mirror of
https://github.com/BetterCorp/BetterFrame.git
synced 2026-05-26 17:56:34 +00:00
94e316a207
- service-api-http: h3 on :18081 with pairing, bundle, heartbeat, and event endpoints - shared/pairing.ts: 8-char code state machine (initiate → claim → confirm) - shared/bundle.ts: label-scoped bundle with cluster-encrypted ONVIF passwords - Admin kiosks page: POST /admin/kiosks/pair wired to confirmPairing - sec-config: api-http bound to 0.0.0.0 with auth config
68 lines
2 KiB
YAML
68 lines
2 KiB
YAML
# BSB runtime configuration for BetterFrame server.
|
|
#
|
|
# Profile: 'default' — single-host install where the server, node-red, and
|
|
# (optionally) one kiosk all run on the same Pi. For multi-kiosk deployments
|
|
# the server is the same; kiosks have their own runtime config.
|
|
#
|
|
# Override individual values via env: BSB_<plugin>_<key>=value (consult BSB
|
|
# docs for the exact env-override semantics for v9).
|
|
|
|
default:
|
|
observable:
|
|
observable-default:
|
|
plugin: observable-default
|
|
enabled: true
|
|
config: {}
|
|
events:
|
|
events-default:
|
|
plugin: events-default
|
|
enabled: true
|
|
services:
|
|
# ----- Data layer -----
|
|
service-store:
|
|
plugin: service-store
|
|
enabled: true
|
|
config:
|
|
sqlitePath: /var/lib/betterframe/betterframe.db
|
|
|
|
# ----- Admin UI + API (includes secrets + auth config) -----
|
|
service-admin-http:
|
|
plugin: service-admin-http
|
|
enabled: true
|
|
config:
|
|
host: 0.0.0.0
|
|
port: 18080
|
|
# Secrets (was service-secrets)
|
|
dataDir: /var/lib/betterframe
|
|
# Auth (was service-auth)
|
|
sessionIdleSeconds: 43200 # 12h
|
|
sessionMaxSeconds: 2592000 # 30d
|
|
loginLockoutThreshold: 8
|
|
loginLockoutSeconds: 900 # 15m
|
|
argon2Memory: 65536 # KiB; tuned for Pi5 ~100ms
|
|
argon2TimeCost: 3
|
|
argon2Parallelism: 2
|
|
cookieName: betterframe_session
|
|
totpIssuer: BetterFrame
|
|
|
|
# ----- Kiosk-facing REST API -----
|
|
service-api-http:
|
|
plugin: service-api-http
|
|
enabled: true
|
|
config:
|
|
host: 0.0.0.0
|
|
port: 18081
|
|
codeTtlSeconds: 600 # 10m pairing code TTL
|
|
dataDir: /var/lib/betterframe
|
|
argon2Memory: 65536
|
|
argon2TimeCost: 3
|
|
argon2Parallelism: 2
|
|
|
|
# ----- Live kiosk WebSocket channel -----
|
|
service-coordinator-ws:
|
|
plugin: service-coordinator-ws
|
|
enabled: true
|
|
config:
|
|
host: 127.0.0.1
|
|
port: 18082
|
|
noderedUrl: http://127.0.0.1:1880
|