pontus-mail/app.js

const express = require('express');
const bodyParser = require('body-parser');
const path = require('path');
const fs = require('fs');
const session = require('express-session');
const { Sequelize, DataTypes } = require('sequelize');
const axios = require('axios');
const NodeCache = require('node-cache');
const cache = new NodeCache({ stdTTL: 1800 });

require('dotenv').config();
const app = express();

app.set('view engine', 'ejs');
app.set('views', path.join(__dirname, 'src'));

app.use(bodyParser.urlencoded({ extended: false }));
app.use(express.static(path.join(__dirname, 'public')));
app.use(session({
  secret: process.env.SESSION_SECRET,
  resave: false,
  saveUninitialized: true
}));

const sequelize = new Sequelize(process.env.DB_NAME, process.env.DB_USER, process.env.DB_PASSWORD, {
  host: process.env.DB_HOST || '127.0.0.1', // pulls from .env or defaults to localhost
  port: process.env.DB_PORT || 3306, // pulls from .env or defaults to 3306
  dialect: 'mysql'
});

sequelize.authenticate()
  .then(() => console.log('Database connected'))
  .catch(err => console.log('Error: ' + err));

const Request = sequelize.define('Request', {
  fullName: DataTypes.STRING,
  email: DataTypes.STRING,
  reason: DataTypes.TEXT,
  telegram: DataTypes.STRING,
  status: {
    type: DataTypes.STRING,
    defaultValue: 'Pending'
  }
});

async function fetchDomainData() {
  const cachedData = cache.get('domainData');
  if (cachedData) {
    return cachedData;
  }

  try {
    const response = await axios.get('https://user.p0ntus.com/api/v1/get/domain/all', {
      headers: {
        'accept': 'application/json',
        'X-API-Key': process.env.MC_API_KEY
      }
    });
    const domainData = response.data;
    cache.set('domainData', domainData);
    return domainData;
  } catch (error) {
    console.error('Error fetching domain data:', error);
    return [];
  }
}

// Sync DB models
sequelize.sync();

app.get('/', async (req, res) => {
  const domainData = await fetchDomainData();
  const domainCount = Array.isArray(domainData) ? domainData.length : 0;
  const accountCount = Array.isArray(domainData) ? domainData.reduce((acc, domain) => acc + domain.mboxes_in_domain, 0) : 0;
  const totalData = Array.isArray(domainData) ? domainData.reduce((acc, domain) => acc + parseInt(domain.bytes_total), 0) / (1024 * 1024) : 0;

  res.render('index', {
    currentPage: 'home',
    domainCount,
    accountCount,
    totalData: totalData.toFixed(2) // Round to 2 decimal places
  });
});

app.get('/services', (req, res) => {
  res.render('services', { currentPage: 'services' });
});

app.get('/donate', (req, res) => {
  const donations = JSON.parse(fs.readFileSync('donations.json', 'utf8'));
  res.render('donate', {
    currentPage: 'donate',
    bitcoin: donations.bitcoin,
    litecoin: donations.litecoin,
    ethereum: donations.ethereum,
    monero: donations.monero,
    solana: donations.solana,
    current: donations.current,
    goal: donations.goal
  });
});

app.get('/privacy', (req, res) => {
  res.render('privacy', { currentPage: 'privacy' });
});

// Guide routes
// TODO: Improve how guides are routed to be simpler

app.get('/guides', (req, res) => {
  res.render('guides', { currentPage: 'guides' });
});

app.get('/guides/user', (req, res) => {
  res.render('guides/user/index', { currentPage: 'guides' });
});

app.get('/guides/webmail', (req, res) => {
  res.render('guides/webmail/index', { currentPage: 'guides' });
});

app.get('/guides/vaultwarden/android', (req, res) => {
  res.render('guides/vaultwarden/android', { currentPage: 'guides' });
});

app.get('/guides/vaultwarden/chrome', (req, res) => {
  res.render('guides/vaultwarden/chrome', { currentPage: 'guides' });
});

app.get('/guides/vaultwarden/firefox', (req, res) => {
  res.render('guides/vaultwarden/firefox', { currentPage: 'guides' });
});

app.get('/register', (req, res) => {
  res.render('register', { currentPage: 'register' });
});

app.post('/register', async (req, res) => {
  const { fullName, email, reason, telegram } = req.body;
  const crit = /^[a-zA-Z0-9.-]+$/; // regex (see also: public/js/register.js)
  if (!crit.test(email) || /\s/.test(email) || email !== email.toLowerCase()) {
    return res.render('error/500');
  }
  await Request.create({ fullName, email, reason, telegram });
  res.render('reg-success', { currentPage: 'register' });
});

app.get('/request', async (req, res) => {
  const { email } = req.query;

  if (!email) {
    return res.status(400).render('error/email');
  }

  try {
    const request = await Request.findOne({ where: { email } });
    if (!request) {
      return res.status(404).render('error/404');
    }
    res.render('request', { request });
  } catch (error) {
    console.error(error);
    res.status(500).render('error/500');
  }
});

function checkAdminAuth(req, res, next) {
  if (req.session.admin) {
    next();
  } else {
    res.redirect('/admin');
  }
}

// Admin routes

app.get('/admin', (req, res) => {
  if (req.session.admin) {
    return res.redirect('/admin/dashboard');
  }
  res.render('admin/login', { currentPage: 'admin', error: null });
});

app.post('/admin', (req, res) => {
  const { username, password } = req.body;
  if (username === process.env.ADMIN_USERNAME && password === process.env.ADMIN_PASSWORD) {
    req.session.admin = true;
    res.redirect('/admin/dashboard');
  } else {
    res.render('admin/login', { error: 'An error occurred.' });
  }
});

app.get('/admin/dashboard', checkAdminAuth, async (req, res) => {
  const requests = await Request.findAll();
  res.render('admin/dash', { requests, currentPage: 'admin', user: process.env.ADMIN_USERNAME });
});

app.post('/admin/update-status', checkAdminAuth, async (req, res) => {
  const { id, status } = req.body;
  await Request.update({ status }, { where: { id } });
  res.redirect('/admin/dashboard');
});

app.post('/admin/delete-request', checkAdminAuth, async (req, res) => {
  const { id } = req.body;
  await Request.destroy({ where: { id } });
  res.redirect('/admin/dashboard');
});

app.get('/admin/edit/:id', checkAdminAuth, async (req, res) => {
  const { id } = req.params;
  const request = await Request.findByPk(id);
  if (!request) {
    return res.status(404).render('error/404');
  }
  res.render('admin/edit', { request, currentPage: 'admin' });
});

app.post('/admin/edit', checkAdminAuth, async (req, res) => {
  const { id, fullName, email, reason, telegram } = req.body;
  await Request.update({ fullName, email, reason, telegram }, { where: { id } });
  res.redirect('/admin/dashboard');
});

// Start server on internal port defined in .env
app.listen(process.env.INTERNAL_PORT, () => {
  console.log(`Server started on port ${process.env.INTERNAL_PORT}`);
});