keeakita / iotmoist Goto Github PK

Instead of just limit oscillations, go ahead and ban anyone who tries to go crazy on it with requests. I may end up doing this proxying through Apache instead of in the application server itself

Right now just about everything is a string. This made it nice and easy to just write and read straight from VFS, but it should be standardized on booleans.

Right now the API lets you read the LED status. If everything is working fine, one of the LEDs being active indicates power is on, but it'd be nice to be able to detect when the circuit is on but there is no light, since that means something broke. This should be exposed in the JSON, something like has_power.

Right now the server has to run as root to set up the pins properly and write values. This is kind of awful security wise. Possible solutions:

1. Set CAP_SYS_RAWIO - That's still a lot of power
2. Have the program give up its root privileges
   • Lots of daemons do this, see https://www.securecoding.cert.org/confluence/display/c/POS36-C.+Observe+correct+revocation+order+while+relinquishing+privileges
   • May be a little tricky in Nim, syscalls might not be implemented for ARM https://github.com/def-/nim-syscall/tree/master/src
   • Need to set proper permissions on the output pin still

This project isn't very engaging to people who don't know how to use CURL or some other tool to interact with it. Come up with a fancy GUI page that lets people just click buttons to change state.