Jon Vanvik
ea251c3498
- Remove the animated neon edge-glow entirely (HTML element + CSS) — it couldn't be made to follow the border reliably on iOS Safari. - Add PFW_MCMS_URL: the web server prefills the login "Host URL" field with it (injected as the input's value in the served index; still editable). Documented in env.example + web README. - Remove the "Accept self-signed TLS certificate" option: the checkbox is gone and both backends now always use rejectUnauthorized:true — MCMS must present a valid certificate. Dropped the acceptSelfSigned plumbing from the renderer and both login handlers. Docs: CLAUDE.md (drop edge-glow section, update login note) + web README. Verified: node --check; no stale refs (in-self-signed / acceptSelfSigned / edge-glow / beamspin); served index carries value="…" only when PFW_MCMS_URL is set, and no self-signed checkbox. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
34 lines
1.4 KiB
Text
34 lines
1.4 KiB
Text
# PON Fleet web server config.
|
|
# Copy to /etc/pon-fleet-web.env and edit. All values are optional; the
|
|
# defaults shown are what the server uses if a line is omitted.
|
|
|
|
# Prefill the login "Host URL" field so operators don't type it each time.
|
|
# (Still editable in the form.) Use the MCMS PON Manager root URL.
|
|
#PFW_MCMS_URL=https://mcms.example.net
|
|
|
|
# Listen port.
|
|
#PORT=8080
|
|
|
|
# Bind address. Keep 127.0.0.1 if Nginx Proxy Manager runs on THIS host.
|
|
# If NPM is a separate box/container, set 0.0.0.0 and restrict access at the
|
|
# proxy (access lists) and/or the LXC firewall.
|
|
#HOST=127.0.0.1
|
|
|
|
# Shared upstream cache TTL (seconds). Repeated bulk reads (fleet load,
|
|
# dashboard, OLT list) within this window are served from one cached MCMS
|
|
# fetch, shared across all operators on the same MCMS host. 0 disables it.
|
|
# Raise to cut MCMS load further; lower for fresher data.
|
|
#PFW_CACHE_TTL_SECONDS=60
|
|
|
|
# Idle session timeout (minutes). After this with no requests the server
|
|
# logs that operator's MCMS session out and drops their client.
|
|
#PFW_IDLE_MINUTES=30
|
|
|
|
# Force the Secure flag on the session cookie. Recommended when always
|
|
# behind HTTPS (NPM terminates TLS). If unset, Secure is inferred from the
|
|
# X-Forwarded-Proto: https header NPM/nginx sends.
|
|
#PFW_SECURE_COOKIE=1
|
|
|
|
# Verbose MCMS request logging to the journal. Off by default — very noisy
|
|
# with multiple users and dumps request metadata.
|
|
#PFW_VERBOSE=0
|