feat(ipsec): enhance IPsec management with peer and certificate handling

- Added support for managing IPsec peers, including editing and deleting functionality.
- Introduced a new UI component for displaying peers and their details within the IPsec server grid.
- Updated the IPsec user creation form to allow binding identities to specific peers.
- Enhanced backend routes and services to handle peer patching and deletion requests.
- Improved data structures to accommodate multiple peers and certificates for each server.
- Added tests to ensure proper functionality of new peer management features.

components/ipsec/ipsec-user-sheet.tsx

@@ -15,6 +15,7 @@ export type IpsecAuthKind = "certificate" | "pre-shared-key"
 export type IpsecUserFormState = {
   serverId: string
   name: string
+  peerName: string
   authMethod: IpsecAuthKind
   psk: string
   remoteId: string
@@ -26,6 +27,7 @@ export type IpsecUserFormState = {
 export const defaultIpsecUserForm = (): IpsecUserFormState => ({
   serverId: "",
   name: "",
+  peerName: "",
   authMethod: "certificate",
   psk: "",
   remoteId: "",
@@ -35,11 +37,13 @@ export const defaultIpsecUserForm = (): IpsecUserFormState => ({
 })
 
 type ServerOption = { id: string; name: string; host: string }
+export type PeerOption = { serverId: string; name: string; managed: boolean }
 
 function IpsecUserSheet({
   open,
   onOpenChange,
   servers,
+  peers,
   busy,
   defaultServerId,
   editing,
@@ -49,6 +53,8 @@ function IpsecUserSheet({
   open: boolean
   onOpenChange: (v: boolean) => void
   servers: ServerOption[]
+  /** Доступные peers (серверы) для привязки identity при создании. */
+  peers?: PeerOption[]
   busy?: boolean
   defaultServerId?: string
   /** Режим редактирования: сервер и метод аутентификации не меняются. */
@@ -67,6 +73,7 @@ function IpsecUserSheet({
       queueMicrotask(() => setForm({
         serverId: edit.serverId,
         name: edit.name,
+        peerName: edit.peerName ?? "",
         authMethod: edit.authMethod,
         psk: "",
         remoteId: edit.remoteId ?? "",
@@ -118,6 +125,24 @@ function IpsecUserSheet({
                 </select>
               </FormField>
             ) : null}
+            {!editing && (peers ?? []).some((p) => p.serverId === form.serverId) ? (
+              <FormField label="Peer (сервер)" hint="К какому peer привязать identity">
+                <select
+                  className="flex h-9 w-full rounded-md border border-input bg-transparent px-3 py-1 text-sm shadow-xs outline-none focus-visible:border-ring focus-visible:ring-ring/50 focus-visible:ring-[3px]"
+                  value={form.peerName}
+                  onChange={(e) => set("peerName", e.target.value)}
+                >
+                  <option value="">Автоматически (managed/первый)</option>
+                  {(peers ?? [])
+                    .filter((p) => p.serverId === form.serverId)
+                    .map((p) => (
+                      <option key={`${p.serverId}:${p.name}`} value={p.name}>
+                        {p.name}{p.managed ? "" : " (RouterOS)"}
+                      </option>
+                    ))}
+                </select>
+              </FormField>
+            ) : null}
             <FormField label="Имя клиента" required hint={editing ? undefined : "CN сертификата и отображаемое имя"}>
               <Input
                 placeholder="alice"