dashboard: ZeroTier module (remote access from anywhere) + session auto-logout

ZeroTier: node status, join/leave networks by ID, shows the ZeroTier IP to reach the dashboard from anywhere. Session: frontend watcher logs out when the login session expires. zerotier-one installed on the box (1.16.2). 14/15 modules functional.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: MTSistemi

apps/dashboard/skillfish-dashboardd

@@ -36,6 +36,7 @@ MODULE_META = {
     "aiops":      {"icon": "🩺", "name": "AI-Ops",          "name_en": "AI-Ops"},
     "rules":      {"icon": "⚙️", "name": "Regole auto",     "name_en": "Auto rules"},
     "wol":        {"icon": "🔋", "name": "Power schedule",  "name_en": "Power schedule"},
+    "zerotier":   {"icon": "🌐", "name": "ZeroTier",        "name_en": "ZeroTier"},
 }
 
 
@@ -635,6 +636,41 @@ def aiops_diagnose(question):
         return {"ok": False, "error": "Ollama: %s" % e}
 
 
+# ---------------- ZeroTier (remote access from anywhere) ----------------
+def _zt(args):
+    try:
+        return subprocess.run(["zerotier-cli"] + args, capture_output=True, text=True, timeout=8).stdout.strip()
+    except Exception:
+        return ""
+
+
+def zt_status():
+    info = _zt(["info"])
+    parts = info.split()
+    address = parts[2] if len(parts) > 2 else ""
+    nets = []
+    for ln in _zt(["listnetworks"]).splitlines():
+        p = ln.split()
+        # 200 listnetworks <nwid> <name> <mac> <status> <type> <dev> <ips>
+        if len(p) >= 8 and p[1] == "listnetworks" and p[2] != "<nwid>":
+            ip = p[8] if len(p) > 8 else "-"
+            nets.append({"nwid": p[2], "name": p[3], "status": p[5], "ip": ip})
+    return {"ok": True, "address": address, "online": "ONLINE" in info, "networks": nets}
+
+
+def zt_join(nwid):
+    if not re.match(r"^[0-9a-fA-F]{16}$", (nwid or "").strip()):
+        return {"ok": False, "error": "Network ID non valido (16 cifre esadecimali)"}
+    _zt(["join", nwid.strip()])
+    return {"ok": True, "nwid": nwid.strip()}
+
+
+def zt_leave(nwid):
+    if re.match(r"^[0-9a-fA-F]{16}$", (nwid or "").strip()):
+        _zt(["leave", nwid.strip()])
+    return {"ok": True}
+
+
 # ---------------- HTTP ----------------
 CONFIG = load_conf()
 _login_fails = {}  # ip -> (count, first_ts)
@@ -841,6 +877,10 @@ class Handler(BaseHTTPRequestHandler):
                 with open(LASTFRAME, "rb") as f:
                     return self._send(200, f.read(), "image/jpeg")
             return self._json(404, {"error": "no frame"})
+        if path == "/api/zerotier":
+            if not self._guard("zerotier"):
+                return
+            return self._json(200, zt_status())
         return self._json(404, {"error": "not found"})
 
     def do_POST(self):
@@ -947,6 +987,14 @@ class Handler(BaseHTTPRequestHandler):
             if not self._guard("aiops"):
                 return
             return self._json(200, aiops_diagnose(data.get("question")))
+        if path == "/api/zerotier/join":
+            if not self._guard("zerotier"):
+                return
+            return self._json(200, zt_join(data.get("nwid")))
+        if path == "/api/zerotier/leave":
+            if not self._guard("zerotier"):
+                return
+            return self._json(200, zt_leave(data.get("nwid")))
         return self._json(404, {"error": "not found"})
 
     def _login(self):

apps/dashboard/skillfish-remote-manager

@@ -33,6 +33,7 @@ MODULES = [
     ("aiops", "🩺", "AI-Ops", True),
     ("rules", "⚙️", L("Regole auto", "Auto rules"), True),
     ("wol", "🔋", L("Power schedule", "Power schedule"), True),
+    ("zerotier", "🌐", "ZeroTier", True),
 ]
 
 CSS = """

apps/dashboard/web/app.js

@@ -253,6 +253,26 @@ const RENDER = {
     $("#adg", card).onclick = async () => { const out = $("#aout", card); out.style.display = "block"; out.textContent = T("ao_running");
       const j = await (await post("/api/aiops/diagnose", { question: $("#aq", card).value })).json().catch(() => ({})); out.textContent = j.ok ? (j.answer || T("ao_none")) : (T("err") + (j.error || "")); };
   },
+  zerotier(card) {
+    const it = LANG === "it";
+    card.innerHTML = "<h3>🌐 ZeroTier</h3><div id=\"zt\">…</div>";
+    const refresh = async () => {
+      let s; try { s = await (await api("/api/zerotier")).json(); } catch (e) { return; }
+      const nets = (s.networks || []).map(n => {
+        const ip = (n.ip && n.ip !== "-") ? copyable(n.ip.split(",")[0]) : "—";
+        const ok = n.status === "OK";
+        return `<div class="r"><span>${n.nwid} ${ok ? "●" : "○"} ${n.status}</span><span>${ip} <button class="dbtn" data-leave="${n.nwid}" style="padding:1px 8px">×</button></span></div>`;
+      }).join("") || `<div class="stub">${it ? "Nessuna rete." : "No networks."}</div>`;
+      $("#zt", card).innerHTML =
+        '<div class="rows"><div class="r"><span>' + (it ? "Nodo" : "Node") + "</span><span>" + copyable(s.address) + '</span></div><div class="r"><span>' + (it ? "Stato" : "Status") + "</span><span>" + (s.online ? "● ONLINE" : "○ offline") + "</span></div></div>" +
+        '<div class="gl" style="margin-top:10px">' + (it ? "Reti" : "Networks") + '</div><div class="rows">' + nets + "</div>" +
+        '<div class="brow" style="margin-top:8px"><input id="ztnw" class="dsel" placeholder="Network ID (16 hex)" style="flex:1"><button class="dbtn" id="ztj">' + (it ? "Entra" : "Join") + "</button></div>" +
+        '<div class="stub" style="margin-top:8px">' + (it ? "Dopo «Entra», autorizza il nodo su my.zerotier.com. Poi raggiungi la dashboard da ovunque: https://&lt;IP ZeroTier&gt;:8443" : "After Join, authorize the node on my.zerotier.com. Then reach the dashboard from anywhere: https://&lt;ZeroTier IP&gt;:8443") + "</div>";
+      card.querySelectorAll("[data-leave]").forEach(b => b.onclick = async () => { await action("/api/zerotier/leave", { nwid: b.dataset.leave }, it ? "Uscito dalla rete" : "Left network"); setTimeout(refresh, 800); });
+      $("#ztj", card).onclick = async () => { await action("/api/zerotier/join", { nwid: $("#ztnw", card).value.trim() }, it ? "Richiesta inviata — autorizza su my.zerotier.com" : "Request sent — authorize on my.zerotier.com"); setTimeout(refresh, 1500); };
+    };
+    refresh(); card._iv = setInterval(refresh, 8000);
+  },
   _stub(card, mod) { card.innerHTML = `<h3>${mod.icon} ${LANG === "it" ? mod.name : (mod.name_en || mod.name)}</h3><div class="stub">${LANG === "it" ? "Modulo attivo — interfaccia in arrivo." : "Module on — UI coming soon."}</div>`; },
 };
 
@@ -270,6 +290,9 @@ async function buildDashboard() {
     present.forEach(id => { const mod = enabled[id]; const card = document.createElement("div"); card.className = "mod";
       (RENDER[id] || ((c) => RENDER._stub(c, mod)))(card, mod); grid.appendChild(card); });
   });
+  // session watcher: if the login session expires, drop back to the login screen
+  clearInterval(window._sw);
+  window._sw = setInterval(async () => { try { const r = await api("/api/me"); if (!r.ok) location.reload(); } catch (e) {} }, 60000);
 }
 function showLogin() {
   $("#app").style.display = "none"; $("#login").style.display = "grid";