The iot-lora-image from pisupply

Option to connect to WiFi network.

Allow the user to select and connect the gateway to a WiFi network.

While this is a web UI this will work for example if someone is using the ethernet port direct to a computer or wants to switch the network it is on.

Add update method

Currently there is no way to update this software.

Add a function so that the software can update itself.

Windows Hostname Resolving

Fix / Re-implement so the hostname can be resolved from a windows computer.

After the first time i look at the dashboard I get a lot of 504 gateway timeout nginx..... errors. refresh will sometimes work but eventually it'll end up on a 504 page and that's it. the dashboard will not come up again

Configure 4G Modem via UI

Force Change Password

Related to #1, we need to force the user to change the password on boot

Intrusion Detection System

Implement some kind of IDS on the software side (Maybe Tripwire)

server information not reloaded after reboot

Everything works fine. However, rebooting the controller does not load the server defined in /opt/iotloragateway/local_conf.json and does not push packages to ttn. Investigation shows the following:

pi@iotloragateway:/opt/iotloragateway $ sudo journalctl -fu iot-lora-gateway 
-- Logs begin at Thu 2019-02-14 10:11:58 GMT. --
Jan 28 19:49:59 iotloragateway iot-lora-gateway[652]: src/ttn_transport.c:371:ttn_connect(): ttn_connect: sleeping() at 230, total 240
Jan 28 19:49:59 iotloragateway iot-lora-gateway[652]: 19:49:59  ERROR: [TTN] Connection to server "" failed, retry in 480 seconds

Simply running sudo systemctl restart iot-lora-gateway loads the settings from local_conf.json and everything works as expected again. This looks like a bug to me!

Possibility of SSL as default

Make Sudo Ask For Password

Change it so SUDO asks for a password instead.

Add ability to configure Modem Manager File

Add the ability to configure the modem manager file. Including templates for most UK Providers.

UK

Enable SSH from Web UI

Have the ability to enable SSH from the Web UI

Ask for confirmation on all of the commands

Ask for confirmation for the commands on the commands page before executing them.

For Semtech Mode Select Region Plans

Include Template Region Plans & Include them with the SD card image for semtech configuration.

Lockdown Samba

We have Samba installed so windows computers can type in the hostname of the device e.g http://iotloragateway

However we want to essentially disable it as much as we can.

View local LAN IP from Web UI

Make it possible to view the local LAN IP on the web UI.

Add Packet Forwarder for Standalone Gateway Module 1 & 2

Move a lot of configuration to a MySQL Database

New Plan for configuration:

Move as much of it to a MySQL Database.

This will allow easier integration of the many new features of the system but also means that it would be harder for unauthorised modifications as instead of being able to take out the SD Card / CM3, plug it into a computer and modify all of the files the person must gain access to the MySQL Database which while still possible and wouldn't not be possible to prevent modifications this would make it more of a task to do so rather than just pop in and replace all configuration.

It should also make it easier for configurating the LoRa modules themselves.

Package Packet Forwards and IoT LoRa Controller into some kind of package (SNAP/DOCKER/APT)

Move all the compilation of the software out of image and distribute instead via an apt package.

Enable Automatic Rebooting when an Update is available for docker container

The system is set to only update the docker containers when it is rebooted / powered on.

Most users won't want it to automatically reboot when there is an update however some will, add a script that runs every 24 hours that can check if there is any updates available and then init a reboot.

Integrate Chirpstack Gateway Bridge

If Possible include the Chirpstack Bridge

4G Module Testing

Perform testing to ensure the 4G Modules work fine primarily for our Standalone Gateway but also for normal gateway with Pijuice Data

Module List:

Quectel EC25-E []
Simcom Sim7100E []

Ideally with modem manager

Setup automatic Apt Security Updates

Automatically update via apt

Enable hardware serial out of the box

Generate new account password on boot

We want to generate a password on each boot and then save this to the config file.

Once the user sets up the account we want to then display this to the user after they've setup an account with a warning to make a note of it / print it out and to change the password if they log in via SSH etc.

Once the user has seen the password generate a new one which will not work and save this to the file to prevent abuse and / or maybe write the password to the /boot partition as well allowing a user to access it via USB.

This should make the gateway mostly compliant to the proposed guideline of the COP for Consumer IOT Security of passwords must be unique. However cannot comply to be resettable to any universal setting.

Fail2ban

Add Diagnostic features

In V1 I have disabled the diagnosis feature. For V2 we need to add this in.

Switch to ram logging

Switch the gateway software & nginx to use Ramlog.

This will increase the lifespan of the Standalone gateway by preserving the EMMC. At the same time this could offer potential speed benefits and benefits for SD Card users on Gateway HATs.

Move config files to admin folder and protect with .htpasswd

It would be great if the config files were moved to an admin folder and protected with a .htpasswd. I have done this on my dev system and it works well.

The status page remains public so that it can be viewed across the LAN but the config pages become protected so the settings can't be changed without authorisation.

Ability to change RPi user Pi password and Pi's hostname

Add a configuration page that allows the Raspberry Pi's password to be changed and the Pi's hostname to be changed.

Add configuration option for standalone gateway module 2

Change HTTP Auth login to a PHP based login system

Change the system to use a PHP Based Login System instead. This will also allow us to implement 2FA

Restart Packet Forwarder Containers From Controller Container

Need to figure out how to restart a container from another.

However this needs to be done via some kind of API or such as if we do it using the Docker API there is a risk that it gives full reset etc.

Clam AV And Maldet

AS1 & AS2 Do not seem to be working

The AS1 and AS2 frequency plans seem to be causing the RAK833 to not start.

Analytics / Reporting / Phone Home

It would be good to look into some kind of analytics / phoning home into the software to allow us to gain some statistics.

To comply with GDPR this will either be optional / limited information (such as you can't fully opt out of Windows 10).

Stats that would be interesting to track:

Uptime / If it's active, such as a ping signal
Raspberry Pi Serial Number
Raspbery Pi Model Code
If the gateway is set to TTN Mode or Legacy Mode
Average CPU Temperature
Gateway Type (Nebra or HAT)

This will then also require extra pages on the iot-lora-controller to make possible.

pisupply / iot-lora-image Goto Github PK

iot-lora-image's People

Contributors

Stargazers

Watchers

Forkers

iot-lora-image's Issues

Recommend Projects

Recommend Topics

Recommend Org