boneio 1.1.1.dev1__tar.gz → 1.2.0.dev2__tar.gz

{boneio-1.1.1.dev1/boneio.egg-info → boneio-1.2.0.dev2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: boneio
-Version: 1.1.1.dev1
+Version: 1.2.0.dev2
 Summary: Python App for BoneIO
 Author-email: Paweł Szafer <pszafer@gmail.com>
 License: GNU General Public License v3.0

boneio-1.2.0.dev2/boneio/core/cloud/__init__.py

@@ -0,0 +1,5 @@
+"""Cloud registration module for boneIO Black PWA support."""
+
+from boneio.core.cloud.registration import CloudRegistration
+
+__all__ = ["CloudRegistration"]

boneio-1.2.0.dev2/boneio/core/cloud/data/docker-compose.yaml

@@ -0,0 +1,37 @@
+services:
+  node-red:
+    image: nodered/node-red:4.1.2-22-minimal
+    restart: unless-stopped
+    environment:
+      TZ: Europe/Warsaw
+    volumes:
+      - ./node-red/data:/data
+      - ./node-red/settings.js:/data/settings.js:ro
+    extra_hosts:
+      - "host.docker.internal:host-gateway"
+    networks:
+      - edge
+  caddy:
+    image: caddy:2-alpine
+    restart: unless-stopped
+    hostname: ${HOSTNAME}
+    ports:
+      - "${HTTP_PORT:-8091}:80"
+      - "${HTTPS_PORT:-8443}:443"
+    environment:
+      - HOST_HOSTNAME=${HOSTNAME}
+    volumes:
+      - ./caddy/502.html:/srv/502.html:ro
+      - ./caddy/init-certs.sh:/init-certs.sh:ro
+      - ./caddy/data:/data
+      - ./caddy/config:/config
+      - /etc/hostname:/etc/host_hostname:ro
+    entrypoint: /bin/sh
+    command: ["/init-certs.sh"]
+    extra_hosts:
+      - "host.docker.internal:host-gateway"
+    networks:
+      - edge
+
+networks:
+  edge:

boneio-1.2.0.dev2/boneio/core/cloud/data/init-certs-cloud.sh

@@ -0,0 +1,154 @@
+#!/bin/sh
+# Script for Caddy with cloud wildcard SSL certificate (PWA mode)
+# This version adds a *.black.boneio.app HTTPS block using the wildcard cert
+# downloaded by boneIO Cloud Registration.
+#
+# Used when cloud_registration is enabled in boneio config.
+# Falls back to self-signed cert for hostname-based access.
+
+HOSTNAME_FILE="/data/last_hostname"
+CURRENT_HOSTNAME="${HOST_HOSTNAME:-$(cat /etc/host_hostname 2>/dev/null || hostname)}"
+
+echo "Current hostname: $CURRENT_HOSTNAME"
+echo "Cloud mode: wildcard SSL cert for *.black.boneio.app"
+
+# Check if hostname changed (for self-signed cert regeneration)
+if [ -f "$HOSTNAME_FILE" ]; then
+    LAST_HOSTNAME=$(cat "$HOSTNAME_FILE")
+    if [ "$LAST_HOSTNAME" != "$CURRENT_HOSTNAME" ]; then
+        echo "Hostname changed from $LAST_HOSTNAME to $CURRENT_HOSTNAME"
+        echo "Removing old self-signed certificates..."
+        rm -rf /data/caddy/certificates/local/*
+        rm -rf /data/caddy/pki/*
+        rm -rf /config/caddy/*
+    fi
+else
+    echo "First run on this device, clearing any existing certificates..."
+    rm -rf /data/caddy/certificates/local/*
+    rm -rf /data/caddy/pki/*
+    rm -rf /config/caddy/*
+fi
+
+echo "$CURRENT_HOSTNAME" > "$HOSTNAME_FILE"
+
+# Check if wildcard cert exists
+if [ -f "/data/ssl/fullchain.pem" ] && [ -f "/data/ssl/privkey.pem" ]; then
+    echo "Wildcard SSL certificate found, enabling PWA HTTPS block"
+    CLOUD_BLOCK="
+# HTTPS with wildcard cert for PWA (*.black.boneio.app)
+*.black.boneio.app {
+        tls /data/ssl/fullchain.pem /data/ssl/privkey.pem
+
+        handle_errors {
+                @502-504 expression {err.status_code} >= 502 && {err.status_code} <= 504
+                handle @502-504 {
+                        root * /srv
+                        rewrite * /502.html
+                        file_server
+                }
+        }
+
+        handle /nodered-status {
+                header Content-Type application/json
+                header X-NodeRed-Available \"true\"
+                header Access-Control-Expose-Headers \"X-NodeRed-Available\"
+                respond \`{\"available\": true}\` 200
+        }
+
+        handle /nodered/* {
+                reverse_proxy node-red:1880 {
+                        header_up X-Forwarded-Proto {scheme}
+                        header_down X-NodeRed-Available \"true\"
+                }
+        }
+
+        handle {
+                reverse_proxy host.docker.internal:8090 {
+                        header_up X-Forwarded-Proto {scheme}
+                }
+        }
+}
+"
+else
+    echo "WARNING: Wildcard SSL certificate not found at /data/ssl/"
+    echo "PWA HTTPS block will not be enabled until certificate is downloaded"
+    CLOUD_BLOCK=""
+fi
+
+# Generate Caddyfile
+cat > /tmp/Caddyfile << EOF
+{
+        # Global options
+}
+
+# HTTP - serve directly
+:80 {
+        handle_errors {
+                @502-504 expression {err.status_code} >= 502 && {err.status_code} <= 504
+                handle @502-504 {
+                        root * /srv
+                        rewrite * /502.html
+                        file_server
+                }
+        }
+
+        handle /nodered-status {
+                header Content-Type application/json
+                header X-NodeRed-Available "true"
+                header Access-Control-Expose-Headers "X-NodeRed-Available"
+                respond \`{"available": true}\` 200
+        }
+
+        handle /nodered/* {
+                reverse_proxy node-red:1880 {
+                        header_up X-Forwarded-Proto {scheme}
+                        header_down X-NodeRed-Available "true"
+                }
+        }
+
+        handle {
+                reverse_proxy host.docker.internal:8090 {
+                        header_up X-Forwarded-Proto {scheme}
+                }
+        }
+}
+
+# HTTPS with hostname-based self-signed certificate (always available)
+https://, ${CURRENT_HOSTNAME} {
+        tls internal
+
+        handle_errors {
+                @502-504 expression {err.status_code} >= 502 && {err.status_code} <= 504
+                handle @502-504 {
+                        root * /srv
+                        rewrite * /502.html
+                        file_server
+                }
+        }
+
+        handle /nodered-status {
+                header Content-Type application/json
+                header X-NodeRed-Available "true"
+                header Access-Control-Expose-Headers "X-NodeRed-Available"
+                respond \`{"available": true}\` 200
+        }
+
+        handle /nodered/* {
+                reverse_proxy node-red:1880 {
+                        header_up X-Forwarded-Proto {scheme}
+                        header_down X-NodeRed-Available "true"
+                }
+        }
+
+        handle {
+                reverse_proxy host.docker.internal:8090 {
+                        header_up X-Forwarded-Proto {scheme}
+                }
+        }
+}
+
+${CLOUD_BLOCK}
+EOF
+
+# Start Caddy with generated config
+exec caddy run --config /tmp/Caddyfile --adapter caddyfile