Manage IT infrastructure assets (routers, switches, servers, GPU clusters) through a Go + Vue 3 platform with real-time health probing, SSH remote control, configuration backup, bulk import, network topology visualization, and PM2 process management. Supports H3C, Huawei, Cisco, MikroTik, Ruijie, DCN, and Linux. Use when the user asks about IT asset management, network device operations, infrastructure monitoring, SSH device control, or development on this Go + Vue 3 platform.

8 stars
1 forks
Vue
135 views

SKILL.md


name: netops-asset-manager description: "Manage IT infrastructure assets (routers, switches, servers, GPU clusters) through a Go + Vue 3 platform with real-time health probing, SSH remote control, configuration backup, bulk import, network topology visualization, and PM2 process management. Supports H3C, Huawei, Cisco, MikroTik, Ruijie, DCN, and Linux. Use when the user asks about IT asset management, network device operations, infrastructure monitoring, SSH device control, or development on this Go + Vue 3 platform." user-invocable: true triggers:

  • "network device management"
  • "asset inventory"
  • "SSH reboot"
  • "config backup"
  • "health probe"
  • "network topology"
  • "bulk import devices"
  • "PM2 process management"

NetOps Asset Manager

Go + Vue 3 IT infrastructure asset management platform. Single binary deployment with embedded frontend.

Capabilities

  1. Device Management: CRUD for network devices with vendor auto-detection (H3C, Huawei, Cisco, MikroTik, Ruijie, DCN, Linux), SSH credential storage, and bulk Excel/CSV import.
  2. Health Monitoring: Background ICMP ping + TCP:22 probing every 5 minutes; auto-updates device online/offline status.
  3. SSH Operations: Native Go SSH client for remote reboot and running-config backup with vendor-aware commands.
  4. Network Discovery: Nmap subnet scanning to find new devices.
  5. AI Assistant: OpenClaw chat with intent-based asset auto-registration.
  6. Topology Visualization: Interactive vis-network graph of device connections.
  7. PM2 Management: Monitor, restart, stop, and deploy PM2 processes across machines.
  8. Model Management: CRUD for AI model configs synced to OpenClaw.
  9. System Deployment: One-click Docker, vLLM, and llama.cpp deployment.

Architecture

backend/                          # Go (Gin + Ent ORM)
├── cmd/server/main.go            # Server entry point
├── cmd/migrate/main.go           # Data migration tool
├── ent/schema/                   # Database models
└── internal/
    ├── auth/                     # JWT + bcrypt + RBAC middleware
    ├── handler/                  # API handlers (13 files)
    ├── router/                   # Route registration
    ├── service/health/           # ICMP/TCP prober + scheduler
    ├── service/ssh/              # SSH client, reboot, backup
    ├── service/importer/         # Excel parser
    └── embedded/                 # Frontend embed.FS

frontend/                         # Vue 3.4 + Vite 5 + TailwindCSS
├── src/stores/                   # Pinia state management
├── src/views/                    # 8 view pages
└── vite.config.ts

API Endpoints

Method Path Auth Description
POST /api/users/login Public Login, returns JWT
GET /api/inventory Bearer List devices
POST /api/inventory/add operator+ Add device
PUT /api/inventory/:ip operator+ Update device
DELETE /api/inventory/:ip operator+ Delete device
POST /api/inventory/reboot/:ip operator+ SSH reboot
POST /api/inventory/backup/:ip operator+ SSH config backup
POST /api/inventory/import operator+ Bulk Excel import
GET /api/stats Bearer Dashboard statistics
POST /api/discover operator+ Nmap subnet scan
GET/POST/DELETE /api/topology/links Bearer/operator+ Topology links
GET/POST/PUT/DELETE /api/models Bearer/root AI model config
GET/POST /api/pm2/* Bearer/operator+ PM2 management
POST /api/chat Bearer AI assistant
GET /api/system/info Bearer System info

Safe Operation Guidelines

SSH Reboot (POST /api/inventory/reboot/:ip)

  1. Verify the target device IP and confirm intent before calling this endpoint — reboots are immediate and non-reversible.
  2. The SSH connection drops on success (expected). A 200 response means the reboot command was sent.
  3. Verify recovery: wait 2–5 minutes, then check GET /api/inventory for the device's health status to confirm it came back online.
  4. If the device stays offline: check physical connectivity, SSH credentials, and console access. The health prober will update status within one probe interval (default 5 min).

Config Backup (POST /api/inventory/backup/:ip)

  1. Confirm the device vendor is correct in the inventory — wrong vendor → wrong command → empty or garbled output.
  2. After backup, verify the response contains configuration text (not an error or empty string).
  3. Backups are stored in PostgreSQL backup table; query GET /api/inventory or check the database directly to confirm persistence.

Bulk Import (POST /api/inventory/import)

  1. Validate the Excel/CSV file structure before uploading: required columns are IP, vendor, and device name.
  2. Import is additive — existing devices with the same IP are updated, not duplicated.
  3. Review the response for per-row success/failure counts. Fix rejected rows and re-import only those.

Error Recovery

  • SSH timeout (SSH_CONNECT_TIMEOUT default 10s): increase timeout in config.yaml or verify device is reachable via ping.
  • Database connection failure: check DATABASE_URL in config.yaml and verify PostgreSQL is running (systemctl status postgresql).
  • Health prober not updating: confirm the backend process is running and PROBE_INTERVAL is set. Check logs for ICMP permission errors (may need cap_net_raw).

Deployment

Quick Start

# Prerequisites: Go 1.26+, Node.js 22+, PostgreSQL 15+
createdb netops

# Option A: Run from source
cd frontend && npm install --legacy-peer-deps && cd ..
make run           # Terminal 1: backend on :8081
make dev-frontend  # Terminal 2: frontend on :5173

# Option B: Single binary
make build
./netops    # → http://localhost:8081  (default: admin / admin)

Docker

make docker-build
docker run -p 8081:8081 \
  -e JWT_SECRET="secret" \
  -v ~/.openclaw:/root/.openclaw \
  netops-asset-manager:latest

Configuration

config.yaml (env var overrides via Viper):

Key Default Description
PORT 8081 Listen port
DATABASE_URL postgres://... PostgreSQL connection
JWT_SECRET (change me) JWT signing key
JWT_EXPIRY 24h Token TTL
PROBE_INTERVAL 5m Health probe interval
SSH_CONNECT_TIMEOUT 10s SSH connection timeout

Vendor → Driver Mapping

Vendor Driver Config Command
H3C hp_comware display current-configuration
Huawei huawei display current-configuration
Cisco cisco_ios show running-config
MikroTik mikrotik_routeros /export
Linux linux cat /etc/os-release && ip addr

References

  • references/automation.md — Automation implementation guide (Go SSH client usage, adding vendors)
  • references/vendors.md — Vendor command reference (switches, routers, firewalls, GPUs, storage)
  • references/dependencies.md — System dependency guide (Go, Node, PostgreSQL, OS-specific install)
  • references/snmp.md — SNMP OID reference for polling fallback