Commit Graph

3 Commits

Author SHA1 Message Date
tarcourt c7ab02cc59 feat: auto-disable message authentication at startup
SNEK resets to authentication=enabled on every restart and does not persist
the state anywhere. The entrypoint now waits for the SNEK API to be ready
and POSTs to /ned/saturation to disable auth automatically.

- Registered devices without HMAC public keys (e.g. demo Sens'it) are
  decoded immediately on first boot and after any pod restart
- To re-enable auth in production, comment the polling block in entrypoint.sh

README updated with details in the "Configuration des devices" section.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
2026-07-03 17:38:45 +02:00
tarcourt 66db42b362 docs: security section + fix MAX_DEVICES doc
- Add "Sécurité, vie privée & aspects légaux" section covering:
  - What the SDR dongle actually captures (RF broadcast)
  - What SNEK exposes by default (nothing for unregistered devices)
  - Theoretical interception attack scenario
  - Legal aspects (Article 226-15, RGPD)
  - Best practices to mitigate

- Fix MAX_DEVICES doc: 5 is the hard limit (JS frontend hardcoded)
  Removed misleading claim that config change to 10 works

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
2026-07-03 17:30:59 +02:00
tarcourt ff648fa9b2 init: SNEK on Kubernetes
- Dockerfile: Ubuntu 20.04 + all SNEK dependencies (libgtk2-perl, libffi6, etc.)
- entrypoint.sh: flash firmware via foxctl, start main_sigfox
- deploy/snek.yaml: K8s manifest (namespace, PVC, deployment, LoadBalancer)
- README: full documentation covering hardware, software, decoding, callbacks
2026-07-03 17:16:32 +02:00