Olaf
03e3c11e90
- Add GET /api/clients/crashed endpoint (process_status=crashed or stale heartbeat) - Add restart_app command action with same lifecycle + lockout as reboot_host - Scheduler: crash auto-recovery loop (CRASH_RECOVERY_ENABLED flag, lockout, MQTT publish) - Scheduler: unconditional command expiry sweep per poll cycle (sweep_expired_commands) - Listener: subscribe to infoscreen/+/service_failed; persist service_failed_at + unit - Listener: extract broker_connection block from health payload; persist reconnect_count + last_disconnect_at - DB migration b1c2d3e4f5a6: service_failed_at, service_failed_unit, mqtt_reconnect_count, mqtt_last_disconnect_at on clients - Add GET /api/clients/service_failed and POST /api/clients/<uuid>/clear_service_failed - Monitoring overview API: include mqtt_reconnect_count + mqtt_last_disconnect_at per client - Frontend: orange service-failed alert panel (hidden when empty, auto-refresh, quittieren action) - Frontend: MQTT reconnect count + last disconnect in client detail panel - MQTT auth hardening: listener/scheduler/server use env credentials; broker enforces allow_anonymous false - Client command lifecycle foundation: ClientCommand model, reboot_host/shutdown_host, full ACK lifecycle - Docs: TECH-CHANGELOG, DEV-CHANGELOG, MQTT_EVENT_PAYLOAD_GUIDE, copilot-instructions updated - Add implementation-plans/, RESTART_VALIDATION_CHECKLIST.md, TODO.md
62 lines
1.9 KiB
Plaintext
62 lines
1.9 KiB
Plaintext
# Copy this file to .env and fill in values as needed for local development.
|
|
# NOTE: No secrets should be committed. Use placeholders below.
|
|
|
|
# General
|
|
ENV=development
|
|
|
|
# Flask
|
|
# IMPORTANT: Generate a secure random key for production
|
|
# e.g., python -c 'import secrets; print(secrets.token_hex(32))'
|
|
FLASK_SECRET_KEY=dev-secret-key-change-in-production
|
|
|
|
# Database (used if DB_CONN not provided)
|
|
DB_USER=your_user
|
|
DB_PASSWORD=your_password
|
|
DB_NAME=infoscreen_by_taa
|
|
DB_HOST=db
|
|
# Preferred connection string for services (overrides the above if set)
|
|
# DB_CONN=mysql+pymysql://${DB_USER}:${DB_PASSWORD}@${DB_HOST}/${DB_NAME}
|
|
|
|
# MQTT
|
|
MQTT_BROKER_HOST=mqtt
|
|
MQTT_BROKER_PORT=1883
|
|
# Required for authenticated broker access
|
|
MQTT_USER=your_mqtt_user
|
|
MQTT_PASSWORD=replace_with_a_32plus_char_random_password
|
|
# Optional: dedicated canary client account
|
|
MQTT_CANARY_USER=your_canary_mqtt_user
|
|
MQTT_CANARY_PASSWORD=replace_with_a_different_32plus_char_random_password
|
|
# Optional TLS settings
|
|
MQTT_TLS_ENABLED=false
|
|
MQTT_TLS_CA_CERT=
|
|
MQTT_TLS_CERTFILE=
|
|
MQTT_TLS_KEYFILE=
|
|
MQTT_TLS_INSECURE=false
|
|
MQTT_KEEPALIVE=60
|
|
|
|
# Dashboard
|
|
# Used when building the production dashboard image
|
|
# VITE_API_URL=https://your.api.example.com/api
|
|
|
|
# Groups alive windows (seconds)
|
|
# Clients send heartbeats every ~65s. Allow 2 missed heartbeats + safety margin
|
|
# Dev: 65s * 2 + 50s margin = 180s
|
|
# Prod: 65s * 2 + 40s margin = 170s
|
|
HEARTBEAT_GRACE_PERIOD_DEV=180
|
|
HEARTBEAT_GRACE_PERIOD_PROD=170
|
|
|
|
# Scheduler
|
|
# Optional: force periodic republish even without changes
|
|
# REFRESH_SECONDS=0
|
|
|
|
# Crash recovery (scheduler auto-recovery)
|
|
# CRASH_RECOVERY_ENABLED=false
|
|
# CRASH_RECOVERY_GRACE_SECONDS=180
|
|
# CRASH_RECOVERY_LOCKOUT_MINUTES=15
|
|
# CRASH_RECOVERY_COMMAND_EXPIRY_SECONDS=240
|
|
|
|
# Default superadmin bootstrap (server/init_defaults.py)
|
|
# REQUIRED: Must be set for superadmin creation
|
|
DEFAULT_SUPERADMIN_USERNAME=superadmin
|
|
DEFAULT_SUPERADMIN_PASSWORD=your_secure_password_here
|