🚧 Move imei_mapping and app_tokens to database

2026-09-04 22:16:06 +02:00
parent 8d4ffc1074
commit 46639a837c
10 changed files with 781 additions and 338 deletions
@@ -32,6 +32,15 @@ MQTT_CLIENT_ID=nodeledge-mqtt-listener
 INJECT_IMEI_KEY=imei
 INJECT_DEVICE_KEY=device

+# API authentication bootstrap. On the FIRST deployment the app_tokens table
+# is empty; on the first authenticated request the api seeds the SHA-256
+# digest of this token. Set a long random value, rotate to real per-app
+# tokens via PUT /configs/app_tokens, then unset this. Ignored once the
+# table has rows (and never on a migrated database).
+BOOTSTRAP_APP_TOKEN=
+# Label for the seeded bootstrap row (informational only).
+BOOTSTRAP_APP_NAME=bootstrap
+
 # Comma-separated payload keys searched for a device timestamp (first
 # parseable one wins). Accepts ISO 8601 strings, epoch seconds or epoch
 # milliseconds. Rows without a parseable timestamp keep payload_time NULL.