Parahub AI
f96a455dc8
vpn-tunnel reads IP from /etc/parahub/tunnel_ip instead of hardcoded 172.16.0.2. On first boot, calls heartbeat synchronously to get assignment. Heartbeat parses tunnel_ip from response and restarts vpn-tunnel on change. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
92 lines
3.6 KiB
Bash
Executable File
92 lines
3.6 KiB
Bash
Executable File
#!/bin/sh
|
|
# Phone-home heartbeat to Parahub cloud
|
|
PARAHUB_API_YGG="http://[200:abb9:5810:37d3:8a4c:98a6:b82b:969a]/api/v1/iot/mesh/heartbeat"
|
|
PARAHUB_API_PUBLIC="https://parahub.io/api/v1/iot/mesh/heartbeat"
|
|
HEARTBEAT_KEY="IqPosrcpTQKSbLHxOG3iLTl_K2MsDxvd"
|
|
|
|
# Read firmware role
|
|
ROLE=$(cat /etc/parahub/role 2>/dev/null || echo "unknown")
|
|
|
|
# Read identity from /etc/parahub/keys
|
|
. /etc/parahub/keys 2>/dev/null
|
|
MAC="${NODE_MAC:-$(cat /sys/class/net/br-lan/address 2>/dev/null)}"
|
|
HOSTNAME="$(uci -q get system.@system[0].hostname)"
|
|
YGG_ADDR="${YGGDRASIL_ADDRESS:-unknown}"
|
|
SSID="${PRIVATE_SSID:-unknown}"
|
|
UPTIME="$(cut -d. -f1 /proc/uptime)"
|
|
|
|
# Get mesh IP (br-private address)
|
|
MESH_IP=$(ip -4 addr show br-private 2>/dev/null | grep -o 'inet [0-9.]*' | cut -d' ' -f2)
|
|
MESH_IP="${MESH_IP:-unknown}"
|
|
|
|
# Detect hardware from board_name
|
|
HW=$(cat /tmp/sysinfo/board_name 2>/dev/null)
|
|
case "$HW" in
|
|
glinet,gl-axt1800) HW="axt1800" ;;
|
|
glinet,gl-mt3000) HW="mt3000" ;;
|
|
glinet,gl-mt6000) HW="mt6000" ;;
|
|
xiaomi,redmi-router-ax6s) HW="ax6s" ;;
|
|
asus,rt-ax53u) HW="ax53u" ;;
|
|
glinet,gl-ar300m16) HW="ar300m16" ;;
|
|
cudy,wr3000-v1) HW="wr3000" ;;
|
|
*) HW="${HW:-unknown}" ;;
|
|
esac
|
|
|
|
FW_VERSION=$(cat /etc/parahub/version 2>/dev/null || echo "unknown")
|
|
PAYLOAD="{\"mac\":\"${MAC}\",\"hostname\":\"${HOSTNAME}\",\"yggdrasil_address\":\"${YGG_ADDR}\",\"firmware_version\":\"${FW_VERSION}\",\"hardware_profile\":\"${HW}\",\"uptime\":${UPTIME},\"private_ssid\":\"${SSID}\",\"firmware_role\":\"${ROLE}\",\"mesh_ip\":\"${MESH_IP}\"}"
|
|
|
|
RESPONSE=""
|
|
|
|
# Use longer timeout if called from vpn-tunnel init (first boot)
|
|
CURL_TIMEOUT="${HEARTBEAT_CURL_TIMEOUT:-10}"
|
|
|
|
if [ "$ROLE" = "bee" ]; then
|
|
# Bee: no yggdrasil, use public URL only
|
|
RESPONSE=$(curl -s -m "$CURL_TIMEOUT" -X POST \
|
|
-H "Content-Type: application/json" \
|
|
-H "Authorization: Bearer ${HEARTBEAT_KEY}" \
|
|
-d "$PAYLOAD" \
|
|
"${PARAHUB_API_PUBLIC}" 2>/dev/null)
|
|
else
|
|
# Bumblebee: try yggdrasil first, fallback to public
|
|
if ping6 -c 1 -W 3 200:abb9:5810:37d3:8a4c:98a6:b82b:969a >/dev/null 2>&1; then
|
|
RESPONSE=$(curl -s -m "$CURL_TIMEOUT" -X POST \
|
|
-H "Content-Type: application/json" \
|
|
-H "Authorization: Bearer ${HEARTBEAT_KEY}" \
|
|
-d "$PAYLOAD" \
|
|
"${PARAHUB_API_YGG}" 2>/dev/null)
|
|
else
|
|
RESPONSE=$(curl -s -m "$CURL_TIMEOUT" -X POST \
|
|
-H "Content-Type: application/json" \
|
|
-H "Authorization: Bearer ${HEARTBEAT_KEY}" \
|
|
-d "$PAYLOAD" \
|
|
"${PARAHUB_API_PUBLIC}" 2>/dev/null)
|
|
fi
|
|
fi
|
|
|
|
# Parse tunnel_ip from response and update local config (Bumblebee only)
|
|
if [ "$ROLE" != "bee" ] && [ -n "$RESPONSE" ]; then
|
|
NEW_TUNNEL_IP=$(echo "$RESPONSE" | jsonfilter -e '$.tunnel_ip' 2>/dev/null)
|
|
if [ -n "$NEW_TUNNEL_IP" ]; then
|
|
OLD_TUNNEL_IP=$(cat /etc/parahub/tunnel_ip 2>/dev/null)
|
|
if [ "$OLD_TUNNEL_IP" != "$NEW_TUNNEL_IP" ]; then
|
|
echo "$NEW_TUNNEL_IP" > /etc/parahub/tunnel_ip
|
|
logger -t parahub-heartbeat "Tunnel IP updated: ${OLD_TUNNEL_IP:-none} → $NEW_TUNNEL_IP"
|
|
# Restart vpn-tunnel if it's running (IP changed)
|
|
if [ -n "$OLD_TUNNEL_IP" ]; then
|
|
/etc/init.d/parahub-vpn-tunnel restart 2>/dev/null &
|
|
fi
|
|
fi
|
|
fi
|
|
fi
|
|
|
|
# Sync paid_clients to speed control (Bumblebee only)
|
|
if [ "$ROLE" != "bee" ] && [ -x /usr/bin/parahub-speed-control ] && [ -n "$RESPONSE" ]; then
|
|
PAID_IPS=$(echo "$RESPONSE" | jsonfilter -e '$.paid_clients[*]' 2>/dev/null)
|
|
# Flush and re-add all paid IPs
|
|
parahub-speed-control flush
|
|
for IP in $PAID_IPS; do
|
|
parahub-speed-control add "$IP"
|
|
done
|
|
fi
|