mirror of
https://github.com/BetterCorp/BetterFrame.git
synced 2026-05-26 19:06:34 +00:00
a8b0fbb2bc
BSB plugins should be actual services (own port, lifecycle, resource ownership). Moved secrets, auth, pairing, bundle, nodered-bridge, and cec-relay from plugin folders to shared modules under server/src/shared/. 4 BSB plugins remain: service-store, service-admin-http, service-api-http, service-coordinator-ws. service-admin-http now initializes secrets + auth as plain modules in init() using the store repo from the plugin-registry singleton. No more setSiblings() hack or inter-plugin wiring. sec-config.yaml updated: secrets/auth config moved into service-admin-http, pairing config into service-api-http, nodered config into service-coordinator-ws.
62 lines
1.8 KiB
YAML
62 lines
1.8 KiB
YAML
# BSB runtime configuration for BetterFrame server.
|
|
#
|
|
# Profile: 'default' — single-host install where the server, node-red, and
|
|
# (optionally) one kiosk all run on the same Pi. For multi-kiosk deployments
|
|
# the server is the same; kiosks have their own runtime config.
|
|
#
|
|
# Override individual values via env: BSB_<plugin>_<key>=value (consult BSB
|
|
# docs for the exact env-override semantics for v9).
|
|
|
|
default:
|
|
observable:
|
|
observable-default:
|
|
plugin: observable-default
|
|
enabled: true
|
|
config: {}
|
|
events:
|
|
events-default:
|
|
plugin: events-default
|
|
enabled: true
|
|
services:
|
|
# ----- Data layer -----
|
|
service-store:
|
|
plugin: service-store
|
|
enabled: true
|
|
config:
|
|
sqlitePath: /var/lib/betterframe/betterframe.db
|
|
|
|
# ----- Admin UI + API (includes secrets + auth config) -----
|
|
service-admin-http:
|
|
plugin: service-admin-http
|
|
enabled: true
|
|
config:
|
|
host: 127.0.0.1
|
|
port: 18080
|
|
# Secrets (was service-secrets)
|
|
dataDir: /var/lib/betterframe
|
|
# Auth (was service-auth)
|
|
sessionIdleSeconds: 43200 # 12h
|
|
sessionMaxSeconds: 2592000 # 30d
|
|
loginLockoutThreshold: 8
|
|
loginLockoutSeconds: 900 # 15m
|
|
argon2Memory: 65536 # KiB; tuned for Pi5 ~100ms
|
|
argon2TimeCost: 3
|
|
argon2Parallelism: 2
|
|
|
|
# ----- Kiosk-facing REST API -----
|
|
service-api-http:
|
|
plugin: service-api-http
|
|
enabled: true
|
|
config:
|
|
host: 127.0.0.1
|
|
port: 18081
|
|
codeTtlSeconds: 600 # 10m pairing code TTL
|
|
|
|
# ----- Live kiosk WebSocket channel -----
|
|
service-coordinator-ws:
|
|
plugin: service-coordinator-ws
|
|
enabled: true
|
|
config:
|
|
host: 127.0.0.1
|
|
port: 18082
|
|
noderedUrl: http://127.0.0.1:1880
|