d34b2645ee
App clients reach minerva only over HTTPS now: the Android cleartext policy blocks plain HTTP to minerva.lan, and the public Let's Encrypt cert on app.doctate.de chains to the system trust store, so no network-security-config change is needed. Update the profile template's SERVER_URL and comment to reflect the HTTPS convention. closes #7
33 lines
1.5 KiB
Plaintext
33 lines
1.5 KiB
Plaintext
# Watch build profile template. Copy this file to <profile-name>.sh in the
|
|
# same directory (the .sh files are gitignored). The profile name (the file
|
|
# basename without .sh) is what you pass to ./run.sh, e.g.:
|
|
#
|
|
# ./run.sh watch brummel-dev install
|
|
#
|
|
# Naming convention:
|
|
# <user>-<server> e.g. brummel-dev, brummel-minerva, krey-minerva
|
|
# Profiles whose name ends in "-dev" are treated as development builds
|
|
# (launcher label "Doctate (Dev)" + red "DEV" badge in the UI). All other
|
|
# profiles render the production-clean UI.
|
|
|
|
# Backend URL the watch talks to. Shared/production servers use HTTPS via the
|
|
# public domain — a Let's Encrypt cert chains to the system trust store, so no
|
|
# network-security-config change is needed. Plain HTTP is only for dev LAN
|
|
# targets (e.g. the dev laptop IP), which must be allow-listed in
|
|
# network_security_config.xml.
|
|
SERVER_URL="https://app.doctate.de"
|
|
|
|
# Plaintext api_key matching the slug in the server's users.toml.
|
|
# Generate with: openssl rand -base64 24
|
|
API_KEY="REPLACE_ME_WITH_PLAINTEXT_API_KEY"
|
|
|
|
# Bash array of stable hardware serials (ro.serialno) — one per attached watch
|
|
# this profile may target. NOT the adb transport serial (the rotating ip:port
|
|
# you see over WiFi): the guard reads ro.serialno so it survives port rotation
|
|
# and is identical over WiFi and USB.
|
|
# Find a watch's ro.serialno with: ./run.sh devices (prints "transport -> ro.serialno").
|
|
# Brummel's watch can appear in multiple profiles; Krey's watch only in hers.
|
|
ALLOWED_SERIALS=(
|
|
"XXXXXXXXXXXXXX"
|
|
)
|