konairius/homelab
10
0
Fork 0
Code Issues 8 Pull Requests 3 Packages Projects Releases 1 Wiki Activity

feat(shelly-manager): wire the ESPHome proxy Noise key #166

Merged
k.renner merged 1 commits from feat/shelly-proxy-key into master 2026-07-13 16:02:00 +00:00
Conversation 0 Commits 1 Files Changed 3
+34
claude-bot commented 2026-07-13 15:52:48 +00:00
Member
Copy Link
Copy Source

Gives shelly-manager the api.encryption.key so its native ESPHome-API client (k.renner/shelly-manager#12) can do the real Noise_NNpsk0 handshake to the Atom Echo bluetooth_proxy.

  • shelly-ble-proxy-key.sops.yaml — SOPS Secret (api-key), same value as the ESPHome dashboard's shelly_ble_proxy_api_key (44-char base64 / 32-byte PSK), encrypted to the cluster age recipient.
  • shelly-manager-deployment — inject it as Ble__Proxies__0__Key via secretKeyRef.

Effect: /ble-radios upgrades from the bare TCP :6053 check to a real handshake + DeviceInfo (shows the proxy's name/version) — which also validates the Noise/frame stack on live hardware before the BLE scan/GATT provisioning slices build on it.

Adding the env changes the pod template, so the Recreate strategy rolls a new pod that picks up the secret.

🤖 Generated with Claude Code

Gives shelly-manager the `api.encryption.key` so its native ESPHome-API client (k.renner/shelly-manager#12) can do the **real Noise_NNpsk0 handshake** to the Atom Echo `bluetooth_proxy`. - **`shelly-ble-proxy-key.sops.yaml`** — SOPS Secret (`api-key`), same value as the ESPHome dashboard's `shelly_ble_proxy_api_key` (44-char base64 / 32-byte PSK), encrypted to the cluster age recipient. - **`shelly-manager-deployment`** — inject it as `Ble__Proxies__0__Key` via `secretKeyRef`. **Effect:** `/ble-radios` upgrades from the bare TCP `:6053` check to a real handshake + `DeviceInfo` (shows the proxy's name/version) — which also validates the Noise/frame stack on **live hardware** before the BLE scan/GATT provisioning slices build on it. Adding the env changes the pod template, so the Recreate strategy rolls a new pod that picks up the secret. 🤖 Generated with [Claude Code](https://claude.com/claude-code)
claude-bot added 1 commit 2026-07-13 15:52:48 +00:00
feat(shelly-manager): wire the ESPHome proxy Noise key 2f2b96905e 
shelly-manager's native ESPHome-API client (PR k.renner/shelly-manager#12)
does the real Noise_NNpsk0 handshake to the Atom Echo bluetooth_proxy when
it has the api.encryption.key. Provide it:

  * shelly-ble-proxy-key.sops.yaml — SOPS Secret holding api-key, the same
    value as the ESPHome dashboard's shelly_ble_proxy_api_key.
  * shelly-manager-deployment: inject it as Ble__Proxies__0__Key via
    secretKeyRef.

Effect: /ble-radios upgrades from a bare TCP :6053 check to a real
handshake + DeviceInfo (device name/version), which also validates the
Noise/frame stack on live hardware ahead of the BLE scan/GATT work.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
k.renner merged commit 1210d0da7a into master 2026-07-13 16:02:00 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
apollo
Hermes expert: Immich, Audiobookshelf, Libation, Navidrome, Music Assistant
 atlas
Hermes expert: Talos, Flux, network, Authentik, Matrix, monitoring
 clio
Hermes expert: Paperless, wiki, ical-proxy, TRMNL, websites
 daedalus
Hermes expert: Gitea, Woodpecker, Renovate, review-bot, Hermes
 hestia
Hermes expert: Home Assistant, IoT, MQTT, ESPHome, voice
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
alert-monitor-bot claude-bot (Claude Bot) flux hermes-bot issue-fix-bot k.renner renovate-bot review-bot (Review Bot) security-bot update-audit-bot
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: konairius/homelab#166