Initial commit: abyssVpn project

- Tauri desktop app (apps/desktop)
- Python Django API service (services/api)
- Deployment scripts and docs

deploy/vendor/netmaker-assets/docker/Caddyfile

@@ -0,0 +1,34 @@
+# Dashboard
+https://dashboard.{$NM_DOMAIN} {
+	# Apply basic security headers
+	header {
+		# Enable cross origin access to *.{$NM_DOMAIN}
+		Access-Control-Allow-Origin *.{$NM_DOMAIN}
+		# Enable HTTP Strict Transport Security (HSTS)
+		Strict-Transport-Security "max-age=31536000;"
+		# Enable cross-site filter (XSS) and tell browser to block detected attacks
+		X-XSS-Protection "1; mode=block"
+		# Disallow the site to be rendered within a frame on a foreign domain (clickjacking protection)
+		X-Frame-Options "SAMEORIGIN"
+		# Prevent search engines from indexing
+		X-Robots-Tag "none"
+		# Remove the server name
+		-Server
+	}
+
+	reverse_proxy http://netmaker-ui
+}
+
+# API
+https://api.{$NM_DOMAIN} {
+	reverse_proxy http://netmaker:8081
+}
+
+# MQ
+broker.{$NM_DOMAIN} {
+	@ws {
+			header Connection *Upgrade*
+			header Upgrade websocket
+		}
+	reverse_proxy @ws mq:8883   # For EMQX websockets use `reverse_proxy @ws mq:8083`
+}

deploy/vendor/netmaker-assets/docker/mosquitto.conf

@@ -0,0 +1,10 @@
+per_listener_settings false
+listener 8883
+protocol websockets
+allow_anonymous false
+
+listener 1883
+protocol websockets
+allow_anonymous false
+
+password_file /mosquitto/password.txt

deploy/vendor/netmaker-assets/docker/wait.sh

@@ -0,0 +1,18 @@
+#!/bin/ash
+
+encrypt_password() {
+  echo "${MQ_USERNAME}:${MQ_PASSWORD}" > /mosquitto/password.txt
+  mosquitto_passwd -U /mosquitto/password.txt
+}
+
+main(){
+
+ encrypt_password
+ echo "Starting MQ..."
+ # Run the main container command.
+ /docker-entrypoint.sh
+ /usr/sbin/mosquitto -c /mosquitto/config/mosquitto.conf
+
+}
+
+main "${@}"