initial commit

bin/console

@@ -26,11 +26,13 @@ require dirname(path: __DIR__) . '/vendor/autoload.php';
 
 
 $shortOpts = 'v::'; // version
+$shortOpts = 'q::'; // version
 $shortOpts .= "V::"; // verbose
 $shortOpts .= "h::"; // help
 
 $longOpts = [
 	'version::',
+    'quiet::',
 	'verbose::',
 	'help::'
 ];
@@ -47,6 +49,13 @@ if (array_key_exists(key: 'h', array: $options) || array_key_exists(key: 'help',
 	exit(0);
 }
 
+if (array_key_exists(key: 'q', array: $options) || array_key_exists(key: 'quiet', array: $options)) {
+    $quiet = true;
+} else {
+    $quiet = false;
+}
+
+
 if (array_key_exists(key: 'V', array: $options) || array_key_exists(key: 'verbose', array: $options)) {
 	$verbose = true;
 } else {
@@ -56,8 +65,8 @@ if (array_key_exists(key: 'V', array: $options) || array_key_exists(key: 'verbos
 $arguments = array_slice(array: $argv, offset: $restIndex);
 
 try {
-	$app = new BindAPI(verbose: $verbose );
+	$app = new BindAPI(verbose: $verbose, quiet: $quiet);
-	$app->runCommand(argumentsCount: count(value: $arguments), arguments: $arguments);
+	$app->runCommand(arguments: $arguments);
 	
 } catch (DependencyException|NotFoundException|Exception $e) {
 	echo $e->getMessage() . PHP_EOL;

src/Controller/BindAPI.php

@@ -8,8 +8,12 @@ use App\Repository\DomainRepository;
 use App\Repository\DynDNSRepository;
 use DI\Container;
 use DI\ContainerBuilder;
+use DI\DependencyException;
+use DI\NotFoundException;
+use Exception;
 use Monolog\Formatter\LineFormatter;
 use Monolog\Handler\StreamHandler;
+use Monolog\Level;
 use Monolog\Logger;
 use function DI\autowire;
 
@@ -21,11 +25,10 @@ class BindAPI
 	private Logger $logger;
 	private Container $container;
 
-	
 	/**
-	 * @throws \Exception
+	 * @throws Exception
 	 */
-	public function __construct($verbose = false)
+	public function __construct($verbose = false, $quiet = false)
 	{
 		// init the logger
 		$dateFormat = "Y:m:d H:i:s";
@@ -34,9 +37,9 @@ class BindAPI
 		
 		$debug = (new ConfigController)->getConfig(configKey: 'debug');
 		if ($debug) {
-			$stream = new StreamHandler(stream: dirname(path: __DIR__, levels: 2) . '/bindAPI.log', level: Logger::DEBUG);
+			$stream = new StreamHandler(stream: dirname(path: __DIR__, levels: 2) . '/bindAPI.log', level: Level::Debug);
 		} else {
-			$stream = new StreamHandler(stream: dirname(path: __DIR__, levels: 2) . '/bindAPI.log', level: Logger::INFO);
+			$stream = new StreamHandler(stream: dirname(path: __DIR__, levels: 2) . '/bindAPI.log', level: Level::Info);
 		}
 		$stream->setFormatter(formatter: $formatter);
 		
@@ -48,6 +51,7 @@ class BindAPI
 		$containerBuilder = new ContainerBuilder();
 		$containerBuilder->addDefinitions([
 			ConfigController::class => autowire()
+                ->constructorParameter(parameter: 'quiet', value: $quiet)
 				->constructorParameter(parameter: 'verbose', value: $verbose),
 			CLIController::class      => autowire()
 				->constructorParameter(parameter: 'logger', value: $this->logger),
@@ -65,8 +69,8 @@ class BindAPI
 	
 	
 	/**
-	 * @throws \DI\DependencyException
+	 * @throws DependencyException
-	 * @throws \DI\NotFoundException
+	 * @throws NotFoundException
 	 */
 	public function runCommand(array $arguments): void
 	{
@@ -77,8 +81,8 @@ class BindAPI
 	
 	
 	/**
-	 * @throws \DI\DependencyException
+	 * @throws DependencyException
-	 * @throws \DI\NotFoundException
+	 * @throws NotFoundException
 	 */
 	public function handleRequest(string $requestMethod, array $uri): void
 	{

src/Controller/CLIController.php

@@ -11,8 +11,13 @@ define(constant_name: 'COLOR_BLUE', value: "\033[34m");
 define(constant_name: 'COLOR_WHITE', value: "\033[37m");
 define(constant_name: 'COLOR_DEFAULT', value: "\033[39m");
 
+use App\Controller\Commands\Command;
+use App\Controller\Commands\CommandGroup;
+use App\Controller\Commands\CommandGroupContainer;
+use App\Entity\Apikey;
 use App\Entity\Domain;
 use App\Entity\DynDNS;
+use App\Entity\KeyHelp\KeyHelpDomain;
 use App\Entity\Nameserver;
 use App\Entity\Panel;
 use App\Repository\ApikeyRepository;
@@ -22,7 +27,10 @@ use App\Repository\NameserverRepository;
 use App\Repository\PanelRepository;
 use Arubacao\TldChecker\Validator;
 use Exception;
+use JsonMapper;
+use JsonMapper_Exception;
 use LucidFrame\Console\ConsoleTable;
+use SodiumException;
 
 if (php_sapi_name() !== 'cli') {
     exit;
@@ -35,6 +43,7 @@ if (php_sapi_name() !== 'cli') {
 class CLIController
 {
     private array $arguments;
+    private CommandGroupContainer $commandGroupContainer;
 
     /**
      * @throws Exception
@@ -48,9 +57,159 @@ class CLIController
         private readonly NameserverRepository $nameserverRepository,
         private readonly PanelRepository      $panelRepository,
         private readonly ConfigController     $configController,
+        private readonly EncryptionController $encryptionController,
         private                               $logger)
     {
         $this->checkSetup();
+
+        $this->commandGroupContainer = (new CommandGroupContainer())
+            ->add(commandGroup: (new CommandGroup(name: 'check', description: 'health checks the system can perform'))
+                ->addCommand(command: new Command(
+                    name: 'permissions',
+                    callback: function () {
+                        $this->handleCheckPermissions();
+                    },
+                    description: 'health checks the system can perform'))
+                ->addCommand(command: new Command(
+                    name: 'panels',
+                    callback: function () {
+                        $this->handleCheckPanels();
+                    },
+                    optionalParameters: ['ID', 'fix=xes']))
+                ->addCommand(command: new Command(
+                    name: 'domains',
+                    callback: function () {
+                        $this->handleCheckDomains();
+                    }))
+                ->addCommand(command: new Command(
+                    name: 'showincludes',
+                    callback: function () {
+                        $this->handleCheckShowIncludes();
+                    },
+                    description: 'Shows needed setting on panels'))
+                ->addCommand(command: new Command(
+                    name: 'generatekey',
+                    callback: function () {
+                        $this->handleCheckGenerateKey();
+                    },
+                    description: 'Generates a a new key for encryption'))
+                ->addCommand(command: new Command(
+                    name: 'setup',
+                    callback: function () {
+                        $this->handleCheckSetup();
+                    },
+                    mandatoryParameters: ['username'],
+                    description: 'Adapt filesystem permissions (requires elaborated permissions)'))
+                ->addCommand(command: new Command(
+                    name: 'version',
+                    callback: function () {
+                        $this->handleChecksVersion();
+                    },
+                    optionalParameters: ['major:minor:patch'],
+                    description: 'Read or set the bindApi version in the database')))
+            ->add(commandGroup: (new CommandGroup(name: 'panels', description: 'all KeyHelp systems configured'))
+                ->addCommand(command: new Command(
+                    name: 'list',
+                    callback: function () {
+                        $this->handlePanelsList();
+                    }))
+                ->addCommand(command: new Command(
+                    name: 'create',
+                    callback: function () {
+                        $this->handlePanelsCreate();
+                    },
+                    mandatoryParameters: ['name'],
+                    optionalParameters: ['A=<IPv4>', 'AAAA=<IPv6>', 'apikey=<API-Key>']))
+                ->addCommand(command: new Command(
+                    name: 'update',
+                    callback: function () {
+                        $this->handlePanelsUpdate();
+                    },
+                    mandatoryParameters: ['ID'],
+                    optionalParameters: ['name=<name>', 'A=<IPv4>', 'AAAA=<IPv6>', 'apikey=<API-Key>']))
+                ->addCommand(command: new Command(
+                    name: 'delete',
+                    callback: function () {
+                        $this->handlePanelsDelete();
+                    },
+                    mandatoryParameters: ['ID']))
+                ->addCommand(command: new Command(
+                    name: 'apiping',
+                    callback: function () {
+                        $this->handleApiPing();
+                    },
+                    optionalParameters: ['ID'])))
+            ->add(commandGroup: (new CommandGroup(name: 'nameservers', description: 'available nameservers'))
+                ->addCommand(command: new Command(
+                    name: 'list',
+                    callback: function () {
+                        $this->handleNameserversList();
+                    }))
+                ->addCommand(command: new Command(
+                    name: 'create',
+                    callback: function () {
+                        $this->handleNameserversCreate();
+                    },
+                    mandatoryParameters: ['name'],
+                    optionalParameters: ['A=<IPv4>', 'AAAA=<IPv6>', 'apikey=<API-Key>']))
+                ->addCommand(command: new Command(
+                    name: 'update',
+                    callback: function () {
+                        $this->handleNameserversUpdate();
+                    },
+                    mandatoryParameters: ['ID'],
+                    optionalParameters: ['name=<name>', 'A=<IPv4>', 'AAAA=<IPv6>', 'apikey=<API-Key>']))
+                ->addCommand(command: new Command(
+                    name: 'delete',
+                    callback: function () {
+                        $this->handleNameserversDelete();
+                    },
+                    mandatoryParameters: ['ID']))
+                ->addCommand(command: new Command(
+                    name: 'apiping',
+                    callback: function () {
+                        $this->handleApiPing();
+                    },
+                    optionalParameters: ['ID'])))
+            ->add(commandGroup: (new CommandGroup(name: 'domains', description: 'configured domains'))
+                ->addCommand(command: new Command(
+                    name: 'list',
+                    callback: function () {
+                        $this->handleDomainsList();
+                    }))
+                ->addCommand(command: new Command(
+                    name: 'refresh',
+                    callback: function () {
+                        $this->handleDomainsRefresh();
+                    },
+                    mandatoryParameters: ['name'],
+                    optionalParameters: ['A=<IPv4>', 'AAAA=<IPv6>', 'apikey=<API-Key>'])))
+            ->add(commandGroup: (new CommandGroup(name: 'dyndns', description: 'handle DynDNS entries'))
+                ->addCommand(command: new Command(
+                    name: 'list',
+                    callback: function () {
+                        $this->handleDynDnsList();
+                    }))
+                ->addCommand(command: new Command(
+                    name: 'create',
+                    callback: function () {
+                        $this->handlePanelsCreate();
+                    },
+                    mandatoryParameters: ['hostname.example.com', 'password'],
+                    description: 'FQDN within a domain where this server is master'))
+                ->addCommand(command: new Command(
+                    name: 'update',
+                    callback: function () {
+                        $this->handlePanelsUpdate();
+                    },
+                    mandatoryParameters: ['ID'],
+                    optionalParameters: ['name=<name>', 'A=<IPv4>', 'AAAA=<IPv6>', 'apikey=<API-Key>']))
+                ->addCommand(command: new Command(
+                    name: 'delete',
+                    callback: function () {
+                        $this->handlePanelsDelete();
+                    },
+                    mandatoryParameters: ['ID'])));
     }
 
     function checkSetup(): void
@@ -76,8 +235,6 @@ class CLIController
     }
 
 
-	// TODO encrypt the password in the config file, key in config
-
     function runCommand(array $arguments): void
     {
         if (count($arguments) < 1) {
@@ -96,16 +253,7 @@ class CLIController
         }
 
         $this->arguments = $this->parseArguments(arguments: $arguments);
-
+        $this->commandGroupContainer->run(command: $command, subcommand: $subcommand);
-		match ($command) {
-			'check' => $this->handleChecks(subcommand: $subcommand),
-			'panels' => $this->handlePanels(subcommand: $subcommand),
-			'apikeys' => $this->handleApiKeys(subcommand: $subcommand),
-			'domains' => $this->handleDomains(subcommand: $subcommand),
-			'dyndns' => $this->handleDynDns(subcommand: $subcommand),
-			'nameservers' => $this->handleNameservers(subcommand: $subcommand),
-			default => $this->unknownCommand(command: $command)
-		};
     }
 
 
@@ -116,6 +264,15 @@ class CLIController
     {
         $this->logger->debug(message: "showUsage()");
 
+        $debug = $this->configController->getConfig(configKey: 'debug');
+        echo 'bindAPI version: todo (env: todo) ';
+        if ($debug) {
+            echo 'true';
+        } else {
+            echo 'false';
+        }
+        echo COLOR_DEFAULT . ')' . PHP_EOL;
+
         echo COLOR_YELLOW . 'Usage:' . PHP_EOL;
         echo COLOR_DEFAULT . "\t./bin/console {options} {arguments}" . PHP_EOL . PHP_EOL;
 
@@ -123,33 +280,9 @@ class CLIController
         echo COLOR_GREEN . "\t-v, --version\t\t" . COLOR_DEFAULT . "Display the version of the API" . PHP_EOL;
         echo COLOR_GREEN . "\t-V, --verbose\t\t" . COLOR_DEFAULT . "All :lists command are auto-verbose" . PHP_EOL . PHP_EOL;
 
-		echo COLOR_YELLOW . 'Arguments:' . PHP_EOL;
+        echo COLOR_YELLOW . 'Arguments: ' . COLOR_WHITE . '<mandatory> {optional}' . PHP_EOL;
-		echo COLOR_YELLOW . "check" . COLOR_WHITE . "\t    health checks the system can perform" . PHP_EOL;
-		echo COLOR_GREEN . "\t    check:permissions" . PHP_EOL;
-		echo COLOR_GREEN . "\t    check:panels {ID} {fix=yes}" . PHP_EOL;
-		echo COLOR_GREEN . "\t    check:domains" . PHP_EOL;
-		echo COLOR_GREEN . "\t    check:showincludes" . COLOR_WHITE . " Shows needed setting on panels" . PHP_EOL;
-		echo COLOR_GREEN . "\t    check:generatekey" . COLOR_WHITE . " Generates a key for encryption" . PHP_EOL;
-		echo COLOR_GREEN . "\t    check:setup <username>" . COLOR_WHITE . " Adapt filesystem permissions (requires elaborated permissions)" . PHP_EOL;
 
-
+        $this->commandGroupContainer->printCommands();
-		echo COLOR_YELLOW . "panels" . COLOR_WHITE . "\t    all KeyHelp systems configured" . PHP_EOL;
-		echo COLOR_GREEN . "\t    panels:list" . PHP_EOL;
-		echo COLOR_GREEN . "\t    panels:create <name> {A=<IPv4>} {AAAA=<IPv6>} {apikey=<API-Key>}" . PHP_EOL;
-		echo COLOR_GREEN . "\t    panels:update <ID> {name=<name>} {A=<IPv4>} {AAAA=<IPv6>} {apikey=<API-Key>}" . PHP_EOL;
-		echo COLOR_GREEN . "\t    panels:delete <ID>" . PHP_EOL;
-		echo COLOR_GREEN . "\t    panels:apiping {<ID>}" . PHP_EOL;
-
-		echo COLOR_YELLOW . "nameservers" . COLOR_WHITE . " available nameservers" . PHP_EOL;
-		echo COLOR_GREEN . "\t    nameservers:list" . PHP_EOL;
-		echo COLOR_GREEN . "\t    nameservers:create <name> {A=<IPv4>} {AAAA=<IPv6>} {apikey=<API-Key>}" . PHP_EOL;
-		echo COLOR_GREEN . "\t    nameservers:update <ID> {name=<name>} {A=<IPv4>} {AAAA=<IPv6>} {apikey=<API-Key>}" . PHP_EOL;
-		echo COLOR_GREEN . "\t    nameservers:delete <ID>" . PHP_EOL;
-		echo COLOR_GREEN . "\t    nameservers:apiping {<ID>}" . PHP_EOL;
-
-		echo COLOR_YELLOW . "domains" . COLOR_WHITE . "     configured domains" . PHP_EOL;
-		echo COLOR_GREEN . "\t    domains:list" . PHP_EOL;
-		echo COLOR_GREEN . "\t    domains:refresh" . PHP_EOL;
 
         echo COLOR_YELLOW . "dyndns" . COLOR_WHITE . "      handle dyndns entries" . PHP_EOL;
         echo COLOR_GREEN . "\t    dyndns:list" . PHP_EOL;
@@ -166,21 +299,6 @@ class CLIController
         echo PHP_EOL . "\033[39me.g. ./bin/console apikeys:list" . PHP_EOL;
     }
 
-	function handleChecks(string $subcommand): void
-	{
-		$this->logger->debug(message: "handleChecks()");
-
-		match ($subcommand) {
-			'permissions' => $this->handleCheckPermissions(),
-			'panels' => $this->handleCheckPanels(),
-			'domains' => $this->handleCheckDomains(),
-			'showincludes' => $this->handleCheckShowIncludes(),
-			'generatekey' => $this->handleCheckGenerateKey(),
-			'setup' => $this->handleCheckSetup(),
-			default => $this->unknownSubcommand(subcommand: $subcommand)
-		};
-	}
-
 
     function unknownCommand(string $command): void
     {
@@ -199,7 +317,7 @@ class CLIController
 
     /**
      */
-	function handleCheckPermissions(): void
+    public function handleCheckPermissions(): void
     {
         $this->logger->debug(message: "handleCheckPermissions()");
 
@@ -215,6 +333,23 @@ class CLIController
     }
 
 
+    /*
+    public function handleCheckPermissions(): void
+    {
+        $this->logger->debug(message: "handleCheckPermissions()");
+
+        if (!$this->domainController->checkPermissions()) {
+            if ($this->configController->getConfig(configKey: 'verbose')) {
+                echo PHP_EOL . COLOR_DEFAULT;
+                echo 'Missing permissions, please run ' . COLOR_YELLOW . './bin/console check:setup' . COLOR_DEFAULT . ' as root or with sudo.' . PHP_EOL;
+            }
+            exit(1);
+        } else {
+            exit(0);
+        }
+    }
+*/
+
     function handleCheckSetup(): void
     {
         if (count($this->arguments) < 2) {
@@ -322,7 +457,7 @@ class CLIController
 
 
     /**
-	 * @param \App\Entity\Panel $panel
+     * @param Panel $panel
      *
      * @return void
      */
@@ -330,7 +465,10 @@ class CLIController
     {
         $this->logger->debug(message: "checkSinglePanel()");
 
-		echo COLOR_DEFAULT . 'KeyHelp-Panel: ' . COLOR_YELLOW . $panel->getName();
+        echo COLOR_DEFAULT . 'KeyHelp-Panel: ' . COLOR_YELLOW . $panel->getName() . COLOR_DEFAULT;
+
+        $encryptionKey = $this->configController->getConfig(configKey: 'encryptionKey');
+        $decryptedKey = $this->encryptionController->safeDecrypt(encrypted: $panel->getApikey(), key: $encryptionKey);
 
         if ($this->configController->getConfig(configKey: 'verbose')) {
             if (empty($panel->getA())) {
@@ -338,7 +476,7 @@ class CLIController
                     requestType: 'GET',
                     serverName: $panel->getName(),
                     versionIP: 6,
-					apiKey: $panel->getApikey(),
+                    apiKey: $decryptedKey,
                     command: '/server',
                     serverType: 'panel');
             } else {
@@ -346,7 +484,7 @@ class CLIController
                     requestType: 'GET',
                     serverName: $panel->getName(),
                     versionIP: 4,
-					apiKey: $panel->getApikey(),
+                    apiKey: $decryptedKey,
                     command: '/server',
                     serverType: 'panel');
             }
@@ -368,8 +506,8 @@ class CLIController
                 requestType: 'GET',
                 serverName: $panel->getName(),
                 versionIP: 6,
-				apiKey: $panel->getApikey(),
+                apiKey: $decryptedKey,
-				command: 'domains?sort=domain',
+                command: 'domains?sort=domain&subdomains=false',
                 serverType: 'panel'
             );
         } else {
@@ -377,8 +515,8 @@ class CLIController
                 requestType: 'GET',
                 serverName: $panel->getName(),
                 versionIP: 4,
-				apiKey: $panel->getApikey(),
+                apiKey: $decryptedKey,
-				command: 'domains?sort=domain',
+                command: 'domains?sort=domain&subdomains=false',
                 serverType: 'panel');
         }
 
@@ -394,30 +532,89 @@ class CLIController
         }
 
         $maxDomainNameLength = 0;
-		$tmpDomainlist = [];
+        $tmpDomainList = [];
+
+        $mapper = new JsonMapper();
+
         if (count($domains) > 0) {
             foreach ($domains as $domain) {
-				if ($this->isValidSecondLevelDomain(domainName: $domain->domain, panel: $panel->getName(), parent: $domain->id_parent_domain)) {
+                $mapper->bExceptionOnUndefinedProperty = true;
-					$tmpDomainlist[] = $domain;
+                $mapper->bStrictNullTypes = false;
+                try {
+                    $domainObject = $mapper->map(json: $domain, object: new KeyHelpDomain());
+                } catch (JsonMapper_Exception $e) {
+                    die($e->getMessage() . PHP_EOL);
+                }
+                $tmpDomainList[] = $domainObject;
                 if (strlen(string: $domain->domain) > $maxDomainNameLength) {
                     $maxDomainNameLength = strlen(string: $domain->domain);
                 }
             }
         }
-		}
 
         $domainCount = 0;
-		foreach ($tmpDomainlist as $domain) {
+        foreach ($tmpDomainList as $domain) {
-			echo COLOR_DEFAULT . " Domain: " . COLOR_YELLOW . str_pad(string: $domain->domain, length: $maxDomainNameLength);
+            echo COLOR_DEFAULT . " Domain: " . COLOR_YELLOW . str_pad(string: $domain->getDomain(), length: $maxDomainNameLength);
-			$this->checkNS(domainName: $domain->domain, panel: $panel);
+            if (!$domain->isSubdomain()) {
+                $this->checkNS(domainName: $domain->getDomain(), panel: $panel);
                 $domainCount++;
             }
+        }
 
         if ($domainCount == 0) {
             echo 'No second level domains found.' . COLOR_DEFAULT . PHP_EOL;
         }
         echo PHP_EOL;
+
+        try {
+            sodium_memzero(string: $decryptedKey);
+        } catch (SodiumException $e) {
+            die($e->getMessage() . PHP_EOL);
         }
+    }
+
+    function isSubDomain(Domain $domain): bool
+    {
+        $this->logger->debug(message: "isSubDomain()");
+
+        // valid second level domain
+        if (!Validator::endsWithTld(value: $domain)) {
+            return false;
+        }
+
+        $domainParts = explode(separator: '.', string: $domain->getName());
+        $reversedParts = array_reverse(array: $domainParts);
+        $testDomain = '';
+        $foundDomain = '';
+        foreach ($reversedParts as $part) {
+            if ($testDomain) {
+                $testDomain = $part . '.' . $testDomain;
+            } else {
+                $testDomain = $part;
+            }
+            if ($this->domainRepository->findByName(name: $testDomain)) {
+                $foundDomain = $testDomain;
+                echo $part . PHP_EOL;
+            }
+        }
+
+        echo "fould domain ***" . $foundDomain . PHP_EOL;
+
+        /*
+        // system domain
+        if (str_contains(haystack: $domainName, needle: $panel)) {
+            return false;
+        }
+
+
+        // no second level domain
+        if (substr_count(haystack: $domainName, needle: '.') > 1) {
+            return false;
+        }
+*/
+        return true;
+    }
+
 
     function isValidSecondLevelDomain(string $domainName, string $panel, int $parent): bool
     {
@@ -449,7 +646,7 @@ class CLIController
 
     /**
      * @param String $domainName
-	 * @param \App\Entity\Panel $panel
+     * @param Panel $panel
      *
      * @return void
      */
@@ -562,7 +759,7 @@ class CLIController
             'list' => $this->handlePanelsList(),
             'update' => $this->handlePanelsUpdate(),
             'delete' => $this->handlePanelsDelete(),
-			'apiping' => $this->handleAPIPing(type: 'panel'),
+            'apiping' => $this->handleApiPing(type: 'panel'),
             default => $this->unknownSubcommand(subcommand: $subcommand)
         };
     }
@@ -595,14 +792,15 @@ class CLIController
             exit(0);
         }
         $apikey = $this->arguments['apikey'] ?? '';
-		$self = intval(value: $this->arguments['self'] ?? 0);
+        $self = $this->arguments['self'] ?? 'no';
 
 
         if ($this->panelRepository->findByName(name: $name)) {
             echo "Panel: $name already exists." . PHP_EOL;
             exit(1);
         } else {
-			$result = $this->panelRepository->insert(name: $name, a: $a, aaaa: $aaaa, apikey: $apikey, self: $self);
+            $panel = new Panel(name: $name, a: $a, aaaa: $aaaa, passphrase: $apikey, self: $self);
+            $result = $this->panelRepository->insert(panel: $panel);
             echo "Panel $name has been created with id $result" . PHP_EOL;
             exit(0);
         }
@@ -620,20 +818,15 @@ class CLIController
             echo 'All available panels:' . PHP_EOL;
             $table = new ConsoleTable();
             $table->setHeaders(content: ['ID', 'Name', 'A', 'AAAA', 'API Key (Prefix)', 'This Panel']);
+
             foreach ($panels as $panel) {
                 $row = [];
-				$token = strtok(string: $panel->getApikey(), token: '.');
                 $row[] = $panel->getID();
                 $row[] = $panel->getName();
                 $row[] = $panel->getA();
                 $row[] = $panel->getAaaa();
-				$row[] = $token;
+                $row[] = $panel->getApikeyPrefix();
-				if ($panel->getSelf() == 1) {
+                $row[] = ucfirst(string: $panel->getSelf());
-					$row[] = 'Yes';
-				} else {
-					$row[] = 'No';
-
-				}
                 $table->addRow(data: $row);
             }
             $table->setPadding(value: 2);
@@ -657,12 +850,7 @@ class CLIController
         $a = $this->arguments['a'] ?? '';
         $aaaa = $this->arguments['aaaa'] ?? '';
         $apikey = $this->arguments['apikey'] ?? '';
-		$self = intval(value: $this->arguments['self'] ?? 0);
+        $self = $this->arguments['self'] ?? '';
-
-        // a workaround for 0 being equal to false …
-		if ($self == 0) {
-			$self = -1;
-		}
 
         if ($id == 0) {
             echo 'An ID is required' . PHP_EOL;
@@ -672,8 +860,13 @@ class CLIController
             echo "Panel with ID : $id doesn't exist." . PHP_EOL;
             exit(1);
         }
-		if ($this->panelRepository->update(id: $id, name: $name, a: $a, aaaa: $aaaa, apikey: $apikey, self: $self) !== false) {
+        if ($apikey) {
-			echo 'Panel has been updated' . PHP_EOL;
+            $panel = new Panel(name: $name, id: $id, a: $a, aaaa: $aaaa, passphrase: $apikey, self: $self);
+        } else {
+            $panel = new Panel(name: $name, id: $id, a: $a, aaaa: $aaaa, self: $self);
+        }
+        if ($this->panelRepository->update(panel: $panel) !== false) {
+            echo 'Panel ' . COLOR_YELLOW . $id . COLOR_DEFAULT . ' has been updated' . PHP_EOL;
         } else {
             echo 'Error while updating domain server.' . PHP_EOL;
         }
@@ -705,7 +898,7 @@ class CLIController
 
     /**
      */
-	function handleAPIPing(string $type): void
+    function handleApiPing(string $type): void
     {
         $this->logger->debug(message: "handleApiPing()");
 
@@ -725,7 +918,7 @@ class CLIController
                     $error = true;
                 }
             } else {
-				if ($this->configController->getConfig(configKey: 'verbose')) {
+                if (!$this->configController->getConfig(configKey: 'quiet')) {
                     echo "Unknown $type ID $id" . PHP_EOL;
                 }
                 $error = true;
@@ -742,10 +935,13 @@ class CLIController
                 }
             }
         }
-		if ($this->configController->getConfig(configKey: 'verbose')) {
+        if (!$this->configController->getConfig(configKey: 'quiet')) {
             echo PHP_EOL;
         }
         if ($error) {
+            if (!$this->configController->getConfig(configKey: 'verbose')) {
+                echo 'There were errors, run command with -V (or -verbose) to see the errors.' . PHP_EOL;
+            }
             exit(1);
         } else {
             exit(0);
@@ -771,13 +967,15 @@ class CLIController
     }
 
     /**
-	 * @param \App\Entity\Panel|\App\Entity\Nameserver $server
+     * @param Panel|Nameserver $server
      * @param String $type
      *
      * @return bool
      */
     public function checkPing(Panel|Nameserver $server, string $type): bool
     {
+        $this->logger->debug(message: "handleApiPing() - server, type: " . $server->getName() . ', ' . $type);
+
         $error = false;
 
         if ($type == 'nameserver') {
@@ -790,12 +988,16 @@ class CLIController
             $maxAAAA = $this->panelRepository->getLongestEntry(field: 'aaaa');
         }
 
-		if ($this->configController->getConfig(configKey: 'verbose')) {
+        if (!$this->configController->getConfig(configKey: 'quiet')) {
             echo COLOR_YELLOW . str_pad(string: $server->getName(), length: $maxName);
         }
 
+        $encryptionKey = $this->configController->getConfig(configKey: 'encryptionKey');
+        $decryptedKey = $this->encryptionController->safeDecrypt(encrypted: $server->getApikey(), key: $encryptionKey);
+
         $a = $server->getA() ?? '';
         if (!empty($a)) {
+            $this->logger->debug("check a");
             if ($this->configController->getConfig(configKey: 'verbose')) {
                 echo COLOR_DEFAULT . ' ' . str_pad(string: $a, length: $maxA, pad_type: STR_PAD_LEFT) . ' ';
             }
@@ -803,14 +1005,17 @@ class CLIController
                 requestType: 'GET',
                 serverName: $server->getName(),
                 versionIP: 4,
-				apiKey: $server->getApikey(),
+                apiKey: $decryptedKey,
                 command: 'ping',
                 serverType: $type)) {
-				if ($this->configController->getConfig(configKey: 'verbose')) {
+                if (!$this->configController->getConfig(configKey: 'quiet')) {
                     if ($result['data'] == 'pong') {
-						echo COLOR_GREEN . $result['data'];
+                        echo ' ' . COLOR_GREEN . $result['data'];
                     } else {
-						echo COLOR_BLUE . 'skip';
+                        echo COLOR_BLUE . ' skip' . COLOR_DEFAULT;
+                        if ($this->configController->getConfig(configKey: 'verbose')) {
+                            echo ' ' . $result['data'];
+                        }
                     }
                 }
             } else {
@@ -819,6 +1024,7 @@ class CLIController
         }
         $aaaa = $server->getAaaa() ?? '';
         if (!empty($aaaa)) {
+            $this->logger->debug("check aaaa");
             if ($this->configController->getConfig(configKey: 'verbose')) {
                 echo COLOR_DEFAULT . ' ' . str_pad(string: $aaaa, length: $maxAAAA, pad_type: STR_PAD_LEFT) . ' ';
             }
@@ -826,24 +1032,33 @@ class CLIController
                 requestType: 'GET',
                 serverName: $server->getName(),
                 versionIP: 6,
-				apiKey: $server->getApikey(),
+                apiKey: $decryptedKey,
                 command: 'ping',
                 serverType: $type)) {
-				if ($this->configController->getConfig(configKey: 'verbose')) {
+                if (!$this->configController->getConfig(configKey: 'quiet')) {
                     if ($result['data'] == 'pong') {
-						echo COLOR_GREEN . $result['data'];
+                        echo ' ' . COLOR_GREEN . $result['data'];
                     } else {
-						echo COLOR_BLUE . $result['data']; // TODO 'skip';
+                        echo COLOR_BLUE . ' skip' . COLOR_DEFAULT;
+                        if ($this->configController->getConfig(configKey: 'verbose')) {
+                            echo ' ' . $result['data'];
+                        }
                     }
                 }
             } else {
                 $error = true;
             }
         }
-		if ($this->configController->getConfig(configKey: 'verbose')) {
+        try {
-			echo PHP_EOL;
+            sodium_memzero(string: $decryptedKey);
+        } catch (SodiumException $e) {
+            die($e->getMessage() . PHP_EOL);
         }
-		return $error;
+
+        if (!$this->configController->getConfig(configKey: 'quiet')) {
+            echo COLOR_DEFAULT . PHP_EOL;
+        }
+        return !$error;
     }
 
     /**
@@ -869,9 +1084,27 @@ class CLIController
     {
         $name = $this->arguments['name'] ?? '';
 
-		$result = $this->apikeyRepository->create(name: $name);
+        $apiKeyPrefix = uniqid();
-		echo 'API key ' . COLOR_YELLOW . $result['row'] . COLOR_DEFAULT . ' has been generated. Store it in a save place, it cannot be recovered.' . PHP_EOL;
+        try {
-		echo "\033[32m\t" . $result['tokenPrefix'] . '.' . $result['key'] . PHP_EOL;
+            $apikeyRand = bin2hex(string: random_bytes(length: 24));
+        } catch (Exception $e) {
+            die($e->getMessage() . PHP_EOL);
+        }
+
+        $passphrase = password_hash(password: $apiKeyPrefix . '.' . $apikeyRand, algo: PASSWORD_ARGON2ID);
+
+        $apikey = new Apikey(name: $name, apikeyPrefix: $apiKeyPrefix, passphrase: $passphrase);
+
+        $result = $this->apikeyRepository->insert(apikey: $apikey);
+
+        if ($name) {
+            echo 'API key ' . COLOR_YELLOW . $name . COLOR_DEFAULT;
+        } else {
+            echo 'Unnamed API key ';
+        }
+
+        echo ' with ID ' . COLOR_YELLOW . $result . COLOR_DEFAULT . ' has been generated. Store it in a safe place, it cannot be recovered.' . PHP_EOL;
+        echo COLOR_YELLOW . $apiKeyPrefix . '.' . $apikeyRand . COLOR_DEFAULT . PHP_EOL;
         exit(0);
     }
 
@@ -889,7 +1122,7 @@ class CLIController
                 $row = [];
                 $row[] = $key->getID();
                 $row[] = $key->getName();
-				$row[] = $key->getApiTokenPrefix();
+                $row[] = $key->getApikeyPrefix();
                 $table->addRow(data: $row);
             }
             $table->setPadding(value: 2);
@@ -905,24 +1138,24 @@ class CLIController
      */
     function handleApikeysUpdate(): void
     {
-
+        $id = intval(value: $this->arguments[1]) ?? 0;
-        // TODO check for use of id instead of number, mind for all occurences
-		$id = $this->arguments[1] ?? 0;
         $name = $this->arguments['name'] ?? '';
 
         if ($id == 0) {
             echo 'An ID is required' . PHP_EOL;
             exit(1);
         }
-		if (empty($name)) {
-			echo 'You need to supply the new name.' . PHP_EOL;
-			exit(1);
-		}
         if (!$this->apikeyRepository->findByID(id: intval(value: $id))) {
             echo "Apikeys with ID : $id doesn't exist." . PHP_EOL;
             exit(1);
         }
-		if ($this->apikeyRepository->update(id: intval(value: $id), name: $name) !== false) {
+        if (!$name) {
+            echo 'You need tu supply a name.' . PHP_EOL;
+            exit(1);
+        }
+
+        $apikey = new Apikey(id: $id, name: $name);
+        if ($this->apikeyRepository->update(apikey: $apikey) !== false) {
             echo 'Apikey has been updated' . PHP_EOL;
         } else {
             echo 'Error while updating apikey.' . PHP_EOL;
@@ -960,6 +1193,7 @@ class CLIController
         match ($subcommand) {
             'list' => $this->handleDomainsList(),
             'refresh' => $this->handleDomainsRefresh(),
+            'update' => $this->handleDomainsUpdate(),
             'delete' => $this->handleDomainsDelete(),
             default => $this->unknownSubcommand(subcommand: $subcommand)
         };
@@ -1070,14 +1304,14 @@ class CLIController
 
         if ($this->dynDNSRepository->findByName(name: $name)) {
             if ($this->configController->getConfig(configKey: 'verbose')) {
-                echo "DynDNS host " . COLOR_YELLOW . $name . COLOR_DEFAULT . "already exists.". PHP_EOL;
+                echo "DynDNS host " . COLOR_YELLOW . $name . COLOR_DEFAULT . "already exists." . PHP_EOL;
                 exit(0);
             }
         } else {
             if ($this->configController->getConfig(configKey: 'verbose')) {
-                echo "DynDNS host " . COLOR_YELLOW . $name . COLOR_DEFAULT . "will be created.". PHP_EOL;
+                echo "DynDNS host " . COLOR_YELLOW . $name . COLOR_DEFAULT . "will be created." . PHP_EOL;
                 // insert in db
-                $dyndnsHost = new DynDNS();
+                $dyndnsHost = new DynDNS(name: $name);
                 $dyndnsHost->setName($name);
             }
         }
@@ -1125,8 +1359,7 @@ class CLIController
             exit(1);
         }
 
-		$arguments = $this->parseArguments();
+        $panel = $this->arguments['panel'] ?? '';
-		$panel = $arguments['panel'] ?? '';
 
         if (empty($panel)) {
             echo 'You need to supply the panel name.' . PHP_EOL;
@@ -1159,11 +1392,9 @@ class CLIController
             exit(1);
         }
 
-		$arguments = $this->parseArguments();
-
         $id = intval(value: $this->arguments[1] ?? 0);
-		$name = $arguments['name'] ?? '';
+        $name = $this->arguments['name'] ?? '';
-		$panelName = $arguments['panel'] ?? '';
+        $panelName = $this->arguments['panel'] ?? '';
 
         if ($id == 0) {
             echo 'An ID is required' . PHP_EOL;
@@ -1273,23 +1504,27 @@ class CLIController
             exit(1);
         }
 
-		$arguments = $this->parseArguments();
 
-		$a = $arguments['a'] ?? '';
+        $a = $this->arguments['a'] ?? '';
-		$aaaa = $arguments['aaaa'] ?? '';
+        $aaaa = $this->arguments['aaaa'] ?? '';
         if (empty($a) && empty($aaaa)) {
             echo 'At least one IP address is required.' . PHP_EOL;
             exit(0);
         }
-		$apikey = $arguments['apikey'] ?? '';
+        $apikey = $this->arguments['apikey'] ?? '';
+
+        if (empty($apikey)) {
+            echo 'An API key is required.' . PHP_EOL;
+            exit(0);
+        }
 
         if ($this->nameserverRepository->findByName(name: $name)) {
             echo "Nameserver: $name already exists." . PHP_EOL;
             exit(1);
         } else {
-			$nameserver = new Nameserver(name: $name, a: $a, aaaa: $aaaa, apikey: $apikey);
+            $nameserver = new Nameserver(name: $name, a: $a, aaaa: $aaaa, passphrase: $apikey);
             $result = $this->nameserverRepository->insert(nameserver: $nameserver);
-			echo "Nameserver $name has been created with id $result" . PHP_EOL;
+            echo 'Nameserver ' . COLOR_YELLOW . $name . COLOR_DEFAULT . ' has been created with id ' . COLOR_YELLOW . $result . COLOR_DEFAULT . PHP_EOL;
             exit(0);
         }
     }
@@ -1307,12 +1542,11 @@ class CLIController
             $table->setHeaders(content: ['ID', 'Name', 'A', 'AAAA', 'API Key']);
             foreach ($nameservers as $nameserver) {
                 $row = [];
-				$token = strtok(string: $nameserver->getApiKey(), token: '.');
                 $row[] = $nameserver->getId();
                 $row[] = $nameserver->getName();
                 $row[] = $nameserver->getA();
                 $row[] = $nameserver->getAaaa();
-				$row[] = $token;
+                $row[] = $nameserver->getApikeyPrefix();
                 $table->addRow(data: $row);
             }
             $table->setPadding(value: 2);
@@ -1329,13 +1563,11 @@ class CLIController
      */
     function handleNameserversUpdate(): void
     {
-		$arguments = $this->parseArguments();
-
         $id = $this->arguments[1] ?? 0;
-		$name = $arguments['name'] ?? '';
+        $name = $this->arguments['name'] ?? '';
-		$a = $arguments['a'] ?? '';
+        $a = $this->arguments['a'] ?? '';
-		$aaaa = $arguments['aaaa'] ?? '';
+        $aaaa = $this->arguments['aaaa'] ?? '';
-		$apikey = $arguments['apikey'] ?? '';
+        $apikey = $this->arguments['apikey'] ?? '';
 
         if ($id == 0) {
             echo 'An ID is required.' . PHP_EOL;
@@ -1345,7 +1577,14 @@ class CLIController
             echo 'Nameserver with ID ' . COLOR_YELLOW . $id . COLOR_DEFAULT . " doesn't exist." . PHP_EOL;
             exit(1);
         }
-		if ($this->nameserverRepository->update(id: intval(value: $id), name: $name, a: $a, aaaa: $aaaa, apikey: $apikey) !== false) {
+
+        if ($apikey) {
+            $nameserver = new Nameserver(name: $name, id: intval(value: $id), a: $a, aaaa: $aaaa, passphrase: $apikey);
+        } else {
+            $nameserver = new Nameserver(name: $name, id: intval(value: $id), a: $a, aaaa: $aaaa);
+        }
+
+        if ($this->nameserverRepository->update(nameserver: $nameserver) !== false) {
             echo 'Nameserver ' . COLOR_YELLOW . $id . COLOR_DEFAULT . ' has been updated.' . PHP_EOL;
         } else {
             echo 'Error while updating nameserver ' . COLOR_YELLOW . $id . '.' . PHP_EOL;
@@ -1480,26 +1719,27 @@ class CLIController
         exit(0);
     }
 
-	private
+    /**
-	function handleCheckGenerateKey(): void
+     */
+    private function handleCheckGenerateKey(): void
     {
         echo 'This generates a fresh encryption key.' . PHP_EOL;
         echo 'Copy it to config.json.' . PHP_EOL;
         echo 'Note: You must update all API-Keys for panels and nameservers after changing the key!' . PHP_EOL;
 
-		$cStrong = false;
+        try {
-		$bytes = null;
+            $key = sodium_bin2hex(string: sodium_crypto_secretbox_keygen());
-		while (!$cStrong) {
+            echo 'Suggested new key : "' . COLOR_YELLOW . $key . COLOR_DEFAULT . '".' . PHP_EOL;
-			$bytes = openssl_random_pseudo_bytes(length: 18, strong_result: $cStrong);
-		}
-		$hex = bin2hex(string: $bytes);
-
-		echo 'Suggested new key : ' . COLOR_YELLOW . $hex . COLOR_DEFAULT . '.' . PHP_EOL;
             echo PHP_EOL;
+            exit(0);
+        } catch (SodiumException $e) {
+            die($e->getMessage() . PHP_EOL);
         }
 
-	private
+    }
-	function handleDomainsRefresh(): void
+
+
+    private function handleDomainsRefresh(): void
     {
 
         // TODO check for self in check:permissions
@@ -1507,15 +1747,17 @@ class CLIController
         $this->logger->debug(message: "handleDomainsRefresh()");
 
         // TODO create getSelf()
-		$panel = $this->panelRepository->findByName(name: 'keyhelp.lab.24unix.net');
+        $panels = $this->panelRepository->findAll();
 
+        foreach ($panels as $panel) {
+            echo COLOR_DEFAULT . 'Checking panel ' . COLOR_YELLOW . $panel->getName() . COLOR_DEFAULT . PHP_EOL;
             if (empty($panel->getA())) {
                 $result = $this->apiController->sendCommand(
                     requestType: 'GET',
                     serverName: $panel->getName(),
                     versionIP: 6,
                     apiKey: $panel->getApikey(),
-				command: 'domains?sort=domain',
+                    command: 'domains?sort=domain&subdomains=false',
                     serverType: 'panel'
                 );
             } else {
@@ -1524,7 +1766,7 @@ class CLIController
                     serverName: $panel->getName(),
                     versionIP: 4,
                     apiKey: $panel->getApikey(),
-				command: 'domains?sort=domain',
+                    command: 'domains?sort=domain&subdomains=false',
                     serverType: 'panel');
             }
 
@@ -1539,30 +1781,24 @@ class CLIController
                 exit(1);
             }
 
-		// TODO remove stale domains
-
             $domainCount = 0;
             if (count($domains) > 0) {
                 foreach ($domains as $domain) {
-				if ($this->isValidSecondLevelDomain(domainName: $domain->domain, panel: $panel->getName(), parent: $domain->id_parent_domain)) {
                     $domainCount++;
-					echo COLOR_YELLOW . $domain->domain;
+                    echo COLOR_YELLOW . '    ' . $domain->domain;
                     if ($this->domainRepository->findByName(name: $domain->domain)) {
-						echo COLOR_GREEN . ' OK';
+                        echo COLOR_GREEN . ' OK' . COLOR_DEFAULT . PHP_EOL;
                     } else {
                         $newDomain = new Domain(name: $domain->domain, panel: $panel->getName());
                         $result = $this->domainRepository->insert(domain: $newDomain);
                         echo COLOR_DEFAULT . ' has been created with id ' . COLOR_YELLOW . $result . COLOR_DEFAULT . '.' . PHP_EOL;
                     }
-					echo PHP_EOL;
                 }
             }
-		}
-
             if ($domainCount == 0) {
                 echo 'No second level domains found.' . COLOR_DEFAULT . PHP_EOL;
             }
-		echo PHP_EOL;
+        }
-
+        $this->domainController->updateSlaveZones();
     }
 }

src/Controller/Commands/Command.php

@@ -0,0 +1,68 @@
+<?php
+
+namespace App\Controller\Commands;
+
+use Closure;
+
+/**
+ *
+ */
+class Command
+{
+    public function __construct(
+        private readonly string $name,
+        private readonly Closure $callback,
+        private readonly array  $mandatoryParameters = [],
+        private readonly array  $optionalParameters = [],
+        private readonly string $description = ''
+    )
+    {
+        // no body
+    }
+
+
+    /**
+     * @return string
+     */
+    public function getName(): string
+    {
+        return $this->name;
+    }
+
+    /**
+     * @return array
+     */
+    public function getMandatoryParameters(): array
+    {
+        return $this->mandatoryParameters;
+    }
+
+    /**
+     * @return array
+     */
+    public function getOptionalParameters(): array
+    {
+        return $this->optionalParameters;
+    }
+
+    /**
+     * @return string|null
+     */
+    public function getDescription(): ?string
+    {
+        return $this->description;
+    }
+
+    /**
+     * @return Closure
+     */
+    public function getCallback(): Closure
+    {
+        return $this->callback;
+    }
+
+    public function exec(): void
+    {
+        call_user_func(callback: $this->callback);
+    }
+}

src/Controller/Commands/CommandGroup.php

@@ -0,0 +1,68 @@
+<?php
+
+namespace App\Controller\Commands;
+
+/**
+ *
+ */
+class CommandGroup
+{
+    private array $commands = [];
+
+    public function __construct(private readonly string $name, private readonly string $description)
+    {
+        // no body
+    }
+
+
+    public function addCommand(Command $command): ?CommandGroup
+    {
+        $this->commands[] = $command;
+
+        return $this;
+    }
+
+
+    public function getName(): string
+    {
+        return $this->name;
+    }
+
+
+    public function printCommands(int $longestCommandLength): void
+    {
+        echo COLOR_YELLOW . str_pad(string: $this->name, length: $longestCommandLength + 1) . COLOR_WHITE . $this->description . COLOR_DEFAULT . PHP_EOL;
+        foreach ($this->commands as $command) {
+            echo COLOR_GREEN . str_pad(string: ' ', length: $longestCommandLength + 1, pad_type: STR_PAD_LEFT) . $this->name . ':' . $command->getName();
+            foreach ($command->getMandatoryParameters() as $parameter) {
+                echo ' <' . $parameter . '>';
+            }
+            foreach ($command->getOptionalParameters() as $parameter) {
+                echo ' {' . $parameter . '}';
+            }
+            echo COLOR_WHITE . ' ' . $command->getDescription();
+            echo COLOR_DEFAULT . PHP_EOL;
+        }
+    }
+
+    public function findCommandByName(string $command): ?Command
+    {
+        foreach ($this->commands as $currentCommand) {
+            if ($command === $currentCommand->getName()) {
+                return $currentCommand;
+            }
+        }
+        return null;
+    }
+
+
+    public function exec(string $subcommand): void
+    {
+        if ($command = $this->findCommandByName(command: $subcommand)) {
+            $command->exec();
+        } else {
+            echo COLOR_DEFAULT . 'Command ' . COLOR_YELLOW . $this->name . ':' . $subcommand . COLOR_DEFAULT . ' not found.' . PHP_EOL;
+            exit(1);
+        }
+    }
+}

src/Controller/Commands/CommandGroupContainer.php

@@ -0,0 +1,73 @@
+<?php
+
+namespace App\Controller\Commands;
+
+/**
+ *
+ */
+class CommandGroupContainer
+{
+    private array $commandGroups = [];
+
+    public function addCommandGroup(CommandGroup $commandGroup): CommandGroupContainer
+    {
+        $this->commandGroups[] = $commandGroup;
+
+        return $this;
+    }
+
+    /**
+     * @return void
+     */
+    public function printCommands(): void
+    {
+        $longestCommandLength = $this->getLongestCommandLength();
+        foreach ($this->commandGroups as $commandGroup) {
+            $commandGroup->printCommands($longestCommandLength);
+        }
+    }
+
+
+    /**
+     * @return int
+     */
+    public function getLongestCommandLength(): int
+    {
+        $longest = 0;
+
+        foreach ($this->commandGroups as $group) {
+            $len = strlen(string: $group->getName());
+            if ($len > $longest) {
+                $longest = $len;
+            }
+        }
+
+        return $longest;
+    }
+
+
+    /**
+     * @param string $command
+     * @return ?CommandGroup
+     */
+    private function findGroupByName(string $command): ?CommandGroup
+    {
+        foreach ($this->commandGroups as $group) {
+            if ($group->getName() === $command) {
+                return $group;
+            }
+        }
+        return null;
+    }
+
+
+    public function run(string $command, string $subcommand): void
+    {
+        if ($group = $this->findGroupByName(command: $command)) {
+            $group->exec(subcommand: $subcommand);
+        } else {
+            echo COLOR_DEFAULT . 'Unknown command ' . COLOR_YELLOW . $command . COLOR_DEFAULT . '.' . PHP_EOL;
+            exit(1);
+        }
+    }
+}

src/Controller/ConfigController.php

@@ -9,7 +9,7 @@ class ConfigController
 {
 	private array $config;
 	
-	public function __construct(bool $verbose = false) {
+	public function __construct(bool $verbose = false, bool $quiet = false) {
 		$configFile = dirname(path: __DIR__, levels: 2) . "/config.json.local";
 		if (!file_exists(filename: $configFile)) {
 			$configFile = dirname(path: __DIR__, levels: 2) . "/config.json";
@@ -41,6 +41,11 @@ class ConfigController
 		} else {
 			$this->config['verbose'] = false;
 		}
+        if ($quiet) {
+            $this->config['quiet'] = true;
+        } else {
+            $this->config['quiet'] = false;
+        }
 	}
 	
 	public function getConfig(string $configKey): string {

src/Controller/DomainController.php

@@ -98,16 +98,30 @@ class DomainController
 				'name' => $domain->getName()
 			];
 			if (!empty($nameserver->getAaaa())) {
-				$this->checkController->sendCommand(requestType: 'DELETE', serverName: $nameserver->getName(), versionIP: 6, apiKey: $nameserver->getApikey(), command: 'delete', serverType: 'nameserver', body: $body);
+				$this->checkController->sendCommand(
+                    requestType: 'DELETE',
+                    serverName: $nameserver->getName(),
+                    versionIP: 6,
+                    apiKey: $nameserver->getApikey(),
+                    command: 'delete',
+                    serverType: 'nameserver',
+                    body: $body);
 			} else {
-				$this->checkController->sendCommand(requestType: 'DELETE', serverName: $nameserver->getName(), versionIP: 4, apiKey: $nameserver->getApikey(), command: 'delete', serverType: 'nameserver', body: $body);
+				$this->checkController->sendCommand(
+                    requestType: 'DELETE',
+                    serverName: $nameserver->getName(),
+                    versionIP: 4,
+                    apiKey: $nameserver->getApikey(),
+                    command: 'delete',
+                    serverType: 'nameserver',
+                    body: $body);
 			}
 		}
 	}
 	
 	
 	/**
-	 * @param \App\Entity\Domain $domain
+	 * @param Domain $domain
 	 *
 	 * @return void
 	 */
@@ -230,25 +244,34 @@ class DomainController
 		$domains = $this->domainRepository->findAll();
 		
 		foreach ($domains as $domain) {
-			echo COLOR_YELLOW . str_pad(string: $domain->getName(), length: $maxNameLength + 1) . COLOR_DEFAULT;
+            $idString = '(' . strval(value: $domain->getId()) . ') ';
+			echo COLOR_YELLOW .
+                str_pad(string: $domain->getName(), length: $maxNameLength + 1)
+                . COLOR_DEFAULT
+                . str_pad(string: $idString, length: 7, pad_type: STR_PAD_LEFT);
 
+            $hasError = false;
 			if ($this->isMasterZone(domain: $domain)) {
 				echo 'Master Zone lies on this panel.';
 			} else {
 				if (!str_contains(haystack: $localZones, needle: $domain->getName())) {
-					echo COLOR_RED . ' is missing in ' . COLOR_YELLOW . $this->localZoneFile . COLOR_DEFAULT;
+					echo COLOR_RED . 'is missing in ' . COLOR_YELLOW . $this->localZoneFile . COLOR_DEFAULT;
+                    $hasError = true;
 				} else {
-					echo $domain->getName() . ' exists in ' . COLOR_YELLOW . $this->localZoneFile;
+					echo COLOR_GREEN . 'OK';
 				}
 				
 				$zoneFile = $this->localZonesDir . $domain->getName();
 				
 				if (!file_exists(filename: $zoneFile)) {
-					echo "Missing zone file for $zoneFile . Update zone to create it";
+					echo ' Missing zone file for ' . COLOR_YELLOW . $zoneFile . COLOR_DEFAULT;
-				}
+                    $hasError = true;
 				}
 
-			
+                if ($hasError) {
+                    echo " Update zone (Domain) to create it.";
+                }
+			}
 			echo COLOR_DEFAULT . PHP_EOL;
 		}
 		
@@ -256,7 +279,7 @@ class DomainController
 	
 	
 	/**
-	 * @param \App\Entity\Domain $domain
+	 * @param Domain $domain
 	 *
 	 * @return void
 	 */
@@ -267,11 +290,11 @@ class DomainController
 		
 		// check if we're a master zone
 		if ($this->isMasterZone(domain: $domain)) {
-			echo 'We are zone master for ' . $domainName . PHP_EOL;
+			//echo 'We are zone master for ' . $domainName . PHP_EOL;
-			exit(1);
+			return;
 		}
 		
-		if ($zonefile = fopen(filename: $this->localZonesDir . $domainName, mode: 'w')) {
+		if ($zoneFile = fopen(filename: $this->localZonesDir . $domainName, mode: 'w')) {
 			$panelName = $domain->getPanel();
 			if (!$panel = $this->panelRepository->findByName(name: $panelName)) {
 				echo "Error: Panel $panelName doesn't exist." . PHP_EOL;
@@ -279,18 +302,18 @@ class DomainController
 			}
 			$a = $panel->getA();
 			$aaaa = $panel->getAaaa();
-			fputs(stream: $zonefile, data: 'zone "' . $domainName . '"' . ' IN {' . PHP_EOL);
+			fputs(stream: $zoneFile, data: 'zone "' . $domainName . '"' . ' IN {' . PHP_EOL);
-			fputs(stream: $zonefile, data: "\ttype slave;" . PHP_EOL);
+			fputs(stream: $zoneFile, data: "\ttype slave;" . PHP_EOL);
-			fputs(stream: $zonefile, data: "\tfile \"" . $this->zoneCachePath . $domainName . '.db";' . PHP_EOL);
+			fputs(stream: $zoneFile, data: "\tfile \"" . $this->zoneCachePath . $domainName . '.db";' . PHP_EOL);
-			fputs(stream: $zonefile, data: "\tmasters {" . PHP_EOL);
+			fputs(stream: $zoneFile, data: "\tmasters {" . PHP_EOL);
 			if (!empty($a)) {
-				fputs(stream: $zonefile, data: "\t\t" . $a . ';' . PHP_EOL);
+				fputs(stream: $zoneFile, data: "\t\t" . $a . ';' . PHP_EOL);
 			}
 			if (!empty($aaaa)) {
-				fputs(stream: $zonefile, data: "\t\t" . $aaaa . ';' . PHP_EOL);
+				fputs(stream: $zoneFile, data: "\t\t" . $aaaa . ';' . PHP_EOL);
 			}
-			fputs(stream: $zonefile, data: "\t};" . PHP_EOL);
+			fputs(stream: $zoneFile, data: "\t};" . PHP_EOL);
-			fputs(stream: $zonefile, data: "};" . PHP_EOL);
+			fputs(stream: $zoneFile, data: "};" . PHP_EOL);
 		}
 	}
 	

src/Controller/EncryptionController.php

@@ -20,11 +20,13 @@ class EncryptionController
      */
     function safeEncrypt(string $message, string $key): string
     {
+        $binKey = sodium_hex2bin(string: $key);
         $nonce = random_bytes(length: SODIUM_CRYPTO_SECRETBOX_NONCEBYTES);
 
-        $cipher = base64_encode(string: $nonce . sodium_crypto_secretbox(message: $message, nonce: $nonce, key: $key));
+        $cipher = base64_encode(string: $nonce . sodium_crypto_secretbox(message: $message, nonce: $nonce, key: $binKey));
         sodium_memzero(string: $message);
         sodium_memzero(string: $key);
+        sodium_memzero(string: $binKey);
         return $cipher;
     }
 
@@ -39,19 +41,23 @@ class EncryptionController
      */
     function safeDecrypt(string $encrypted, string $key): string
     {
+        $binKey = sodium_hex2bin(string: $key);
+
         $decoded = base64_decode(string: $encrypted);
         if ($decoded === false) {
-            throw new Exception(message: 'Decoding broken. Wrong key?');
+            throw new Exception(message: 'Decoding broken. Wrong payload.');
         }
+
         if (mb_strlen(string: $decoded, encoding: '8bit') < (SODIUM_CRYPTO_SECRETBOX_NONCEBYTES + SODIUM_CRYPTO_SECRETBOX_MACBYTES)) {
             throw new Exception(message: 'Decoding broken. Incomplete message.');
         }
+
         $nonce = mb_substr(string: $decoded, start: 0, length: SODIUM_CRYPTO_SECRETBOX_NONCEBYTES, encoding: '8bit');
         $ciphertext = mb_substr(string: $decoded, start: SODIUM_CRYPTO_SECRETBOX_NONCEBYTES, length: null, encoding: '8bit');
 
-        $plain = sodium_crypto_secretbox_open(ciphertext: $ciphertext, nonce: $nonce, key: $key);
+        $plain = sodium_crypto_secretbox_open(ciphertext: $ciphertext, nonce: $nonce, key: $binKey);
         if ($plain === false) {
-            throw new Exception(message: 'The message was tampered with in transit');
+            throw new Exception(message: ' Incorrect key.');
         }
         sodium_memzero(string: $ciphertext);
         sodium_memzero(string: $key);

src/Controller/RequestController.php

@@ -11,7 +11,6 @@ use App\Repository\DomainRepository;
 use App\Repository\DynDNSRepository;
 use App\Repository\PanelRepository;
 use Monolog\Logger;
-use OpenApi\Annotations as OA;
 use OpenApi\Attributes as OAT;
 use UnhandledMatchError;
 
@@ -58,13 +57,13 @@ class RequestController
 	
 	
 	/**
-	 * @param \App\Controller\ApiController    $apiController
+	 * @param ApiController $apiController
-	 * @param \App\Repository\ApikeyRepository $apikeyRepository
+	 * @param ApikeyRepository $apikeyRepository
-	 * @param \App\Controller\DomainController $domainController
+	 * @param DomainController $domainController
-	 * @param \App\Repository\DomainRepository $domainRepository
+	 * @param DomainRepository $domainRepository
-	 * @param \App\Repository\DynDNSRepository $dynDNSRepository
+	 * @param DynDNSRepository $dynDNSRepository
-	 * @param \App\Repository\PanelRepository  $panelRepository
+	 * @param PanelRepository $panelRepository
-	 * @param \Monolog\Logger                  $logger
+	 * @param Logger $logger
 	 */
 	public function __construct(
 		private readonly ApiController    $apiController,

src/Entity/Apikey.php

@@ -2,22 +2,39 @@
 
 namespace App\Entity;
 
+use App\Controller\ConfigController;
+use App\Controller\EncryptionController;
+use Exception;
+use SodiumException;
+
 /**
  *
  */
 class Apikey
 {
-	private int $id;
-	private string $name;
-	private string $apiTokenPrefix;
-	private string $apiToken;
 
-	public function __construct(string $name, string $apiTokenPrefix, string $apiToken, int $id = 0)
+    public function __construct(
+        private int             $id = 0,
+        private string          $name = '',
+        private string          $apiTokenPrefix = '',
+        private string          $apiToken = '',
+        private readonly string $passphrase = ''
+    )
     {
-		$this->id = $id;
+        if ($this->passphrase) {
-		$this->name = $name;
+            $configController = new ConfigController();
-		$this->apiTokenPrefix = $apiTokenPrefix;
+            $encryptionController = new EncryptionController();
-		$this->apiToken = $apiToken;
+
+            $encryptionKey = $configController->getConfig(configKey: 'encryptionKey');
+
+            $this->apiTokenPrefix = strtok(string: $this->passphrase, token: '.');
+
+            try {
+                $this->apiToken = $encryptionController->safeEncrypt(message: $this->passphrase, key: $encryptionKey);
+            } catch (Exception|SodiumException $e) {
+                die($e->getMessage() . PHP_EOL);
+            }
+        }
     }
 
 

src/Entity/Nameserver.php

@@ -2,7 +2,11 @@
 
 namespace App\Entity;
 
+use App\Controller\ConfigController;
+use App\Controller\EncryptionController;
+use Exception;
 use OpenApi\Attributes as OAT;
+use SodiumException;
 
 /**
  *
@@ -11,24 +15,60 @@ use OpenApi\Attributes as OAT;
 
 class Nameserver
 {
-	private int $id;
+    /**
-	private String $name;
+     * @param string $name
-	private String $a;
+     * @param int $id
-	private String $aaaa;
+     * @param string $a
-	private String $apikey;
+     * @param string $aaaa
-	
+     * @param string $passphrase
-	public function __construct(String $name, int $id = 0, String $a = '', String $aaaa = '', String $apikey = '')
+     * @param string $apikey
+     * @param string $apikeyPrefix
+     */
+    public function __construct(
+        private string          $name,
+        private int             $id = 0,
+        private string          $a = '',
+        private string          $aaaa = '',
+        private readonly string $passphrase = '',
+        private string          $apikey = '',
+        private string          $apikeyPrefix = '')
 	{
-		$this->id = $id;
+        if ($this->passphrase) {
-		$this->name = $name;
+            $configController = new ConfigController();
-		$this->a = $a;
+            $encryptionController = new EncryptionController();
-		$this->aaaa = $aaaa;
+
-		$this->apikey = $apikey;
+            $encryptionKey = $configController->getConfig(configKey: 'encryptionKey');
+
+            [$this->apikeyPrefix] = explode(separator: '.', string: $this->passphrase);
+
+            try {
+                $this->apikey = $encryptionController->safeEncrypt(message: $this->passphrase, key: $encryptionKey);
+            } catch (Exception|SodiumException $e) {
+                die($e->getMessage() . PHP_EOL);
+            }
+        }
+
+    }
+
+    /**
+     * @return string
+     */
+    public function getApikeyPrefix(): string
+    {
+        return $this->apikeyPrefix;
+    }
+
+    /**
+     * @param string $apikeyPrefix
+     */
+    public function setApikeyPrefix(string $apikeyPrefix): void
+    {
+        $this->apikeyPrefix = $apikeyPrefix;
     }
 
 
 	/**
-	 * @return String
+	 * @return string
 	 */
 	#[OAT\Property(type: 'string')]
 	public function getA(): string
@@ -37,7 +77,7 @@ class Nameserver
 	}
 
 	/**
-	 * @param String $a
+	 * @param string $a
 	 */
 	public function setA(string $a): void
 	{
@@ -45,7 +85,7 @@ class Nameserver
 	}
 
 	/**
-	 * @return String
+	 * @return string
 	 */
 	#[OAT\Property(type: 'string')]
 	public function getAaaa(): string
@@ -54,7 +94,7 @@ class Nameserver
 	}
 
 	/**
-	 * @param String $aaaa
+	 * @param string $aaaa
 	 */
 	public function setAaaa(string $aaaa): void
 	{
@@ -62,7 +102,7 @@ class Nameserver
 	}
 
 	/**
-	 * @return String
+	 * @return string
 	 */
 	#[OAT\Property(type: 'string')]
 	public function getApikey(): string
@@ -71,7 +111,7 @@ class Nameserver
 	}
 
 	/**
-	 * @param String $apikey
+	 * @param string $apikey
 	 */
 	public function setApikey(string $apikey): void
 	{
@@ -96,7 +136,7 @@ class Nameserver
 	}
 
 	/**
-	 * @return String
+	 * @return string
 	 */
 	#[OAT\Property(type: 'string')]
 	public function getName(): string
@@ -105,11 +145,19 @@ class Nameserver
 	}
 
 	/**
-	 * @param String $name
+	 * @param string $name
 	 */
 	public function setName(string $name): void
 	{
 		$this->name = $name;
 	}
 
+    /**
+     * @return string
+     */
+    public function getPassphrase(): string
+    {
+        return $this->passphrase;
+    }
+
 }

src/Entity/Panel.php

@@ -2,75 +2,76 @@
 
 namespace App\Entity;
 
+use App\Controller\ConfigController;
+use App\Controller\EncryptionController;
+use Exception;
+use SodiumException;
+
 /**
  *
  */
 class Panel
 {
-	private int $id;
-	private String $name;
-	private String $a;
-	private String $aaaa;
-	private String $apikey;
-	private int $self;
-	
     /**
-	 * @param String $name
+     * @param string $name
      * @param int $id
-	 * @param String $a
+     * @param string $a
-	 * @param String $aaaa
+     * @param string $aaaa
-	 * @param String $apikey
+     * @param string $passphrase
-	 * @param int    $self
+     * @param string $apikey
+     * @param string $apikeyPrefix
+     * @param string $self
      */
-	public function __construct(String $name, int $id = 0, String $a = '', String $aaaa = '', String $apikey = '', int $self = 0)
+    public function __construct(
+        private string          $name,
+        private int             $id = 0,
+        private string          $a = '',
+        private string          $aaaa = '',
+        private readonly string $passphrase = '',
+        private string          $apikey = '',
+        private string          $apikeyPrefix = '',
+        private string          $self = 'no',
+    )
+    {
+        if ($this->passphrase) {
+            $configController = new ConfigController();
+            $encryptionController = new EncryptionController();
+
+            $encryptionKey = $configController->getConfig(configKey: 'encryptionKey');
+
+            $this->apikeyPrefix = strtok(string: $this->passphrase, token: '.');
+
+            try {
+                $this->apikey = $encryptionController->safeEncrypt(message: $this->passphrase, key: $encryptionKey);
+            } catch (Exception|SodiumException $e) {
+                die($e->getMessage() . PHP_EOL);
+            }
+        }
+    }
+
+    /**
+     * @return string
+     */
+    public function getPassphrase(): string
+    {
+        return $this->passphrase;
+    }
+
+
+    /**
+     * @return string
+     */
+    public function getName(): string
+    {
+        return $this->name;
+    }
+
+    /**
+     * @param string $name
+     */
+    public function setName(string $name): void
     {
-		$this->id = $id;
         $this->name = $name;
-		$this->a = $a;
-		$this->aaaa = $aaaa;
-		$this->apikey = $apikey;
-		$this->self = $self;
-	}
-	
-	/**
-	 * @return int
-	 */
-	public function getSelf(): int
-	{
-		return $this->self;
-	}
-	
-	/**
-	 * @param int $self
-	 */
-	public function setSelf(int $self): void
-	{
-		$this->self = $self;
-	}
-	
-	
-	/**
-	 * @return String
-	 */
-	public function getA(): string
-	{
-		return $this->a;
-	}
-	
-	/**
-	 * @return String
-	 */
-	public function getAaaa(): string
-	{
-		return $this->aaaa;
-	}
-	
-	/**
-	 * @return String
-	 */
-	public function getApikey(): string
-	{
-		return $this->apikey;
     }
 
     /**
@@ -90,33 +91,50 @@ class Panel
     }
 
     /**
-	 * @return String
+     * @return string
      */
-	public function getName(): string
+    public function getA(): string
     {
-		return $this->name;
+        return $this->a;
     }
 
 
     /**
-	 * @param String $apikey
+     * @return string
      */
-	public function setApikey(string $apikey): void
+    public function getSelf(): string
     {
-		$this->apikey = $apikey;
+        return $this->self;
+    }
+
+    /**
+     * @param string $self
+     */
+    public function setSelf(string $self): void
+    {
+        $this->self = $self;
     }
 
 
     /**
-	 * @param String $name
+     * @return string
      */
-	public function setName(string $name): void
+    public function getAaaa(): string
     {
-		$this->name = $name;
+        return $this->aaaa;
     }
 
     /**
-	 * @param String $a
+     * @return string
+     */
+    public function getApikey(): string
+    {
+        return $this->apikey;
+    }
+
+
+    /**
+     * @param string $a
      */
     public function setA(string $a): void
     {
@@ -124,11 +142,20 @@ class Panel
     }
 
     /**
-	 * @param String $aaaa
+     * @param string $aaaa
      */
     public function setAaaa(string $aaaa): void
     {
         $this->aaaa = $aaaa;
     }
 
+
+    /**
+     * @return string
+     */
+    public function getApikeyPrefix(): string
+    {
+        return $this->apikeyPrefix;
+    }
+
 }

src/Repository/PanelRepository.php

@@ -3,7 +3,6 @@
 namespace App\Repository;
 
 use App\Controller\DatabaseConnection;
-use App\Entity\Domain;
 use App\Entity\Panel;
 use PDO;
 use PDOException;
@@ -14,39 +13,37 @@ use PDOException;
 class PanelRepository
 {
     public function __construct(private readonly DatabaseConnection   $databaseConnection)
-	{}
+    {
+        // no body
+    }
 
-	public function findSelf(): array
+    /**
+     * @return array|null
+     */
+    public function findSelf(): ?array
     {
         $sql = "
-			SELECT id, name, a, aaaa, apikey, self
+			SELECT id, name, a, aaaa, apikey, apikey_prefix, self
             FROM " . DatabaseConnection::TABLE_PANELS . "
             WHERE self = 1";
 
         $panels = [];
-		try {
+
         $statement = $this->databaseConnection->getConnection()->prepare(query: $sql);
         $statement->execute();
         while ($result = $statement->fetch(mode: PDO::FETCH_ASSOC)) {
-				$panel = new Panel(name: $result['name'], id: $result['id'], a: $result['a'], aaaa: $result['aaaa'], apikey: $result['apikey'], self: $result['self']);
+            $panel = new Panel(name: $result['name'], id: $result['id'], a: $result['a'], aaaa: $result['aaaa'], apikey: $result['apikey'], apikeyPrefix: $result['apikey_prefix'], self: $result['self']);
             $panels[] = $panel;
         }
         return $panels;
-		} catch (PDOException $e) {
-			exit($e->getMessage());
     }
 
 
-	}
+    public function findAll(): ?array
-	
-	/**
-	 * @return array
-	 */
-	public function findAll(): array
     {
         $panels = [];
         $sql = "
-            SELECT id, name, a, aaaa, apikey, self
+            SELECT id, name, a, aaaa, apikey, apikey_prefix, self
             FROM " . DatabaseConnection::TABLE_PANELS . "
             ORDER BY name";
 
@@ -54,7 +51,7 @@ class PanelRepository
             $statement = $this->databaseConnection->getConnection()->prepare(query: $sql);
             $statement->execute();
             while ($result = $statement->fetch(mode: PDO::FETCH_ASSOC)) {
-				$panel = new Panel(name: $result['name'], id: $result['id'], a: $result['a'], aaaa: $result['aaaa'], apikey: $result['apikey'], self: $result['self']);
+                $panel = new Panel(name: $result['name'], id: $result['id'], a: $result['a'], aaaa: $result['aaaa'], apikey: $result['apikey'], apikeyPrefix: $result['apikey_prefix'], self: $result['self']);
                 $panels[] = $panel;
             }
             return $panels;
@@ -67,12 +64,12 @@ class PanelRepository
     /**
      * @param int $id
      *
-	 * @return null|\App\Entity\Panel
+     * @return null|Panel
      */
     public function findByID(int $id): ?Panel
     {
         $sql = "
-			SELECT id, name, a, aaaa, apikey, self
+			SELECT id, name, a, aaaa, apikey, apikey_prefix, self
 			FROM . " . DatabaseConnection::TABLE_PANELS . "
             WHERE id = :id";
 
@@ -81,7 +78,7 @@ class PanelRepository
             $statement->bindParam(param: ':id', var: $id);
             $statement->execute();
             if ($result = $statement->fetch(mode: PDO::FETCH_ASSOC)) {
-				return new Panel(name: $result['name'], a: $result['a'], aaaa: $result['aaaa'], apikey: $result['apikey'], self: $result['self']);
+                return new Panel(name: $result['name'], a: $result['a'], aaaa: $result['aaaa'], apikey: $result['apikey'], apikeyPrefix: $result['apikey_prefix'], self: $result['self']);
             } else {
                 return null;
             }
@@ -94,12 +91,12 @@ class PanelRepository
     /**
      * @param String $name
      *
-	 * @return \App\Entity\Panel|bool
+     * @return Panel|null
      */
-	public function findByName(string $name): Panel|bool
+    public function findByName(string $name): ?Panel
     {
         $sql = "
-			SELECT id, name, a, aaaa, apikey, self
+			SELECT id, name, a, aaaa, apikey, apikey_prefix, self
 			FROM " . DatabaseConnection::TABLE_PANELS . "
             WHERE name = :name";
 
@@ -108,9 +105,9 @@ class PanelRepository
             $statement->bindParam(param: ':name', var: $name);
             $statement->execute();
             if ($result = $statement->fetch(mode: PDO::FETCH_ASSOC)) {
-				return new Panel(name: $result['name'], a: $result['a'], aaaa: $result['aaaa'], apikey: $result['apikey'], self: $result['self']);
+                return new Panel(name: $result['name'], a: $result['a'], aaaa: $result['aaaa'], apikey: $result['apikey'], apikeyPrefix: $result['apikey_prefix'], self: $result['self']);
             } else {
-				return false;
+                return null;
             }
         } catch (PDOException $e) {
             exit($e->getMessage());
@@ -119,18 +116,21 @@ class PanelRepository
 
 
     /**
-	 * @param String $name
+     * @param Panel $panel
-	 * @param String $a
+     * @return int|null
-	 * @param String $aaaa
-	 * @param String $apikey
-	 *
-	 * @return string|false
      */
-	public function insert(string $name, string $a, string $aaaa, String $apikey, int $self): bool|string
+    public function insert(Panel $panel): ?int
     {
+        $name = $panel->getName();
+        $a = $panel->getA();
+        $aaaa = $panel->getAaaa();
+        $apikey = $panel->getApikey();
+        $apikeyPrefix = $panel->getApikeyPrefix();
+        $self = $panel->getSelf();
+
         $sql = "
-            INSERT INTO " . DatabaseConnection::TABLE_PANELS . " (name, a, aaaa, apikey, self)
+            INSERT INTO " . DatabaseConnection::TABLE_PANELS . " (name, a, aaaa, apikey, apikey_prefix, self)
-            VALUES (:name, :a, :aaaa, :apikey, :self)";
+            VALUES (:name, :a, :aaaa, :apikey, :prefix, :self)";
 
         try {
             $statement = $this->databaseConnection->getConnection()->prepare(query: $sql);
@@ -138,10 +138,11 @@ class PanelRepository
             $statement->bindParam(param: ':a', var: $a);
             $statement->bindParam(param: ':aaaa', var: $aaaa);
             $statement->bindParam(param: ':apikey', var: $apikey);
+            $statement->bindParam(param: ':prefix', var: $apikeyPrefix);
             $statement->bindParam(param: ':self', var: $self);
             $statement->execute();
 
-			return $this->databaseConnection->getConnection()->lastInsertId();
+            return intval(value: $this->databaseConnection->getConnection()->lastInsertId());
         } catch (PDOException $e) {
             exit($e->getMessage());
         }
@@ -149,18 +150,22 @@ class PanelRepository
 
 
     /**
-	 * @param Int    $id
+     * @param Panel $panel
-	 * @param String $name
+     * @return int|null
-	 * @param String $a
-	 * @param String $aaaa
-	 * @param String $apikey
-	 *
-	 * @return false|int
      */
-	public function update(int $id, string $name, string $a, string $aaaa, String $apikey, int $self): bool|int
+    public function update(Panel $panel): ?int
     {
+        $id = $panel->getId();
+        $name = $panel->getName();
+        $a = $panel->getA();
+        $aaaa = $panel->getAaaa();
+        $apikey = $panel->getApikey();
+        $apikeyPrefix = $panel->getApikeyPrefix();
+        $passphrase = $panel->getPassphrase();
+
         $current = $this->findByID(id: $id);
 
+
         if (empty($name)) {
             $name = $current->getName();
         }
@@ -170,25 +175,24 @@ class PanelRepository
         if (empty($aaaa)) {
             $aaaa = $current->getAaaa();
         }
-		if (empty($apikey)) {
+
+        if (empty($passphrase)) {
             $apikey = $current->getApikey();
+            $apikeyPrefix = $current->getApikeyPrefix();
         }
 
         if (empty($self)) {
-			echo "self is empty";
             $self = $current->getSelf();
-		} else {
-			if ($self == -1) {
-				$self = 0;
-			}
         }
 
+
         $sql = "
 			UPDATE " . DatabaseConnection::TABLE_PANELS . " SET
 				name = :name,
 				a = :a,
                	aaaa = :aaaa,
                	apikey = :apikey,
+               	apikey_prefix = :apikey_prefix,
                	self = :self
             WHERE id = :id";
 
@@ -199,13 +203,14 @@ class PanelRepository
             $statement->bindParam(param: 'a', var: $a);
             $statement->bindParam(param: 'aaaa', var: $aaaa);
             $statement->bindParam(param: 'apikey', var: $apikey);
+            $statement->bindParam(param: 'apikey_prefix', var: $apikeyPrefix);
             $statement->bindParam(param: 'self', var: $self);
             $statement->execute();
 
-			return $statement->rowCount();
+            return intval(value: $statement->rowCount());
         } catch (PDOException $e) {
             echo $e->getMessage();
-			return false;
+            return null;
         }
     }
 
@@ -213,9 +218,9 @@ class PanelRepository
     /**
      * @param $id
      *
-	 * @return int
+     * @return int|null
      */
-	public function delete($id): int
+    public function delete($id): ?int
     {
         $sql = "
             DELETE FROM " . DatabaseConnection::TABLE_PANELS . "
@@ -226,7 +231,7 @@ class PanelRepository
             $statement->bindParam(param: 'id', var: $id);
             $statement->execute();
 
-			return $statement->rowCount();
+            return intval(value: $statement->rowCount());
         } catch (PDOException $e) {
             exit($e->getMessage());
         }
@@ -236,9 +241,9 @@ class PanelRepository
     /**
      * @param String $field
      *
-	 * @return int
+     * @return int|null
      */
-	public function getLongestEntry(String $field): int
+    public function getLongestEntry(string $field): ?int
     {
         $sql = "
             SELECT MAX(LENGTH(" . $field . ")) as length FROM " . DatabaseConnection::TABLE_PANELS;