Initial project scaffold

2026-09-04 11:18:06 +02:00
commit a26c37dee0
8 changed files with 89 additions and 0 deletions
@@ -0,0 +1,7 @@
+# Configuration
+
+Configure the local controller address and the installation-specific credentials supplied for your system. Credentials stay inside the app and are never passed to the Home Assistant integration.
+
+For local certificates, `fingerprint` mode requires the expected SHA-256 certificate fingerprint. A certificate change is rejected. `system_ca` uses the standard trust store, while `custom_ca` is reserved for a separately provided local certificate authority.
+
+The bridge API is intended for the internal Home Assistant network and is not exposed on a host port by default.
@@ -0,0 +1,5 @@
+# MB-Secure Bridge
+
+The MB-Secure Bridge provides a local, vendor-neutral API for the MB-Secure Home Assistant integration.
+
+This app is not affiliated with or endorsed by the device manufacturer. An installable container image is not available yet.
@@ -0,0 +1,32 @@
+name: MB-Secure Bridge
+version: "0.1.0"
+slug: mb_secure_bridge
+description: Local bridge for the MB-Secure Home Assistant integration
+url: https://git.bahmcloud.de/bahmcloud/home-assistant-addons
+startup: application
+boot: auto
+init: false
+arch:
+  - amd64
+  - aarch64
+image: git.bahmcloud.de/bahmcloud/mb-secure-bridge
+ports: {}
+ports_description: {}
+options:
+  host: ""
+  port: 443
+  username: ""
+  password: ""
+  tls_mode: fingerprint
+  certificate_sha256: ""
+  reconnect_interval: 10
+  log_level: info
+schema:
+  host: str
+  port: port
+  username: str
+  password: password
+  tls_mode: list(system_ca|custom_ca|fingerprint)
+  certificate_sha256: str
+  reconnect_interval: int(1,300)
+  log_level: list(error|warn|info|debug)
@@ -0,0 +1,25 @@
+configuration:
+  host:
+    name: Controller host
+    description: Local address of the controller.
+  port:
+    name: Controller port
+    description: TLS port used by the controller.
+  username:
+    name: Username
+    description: Installation-specific local API username.
+  password:
+    name: Password
+    description: Installation-specific local API password.
+  tls_mode:
+    name: TLS verification mode
+    description: Select system trust, a custom CA, or a pinned certificate fingerprint.
+  certificate_sha256:
+    name: Certificate SHA-256 fingerprint
+    description: Expected fingerprint when fingerprint verification is selected.
+  reconnect_interval:
+    name: Reconnect interval
+    description: Initial reconnect delay in seconds.
+  log_level:
+    name: Log level
+    description: Diagnostic logging verbosity. Secrets are always redacted.