Merge branch 'main' into main

.gitattributes

@@ -1,3 +1,10 @@
 # Auto detect text files and perform LF normalization
 * text=auto
-Moonlight/wwwroot/* linguist-vendored
+Moonlight/wwwroot/** linguist-vendored
+Moonlight/wwwroot/assets/js/scripts.bundle.js linguist-vendored
+Moonlight/wwwroot/assets/js/widgets.bundle.js linguist-vendored
+Moonlight/wwwroot/assets/js/theme.js linguist-vendored
+Moonlight/wwwroot/assets/css/boxicons.min.css linguist-vendored
+Moonlight/wwwroot/assets/css/style.bundle.css linguist-vendored
+Moonlight/wwwroot/assets/plugins/** linguist-vendored
+Moonlight/wwwroot/assets/fonts/** linguist-vendored

.idea/.idea.Moonlight/.idea/.name

@@ -0,0 +1 @@
+Moonlight

Moonlight/App/Configuration/ConfigV1.cs

@@ -17,6 +17,15 @@ public class ConfigV1
         [Description("The url moonlight is accesible with from the internet")]
         public string AppUrl { get; set; } = "http://your-moonlight-url-without-slash";
 
+        [JsonProperty("EnableLatencyCheck")]
+        [Description(
+            "This will enable a latency check for connections to moonlight. Users with an too high latency will be warned that moonlight might be buggy for them")]
+        public bool EnableLatencyCheck { get; set; } = true;
+
+        [JsonProperty("LatencyCheckThreshold")]
+        [Description("Specify the latency threshold which has to be reached in order to trigger the warning message")]
+        public int LatencyCheckThreshold { get; set; } = 500;
+
         [JsonProperty("Auth")] public AuthData Auth { get; set; } = new();
 
         [JsonProperty("Database")] public DatabaseData Database { get; set; } = new();
@@ -38,9 +47,7 @@ public class ConfigV1
         [JsonProperty("Mail")] public MailData Mail { get; set; } = new();
 
         [JsonProperty("Cleanup")] public CleanupData Cleanup { get; set; } = new();
-
-        [JsonProperty("Subscriptions")] public SubscriptionsData Subscriptions { get; set; } = new();
-
+        
         [JsonProperty("DiscordNotifications")] public DiscordNotificationsData DiscordNotifications { get; set; } = new();
 
         [JsonProperty("Statistics")] public StatisticsData Statistics { get; set; } = new();
@@ -50,6 +57,24 @@ public class ConfigV1
         [JsonProperty("SmartDeploy")] public SmartDeployData SmartDeploy { get; set; } = new();
 
         [JsonProperty("Sentry")] public SentryData Sentry { get; set; } = new();
+
+        [JsonProperty("Stripe")] public StripeData Stripe { get; set; } = new();
+
+        [JsonProperty("Tickets")] public TicketsData Tickets { get; set; } = new();
+    }
+    
+    public class TicketsData
+    {
+        [JsonProperty("WelcomeMessage")]
+        [Description("The message that will be sent when a user created a ticket")]
+        public string WelcomeMessage { get; set; } = "Welcome to the support";
+    }
+    
+    public class StripeData
+    {
+        [JsonProperty("ApiKey")]
+        [Description("Put here your stripe api key if you add subscriptions. Currently the only billing option is stripe which is enabled by default and cannot be turned off. This feature is still experimental")]
+        public string ApiKey { get; set; } = "";
     }
     
     public class AuthData
@@ -269,6 +294,10 @@ public class ConfigV1
         [Blur]
         public string Token { get; set; } = Guid.NewGuid().ToString();
 
+        [JsonProperty("BlockIpDuration")]
+        [Description("The duration in minutes a ip will be blocked by the anti ddos system")]
+        public int BlockIpDuration { get; set; } = 15;
+
         [JsonProperty("ReCaptcha")] public ReCaptchaData ReCaptcha { get; set; } = new();
     }
 
@@ -318,11 +347,6 @@ public class ConfigV1
         [JsonProperty("Wait")] public long Wait { get; set; } = 15;
     }
 
-    public class SubscriptionsData
-    {
-        [JsonProperty("SellPass")] public SellPassData SellPass { get; set; } = new();
-    }
-
     public class SellPassData
     {
         [JsonProperty("Enable")] public bool Enable { get; set; } = false;

Moonlight/App/Database/DataContext.cs

@@ -1,9 +1,7 @@
 using Microsoft.EntityFrameworkCore;
 using Moonlight.App.Database.Entities;
-using Moonlight.App.Database.Entities.LogsEntries;
 using Moonlight.App.Database.Entities.Notification;
 using Moonlight.App.Database.Interceptors;
-using Moonlight.App.Models.Misc;
 using Moonlight.App.Services;
 
 namespace Moonlight.App.Database;
@@ -27,10 +25,6 @@ public class DataContext : DbContext
     public DbSet<ServerVariable> ServerVariables { get; set; }
     public DbSet<User> Users { get; set; }
     public DbSet<LoadingMessage> LoadingMessages { get; set; }
-    public DbSet<AuditLogEntry> AuditLog { get; set; }
-    public DbSet<ErrorLogEntry> ErrorLog { get; set; }
-    public DbSet<SecurityLogEntry> SecurityLog { get; set; }
-
     public DbSet<SharedDomain> SharedDomains { get; set; }
     public DbSet<Domain> Domains { get; set; }
     public DbSet<Revoke> Revokes { get; set; }
@@ -46,6 +40,13 @@ public class DataContext : DbContext
     public DbSet<WebSpace> WebSpaces { get; set; }
     public DbSet<SupportChatMessage> SupportChatMessages { get; set; }
     public DbSet<IpBan> IpBans { get; set; }
+    public DbSet<PermissionGroup> PermissionGroups { get; set; }
+    public DbSet<SecurityLog> SecurityLogs { get; set; }
+    public DbSet<BlocklistIp> BlocklistIps { get; set; }
+    public DbSet<WhitelistIp> WhitelistIps { get; set; }
+    
+    public DbSet<Ticket> Tickets { get; set; }
+    public DbSet<TicketMessage> TicketMessages { get; set; }
 
     protected override void OnConfiguring(DbContextOptionsBuilder optionsBuilder)
     {

Moonlight/App/Database/Entities/BlocklistIp.cs

@@ -0,0 +1,10 @@
+namespace Moonlight.App.Database.Entities;
+
+public class BlocklistIp
+{
+    public int Id { get; set; }
+    public string Ip { get; set; } = "";
+    public DateTime ExpiresAt { get; set; }
+    public long Packets { get; set; }
+    public DateTime CreatedAt { get; set; }
+}

Moonlight/App/Database/Entities/LogsEntries/AuditLogEntry.cs

@@ -1,13 +0,0 @@
-using Moonlight.App.Models.Misc;
-
-namespace Moonlight.App.Database.Entities.LogsEntries;
-
-public class AuditLogEntry
-{
-    public int Id { get; set; }
-    public AuditLogType Type { get; set; }
-    public string JsonData { get; set; } = "";
-    public bool System { get; set; }
-    public string Ip { get; set; } = "";
-    public DateTime CreatedAt { get; set; } = DateTime.UtcNow;
-}

Moonlight/App/Database/Entities/LogsEntries/ErrorLogEntry.cs

@@ -1,12 +0,0 @@
-namespace Moonlight.App.Database.Entities.LogsEntries;
-
-public class ErrorLogEntry
-{
-    public int Id { get; set; }
-    public string Stacktrace { get; set; } = "";
-    public bool System { get; set; }
-    public string JsonData { get; set; } = "";
-    public string Ip { get; set; } = "";
-    public string Class { get; set; } = "";
-    public DateTime CreatedAt { get; set; } = DateTime.UtcNow;
-}

Moonlight/App/Database/Entities/LogsEntries/SecurityLogEntry.cs

@@ -1,13 +0,0 @@
-using Moonlight.App.Models.Misc;
-
-namespace Moonlight.App.Database.Entities.LogsEntries;
-
-public class SecurityLogEntry
-{
-    public int Id { get; set; }
-    public bool System { get; set; }
-    public string Ip { get; set; } = "";
-    public SecurityLogType Type { get; set; }
-    public string JsonData { get; set; } = "";
-    public DateTime CreatedAt { get; set; } = DateTime.UtcNow;
-}

Moonlight/App/Database/Entities/PermissionGroup.cs

@@ -0,0 +1,8 @@
+namespace Moonlight.App.Database.Entities;
+
+public class PermissionGroup
+{
+    public int Id { get; set; }
+    public string Name { get; set; } = "";
+    public byte[] Permissions { get; set; } = Array.Empty<byte>();
+}

Moonlight/App/Database/Entities/SecurityLog.cs

@@ -0,0 +1,8 @@
+namespace Moonlight.App.Database.Entities;
+
+public class SecurityLog
+{
+    public int Id { get; set; }
+    public string Text { get; set; } = "";
+    public DateTime CreatedAt { get; set; } = DateTime.UtcNow;
+}

Moonlight/App/Database/Entities/Subscription.cs

@@ -1,9 +1,16 @@
-namespace Moonlight.App.Database.Entities;
+using Moonlight.App.Models.Misc;
+
+namespace Moonlight.App.Database.Entities;
 
 public class Subscription
 {
     public int Id { get; set; }
     public string Name { get; set; } = "";
     public string Description { get; set; } = "";
+    public Currency Currency { get; set; } = Currency.USD;
+    public double Price { get; set; }
+    public string StripeProductId { get; set; } = "";
+    public string StripePriceId { get; set; } = "";
     public string LimitsJson { get; set; } = "";
+    public int Duration { get; set; } = 30;
 }

Moonlight/App/Database/Entities/Ticket.cs

@@ -0,0 +1,19 @@
+using Moonlight.App.Models.Misc;
+
+namespace Moonlight.App.Database.Entities;
+
+public class Ticket
+{
+    public int Id { get; set; }
+    public string IssueTopic { get; set; } = "";
+    public string IssueDescription { get; set; } = "";
+    public string IssueTries { get; set; } = "";
+    public User CreatedBy { get; set; }
+    public User? AssignedTo { get; set; }
+    public TicketPriority Priority { get; set; }
+    public TicketStatus Status { get; set; }
+    public TicketSubject Subject { get; set; }
+    public int SubjectId { get; set; }
+    public List<TicketMessage> Messages { get; set; } = new();
+    public DateTime CreatedAt { get; set; } = DateTime.UtcNow;
+}

Moonlight/App/Database/Entities/TicketMessage.cs

@@ -0,0 +1,14 @@
+namespace Moonlight.App.Database.Entities;
+
+public class TicketMessage
+{
+    public int Id { get; set; }
+    public string Content { get; set; } = "";
+    public string? AttachmentUrl { get; set; }
+    public User? Sender { get; set; }
+    public bool IsSystemMessage { get; set; }
+    public bool IsEdited { get; set; }
+    public bool IsSupportMessage { get; set; }
+    public DateTime CreatedAt { get; set; } = DateTime.UtcNow;
+    public DateTime UpdatedAt { get; set; } = DateTime.UtcNow;
+}

Moonlight/App/Database/Entities/User.cs

@@ -1,4 +1,5 @@
-using Moonlight.App.Models.Misc;
+using System.ComponentModel.DataAnnotations;
+using Moonlight.App.Models.Misc;
 
 namespace Moonlight.App.Database.Entities;
 
@@ -39,6 +40,8 @@ public class User
     public bool TotpEnabled { get; set; } = false;
     public string TotpSecret { get; set; } = "";
     public DateTime TokenValidTime { get; set; } = DateTime.UtcNow;
+    public byte[] Permissions { get; set; } = Array.Empty<byte>();
+    public PermissionGroup? PermissionGroup { get; set; }
     
     // Discord
     public ulong DiscordId { get; set; }
@@ -51,8 +54,8 @@ public class User
     // Subscriptions
 
     public Subscription? CurrentSubscription { get; set; } = null;
-    public DateTime SubscriptionSince { get; set; } = DateTime.Now;
-    public int SubscriptionDuration { get; set; }
+    public DateTime SubscriptionSince { get; set; } = DateTime.UtcNow;
+    public DateTime SubscriptionExpires { get; set; } = DateTime.UtcNow;
     
     // Ip logs
     public string RegisterIp { get; set; } = "";

Moonlight/App/Database/Entities/WhitelistIp.cs

@@ -0,0 +1,7 @@
+namespace Moonlight.App.Database.Entities;
+
+public class WhitelistIp
+{
+    public int Id { get; set; }
+    public string Ip { get; set; } = "";
+}

Moonlight/App/Database/Migrations/20230705171914_AddedStripeIntegration.cs

@@ -0,0 +1,96 @@
+using System;
+using Microsoft.EntityFrameworkCore.Migrations;
+
+#nullable disable
+
+namespace Moonlight.App.Database.Migrations
+{
+    /// <inheritdoc />
+    public partial class AddedStripeIntegration : Migration
+    {
+        /// <inheritdoc />
+        protected override void Up(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.DropColumn(
+                name: "SubscriptionDuration",
+                table: "Users");
+
+            migrationBuilder.AddColumn<DateTime>(
+                name: "SubscriptionExpires",
+                table: "Users",
+                type: "datetime(6)",
+                nullable: false,
+                defaultValue: new DateTime(1, 1, 1, 0, 0, 0, 0, DateTimeKind.Unspecified));
+
+            migrationBuilder.AddColumn<int>(
+                name: "Currency",
+                table: "Subscriptions",
+                type: "int",
+                nullable: false,
+                defaultValue: 0);
+
+            migrationBuilder.AddColumn<int>(
+                name: "Duration",
+                table: "Subscriptions",
+                type: "int",
+                nullable: false,
+                defaultValue: 0);
+
+            migrationBuilder.AddColumn<double>(
+                name: "Price",
+                table: "Subscriptions",
+                type: "double",
+                nullable: false,
+                defaultValue: 0.0);
+
+            migrationBuilder.AddColumn<string>(
+                name: "StripePriceId",
+                table: "Subscriptions",
+                type: "longtext",
+                nullable: false)
+                .Annotation("MySql:CharSet", "utf8mb4");
+
+            migrationBuilder.AddColumn<string>(
+                name: "StripeProductId",
+                table: "Subscriptions",
+                type: "longtext",
+                nullable: false)
+                .Annotation("MySql:CharSet", "utf8mb4");
+        }
+
+        /// <inheritdoc />
+        protected override void Down(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.DropColumn(
+                name: "SubscriptionExpires",
+                table: "Users");
+
+            migrationBuilder.DropColumn(
+                name: "Currency",
+                table: "Subscriptions");
+
+            migrationBuilder.DropColumn(
+                name: "Duration",
+                table: "Subscriptions");
+
+            migrationBuilder.DropColumn(
+                name: "Price",
+                table: "Subscriptions");
+
+            migrationBuilder.DropColumn(
+                name: "StripePriceId",
+                table: "Subscriptions");
+
+            migrationBuilder.DropColumn(
+                name: "StripeProductId",
+                table: "Subscriptions");
+
+            migrationBuilder.AddColumn<int>(
+                name: "SubscriptionDuration",
+                table: "Users",
+                type: "int",
+                nullable: false,
+                defaultValue: 0);
+        }
+    }
+}

Moonlight/App/Database/Migrations/20230715095531_AddPermissions.cs

@@ -0,0 +1,28 @@
+using Microsoft.EntityFrameworkCore.Migrations;
+
+#nullable disable
+
+namespace Moonlight.App.Database.Migrations
+{
+    /// <inheritdoc />
+    public partial class AddPermissions : Migration
+    {
+        /// <inheritdoc />
+        protected override void Up(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.AddColumn<byte[]>(
+                name: "Permissions",
+                table: "Users",
+                type: "longblob",
+                nullable: false);
+        }
+
+        /// <inheritdoc />
+        protected override void Down(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.DropColumn(
+                name: "Permissions",
+                table: "Users");
+        }
+    }
+}

Moonlight/App/Database/Migrations/20230715214550_AddPermissionGroup.cs

@@ -0,0 +1,68 @@
+using Microsoft.EntityFrameworkCore.Metadata;
+using Microsoft.EntityFrameworkCore.Migrations;
+
+#nullable disable
+
+namespace Moonlight.App.Database.Migrations
+{
+    /// <inheritdoc />
+    public partial class AddPermissionGroup : Migration
+    {
+        /// <inheritdoc />
+        protected override void Up(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.AddColumn<int>(
+                name: "PermissionGroupId",
+                table: "Users",
+                type: "int",
+                nullable: true);
+
+            migrationBuilder.CreateTable(
+                name: "PermissionGroups",
+                columns: table => new
+                {
+                    Id = table.Column<int>(type: "int", nullable: false)
+                        .Annotation("MySql:ValueGenerationStrategy", MySqlValueGenerationStrategy.IdentityColumn),
+                    Name = table.Column<string>(type: "longtext", nullable: false)
+                        .Annotation("MySql:CharSet", "utf8mb4"),
+                    Permissions = table.Column<byte[]>(type: "longblob", nullable: false)
+                },
+                constraints: table =>
+                {
+                    table.PrimaryKey("PK_PermissionGroups", x => x.Id);
+                })
+                .Annotation("MySql:CharSet", "utf8mb4");
+
+            migrationBuilder.CreateIndex(
+                name: "IX_Users_PermissionGroupId",
+                table: "Users",
+                column: "PermissionGroupId");
+
+            migrationBuilder.AddForeignKey(
+                name: "FK_Users_PermissionGroups_PermissionGroupId",
+                table: "Users",
+                column: "PermissionGroupId",
+                principalTable: "PermissionGroups",
+                principalColumn: "Id");
+        }
+
+        /// <inheritdoc />
+        protected override void Down(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.DropForeignKey(
+                name: "FK_Users_PermissionGroups_PermissionGroupId",
+                table: "Users");
+
+            migrationBuilder.DropTable(
+                name: "PermissionGroups");
+
+            migrationBuilder.DropIndex(
+                name: "IX_Users_PermissionGroupId",
+                table: "Users");
+
+            migrationBuilder.DropColumn(
+                name: "PermissionGroupId",
+                table: "Users");
+        }
+    }
+}

Moonlight/App/Database/Migrations/20230718123232_RemovedOldLogsAndAddedErrorLog.cs

@@ -0,0 +1,111 @@
+using System;
+using Microsoft.EntityFrameworkCore.Metadata;
+using Microsoft.EntityFrameworkCore.Migrations;
+
+#nullable disable
+
+namespace Moonlight.App.Database.Migrations
+{
+    /// <inheritdoc />
+    public partial class RemovedOldLogsAndAddedErrorLog : Migration
+    {
+        /// <inheritdoc />
+        protected override void Up(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.DropTable(
+                name: "AuditLog");
+
+            migrationBuilder.DropTable(
+                name: "ErrorLog");
+
+            migrationBuilder.DropTable(
+                name: "SecurityLog");
+
+            migrationBuilder.CreateTable(
+                name: "SecurityLogs",
+                columns: table => new
+                {
+                    Id = table.Column<int>(type: "int", nullable: false)
+                        .Annotation("MySql:ValueGenerationStrategy", MySqlValueGenerationStrategy.IdentityColumn),
+                    Text = table.Column<string>(type: "longtext", nullable: false)
+                        .Annotation("MySql:CharSet", "utf8mb4"),
+                    CreatedAt = table.Column<DateTime>(type: "datetime(6)", nullable: false)
+                },
+                constraints: table =>
+                {
+                    table.PrimaryKey("PK_SecurityLogs", x => x.Id);
+                })
+                .Annotation("MySql:CharSet", "utf8mb4");
+        }
+
+        /// <inheritdoc />
+        protected override void Down(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.DropTable(
+                name: "SecurityLogs");
+
+            migrationBuilder.CreateTable(
+                name: "AuditLog",
+                columns: table => new
+                {
+                    Id = table.Column<int>(type: "int", nullable: false)
+                        .Annotation("MySql:ValueGenerationStrategy", MySqlValueGenerationStrategy.IdentityColumn),
+                    CreatedAt = table.Column<DateTime>(type: "datetime(6)", nullable: false),
+                    Ip = table.Column<string>(type: "longtext", nullable: false)
+                        .Annotation("MySql:CharSet", "utf8mb4"),
+                    JsonData = table.Column<string>(type: "longtext", nullable: false)
+                        .Annotation("MySql:CharSet", "utf8mb4"),
+                    System = table.Column<bool>(type: "tinyint(1)", nullable: false),
+                    Type = table.Column<int>(type: "int", nullable: false)
+                },
+                constraints: table =>
+                {
+                    table.PrimaryKey("PK_AuditLog", x => x.Id);
+                })
+                .Annotation("MySql:CharSet", "utf8mb4");
+
+            migrationBuilder.CreateTable(
+                name: "ErrorLog",
+                columns: table => new
+                {
+                    Id = table.Column<int>(type: "int", nullable: false)
+                        .Annotation("MySql:ValueGenerationStrategy", MySqlValueGenerationStrategy.IdentityColumn),
+                    Class = table.Column<string>(type: "longtext", nullable: false)
+                        .Annotation("MySql:CharSet", "utf8mb4"),
+                    CreatedAt = table.Column<DateTime>(type: "datetime(6)", nullable: false),
+                    Ip = table.Column<string>(type: "longtext", nullable: false)
+                        .Annotation("MySql:CharSet", "utf8mb4"),
+                    JsonData = table.Column<string>(type: "longtext", nullable: false)
+                        .Annotation("MySql:CharSet", "utf8mb4"),
+                    Stacktrace = table.Column<string>(type: "longtext", nullable: false)
+                        .Annotation("MySql:CharSet", "utf8mb4"),
+                    System = table.Column<bool>(type: "tinyint(1)", nullable: false)
+                },
+                constraints: table =>
+                {
+                    table.PrimaryKey("PK_ErrorLog", x => x.Id);
+                })
+                .Annotation("MySql:CharSet", "utf8mb4");
+
+            migrationBuilder.CreateTable(
+                name: "SecurityLog",
+                columns: table => new
+                {
+                    Id = table.Column<int>(type: "int", nullable: false)
+                        .Annotation("MySql:ValueGenerationStrategy", MySqlValueGenerationStrategy.IdentityColumn),
+                    CreatedAt = table.Column<DateTime>(type: "datetime(6)", nullable: false),
+                    Ip = table.Column<string>(type: "longtext", nullable: false)
+                        .Annotation("MySql:CharSet", "utf8mb4"),
+                    JsonData = table.Column<string>(type: "longtext", nullable: false)
+                        .Annotation("MySql:CharSet", "utf8mb4"),
+                    System = table.Column<bool>(type: "tinyint(1)", nullable: false),
+                    Type = table.Column<int>(type: "int", nullable: false)
+                },
+                constraints: table =>
+                {
+                    table.PrimaryKey("PK_SecurityLog", x => x.Id);
+                })
+                .Annotation("MySql:CharSet", "utf8mb4");
+        }
+    }
+}

Moonlight/App/Database/Migrations/20230721201950_AddIpRules.cs

@@ -0,0 +1,59 @@
+using System;
+using Microsoft.EntityFrameworkCore.Metadata;
+using Microsoft.EntityFrameworkCore.Migrations;
+
+#nullable disable
+
+namespace Moonlight.App.Database.Migrations
+{
+    /// <inheritdoc />
+    public partial class AddIpRules : Migration
+    {
+        /// <inheritdoc />
+        protected override void Up(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.CreateTable(
+                name: "BlocklistIps",
+                columns: table => new
+                {
+                    Id = table.Column<int>(type: "int", nullable: false)
+                        .Annotation("MySql:ValueGenerationStrategy", MySqlValueGenerationStrategy.IdentityColumn),
+                    Ip = table.Column<string>(type: "longtext", nullable: false)
+                        .Annotation("MySql:CharSet", "utf8mb4"),
+                    ExpiresAt = table.Column<DateTime>(type: "datetime(6)", nullable: false),
+                    Packets = table.Column<long>(type: "bigint", nullable: false),
+                    CreatedAt = table.Column<DateTime>(type: "datetime(6)", nullable: false)
+                },
+                constraints: table =>
+                {
+                    table.PrimaryKey("PK_BlocklistIps", x => x.Id);
+                })
+                .Annotation("MySql:CharSet", "utf8mb4");
+
+            migrationBuilder.CreateTable(
+                name: "WhitelistIps",
+                columns: table => new
+                {
+                    Id = table.Column<int>(type: "int", nullable: false)
+                        .Annotation("MySql:ValueGenerationStrategy", MySqlValueGenerationStrategy.IdentityColumn),
+                    Ip = table.Column<string>(type: "longtext", nullable: false)
+                        .Annotation("MySql:CharSet", "utf8mb4")
+                },
+                constraints: table =>
+                {
+                    table.PrimaryKey("PK_WhitelistIps", x => x.Id);
+                })
+                .Annotation("MySql:CharSet", "utf8mb4");
+        }
+
+        /// <inheritdoc />
+        protected override void Down(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.DropTable(
+                name: "BlocklistIps");
+
+            migrationBuilder.DropTable(
+                name: "WhitelistIps");
+        }
+    }
+}

Moonlight/App/Database/Migrations/20230803012947_AddNewTicketModels.cs

@@ -0,0 +1,117 @@
+using System;
+using Microsoft.EntityFrameworkCore.Metadata;
+using Microsoft.EntityFrameworkCore.Migrations;
+
+#nullable disable
+
+namespace Moonlight.App.Database.Migrations
+{
+    /// <inheritdoc />
+    public partial class AddNewTicketModels : Migration
+    {
+        /// <inheritdoc />
+        protected override void Up(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.CreateTable(
+                name: "Tickets",
+                columns: table => new
+                {
+                    Id = table.Column<int>(type: "int", nullable: false)
+                        .Annotation("MySql:ValueGenerationStrategy", MySqlValueGenerationStrategy.IdentityColumn),
+                    IssueTopic = table.Column<string>(type: "longtext", nullable: false)
+                        .Annotation("MySql:CharSet", "utf8mb4"),
+                    IssueDescription = table.Column<string>(type: "longtext", nullable: false)
+                        .Annotation("MySql:CharSet", "utf8mb4"),
+                    IssueTries = table.Column<string>(type: "longtext", nullable: false)
+                        .Annotation("MySql:CharSet", "utf8mb4"),
+                    CreatedById = table.Column<int>(type: "int", nullable: false),
+                    AssignedToId = table.Column<int>(type: "int", nullable: true),
+                    Priority = table.Column<int>(type: "int", nullable: false),
+                    Status = table.Column<int>(type: "int", nullable: false),
+                    Subject = table.Column<int>(type: "int", nullable: false),
+                    SubjectId = table.Column<int>(type: "int", nullable: false),
+                    CreatedAt = table.Column<DateTime>(type: "datetime(6)", nullable: false)
+                },
+                constraints: table =>
+                {
+                    table.PrimaryKey("PK_Tickets", x => x.Id);
+                    table.ForeignKey(
+                        name: "FK_Tickets_Users_AssignedToId",
+                        column: x => x.AssignedToId,
+                        principalTable: "Users",
+                        principalColumn: "Id");
+                    table.ForeignKey(
+                        name: "FK_Tickets_Users_CreatedById",
+                        column: x => x.CreatedById,
+                        principalTable: "Users",
+                        principalColumn: "Id",
+                        onDelete: ReferentialAction.Cascade);
+                })
+                .Annotation("MySql:CharSet", "utf8mb4");
+
+            migrationBuilder.CreateTable(
+                name: "TicketMessages",
+                columns: table => new
+                {
+                    Id = table.Column<int>(type: "int", nullable: false)
+                        .Annotation("MySql:ValueGenerationStrategy", MySqlValueGenerationStrategy.IdentityColumn),
+                    Content = table.Column<string>(type: "longtext", nullable: false)
+                        .Annotation("MySql:CharSet", "utf8mb4"),
+                    AttachmentUrl = table.Column<string>(type: "longtext", nullable: true)
+                        .Annotation("MySql:CharSet", "utf8mb4"),
+                    SenderId = table.Column<int>(type: "int", nullable: true),
+                    IsSystemMessage = table.Column<bool>(type: "tinyint(1)", nullable: false),
+                    IsEdited = table.Column<bool>(type: "tinyint(1)", nullable: false),
+                    IsSupportMessage = table.Column<bool>(type: "tinyint(1)", nullable: false),
+                    CreatedAt = table.Column<DateTime>(type: "datetime(6)", nullable: false),
+                    UpdatedAt = table.Column<DateTime>(type: "datetime(6)", nullable: false),
+                    TicketId = table.Column<int>(type: "int", nullable: true)
+                },
+                constraints: table =>
+                {
+                    table.PrimaryKey("PK_TicketMessages", x => x.Id);
+                    table.ForeignKey(
+                        name: "FK_TicketMessages_Tickets_TicketId",
+                        column: x => x.TicketId,
+                        principalTable: "Tickets",
+                        principalColumn: "Id");
+                    table.ForeignKey(
+                        name: "FK_TicketMessages_Users_SenderId",
+                        column: x => x.SenderId,
+                        principalTable: "Users",
+                        principalColumn: "Id");
+                })
+                .Annotation("MySql:CharSet", "utf8mb4");
+
+            migrationBuilder.CreateIndex(
+                name: "IX_TicketMessages_SenderId",
+                table: "TicketMessages",
+                column: "SenderId");
+
+            migrationBuilder.CreateIndex(
+                name: "IX_TicketMessages_TicketId",
+                table: "TicketMessages",
+                column: "TicketId");
+
+            migrationBuilder.CreateIndex(
+                name: "IX_Tickets_AssignedToId",
+                table: "Tickets",
+                column: "AssignedToId");
+
+            migrationBuilder.CreateIndex(
+                name: "IX_Tickets_CreatedById",
+                table: "Tickets",
+                column: "CreatedById");
+        }
+
+        /// <inheritdoc />
+        protected override void Down(MigrationBuilder migrationBuilder)
+        {
+            migrationBuilder.DropTable(
+                name: "TicketMessages");
+
+            migrationBuilder.DropTable(
+                name: "Tickets");
+        }
+    }
+}

Moonlight/App/Database/Migrations/DataContextModelSnapshot.cs

@@ -19,6 +19,30 @@ namespace Moonlight.App.Database.Migrations
                 .HasAnnotation("ProductVersion", "7.0.3")
                 .HasAnnotation("Relational:MaxIdentifierLength", 64);
 
+            modelBuilder.Entity("Moonlight.App.Database.Entities.BlocklistIp", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    b.Property<DateTime>("CreatedAt")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<DateTime>("ExpiresAt")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<string>("Ip")
+                        .IsRequired()
+                        .HasColumnType("longtext");
+
+                    b.Property<long>("Packets")
+                        .HasColumnType("bigint");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("BlocklistIps");
+                });
+
             modelBuilder.Entity("Moonlight.App.Database.Entities.CloudPanel", b =>
                 {
                     b.Property<int>("Id")
@@ -241,95 +265,6 @@ namespace Moonlight.App.Database.Migrations
                     b.ToTable("LoadingMessages");
                 });
 
-            modelBuilder.Entity("Moonlight.App.Database.Entities.LogsEntries.AuditLogEntry", b =>
-                {
-                    b.Property<int>("Id")
-                        .ValueGeneratedOnAdd()
-                        .HasColumnType("int");
-
-                    b.Property<DateTime>("CreatedAt")
-                        .HasColumnType("datetime(6)");
-
-                    b.Property<string>("Ip")
-                        .IsRequired()
-                        .HasColumnType("longtext");
-
-                    b.Property<string>("JsonData")
-                        .IsRequired()
-                        .HasColumnType("longtext");
-
-                    b.Property<bool>("System")
-                        .HasColumnType("tinyint(1)");
-
-                    b.Property<int>("Type")
-                        .HasColumnType("int");
-
-                    b.HasKey("Id");
-
-                    b.ToTable("AuditLog");
-                });
-
-            modelBuilder.Entity("Moonlight.App.Database.Entities.LogsEntries.ErrorLogEntry", b =>
-                {
-                    b.Property<int>("Id")
-                        .ValueGeneratedOnAdd()
-                        .HasColumnType("int");
-
-                    b.Property<string>("Class")
-                        .IsRequired()
-                        .HasColumnType("longtext");
-
-                    b.Property<DateTime>("CreatedAt")
-                        .HasColumnType("datetime(6)");
-
-                    b.Property<string>("Ip")
-                        .IsRequired()
-                        .HasColumnType("longtext");
-
-                    b.Property<string>("JsonData")
-                        .IsRequired()
-                        .HasColumnType("longtext");
-
-                    b.Property<string>("Stacktrace")
-                        .IsRequired()
-                        .HasColumnType("longtext");
-
-                    b.Property<bool>("System")
-                        .HasColumnType("tinyint(1)");
-
-                    b.HasKey("Id");
-
-                    b.ToTable("ErrorLog");
-                });
-
-            modelBuilder.Entity("Moonlight.App.Database.Entities.LogsEntries.SecurityLogEntry", b =>
-                {
-                    b.Property<int>("Id")
-                        .ValueGeneratedOnAdd()
-                        .HasColumnType("int");
-
-                    b.Property<DateTime>("CreatedAt")
-                        .HasColumnType("datetime(6)");
-
-                    b.Property<string>("Ip")
-                        .IsRequired()
-                        .HasColumnType("longtext");
-
-                    b.Property<string>("JsonData")
-                        .IsRequired()
-                        .HasColumnType("longtext");
-
-                    b.Property<bool>("System")
-                        .HasColumnType("tinyint(1)");
-
-                    b.Property<int>("Type")
-                        .HasColumnType("int");
-
-                    b.HasKey("Id");
-
-                    b.ToTable("SecurityLog");
-                });
-
             modelBuilder.Entity("Moonlight.App.Database.Entities.MySqlDatabase", b =>
                 {
                     b.Property<int>("Id")
@@ -475,6 +410,25 @@ namespace Moonlight.App.Database.Migrations
                     b.ToTable("NotificationClients");
                 });
 
+            modelBuilder.Entity("Moonlight.App.Database.Entities.PermissionGroup", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    b.Property<string>("Name")
+                        .IsRequired()
+                        .HasColumnType("longtext");
+
+                    b.Property<byte[]>("Permissions")
+                        .IsRequired()
+                        .HasColumnType("longblob");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("PermissionGroups");
+                });
+
             modelBuilder.Entity("Moonlight.App.Database.Entities.Revoke", b =>
                 {
                     b.Property<int>("Id")
@@ -490,6 +444,24 @@ namespace Moonlight.App.Database.Migrations
                     b.ToTable("Revokes");
                 });
 
+            modelBuilder.Entity("Moonlight.App.Database.Entities.SecurityLog", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    b.Property<DateTime>("CreatedAt")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<string>("Text")
+                        .IsRequired()
+                        .HasColumnType("longtext");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("SecurityLogs");
+                });
+
             modelBuilder.Entity("Moonlight.App.Database.Entities.Server", b =>
                 {
                     b.Property<int>("Id")
@@ -663,10 +635,16 @@ namespace Moonlight.App.Database.Migrations
                         .ValueGeneratedOnAdd()
                         .HasColumnType("int");
 
+                    b.Property<int>("Currency")
+                        .HasColumnType("int");
+
                     b.Property<string>("Description")
                         .IsRequired()
                         .HasColumnType("longtext");
 
+                    b.Property<int>("Duration")
+                        .HasColumnType("int");
+
                     b.Property<string>("LimitsJson")
                         .IsRequired()
                         .HasColumnType("longtext");
@@ -675,6 +653,17 @@ namespace Moonlight.App.Database.Migrations
                         .IsRequired()
                         .HasColumnType("longtext");
 
+                    b.Property<double>("Price")
+                        .HasColumnType("double");
+
+                    b.Property<string>("StripePriceId")
+                        .IsRequired()
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("StripeProductId")
+                        .IsRequired()
+                        .HasColumnType("longtext");
+
                     b.HasKey("Id");
 
                     b.ToTable("Subscriptions");
@@ -725,6 +714,97 @@ namespace Moonlight.App.Database.Migrations
                     b.ToTable("SupportChatMessages");
                 });
 
+            modelBuilder.Entity("Moonlight.App.Database.Entities.Ticket", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    b.Property<int?>("AssignedToId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime>("CreatedAt")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<int>("CreatedById")
+                        .HasColumnType("int");
+
+                    b.Property<string>("IssueDescription")
+                        .IsRequired()
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("IssueTopic")
+                        .IsRequired()
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("IssueTries")
+                        .IsRequired()
+                        .HasColumnType("longtext");
+
+                    b.Property<int>("Priority")
+                        .HasColumnType("int");
+
+                    b.Property<int>("Status")
+                        .HasColumnType("int");
+
+                    b.Property<int>("Subject")
+                        .HasColumnType("int");
+
+                    b.Property<int>("SubjectId")
+                        .HasColumnType("int");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("AssignedToId");
+
+                    b.HasIndex("CreatedById");
+
+                    b.ToTable("Tickets");
+                });
+
+            modelBuilder.Entity("Moonlight.App.Database.Entities.TicketMessage", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    b.Property<string>("AttachmentUrl")
+                        .HasColumnType("longtext");
+
+                    b.Property<string>("Content")
+                        .IsRequired()
+                        .HasColumnType("longtext");
+
+                    b.Property<DateTime>("CreatedAt")
+                        .HasColumnType("datetime(6)");
+
+                    b.Property<bool>("IsEdited")
+                        .HasColumnType("tinyint(1)");
+
+                    b.Property<bool>("IsSupportMessage")
+                        .HasColumnType("tinyint(1)");
+
+                    b.Property<bool>("IsSystemMessage")
+                        .HasColumnType("tinyint(1)");
+
+                    b.Property<int?>("SenderId")
+                        .HasColumnType("int");
+
+                    b.Property<int?>("TicketId")
+                        .HasColumnType("int");
+
+                    b.Property<DateTime>("UpdatedAt")
+                        .HasColumnType("datetime(6)");
+
+                    b.HasKey("Id");
+
+                    b.HasIndex("SenderId");
+
+                    b.HasIndex("TicketId");
+
+                    b.ToTable("TicketMessages");
+                });
+
             modelBuilder.Entity("Moonlight.App.Database.Entities.User", b =>
                 {
                     b.Property<int>("Id")
@@ -781,6 +861,13 @@ namespace Moonlight.App.Database.Migrations
                         .IsRequired()
                         .HasColumnType("longtext");
 
+                    b.Property<int?>("PermissionGroupId")
+                        .HasColumnType("int");
+
+                    b.Property<byte[]>("Permissions")
+                        .IsRequired()
+                        .HasColumnType("longblob");
+
                     b.Property<int>("Rating")
                         .HasColumnType("int");
 
@@ -802,8 +889,8 @@ namespace Moonlight.App.Database.Migrations
                     b.Property<bool>("StreamerMode")
                         .HasColumnType("tinyint(1)");
 
-                    b.Property<int>("SubscriptionDuration")
-                        .HasColumnType("int");
+                    b.Property<DateTime>("SubscriptionExpires")
+                        .HasColumnType("datetime(6)");
 
                     b.Property<DateTime>("SubscriptionSince")
                         .HasColumnType("datetime(6)");
@@ -828,6 +915,8 @@ namespace Moonlight.App.Database.Migrations
 
                     b.HasIndex("CurrentSubscriptionId");
 
+                    b.HasIndex("PermissionGroupId");
+
                     b.ToTable("Users");
                 });
 
@@ -868,6 +957,21 @@ namespace Moonlight.App.Database.Migrations
                     b.ToTable("WebSpaces");
                 });
 
+            modelBuilder.Entity("Moonlight.App.Database.Entities.WhitelistIp", b =>
+                {
+                    b.Property<int>("Id")
+                        .ValueGeneratedOnAdd()
+                        .HasColumnType("int");
+
+                    b.Property<string>("Ip")
+                        .IsRequired()
+                        .HasColumnType("longtext");
+
+                    b.HasKey("Id");
+
+                    b.ToTable("WhitelistIps");
+                });
+
             modelBuilder.Entity("Moonlight.App.Database.Entities.DdosAttack", b =>
                 {
                     b.HasOne("Moonlight.App.Database.Entities.Node", "Node")
@@ -1026,13 +1130,49 @@ namespace Moonlight.App.Database.Migrations
                     b.Navigation("Sender");
                 });
 
+            modelBuilder.Entity("Moonlight.App.Database.Entities.Ticket", b =>
+                {
+                    b.HasOne("Moonlight.App.Database.Entities.User", "AssignedTo")
+                        .WithMany()
+                        .HasForeignKey("AssignedToId");
+
+                    b.HasOne("Moonlight.App.Database.Entities.User", "CreatedBy")
+                        .WithMany()
+                        .HasForeignKey("CreatedById")
+                        .OnDelete(DeleteBehavior.Cascade)
+                        .IsRequired();
+
+                    b.Navigation("AssignedTo");
+
+                    b.Navigation("CreatedBy");
+                });
+
+            modelBuilder.Entity("Moonlight.App.Database.Entities.TicketMessage", b =>
+                {
+                    b.HasOne("Moonlight.App.Database.Entities.User", "Sender")
+                        .WithMany()
+                        .HasForeignKey("SenderId");
+
+                    b.HasOne("Moonlight.App.Database.Entities.Ticket", null)
+                        .WithMany("Messages")
+                        .HasForeignKey("TicketId");
+
+                    b.Navigation("Sender");
+                });
+
             modelBuilder.Entity("Moonlight.App.Database.Entities.User", b =>
                 {
                     b.HasOne("Moonlight.App.Database.Entities.Subscription", "CurrentSubscription")
                         .WithMany()
                         .HasForeignKey("CurrentSubscriptionId");
 
+                    b.HasOne("Moonlight.App.Database.Entities.PermissionGroup", "PermissionGroup")
+                        .WithMany()
+                        .HasForeignKey("PermissionGroupId");
+
                     b.Navigation("CurrentSubscription");
+
+                    b.Navigation("PermissionGroup");
                 });
 
             modelBuilder.Entity("Moonlight.App.Database.Entities.WebSpace", b =>
@@ -1075,6 +1215,11 @@ namespace Moonlight.App.Database.Migrations
                     b.Navigation("Variables");
                 });
 
+            modelBuilder.Entity("Moonlight.App.Database.Entities.Ticket", b =>
+                {
+                    b.Navigation("Messages");
+                });
+
             modelBuilder.Entity("Moonlight.App.Database.Entities.WebSpace", b =>
                 {
                     b.Navigation("Databases");

Moonlight/App/Helpers/BackupHelper.cs

@@ -0,0 +1,119 @@
+using System.Diagnostics;
+using System.IO.Compression;
+using Microsoft.EntityFrameworkCore;
+using Moonlight.App.Database;
+using Moonlight.App.Services;
+using MySql.Data.MySqlClient;
+
+namespace Moonlight.App.Helpers;
+
+public class BackupHelper
+{
+    public async Task CreateBackup(string path)
+    {
+        Logger.Info("Started moonlight backup creation");
+        Logger.Info($"This backup will be saved to '{path}'");
+
+        var stopWatch = new Stopwatch();
+        stopWatch.Start();
+        
+        var cachePath = PathBuilder.Dir("storage", "backups", "cache");
+
+        Directory.CreateDirectory(cachePath);
+
+        //
+        // Exporting database
+        //
+        
+        Logger.Info("Exporting database");
+
+        var configService = new ConfigService(new());
+        var dataContext = new DataContext(configService);
+
+        await using MySqlConnection conn = new MySqlConnection(dataContext.Database.GetConnectionString());
+        await using MySqlCommand cmd = new MySqlCommand();
+        using MySqlBackup mb = new MySqlBackup(cmd);
+        
+        cmd.Connection = conn;
+        await conn.OpenAsync();
+        mb.ExportToFile(PathBuilder.File(cachePath, "database.sql"));
+        await conn.CloseAsync();
+        
+        //
+        // Saving config
+        //
+        
+        Logger.Info("Saving configuration");
+        File.Copy(
+            PathBuilder.File("storage", "configs", "config.json"), 
+            PathBuilder.File(cachePath, "config.json"));
+        
+        //
+        // Saving all storage items needed to restore the panel
+        //
+        
+        Logger.Info("Saving resources");
+        CopyDirectory(
+            PathBuilder.Dir("storage", "resources"), 
+            PathBuilder.Dir(cachePath, "resources"));
+
+        Logger.Info("Saving logs");
+        CopyDirectory(
+            PathBuilder.Dir("storage", "logs"), 
+            PathBuilder.Dir(cachePath, "logs"));
+
+        Logger.Info("Saving uploads");
+        CopyDirectory(
+            PathBuilder.Dir("storage", "uploads"), 
+            PathBuilder.Dir(cachePath, "uploads"));
+        
+        //
+        // Compressing the backup to a single file
+        //
+        
+        Logger.Info("Compressing");
+        ZipFile.CreateFromDirectory(cachePath, 
+            path, 
+            CompressionLevel.Fastest, 
+            false);
+        
+        Directory.Delete(cachePath, true);
+        
+        stopWatch.Stop();
+        Logger.Info($"Backup successfully created. Took {stopWatch.Elapsed.TotalSeconds} seconds");
+    }
+    
+    private void CopyDirectory(string sourceDirName, string destDirName, bool copySubDirs = true)
+    {
+        DirectoryInfo dir = new DirectoryInfo(sourceDirName);
+
+        if (!dir.Exists)
+        {
+            throw new DirectoryNotFoundException($"Source directory does not exist or could not be found: {sourceDirName}");
+        }
+
+        if (!Directory.Exists(destDirName))
+        {
+            Directory.CreateDirectory(destDirName);
+        }
+
+        FileInfo[] files = dir.GetFiles();
+
+        foreach (FileInfo file in files)
+        {
+            string tempPath = Path.Combine(destDirName, file.Name);
+            file.CopyTo(tempPath, false);
+        }
+
+        if (copySubDirs)
+        {
+            DirectoryInfo[] dirs = dir.GetDirectories();
+
+            foreach (DirectoryInfo subdir in dirs)
+            {
+                string tempPath = Path.Combine(destDirName, subdir.Name);
+                CopyDirectory(subdir.FullName, tempPath, copySubDirs);
+            }
+        }
+    }
+}

Moonlight/App/Helpers/BitHelper.cs

@@ -0,0 +1,88 @@
+namespace Moonlight.App.Helpers;
+
+public class BitHelper
+{
+    public static bool ReadBit(byte[] byteArray, int bitIndex)
+    {
+        if (bitIndex < 0)
+            throw new ArgumentOutOfRangeException("bitIndex");
+
+        int byteIndex = bitIndex / 8;
+        if (byteIndex >= byteArray.Length)
+            throw new ArgumentOutOfRangeException("bitIndex");
+
+        int bitNumber = bitIndex % 8;
+        byte mask = (byte)(1 << bitNumber);
+
+        return (byteArray[byteIndex] & mask) != 0;
+    }
+    
+    public static byte[] WriteBit(byte[] byteArray, int bitIndex, bool value)
+    {
+        if (bitIndex < 0)
+            throw new ArgumentOutOfRangeException("bitIndex");
+
+        int byteIndex = bitIndex / 8;
+        byte[] resultArray;
+
+        if (byteIndex >= byteArray.Length)
+        {
+            // Create a new array with increased size and copy elements from old array
+            resultArray = new byte[byteIndex + 1];
+            Array.Copy(byteArray, resultArray, byteArray.Length);
+        }
+        else
+        {
+            // Create a new array and copy elements from old array
+            resultArray = new byte[byteArray.Length];
+            Array.Copy(byteArray, resultArray, byteArray.Length);
+        }
+
+        int bitNumber = bitIndex % 8;
+        byte mask = (byte)(1 << bitNumber);
+
+        if (value)
+            resultArray[byteIndex] |= mask; // Set the bit to 1
+        else
+            resultArray[byteIndex] &= (byte)~mask; // Set the bit to 0
+
+        return resultArray;
+    }
+    
+    public static byte[] OverwriteByteArrays(byte[] targetArray, byte[] overwriteArray)
+    {
+        int targetLength = targetArray.Length;
+        int overwriteLength = overwriteArray.Length;
+
+        int maxLength = Math.Max(targetLength, overwriteLength);
+
+        byte[] resultArray = new byte[maxLength];
+
+        for (int i = 0; i < maxLength; i++)
+        {
+            byte targetByte = i < targetLength ? targetArray[i] : (byte)0;
+            byte overwriteByte = i < overwriteLength ? overwriteArray[i] : (byte)0;
+
+            for (int j = 0; j < 8; j++)
+            {
+                bool overwriteBit = (overwriteByte & (1 << j)) != 0;
+                if (i < targetLength)
+                {
+                    bool targetBit = (targetByte & (1 << j)) != 0;
+                    if (overwriteBit)
+                    {
+                        targetByte = targetBit ? (byte)(targetByte | (1 << j)) : (byte)(targetByte & ~(1 << j));
+                    }
+                }
+                else if (overwriteBit)
+                {
+                    targetByte |= (byte)(1 << j);
+                }
+            }
+
+            resultArray[i] = targetByte;
+        }
+
+        return resultArray;
+    }
+}

Moonlight/App/Helpers/ByteSizeValue.cs

@@ -0,0 +1,56 @@
+namespace Moonlight.App.Helpers;
+
+public class ByteSizeValue
+{
+    public long Bytes { get; set; }
+
+    public long KiloBytes
+    {
+        get => Bytes / 1024;
+        set => Bytes = value * 1024;
+    }
+    
+    public long MegaBytes
+    {
+        get => KiloBytes / 1024;
+        set => KiloBytes = value * 1024;
+    }
+    
+    public long GigaBytes
+    {
+        get => MegaBytes / 1024;
+        set => MegaBytes = value * 1024;
+    }
+
+    public static ByteSizeValue FromBytes(long bytes)
+    {
+        return new()
+        {
+            Bytes = bytes
+        };
+    }
+    
+    public static ByteSizeValue FromKiloBytes(long kiloBytes)
+    {
+        return new()
+        {
+            KiloBytes = kiloBytes
+        };
+    }
+    
+    public static ByteSizeValue FromMegaBytes(long megaBytes)
+    {
+        return new()
+        {
+            MegaBytes = megaBytes
+        };
+    }
+    
+    public static ByteSizeValue FromGigaBytes(long gigaBytes)
+    {
+        return new()
+        {
+            GigaBytes = gigaBytes
+        };
+    }
+}

Moonlight/App/Helpers/ComponentHelper.cs

@@ -0,0 +1,12 @@
+using Microsoft.AspNetCore.Components;
+
+namespace Moonlight.App.Helpers;
+
+public class ComponentHelper
+{
+    public static RenderFragment FromType(Type type) => builder =>
+    {
+        builder.OpenComponent(0, type);
+        builder.CloseComponent();
+    };
+}

Moonlight/App/Helpers/DatabaseCheckupService.cs

@@ -44,8 +44,19 @@ public class DatabaseCheckupService
         if (migrations.Any())
         {
             Logger.Info($"{migrations.Length} migrations pending. Updating now");
-            
-            await BackupDatabase();
+
+            try
+            {
+                var backupHelper = new BackupHelper();
+                await backupHelper.CreateBackup(
+                    PathBuilder.File("storage", "backups", $"{new DateTimeOffset(DateTime.UtcNow).ToUnixTimeMilliseconds()}.zip"));
+            }
+            catch (Exception e)
+            {
+                Logger.Fatal("Unable to create backup");
+                Logger.Fatal(e);
+                Logger.Fatal("Moonlight will continue to start and apply the migrations without a backup");
+            }
             
             Logger.Info("Applying migrations");
             
@@ -58,53 +69,4 @@ public class DatabaseCheckupService
             Logger.Info("Database is up-to-date. No migrations have been performed");
         }
     }
-
-    public async Task BackupDatabase()
-    {
-        Logger.Info("Creating backup from database");
-        
-        var configService = new ConfigService(new StorageService());
-        var dateTimeService = new DateTimeService();
-
-        var config = configService.Get().Moonlight.Database;
-
-        var connectionString = $"host={config.Host};" +
-                               $"port={config.Port};" +
-                               $"database={config.Database};" +
-                               $"uid={config.Username};" +
-                               $"pwd={config.Password}";
-        
-        string file = PathBuilder.File("storage", "backups", $"{dateTimeService.GetCurrentUnix()}-mysql.sql");
-        
-        Logger.Info($"Saving it to: {file}");
-        Logger.Info("Starting backup...");
-
-        try
-        {
-            var sw = new Stopwatch();
-            sw.Start();
-
-            await using MySqlConnection conn = new MySqlConnection(connectionString);
-            await using MySqlCommand cmd = new MySqlCommand();
-            using MySqlBackup mb = new MySqlBackup(cmd);
-        
-            cmd.Connection = conn;
-            await conn.OpenAsync();
-            mb.ExportToFile(file);
-            await conn.CloseAsync();
-
-            sw.Stop();
-            Logger.Info($"Done. {sw.Elapsed.TotalSeconds}s");
-        }
-        catch (Exception e)
-        {
-            Logger.Fatal("-----------------------------------------------");
-            Logger.Fatal("Unable to create backup for moonlight database");
-            Logger.Fatal("Moonlight will start anyways in 30 seconds");
-            Logger.Fatal("-----------------------------------------------");
-            Logger.Fatal(e);
-            
-            Thread.Sleep(TimeSpan.FromSeconds(30));
-        }
-    }
 }

Moonlight/App/Helpers/EggConverter.cs

@@ -0,0 +1,71 @@
+using System.Text;
+using Moonlight.App.Database.Entities;
+using Newtonsoft.Json;
+using Newtonsoft.Json.Linq;
+
+namespace Moonlight.App.Helpers;
+
+public static class EggConverter
+{
+    public static Image Convert(string json)
+    {
+        var result = new Image();
+
+        var data = new ConfigurationBuilder().AddJsonStream(
+            new MemoryStream(Encoding.ASCII.GetBytes(json))
+        ).Build();
+
+        result.Allocations = 1;
+        result.Description = data.GetValue<string>("description") ?? "";
+        result.Uuid = Guid.NewGuid();
+        result.Startup = data.GetValue<string>("startup") ?? "";
+        result.Name = data.GetValue<string>("name") ?? "Ptero Egg";
+
+        foreach (var variable in data.GetSection("variables").GetChildren())
+        {
+            result.Variables.Add(new()
+            {
+                Key = variable.GetValue<string>("env_variable") ?? "",
+                DefaultValue = variable.GetValue<string>("default_value") ?? ""
+            });
+        }
+        
+        var configData = data.GetSection("config");
+
+        result.ConfigFiles = configData.GetValue<string>("files") ?? "{}";
+
+        var dImagesData = JObject.Parse(json);
+        var dImages = (JObject)dImagesData["docker_images"]!;
+        
+        foreach (var dockerImage in dImages)
+        {
+            var di = new DockerImage()
+            {
+                Default = dockerImage.Key == dImages.Properties().Last().Name,
+                Name = dockerImage.Value!.ToString()
+            };
+
+            result.DockerImages.Add(di);
+        }
+
+        var installSection = data.GetSection("scripts").GetSection("installation");
+
+        result.InstallEntrypoint = installSection.GetValue<string>("entrypoint") ?? "bash";
+        result.InstallScript = installSection.GetValue<string>("script") ?? "";
+        result.InstallDockerImage = installSection.GetValue<string>("container") ?? "";
+
+        var rawJson = configData.GetValue<string>("startup");
+        
+        var startupData = new ConfigurationBuilder().AddJsonStream(
+            new MemoryStream(Encoding.ASCII.GetBytes(rawJson!))
+        ).Build();
+
+        result.StartupDetection = startupData.GetValue<string>("done", "") ?? "";
+        result.StopCommand = configData.GetValue<string>("stop") ?? "";
+
+        result.TagsJson = "[]";
+        result.BackgroundImageUrl = "";
+
+        return result;
+    }
+}

Moonlight/App/Helpers/Files/WingsFileAccess.cs

@@ -43,19 +43,22 @@ public class WingsFileAccess : FileAccess
             $"api/servers/{Server.Uuid}/files/list-directory?directory={CurrentPath}"
         );
 
-        var x = new List<FileData>();
+        var result = new List<FileData>();
 
-        foreach (var response in res)
+        foreach (var resGrouped in res.GroupBy(x => x.Directory))
         {
-            x.Add(new()
+            foreach (var resItem in resGrouped.OrderBy(x => x.Name))
             {
-                Name = response.Name,
-                Size = response.File ? response.Size : 0,
-                IsFile = response.File,
-            });
+                result.Add(new()
+                {
+                    Name = resItem.Name,
+                    Size = resItem.File ? resItem.Size : 0,
+                    IsFile = resItem.File,
+                });
+            }
         }
 
-        return x.ToArray();
+        return result.ToArray();
     }
 
     public override Task Cd(string dir)

Moonlight/App/Helpers/Formatter.cs

@@ -1,4 +1,5 @@
 using System.Text;
+using Microsoft.AspNetCore.Components;
 using Moonlight.App.Services;
 
 namespace Moonlight.App.Helpers;
@@ -155,12 +156,22 @@ public static class Formatter
             return (i / (1024D * 1024D)).Round(2) + " GB";
         }
     }
-    
-    public static double BytesToGb(long bytes)
-    {
-        const double gbMultiplier = 1024 * 1024 * 1024; // 1 GB = 1024 MB * 1024 KB * 1024 B
 
-        double gigabytes = (double)bytes / gbMultiplier;
-        return gigabytes;
+    public static RenderFragment FormatLineBreaks(string content)
+    {
+        return builder =>
+        {
+            int i = 0;
+            var arr = content.Split("\n", StringSplitOptions.RemoveEmptyEntries | StringSplitOptions.TrimEntries);
+
+            foreach (var line in arr)
+            {
+                builder.AddContent(i, line);
+                if (i++ != arr.Length - 1)
+                {
+                    builder.AddMarkupContent(i, "<br/>");
+                }
+            }
+        };
     }
 }

Moonlight/App/Helpers/Logger.cs

@@ -1,46 +1,70 @@
 using System.Diagnostics;
 using System.Reflection;
+using Moonlight.App.Database;
+using Moonlight.App.Services;
+using Moonlight.App.Services.Files;
 using Serilog;
 
 namespace Moonlight.App.Helpers;
 
 public static class Logger
 {
+    // The private static instance of the config service, because we have no di here
+    private static ConfigService ConfigService = new(new StorageService());
+    
     #region String method calls
     public static void Verbose(string message, string channel = "default")
     {
         Log.ForContext("SourceContext", GetNameOfCallingClass())
             .Verbose("{Message}", message);
+        
+        if(channel == "security")
+            LogSecurityInDb(message);
     }
     
     public static void Info(string message, string channel = "default")
     {
         Log.ForContext("SourceContext", GetNameOfCallingClass())
             .Information("{Message}", message);
+        
+        if(channel == "security")
+            LogSecurityInDb(message);
     }
     
     public static void Debug(string message, string channel = "default")
     {
         Log.ForContext("SourceContext", GetNameOfCallingClass())
             .Debug("{Message}", message);
+        
+        if(channel == "security")
+            LogSecurityInDb(message);
     }
     
     public static void Error(string message, string channel = "default")
     {
         Log.ForContext("SourceContext", GetNameOfCallingClass())
             .Error("{Message}", message);
+        
+        if(channel == "security")
+            LogSecurityInDb(message);
     }
     
     public static void Warn(string message, string channel = "default")
     {
         Log.ForContext("SourceContext", GetNameOfCallingClass())
             .Warning("{Message}", message);
+        
+        if(channel == "security")
+            LogSecurityInDb(message);
     }
     
     public static void Fatal(string message, string channel = "default")
     {
         Log.ForContext("SourceContext", GetNameOfCallingClass())
             .Fatal("{Message}", message);
+        
+        if(channel == "security")
+            LogSecurityInDb(message);
     }
     #endregion
     
@@ -49,36 +73,54 @@ public static class Logger
     {
         Log.ForContext("SourceContext", GetNameOfCallingClass())
             .Verbose(exception, "");
+        
+        if(channel == "security")
+            LogSecurityInDb(exception);
     }
     
     public static void Info(Exception exception, string channel = "default")
     {
         Log.ForContext("SourceContext", GetNameOfCallingClass())
             .Information(exception, "");
+        
+        if(channel == "security")
+            LogSecurityInDb(exception);
     }
     
     public static void Debug(Exception exception, string channel = "default")
     {
         Log.ForContext("SourceContext", GetNameOfCallingClass())
             .Debug(exception, "");
+        
+        if(channel == "security")
+            LogSecurityInDb(exception);
     }
     
     public static void Error(Exception exception, string channel = "default")
     {
         Log.ForContext("SourceContext", GetNameOfCallingClass())
             .Error(exception, "");
+        
+        if(channel == "security")
+            LogSecurityInDb(exception);
     }
     
     public static void Warn(Exception exception, string channel = "default")
     {
         Log.ForContext("SourceContext", GetNameOfCallingClass())
             .Warning(exception, "");
+        
+        if(channel == "security")
+            LogSecurityInDb(exception);
     }
     
     public static void Fatal(Exception exception, string channel = "default")
     {
         Log.ForContext("SourceContext", GetNameOfCallingClass())
             .Fatal(exception, "");
+        
+        if(channel == "security")
+            LogSecurityInDb(exception);
     }
     #endregion
     
@@ -105,4 +147,25 @@ public static class Logger
 
         return fullName;
     }
+
+
+    private static void LogSecurityInDb(Exception exception)
+    {
+        LogSecurityInDb(exception.ToStringDemystified());
+    }
+    private static void LogSecurityInDb(string text)
+    {
+        Task.Run(() =>
+        {
+            var dataContext = new DataContext(ConfigService);
+            
+            dataContext.SecurityLogs.Add(new()
+            {
+                Text = text
+            });
+
+            dataContext.SaveChanges();
+            dataContext.Dispose();
+        });
+    }
 }

Moonlight/App/Http/Controllers/Api/Moonlight/AvatarController.cs

@@ -25,7 +25,7 @@ public class AvatarController : Controller
         
         try
         {
-            var url = GravatarController.GetImageUrl(user.Email, 100);
+            var url = GravatarController.GetImageUrl(user.Email.ToLower(), 100);
 
             using var client = new HttpClient();
             var res = await client.GetByteArrayAsync(url);

Moonlight/App/Http/Controllers/Api/Moonlight/BillingController.cs

@@ -0,0 +1,47 @@
+using Microsoft.AspNetCore.Mvc;
+using Moonlight.App.Services;
+using Moonlight.App.Services.Sessions;
+using Stripe;
+using Stripe.Checkout;
+
+namespace Moonlight.App.Http.Controllers.Api.Moonlight;
+
+[ApiController]
+[Route("api/moonlight/billing")]
+public class BillingController : Controller
+{
+    private readonly IdentityService IdentityService;
+    private readonly BillingService BillingService;
+
+    public BillingController(
+        IdentityService identityService,
+        BillingService billingService)
+    {
+        IdentityService = identityService;
+        BillingService = billingService;
+    }
+
+    [HttpGet("cancel")]
+    public async Task<ActionResult> Cancel()
+    {
+        var user = IdentityService.User;
+
+        if (user == null)
+            return Redirect("/login");
+        
+        return Redirect("/profile/subscriptions/close");
+    }
+    
+    [HttpGet("success")]
+    public async Task<ActionResult> Success()
+    {
+        var user = IdentityService.User;
+
+        if (user == null)
+            return Redirect("/login");
+
+        await BillingService.CompleteCheckout(user);
+        
+        return Redirect("/profile/subscriptions/close");
+    }
+}

Moonlight/App/Http/Controllers/Api/Moonlight/Notifications/RegisterController.cs

@@ -25,7 +25,7 @@ public class RegisterController : Controller
     [HttpGet]
     public async Task<ActionResult<TokenRegister>> Register()
     {
-        var user = await IdentityService.Get();
+        var user = IdentityService.User;
 
         if (user == null)
             return NotFound();

Moonlight/App/Http/Controllers/Api/Moonlight/OAuth2Controller.cs

@@ -54,7 +54,7 @@ public class OAuth2Controller : Controller
     {
         try
         {
-            var currentUser = await IdentityService.Get();
+            var currentUser = IdentityService.User;
 
             if (currentUser != null)
             {

Moonlight/App/Http/Controllers/Api/Remote/DdosController.cs

@@ -3,6 +3,7 @@ using Moonlight.App.Database.Entities;
 using Moonlight.App.Events;
 using Moonlight.App.Http.Requests.Daemon;
 using Moonlight.App.Repositories;
+using Moonlight.App.Services.Background;
 
 namespace Moonlight.App.Http.Controllers.Api.Remote;
 
@@ -10,19 +11,17 @@ namespace Moonlight.App.Http.Controllers.Api.Remote;
 [Route("api/remote/ddos")]
 public class DdosController : Controller
 {
-    private readonly NodeRepository NodeRepository;
-    private readonly EventSystem Event;
-    private readonly DdosAttackRepository DdosAttackRepository;
+    private readonly Repository<Node> NodeRepository;
+    private readonly DdosProtectionService DdosProtectionService;
 
-    public DdosController(NodeRepository nodeRepository, EventSystem eventSystem, DdosAttackRepository ddosAttackRepository)
+    public DdosController(Repository<Node> nodeRepository, DdosProtectionService ddosProtectionService)
     {
         NodeRepository = nodeRepository;
-        Event = eventSystem;
-        DdosAttackRepository = ddosAttackRepository;
+        DdosProtectionService = ddosProtectionService;
     }
 
-    [HttpPost("update")]
-    public async Task<ActionResult> Update([FromBody] DdosStatus ddosStatus)
+    [HttpPost("start")]
+    public async Task<ActionResult> Start([FromBody] DdosStart ddosStart)
     {
         var tokenData = Request.Headers.Authorization.ToString().Replace("Bearer ", "");
         var id = tokenData.Split(".")[0];
@@ -35,18 +34,26 @@ public class DdosController : Controller
         
         if (token != node.Token)
             return Unauthorized();
+        
+        await DdosProtectionService.ProcessDdosSignal(ddosStart.Ip, ddosStart.Packets);
+        
+        return Ok();
+    }
 
-        var ddosAttack = new DdosAttack()
-        {
-            Ongoing = ddosStatus.Ongoing,
-            Data = ddosStatus.Data,
-            Ip = ddosStatus.Ip,
-            Node = node
-        };
+    [HttpPost("stop")]
+    public async Task<ActionResult> Stop([FromBody] DdosStop ddosStop)
+    {
+        var tokenData = Request.Headers.Authorization.ToString().Replace("Bearer ", "");
+        var id = tokenData.Split(".")[0];
+        var token = tokenData.Split(".")[1];
 
-        ddosAttack = DdosAttackRepository.Add(ddosAttack);
+        var node = NodeRepository.Get().FirstOrDefault(x => x.TokenId == id);
 
-        await Event.Emit("node.ddos", ddosAttack);
+        if (node == null)
+            return NotFound();
+        
+        if (token != node.Token)
+            return Unauthorized();
         
         return Ok();
     }

Moonlight/App/Http/Requests/Daemon/DdosStart.cs

@@ -0,0 +1,7 @@
+namespace Moonlight.App.Http.Requests.Daemon;
+
+public class DdosStart
+{
+    public string Ip { get; set; } = "";
+    public long Packets { get; set; }
+}

Moonlight/App/Http/Requests/Daemon/DdosStatus.cs

@@ -1,8 +0,0 @@
-namespace Moonlight.App.Http.Requests.Daemon;
-
-public class DdosStatus
-{
-    public bool Ongoing { get; set; }
-    public long Data { get; set; }
-    public string Ip { get; set; } = "";
-}

Moonlight/App/Http/Requests/Daemon/DdosStop.cs

@@ -0,0 +1,7 @@
+namespace Moonlight.App.Http.Requests.Daemon;
+
+public class DdosStop
+{
+    public string Ip { get; set; } = "";
+    public long Traffic { get; set; }
+}

Moonlight/App/Models/Forms/CreateTicketDataModel.cs

@@ -0,0 +1,21 @@
+using System.ComponentModel.DataAnnotations;
+using Moonlight.App.Models.Misc;
+
+namespace Moonlight.App.Models.Forms;
+
+public class CreateTicketDataModel
+{
+    [Required(ErrorMessage = "You need to specify a issue topic")]
+    [MinLength(5, ErrorMessage = "The issue topic needs to be longer than 5 characters")]
+    public string IssueTopic { get; set; }
+    
+    [Required(ErrorMessage = "You need to specify a issue description")]
+    [MinLength(10, ErrorMessage = "The issue description needs to be longer than 10 characters")]
+    public string IssueDescription { get; set; }
+    
+    [Required(ErrorMessage = "You need to specify your tries to solve this issue")]
+    public string IssueTries { get; set; }
+    
+    public TicketSubject Subject { get; set; }
+    public int SubjectId { get; set; }
+}

Moonlight/App/Models/Forms/SubscriptionDataModel.cs

@@ -1,4 +1,5 @@
 using System.ComponentModel.DataAnnotations;
+using Moonlight.App.Models.Misc;
 
 namespace Moonlight.App.Models.Forms;
 
@@ -10,4 +11,8 @@ public class SubscriptionDataModel
 
     [Required(ErrorMessage = "You need to enter a description")]
     public string Description { get; set; } = "";
+    
+    public double Price { get; set; } = 0;
+    public Currency Currency { get; set; } = Currency.USD;
+    public int Duration { get; set; } = 30;
 }

Moonlight/App/Models/Forms/UserEditDataModel.cs

@@ -0,0 +1,34 @@
+using System.ComponentModel.DataAnnotations;
+using Moonlight.App.Database.Entities;
+using Moonlight.App.Models.Misc;
+
+namespace Moonlight.App.Models.Forms;
+
+public class UserEditDataModel
+{
+    [Required]
+    public string FirstName { get; set; } = "";
+    
+    [Required]
+    public string LastName { get; set; } = "";
+    
+    [Required]
+    public string Email { get; set; } = "";
+    
+    [Required]
+    public string Address { get; set; } = "";
+    
+    [Required]
+    public string City { get; set; } = "";
+    
+    [Required]
+    public string State { get; set; } = "";
+    
+    [Required]
+    public string Country { get; set; } = "";
+
+    public bool Admin { get; set; }
+    public bool TotpEnabled { get; set; }
+    public ulong DiscordId { get; set; }
+    public PermissionGroup? PermissionGroup { get; set; }
+}

Moonlight/App/Models/Misc/AuditLogType.cs

@@ -1,27 +0,0 @@
-namespace Moonlight.App.Models.Misc;
-
-public enum AuditLogType
-{
-    Login,
-    Register,
-    ChangePassword,
-    ChangePowerState,
-    CreateBackup,
-    RestoreBackup,
-    DeleteBackup,
-    DownloadBackup,
-    CreateServer,
-    ReinstallServer,
-    CancelSubscription,
-    ApplySubscriptionCode,
-    EnableTotp,
-    DisableTotp,
-    AddDomainRecord,
-    UpdateDomainRecord,
-    DeleteDomainRecord,
-    PasswordReset,
-    CleanupEnabled,
-    CleanupDisabled,
-    CleanupTriggered,
-    PasswordChange,
-}

Moonlight/App/Models/Misc/Currency.cs

@@ -0,0 +1,7 @@
+namespace Moonlight.App.Models.Misc;
+
+public enum Currency
+{
+    USD = 1,
+    EUR = 2
+}

Moonlight/App/Models/Misc/MailTemplate.cs

@@ -0,0 +1,9 @@
+using Moonlight.App.Helpers.Files;
+
+namespace Moonlight.App.Models.Misc;
+
+public class MailTemplate // This is just for the blazor table at /admin/system/mail
+{
+    public string Name { get; set; } = "";
+    public FileData File { get; set; }
+}

Moonlight/App/Models/Misc/OfficialMoonlightPlugin.cs

@@ -0,0 +1,6 @@
+namespace Moonlight.App.Models.Misc;
+
+public class OfficialMoonlightPlugin
+{
+    public string Name { get; set; }
+}

Moonlight/App/Models/Misc/SecurityLogType.cs

@@ -1,9 +0,0 @@
-namespace Moonlight.App.Models.Misc;
-
-public enum SecurityLogType
-{
-    ManipulatedJwt,
-    PathTransversal,
-    SftpBruteForce,
-    LoginFail
-}

Moonlight/App/Models/Misc/TicketPriority.cs

@@ -0,0 +1,9 @@
+namespace Moonlight.App.Models.Misc;
+
+public enum TicketPriority
+{
+    Low = 0,
+    Medium = 1,
+    High = 2,
+    Critical = 3
+}

Moonlight/App/Models/Misc/TicketStatus.cs

@@ -0,0 +1,9 @@
+namespace Moonlight.App.Models.Misc;
+
+public enum TicketStatus
+{
+    Closed = 0,
+    Open = 1,
+    WaitingForUser = 2,
+    Pending = 3
+}

Moonlight/App/Models/Misc/TicketSubject.cs

@@ -0,0 +1,9 @@
+namespace Moonlight.App.Models.Misc;
+
+public enum TicketSubject
+{
+    Webspace = 0,
+    Server = 1,
+    Domain = 2,
+    Other = 3
+}

Moonlight/App/Perms/Permission.cs

@@ -0,0 +1,10 @@
+namespace Moonlight.App.Perms;
+
+public class Permission
+{
+    public int Index { get; set; } = 0;
+    public string Name { get; set; } = "";
+    public string Description { get; set; } = "";
+
+    public static implicit operator int(Permission permission) => permission.Index;
+}

Moonlight/App/Perms/PermissionRequired.cs

@@ -0,0 +1,11 @@
+namespace Moonlight.App.Perms;
+
+public class PermissionRequired : Attribute
+{
+    public string Name { get; private set; }
+
+    public PermissionRequired(string name)
+    {
+        Name = name;
+    }
+}

Moonlight/App/Perms/PermissionStorage.cs

@@ -0,0 +1,55 @@
+using System.Data;
+using Moonlight.App.Helpers;
+
+namespace Moonlight.App.Perms;
+
+public class PermissionStorage
+{
+    public byte[] Data;
+    public bool IsReadyOnly;
+
+    public PermissionStorage(byte[] data, bool isReadyOnly = false)
+    {
+        Data = data;
+        IsReadyOnly = isReadyOnly;
+    }
+
+    public bool this[Permission permission]
+    {
+        get
+        {
+            try
+            {
+                return BitHelper.ReadBit(Data, permission.Index);
+            }
+            catch (ArgumentOutOfRangeException)
+            {
+                return false;
+            }
+            catch (Exception e)
+            {
+                Logger.Verbose("Error reading permissions. (Can be intentional)");
+                Logger.Verbose(e);
+                return false;
+            }
+        }
+        set
+        {
+            if (IsReadyOnly)
+                throw new ReadOnlyException();
+
+            Data = BitHelper.WriteBit(Data, permission.Index, value);
+        }
+    }
+
+    public bool HasAnyPermissions()
+    {
+        foreach (var permission in Permissions.GetAllPermissions())
+        {
+            if (this[permission])
+                return true;
+        }
+
+        return false;
+    }
+}

Moonlight/App/Perms/Permissions.cs

@@ -0,0 +1,438 @@
+namespace Moonlight.App.Perms;
+
+public static class Permissions
+{
+    public static Permission AdminDashboard = new()
+    {
+        Index = 0,
+        Name = "Admin Dashboard",
+        Description = "Access the main admin dashboard page"
+    };
+
+    public static Permission AdminStatistics = new()
+    {
+        Index = 1,
+        Name = "Admin Statistics",
+        Description = "View statistical information about the moonlight instance"
+    };
+    
+    public static Permission AdminSysPlugins = new()
+    {
+        Index = 2,
+        Name = "Admin system plugins",
+        Description = "View and install plugins"
+    };
+
+    public static Permission AdminDomains = new()
+    {
+        Index = 4,
+        Name = "Admin Domains",
+        Description = "Manage domains in the admin area"
+    };
+
+    public static Permission AdminNewDomain = new()
+    {
+        Index = 5,
+        Name = "Admin New Domain",
+        Description = "Create a new domain in the admin area"
+    };
+
+    public static Permission AdminSharedDomains = new()
+    {
+        Index = 6,
+        Name = "Admin Shared Domains",
+        Description = "Manage shared domains in the admin area"
+    };
+
+    public static Permission AdminNewSharedDomain = new()
+    {
+        Index = 7,
+        Name = "Admin New Shared Domain",
+        Description = "Create a new shared domain in the admin area"
+    };
+
+    public static Permission AdminNodeEdit = new()
+    {
+        Index = 9,
+        Name = "Admin Node Edit",
+        Description = "Edit node settings in the admin area"
+    };
+
+    public static Permission AdminNodes = new()
+    {
+        Index = 10,
+        Name = "Admin Node",
+        Description = "Access the node management page in the admin area"
+    };
+
+    public static Permission AdminNewNode = new()
+    {
+        Index = 11,
+        Name = "Admin New Node",
+        Description = "Create a new node in the admin area"
+    };
+
+    public static Permission AdminNodeSetup = new()
+    {
+        Index = 12,
+        Name = "Admin Node Setup",
+        Description = "Set up a node in the admin area"
+    };
+
+    public static Permission AdminNodeView = new()
+    {
+        Index = 13,
+        Name = "Admin Node View",
+        Description = "View node details in the admin area"
+    };
+
+    public static Permission AdminNotificationDebugging = new()
+    {
+        Index = 14,
+        Name = "Admin Notification Debugging",
+        Description = "Manage debugging notifications in the admin area"
+    };
+
+    public static Permission AdminServerCleanup = new()
+    {
+        Index = 15,
+        Name = "Admin Server Cleanup",
+        Description = "Perform server cleanup tasks in the admin area"
+    };
+
+    public static Permission AdminServerEdit = new()
+    {
+        Index = 16,
+        Name = "Admin Server Edit",
+        Description = "Edit server settings in the admin area"
+    };
+
+    public static Permission AdminServers = new()
+    {
+        Index = 17,
+        Name = "Admin Server",
+        Description = "Access the server management page in the admin area"
+    };
+
+    public static Permission AdminServerManager = new()
+    {
+        Index = 18,
+        Name = "Admin Server Manager",
+        Description = "Manage servers in the admin area"
+    };
+
+    public static Permission AdminNewServer = new()
+    {
+        Index = 19,
+        Name = "Admin New Server",
+        Description = "Create a new server in the admin area"
+    };
+
+    public static Permission AdminServerImageEdit = new()
+    {
+        Index = 20,
+        Name = "Admin Server Image Edit",
+        Description = "Edit server image settings in the admin area"
+    };
+
+    public static Permission AdminServerImages = new()
+    {
+        Index = 21,
+        Name = "Admin Server Images",
+        Description = "Access the server image management page in the admin area"
+    };
+
+    public static Permission AdminServerImageNew = new()
+    {
+        Index = 22,
+        Name = "Admin Server Image New",
+        Description = "Create a new server image in the admin area"
+    };
+
+    public static Permission AdminServerViewAllocations = new()
+    {
+        Index = 23,
+        Name = "Admin Server View Allocations",
+        Description = "View server allocations in the admin area"
+    };
+
+    public static Permission AdminServerViewArchive = new()
+    {
+        Index = 24,
+        Name = "Admin Server View Archive",
+        Description = "View server archive in the admin area"
+    };
+
+    public static Permission AdminServerViewDebug = new()
+    {
+        Index = 25,
+        Name = "Admin Server View Debug",
+        Description = "View server debugging information in the admin area"
+    };
+
+    public static Permission AdminServerViewImage = new()
+    {
+        Index = 26,
+        Name = "Admin Server View Image",
+        Description = "View server image details in the admin area"
+    };
+
+    public static Permission AdminServerViewIndex = new()
+    {
+        Index = 27,
+        Name = "Admin Server View",
+        Description = "Access the server view page in the admin area"
+    };
+
+    public static Permission AdminServerViewOverview = new()
+    {
+        Index = 28,
+        Name = "Admin Server View Overview",
+        Description = "View server overview in the admin area"
+    };
+
+    public static Permission AdminServerViewResources = new()
+    {
+        Index = 29,
+        Name = "Admin Server View Resources",
+        Description = "View server resources in the admin area"
+    };
+
+    public static Permission AdminSubscriptionEdit = new()
+    {
+        Index = 30,
+        Name = "Admin Subscription Edit",
+        Description = "Edit subscription settings in the admin area"
+    };
+
+    public static Permission AdminSubscriptions = new()
+    {
+        Index = 31,
+        Name = "Admin Subscriptions",
+        Description = "Access the subscription management page in the admin area"
+    };
+
+    public static Permission AdminNewSubscription = new()
+    {
+        Index = 32,
+        Name = "Admin New Subscription",
+        Description = "Create a new subscription in the admin area"
+    };
+
+    public static Permission AdminSupport = new()
+    {
+        Index = 33,
+        Name = "Admin Support",
+        Description = "Access the support page in the admin area"
+    };
+
+    public static Permission AdminSupportView = new()
+    {
+        Index = 34,
+        Name = "Admin Support View",
+        Description = "View support details in the admin area"
+    };
+
+    public static Permission AdminSysConfiguration = new()
+    {
+        Index = 35,
+        Name = "Admin system Configuration",
+        Description = "Access system configuration settings in the admin area"
+    };
+
+    public static Permission AdminSysDiscordBot = new()
+    {
+        Index = 36,
+        Name = "Admin system Discord Bot",
+        Description = "Manage Discord bot settings in the admin area"
+    };
+
+    public static Permission AdminSystem = new()
+    {
+        Index = 37,
+        Name = "Admin system",
+        Description = "Access the system management page in the admin area"
+    };
+
+    public static Permission AdminSysMail = new()
+    {
+        Index = 38,
+        Name = "Admin system Mail",
+        Description = "Manage mail settings in the admin area"
+    };
+
+    public static Permission AdminSecurityMalware = new()
+    {
+        Index = 39,
+        Name = "Admin security Malware",
+        Description = "Manage malware settings in the admin area"
+    };
+
+    public static Permission AdminSysResources = new()
+    {
+        Index = 40,
+        Name = "Admin system Resources",
+        Description = "View system resources in the admin area"
+    };
+
+    public static Permission AdminSecurity = new()
+    {
+        Index = 41,
+        Name = "Admin Security",
+        Description = "View security logs in the admin area"
+    };
+
+    public static Permission AdminSysSentry = new()
+    {
+        Index = 42,
+        Name = "Admin system Sentry",
+        Description = "Manage Sentry settings in the admin area"
+    };
+
+    public static Permission AdminSysNewsEdit = new()
+    {
+        Index = 43,
+        Name = "Admin system News Edit",
+        Description = "Edit system news in the admin area"
+    };
+
+    public static Permission AdminSysNews = new()
+    {
+        Index = 44,
+        Name = "Admin system News",
+        Description = "Access the system news management page in the admin area"
+    };
+
+    public static Permission AdminSysNewsNew = new()
+    {
+        Index = 45,
+        Name = "Admin system News New",
+        Description = "Create new system news in the admin area"
+    };
+
+    public static Permission AdminUserEdit = new()
+    {
+        Index = 46,
+        Name = "Admin User Edit",
+        Description = "Edit user settings in the admin area"
+    };
+
+    public static Permission AdminUsers = new()
+    {
+        Index = 47,
+        Name = "Admin Users",
+        Description = "Access the user management page in the admin area"
+    };
+
+    public static Permission AdminNewUser = new()
+    {
+        Index = 48,
+        Name = "Admin New User",
+        Description = "Create a new user in the admin area"
+    };
+
+    public static Permission AdminUserSessions = new()
+    {
+        Index = 49,
+        Name = "Admin User Sessions",
+        Description = "View user sessions in the admin area"
+    };
+
+    public static Permission AdminUserView = new()
+    {
+        Index = 50,
+        Name = "Admin User View",
+        Description = "View user details in the admin area"
+    };
+
+    public static Permission AdminWebspaces = new()
+    {
+        Index = 51,
+        Name = "Admin Webspaces",
+        Description = "Access the webspaces management page in the admin area"
+    };
+
+    public static Permission AdminNewWebspace = new()
+    {
+        Index = 52,
+        Name = "Admin New Webspace",
+        Description = "Create a new webspace in the admin area"
+    };
+
+    public static Permission AdminWebspacesServerEdit = new()
+    {
+        Index = 53,
+        Name = "Admin Webspaces Server Edit",
+        Description = "Edit webspace server settings in the admin area"
+    };
+
+    public static Permission AdminWebspacesServers = new()
+    {
+        Index = 54,
+        Name = "Admin Webspaces Servers",
+        Description = "Access the webspace server management page in the admin area"
+    };
+
+    public static Permission AdminWebspacesServerNew = new()
+    {
+        Index = 55,
+        Name = "Admin Webspaces Server New",
+        Description = "Create a new webspace server in the admin area"
+    };
+    
+    public static Permission AdminSecurityIpBans = new()
+    {
+        Index = 56,
+        Name = "Admin security ip bans",
+        Description = "Manage ip bans in the admin area"
+    };
+
+    public static Permission AdminSecurityPermissionGroups = new()
+    {
+        Index = 57,
+        Name = "Admin security permission groups",
+        Description = "View, add and delete permission groups"
+    };
+    
+    public static Permission AdminSecurityLogs = new()
+    {
+        Index = 58,
+        Name = "Admin security logs",
+        Description = "View the security logs"
+    };
+    
+    public static Permission AdminSecurityDdos = new()
+    {
+        Index = 59,
+        Name = "Admin security ddos",
+        Description = "Manage the integrated ddos protection"
+    };
+
+    public static Permission? FromString(string name)
+    {
+        var type = typeof(Permissions);
+
+        var field = type
+            .GetFields()
+            .FirstOrDefault(x => x.FieldType == typeof(Permission) && x.Name == name);
+
+        if (field != null)
+        {
+            var value = field.GetValue(null);
+            return value as Permission;
+        }
+
+        return null;
+    }
+
+    public static Permission[] GetAllPermissions()
+    {
+        var type = typeof(Permissions);
+
+        return type
+            .GetFields()
+            .Where(x => x.FieldType == typeof(Permission))
+            .Select(x => (x.GetValue(null) as Permission)!)
+            .ToArray();
+    }
+}

Moonlight/App/Plugin/MoonlightPlugin.cs

@@ -0,0 +1,15 @@
+using Moonlight.App.Plugin.UI.Servers;
+using Moonlight.App.Plugin.UI.Webspaces;
+
+namespace Moonlight.App.Plugin;
+
+public abstract class MoonlightPlugin
+{
+    public string Name { get; set; } = "N/A";
+    public string Author { get; set; } = "N/A";
+    public string Version { get; set; } = "N/A";
+    
+    public Func<ServerPageContext, Task>? OnBuildServerPage { get; set; }
+    public Func<WebspacePageContext, Task>? OnBuildWebspacePage { get; set; }
+    public Func<IServiceCollection, Task>? OnBuildServices { get; set; }
+}

Moonlight/App/Plugin/UI/Servers/ServerPageContext.cs

@@ -0,0 +1,12 @@
+using Moonlight.App.Database.Entities;
+
+namespace Moonlight.App.Plugin.UI.Servers;
+
+public class ServerPageContext
+{
+    public List<ServerTab> Tabs { get; set; } = new();
+    public List<ServerSetting> Settings { get; set; } = new();
+    public Server Server { get; set; }
+    public User User { get; set; }
+    public string[] ImageTags { get; set; }
+}

Moonlight/App/Plugin/UI/Servers/ServerSetting.cs

@@ -0,0 +1,9 @@
+using Microsoft.AspNetCore.Components;
+
+namespace Moonlight.App.Plugin.UI.Servers;
+
+public class ServerSetting
+{
+    public string Name { get; set; }
+    public RenderFragment Component { get; set; }
+}

Moonlight/App/Plugin/UI/Servers/ServerTab.cs

@@ -0,0 +1,11 @@
+using Microsoft.AspNetCore.Components;
+
+namespace Moonlight.App.Plugin.UI.Servers;
+
+public class ServerTab
+{
+    public string Name { get; set; }
+    public string Route { get; set; }
+    public string Icon { get; set; }
+    public RenderFragment Component { get; set; }
+}

Moonlight/App/Plugin/UI/Webspaces/WebspacePageContext.cs

@@ -0,0 +1,10 @@
+using Moonlight.App.Database.Entities;
+
+namespace Moonlight.App.Plugin.UI.Webspaces;
+
+public class WebspacePageContext
+{
+    public List<WebspaceTab> Tabs { get; set; } = new();
+    public User User { get; set; }
+    public WebSpace WebSpace { get; set; }
+}

Moonlight/App/Plugin/UI/Webspaces/WebspaceTab.cs

@@ -0,0 +1,10 @@
+using Microsoft.AspNetCore.Components;
+
+namespace Moonlight.App.Plugin.UI.Webspaces;
+
+public class WebspaceTab
+{
+    public string Name { get; set; } = "N/A";
+    public string Route { get; set; } = "/";
+    public RenderFragment Component { get; set; }
+}

Moonlight/App/Repositories/LogEntries/AuditLogEntryRepository.cs

@@ -1,32 +0,0 @@
-using Microsoft.EntityFrameworkCore;
-using Moonlight.App.Database;
-using Moonlight.App.Database.Entities.LogsEntries;
-
-namespace Moonlight.App.Repositories.LogEntries;
-
-public class AuditLogEntryRepository : IDisposable
-{
-    private readonly DataContext DataContext;
-
-    public AuditLogEntryRepository(DataContext dataContext)
-    {
-        DataContext = dataContext;
-    }
-
-    public AuditLogEntry Add(AuditLogEntry entry)
-    {
-        var x = DataContext.AuditLog.Add(entry);
-        DataContext.SaveChanges();
-        return x.Entity;
-    }
-
-    public DbSet<AuditLogEntry> Get()
-    {
-        return DataContext.AuditLog;
-    }
-
-    public void Dispose()
-    {
-        DataContext.Dispose();
-    }
-}

Moonlight/App/Repositories/LogEntries/ErrorLogEntryRepository.cs

@@ -1,32 +0,0 @@
-using Microsoft.EntityFrameworkCore;
-using Moonlight.App.Database;
-using Moonlight.App.Database.Entities.LogsEntries;
-
-namespace Moonlight.App.Repositories.LogEntries;
-
-public class ErrorLogEntryRepository : IDisposable
-{
-    private readonly DataContext DataContext;
-
-    public ErrorLogEntryRepository(DataContext dataContext)
-    {
-        DataContext = dataContext;
-    }
-
-    public ErrorLogEntry Add(ErrorLogEntry errorLogEntry)
-    {
-        var x = DataContext.ErrorLog.Add(errorLogEntry);
-        DataContext.SaveChanges();
-        return x.Entity;
-    }
-
-    public DbSet<ErrorLogEntry> Get()
-    {
-        return DataContext.ErrorLog;
-    }
-
-    public void Dispose()
-    {
-        DataContext.Dispose();
-    }
-}

Moonlight/App/Repositories/LogEntries/SecurityLogEntryRepository.cs

@@ -1,32 +0,0 @@
-using Microsoft.EntityFrameworkCore;
-using Moonlight.App.Database;
-using Moonlight.App.Database.Entities.LogsEntries;
-
-namespace Moonlight.App.Repositories.LogEntries;
-
-public class SecurityLogEntryRepository : IDisposable
-{
-    private readonly DataContext DataContext;
-
-    public SecurityLogEntryRepository(DataContext dataContext)
-    {
-        DataContext = dataContext;
-    }
-
-    public SecurityLogEntry Add(SecurityLogEntry securityLogEntry)
-    {
-        var x = DataContext.SecurityLog.Add(securityLogEntry);
-        DataContext.SaveChanges();
-        return x.Entity;
-    }
-
-    public DbSet<SecurityLogEntry> Get()
-    {
-        return DataContext.SecurityLog;
-    }
-
-    public void Dispose()
-    {
-        DataContext.Dispose();
-    }
-}

Moonlight/App/Services/Background/CleanupService.cs

@@ -93,14 +93,14 @@ public class CleanupService
                         Logger.Debug($"Max CPU:  {maxCpu}");
                         executeCleanup = true;
                     }
-                    else if (Formatter.BytesToGb(memoryMetrics.Total) - Formatter.BytesToGb(memoryMetrics.Used) <
-                             minMemory / 1024D)
+                    else if (ByteSizeValue.FromKiloBytes(memoryMetrics.Total).MegaBytes - ByteSizeValue.FromKiloBytes(memoryMetrics.Used).MegaBytes <
+                             minMemory)
                     {
                         Logger.Debug($"{node.Name}: Memory Usage is too high");
-                        Logger.Debug($"Memory (Total):  {Formatter.BytesToGb(memoryMetrics.Total)}");
-                        Logger.Debug($"Memory (Used):  {Formatter.BytesToGb(memoryMetrics.Used)}");
+                        Logger.Debug($"Memory (Total):  {ByteSizeValue.FromKiloBytes(memoryMetrics.Total).MegaBytes}");
+                        Logger.Debug($"Memory (Used):  {ByteSizeValue.FromKiloBytes(memoryMetrics.Used).MegaBytes}");
                         Logger.Debug(
-                            $"Memory (Free):  {Formatter.BytesToGb(memoryMetrics.Total) - Formatter.BytesToGb(memoryMetrics.Used)}");
+                            $"Memory (Free):  {ByteSizeValue.FromKiloBytes(memoryMetrics.Total).MegaBytes - ByteSizeValue.FromKiloBytes(memoryMetrics.Used).MegaBytes}");
                         Logger.Debug($"Min Memory:  {minMemory}");
                         executeCleanup = true;
                     }

Moonlight/App/Services/Background/DdosProtectionService.cs

@@ -0,0 +1,129 @@
+using Moonlight.App.ApiClients.Daemon;
+using Moonlight.App.Database.Entities;
+using Moonlight.App.Events;
+using Moonlight.App.Helpers;
+using Moonlight.App.Repositories;
+
+namespace Moonlight.App.Services.Background;
+
+public class DdosProtectionService
+{
+    private readonly IServiceScopeFactory ServiceScopeFactory;
+
+    public DdosProtectionService(IServiceScopeFactory serviceScopeFactory)
+    {
+        ServiceScopeFactory = serviceScopeFactory;
+
+        Task.Run(UnBlocker);
+    }
+
+    private async Task UnBlocker()
+    {
+        var periodicTimer = new PeriodicTimer(TimeSpan.FromMinutes(5));
+        
+        while (true)
+        {
+            using var scope = ServiceScopeFactory.CreateScope();
+            var blocklistIpRepo = scope.ServiceProvider.GetRequiredService<Repository<BlocklistIp>>();
+            
+            var ips = blocklistIpRepo
+                .Get()
+                .ToArray();
+
+            foreach (var ip in ips)
+            {
+                if (DateTime.UtcNow > ip.ExpiresAt)
+                {
+                    blocklistIpRepo.Delete(ip);
+                }
+            }
+
+            var newCount = blocklistIpRepo
+                .Get()
+                .Count();
+
+            if (newCount != ips.Length)
+            {
+                await RebuildNodeFirewalls();
+            }
+
+            await periodicTimer.WaitForNextTickAsync();
+        }
+    }
+
+    public async Task RebuildNodeFirewalls()
+    {
+        using var scope = ServiceScopeFactory.CreateScope();
+        var blocklistIpRepo = scope.ServiceProvider.GetRequiredService<Repository<BlocklistIp>>();
+        var nodeRepo = scope.ServiceProvider.GetRequiredService<Repository<Node>>();
+        var nodeService = scope.ServiceProvider.GetRequiredService<NodeService>();
+
+        var ips = blocklistIpRepo
+            .Get()
+            .Select(x => x.Ip)
+            .ToArray();
+        
+        foreach (var node in nodeRepo.Get().ToArray())
+        {
+            try
+            {
+                await nodeService.RebuildFirewall(node, ips);
+            }
+            catch (Exception e)
+            {
+                Logger.Warn($"Error rebuilding firewall on node {node.Name}");
+                Logger.Warn(e);
+            }
+        }
+    }
+
+    public async Task ProcessDdosSignal(string ip, long packets)
+    {
+        using var scope = ServiceScopeFactory.CreateScope();
+
+        var blocklistRepo = scope.ServiceProvider.GetRequiredService<Repository<BlocklistIp>>();
+        var whitelistRepo = scope.ServiceProvider.GetRequiredService<Repository<WhitelistIp>>();
+
+        var whitelistIps = whitelistRepo.Get().ToArray();
+        
+        if(whitelistIps.Any(x => x.Ip == ip))
+            return;
+
+        var blocklistIps = blocklistRepo.Get().ToArray();
+        
+        if(blocklistIps.Any(x => x.Ip == ip))
+            return;
+
+        await BlocklistIp(ip, packets);
+    }
+
+    public async Task BlocklistIp(string ip, long packets)
+    {
+        using var scope = ServiceScopeFactory.CreateScope();
+        var blocklistRepo = scope.ServiceProvider.GetRequiredService<Repository<BlocklistIp>>();
+        var configService = scope.ServiceProvider.GetRequiredService<ConfigService>();
+        var eventSystem = scope.ServiceProvider.GetRequiredService<EventSystem>();
+        
+        var blocklistIp = blocklistRepo.Add(new()
+        {
+            Ip = ip,
+            Packets = packets,
+            ExpiresAt = DateTime.UtcNow.AddMinutes(configService.Get().Moonlight.Security.BlockIpDuration),
+            CreatedAt = DateTime.UtcNow
+        });
+
+        await RebuildNodeFirewalls();
+        await eventSystem.Emit("ddos.add", blocklistIp);
+    }
+
+    public async Task UnBlocklistIp(string ip)
+    {
+        using var scope = ServiceScopeFactory.CreateScope();
+        var blocklistRepo = scope.ServiceProvider.GetRequiredService<Repository<BlocklistIp>>();
+
+        var blocklist = blocklistRepo.Get().First(x => x.Ip == ip);
+        blocklistRepo.Delete(blocklist);
+
+        await RebuildNodeFirewalls();
+    }
+}

Moonlight/App/Services/Background/DiscordNotificationService.cs

@@ -31,10 +31,11 @@ public class DiscordNotificationService
             Client = new(config.WebHook);
             AppUrl = configService.Get().Moonlight.AppUrl;
 
-            Event.On<User>("supportChat.new", this, OnNewSupportChat);
-            Event.On<SupportChatMessage>("supportChat.message", this, OnSupportChatMessage);
-            Event.On<User>("supportChat.close", this, OnSupportChatClose);
+            Event.On<Ticket>("tickets.new", this, OnNewTicket);
+            Event.On<Ticket>("tickets.status", this, OnTicketStatusUpdated);
             Event.On<User>("user.rating", this, OnUserRated);
+            Event.On<User>("billing.completed", this, OnBillingCompleted);
+            Event.On<BlocklistIp>("ddos.add", this, OnIpBlockListed);
         }
         else
         {
@@ -42,6 +43,51 @@ public class DiscordNotificationService
         }
     }
 
+    private async Task OnTicketStatusUpdated(Ticket ticket)
+    {
+        await SendNotification("", builder =>
+        {
+            builder.Title = "Ticket status has been updated";
+            builder.AddField("Issue topic", ticket.IssueTopic);
+            builder.AddField("Status", ticket.Status);
+
+            if (ticket.AssignedTo != null)
+            {
+                builder.AddField("Assigned to", $"{ticket.AssignedTo.FirstName} {ticket.AssignedTo.LastName}");
+            }
+            
+            builder.Color = Color.Green;
+            builder.Url = $"{AppUrl}/admin/support/view/{ticket.Id}";
+        });
+    }
+
+    private async Task OnIpBlockListed(BlocklistIp blocklistIp)
+    {
+        await SendNotification("", builder =>
+        {
+            builder.Color = Color.Red;
+            builder.Title = "New ddos attack detected";
+
+            builder.AddField("IP", blocklistIp.Ip);
+            builder.AddField("Packets", blocklistIp.Packets);
+        });
+    }
+
+    private async Task OnBillingCompleted(User user)
+    {
+        await SendNotification("", builder =>
+        {
+            builder.Color = Color.Red;
+            builder.Title = "New payment received";
+
+            builder.AddField("User", user.Email);
+            builder.AddField("Firstname", user.FirstName);
+            builder.AddField("Lastname", user.LastName);
+            builder.AddField("Amount", user.CurrentSubscription!.Price);
+            builder.AddField("Currency", user.CurrentSubscription!.Currency);
+        });
+    }
+
     private async Task OnUserRated(User user)
     {
         await SendNotification("", builder =>
@@ -56,46 +102,14 @@ public class DiscordNotificationService
         });
     }
 
-    private async Task OnSupportChatClose(User user)
+    private async Task OnNewTicket(Ticket ticket)
     {
         await SendNotification("", builder =>
         {
-            builder.Title = "A new support chat has been marked as closed";
-            builder.Color = Color.Red;
-            builder.AddField("Email", user.Email);
-            builder.AddField("Firstname", user.FirstName);
-            builder.AddField("Lastname", user.LastName);
-            builder.Url = $"{AppUrl}/admin/support/view/{user.Id}";
-        });
-    }
-
-    private async Task OnSupportChatMessage(SupportChatMessage message)
-    {
-        if(message.Sender == null)
-            return;
-        
-        await SendNotification("", builder =>
-        {
-            builder.Title = "New message in support chat";
-            builder.Color = Color.Blue;
-            builder.AddField("Message", message.Content);
-            builder.Author = new EmbedAuthorBuilder()
-                .WithName($"{message.Sender.FirstName} {message.Sender.LastName}")
-                .WithIconUrl(ResourceService.Avatar(message.Sender));
-            builder.Url = $"{AppUrl}/admin/support/view/{message.Recipient.Id}";
-        });
-    }
-
-    private async Task OnNewSupportChat(User user)
-    {
-        await SendNotification("", builder =>
-        {
-            builder.Title = "A new support chat has been marked as active";
+            builder.Title = "A new ticket has been created";
+            builder.AddField("Issue topic", ticket.IssueTopic);
             builder.Color = Color.Green;
-            builder.AddField("Email", user.Email);
-            builder.AddField("Firstname", user.FirstName);
-            builder.AddField("Lastname", user.LastName);
-            builder.Url = $"{AppUrl}/admin/support/view/{user.Id}";
+            builder.Url = $"{AppUrl}/admin/support/view/{ticket.Id}";
         });
     }
 

Moonlight/App/Services/Background/MalwareScanService.cs

@@ -19,6 +19,7 @@ public class MalwareScanService
     private readonly IServiceScopeFactory ServiceScopeFactory;
     
     public bool IsRunning { get; private set; }
+    public bool ScanAllServers { get; set; }
     public readonly Dictionary<Server, MalwareScanResult[]> ScanResults;
     public string Status { get; private set; } = "N/A";
 
@@ -26,7 +27,6 @@ public class MalwareScanService
     {
         ServiceScopeFactory = serviceScopeFactory;
         Event = eventSystem;
-
         ScanResults = new();
     }
 
@@ -42,6 +42,7 @@ public class MalwareScanService
 
     private async Task Run()
     {
+        // Clean results
         IsRunning = true;
         Status = "Clearing last results";
         await Event.Emit("malwareScan.status", IsRunning);
@@ -53,6 +54,55 @@ public class MalwareScanService
         
         await Event.Emit("malwareScan.result");
         
+        // Load servers to scan
+        
+        using var scope = ServiceScopeFactory.CreateScope();
+        
+        // Load services from di scope
+        NodeRepository = scope.ServiceProvider.GetRequiredService<Repository<Node>>();
+        ServerRepository = scope.ServiceProvider.GetRequiredService<Repository<Server>>();
+        NodeService = scope.ServiceProvider.GetRequiredService<NodeService>();
+        ServerService = scope.ServiceProvider.GetRequiredService<ServerService>();
+        
+        Status = "Fetching servers to scan";
+        await Event.Emit("malwareScan.status", IsRunning);
+        
+        Server[] servers;
+
+        if (ScanAllServers)
+            servers = ServerRepository.Get().ToArray();
+        else
+            servers = await GetOnlineServers();
+        
+        // Perform scan
+
+        int i = 1;
+        foreach (var server in servers)
+        {
+            Status = $"[{i} / {servers.Length}] Scanning server {server.Name}";
+            await Event.Emit("malwareScan.status", IsRunning);
+            
+            var results = await PerformScanOnServer(server);
+
+            if (results.Any())
+            {
+                lock (ScanResults)
+                {
+                    ScanResults.Add(server, results);
+                }
+                
+                await Event.Emit("malwareScan.result");
+            }
+
+            i++;
+        }
+
+        IsRunning = false;
+        await Event.Emit("malwareScan.status", IsRunning);
+    }
+
+    private async Task<Server[]> GetOnlineServers()
+    {
         using var scope = ServiceScopeFactory.CreateScope();
         
         // Load services from di scope
@@ -102,43 +152,11 @@ public class MalwareScanService
                 containerServerMapped.Add(server, container);
             }
         }
-        
-        // Perform scan
-        var resultsMapped = new Dictionary<Server, MalwareScanResult[]>();
-        foreach (var mapping in containerServerMapped)
-        {
-            Logger.Verbose($"Scanning server {mapping.Key.Name} for malware");
-            
-            Status = $"Scanning server {mapping.Key.Name} for malware";
-            await Event.Emit("malwareScan.status", IsRunning);
-            
-            var results = await PerformScanOnServer(mapping.Key, mapping.Value);
 
-            if (results.Any())
-            {
-                resultsMapped.Add(mapping.Key, results);
-                Logger.Verbose($"{results.Length} findings on server {mapping.Key.Name}");
-            }
-        }
-        
-        Logger.Verbose($"Scan complete. Detected {resultsMapped.Count} servers with findings");
-        
-        IsRunning = false;
-        Status = $"Scan complete. Detected {resultsMapped.Count} servers with findings";
-        await Event.Emit("malwareScan.status", IsRunning);
-
-        lock (ScanResults)
-        {
-            foreach (var mapping in resultsMapped)
-            {
-                ScanResults.Add(mapping.Key, mapping.Value);
-            }
-        }
-        
-        await Event.Emit("malwareScan.result");
+        return containerServerMapped.Keys.ToArray();
     }
 
-    private async Task<MalwareScanResult[]> PerformScanOnServer(Server server, Container container)
+    private async Task<MalwareScanResult[]> PerformScanOnServer(Server server)
     {
         var results = new List<MalwareScanResult>();
         
@@ -162,6 +180,29 @@ public class MalwareScanService
             }
         }
 
+        async Task ScanMinerJar()
+        {
+            var access = await ServerService.CreateFileAccess(server, null!);
+            var fileElements = await access.Ls();
+
+            if (fileElements.Any(x => x.Name == "libraries" && !x.IsFile))
+            {
+                await access.Cd("libraries");
+                
+                fileElements = await access.Ls();
+
+                if (fileElements.Any(x => x.Name == "jdk" && !x.IsFile))
+                {
+                    results.Add(new ()
+                    {
+                        Title = "Found Miner",
+                        Description = "Detected suspicious library directory which may contain a script for miners",
+                        Author = "Marcel Baumgartner"
+                    });
+                }
+            }
+        }
+
         async Task ScanFakePlayerPlugins()
         {
             var access = await ServerService.CreateFileAccess(server, null!);
@@ -190,6 +231,7 @@ public class MalwareScanService
         // Execute scans
         await ScanSelfBot();
         await ScanFakePlayerPlugins();
+        await ScanMinerJar();
 
         return results.ToArray();
     }

Moonlight/App/Services/Background/TempMailService.cs

@@ -0,0 +1,37 @@
+using System.Net.Mail;
+using Moonlight.App.Helpers;
+
+namespace Moonlight.App.Services.Background;
+
+public class TempMailService
+{
+    private string[] Domains = Array.Empty<string>();
+
+    public TempMailService()
+    {
+        Task.Run(Init);
+    }
+
+    private async Task Init()
+    {
+        var client = new HttpClient();
+        var text = await client.GetStringAsync("https://raw.githubusercontent.com/disposable-email-domains/disposable-email-domains/master/disposable_email_blocklist.conf");
+
+        Domains = text
+            .Split("\n")
+            .Select(x => x.Trim())
+            .ToArray();
+        
+        Logger.Info($"Fetched {Domains.Length} temp mail domains");
+    }
+
+    public Task<bool> IsTempMail(string mail)
+    {
+        var address = new MailAddress(mail);
+
+        if (Domains.Contains(address.Host))
+            return Task.FromResult(true);
+
+        return Task.FromResult(false);
+    }
+}

Moonlight/App/Services/BillingService.cs

@@ -0,0 +1,127 @@
+using System.Globalization;
+using Moonlight.App.Database.Entities;
+using Moonlight.App.Events;
+using Moonlight.App.Exceptions;
+using Moonlight.App.Repositories;
+using Moonlight.App.Services.Mail;
+using Moonlight.App.Services.Sessions;
+using Stripe.Checkout;
+using Subscription = Moonlight.App.Database.Entities.Subscription;
+
+namespace Moonlight.App.Services;
+
+public class BillingService
+{
+    private readonly ConfigService ConfigService;
+    private readonly SubscriptionService SubscriptionService;
+    private readonly Repository<Subscription> SubscriptionRepository;
+    private readonly SessionServerService SessionServerService;
+    private readonly EventSystem Event;
+    private readonly MailService MailService;
+
+    public BillingService(
+        ConfigService configService,
+        SubscriptionService subscriptionService,
+        Repository<Subscription> subscriptionRepository,
+        EventSystem eventSystem,
+        SessionServerService sessionServerService,
+        MailService mailService)
+    {
+        ConfigService = configService;
+        SubscriptionService = subscriptionService;
+        SubscriptionRepository = subscriptionRepository;
+        Event = eventSystem;
+        SessionServerService = sessionServerService;
+        MailService = mailService;
+    }
+
+    public async Task<string> StartCheckout(User user, Subscription subscription)
+    {
+        var appUrl = ConfigService.Get().Moonlight.AppUrl;
+        var controllerUrl = appUrl + "/api/moonlight/billing";
+        
+        var options = new SessionCreateOptions()
+        {
+            LineItems = new()
+            {
+                new()
+                {
+                    Price = subscription.StripePriceId,
+                    Quantity = 1
+                }
+            },
+            Mode = "payment",
+            SuccessUrl = controllerUrl + "/success",
+            CancelUrl = controllerUrl + "/cancel",
+            AutomaticTax = new SessionAutomaticTaxOptions()
+            {
+                Enabled = true
+            },
+            CustomerEmail = user.Email.ToLower(),
+            Metadata = new()
+            {
+                {
+                    "productId",
+                    subscription.StripeProductId
+                }
+            }
+        };
+
+        var service = new SessionService();
+
+        var session = await service.CreateAsync(options);
+
+        return session.Url;
+    }
+    public async Task CompleteCheckout(User user)
+    {
+        var sessionService = new SessionService();
+
+        var sessionsPerUser = await sessionService.ListAsync(new SessionListOptions()
+        {
+            CustomerDetails = new()
+            {
+                Email = user.Email
+            }
+        });
+
+        var latestCompletedSession = sessionsPerUser
+            .Where(x => x.Status == "complete")
+            .Where(x => x.PaymentStatus == "paid")
+            .MaxBy(x => x.Created);
+
+        if (latestCompletedSession == null)
+            throw new DisplayException("No completed session found");
+
+        var productId = latestCompletedSession.Metadata["productId"];
+
+        var subscription = SubscriptionRepository
+            .Get()
+            .FirstOrDefault(x => x.StripeProductId == productId);
+
+        if (subscription == null)
+            throw new DisplayException("No subscription for this product found");
+
+        // if (await SubscriptionService.GetActiveSubscription(user) != null)
+        // {
+        //     return;
+        // }
+
+        await SubscriptionService.SetActiveSubscription(user, subscription);
+
+        await MailService.SendMail(user, "checkoutComplete", values =>
+        {
+            values.Add("SubscriptionName", subscription.Name);
+            values.Add("SubscriptionPrice", subscription.Price
+                .ToString(CultureInfo.InvariantCulture));
+            values.Add("SubscriptionCurrency", subscription.Currency
+                .ToString());
+            values.Add("SubscriptionDuration", subscription.Duration
+                .ToString(CultureInfo.InvariantCulture));
+        });
+        
+        await Event.Emit("billing.completed", user);
+
+        await SessionServerService.ReloadUserSessions(user);
+    }
+}

Moonlight/App/Services/ConfigService.cs

@@ -8,6 +8,7 @@ namespace Moonlight.App.Services;
 public class ConfigService
 {
     private readonly StorageService StorageService;
+    private readonly string Path;
     private ConfigV1 Configuration;
 
     public bool DebugMode { get; private set; } = false;
@@ -18,6 +19,11 @@ public class ConfigService
         StorageService = storageService;
         StorageService.EnsureCreated();
 
+        if (!string.IsNullOrEmpty(Environment.GetEnvironmentVariable("ML_CONFIG_PATH")))
+            Path = Environment.GetEnvironmentVariable("ML_CONFIG_PATH")!;
+        else
+            Path = PathBuilder.File("storage", "configs", "config.json");
+
         Reload();
 
         // Env vars
@@ -40,18 +46,16 @@ public class ConfigService
 
     public void Reload()
     {
-        var path = PathBuilder.File("storage", "configs", "config.json");
-        
-        if (!File.Exists(path))
+        if (!File.Exists(Path))
         {
-            File.WriteAllText(path, "{}");
+            File.WriteAllText(Path, "{}");
         }
 
         Configuration = JsonConvert.DeserializeObject<ConfigV1>(
-            File.ReadAllText(path)
+            File.ReadAllText(Path)
         ) ?? new ConfigV1();
         
-        File.WriteAllText(path, JsonConvert.SerializeObject(Configuration, Formatting.Indented));
+        File.WriteAllText(Path, JsonConvert.SerializeObject(Configuration, Formatting.Indented));
     }
 
     public void Save(ConfigV1 configV1)
@@ -62,14 +66,12 @@ public class ConfigService
 
     public void Save()
     {
-        var path = PathBuilder.File("storage", "configs", "config.json");
-        
-        if (!File.Exists(path))
+        if (!File.Exists(Path))
         {
-            File.WriteAllText(path, "{}");
+            File.WriteAllText(Path, "{}");
         }
         
-        File.WriteAllText(path, JsonConvert.SerializeObject(Configuration, Formatting.Indented));
+        File.WriteAllText(Path, JsonConvert.SerializeObject(Configuration, Formatting.Indented));
         
         Reload();
     }

Moonlight/App/Services/DomainService.cs

@@ -160,7 +160,7 @@ public class DomainService
                     Type = record.Type
                 });
             }
-            else if (record.Name.EndsWith(rname))
+            else if (record.Name == rname)
             {
                 result.Add(new()
                 {
@@ -182,59 +182,70 @@ public class DomainService
     {
         if (!ConfigService.Get().Moonlight.Domains.Enable)
             throw new DisplayException("This operation is disabled");
-        
-        var domain = EnsureData(d);
 
-        var rname = $"{domain.Name}.{domain.SharedDomain.Name}";
-        var dname = $".{rname}";
-
-        if (dnsRecord.Type == DnsRecordType.Srv)
+        try
         {
-            var parts = dnsRecord.Name.Split(".");
+            var domain = EnsureData(d);
 
-            Protocol protocol = Protocol.Tcp;
+            var rname = $"{domain.Name}.{domain.SharedDomain.Name}";
+            var dname = $".{rname}";
 
-            if (parts[1].Contains("udp"))
-                protocol = Protocol.Udp;
-
-            var valueParts = dnsRecord.Content.Split(" ");
-
-            var nameWithoutProt = dnsRecord.Name.Replace($"{parts[0]}.{parts[1]}.", "");
-            nameWithoutProt = nameWithoutProt.Replace($"{parts[0]}.{parts[1]}", "");
-            var name = nameWithoutProt == "" ? rname : nameWithoutProt + dname;
-
-            var srv = new NewDnsRecord<Srv>()
+            if (dnsRecord.Type == DnsRecordType.Srv)
             {
-                Type = dnsRecord.Type,
-                Data = new()
+                var parts = dnsRecord.Name.Split(".");
+
+                Protocol protocol = Protocol.Tcp;
+
+                if (parts[1].Contains("udp"))
+                    protocol = Protocol.Udp;
+
+                var valueParts = dnsRecord.Content.Split(" ");
+
+                var nameWithoutProt = dnsRecord.Name.Replace($"{parts[0]}.{parts[1]}.", "");
+                nameWithoutProt = nameWithoutProt.Replace($"{parts[0]}.{parts[1]}", "");
+                var name = nameWithoutProt == "" ? rname : nameWithoutProt + dname;
+
+                var srv = new NewDnsRecord<Srv>()
                 {
-                    Service = parts[0],
-                    Protocol = protocol,
-                    Name = name,
-                    Weight = int.Parse(valueParts[0]),
-                    Port = int.Parse(valueParts[1]),
-                    Target = valueParts[2],
-                    Priority = dnsRecord.Priority
-                },
-                Proxied = dnsRecord.Proxied,
-                Ttl = dnsRecord.Ttl,
-            };
+                    Type = dnsRecord.Type,
+                    Data = new()
+                    {
+                        Service = parts[0],
+                        Protocol = protocol,
+                        Name = name,
+                        Weight = int.Parse(valueParts[0]),
+                        Port = int.Parse(valueParts[1]),
+                        Target = valueParts[2],
+                        Priority = dnsRecord.Priority
+                    },
+                    Proxied = dnsRecord.Proxied,
+                    Ttl = dnsRecord.Ttl,
+                };
 
-            GetData(await Client.Zones.DnsRecords.AddAsync(d.SharedDomain.CloudflareId, srv));
-        }
-        else
-        {
-            var name = string.IsNullOrEmpty(dnsRecord.Name) ? rname : dnsRecord.Name + dname;
-
-            GetData(await Client.Zones.DnsRecords.AddAsync(d.SharedDomain.CloudflareId, new NewDnsRecord()
+                GetData(await Client.Zones.DnsRecords.AddAsync(d.SharedDomain.CloudflareId, srv));
+            }
+            else
             {
-                Type = dnsRecord.Type,
-                Priority = dnsRecord.Priority,
-                Content = dnsRecord.Content,
-                Proxied = dnsRecord.Proxied,
-                Ttl = dnsRecord.Ttl,
-                Name = name
-            }));
+                var name = string.IsNullOrEmpty(dnsRecord.Name) ? rname : dnsRecord.Name + dname;
+
+                GetData(await Client.Zones.DnsRecords.AddAsync(d.SharedDomain.CloudflareId, new NewDnsRecord()
+                {
+                    Type = dnsRecord.Type,
+                    Priority = dnsRecord.Priority,
+                    Content = dnsRecord.Content,
+                    Proxied = dnsRecord.Proxied,
+                    Ttl = dnsRecord.Ttl,
+                    Name = name
+                }));
+            }
+        }
+        catch (OverflowException)
+        {
+            throw new DisplayException("Invalid dns record values");
+        }
+        catch (FormatException)
+        {
+            throw new DisplayException("Invalid dns record values");
         }
 
         //TODO: AuditLog

Moonlight/App/Services/Files/StorageService.cs

@@ -16,6 +16,7 @@ public class StorageService
         Directory.CreateDirectory(PathBuilder.Dir("storage", "resources"));
         Directory.CreateDirectory(PathBuilder.Dir("storage", "backups"));
         Directory.CreateDirectory(PathBuilder.Dir("storage", "logs"));
+        Directory.CreateDirectory(PathBuilder.Dir("storage", "plugins"));
         
         if(IsEmpty(PathBuilder.Dir("storage", "resources")))
         {

Moonlight/App/Services/Interop/PopupService.cs

@@ -0,0 +1,18 @@
+using Microsoft.JSInterop;
+
+namespace Moonlight.App.Services.Interop;
+
+public class PopupService
+{
+    private readonly IJSRuntime JsRuntime;
+
+    public PopupService(IJSRuntime jsRuntime)
+    {
+        JsRuntime = jsRuntime;
+    }
+
+    public async Task ShowCentered(string url, string title, int width = 500, int height = 500)
+    {
+        await JsRuntime.InvokeVoidAsync("moonlight.popup.showCentered", url, title, width, height);
+    }
+}

Moonlight/App/Services/Mail/MailService.cs

@@ -2,6 +2,7 @@
 using Moonlight.App.Database.Entities;
 using Moonlight.App.Exceptions;
 using Moonlight.App.Helpers;
+using Moonlight.App.Repositories;
 using SmtpClient = MailKit.Net.Smtp.SmtpClient;
 
 namespace Moonlight.App.Services.Mail;
@@ -14,8 +15,14 @@ public class MailService
     private readonly int Port;
     private readonly bool Ssl;
 
-    public MailService(ConfigService configService)
+    private readonly Repository<User> UserRepository;
+
+    public MailService(
+        ConfigService configService,
+        Repository<User> userRepository)
     {
+        UserRepository = userRepository;
+        
         var mailConfig = configService
             .Get()
             .Moonlight.Mail;
@@ -26,29 +33,9 @@ public class MailService
         Port = mailConfig.Port;
         Ssl = mailConfig.Ssl;
     }
-    
-    public async Task SendMail(
-        User user,
-        string name,
-        Action<Dictionary<string, string>> values
-    )
+
+    public Task SendMailRaw(User user, string html)
     {
-        if (!File.Exists(PathBuilder.File("storage", "resources", "mail", $"{name}.html")))
-        {
-            Logger.Warn($"Mail template '{name}' not found. Make sure to place one in the resources folder");
-            throw new DisplayException("Mail template not found");
-        }
-
-        var rawHtml = await File.ReadAllTextAsync(PathBuilder.File("storage", "resources", "mail", $"{name}.html"));
-
-        var val = new Dictionary<string, string>();
-        values.Invoke(val);
-        
-        val.Add("FirstName", user.FirstName);
-        val.Add("LastName", user.LastName);
-
-        var parsed = ParseMail(rawHtml, val);
-
         Task.Run(async () =>
         {
             try
@@ -62,17 +49,15 @@ public class MailService
                 
                 var body = new BodyBuilder
                 {
-                    HtmlBody = parsed
+                    HtmlBody = html
                 };
                 mailMessage.Body = body.ToMessageBody();
 
-                using (var smtpClient = new SmtpClient())
-                {
-                    await smtpClient.ConnectAsync(Server, Port, Ssl);
-                    await smtpClient.AuthenticateAsync(Email, Password);
-                    await smtpClient.SendAsync(mailMessage);
-                    await smtpClient.DisconnectAsync(true);
-                }
+                using var smtpClient = new SmtpClient();
+                await smtpClient.ConnectAsync(Server, Port, Ssl);
+                await smtpClient.AuthenticateAsync(Email, Password);
+                await smtpClient.SendAsync(mailMessage);
+                await smtpClient.DisconnectAsync(true);
             }
             catch (Exception e)
             {
@@ -80,6 +65,54 @@ public class MailService
                 Logger.Warn(e);
             }
         });
+        
+        return Task.CompletedTask;
+    }
+    
+    public async Task SendMail(User user, string template, Action<Dictionary<string, string>> values)
+    {
+        if (!File.Exists(PathBuilder.File("storage", "resources", "mail", $"{template}.html")))
+        {
+            Logger.Warn($"Mail template '{template}' not found. Make sure to place one in the resources folder");
+            throw new DisplayException("Mail template not found");
+        }
+
+        var rawHtml = await File.ReadAllTextAsync(PathBuilder.File("storage", "resources", "mail", $"{template}.html"));
+
+        var val = new Dictionary<string, string>();
+        values.Invoke(val);
+        
+        val.Add("FirstName", user.FirstName);
+        val.Add("LastName", user.LastName);
+
+        var parsed = ParseMail(rawHtml, val);
+
+        await SendMailRaw(user, parsed);
+    }
+
+    public async Task SendEmailToAll(string template, Action<Dictionary<string, string>> values)
+    {
+        var users = UserRepository
+            .Get()
+            .ToArray();
+
+        foreach (var user in users)
+        {
+            await SendMail(user, template, values);
+        }
+    }
+
+    public async Task SendEmailToAllAdmins(string template, Action<Dictionary<string, string>> values)
+    {
+        var users = UserRepository
+            .Get()
+            .Where(x => x.Admin)
+            .ToArray();
+
+        foreach (var user in users)
+        {
+            await SendMail(user, template, values);
+        }
     }
 
     private string ParseMail(string html, Dictionary<string, string> values)

Moonlight/App/Services/Mail/TrashMailDetectorService.cs

@@ -1,46 +0,0 @@
-using System.Net;
-using Moonlight.App.Helpers;
-
-namespace Moonlight.App.Services.Mail;
-
-public class TrashMailDetectorService
-{
-    private string[] Domains;
-    
-    public TrashMailDetectorService()
-    {
-        Logger.Info("Fetching trash mail list from github repository");
-        
-        using var wc = new WebClient();
-        
-        var lines = wc
-            .DownloadString("https://raw.githubusercontent.com/Endelon-Hosting/TrashMailDomainDetector/main/trashmail_domains.md")
-            .Replace("\r\n", "\n")
-            .Split(new [] { "\n" }, StringSplitOptions.RemoveEmptyEntries);
-
-        Domains = GetDomains(lines).ToArray();
-    }
-    
-    private IEnumerable<string> GetDomains(string[] lines)
-    {
-        foreach (var line in lines)
-        {
-            if (!string.IsNullOrWhiteSpace(line))
-            {
-                if (line.Contains("."))
-                {
-                    var domain = line.Remove(0, line.IndexOf(".", StringComparison.Ordinal) + 1).Trim();
-                    if (domain.Contains("."))
-                    {
-                        yield return domain;
-                    }
-                }
-            }
-        }
-    }
-    
-    public bool IsTrashEmail(string mail)
-    {
-        return Domains.Contains(mail.Split('@')[1]);
-    }
-}

Moonlight/App/Services/MoonlightService.cs

@@ -46,7 +46,7 @@ public class MoonlightService
 
         try
         {
-            var client = new GitHubClient(new ProductHeaderValue("Moonlight"));
+            var client = new GitHubClient(new ProductHeaderValue("Moonlight-Panel"));
             
             var pullRequests = await client.PullRequest.GetAllForRepository("Moonlight-Panel", "Moonlight", new PullRequestRequest
             {

Moonlight/App/Services/NodeService.cs

@@ -50,6 +50,11 @@ public class NodeService
         return await DaemonApiHelper.Get<DockerMetrics>(node, "metrics/docker");
     }
 
+    public async Task RebuildFirewall(Node node, string[] ips)
+    {
+        await DaemonApiHelper.Post(node, "firewall/rebuild", ips);
+    }
+
     public async Task Mount(Node node, string server, string serverPath, string path)
     {
         await DaemonApiHelper.Post(node, "mount", new Mount()

Moonlight/App/Services/Plugins/PluginService.cs

@@ -0,0 +1,100 @@
+using System.Reflection;
+using System.Runtime.Loader;
+using Moonlight.App.Helpers;
+using Moonlight.App.Plugin;
+using Moonlight.App.Plugin.UI.Servers;
+using Moonlight.App.Plugin.UI.Webspaces;
+
+namespace Moonlight.App.Services.Plugins;
+
+public class PluginService
+{
+    public readonly List<MoonlightPlugin> Plugins = new();
+    public readonly Dictionary<MoonlightPlugin, string> PluginFiles = new();
+
+    public PluginService()
+    {
+        ReloadPlugins().Wait();
+    }
+
+    public Task ReloadPlugins()
+    {
+        PluginFiles.Clear();
+        Plugins.Clear();
+        
+        // Try to update all plugins ending with .dll.cache
+        foreach (var pluginFile in Directory.EnumerateFiles(
+                         PathBuilder.Dir(Directory.GetCurrentDirectory(), "storage", "plugins"))
+                     .Where(x => x.EndsWith(".dll.cache")))
+        {
+            try
+            {
+                var realPath = pluginFile.Replace(".cache", "");
+                File.Copy(pluginFile, realPath, true);
+                File.Delete(pluginFile);
+                Logger.Info($"Updated plugin {realPath} on startup");
+            }
+            catch (Exception)
+            {
+                // ignored
+            }
+        }
+
+        var pluginType = typeof(MoonlightPlugin);
+        
+        foreach (var pluginFile in Directory.EnumerateFiles(
+                     PathBuilder.Dir(Directory.GetCurrentDirectory(), "storage", "plugins"))
+                     .Where(x => x.EndsWith(".dll")))
+        {
+            var assembly = Assembly.LoadFile(pluginFile);
+
+            foreach (var type in assembly.GetTypes())
+            {
+                if (type.IsSubclassOf(pluginType))
+                {
+                    var plugin = (Activator.CreateInstance(type) as MoonlightPlugin)!;
+                    
+                    Logger.Info($"Loaded plugin '{plugin.Name}' ({plugin.Version}) by {plugin.Author}");
+                    
+                    Plugins.Add(plugin);
+                    PluginFiles.Add(plugin, pluginFile);
+                }
+            }
+        }
+        
+        Logger.Info($"Loaded {Plugins.Count} plugins");
+        
+        return Task.CompletedTask;
+    }
+
+    public async Task<ServerPageContext> BuildServerPage(ServerPageContext context)
+    {
+        foreach (var plugin in Plugins)
+        {
+            if (plugin.OnBuildServerPage != null)
+                await plugin.OnBuildServerPage.Invoke(context);
+        }
+
+        return context;
+    }
+    
+    public async Task<WebspacePageContext> BuildWebspacePage(WebspacePageContext context)
+    {
+        foreach (var plugin in Plugins)
+        {
+            if (plugin.OnBuildWebspacePage != null)
+                await plugin.OnBuildWebspacePage.Invoke(context);
+        }
+
+        return context;
+    }
+
+    public async Task BuildServices(IServiceCollection serviceCollection)
+    {
+        foreach (var plugin in Plugins)
+        {
+            if (plugin.OnBuildServices != null)
+                await plugin.OnBuildServices.Invoke(serviceCollection);
+        }
+    }
+}

Moonlight/App/Services/Plugins/PluginStoreService.cs

@@ -0,0 +1,63 @@
+using System.Text;
+using Moonlight.App.Helpers;
+using Moonlight.App.Models.Misc;
+using Octokit;
+
+namespace Moonlight.App.Services.Plugins;
+
+public class PluginStoreService
+{
+    private readonly GitHubClient Client;
+    private readonly PluginService PluginService;
+
+    public PluginStoreService(PluginService pluginService)
+    {
+        PluginService = pluginService;
+        Client = new(new ProductHeaderValue("Moonlight-Panel"));
+    }
+
+    public async Task<OfficialMoonlightPlugin[]> GetPlugins()
+    {
+        var items = await Client.Repository.Content.GetAllContents("Moonlight-Panel", "OfficialPlugins");
+
+        if (items == null)
+        {
+            Logger.Fatal("Unable to read plugin repo contents");
+            return Array.Empty<OfficialMoonlightPlugin>();
+        }
+
+        return items
+            .Where(x => x.Type == ContentType.Dir)
+            .Select(x => new OfficialMoonlightPlugin()
+            {
+                Name = x.Name
+            })
+            .ToArray();
+    }
+
+    public async Task<string> GetPluginReadme(OfficialMoonlightPlugin plugin)
+    {
+        var rawReadme = await Client.Repository.Content
+            .GetRawContent("Moonlight-Panel", "OfficialPlugins", $"{plugin.Name}/README.md");
+
+        if (rawReadme == null)
+            return "Error";
+
+        return Encoding.UTF8.GetString(rawReadme);
+    }
+
+    public async Task InstallPlugin(OfficialMoonlightPlugin plugin, bool updating = false)
+    {
+        var rawPlugin = await Client.Repository.Content
+            .GetRawContent("Moonlight-Panel", "OfficialPlugins", $"{plugin.Name}/{plugin.Name}.dll");
+
+        if (updating)
+        {
+            await File.WriteAllBytesAsync(PathBuilder.File("storage", "plugins", $"{plugin.Name}.dll.cache"), rawPlugin);
+            return;
+        }
+        
+        await File.WriteAllBytesAsync(PathBuilder.File("storage", "plugins", $"{plugin.Name}.dll"), rawPlugin);
+        await PluginService.ReloadPlugins();
+    }
+}

Moonlight/App/Services/RatingService.cs

@@ -39,7 +39,7 @@ public class RatingService
         if (!Enabled)
             return false;
 
-        var user = await IdentityService.Get();
+        var user = IdentityService.User;
 
         if (user == null)
             return false;
@@ -62,7 +62,7 @@ public class RatingService
 
     public async Task<bool> Rate(int rate)
     {
-        var user = await IdentityService.Get();
+        var user = IdentityService.User;
         
         // Double check states:
         

Moonlight/App/Services/Sessions/IdentityService.cs

@@ -2,9 +2,10 @@
 using JWT.Algorithms;
 using JWT.Builder;
 using JWT.Exceptions;
+using Microsoft.EntityFrameworkCore;
 using Moonlight.App.Database.Entities;
 using Moonlight.App.Helpers;
-using Moonlight.App.Models.Misc;
+using Moonlight.App.Perms;
 using Moonlight.App.Repositories;
 using UAParser;
 
@@ -12,16 +13,21 @@ namespace Moonlight.App.Services.Sessions;
 
 public class IdentityService
 {
-    private readonly UserRepository UserRepository;
+    private readonly Repository<User> UserRepository;
     private readonly CookieService CookieService;
     private readonly IHttpContextAccessor HttpContextAccessor;
     private readonly string Secret;
-    
-    private User? UserCache;
+
+    public User User { get; private set; }
+    public string Ip { get; private set; } = "N/A";
+    public string Device { get; private set; } = "N/A";
+    public PermissionStorage Permissions { get; private set; }
+    public PermissionStorage UserPermissions { get; private set; }
+    public PermissionStorage GroupPermissions { get; private set; }
 
     public IdentityService(
         CookieService cookieService,
-        UserRepository userRepository,
+        Repository<User> userRepository,
         IHttpContextAccessor httpContextAccessor,
         ConfigService configService)
     {
@@ -34,13 +40,17 @@ public class IdentityService
             .Moonlight.Security.Token;
     }
 
-    public async Task<User?> Get()
+    public async Task Load()
+    {
+        await LoadIp();
+        await LoadDevice();
+        await LoadUser();
+    }
+
+    private async Task LoadUser()
     {
         try
         {
-            if (UserCache != null)
-                return UserCache;
-
             var token = "none";
 
             // Load token via http context if available
@@ -60,13 +70,13 @@ public class IdentityService
 
             if (token == "none")
             {
-                return null;
+                return;
             }
 
             if (string.IsNullOrEmpty(token))
-                return null;
+                return;
 
-            var json = "";
+            string json;
 
             try
             {
@@ -77,18 +87,18 @@ public class IdentityService
             }
             catch (TokenExpiredException)
             {
-                return null;
+                return;
             }
             catch (SignatureVerificationException)
             {
                 Logger.Warn($"Detected a manipulated JWT: {token}", "security");
-                return null;
+                return;
             }
             catch (Exception e)
             {
                 Logger.Error("Error reading jwt");
                 Logger.Error(e);
-                return null;
+                return;
             }
 
             // To make it easier to use the json data
@@ -101,8 +111,9 @@ public class IdentityService
 
             if (user == null)
             {
-                Logger.Warn($"Cannot find user with the id '{userid}' in the database. Maybe the user has been deleted or a token has been successfully faked by a hacker");
-                return null;
+                Logger.Warn(
+                    $"Cannot find user with the id '{userid}' in the database. Maybe the user has been deleted or a token has been successfully faked by a hacker", "security");
+                return;
             }
 
             var iat = data.GetValue<long>("iat", -1);
@@ -110,46 +121,54 @@ public class IdentityService
             if (iat == -1)
             {
                 Logger.Debug("Legacy token found (without the time the token has been issued at)");
-                return null;
+                return;
             }
 
             var iatD = DateTimeOffset.FromUnixTimeSeconds(iat).ToUniversalTime().DateTime;
-            
+
             if (iatD < user.TokenValidTime)
-                return null;
+                return;
 
-            UserCache = user;
+            User = user;
 
-            user.LastIp = GetIp();
-            UserRepository.Update(user);
-            
-            return UserCache;
+            ConstructPermissions();
+
+            User.LastIp = Ip;
+            UserRepository.Update(User);
         }
         catch (Exception e)
         {
             Logger.Error("Unexpected error while processing token");
             Logger.Error(e);
-            return null;
+            return;
         }
     }
 
-    public string GetIp()
+    private Task LoadIp()
     {
         if (HttpContextAccessor.HttpContext == null)
-            return "N/A";
-
-        if(HttpContextAccessor.HttpContext.Request.Headers.ContainsKey("X-Real-IP"))
         {
-            return HttpContextAccessor.HttpContext.Request.Headers["X-Real-IP"]!;
+            Ip = "N/A";
+            return Task.CompletedTask;
         }
-        
-        return HttpContextAccessor.HttpContext.Connection.RemoteIpAddress!.ToString();
+
+        if (HttpContextAccessor.HttpContext.Request.Headers.ContainsKey("X-Real-IP"))
+        {
+            Ip = HttpContextAccessor.HttpContext.Request.Headers["X-Real-IP"]!;
+            return Task.CompletedTask;
+        }
+
+        Ip = HttpContextAccessor.HttpContext.Connection.RemoteIpAddress!.ToString();
+        return Task.CompletedTask;
     }
 
-    public string GetDevice()
+    private Task LoadDevice()
     {
         if (HttpContextAccessor.HttpContext == null)
-            return "N/A";
+        {
+            Device = "N/A";
+            return Task.CompletedTask;
+        }
 
         try
         {
@@ -159,17 +178,86 @@ public class IdentityService
             {
                 var version = userAgent.Remove(0, "Moonlight.App/".Length).Split(' ').FirstOrDefault();
 
-                return "Moonlight App " + version;
+                Device = "Moonlight App " + version;
+                return Task.CompletedTask;
             }
-            
+
             var uaParser = Parser.GetDefault();
             var info = uaParser.Parse(userAgent);
 
-            return $"{info.OS} - {info.Device}";
+            Device = $"{info.OS} - {info.Device}";
+            return Task.CompletedTask;
         }
         catch (Exception e)
         {
-            return "UserAgent not present";
+            Device = "UserAgent not present";
+            return Task.CompletedTask;
         }
     }
+
+    public Task SavePermissions()
+    {
+        if (User != null)
+        {
+            User.Permissions = UserPermissions.Data;
+            UserRepository.Update(User);
+            ConstructPermissions();
+        }
+
+        return Task.CompletedTask;
+    }
+
+    private void ConstructPermissions()
+    {
+        if (User == null)
+        {
+            UserPermissions = new(Array.Empty<byte>());
+            GroupPermissions = new(Array.Empty<byte>(), true);
+            Permissions = new(Array.Empty<byte>(), true);
+
+            return;
+        }
+
+        var user = UserRepository
+            .Get()
+            .Include(x => x.PermissionGroup)
+            .First(x => x.Id == User.Id);
+
+        UserPermissions = new PermissionStorage(user.Permissions);
+
+        if (user.PermissionGroup == null)
+            GroupPermissions = new PermissionStorage(Array.Empty<byte>(), true);
+        else
+            GroupPermissions = new PermissionStorage(user.PermissionGroup.Permissions, true);
+
+        if (user.Admin)
+        {
+            Permissions = new PermissionStorage(Array.Empty<byte>());
+
+            foreach (var permission in Perms.Permissions.GetAllPermissions())
+            {
+                Permissions[permission] = true;
+            }
+
+            Permissions.IsReadyOnly = true;
+            return;
+        }
+
+        Permissions = new(Array.Empty<byte>());
+
+        foreach (var permission in Perms.Permissions.GetAllPermissions())
+        {
+            Permissions[permission] = GroupPermissions[permission];
+        }
+
+        foreach (var permission in Perms.Permissions.GetAllPermissions())
+        {
+            if (UserPermissions[permission])
+            {
+                Permissions[permission] = true;
+            }
+        }
+
+        Permissions.IsReadyOnly = true;
+    }
 }

Moonlight/App/Services/Sessions/IpBanService.cs

@@ -19,7 +19,7 @@ public class IpBanService
 
     public Task<bool> IsBanned()
     {
-        var ip = IdentityService.GetIp();
+        var ip = IdentityService.Ip;
 
         return Task.FromResult(
             IpBanRepository

Moonlight/App/Services/Sessions/IpLocateService.cs

@@ -15,7 +15,7 @@ public class IpLocateService
 
     public async Task<string> GetLocation()
     {
-        var ip = IdentityService.GetIp();
+        var ip = IdentityService.Ip;
         var location = "N/A";
 
         if (ip != "N/A")

Moonlight/App/Services/Sessions/SessionClientService.cs

@@ -40,9 +40,9 @@ public class SessionClientService
 
     public async Task Start()
     {
-        User = await IdentityService.Get();
-        Ip = IdentityService.GetIp();
-        Device = IdentityService.GetDevice();
+        User = IdentityService.User;
+        Ip = IdentityService.Ip;
+        Device = IdentityService.Device;
 
         if (User != null) // Track users last visit
         {

Moonlight/App/Services/SubscriptionAdminService.cs

@@ -1,45 +0,0 @@
-using Moonlight.App.Database.Entities;
-using Moonlight.App.Models.Misc;
-using Moonlight.App.Repositories;
-using Newtonsoft.Json;
-
-namespace Moonlight.App.Services;
-
-public class SubscriptionAdminService
-{
-    private readonly SubscriptionRepository SubscriptionRepository;
-    private readonly OneTimeJwtService OneTimeJwtService;
-
-    public SubscriptionAdminService(OneTimeJwtService oneTimeJwtService, SubscriptionRepository subscriptionRepository)
-    {
-        OneTimeJwtService = oneTimeJwtService;
-        SubscriptionRepository = subscriptionRepository;
-    }
-
-    public Task<SubscriptionLimit[]> GetLimits(Subscription subscription)
-    {
-        return Task.FromResult(
-            JsonConvert.DeserializeObject<SubscriptionLimit[]>(subscription.LimitsJson) 
-            ?? Array.Empty<SubscriptionLimit>()
-        );
-    }
-
-    public Task SaveLimits(Subscription subscription, SubscriptionLimit[] limits)
-    {
-        subscription.LimitsJson = JsonConvert.SerializeObject(limits);
-        SubscriptionRepository.Update(subscription);
-        
-        return Task.CompletedTask;
-    }
-
-    public Task<string> GenerateCode(Subscription subscription, int duration)
-    {
-        return Task.FromResult(
-            OneTimeJwtService.Generate(data =>
-            {
-                data.Add("subscription", subscription.Id.ToString());
-                data.Add("duration", duration.ToString());
-            }, TimeSpan.FromDays(10324))
-        );
-    }
-}

Moonlight/App/Services/SubscriptionService.cs

@@ -1,151 +1,200 @@
 using Microsoft.EntityFrameworkCore;
 using Moonlight.App.Database.Entities;
-using Moonlight.App.Exceptions;
 using Moonlight.App.Helpers;
 using Moonlight.App.Models.Misc;
 using Moonlight.App.Repositories;
-using Moonlight.App.Services.Sessions;
 using Newtonsoft.Json;
+using Stripe;
+using File = System.IO.File;
+using Subscription = Moonlight.App.Database.Entities.Subscription;
 
 namespace Moonlight.App.Services;
 
 public class SubscriptionService
 {
-    private readonly SubscriptionRepository SubscriptionRepository;
-    private readonly OneTimeJwtService OneTimeJwtService;
-    private readonly IdentityService IdentityService;
-    private readonly UserRepository UserRepository;
+    private readonly Repository<Subscription> SubscriptionRepository;
+    private readonly Repository<User> UserRepository;
 
     public SubscriptionService(
-        SubscriptionRepository subscriptionRepository,
-        OneTimeJwtService oneTimeJwtService,
-        IdentityService identityService,
-        UserRepository userRepository
-    )
+        Repository<Subscription> subscriptionRepository,
+        Repository<User> userRepository)
     {
         SubscriptionRepository = subscriptionRepository;
-        OneTimeJwtService = oneTimeJwtService;
-        IdentityService = identityService;
         UserRepository = userRepository;
     }
 
-    public async Task<Subscription?> GetCurrent()
+    public async Task<Subscription> Create(string name, string description, Currency currency, double price, int duration)
     {
-        var user = await GetCurrentUser();
-
-        if (user == null || user.CurrentSubscription == null)
-            return null;
-
-        var subscriptionEnd = user.SubscriptionSince.ToUniversalTime().AddDays(user.SubscriptionDuration);
-
-        if (subscriptionEnd > DateTime.UtcNow)
+        var optionsProduct = new ProductCreateOptions
         {
-            return user.CurrentSubscription;
-        }
+            Name = name,
+            Description = description,
+            DefaultPriceData = new()
+            {
+                UnitAmount = (long)(price * 100),
+                Currency = currency.ToString().ToLower()
+            }
+        };
 
-        return null;
+        var productService = new ProductService();
+        var product = await productService.CreateAsync(optionsProduct);
+
+        var subscription = new Subscription()
+        {
+            Name = name,
+            Description = description,
+            Currency = currency,
+            Price = price,
+            Duration = duration,
+            LimitsJson = "[]",
+            StripeProductId = product.Id,
+            StripePriceId = product.DefaultPriceId
+        };
+
+        return SubscriptionRepository.Add(subscription);
+    }
+    public async Task Update(Subscription subscription)
+    {
+        // Create the new price object
+        
+        var optionsPrice = new PriceCreateOptions
+        {
+            UnitAmount = (long)(subscription.Price * 100),
+            Currency = subscription.Currency.ToString().ToLower(),
+            Product = subscription.StripeProductId
+        };
+
+        var servicePrice = new PriceService();
+        var price = await servicePrice.CreateAsync(optionsPrice);
+        
+        // Update the product
+        
+        var productService = new ProductService();
+        var product = await productService.UpdateAsync(subscription.StripeProductId, new()
+        {
+            Name = subscription.Name,
+            Description = subscription.Description,
+            DefaultPrice = price.Id
+        });
+
+        // Disable old price
+        await servicePrice.UpdateAsync(subscription.StripePriceId, new()
+        {
+            Active = false
+        });
+
+        // Update the model
+
+        subscription.StripeProductId = product.Id;
+        subscription.StripePriceId = product.DefaultPriceId;
+        
+        SubscriptionRepository.Update(subscription);
+    }
+    public async Task Delete(Subscription subscription)
+    {
+        var productService = new ProductService();
+        await productService.DeleteAsync(subscription.StripeProductId);
+        
+        SubscriptionRepository.Delete(subscription);
     }
 
-    public async Task ApplyCode(string code)
+    public Task UpdateLimits(Subscription subscription, SubscriptionLimit[] limits)
     {
-        var data = await OneTimeJwtService.Validate(code);
+        subscription.LimitsJson = JsonConvert.SerializeObject(limits);
+        SubscriptionRepository.Update(subscription);
+        
+        return Task.CompletedTask;
+    }
+    public Task<SubscriptionLimit[]> GetLimits(Subscription subscription)
+    {
+        var limits = 
+            JsonConvert.DeserializeObject<SubscriptionLimit[]>(subscription.LimitsJson) ?? Array.Empty<SubscriptionLimit>();
+        return Task.FromResult(limits);
+    }
 
-        if (data == null)
-            throw new DisplayException("Invalid or expired subscription code");
+    public async Task<Subscription?> GetActiveSubscription(User u)
+    {
+        var user = await EnsureData(u);
 
-        var id = int.Parse(data["subscription"]);
-        var duration = int.Parse(data["duration"]);
+        if (user.CurrentSubscription != null)
+        {
+            if (user.SubscriptionExpires < DateTime.UtcNow)
+            {
+                user.CurrentSubscription = null;
+                UserRepository.Update(user);
+            }
+        }
+        
+        return user.CurrentSubscription;
+    }
+    public async Task CancelSubscription(User u)
+    {
+        var user = await EnsureData(u);
 
-        var subscription = SubscriptionRepository
-            .Get()
-            .FirstOrDefault(x => x.Id == id);
-
-        if (subscription == null)
-            throw new DisplayException("The subscription the code is associated with does not exist");
-
-        var user = await GetCurrentUser();
-
-        if (user == null)
-            throw new DisplayException("Unable to determine current user");
-
-        user.CurrentSubscription = subscription;
-        user.SubscriptionDuration = duration;
+        user.CurrentSubscription = null;
+        UserRepository.Update(user);
+    }
+    public async Task SetActiveSubscription(User u, Subscription subscription)
+    {
+        var user = await EnsureData(u);
+        
         user.SubscriptionSince = DateTime.UtcNow;
+        user.SubscriptionExpires = DateTime.UtcNow.AddDays(subscription.Duration);
+        user.CurrentSubscription = subscription;
         
         UserRepository.Update(user);
-
-        await OneTimeJwtService.Revoke(code);
     }
-
-    public async Task Cancel()
+    
+    public async Task<SubscriptionLimit[]> GetDefaultLimits()
     {
-        if (await GetCurrent() != null)
+        var defaultSubscriptionJson = "[]";
+        var path = PathBuilder.File("storage", "configs", "default_subscription.json");
+
+        if (File.Exists(path))
         {
-            var user = await GetCurrentUser();
-
-            user.CurrentSubscription = null;
-            
-            UserRepository.Update(user);
+            defaultSubscriptionJson =
+                await File.ReadAllTextAsync(path);
         }
-    }
 
-    public async Task<SubscriptionLimit> GetLimit(string identifier) // Cache, optimize sql code
+        return JsonConvert.DeserializeObject<SubscriptionLimit[]>(defaultSubscriptionJson)
+               ?? Array.Empty<SubscriptionLimit>();
+    }
+    public async Task<SubscriptionLimit> GetLimit(User u, string identifier)
     {
-        var subscription = await GetCurrent();
+        var subscription = await GetActiveSubscription(u);
         var defaultLimits = await GetDefaultLimits();
 
-        if (subscription == null)
+        if (subscription != null) // User has a active subscriptions
         {
-            // If the default subscription limit with identifier is found, return it. if not, return empty
-            return defaultLimits.FirstOrDefault(x => x.Identifier == identifier) ?? new()
-            {
-                Identifier = identifier,
-                Amount = 0
-            };
-        }
+            var subscriptionLimits = await GetLimits(subscription);
 
-        var subscriptionLimits = 
-            JsonConvert.DeserializeObject<SubscriptionLimit[]>(subscription.LimitsJson) 
-            ?? Array.Empty<SubscriptionLimit>();
+            var subscriptionLimit = subscriptionLimits
+                .FirstOrDefault(x => x.Identifier == identifier);
 
-        var foundLimit = subscriptionLimits.FirstOrDefault(x => x.Identifier == identifier);
-
-        if (foundLimit != null)
-            return foundLimit;
+            if (subscriptionLimit != null) // Found subscription limit for the user's subscription
+                return subscriptionLimit;
+        } // If were are here, the user's subscription has no limit for this identifier, so we fallback to default
         
-        // If the default subscription limit with identifier is found, return it. if not, return empty
-        return defaultLimits.FirstOrDefault(x => x.Identifier == identifier) ?? new()
+        var defaultSubscriptionLimit = defaultLimits
+            .FirstOrDefault(x => x.Identifier == identifier);
+
+        if (defaultSubscriptionLimit != null)
+            return defaultSubscriptionLimit; // Default subscription limit found
+
+        return new() // No default subscription limit found
         {
             Identifier = identifier,
             Amount = 0
         };
     }
 
-    private async Task<User?> GetCurrentUser()
+    private Task<User> EnsureData(User u)
     {
-        var user = await IdentityService.Get();
-
-        if (user == null)
-            return null;
-
-        var userWithData = UserRepository
+        var user = UserRepository
             .Get()
             .Include(x => x.CurrentSubscription)
-            .First(x => x.Id == user.Id);
+            .First(x => x.Id == u.Id);
 
-        return userWithData;
-    }
-
-    private async Task<SubscriptionLimit[]> GetDefaultLimits() // Add cache and reload option
-    {
-        var defaultSubscriptionJson = "[]";
-
-        if (File.Exists(PathBuilder.File("storage", "configs", "default_subscription.json")))
-        {
-            defaultSubscriptionJson =
-                await File.ReadAllTextAsync(PathBuilder.File("storage", "configs", "default_subscription.json"));
-        }
-
-        return JsonConvert.DeserializeObject<SubscriptionLimit[]>(defaultSubscriptionJson) ?? Array.Empty<SubscriptionLimit>();
+        return Task.FromResult(user);
     }
 }

Moonlight/App/Services/SupportChat/SupportChatAdminService.cs

@@ -34,7 +34,7 @@ public class SupportChatAdminService : IDisposable
 
     public async Task Start(User recipient)
     {
-        User = await IdentityService.Get();
+        User = IdentityService.User;
         Recipient = recipient;
 
         if (User != null)

Moonlight/App/Services/SupportChat/SupportChatClientService.cs

@@ -33,7 +33,7 @@ public class SupportChatClientService : IDisposable
 
     public async Task Start()
     {
-        User = await IdentityService.Get();
+        User = IdentityService.User;
 
         if (User != null)
         {

Moonlight/App/Services/Tickets/TicketAdminService.cs

@@ -0,0 +1,67 @@
+using Microsoft.AspNetCore.Components.Forms;
+using Moonlight.App.Database.Entities;
+using Moonlight.App.Models.Misc;
+using Moonlight.App.Services.Files;
+using Moonlight.App.Services.Sessions;
+
+namespace Moonlight.App.Services.Tickets;
+
+public class TicketAdminService
+{
+    private readonly TicketServerService TicketServerService;
+    private readonly IdentityService IdentityService;
+    private readonly BucketService BucketService;
+
+    public Ticket? Ticket { get; set; }
+
+    public TicketAdminService(
+        TicketServerService ticketServerService,
+        IdentityService identityService,
+        BucketService bucketService)
+    {
+        TicketServerService = ticketServerService;
+        IdentityService = identityService;
+        BucketService = bucketService;
+    }
+
+    public async Task<TicketMessage> Send(string content, IBrowserFile? file = null)
+    {
+        string? attachment = null;
+
+        if (file != null)
+        {
+            attachment = await BucketService.StoreFile(
+                "tickets",
+                file.OpenReadStream(1024 * 1024 * 5),
+                file.Name);
+        }
+
+        return await TicketServerService.SendMessage(
+            Ticket!,
+            IdentityService.User,
+            content,
+            attachment,
+            true
+        );
+    }
+
+    public async Task UpdateStatus(TicketStatus status)
+    {
+        await TicketServerService.UpdateStatus(Ticket!, status);
+    }
+
+    public async Task UpdatePriority(TicketPriority priority)
+    {
+        await TicketServerService.UpdatePriority(Ticket!, priority);
+    }
+
+    public async Task<TicketMessage[]> GetMessages()
+    {
+        return await TicketServerService.GetMessages(Ticket!);
+    }
+
+    public async Task SetClaim(User? user)
+    {
+        await TicketServerService.SetClaim(Ticket!, user);
+    }
+}

Moonlight/App/Services/Tickets/TicketClientService.cs

@@ -0,0 +1,63 @@
+using Microsoft.AspNetCore.Components.Forms;
+using Moonlight.App.Database.Entities;
+using Moonlight.App.Models.Misc;
+using Moonlight.App.Services.Files;
+using Moonlight.App.Services.Sessions;
+
+namespace Moonlight.App.Services.Tickets;
+
+public class TicketClientService
+{
+    private readonly TicketServerService TicketServerService;
+    private readonly IdentityService IdentityService;
+    private readonly BucketService BucketService;
+    
+    public Ticket? Ticket { get; set; }
+
+    public TicketClientService(
+        TicketServerService ticketServerService,
+        IdentityService identityService,
+        BucketService bucketService)
+    {
+        TicketServerService = ticketServerService;
+        IdentityService = identityService;
+        BucketService = bucketService;
+    }
+
+    public async Task<Ticket> Create(string issueTopic, string issueDescription, string issueTries, TicketSubject subject, int subjectId)
+    {
+        return await TicketServerService.Create(
+            IdentityService.User,
+            issueTopic,
+            issueDescription,
+            issueTries,
+            subject,
+            subjectId
+        );
+    }
+
+    public async Task<TicketMessage> Send(string content, IBrowserFile? file = null)
+    {
+        string? attachment = null;
+
+        if (file != null)
+        {
+            attachment = await BucketService.StoreFile(
+                "tickets", 
+                file.OpenReadStream(1024 * 1024 * 5),
+                file.Name);
+        }
+        
+        return await TicketServerService.SendMessage(
+            Ticket!,
+            IdentityService.User,
+            content,
+            attachment
+        );
+    }
+
+    public async Task<TicketMessage[]> GetMessages()
+    {
+        return await TicketServerService.GetMessages(Ticket!);
+    }
+}

Moonlight/App/Services/Tickets/TicketServerService.cs

@@ -0,0 +1,181 @@
+using Microsoft.EntityFrameworkCore;
+using Moonlight.App.Database.Entities;
+using Moonlight.App.Events;
+using Moonlight.App.Models.Misc;
+using Moonlight.App.Repositories;
+
+namespace Moonlight.App.Services.Tickets;
+
+public class TicketServerService
+{
+    private readonly IServiceScopeFactory ServiceScopeFactory;
+    private readonly EventSystem Event;
+    private readonly ConfigService ConfigService;
+
+    public TicketServerService(
+        IServiceScopeFactory serviceScopeFactory,
+        EventSystem eventSystem,
+        ConfigService configService)
+    {
+        ServiceScopeFactory = serviceScopeFactory;
+        Event = eventSystem;
+        ConfigService = configService;
+    }
+
+    public async Task<Ticket> Create(User creator, string issueTopic, string issueDescription, string issueTries, TicketSubject subject, int subjectId)
+    {
+        using var scope = ServiceScopeFactory.CreateScope();
+        var ticketRepo = scope.ServiceProvider.GetRequiredService<Repository<Ticket>>();
+        var userRepo = scope.ServiceProvider.GetRequiredService<Repository<User>>();
+
+        var creatorUser = userRepo
+            .Get()
+            .First(x => x.Id == creator.Id);
+
+        var ticket = ticketRepo.Add(new()
+        {
+            Priority = TicketPriority.Low,
+            Status = TicketStatus.Open,
+            AssignedTo = null,
+            IssueTopic = issueTopic,
+            IssueDescription = issueDescription,
+            IssueTries = issueTries,
+            Subject = subject,
+            SubjectId = subjectId,
+            CreatedBy = creatorUser
+        });
+
+        await Event.Emit("tickets.new", ticket);
+
+        // Do automatic stuff here
+        await SendSystemMessage(ticket, ConfigService.Get().Moonlight.Tickets.WelcomeMessage);
+
+        if (ticket.Subject != TicketSubject.Other)
+        {
+            await SendMessage(ticket, creatorUser, $"Subject :\n\n{ticket.Subject}: {ticket.SubjectId}");
+        }
+        
+        //TODO: Check for opening times
+        
+        return ticket;
+    }
+    public async Task SendSystemMessage(Ticket t, string content, string? attachmentUrl = null)
+    {
+        using var scope = ServiceScopeFactory.CreateScope();
+        var ticketRepo = scope.ServiceProvider.GetRequiredService<Repository<Ticket>>();
+
+        var ticket = ticketRepo.Get().First(x => x.Id == t.Id);
+
+        var message = new TicketMessage()
+        {
+            Content = content,
+            Sender = null,
+            AttachmentUrl = attachmentUrl,
+            IsSystemMessage = true
+        };
+        
+        ticket.Messages.Add(message);
+        ticketRepo.Update(ticket);
+
+        await Event.Emit("tickets.message", message);
+        await Event.Emit($"tickets.{ticket.Id}.message", message);
+    }
+    public async Task UpdatePriority(Ticket t, TicketPriority priority)
+    {
+        if(t.Priority == priority)
+            return;
+        
+        using var scope = ServiceScopeFactory.CreateScope();
+        var ticketRepo = scope.ServiceProvider.GetRequiredService<Repository<Ticket>>();
+
+        var ticket = ticketRepo.Get().First(x => x.Id == t.Id);
+
+        ticket.Priority = priority;
+        
+        ticketRepo.Update(ticket);
+
+        await Event.Emit("tickets.status", ticket);
+        await Event.Emit($"tickets.{ticket.Id}.status", ticket);
+        
+        await SendSystemMessage(ticket, $"The ticket priority has been changed to: {priority}");
+    }
+    public async Task UpdateStatus(Ticket t, TicketStatus status)
+    {
+        if(t.Status == status)
+            return;
+        
+        using var scope = ServiceScopeFactory.CreateScope();
+        var ticketRepo = scope.ServiceProvider.GetRequiredService<Repository<Ticket>>();
+
+        var ticket = ticketRepo.Get().First(x => x.Id == t.Id);
+
+        ticket.Status = status;
+        
+        ticketRepo.Update(ticket);
+        
+        await Event.Emit("tickets.status", ticket);
+        await Event.Emit($"tickets.{ticket.Id}.status", ticket);
+
+        await SendSystemMessage(ticket, $"The ticket status has been changed to: {status}");
+    }
+    public async Task<TicketMessage> SendMessage(Ticket t, User sender, string content, string? attachmentUrl = null, bool isSupportMessage = false)
+    {
+        using var scope = ServiceScopeFactory.CreateScope();
+        var ticketRepo = scope.ServiceProvider.GetRequiredService<Repository<Ticket>>();
+        var userRepo = scope.ServiceProvider.GetRequiredService<Repository<User>>();
+
+        var ticket = ticketRepo.Get().First(x => x.Id == t.Id);
+        var user = userRepo.Get().First(x => x.Id == sender.Id);
+
+        var message = new TicketMessage()
+        {
+            Content = content,
+            Sender = user,
+            AttachmentUrl = attachmentUrl,
+            IsSupportMessage = isSupportMessage
+        };
+        
+        ticket.Messages.Add(message);
+        ticketRepo.Update(ticket);
+
+        await Event.Emit("tickets.message", message);
+        await Event.Emit($"tickets.{ticket.Id}.message", message);
+
+        return message;
+    }
+    
+    public Task<TicketMessage[]> GetMessages(Ticket ticket)
+    {
+        using var scope = ServiceScopeFactory.CreateScope();
+        var ticketRepo = scope.ServiceProvider.GetRequiredService<Repository<Ticket>>();
+
+        var tickets = ticketRepo
+            .Get()
+            .Include(x => x.CreatedBy)
+            .Include(x => x.Messages)
+            .ThenInclude(x => x.Sender)
+            .First(x => x.Id == ticket.Id);
+
+        return Task.FromResult(tickets.Messages.ToArray());
+    }
+
+    public async Task SetClaim(Ticket t, User? u = null)
+    {
+        using var scope = ServiceScopeFactory.CreateScope();
+        var ticketRepo = scope.ServiceProvider.GetRequiredService<Repository<Ticket>>();
+        var userRepo = scope.ServiceProvider.GetRequiredService<Repository<User>>();
+
+        var ticket = ticketRepo.Get().Include(x => x.AssignedTo).First(x => x.Id == t.Id);
+        var user = u == null ? u : userRepo.Get().First(x => x.Id == u.Id);
+
+        ticket.AssignedTo = user;
+        
+        ticketRepo.Update(ticket);
+        
+        await Event.Emit("tickets.status", ticket);
+        await Event.Emit($"tickets.{ticket.Id}.status", ticket);
+
+        var claimName = user == null ? "None" : user.FirstName + " " + user.LastName; 
+        await SendSystemMessage(ticket, $"Ticked claim has been set to {claimName}");
+    }
+}

Moonlight/App/Services/TotpService.cs

@@ -25,32 +25,30 @@ public class TotpService
         return Task.FromResult(codeserver == code);
     }
 
-    public async Task<bool> GetEnabled()
+    public Task<bool> GetEnabled()
     {
-        var user = await IdentityService.Get();
-
-        return user!.TotpEnabled;
+        return Task.FromResult(IdentityService.User.TotpEnabled);
     }
 
-    public async Task<string> GetSecret()
+    public Task<string> GetSecret()
     {
-        var user = await IdentityService.Get();
-        
-        return user!.TotpSecret;
+        return Task.FromResult(IdentityService.User.TotpSecret);
     }
 
-    public async Task GenerateSecret()
+    public Task GenerateSecret()
     {
-        var user = (await IdentityService.Get())!;
+        var user = IdentityService.User;
         
         user.TotpSecret = Base32Encoding.ToString(KeyGeneration.GenerateRandomKey(20));;
         
         UserRepository.Update(user);
+        
+        return Task.CompletedTask;
     }
 
     public async Task Enable(string code)
     {
-        var user = (await IdentityService.Get())!;
+        var user = IdentityService.User;
 
         if (!await Verify(user.TotpSecret, code))
         {
@@ -61,9 +59,9 @@ public class TotpService
         UserRepository.Update(user);
     }
 
-    public async Task Disable()
+    public Task Disable()
     {
-        var user = (await IdentityService.Get())!;
+        var user = IdentityService.User;
 
         user.TotpEnabled = false;
         user.TotpSecret = "";
@@ -71,5 +69,7 @@ public class TotpService
         UserRepository.Update(user);
         
         //TODO: AuditLog
+        
+        return Task.CompletedTask;
     }
 }

Moonlight/App/Services/UserService.cs

@@ -5,6 +5,7 @@ using Moonlight.App.Exceptions;
 using Moonlight.App.Helpers;
 using Moonlight.App.Models.Misc;
 using Moonlight.App.Repositories;
+using Moonlight.App.Services.Background;
 using Moonlight.App.Services.Mail;
 using Moonlight.App.Services.Sessions;
 
@@ -19,6 +20,7 @@ public class UserService
     private readonly IpLocateService IpLocateService;
     private readonly DateTimeService DateTimeService;
     private readonly ConfigService ConfigService;
+    private readonly TempMailService TempMailService;
 
     private readonly string JwtSecret;
 
@@ -29,7 +31,8 @@ public class UserService
         MailService mailService,
         IdentityService identityService,
         IpLocateService ipLocateService,
-        DateTimeService dateTimeService)
+        DateTimeService dateTimeService,
+        TempMailService tempMailService)
     {
         UserRepository = userRepository;
         TotpService = totpService;
@@ -38,6 +41,7 @@ public class UserService
         IdentityService = identityService;
         IpLocateService = ipLocateService;
         DateTimeService = dateTimeService;
+        TempMailService = tempMailService;
 
         JwtSecret = configService
             .Get()
@@ -48,6 +52,12 @@ public class UserService
     {
         if (ConfigService.Get().Moonlight.Auth.DenyRegister)
             throw new DisplayException("This operation was disabled");
+
+        if (await TempMailService.IsTempMail(email))
+        {
+            Logger.Warn($"A user tried to use a blacklisted domain to register. Email: '{email}'", "security");
+            throw new DisplayException("This email is blacklisted");
+        }
         
         // Check if the email is already taken
         var emailTaken = UserRepository.Get().FirstOrDefault(x => x.Email == email) != null;
@@ -56,17 +66,15 @@ public class UserService
         {
             throw new DisplayException("The email is already in use");
         }
-        
-        //TODO: Validation
 
         // Add user
         var user = UserRepository.Add(new()
         {
             Address = "",
-            Admin = false,
+            Admin = !UserRepository.Get().Any(),
             City = "",
             Country = "",
-            Email = email,
+            Email = email.ToLower(),
             Password = BCrypt.Net.BCrypt.HashPassword(password),
             FirstName = firstname,
             LastName = lastname,
@@ -78,8 +86,8 @@ public class UserService
             TotpSecret = "",
             UpdatedAt = DateTimeService.GetCurrent(),
             TokenValidTime = DateTimeService.GetCurrent().AddDays(-5),
-            LastIp = IdentityService.GetIp(),
-            RegisterIp = IdentityService.GetIp()
+            LastIp = IdentityService.Ip,
+            RegisterIp = IdentityService.Ip
         });
 
         await MailService.SendMail(user!, "register", values => {});
@@ -167,8 +175,8 @@ public class UserService
             
             await MailService.SendMail(user!, "passwordChange", values =>
             {
-                values.Add("Ip", IdentityService.GetIp());
-                values.Add("Device", IdentityService.GetDevice());
+                values.Add("Ip", IdentityService.Ip);
+                values.Add("Device", IdentityService.Device);
                 values.Add("Location", location);
             });
 
@@ -205,8 +213,8 @@ public class UserService
         {
             await MailService.SendMail(user!, "login", values =>
             {
-                values.Add("Ip", IdentityService.GetIp());
-                values.Add("Device", IdentityService.GetDevice());
+                values.Add("Ip", IdentityService.Ip);
+                values.Add("Device", IdentityService.Device);
                 values.Add("Location", location);
             });
         }
@@ -242,8 +250,8 @@ public class UserService
 
         await MailService.SendMail(user, "passwordReset", values =>
         {
-            values.Add("Ip", IdentityService.GetIp());
-            values.Add("Device", IdentityService.GetDevice());
+            values.Add("Ip", IdentityService.Ip);
+            values.Add("Device", IdentityService.Device);
             values.Add("Location", location);
             values.Add("Password", newPassword);
         });

Moonlight/BlazorApp.razor

@@ -2,12 +2,19 @@
 
 <Router AppAssembly="@typeof(BlazorApp).Assembly">
     <Found Context="routeData">
-        <RouteView RouteData="@routeData" DefaultLayout="@typeof(MainLayout)"/>
+        <CascadingValue TValue="Type" Name="TargetPageType" Value="routeData.PageType">
+            <RouteView RouteData="@routeData" DefaultLayout="@typeof(MainLayout)"/>
+        </CascadingValue>
     </Found>
     <NotFound>
         <PageTitle>Not found</PageTitle>
         <LayoutView Layout="@typeof(NotFoundLayout)">
-            <p role="alert">Sorry, there's nothing at this address.</p>
+            <NotFoundAlert />
         </LayoutView>
     </NotFound>
-</Router>
+</Router>
+
+@code 
+{
+    
+}