mirror of https://github.com/kuhyx/testsAndMisc.git synced 2026-11-10 20:47:03 +01:00

Krzysztof kuhy Rudnicki f15f00f3fe Re-point paths for the ~ reorganisation (home-tidy)

Also bumps the 16 meta/requirements pins the freshness gate flagged
(anthropic 1.5.0, numpy 2.5.3, pytest-randomly 5, flake8-bugbear 26.9.9,
ruff 0.16.7, pyright 1.1.414, selenium 4.49.0, hypothesis 6.168.0, lxml
6.1.3, pipdeptree 4.2.5, the two types-* stubs) and Flutter 3.47.3 in
meta/.fvmrc. One test still expected the pre-move ~/mcp-servers path.

The pre-commit hook fed .zsh files to shfmt and shellcheck, neither of
which parses zsh (SC2148/SC1071), so no zsh file could be committed since
the hook was tightened on 2026-08-22; those now get `zsh -n` instead. The
hook's own shfmt pass also staged its reformat of 8 shell files.

CI_GREEN_SKIP because main is red on exactly the dependency-freshness
finding this commit fixes, which is the documented use of that flag.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01AwtowrowDXx6ccmWVPkCaF

2026-09-11 20:50:19 +02:00

3.6 KiB

Raw Blame History

Endurain + RunnerUp WebDAV sync

Self-hosted fitness tracker (Endurain) fed by RunnerUp exports from the phone.

Endurain is a viewer. screen-locker's workout gate still reads the phone over adb and is untouched by anything here — a WebDAV drop folder is trivially spoofable by anything that can write to ~/data/cloud, so it must never become an unlock authority.

Paths

What	Where
Public URL	`https://endurain.kuhy.duckdns.org`
Local URL	`http://127.0.0.1:8085` (loopback only)
WebDAV inbox	`https://kuhy-cloud.duckdns.org/RunnerUp` → `~/data/cloud/RunnerUp/`
Runtime data	`/var/opt/endurain/`
Ledger	`~/.local/state/endurain-import/ledger.json`
Importer code	`../python_pkg/endurain_import/` (repo requires Python under `python_pkg/`)
Secrets	`.env`, `.api_key` (both gitignored, mode 600)

Flow

phone --(WebDAV, manual tap)--> dufs ~/data/cloud/RunnerUp/ --\
                                                          >-- importer --> Endurain
phone --(adb pull, fallback)--> ~/data/cloud/RunnerUp/ -------/

A systemd user timer (endurain-import.timer) runs every 15 min.

Commands

./scripts/setup_endurain.sh          # provision / restart the stack
./scripts/publish_endurain.sh        # install the Caddy site (gated)
systemctl --user start endurain-import.service   # import now
journalctl --user -u endurain-import.service -n 30
cd .. && .venv/bin/python -m pytest python_pkg/endurain_import/tests/ -q  # 52 tests

Things that will bite you

RunnerUp has no background sync. No WorkManager, JobScheduler or AlarmManager anywhere in its source. Every upload is a manual tap on the save/upload button after a run. This is not configurable.
The WebDAV URL must not end in a slash. RunnerUp builds the target as url + fileBase + fileExt where fileBase already starts with /.
MKCOL is not supported by dufs. RunnerUp PROPFINDs the directory and only issues MKCOL on 404, so ~/data/cloud/RunnerUp/ must exist on disk or adding the account fails with an opaque generic error (upstream #1147/#1172).
HTTPS is mandatory. RunnerUp targets targetSdk 36 with no usesCleartextTraffic, so Android blocks plain HTTP. Self-signed certs are broken upstream (stock OkHttpClient, system trust store only) — this is why it rides on the existing Let's Encrypt cert.
Endurain does not deduplicate. Re-uploading a file creates a second activity. All dedupe is the importer's job, on two axes: the content hash, and an activity key that collapses the .gpx/.tcx pair RunnerUp writes for a single run (different bytes, same run).
X-API-Key, not X-Client-Type. Endurain's own OpenAPI schema declares the APIKeyHeader scheme with the wrong name; verified against the server.
postgres:18 moved PGDATA to /var/lib/postgresql/18/docker. Upstream's compose example still mounts the pre-18 path, which fails as an unexplained "container is unhealthy".
The admin account is seeded admin/admin by an Alembic migration with no env override. publish_endurain.sh refuses to expose the service until that password is changed.

3.6 KiB Raw Blame History