nilsandClaude Opus 5.5
d711e0cfda
The ABRP credentials are long to type on the car. "Enter on phone" (Live data tab, and Settings next to the charging price) shows a QR code; it opens a form on the server where the phone sends the ABRP API key and user token, charging price and usable capacity, confirmed with the approval password. The car polls with its own token and collects the values once, then saves them through the same checks as the fields on screen. Same device-flow shape as pairing. The server keeps the values in memory only, at most ten minutes, hands them out once with no-store, and never logs them or puts them back into the page; a paired token only reaches its own installation's request. Pairing's QR dialog is now shared (PhoneQrDialog), and the phone pages share one stylesheet. The config file also takes charging_price and usable_kwh. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01QLJfZQZeAKAwSqViTmLzki
94 lines
2.5 KiB
YAML
94 lines
2.5 KiB
YAML
# The car server (Go). One replica on purpose: pending pairing requests and the wrong-password
|
|
# counters are kept in memory.
|
|
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
name: mg4-server
|
|
namespace: mg4
|
|
labels:
|
|
app.kubernetes.io/name: mg4-server
|
|
app.kubernetes.io/part-of: mg4
|
|
spec:
|
|
replicas: 1
|
|
strategy:
|
|
type: Recreate
|
|
selector:
|
|
matchLabels:
|
|
app.kubernetes.io/name: mg4-server
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/name: mg4-server
|
|
app.kubernetes.io/part-of: mg4
|
|
spec:
|
|
securityContext:
|
|
runAsNonRoot: true
|
|
runAsUser: 65532
|
|
runAsGroup: 65532
|
|
seccompProfile:
|
|
type: RuntimeDefault
|
|
containers:
|
|
- name: server
|
|
# 2.5.0, pinned by digest so a re-pushed tag cannot change what runs.
|
|
image: git.stinnesbeck.com/nils/mg4-server@sha256:93b82b24a649c7b8b6fb7c0d4ef0bfda5694689808991a211e22ddeb257a39e2
|
|
ports:
|
|
- name: http
|
|
containerPort: 8080
|
|
env:
|
|
- name: INFLUX_URL
|
|
value: http://influxdb.mg4.svc:8086
|
|
- name: INFLUX_ORG
|
|
value: mg4
|
|
- name: INFLUX_BUCKET
|
|
value: mg4
|
|
# Where a phone reaches the server; the pairing QR code points here.
|
|
- name: PUBLIC_URL
|
|
value: https://car.k8s.stinnesbeck.com
|
|
- name: INFLUX_TOKEN
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: influxdb-auth
|
|
key: admin-token
|
|
# INGEST_TOKEN, APPROVAL_PASSWORD.
|
|
envFrom:
|
|
- secretRef:
|
|
name: mg4-server
|
|
readinessProbe:
|
|
httpGet:
|
|
path: /v1/health
|
|
port: http
|
|
periodSeconds: 10
|
|
livenessProbe:
|
|
httpGet:
|
|
path: /v1/health
|
|
port: http
|
|
initialDelaySeconds: 5
|
|
periodSeconds: 30
|
|
resources:
|
|
requests:
|
|
cpu: 10m
|
|
memory: 32Mi
|
|
limits:
|
|
memory: 128Mi
|
|
securityContext:
|
|
allowPrivilegeEscalation: false
|
|
readOnlyRootFilesystem: true
|
|
capabilities:
|
|
drop: ["ALL"]
|
|
---
|
|
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
name: mg4-server
|
|
namespace: mg4
|
|
labels:
|
|
app.kubernetes.io/name: mg4-server
|
|
app.kubernetes.io/part-of: mg4
|
|
spec:
|
|
selector:
|
|
app.kubernetes.io/name: mg4-server
|
|
ports:
|
|
- name: http
|
|
port: 80
|
|
targetPort: http
|