fix: rclone PC-to-PC sync — serve backups, chat-history, uploads via filters; save source before Sync Now
The WebDAV server was narrowed to serve only backups/ (to stop exposing .env), but the receiver still pulls /backups, /chat-history and /uploads, so every sync failed with "directory not found". Serve the app root filtered with --include to just those three folders; everything else (.env, source, config/key files) returns 404. Sync Now now saves the typed source IP/port before pulling, since the pull reads the saved config. stop-app.sh also frees port 8080: kill -9 on the backend orphans the rclone child, which then keeps the port with stale settings. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
@@ -35,7 +35,7 @@ export function isServerRunning(): boolean {
|
||||
return serverProcess !== null && serverProcess.exitCode === null;
|
||||
}
|
||||
|
||||
// Source PC: rclone serve webdav ./backups --addr :8080 --user MyDentalApp --pass SuperSecret!@2026
|
||||
// Source PC: rclone serve webdav . --include "/backups/**" ... --addr :8080 --user MyDentalApp --pass SuperSecret!@2026
|
||||
export async function startWebDavServer(): Promise<void> {
|
||||
if (isServerRunning()) return;
|
||||
|
||||
@@ -46,16 +46,22 @@ export async function startWebDavServer(): Promise<void> {
|
||||
|
||||
const config = readRcloneConfig();
|
||||
|
||||
// Serve only the backups folder — never the app root, which contains
|
||||
// .env (DB/Twilio/AI credentials) and the full source tree.
|
||||
const backupsDir = path.join(APP_ROOT, "backups");
|
||||
if (!fs.existsSync(backupsDir)) {
|
||||
fs.mkdirSync(backupsDir, { recursive: true });
|
||||
for (const folder of SYNC_FOLDERS) {
|
||||
const dir = path.join(APP_ROOT, folder);
|
||||
if (!fs.existsSync(dir)) {
|
||||
fs.mkdirSync(dir, { recursive: true });
|
||||
}
|
||||
}
|
||||
|
||||
// Serve the app root but filter it down to SYNC_FOLDERS only — the root
|
||||
// also contains .env (DB/Twilio/AI credentials) and the full source tree,
|
||||
// which must never be exposed. Any path outside these folders returns 404.
|
||||
const includeArgs = SYNC_FOLDERS.flatMap((folder) => ["--include", `/${folder}/**`]);
|
||||
|
||||
const args = [
|
||||
"serve", "webdav",
|
||||
backupsDir,
|
||||
APP_ROOT,
|
||||
...includeArgs,
|
||||
"--addr", `:${config.serverPort}`,
|
||||
"--user", RCLONE_USER,
|
||||
"--pass", RCLONE_PASS,
|
||||
|
||||
Reference in New Issue
Block a user