mirror of
https://github.com/kuhyx/testsAndMisc.git
synced 2026-11-11 19:34:03 +01:00
Krzysztof kuhy Rudnicki
f15f00f3fe
Also bumps the 16 meta/requirements pins the freshness gate flagged (anthropic 1.5.0, numpy 2.5.3, pytest-randomly 5, flake8-bugbear 26.9.9, ruff 0.16.7, pyright 1.1.414, selenium 4.49.0, hypothesis 6.168.0, lxml 6.1.3, pipdeptree 4.2.5, the two types-* stubs) and Flutter 3.47.3 in meta/.fvmrc. One test still expected the pre-move ~/mcp-servers path. The pre-commit hook fed .zsh files to shfmt and shellcheck, neither of which parses zsh (SC2148/SC1071), so no zsh file could be committed since the hook was tightened on 2026-08-22; those now get `zsh -n` instead. The hook's own shfmt pass also staged its reformat of 8 shell files. CI_GREEN_SKIP because main is red on exactly the dependency-freshness finding this commit fixes, which is the documented use of that flag. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01AwtowrowDXx6ccmWVPkCaF
69 lines
3.6 KiB
Markdown
69 lines
3.6 KiB
Markdown
# Endurain + RunnerUp WebDAV sync
|
|
|
|
Self-hosted fitness tracker ([Endurain](https://codeberg.org/endurain-project/endurain))
|
|
fed by RunnerUp exports from the phone.
|
|
|
|
**Endurain is a viewer.** `screen-locker`'s workout gate still reads the phone
|
|
over adb and is untouched by anything here — a WebDAV drop folder is trivially
|
|
spoofable by anything that can write to `~/data/cloud`, so it must never become an
|
|
unlock authority.
|
|
|
|
## Paths
|
|
|
|
| What | Where |
|
|
| ------------- | --------------------------------------------------------------------------- |
|
|
| Public URL | `https://endurain.kuhy.duckdns.org` |
|
|
| Local URL | `http://127.0.0.1:8085` (loopback only) |
|
|
| WebDAV inbox | `https://kuhy-cloud.duckdns.org/RunnerUp` → `~/data/cloud/RunnerUp/` |
|
|
| Runtime data | `/var/opt/endurain/` |
|
|
| Ledger | `~/.local/state/endurain-import/ledger.json` |
|
|
| Importer code | `../python_pkg/endurain_import/` (repo requires Python under `python_pkg/`) |
|
|
| Secrets | `.env`, `.api_key` (both gitignored, mode 600) |
|
|
|
|
## Flow
|
|
|
|
```
|
|
phone --(WebDAV, manual tap)--> dufs ~/data/cloud/RunnerUp/ --\
|
|
>-- importer --> Endurain
|
|
phone --(adb pull, fallback)--> ~/data/cloud/RunnerUp/ -------/
|
|
```
|
|
|
|
A systemd user timer (`endurain-import.timer`) runs every 15 min.
|
|
|
|
## Commands
|
|
|
|
```bash
|
|
./scripts/setup_endurain.sh # provision / restart the stack
|
|
./scripts/publish_endurain.sh # install the Caddy site (gated)
|
|
systemctl --user start endurain-import.service # import now
|
|
journalctl --user -u endurain-import.service -n 30
|
|
cd .. && .venv/bin/python -m pytest python_pkg/endurain_import/tests/ -q # 52 tests
|
|
```
|
|
|
|
## Things that will bite you
|
|
|
|
- **RunnerUp has no background sync.** No `WorkManager`, `JobScheduler` or
|
|
`AlarmManager` anywhere in its source. Every upload is a manual tap on the
|
|
save/upload button after a run. This is not configurable.
|
|
- **The WebDAV URL must not end in a slash.** RunnerUp builds the target as
|
|
`url + fileBase + fileExt` where `fileBase` already starts with `/`.
|
|
- **`MKCOL` is not supported by dufs.** RunnerUp `PROPFIND`s the directory and
|
|
only issues `MKCOL` on 404, so `~/data/cloud/RunnerUp/` must exist on disk or
|
|
adding the account fails with an opaque generic error (upstream #1147/#1172).
|
|
- **HTTPS is mandatory.** RunnerUp targets `targetSdk 36` with no
|
|
`usesCleartextTraffic`, so Android blocks plain HTTP. Self-signed certs are
|
|
broken upstream (stock `OkHttpClient`, system trust store only) — this is why
|
|
it rides on the existing Let's Encrypt cert.
|
|
- **Endurain does not deduplicate.** Re-uploading a file creates a second
|
|
activity. All dedupe is the importer's job, on two axes: the content hash,
|
|
_and_ an activity key that collapses the `.gpx`/`.tcx` pair RunnerUp writes
|
|
for a single run (different bytes, same run).
|
|
- **`X-API-Key`, not `X-Client-Type`.** Endurain's own OpenAPI schema declares
|
|
the `APIKeyHeader` scheme with the wrong name; verified against the server.
|
|
- **postgres:18 moved `PGDATA`** to `/var/lib/postgresql/18/docker`. Upstream's
|
|
compose example still mounts the pre-18 path, which fails as an unexplained
|
|
"container is unhealthy".
|
|
- **The admin account is seeded `admin`/`admin`** by an Alembic migration with
|
|
no env override. `publish_endurain.sh` refuses to expose the service until
|
|
that password is changed.
|