Files
doctate/clients/wearos/profiles.d/example-profile.sh.example
T
Brummel d34b2645ee docs(wear): point profile template at https://app.doctate.de
App clients reach minerva only over HTTPS now: the Android cleartext
policy blocks plain HTTP to minerva.lan, and the public Let's Encrypt
cert on app.doctate.de chains to the system trust store, so no
network-security-config change is needed. Update the profile template's
SERVER_URL and comment to reflect the HTTPS convention.

closes #7
2026-05-30 14:11:14 +02:00

33 lines
1.5 KiB
Plaintext

# Watch build profile template. Copy this file to <profile-name>.sh in the
# same directory (the .sh files are gitignored). The profile name (the file
# basename without .sh) is what you pass to ./run.sh, e.g.:
#
# ./run.sh watch brummel-dev install
#
# Naming convention:
# <user>-<server> e.g. brummel-dev, brummel-minerva, krey-minerva
# Profiles whose name ends in "-dev" are treated as development builds
# (launcher label "Doctate (Dev)" + red "DEV" badge in the UI). All other
# profiles render the production-clean UI.
# Backend URL the watch talks to. Shared/production servers use HTTPS via the
# public domain — a Let's Encrypt cert chains to the system trust store, so no
# network-security-config change is needed. Plain HTTP is only for dev LAN
# targets (e.g. the dev laptop IP), which must be allow-listed in
# network_security_config.xml.
SERVER_URL="https://app.doctate.de"
# Plaintext api_key matching the slug in the server's users.toml.
# Generate with: openssl rand -base64 24
API_KEY="REPLACE_ME_WITH_PLAINTEXT_API_KEY"
# Bash array of stable hardware serials (ro.serialno) — one per attached watch
# this profile may target. NOT the adb transport serial (the rotating ip:port
# you see over WiFi): the guard reads ro.serialno so it survives port rotation
# and is identical over WiFi and USB.
# Find a watch's ro.serialno with: ./run.sh devices (prints "transport -> ro.serialno").
# Brummel's watch can appear in multiple profiles; Krey's watch only in hers.
ALLOWED_SERIALS=(
"XXXXXXXXXXXXXX"
)