Sam Rolfe
14b304e0b0
- internal/mqtt: publish each device's desired state retained on restrict/<device>/config; subscribe to restrict/+/status and restrict/+/telemetry and write reports to SQLite; publish on every state change, republish on connect and every 15 minutes from SQLite, so the broker is repaired from the source of truth. - store: presence (devices.online and last_seen, audited only on transitions), telemetry upsert per (device, day, app, domain) via migration 002, allow and block lists read into the config payload, device lookup by topic. - config: MQTT settings. TLS plus per-device credentials are required; the pre-TLS shared broker needs an explicit CONTROL_MQTT_INSECURE escape hatch. - web: republish config after lock, unlock, expiry, create and edit; broker card on the status partial. - deploy/mosquitto: TLS listener, topic ACL, credential provisioning and a verifier that proves the policy on a throwaway broker. Not applied to the shared Mosquitto on .13 — that change needs Sam's approval. - cmd/control: mqtt-clients prints the MQTT identity of every device. - paho.mqtt.golang v1.5.1, which pulls golang.org/x/net and with it the golang.org/x/crypto bump to v0.42.0. Verified on .13: retained config delivered to a fresh subscriber; a client killed without DISCONNECT drove the broker's retained will and the service flipped the device offline; telemetry landed in SQLite; make mqtt-verify passed 13/13; the service connected over TLS with credentials and a CA. Co-Authored-By: Paperclip <noreply@paperclip.ing>
53 lines
746 B
Plaintext
53 lines
746 B
Plaintext
# Secrets
|
|
.env
|
|
.env.*
|
|
*.local
|
|
*.keystore
|
|
# Real Control Service env file (keep the .example template)
|
|
environment.d/*.env
|
|
|
|
# Local build caches / runtime data
|
|
.gocache/
|
|
.gobuild/
|
|
data/
|
|
|
|
# Go
|
|
bin/
|
|
*.exe
|
|
*.test
|
|
*.out
|
|
|
|
# Python
|
|
__pycache__/
|
|
*.pyc
|
|
.venv/
|
|
venv/
|
|
|
|
# Node / web
|
|
node_modules/
|
|
dist/
|
|
*.visual-check.*
|
|
|
|
# Android / Kotlin
|
|
.gradle/
|
|
build/
|
|
local.properties
|
|
*.apk
|
|
|
|
# MQTT lab material (Phase 3): generated certificates, accounts and passwords
|
|
deploy/mosquitto/tls/*.crt
|
|
deploy/mosquitto/tls/*.key
|
|
deploy/mosquitto/tls/*.csr
|
|
deploy/mosquitto/tls/*.srl
|
|
deploy/mosquitto/conf.d/*.passwd
|
|
deploy/mosquitto/build/
|
|
deploy/mosquitto/clients.env
|
|
|
|
# OS / editors
|
|
.DS_Store
|
|
*.swp
|
|
|
|
|
|
# Pi agent generated memory (local state, not source)
|
|
.pi/memory-vault/
|