feat: 门户网站初始提交

- Go + Gin + html/template 服务端渲染
- 主页：Google 风格搜索框 + 导航卡片
- 后台：卡片 CRUD、搜索引擎配置、主页背景/标题配置
- 图片上传：支持 jpg/jpeg/png/gif，自动压缩，缩略图参数 ?thumb=1
- 安全：登录日志、修改密码、IP 自动封禁、IP 白名单
- 访问统计：主页访问/卡片点击/搜索追踪、实时流量、IP 统计
- SQLite 存储（modernc.org/sqlite，纯 Go）
- 内存 Session + bcrypt 密码哈希

templates/admin/403.html

@@ -0,0 +1,11 @@
+{{define "admin/403.html"}}
+{{template "header" .}}
+<div class="login-container">
+    <div class="login-card">
+        <h1 class="login-title">访问被拒绝</h1>
+        <div class="login-error">您的 IP 地址 <code>{{.IP}}</code> 不在白名单中，无法访问后台管理页面。</div>
+        <p style="text-align:center;color:#999;font-size:14px;">如需访问，请联系管理员将您的 IP 添加到白名单。</p>
+    </div>
+</div>
+{{template "footer" .}}
+{{end}}

templates/admin/access_logs.html

@@ -0,0 +1,97 @@
+{{define "admin/access_logs.html"}}
+{{template "header" .}}
+<div class="admin-layout">
+    <nav class="admin-nav">
+        <div class="admin-nav-brand">Portal 管理</div>
+        <div class="admin-nav-links">
+            <a href="/admin" class="admin-nav-link">首页</a>
+            <a href="/admin/cards" class="admin-nav-link">卡片管理</a>
+            <a href="/admin/access-logs" class="admin-nav-link active">访问日志</a>
+            <a href="/admin/logs" class="admin-nav-link">登录日志</a>
+            <a href="/admin/ip-whitelist" class="admin-nav-link">IP白名单</a>
+            <a href="/admin/settings" class="admin-nav-link">设置</a>
+            <a href="/admin/password" class="admin-nav-link">修改密码</a>
+        </div>
+        <div class="admin-nav-user">
+            <span>{{.Username}}</span>
+            <form method="POST" action="/admin/logout" style="display:inline">
+                <button type="submit" class="btn btn-sm btn-secondary">退出</button>
+            </form>
+        </div>
+    </nav>
+    <main class="admin-main">
+        <h1>访问日志</h1>
+
+        <!-- 筛选表单 -->
+        <form class="filter-form" method="GET" action="/admin/access-logs">
+            <div class="filter-row">
+                <div class="filter-group">
+                    <label>IP地址</label>
+                    <input type="text" name="ip" value="{{.FilterIP}}" placeholder="搜索IP...">
+                </div>
+                <div class="filter-group">
+                    <label>动作类型</label>
+                    <select name="action">
+                        <option value="">全部</option>
+                        <option value="visit" {{if eq .FilterAction "visit"}}selected{{end}}>访问</option>
+                        <option value="click" {{if eq .FilterAction "click"}}selected{{end}}>点击</option>
+                        <option value="search" {{if eq .FilterAction "search"}}selected{{end}}>搜索</option>
+                    </select>
+                </div>
+                <div class="filter-group filter-actions-group">
+                    <button type="submit" class="btn btn-primary btn-sm">筛选</button>
+                    <a href="/admin/access-logs" class="btn btn-secondary btn-sm">重置</a>
+                </div>
+            </div>
+        </form>
+
+        <table class="admin-table">
+            <thead>
+                <tr>
+                    <th>时间</th>
+                    <th>IP地址</th>
+                    <th>类型</th>
+                    <th>详情</th>
+                    <th>来源</th>
+                    <th>客户端</th>
+                </tr>
+            </thead>
+            <tbody>
+                {{range .Logs}}
+                <tr>
+                    <td>{{.CreatedAt.Format "2006-01-02 15:04:05"}}</td>
+                    <td><code>{{.IP}}</code></td>
+                    <td>
+                        {{if eq .ActionType "visit"}}<span class="badge badge-success">访问</span>
+                        {{else if eq .ActionType "click"}}<span class="badge badge-primary">点击</span>
+                        {{else if eq .ActionType "search"}}<span class="badge badge-warning">搜索</span>
+                        {{else}}<span class="badge badge-secondary">{{.ActionType}}</span>{{end}}
+                    </td>
+                    <td class="detail-cell" title="{{.Detail}}">{{if .Detail}}{{.Detail}}{{else}}—{{end}}</td>
+                    <td class="ua-cell" title="{{.Referer}}">{{if .Referer}}<a href="{{.Referer}}" target="_blank">来源</a>{{else}}—{{end}}</td>
+                    <td class="ua-cell" title="{{.UserAgent}}">{{.UserAgent}}</td>
+                </tr>
+                {{end}}
+                {{if not .Logs}}
+                <tr>
+                    <td colspan="6" style="text-align:center;color:#999;">暂无访问日志</td>
+                </tr>
+                {{end}}
+            </tbody>
+        </table>
+
+        {{if gt .TotalPages 1}}
+        <div class="pagination">
+            {{if gt .Page 1}}
+            <a href="/admin/access-logs?page={{sub .Page 1}}&ip={{.FilterIP}}&action={{.FilterAction}}" class="btn btn-sm btn-secondary">上一页</a>
+            {{end}}
+            <span class="pagination-info">第 {{.Page}} / {{.TotalPages}} 页（共 {{.Total}} 条）</span>
+            {{if lt .Page .TotalPages}}
+            <a href="/admin/access-logs?page={{add .Page 1}}&ip={{.FilterIP}}&action={{.FilterAction}}" class="btn btn-sm btn-secondary">下一页</a>
+            {{end}}
+        </div>
+        {{end}}
+    </main>
+</div>
+{{template "footer" .}}
+{{end}}

templates/admin/card_form.html

@@ -0,0 +1,64 @@
+{{define "admin/card_form.html"}}
+{{template "header" .}}
+<div class="admin-layout">
+    <nav class="admin-nav">
+        <div class="admin-nav-brand">Portal 管理</div>
+        <div class="admin-nav-links">
+            <a href="/admin" class="admin-nav-link">首页</a>
+            <a href="/admin/cards" class="admin-nav-link active">卡片管理</a>
+            <a href="/admin/access-logs" class="admin-nav-link">访问日志</a>
+            <a href="/admin/logs" class="admin-nav-link">登录日志</a>
+            <a href="/admin/ip-whitelist" class="admin-nav-link">IP白名单</a>
+            <a href="/admin/settings" class="admin-nav-link">设置</a>
+            <a href="/admin/password" class="admin-nav-link">修改密码</a>
+        </div>
+        <div class="admin-nav-user">
+            <span>{{.Username}}</span>
+            <form method="POST" action="/admin/logout" style="display:inline">
+                <button type="submit" class="btn btn-sm btn-secondary">退出</button>
+            </form>
+        </div>
+    </nav>
+    <main class="admin-main">
+        <h1>{{if .IsEdit}}编辑卡片{{else}}新建卡片{{end}}</h1>
+
+        {{if .Error}}<div class="form-error">{{.Error}}</div>{{end}}
+
+        <form method="POST" action="{{if .IsEdit}}/admin/cards/{{.Card.ID}}{{else}}/admin/cards{{end}}" class="admin-form">
+            <div class="form-group">
+                <label for="icon">图标 (Emoji 或上传图片)</label>
+                <input type="text" id="icon" name="icon" value="{{if .Card}}{{.Card.Icon}}{{end}}" placeholder="例如: 📧 或上传图片">
+            </div>
+            <div class="form-group">
+                <label for="title">标题 <span class="required">*</span></label>
+                <input type="text" id="title" name="title" value="{{if .Card}}{{.Card.Title}}{{end}}" required>
+            </div>
+            <div class="form-group">
+                <label for="subtitle">副标题</label>
+                <input type="text" id="subtitle" name="subtitle" value="{{if .Card}}{{.Card.Subtitle}}{{end}}">
+            </div>
+            <div class="form-group">
+                <label for="url">链接 <span class="required">*</span></label>
+                <input type="url" id="url" name="url" value="{{if .Card}}{{.Card.URL}}{{end}}" required placeholder="https://">
+            </div>
+            <div class="form-group">
+                <label>
+                    <input type="checkbox" name="enabled" value="1" {{if .Card}}{{if .Card.Enabled}}checked{{end}}{{else}}checked{{end}}>
+                    启用
+                </label>
+            </div>
+            <div class="form-actions">
+                <button type="submit" class="btn btn-primary">{{if .IsEdit}}保存修改{{else}}创建卡片{{end}}</button>
+                <a href="/admin/cards" class="btn btn-secondary">取消</a>
+            </div>
+        </form>
+    </main>
+</div>
+<script src="/static/upload.js"></script>
+<script>
+document.addEventListener('DOMContentLoaded', function() {
+    setupUpload('#icon', 'icon');
+});
+</script>
+{{template "footer" .}}
+{{end}}

templates/admin/cards.html

@@ -0,0 +1,82 @@
+{{define "admin/cards.html"}}
+{{template "header" .}}
+<div class="admin-layout">
+    <nav class="admin-nav">
+        <div class="admin-nav-brand">Portal 管理</div>
+        <div class="admin-nav-links">
+            <a href="/admin" class="admin-nav-link">首页</a>
+            <a href="/admin/cards" class="admin-nav-link active">卡片管理</a>
+            <a href="/admin/access-logs" class="admin-nav-link">访问日志</a>
+            <a href="/admin/logs" class="admin-nav-link">登录日志</a>
+            <a href="/admin/ip-whitelist" class="admin-nav-link">IP白名单</a>
+            <a href="/admin/settings" class="admin-nav-link">设置</a>
+            <a href="/admin/password" class="admin-nav-link">修改密码</a>
+        </div>
+        <div class="admin-nav-user">
+            <span>{{.Username}}</span>
+            <form method="POST" action="/admin/logout" style="display:inline">
+                <button type="submit" class="btn btn-sm btn-secondary">退出</button>
+            </form>
+        </div>
+    </nav>
+    <main class="admin-main">
+        <div class="admin-header">
+            <h1>卡片管理</h1>
+            <a href="/admin/cards/new" class="btn btn-primary">+ 新建卡片</a>
+        </div>
+
+        <table class="admin-table">
+            <thead>
+                <tr>
+                    <th>图标</th>
+                    <th>标题</th>
+                    <th>副标题</th>
+                    <th>链接</th>
+                    <th>排序</th>
+                    <th>状态</th>
+                    <th>操作</th>
+                </tr>
+            </thead>
+            <tbody>
+                {{range .Cards}}
+                <tr>
+                    <td>{{if .Icon}}<span class="card-emoji">{{.Icon}}</span>{{else}}—{{end}}</td>
+                    <td>{{.Title}}</td>
+                    <td>{{if .Subtitle}}{{.Subtitle}}{{else}}—{{end}}</td>
+                    <td><a href="{{.URL}}" target="_blank" rel="noopener">{{.URL}}</a></td>
+                    <td>{{.Sort}}</td>
+                    <td>
+                        {{if .Enabled}}
+                        <span class="badge badge-success">启用</span>
+                        {{else}}
+                        <span class="badge badge-secondary">禁用</span>
+                        {{end}}
+                    </td>
+                    <td class="actions">
+                        <form method="POST" action="/admin/cards/{{.ID}}/toggle" style="display:inline">
+                            <button type="submit" class="btn btn-sm btn-secondary">{{if .Enabled}}禁用{{else}}启用{{end}}</button>
+                        </form>
+                        <form method="POST" action="/admin/cards/{{.ID}}/move-up" style="display:inline">
+                            <button type="submit" class="btn btn-sm btn-secondary">↑</button>
+                        </form>
+                        <form method="POST" action="/admin/cards/{{.ID}}/move-down" style="display:inline">
+                            <button type="submit" class="btn btn-sm btn-secondary">↓</button>
+                        </form>
+                        <a href="/admin/cards/{{.ID}}/edit" class="btn btn-sm btn-primary">编辑</a>
+                        <form method="POST" action="/admin/cards/{{.ID}}/delete" style="display:inline" onsubmit="return confirm('确定要删除此卡片吗？')">
+                            <button type="submit" class="btn btn-sm btn-danger">删除</button>
+                        </form>
+                    </td>
+                </tr>
+                {{end}}
+                {{if not .Cards}}
+                <tr>
+                    <td colspan="7" style="text-align:center;color:#999;">暂无卡片，点击"新建卡片"添加</td>
+                </tr>
+                {{end}}
+            </tbody>
+        </table>
+    </main>
+</div>
+{{template "footer" .}}
+{{end}}

templates/admin/index.html

@@ -0,0 +1,109 @@
+{{define "admin/index.html"}}
+{{template "header" .}}
+<div class="admin-layout">
+    <nav class="admin-nav">
+        <div class="admin-nav-brand">Portal 管理</div>
+        <div class="admin-nav-links">
+            <a href="/admin" class="admin-nav-link active">首页</a>
+            <a href="/admin/cards" class="admin-nav-link">卡片管理</a>
+            <a href="/admin/access-logs" class="admin-nav-link">访问日志</a>
+            <a href="/admin/logs" class="admin-nav-link">登录日志</a>
+            <a href="/admin/ip-whitelist" class="admin-nav-link">IP白名单</a>
+            <a href="/admin/settings" class="admin-nav-link">设置</a>
+            <a href="/admin/password" class="admin-nav-link">修改密码</a>
+        </div>
+        <div class="admin-nav-user">
+            <span>{{.Username}}</span>
+            <form method="POST" action="/admin/logout" style="display:inline">
+                <button type="submit" class="btn btn-sm btn-secondary">退出</button>
+            </form>
+        </div>
+    </nav>
+    <main class="admin-main">
+        <h1>管理后台</h1>
+
+        <!-- 统计卡片 -->
+        <div class="stats-grid">
+            <div class="stat-card">
+                <div class="stat-value">{{.Stats.TodayViews}}</div>
+                <div class="stat-label">今日浏览</div>
+            </div>
+            <div class="stat-card">
+                <div class="stat-value">{{.Stats.TotalViews}}</div>
+                <div class="stat-label">总浏览次数</div>
+            </div>
+            <div class="stat-card">
+                <div class="stat-value">{{.Stats.NewIPs}}</div>
+                <div class="stat-label">今日新IP</div>
+            </div>
+            <div class="stat-card">
+                <div class="stat-value">{{.Stats.TotalIPs}}</div>
+                <div class="stat-label">总IP数量</div>
+            </div>
+        </div>
+
+        <!-- 实时流量 -->
+        <h2 class="form-section-title">实时流量</h2>
+        {{if .RecentLogs}}
+        <table class="admin-table">
+            <thead>
+                <tr>
+                    <th>时间</th>
+                    <th>IP</th>
+                    <th>类型</th>
+                    <th>详情</th>
+                    <th>客户端</th>
+                </tr>
+            </thead>
+            <tbody>
+                {{range .RecentLogs}}
+                <tr>
+                    <td>{{.CreatedAt.Format "15:04:05"}}</td>
+                    <td><code>{{.IP}}</code></td>
+                    <td>
+                        {{if eq .ActionType "visit"}}<span class="badge badge-success">访问</span>
+                        {{else if eq .ActionType "click"}}<span class="badge badge-primary">点击</span>
+                        {{else if eq .ActionType "search"}}<span class="badge badge-warning">搜索</span>
+                        {{else}}<span class="badge badge-secondary">{{.ActionType}}</span>{{end}}
+                    </td>
+                    <td class="detail-cell" title="{{.Detail}}">{{if .Detail}}{{.Detail}}{{else}}—{{end}}</td>
+                    <td class="ua-cell" title="{{.UserAgent}}">{{.UserAgent}}</td>
+                </tr>
+                {{end}}
+            </tbody>
+        </table>
+        {{else}}
+        <p style="color:#999;">暂无访问记录</p>
+        {{end}}
+
+        <!-- IP 访问排行 -->
+        {{if .IPStats}}
+        <h2 class="form-section-title">IP 访问排行 (Top 10)</h2>
+        <table class="admin-table">
+            <thead>
+                <tr>
+                    <th>IP地址</th>
+                    <th>访问次数</th>
+                    <th>最后访问</th>
+                </tr>
+            </thead>
+            <tbody>
+                {{range .IPStats}}
+                <tr>
+                    <td><code>{{.IP}}</code></td>
+                    <td>{{.Visits}}</td>
+                    <td>{{.LastSeen}}</td>
+                </tr>
+                {{end}}
+            </tbody>
+        </table>
+        {{end}}
+    </main>
+</div>
+
+<script>
+// 自动刷新页面（每30秒）
+setTimeout(function() { location.reload(); }, 30000);
+</script>
+{{template "footer" .}}
+{{end}}

templates/admin/ip_whitelist.html

@@ -0,0 +1,85 @@
+{{define "admin/ip_whitelist.html"}}
+{{template "header" .}}
+<div class="admin-layout">
+    <nav class="admin-nav">
+        <div class="admin-nav-brand">Portal 管理</div>
+        <div class="admin-nav-links">
+            <a href="/admin" class="admin-nav-link">首页</a>
+            <a href="/admin/cards" class="admin-nav-link">卡片管理</a>
+            <a href="/admin/access-logs" class="admin-nav-link">访问日志</a>
+            <a href="/admin/logs" class="admin-nav-link">登录日志</a>
+            <a href="/admin/ip-whitelist" class="admin-nav-link active">IP白名单</a>
+            <a href="/admin/settings" class="admin-nav-link">设置</a>
+            <a href="/admin/password" class="admin-nav-link">修改密码</a>
+        </div>
+        <div class="admin-nav-user">
+            <span>{{.Username}}</span>
+            <form method="POST" action="/admin/logout" style="display:inline">
+                <button type="submit" class="btn btn-sm btn-secondary">退出</button>
+            </form>
+        </div>
+    </nav>
+    <main class="admin-main">
+        <h1>IP 白名单管理</h1>
+
+        {{if .HasWhitelist}}
+        <div class="whitelist-notice">
+            <strong>⚠️ 白名单模式已启用</strong>：当前仅白名单中的IP可以访问后台管理页面，非白名单IP将被拒绝访问。
+        </div>
+        {{else}}
+        <div class="whitelist-notice notice-info">
+            <strong>ℹ️ 白名单模式未启用</strong>：白名单为空时，不限制任何IP访问后台。添加至少一条记录即可启用白名单模式。
+        </div>
+        {{end}}
+
+        {{if .Error}}<div class="form-error">{{.Error}}</div>{{end}}
+        {{if .Message}}<div class="form-success">{{.Message}}</div>{{end}}
+
+        <h2 class="form-section-title">添加白名单</h2>
+        <form method="POST" action="/admin/ip-whitelist/add" class="admin-form">
+            <div class="form-group">
+                <label for="ip">IP 地址 <span class="required">*</span></label>
+                <input type="text" id="ip" name="ip" required placeholder="例如: 192.168.1.100">
+            </div>
+            <div class="form-group">
+                <label for="comment">备注</label>
+                <input type="text" id="comment" name="comment" placeholder="例如: 办公室网络">
+            </div>
+            <div class="form-actions">
+                <button type="submit" class="btn btn-primary">添加</button>
+            </div>
+        </form>
+
+        <h2 class="form-section-title">当前白名单</h2>
+        {{if .Whitelist}}
+        <table class="admin-table">
+            <thead>
+                <tr>
+                    <th>IP 地址</th>
+                    <th>备注</th>
+                    <th>添加时间</th>
+                    <th>操作</th>
+                </tr>
+            </thead>
+            <tbody>
+                {{range .Whitelist}}
+                <tr>
+                    <td><code>{{.IP}}</code></td>
+                    <td>{{if .Comment}}{{.Comment}}{{else}}—{{end}}</td>
+                    <td>{{.CreatedAt.Format "2006-01-02 15:04:05"}}</td>
+                    <td>
+                        <form method="POST" action="/admin/ip-whitelist/{{.ID}}/delete" style="display:inline" onsubmit="return confirm('确定要删除此白名单记录吗？删除后该IP将无法访问后台。')">
+                            <button type="submit" class="btn btn-sm btn-danger">删除</button>
+                        </form>
+                    </td>
+                </tr>
+                {{end}}
+            </tbody>
+        </table>
+        {{else}}
+        <p style="color:#999;">暂无白名单记录。添加记录后，将仅允许白名单IP访问后台。</p>
+        {{end}}
+    </main>
+</div>
+{{template "footer" .}}
+{{end}}

templates/admin/login.html

@@ -0,0 +1,21 @@
+{{define "admin/login.html"}}
+{{template "header" .}}
+<div class="login-container">
+    <div class="login-card">
+        <h1 class="login-title">管理后台登录</h1>
+        {{if .Error}}<div class="login-error">{{.Error}}</div>{{end}}
+        <form method="POST" action="/admin/login" class="login-form">
+            <div class="form-group">
+                <label for="username">用户名</label>
+                <input type="text" id="username" name="username" required autofocus>
+            </div>
+            <div class="form-group">
+                <label for="password">密码</label>
+                <input type="password" id="password" name="password" required>
+            </div>
+            <button type="submit" class="btn btn-primary btn-block">登录</button>
+        </form>
+    </div>
+</div>
+{{template "footer" .}}
+{{end}}

templates/admin/logs.html

@@ -0,0 +1,105 @@
+{{define "admin/logs.html"}}
+{{template "header" .}}
+<div class="admin-layout">
+    <nav class="admin-nav">
+        <div class="admin-nav-brand">Portal 管理</div>
+        <div class="admin-nav-links">
+            <a href="/admin" class="admin-nav-link">首页</a>
+            <a href="/admin/cards" class="admin-nav-link">卡片管理</a>
+            <a href="/admin/access-logs" class="admin-nav-link">访问日志</a>
+            <a href="/admin/logs" class="admin-nav-link active">登录日志</a>
+            <a href="/admin/ip-whitelist" class="admin-nav-link">IP白名单</a>
+            <a href="/admin/settings" class="admin-nav-link">设置</a>
+            <a href="/admin/password" class="admin-nav-link">修改密码</a>
+        </div>
+        <div class="admin-nav-user">
+            <span>{{.Username}}</span>
+            <form method="POST" action="/admin/logout" style="display:inline">
+                <button type="submit" class="btn btn-sm btn-secondary">退出</button>
+            </form>
+        </div>
+    </nav>
+    <main class="admin-main">
+        <h1>登录日志</h1>
+
+        <table class="admin-table">
+            <thead>
+                <tr>
+                    <th>时间</th>
+                    <th>用户名</th>
+                    <th>IP地址</th>
+                    <th>User-Agent</th>
+                    <th>状态</th>
+                </tr>
+            </thead>
+            <tbody>
+                {{range .Logs}}
+                <tr>
+                    <td>{{.CreatedAt.Format "2006-01-02 15:04:05"}}</td>
+                    <td>{{.Username}}</td>
+                    <td><code>{{.IP}}</code></td>
+                    <td class="ua-cell" title="{{.UserAgent}}">{{.UserAgent}}</td>
+                    <td>
+                        {{if .Success}}
+                        <span class="badge badge-success">成功</span>
+                        {{else}}
+                        <span class="badge badge-danger">失败</span>
+                        {{end}}
+                    </td>
+                </tr>
+                {{end}}
+                {{if not .Logs}}
+                <tr>
+                    <td colspan="5" style="text-align:center;color:#999;">暂无登录日志</td>
+                </tr>
+                {{end}}
+            </tbody>
+        </table>
+
+        {{if gt .TotalPages 1}}
+        <div class="pagination">
+            {{if gt .Page 1}}
+            <a href="/admin/logs?page={{sub .Page 1}}" class="btn btn-sm btn-secondary">上一页</a>
+            {{end}}
+            <span class="pagination-info">第 {{.Page}} / {{.TotalPages}} 页（共 {{.Total}} 条）</span>
+            {{if lt .Page .TotalPages}}
+            <a href="/admin/logs?page={{add .Page 1}}" class="btn btn-sm btn-secondary">下一页</a>
+            {{end}}
+        </div>
+        {{end}}
+
+        <h2 class="form-section-title">IP 封禁列表</h2>
+        {{if .Bans}}
+        <table class="admin-table">
+            <thead>
+                <tr>
+                    <th>IP地址</th>
+                    <th>原因</th>
+                    <th>失败次数</th>
+                    <th>封禁至</th>
+                    <th>操作</th>
+                </tr>
+            </thead>
+            <tbody>
+                {{range .Bans}}
+                <tr>
+                    <td><code>{{.IP}}</code></td>
+                    <td>{{.Reason}}</td>
+                    <td>{{.FailCount}}</td>
+                    <td>{{.BannedUntil.Format "2006-01-02 15:04:05"}}</td>
+                    <td>
+                        <form method="POST" action="/admin/logs/unban/{{.ID}}" style="display:inline">
+                            <button type="submit" class="btn btn-sm btn-primary">解封</button>
+                        </form>
+                    </td>
+                </tr>
+                {{end}}
+            </tbody>
+        </table>
+        {{else}}
+        <p style="color:#999;">当前无封禁IP</p>
+        {{end}}
+    </main>
+</div>
+{{template "footer" .}}
+{{end}}

templates/admin/password.html

@@ -0,0 +1,49 @@
+{{define "admin/password.html"}}
+{{template "header" .}}
+<div class="admin-layout">
+    <nav class="admin-nav">
+        <div class="admin-nav-brand">Portal 管理</div>
+        <div class="admin-nav-links">
+            <a href="/admin" class="admin-nav-link">首页</a>
+            <a href="/admin/cards" class="admin-nav-link">卡片管理</a>
+            <a href="/admin/access-logs" class="admin-nav-link">访问日志</a>
+            <a href="/admin/logs" class="admin-nav-link">登录日志</a>
+            <a href="/admin/ip-whitelist" class="admin-nav-link">IP白名单</a>
+            <a href="/admin/settings" class="admin-nav-link">设置</a>
+            <a href="/admin/password" class="admin-nav-link active">修改密码</a>
+        </div>
+        <div class="admin-nav-user">
+            <span>{{.Username}}</span>
+            <form method="POST" action="/admin/logout" style="display:inline">
+                <button type="submit" class="btn btn-sm btn-secondary">退出</button>
+            </form>
+        </div>
+    </nav>
+    <main class="admin-main">
+        <h1>修改密码</h1>
+
+        {{if .Error}}<div class="form-error">{{.Error}}</div>{{end}}
+        {{if .Message}}<div class="form-success">{{.Message}}</div>{{end}}
+
+        <form method="POST" action="/admin/password" class="admin-form">
+            <div class="form-group">
+                <label for="old_password">旧密码 <span class="required">*</span></label>
+                <input type="password" id="old_password" name="old_password" required>
+            </div>
+            <div class="form-group">
+                <label for="new_password">新密码 <span class="required">*</span></label>
+                <input type="password" id="new_password" name="new_password" required minlength="6">
+                <small style="color:#999;">密码长度不少于6位</small>
+            </div>
+            <div class="form-group">
+                <label for="confirm_password">确认新密码 <span class="required">*</span></label>
+                <input type="password" id="confirm_password" name="confirm_password" required minlength="6">
+            </div>
+            <div class="form-actions">
+                <button type="submit" class="btn btn-primary">修改密码</button>
+            </div>
+        </form>
+    </main>
+</div>
+{{template "footer" .}}
+{{end}}

templates/admin/settings.html

@@ -0,0 +1,80 @@
+{{define "admin/settings.html"}}
+{{template "header" .}}
+<div class="admin-layout">
+    <nav class="admin-nav">
+        <div class="admin-nav-brand">Portal 管理</div>
+        <div class="admin-nav-links">
+            <a href="/admin" class="admin-nav-link">首页</a>
+            <a href="/admin/cards" class="admin-nav-link">卡片管理</a>
+            <a href="/admin/access-logs" class="admin-nav-link">访问日志</a>
+            <a href="/admin/logs" class="admin-nav-link">登录日志</a>
+            <a href="/admin/ip-whitelist" class="admin-nav-link">IP白名单</a>
+            <a href="/admin/settings" class="admin-nav-link active">设置</a>
+            <a href="/admin/password" class="admin-nav-link">修改密码</a>
+        </div>
+        <div class="admin-nav-user">
+            <span>{{.Username}}</span>
+            <form method="POST" action="/admin/logout" style="display:inline">
+                <button type="submit" class="btn btn-sm btn-secondary">退出</button>
+            </form>
+        </div>
+    </nav>
+    <main class="admin-main">
+        <h1>设置</h1>
+
+        {{if .Error}}<div class="form-error">{{.Error}}</div>{{end}}
+        {{if .Message}}<div class="form-success">{{.Message}}</div>{{end}}
+
+        <form method="POST" action="/admin/settings" class="admin-form">
+            <h2 class="form-section-title">搜索引擎</h2>
+            <div class="form-group">
+                <label for="search_engine">默认搜索引擎</label>
+                <select id="search_engine" name="search_engine">
+                    {{range $name, $url := .Engines}}
+                    <option value="{{$url}}" {{if eq $url $.SearchEngine}}selected{{end}}>{{$name}}</option>
+                    {{end}}
+                </select>
+            </div>
+            <div class="form-group">
+                <label>当前引擎 URL</label>
+                <input type="text" value="{{.SearchEngine}}" readonly class="input-readonly">
+            </div>
+            <div class="form-group">
+                <label for="custom_url">自定义搜索引擎 URL（需包含 %s 作为搜索词占位符）</label>
+                <input type="url" id="custom_url" name="custom_url" placeholder="https://example.com/search?q=%s">
+            </div>
+
+            <h2 class="form-section-title">主页配置</h2>
+            <div class="form-group">
+                <label for="homepage_title">主页标题</label>
+                <input type="text" id="homepage_title" name="homepage_title" value="{{.HomepageTitle}}" placeholder="Portal">
+            </div>
+            <div class="form-group">
+                <label for="homepage_subtitle">主页副标题</label>
+                <input type="text" id="homepage_subtitle" name="homepage_subtitle" value="{{.HomepageSubtitle}}" placeholder="快速导航，一键直达">
+            </div>
+            <div class="form-group">
+                <label for="homepage_background">主页背景图片 URL</label>
+                <input type="text" id="homepage_background" name="homepage_background" value="{{.HomepageBackground}}" placeholder="留空则使用默认渐变色">
+                {{if .HomepageBackground}}
+                <div class="background-preview">
+                    <img src="{{.HomepageBackground}}?thumb=1" alt="背景预览" class="upload-preview-img">
+                    <a href="{{.HomepageBackground}}" target="_blank" class="preview-link">查看原图</a>
+                </div>
+                {{end}}
+            </div>
+
+            <div class="form-actions">
+                <button type="submit" class="btn btn-primary">保存设置</button>
+            </div>
+        </form>
+    </main>
+</div>
+<script src="/static/upload.js"></script>
+<script>
+document.addEventListener('DOMContentLoaded', function() {
+    setupUpload('#homepage_background', 'background');
+});
+</script>
+{{template "footer" .}}
+{{end}}

templates/home.html

@@ -0,0 +1,39 @@
+{{define "home.html"}}
+{{template "header" .}}
+<div class="home-container{{if .BackgroundImage}} has-background{{end}}"{{if .BackgroundImage}} style="background-image: url('{{.BackgroundImage}}?thumb=1'); background-size: cover; background-position: center; background-attachment: fixed;"{{end}}>
+    <header class="home-header">
+        <h1 class="home-title">{{.SiteTitle}}</h1>
+        {{if .SiteSubtitle}}<p class="site-subtitle">{{.SiteSubtitle}}</p>{{else}}<p class="home-subtitle">快速导航，一键直达</p>{{end}}
+    </header>
+
+    <div class="search-box">
+        <form id="search-form" action="/search" method="GET">
+            <input type="text" id="search-input" name="q" class="search-input" placeholder="搜索..." autofocus>
+            <button type="submit" class="search-btn">搜索</button>
+        </form>
+    </div>
+
+    <div class="card-grid">
+        {{range .Cards}}
+        <a href="/click/{{.ID}}" class="card-item" target="_blank" rel="noopener noreferrer">
+            <div class="card-icon">{{if .Icon}}{{if hasPrefix .Icon "/uploads/"}}<img src="{{.Icon}}?thumb=1" alt="{{.Title}}" class="card-icon-img">{{else}}<span class="card-emoji">{{.Icon}}</span>{{end}}{{else}}<span class="card-emoji">🔗</span>{{end}}</div>
+            <div class="card-content">
+                <div class="card-title">{{.Title}}</div>
+                {{if .Subtitle}}<div class="card-subtitle">{{.Subtitle}}</div>{{end}}
+            </div>
+        </a>
+        {{end}}
+    </div>
+
+    <footer class="home-footer">
+        <a href="/admin/login">管理后台</a>
+    </footer>
+</div>
+
+<script>
+document.addEventListener('DOMContentLoaded', function() {
+    document.getElementById('search-input').focus();
+});
+</script>
+{{template "footer" .}}
+{{end}}

templates/layout.html

@@ -0,0 +1,16 @@
+{{define "header"}}
+<!DOCTYPE html>
+<html lang="zh-CN">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>{{.Title}}</title>
+    <link rel="stylesheet" href="/static/style.css">
+</head>
+<body>
+{{end}}
+
+{{define "footer"}}
+</body>
+</html>
+{{end}}