per-user management with role assignment
+  - **RBAC Roles**: View and manage role-based permissions
 
 ### Kasten K10
 - **Coming Soon**: Kubernetes backup platform monitoring
@@ -99,7 +116,10 @@ A Next.js 15 application providing a unified monitoring dashboard for Veeam Data
 - **Secure API Proxy**: Server-side API calls protect credentials from client exposure
 - **Interactive Visualizations**: Charts and graphs using Recharts library
 - **Data Tables**: Sortable, filterable tables with TanStack Table
+  - **Standardized Headers**: Consistent column toggle and search across all tables
+  - **Column Visibility**: Hide/show columns via dropdown menu
 - **Toast Notifications**: User-friendly error and success messages
+- **Environment-Based Visibility**: VBM, VRO sections auto-hide when not configured
 
 ## Getting Started
 
@@ -191,6 +211,10 @@ See [CONTAINER.md](./CONTAINER.md) for detailed instructions on building and run
   - `/api/v1/license/capacity` - License capacity details
   - `/api/v1/malware-detection` - Malware events
   - `/api/v1/security/best-practices` - Security best practices
+  - `/api/v1/security/settings` - MFA and security settings
+  - `/api/v1/accounts/users` - User accounts management
+  - `/api/v1/roles` - RBAC role definitions
+  - `/api/v1/roles/{id}/permissions` - Role permissions
   - `/api/v1/backupObjects` - Backup objects lookup
   - `/api/v1/backups/{id}` - Backup details
   - `/api/v1/backups/{id}/backupFiles` - Backup files (sizes)
@@ -218,7 +242,11 @@ See [CONTAINER.md](./CONTAINER.md) for detailed instructions on building and run
   - `/v8/ProtectedSites` - Protected Sites inventory
   - `/v8/ProtectedTeams` - Protected Teams inventory
   - `/v8/RestorePoints` - Global restore point search
-  - `/v8/License` - License status
+  - `/v8/License` - License status and info
+  - `/v8/LicensedUsers` - Licensed user management (GET/DELETE)
+  - `/v8/Proxies` - Backup proxy servers
+  - `/v8/BackupRepositories` - Backup repository management
+  - `/v8/Reports/GenerateLicenseOverview` - PDF report generation
   - `/v8/Health` - API service health
 
 ## Project Structure
@@ -240,6 +268,10 @@ See [CONTAINER.md](./CONTAINER.md) for detailed instructions on building and run
 │   │   │   └── security/             # Security best practices
 │   │   ├── vro/                      # VRO API routes
 │   │   └── vbm/                      # VBM API routes
+│   │       ├── LicensedUsers/        # Licensed user management
+│   │       ├── Proxies/              # Proxy servers
+│   │       ├── Reports/              # PDF report generation
+│   │       └── ...                   # Other VBM endpoints
 │   ├── vbr/                          # VBR monitoring pages
 │   │   ├── dashboard/                # VBR dashboard with stats
 │   │   ├── jobs/                     # Jobs list and details
@@ -248,7 +280,14 @@ See [CONTAINER.md](./CONTAINER.md) for detailed instructions on building and run
 │   │   ├── protected-data/           # Restore points & calendar view
 │   │   └── page.tsx                  # Redirects to dashboard
 │   ├── vro/                          # VRO monitoring page
-│   ├── vbm/                          # VBM monitoring page
+│   ├── vbm/                          # VBM monitoring pages
+│   │   ├── dashboard/                # VBM dashboard with stats
+│   │   ├── jobs/                     # M365 backup jobs list
+│   │   ├── protected-items/          # Protected objects view
+│   │   ├── organizations/            # M365 organizations
+│   │   └── infrastructure/           # Backup infrastructure
+│   │       ├── proxies/              # Backup proxies page
+│   │       └── repositories/         # Backup repositories page
 │   ├── k10/                          # K10 placeholder page
 │   ├── layout.tsx                    # Root layout with sidebar & theme provider
 │   └── page.tsx                      # Home (redirects to /vbr/dashboard)
@@ -269,6 +308,7 @@ See [CONTAINER.md](./CONTAINER.md) for detailed instructions on building and run
 │   ├── job-details-header.tsx        # Job details header component
 │   ├── vbr-restore-points-calendar.tsx # VBR Calendar View
 │   ├── vbm-restore-points-calendar.tsx # VBM Calendar View
+│   ├── hexgrid-protection-view.tsx   # HexGrid protection visualization
 │   └── ...                           # Various data tables
 ├── lib/
 │   ├── api/

app/actions/identity-actions.ts

@@ -0,0 +1,52 @@
+"use server"
+
+import { revalidatePath } from "next/cache"
+import { veeamApi } from "@/lib/api/veeam-client"
+
+export async function deleteUserAction(id: string) {
+    try {
+        await veeamApi.deleteUser(id)
+        revalidatePath("/administration/identity")
+        revalidatePath("/administration/identity/users")
+        return { success: true }
+    } catch (error) {
+        const message = error instanceof Error ? error.message : "Failed to delete user"
+        console.warn("Delete user:", message)
+        return { success: false, error: message }
+    }
+}
+
+export async function resetMFAAction(id: string) {
+    try {
+        await veeamApi.resetMFA(id)
+        return { success: true }
+    } catch (error) {
+        const message = error instanceof Error ? error.message : "Failed to reset MFA"
+        console.warn("Reset MFA:", message)
+        return { success: false, error: message }
+    }
+}
+
+export async function toggleServiceAccountAction(id: string, isServiceAccount: boolean) {
+    try {
+        await veeamApi.changeServiceAccountMode(id, isServiceAccount)
+        revalidatePath("/administration/identity/users")
+        return { success: true }
+    } catch (error) {
+        const message = error instanceof Error ? error.message : "Failed to update service account status"
+        console.warn("Toggle service account:", message)
+        return { success: false, error: message }
+    }
+}
+
+export async function updateMFAAction(enabled: boolean) {
+    try {
+        await veeamApi.updateSecuritySettings({ mfaEnabled: enabled })
+        revalidatePath("/administration/identity/users")
+        return { success: true }
+    } catch (error) {
+        const message = error instanceof Error ? error.message : "Failed to update MFA settings"
+        console.warn("Update MFA settings:", message)
+        return { success: false, error: message }
+    }
+}