[{"_1":2,"_154":-5,"_155":-5},"loaderData",{"_3":4,"_13":14,"_21":22,"_133":134},"root",{"_5":-5,"_6":-7,"_7":8,"_9":-7,"_10":11,"_12":-7},"currentUser","primaryEmail","siteVerification","6LeIxAcTAAAAAJcZVRqyHh71UMIEGNQ_MXjiZKhI","toast","enableDev",false,"incidentStatus","routes/_layout",{"_15":-5,"_16":17,"_18":17,"_19":11,"_20":17},"username","isAskGordonEnabled",true,"isUsingNewTemplate","showMinimalLanding","showHoneypotTrap","routes/_layout.r.$namespace.$reponame",{"_23":24,"_25":-5,"_26":11,"_27":11,"_28":29,"_30":31,"_32":-5,"_33":11,"_34":35,"_84":-5,"_85":86,"_124":-5,"_125":11,"_126":17,"_127":11,"_128":-5,"_129":11,"_130":-5,"_131":132},"canonicalUrl","https://hub.docker.com/r/tmunzer/mpss/tags","mcpServer","canSeeDockerfile","canSeeAutobuilds","namespace","tmunzer","reponame","mpss","cloudBuildSource","isAutobuildsAvailable","repo",{"_36":37,"_38":39,"_41":42,"_43":44,"_45":11,"_46":47,"_48":49,"_50":51,"_53":31,"_28":29,"_54":55,"_56":40,"_57":58,"_59":60,"_61":62,"_63":-5,"_64":58,"_65":66,"_67":11,"_68":29,"_69":70,"_75":11,"_76":77,"_81":29,"_82":83},"categories",[],"content_types",[40],"image","date_registered","2021-05-27T16:57:13.922338Z","description","","is_private","last_updated","2023-07-27T10:13:23.044041Z","last_modified","2024-10-16T13:48:34.145251Z","media_types",[52],"application/vnd.docker.container.image.v1+json","name","pull_count",1441,"repository_type","star_count",0,"status",1,"status_description","active","source","collaborator_count","full_description","# Mist PSK Self Service\nThis application provides a single page app to get a Mist PSK from the Mist Cloud. This App can use AzureAD, ADFS/SAML, Okta or Google authentication.\n\n# MIT LICENSE\n\nCopyright (c) 2021 Thomas Munzer\n\nPermission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the \"Software\"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.\n\n\n# Mist PSK Self Service\n* Admin interface to configure:\n * the Mist integration \n * the Authentication method\n * the logo and colors \n * the translations\n* AzureAD, ADFS/SAML, Google and Okta integration\n* User self-service portal with Email and QRcode features\n\n

\n\n# Install\nThis Reference Application can be used as a standalone Application, or it can be deployed as a Docker Image (recommanded).\n\n## Deploy the Docker version (recommanded)\nThis application is available as a [Docker Image](https://hub.docker.com/repository/docker/tmunzer/mpss). The Dockerfile is also available if you want top build it on your own.\n\n### Run the Docker version\n` docker create -v /config.js:/app/config.js:ro --link :mongo --name=\"\" -p 3000:80 tmunzer/mpss`\n\n### Configure the Docker version\nConfiguration can be done through the config file. An example of the `config.js` file can be found in `src/config_example.js`. Then, you just need to link the `config.js` file to `/app/config.js` in you container.\n\nYou can also use environment variables to configure the app:\n\nVariable Name | Type | Default Value | Comment \n------------- | ---- | ------------- | ------- \nNODE_HOSTNAME | string | null | Server FQDN. Used to forge the url. |\nNODE_PORT | int | 3000 | TCP Port used for HTTP |\nNODE_HTTPS | boolean | false | enable HTTPS in Node. require `NODE_HTTPS_CERT` and `NODE_HTTPS_KEY` |\nNODE_PORT_HTTPS | int | 3443 | TCP Port used for HTTPS.. Only used if `NODE_HTTPS == true` |\nNODE_HTTPS_CERT | string | null | certificate file name for HTTPS. The certificate file must be placed inside the `src/certs/` folder |\nNODE_HTTPS_KEY | string | null | certificate key file name for HTTPS. The certificate key file must be placed inside the `src/certs/` folder |\nMONGO_HOSTNAME | string | null | Mongo server hostname |\nMONGO_DB | string | mpss | Mongo Database name |\nMONGO_USER | string | null | If the Mongo server require authentication |\nMONGO_PASSWORD | string | null | If the Mongo server require authentication |\nMONGO_ENC_KEY | string | null | Used to encrypt the data stored inside the Mongo DB. If not set, the data will be store in cleartext. Can be generated with `openssl rand -base64 32` command |\nMONGO_SIG_KEY | string | null | Used to encrypt the data stored inside the Mongo DB. If not set, the data will be store in cleartext. Can be generated with `openssl rand -base64 64` command |\nSMTP_HOSTNAME | string | null | SMTP server FQDN or IP Address |\nSMTP_PORT | int | 25 | | \nSMTP_SECURE | boolean | false | indicate NODE to use STARTTLS or SSL/TLS to communicate with the SMTP server |\nSMTP_REJECT_UNAUTHORIZED | boolean | true | if `SMTP_SECCUR==true`, reject SMTP Server with invalid certificates |\nSMTP_USER | string | null | SMTP user account (if authentication is required) |\nSMTP_PASSWORD | string | null | SMTP user password (if authentication is required) |\nSMTP_FROM_NAME | string | Wi-Fi Access | Sender name |\nSMTP_FROM_EMAIL | string | wi-fi@corp.org | Sender email |\nSMTP_SUBJECT | string | Your Personal Wi-Fi access code | |\nSMTP_LOGO | string | https://cdn.mist.com/wp-content/uploads/logo.png | URL to the logo to use in the Email |\nSMTP_ENABLE_QRCODE | boolean | true | Enable the QRCode function on the portal and in the emails |\nGOOGLE_CLIENTID | string | null | Google API Client_ID if Google Auth is used |\nGOOGLE_CLIENTSECRET | string | null | Google API Client_Secret if Google Auth is used |\nAPP_DISCLAIMER | string | null | Disclaimer to display on the Admin login page |\n\n### Permanent storage\nThis App is storing ADFS/SAML information used for the SSO process. You can use a permanent storage to keep the same settings even if the container is restarting. I will simply show the basic procedure here to use a permanent storage:\n\n1. Create a data directory on a suitable volume on your host system, e.g. /my/own/datadir.\n\n2. Start your app container like this:\n\n```$ docker run --name some-name -v /my/own/datadir:/app/certs -d tmunzer/mpss```\n\nThe `-v /my/own/datadir:/app/certs` part of the command mounts the /my/own/datadir directory from the underlying host system as /app/certs inside the container, where Mpss by default will store the certificates.\n\n## Deploy the Standalone Application\nThis Reference APP is built over NodeJS. \n\n### Deploy the Application\n* Install NodeJS LTS: https://nodejs.org/en/download/.\n* Clone this repo.\n* Configure the APP settings, in the `src/config.js` file. You will find an example in `src/config_example.js`. With Docker deployment, all the settings can be configured by using Environment Variables (see below)\n* Install npm packages (`npm install` from the project folder).\n* Start the APP with `npm start` from the `src` folder\n\n### Manage HTTPS at the application level\nIf you want to use OAuth authentication, the application will need to use HTTPS. To do so, you can use a reverse Proxy (NGINX, Apache, ...) and manage the certificates at the reverse proxy level, or you can configure the app to enable HTTPS. In this case:\n* Edit the `config.js` to enable HTTP\n* Place you certificate and certificate key in the `src/certs` folder. The certificate and key must be name based on the names configured in the `config.js`file\n* Start the APP with `npm start` from the `src` folder\n\n## Security concerns\nIt is very important to protect your Mongo DB from external access. \n\nThis application needs some critical information to be able to create/delete/retrieve the users' PSK. For example, the application need the Mist API Token, the Mist org_id and Mist site_id. These information can be used by afterward by malicious users to access your Mist Organization.\n\nTo protect your data, be sure to:\n* Block all the external access to your Mongo DB\n* Protect your Mongo DB with authentication\n\nIt is also possible to encypt most of the information stored by the application by setting the `MONGO_ENC_KEY` and `MONGO_SIG_KEY` configuration variables (or `encKey` and `sigKey` in the `config.js` file).\n\n### Migrate from unencrypted DB to encrypted DB\n** WARNING: Be sure to backup your DB before starting the migration **\n\nIf you start to use the application without setting the encription and signature keys, the application already stored some data unencrypted.\n\nYou can use the `encrypt_db.js` node script to automatically encrypt the data in your DB. To do so, just configure the encyption and signature keys, start the script (`node ./encypt_db.js` from the `src` folder). If the script ended succesfully, you can start the app again (`npm start`) with the encryption settings set.\n","has_starred","hub_user","immutable_tags_settings",{"_71":11,"_72":73},"enabled","rules",[74],".*","is_automated","permissions",{"_78":17,"_79":11,"_80":11},"read","write","admin","user","storage_size",2692585451,"orgData","recentTags",[87],{"_88":40,"_89":90,"_91":92,"_93":94,"_95":96,"_97":98,"_46":113,"_114":90,"_115":29,"_116":52,"_53":117,"_118":119,"_120":104,"_121":113,"_122":62,"_123":17},"content_type","creator",806974,"digest","sha256:a2f2baa2e53a7c906f944dc9675ec6e08793b80a6ebf637541eb39c2b194407b","full_size",90117976,"id",151882912,"images",[99],{"_100":101,"_91":92,"_102":44,"_103":104,"_105":106,"_107":108,"_109":44,"_110":-5,"_111":94,"_59":62,"_112":-5},"architecture","amd64","features","last_pulled","2026-09-23T16:39:59.651539921Z","last_pushed","2023-07-27T10:10:45Z","os","linux","os_features","os_version","size","variant","2023-07-27T10:13:22.927762Z","last_updater","last_updater_username","media_type","latest","repository",13981375,"tag_last_pulled","tag_last_pushed","tag_status","v2","sbxKitMetadata","isPotentialSpam","isHubSbxKitsEnabled","showSbxLogoOverride","sbxTrademarkText","displaySecurityMetadata","tagAttestations","tagsHaveAttestations",[],"routes/_layout.r.$namespace.$reponame.tags",{"_34":135,"_142":143,"_131":152,"_153":11},{"_36":136,"_38":137,"_41":42,"_43":44,"_45":11,"_46":47,"_48":49,"_50":138,"_53":31,"_28":29,"_54":55,"_56":40,"_57":58,"_59":60,"_61":62,"_63":-5,"_64":58,"_65":66,"_67":11,"_68":29,"_69":139,"_75":11,"_76":141,"_81":29,"_82":83},[],[40],[52],{"_71":11,"_72":140},[74],{"_78":17,"_79":11,"_80":11},"tags",{"_144":60,"_145":-5,"_146":-5,"_147":148},"count","next","previous","results",[149],{"_88":40,"_89":90,"_91":92,"_93":94,"_95":96,"_97":150,"_46":113,"_114":90,"_115":29,"_116":52,"_53":117,"_118":119,"_120":104,"_121":113,"_122":62,"_123":17},[151],{"_100":101,"_91":92,"_102":44,"_103":104,"_105":106,"_107":108,"_109":44,"_110":-5,"_111":94,"_59":62,"_112":-5},[],"canDeleteTags","actionData","errors"]

tmunzer/mpss

Tags for tmunzer/mpss