fix

其他修改

.bumpversion.cfg

@@ -0,0 +1,19 @@
+[bumpversion]
+commit = True
+tag = True
+current_version = 4.49
+parse = (?P<major>\d+)\.(?P<minor>\d+)(\.(?P<patch>\d+)(\-(?P<release>[a-z]+))?)?
+serialize = 
+	{major}.{minor}
+
+[bumpversion:file:kvmd/__init__.py]
+search = __version__ = "{current_version}"
+replace = __version__ = "{new_version}"
+
+[bumpversion:file:setup.py]
+search = version="{current_version}"
+replace = version="{new_version}"
+
+[bumpversion:file:PKGBUILD]
+search = pkgver={current_version}
+replace = pkgver={new_version}

.dockerignore

@@ -0,0 +1,23 @@
+/pkg/
+/src/
+/site/
+/dist/
+/kvmd.egg-info/
+/testenv/run/
+/testenv/.tox/
+/testenv/.mypy_cache/
+/testenv/.ssl/
+/hid/arduino/.pio/
+/hid/arduino/.platformio/
+/hid/pico/.pico-sdk.tmp/
+/hid/pico/.pico-sdk/
+/hid/pico/.tinyusb.tmp/
+/hid/pico/.tinyusb/
+/hid/pico/.build/
+/hid/pico/*.uf2
+/.git/
+/v*.tar.gz
+/*.pkg.tar.xz
+/*.pkg.tar.zst
+/*.egg-info
+/*kvmd-*.tar.gz

.editorconfig

@@ -0,0 +1,10 @@
+root = true
+
+[*]
+end_of_file = lf
+indent_style = tab
+indent_size = 4
+
+[*.{py,yaml}]
+indent_style = space
+indent_size = 4

.github/FUNDING.yml

@@ -0,0 +1,2 @@
+# These are supported funding model platforms
+custom: https://afdian.com/a/silentwind

.github/workflows/arduino-hid.yml

@@ -0,0 +1,23 @@
+name: Arduino HID CI
+
+on:
+  push:
+    branches: [master]
+  pull_request:
+    branches: [master]
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+
+    container:
+      image: python
+
+    steps:
+    - uses: actions/checkout@v3
+
+    - name: Prepare platformio
+      run: pip install platformio
+
+    - name: Build all
+      run: make -C hid/arduino _build_all

.github/workflows/pico-hid-release.yml

@@ -0,0 +1,41 @@
+name: Pico HID Release
+
+on:
+  push:
+    tags:
+      - "v*"
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v3
+
+      - name: Installing deps ...
+        run: sudo apt-get install cmake gcc-arm-none-eabi build-essential
+
+      - name: Building ...
+        run: make -C hid/pico all
+
+      - name: Releasing ...
+        id: create_release
+        uses: actions/create-release@v1
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        with:
+          tag_name: ${{ github.ref }}
+          release_name: Release ${{ github.ref }}
+          draft: false
+          prerelease: false
+
+      - name: Uploading firmware ...
+        id: upload-release-asset 
+        uses: actions/upload-release-asset@v1
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        with:
+          upload_url: ${{ steps.create_release.outputs.upload_url }}
+          asset_path: ./hid/pico/hid.uf2
+          asset_name: pico-hid.uf2
+          asset_content_type: application/octet-stream

.github/workflows/pico-hid.yml

@@ -0,0 +1,20 @@
+name: Pico HID CI
+
+on:
+  push:
+    branches: [master]
+  pull_request:
+    branches: [master]
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v3
+
+      - name: Installing deps ...
+        run: sudo apt-get install cmake gcc-arm-none-eabi build-essential
+
+      - name: Running tests ...
+        run: make -C hid/pico all

.github/workflows/tox.yml

@@ -0,0 +1,20 @@
+name: TOX CI
+
+on:
+  push:
+    branches: [master]
+  pull_request:
+    branches: [master]
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v2
+
+      - name: Building testenv ...
+        run: make testenv
+
+      - name: Running tests ...
+        run: make tox CMD="tox -c testenv/tox.ini"

.gitignore

@@ -0,0 +1,23 @@
+/pkg/
+/src/**/*.img
+/src/tmp
+/site/
+/dist/
+/kvmd.egg-info/
+/config.mk
+/testenv/.tox/
+/testenv/.mypy_cache/
+/testenv/.coverage*
+/testenv/run/*.sock
+/testenv/run/*.pid
+/testenv/.ssl/
+/v*.tar.gz
+/*.pkg.tar.xz
+/*.pkg.tar.zst
+/*.egg-info
+/*kvmd-*.tar.gz
+*.pyc
+*.swp
+/venv/
+.vscode/settings.j/son
+kvmd_config/

.vscode/settings.json

@@ -0,0 +1,4 @@
+{
+    "cmake.ignoreCMakeListsMissing": true,
+    "makefile.configureOnOpen": false
+}

ChangeLogs.txt

@@ -1,9 +0,0 @@
-更新日志
-- V0.53: 调整dts CPU频率和版本，添加H.264支持（来自群友 自.知 ）
-- V0.52：[Build-Armbian]添加MSD内核补丁；完全使用hzyitc的uboot，减小boot分区从512M至128M，引导和分区表使用UUID，默认关闭线刷刷机；dtb切换为外围设备模式；led颜色修改，红色（UBoot）-紫色（内核）-绿色（完全启>
-- V0.51: [Build-Armbian]5.9内核构建，初步完成直刷镜像构建。
-- V0.5：通过锁定CPU频率修复ustreamer mjpeg视频流异常的问题；屏蔽主程序找不到温度传感器的报错；优化中文翻译；更新VNC依赖；优化安装流程。
-- V0.4：利用玩客云自动GPIO实现ATX开关机物理控制功能；初步建立飞书使用文档；制作一键安装脚本，优化安装流程。
-- V0.3：添加简体中文补丁；实现MSD功能在EMMC和TF卡上的使用；添加WOL和中文OCR功能；优化了安装流程。
-- V0.2：通过替换系统解决OTG拔插死机问题；初步实现MSD功能；修改启动分区解决开机卡线刷检测；优化安装流程。
-- V0.1：PiKVM在玩客云上初步运行。

LICENSE

@@ -671,4 +671,4 @@ into proprietary programs.  If your program is a subroutine library, you
 may consider it more useful to permit linking proprietary applications with
 the library.  If this is what you want to do, use the GNU Lesser General
 Public License instead of this License.  But first, please read
-<https://www.gnu.org/licenses/why-not-lgpl.html>.
+<https://www.gnu.org/licenses/why-not-lgpl.html>.

Makefile

@@ -0,0 +1,338 @@
+-include config.mk
+
+TESTENV_IMAGE ?= kvmd-testenv
+TESTENV_HID ?= /dev/ttyS10
+TESTENV_VIDEO ?= /dev/video0
+TESTENV_GPIO ?= /dev/gpiochip0
+TESTENV_RELAY ?= $(if $(shell ls /dev/hidraw0 2>/dev/null || true),/dev/hidraw0,)
+
+LIBGPIOD_VERSION ?= 1.6.3
+
+USTREAMER_MIN_VERSION ?= $(shell grep -o 'ustreamer>=[^"]\+' PKGBUILD | sed 's/ustreamer>=//g')
+
+DEFAULT_PLATFORM ?= v2-hdmiusb-rpi4
+
+DOCKER ?= docker
+
+
+# =====
+define optbool
+$(filter $(shell echo $(1) | tr A-Z a-z),yes on 1)
+endef
+
+
+# =====
+all:
+	@ echo "Useful commands:"
+	@ echo "    make                  # Print this help"
+	@ echo "    make testenv          # Build test environment"
+	@ echo "    make tox              # Run tests and linters"
+	@ echo "    make tox E=pytest     # Run selected test environment"
+	@ echo "    make gpio             # Create gpio mockup"
+	@ echo "    make run              # Run kvmd"
+	@ echo "    make run CMD=...      # Run specified command inside kvmd environment"
+	@ echo "    make run-cfg          # Run kvmd -m"
+	@ echo "    make run-ipmi         # Run kvmd-ipmi"
+	@ echo "    make run-ipmi CMD=... # Run specified command inside kvmd-ipmi environment"
+	@ echo "    make run-vnc          # Run kvmd-vnc"
+	@ echo "    make run-vnc  CMD=... # Run specified command inside kvmd-vnc environment"
+	@ echo "    make regen            # Regen some sources like keymap"
+	@ echo "    make bump             # Bump minor version"
+	@ echo "    make bump V=major     # Bump major version"
+	@ echo "    make release          # Publish the new release (include bump minor)"
+	@ echo "    make clean            # Remove garbage"
+	@ echo "    make clean-all        # Remove garbage and test results"
+	@ echo
+	@ echo "Also you can add option NC=1 to rebuild docker test environment"
+
+
+testenv:
+	$(DOCKER) build \
+			$(if $(call optbool,$(NC)),--no-cache,) \
+			--rm \
+			--tag $(TESTENV_IMAGE) \
+			--build-arg LIBGPIOD_VERSION=$(LIBGPIOD_VERSION) \
+			--build-arg USTREAMER_MIN_VERSION=$(USTREAMER_MIN_VERSION) \
+		-f testenv/Dockerfile .
+	test -d testenv/.ssl || $(DOCKER) run --rm \
+			--volume `pwd`:/src:ro \
+			--volume `pwd`/testenv:/src/testenv:rw \
+		-t $(TESTENV_IMAGE) bash -c " \
+			groupadd kvmd-nginx \
+			&& groupadd kvmd-vnc \
+			&& /src/scripts/kvmd-gencert --do-the-thing \
+			&& /src/scripts/kvmd-gencert --do-the-thing --vnc \
+			&& chown -R root:root /etc/kvmd/{nginx,vnc}/ssl \
+			&& chmod 664 /etc/kvmd/{nginx,vnc}/ssl/* \
+			&& chmod 775 /etc/kvmd/{nginx,vnc}/ssl \
+			&& mkdir /src/testenv/.ssl \
+			&& mv /etc/kvmd/nginx/ssl /src/testenv/.ssl/nginx \
+			&& mv /etc/kvmd/vnc/ssl /src/testenv/.ssl/vnc \
+		"
+
+
+tox: testenv
+	time $(DOCKER) run --rm \
+			--volume `pwd`:/src:ro \
+			--volume `pwd`/testenv:/src/testenv:rw \
+			--volume `pwd`/testenv/tests:/src/testenv/tests:ro \
+			--volume `pwd`/extras:/usr/share/kvmd/extras:ro \
+			--volume `pwd`/configs:/usr/share/kvmd/configs.default:ro \
+			--volume `pwd`/contrib/keymaps:/usr/share/kvmd/keymaps:ro \
+		-t $(TESTENV_IMAGE) bash -c " \
+			cp -a /src/testenv/.ssl/nginx /etc/kvmd/nginx/ssl \
+			&& cp -a /src/testenv/.ssl/vnc /etc/kvmd/vnc/ssl \
+			&& cp /src/testenv/platform /usr/share/kvmd \
+			&& cp /usr/share/kvmd/configs.default/kvmd/*.yaml /etc/kvmd \
+			&& cp /usr/share/kvmd/configs.default/kvmd/*passwd /etc/kvmd \
+			&& cp /usr/share/kvmd/configs.default/kvmd/*.secret /etc/kvmd \
+			&& cp /usr/share/kvmd/configs.default/kvmd/edid/v2.hex /etc/kvmd/switch-edid.hex \
+			&& cp /usr/share/kvmd/configs.default/kvmd/main/$(if $(P),$(P),$(DEFAULT_PLATFORM)).yaml /etc/kvmd/main.yaml \
+			&& cp /usr/share/kvmd/configs.default/kvmd/main.yaml /etc/kvmd/main.yaml \
+			&& mkdir -p /etc/kvmd/override.d \
+			&& cp /src/testenv/$(if $(P),$(P),$(DEFAULT_PLATFORM)).override.yaml /etc/kvmd/override.yaml \
+			&& cd /src \
+			&& $(if $(CMD),$(CMD),tox -q -c testenv/tox.ini $(if $(E),-e $(E),-p auto)) \
+		"
+
+
+$(TESTENV_GPIO):
+	test ! -e $(TESTENV_GPIO)
+	sudo modprobe gpio-mockup gpio_mockup_ranges=0,40
+	test -c $(TESTENV_GPIO)
+
+
+run: testenv $(TESTENV_GPIO)
+	- $(DOCKER) run --rm --name kvmd \
+			--ipc=shareable \
+			--privileged \
+			--volume `pwd`/testenv/run:/run/kvmd:rw \
+			--volume `pwd`/testenv:/testenv:ro \
+			--volume `pwd`/kvmd:/kvmd:ro \
+			--volume `pwd`/testenv/env.py:/kvmd/env.py:ro \
+			--volume `pwd`/web:/usr/share/kvmd/web:ro \
+			--volume `pwd`/extras:/usr/share/kvmd/extras:ro \
+			--volume `pwd`/configs:/usr/share/kvmd/configs.default:ro \
+			--volume `pwd`/contrib/keymaps:/usr/share/kvmd/keymaps:ro \
+			--device $(TESTENV_VIDEO):$(TESTENV_VIDEO) \
+			--device $(TESTENV_GPIO):$(TESTENV_GPIO) \
+			$(if $(TESTENV_RELAY),--device $(TESTENV_RELAY):$(TESTENV_RELAY),) \
+			--publish 8080:8080/tcp \
+			--publish 4430:4430/tcp \
+		-it $(TESTENV_IMAGE) /bin/bash -c " \
+			mkdir -p /tmp/kvmd-nginx \
+			&& mount -t debugfs none /sys/kernel/debug \
+			&& test -d /sys/kernel/debug/gpio-mockup/`basename $(TESTENV_GPIO)`/ || (echo \"Missing GPIO mockup\" && exit 1) \
+			&& (socat PTY,link=$(TESTENV_HID) PTY,link=/dev/ttyS11 &) \
+			&& cp -r /usr/share/kvmd/configs.default/nginx/* /etc/kvmd/nginx \
+			&& cp -a /testenv/.ssl/nginx /etc/kvmd/nginx/ssl \
+			&& cp -a /testenv/.ssl/vnc /etc/kvmd/vnc/ssl \
+			&& cp /testenv/platform /usr/share/kvmd \
+			&& cp /usr/share/kvmd/configs.default/kvmd/*.yaml /etc/kvmd \
+			&& cp /usr/share/kvmd/configs.default/kvmd/*passwd /etc/kvmd \
+			&& cp /usr/share/kvmd/configs.default/kvmd/*.secret /etc/kvmd \
+			&& cp /usr/share/kvmd/configs.default/kvmd/edid/v2.hex /etc/kvmd/switch-edid.hex \
+			&& cp /usr/share/kvmd/configs.default/kvmd/main/$(if $(P),$(P),$(DEFAULT_PLATFORM)).yaml /etc/kvmd/main.yaml \
+			&& ln -s /testenv/web.css /etc/kvmd/web.css \
+			&& mkdir -p /etc/kvmd/override.d \
+			&& cp /testenv/$(if $(P),$(P),$(DEFAULT_PLATFORM)).override.yaml /etc/kvmd/override.yaml \
+			&& python -m kvmd.apps.ngxmkconf /etc/kvmd/nginx/nginx.conf.mako /etc/kvmd/nginx/nginx.conf \
+			&& nginx -c /etc/kvmd/nginx/nginx.conf -g 'user http; error_log stderr;' \
+			&& ln -s $(TESTENV_VIDEO) /dev/kvmd-video \
+			&& ln -s $(TESTENV_GPIO) /dev/kvmd-gpio \
+			&& $(if $(CMD),$(CMD),python -m kvmd.apps.kvmd --run) \
+		"
+
+
+run-cfg: testenv
+	- $(DOCKER) run --rm --name kvmd-cfg \
+			--volume `pwd`/testenv/run:/run/kvmd:rw \
+			--volume `pwd`/testenv:/testenv:ro \
+			--volume `pwd`/kvmd:/kvmd:ro \
+			--volume `pwd`/extras:/usr/share/kvmd/extras:ro \
+			--volume `pwd`/configs:/usr/share/kvmd/configs.default:ro \
+			--volume `pwd`/contrib/keymaps:/usr/share/kvmd/keymaps:ro \
+		-it $(TESTENV_IMAGE) /bin/bash -c " \
+			cp -a /testenv/.ssl/nginx /etc/kvmd/nginx/ssl \
+			&& cp -a /testenv/.ssl/vnc /etc/kvmd/vnc/ssl \
+			&& cp /testenv/platform /usr/share/kvmd \
+			&& cp /usr/share/kvmd/configs.default/kvmd/*.yaml /etc/kvmd \
+			&& cp /usr/share/kvmd/configs.default/kvmd/*passwd /etc/kvmd \
+			&& cp /usr/share/kvmd/configs.default/kvmd/*.secret /etc/kvmd \
+			&& cp /usr/share/kvmd/configs.default/kvmd/edid/v2.hex /etc/kvmd/switch-edid.hex \
+			&& cp /usr/share/kvmd/configs.default/kvmd/main/$(if $(P),$(P),$(DEFAULT_PLATFORM)).yaml /etc/kvmd/main.yaml \
+			&& cp  /usr/share/kvmd/configs.default/kvmd/main.yaml /etc/kvmd/main.yaml \
+			&& mkdir -p /etc/kvmd/override.d \
+			&& cp /testenv/$(if $(P),$(P),$(DEFAULT_PLATFORM)).override.yaml /etc/kvmd/override.yaml \
+			&& $(if $(CMD),$(CMD),python -m kvmd.apps.kvmd -m) \
+		"
+
+
+run-ipmi: testenv
+	- $(DOCKER) run --rm --name kvmd-ipmi \
+			--volume `pwd`/testenv/run:/run/kvmd:rw \
+			--volume `pwd`/testenv:/testenv:ro \
+			--volume `pwd`/kvmd:/kvmd:ro \
+			--volume `pwd`/extras:/usr/share/kvmd/extras:ro \
+			--volume `pwd`/configs:/usr/share/kvmd/configs.default:ro \
+			--volume `pwd`/contrib/keymaps:/usr/share/kvmd/keymaps:ro \
+			--publish 6230:623/udp \
+		-it $(TESTENV_IMAGE) /bin/bash -c " \
+			cp -a /testenv/.ssl/nginx /etc/kvmd/nginx/ssl \
+			&& cp -a /testenv/.ssl/vnc /etc/kvmd/vnc/ssl \
+			&& cp /testenv/platform /usr/share/kvmd \
+			&& cp /usr/share/kvmd/configs.default/kvmd/*.yaml /etc/kvmd \
+			&& cp /usr/share/kvmd/configs.default/kvmd/*passwd /etc/kvmd \
+			&& cp /usr/share/kvmd/configs.default/kvmd/*.secret /etc/kvmd \
+			&& cp /usr/share/kvmd/configs.default/kvmd/edid/v2.hex /etc/kvmd/switch-edid.hex \
+			&& cp /usr/share/kvmd/configs.default/kvmd/main/$(if $(P),$(P),$(DEFAULT_PLATFORM)).yaml /etc/kvmd/main.yaml \
+			&& mkdir -p /etc/kvmd/override.d \
+			&& cp /testenv/$(if $(P),$(P),$(DEFAULT_PLATFORM)).override.yaml /etc/kvmd/override.yaml \
+			&& $(if $(CMD),$(CMD),python -m kvmd.apps.ipmi --run) \
+		"
+
+
+run-vnc: testenv
+	- $(DOCKER) run --rm --name kvmd-vnc \
+			--ipc=container:kvmd \
+			--volume `pwd`/testenv/run:/run/kvmd:rw \
+			--volume `pwd`/testenv:/testenv:ro \
+			--volume `pwd`/kvmd:/kvmd:ro \
+			--volume `pwd`/extras:/usr/share/kvmd/extras:ro \
+			--volume `pwd`/configs:/usr/share/kvmd/configs.default:ro \
+			--volume `pwd`/contrib/keymaps:/usr/share/kvmd/keymaps:ro \
+			--publish 5900:5900/tcp \
+		-it $(TESTENV_IMAGE) /bin/bash -c " \
+			cp -a /testenv/.ssl/nginx /etc/kvmd/nginx/ssl \
+			&& cp -a /testenv/.ssl/vnc /etc/kvmd/vnc/ssl \
+			&& cp /testenv/platform /usr/share/kvmd \
+			&& cp /usr/share/kvmd/configs.default/kvmd/*.yaml /etc/kvmd \
+			&& cp /usr/share/kvmd/configs.default/kvmd/*passwd /etc/kvmd \
+			&& cp /usr/share/kvmd/configs.default/kvmd/*.secret /etc/kvmd \
+			&& cp /usr/share/kvmd/configs.default/kvmd/edid/v2.hex /etc/kvmd/switch-edid.hex \
+			&& cp /usr/share/kvmd/configs.default/kvmd/main/$(if $(P),$(P),$(DEFAULT_PLATFORM)).yaml /etc/kvmd/main.yaml \
+			&& mkdir -p /etc/kvmd/override.d \
+			&& cp /testenv/$(if $(P),$(P),$(DEFAULT_PLATFORM)).override.yaml /etc/kvmd/override.yaml \
+			&& $(if $(CMD),$(CMD),python -m kvmd.apps.vnc --run) \
+		"
+
+
+regen: keymap pug
+
+
+keymap: testenv
+	$(DOCKER) run --user `id -u`:`id -g` --rm \
+		--volume `pwd`:/src \
+	-it $(TESTENV_IMAGE) bash -c "cd src \
+		&& ./genmap.py keymap.csv kvmd/keyboard/mappings.py.mako kvmd/keyboard/mappings.py \
+		&& ./genmap.py keymap.csv hid/arduino/lib/drivers/usb-keymap.h.mako hid/arduino/lib/drivers/usb-keymap.h \
+		&& ./genmap.py keymap.csv hid/arduino/lib/drivers-avr/ps2/keymap.h.mako hid/arduino/lib/drivers-avr/ps2/keymap.h \
+		&& ./genmap.py keymap.csv hid/pico/src/ph_usb_keymap.h.mako hid/pico/src/ph_usb_keymap.h \
+	"
+
+
+pug: testenv
+	$(DOCKER) run --user `id -u`:`id -g` --rm \
+		--volume `pwd`:/src \
+	-it $(TESTENV_IMAGE) bash -c "cd src \
+		&& pug --pretty web/index.pug -o web \
+		&& pug --pretty web/login/index.pug -o web/login \
+		&& pug --pretty web/kvm/index.pug -o web/kvm \
+		&& pug --pretty web/ipmi/index.pug -o web/ipmi \
+		&& pug --pretty web/vnc/index.pug -o web/vnc \
+	"
+
+
+release:
+	make clean
+	make tox
+	make clean
+	make push
+	make bump V=$(V)
+	make push
+	make clean
+
+
+bump:
+	bumpversion $(if $(V),$(V),minor)
+
+
+push:
+	git push
+	git push --tags
+
+
+clean:
+	rm -rf testenv/run/*.{pid,sock} build site dist pkg src v*.tar.gz *.pkg.tar.{xz,zst} *.egg-info kvmd-*.tar.gz
+	find kvmd testenv/tests -name __pycache__ | xargs rm -rf
+	make -C hid/arduino clean
+	make -C hid/pico clean
+
+
+clean-all: testenv clean
+	make -C hid/arduino clean-all
+	make -C hid/pico clean-all
+	- $(DOCKER) run --rm \
+			--volume `pwd`:/src \
+		-it $(TESTENV_IMAGE) bash -c "cd src && rm -rf testenv/{.ssl,.tox,.mypy_cache,.coverage}"
+
+
+.PHONY: testenv
+
+run-stage-0:
+	$(DOCKER) buildx build -t registry.cn-hangzhou.aliyuncs.com/silentwind/kvmd-stage-0 -t silentwind0/kvmd-stage-0 \
+		--allow security.insecure --progress plain \
+		--platform linux/amd64,linux/arm64,linux/arm/v7  \
+		-f build/Dockerfile-stage-0 . \
+		--push
+
+run-build-dev:
+	$(DOCKER) buildx build -t registry.cn-hangzhou.aliyuncs.com/silentwind/kvmd:dev -t silentwind0/kvmd:dev \
+		--platform linux/amd64,linux/arm64,linux/arm/v7  \
+		--build-arg CACHEBUST=$(date +%s) \
+		-f build/Dockerfile . \
+		--push
+
+run-build-release:
+	$(DOCKER) buildx build -t registry.cn-hangzhou.aliyuncs.com/silentwind/kvmd	-t silentwind0/kvmd \
+		--progress plain \
+		--platform linux/amd64,linux/arm64,linux/arm/v7  \
+		--build-arg CACHEBUST=$(date +%s) \
+		-f build/Dockerfile . \
+		--push
+
+run-nogpio: testenv
+	- $(DOCKER) run --rm --name kvmd \
+			--privileged \
+			--volume `pwd`/testenv/run:/run/kvmd:rw \
+			--volume `pwd`/testenv:/testenv:ro \
+			--volume `pwd`/kvmd:/kvmd:ro \
+			--volume `pwd`/testenv/env.py:/kvmd/env.py:ro \
+			--volume `pwd`/web:/usr/share/kvmd/web:ro \
+			--volume `pwd`/extras:/usr/share/kvmd/extras:ro \
+			--volume `pwd`/configs:/usr/share/kvmd/configs.default:ro \
+			--volume `pwd`/contrib/keymaps:/usr/share/kvmd/keymaps:ro \
+			--device $(TESTENV_VIDEO):$(TESTENV_VIDEO) \
+			$(if $(TESTENV_RELAY),--device $(TESTENV_RELAY):$(TESTENV_RELAY),) \
+			--publish 8080:8080/tcp \
+			--publish 4430:4430/tcp \
+		-it $(TESTENV_IMAGE) /bin/bash -c " \
+			mkdir -p /tmp/kvmd-nginx \
+			&& mount -t debugfs none /sys/kernel/debug \
+			&& (socat PTY,link=$(TESTENV_HID) PTY,link=/dev/ttyS11 &) \
+			&& cp -r /usr/share/kvmd/configs.default/nginx/* /etc/kvmd/nginx \
+			&& cp -a /testenv/.ssl/nginx /etc/kvmd/nginx/ssl \
+			&& cp -a /testenv/.ssl/vnc /etc/kvmd/vnc/ssl \
+			&& touch /etc/kvmd/.docker_flag \
+			&& cp /testenv/platform /usr/share/kvmd \
+			&& cp /usr/share/kvmd/configs.default/kvmd/*.yaml /etc/kvmd \
+			&& cp /usr/share/kvmd/configs.default/kvmd/*passwd /etc/kvmd \
+			&& cp /usr/share/kvmd/configs.default/kvmd/*.secret /etc/kvmd \
+			&& cp /usr/share/kvmd/configs.default/kvmd/main.yaml /etc/kvmd/main.yaml \
+			&& ln -s /testenv/web.css /etc/kvmd/web.css \
+			&& mkdir -p /etc/kvmd/override.d \
+			&& cp /testenv/$(if $(P),$(P),$(DEFAULT_PLATFORM)).override.yaml /etc/kvmd/override.yaml \
+			&& python -m kvmd.apps.ngxmkconf /etc/kvmd/nginx/nginx.conf.mako /etc/kvmd/nginx/nginx.conf \
+			&& nginx -c /etc/kvmd/nginx/nginx.conf -g 'user http; error_log stderr;' \
+			&& $(if $(CMD),$(CMD),python -m kvmd.apps.kvmd --run) \
+		"

PKGBUILD

@@ -0,0 +1,273 @@
+# Contributor: Maxim Devaev <mdevaev@gmail.com>
+# Author: Maxim Devaev <mdevaev@gmail.com>
+
+
+_variants=(
+	v0-hdmi:zero2w
+	v0-hdmi:rpi2
+	v0-hdmi:rpi3
+
+	v0-hdmiusb:zero2w
+	v0-hdmiusb:rpi2
+	v0-hdmiusb:rpi3
+
+	v1-hdmi:zero2w
+	v1-hdmi:rpi2
+	v1-hdmi:rpi3
+
+	v1-hdmiusb:zero2w
+	v1-hdmiusb:rpi2
+	v1-hdmiusb:rpi3
+
+	v2-hdmi:zero2w
+	v2-hdmi:rpi3
+	v2-hdmi:rpi4
+
+	v2-hdmiusb:rpi4
+
+	v3-hdmi:rpi4
+
+	v4mini-hdmi:rpi4
+	v4plus-hdmi:rpi4
+)
+
+
+pkgname=(kvmd)
+for _variant in "${_variants[@]}"; do
+	_platform=${_variant%:*}
+	_board=${_variant#*:}
+	pkgname+=(kvmd-platform-$_platform-$_board)
+done
+pkgbase=kvmd
+pkgver=4.49
+pkgrel=1
+pkgdesc="The main PiKVM daemon"
+url="https://github.com/pikvm/kvmd"
+license=(GPL)
+arch=(any)
+depends=(
+	"python>=3.13"
+	"python<3.14"
+	python-yaml
+	python-aiohttp
+	python-aiofiles
+	python-async-lru
+	python-passlib
+	python-pyotp
+	python-qrcode
+	python-periphery
+	python-pyserial
+	python-pyserial-asyncio
+	python-spidev
+	python-setproctitle
+	python-psutil
+	python-netifaces
+	python-systemd
+	python-dbus
+	python-dbus-next
+	python-pygments
+	python-pyghmi
+	python-pam
+	python-pillow
+	python-xlib
+	libxkbcommon
+	python-hidapi
+	python-six
+	python-pyrad
+	python-ldap
+	python-zstandard
+	python-mako
+	python-luma-oled
+	python-pyusb
+	python-pyudev
+	"libgpiod>=2.1"
+	freetype2
+	"v4l-utils>=1.22.1-1"
+	"nginx-mainline>=1.25.1"
+	openssl
+	sudo
+	iptables
+	iproute2
+	dnsmasq
+	ipmitool
+	"janus-gateway-pikvm>=1.3.0"
+	certbot
+	platform-io-access
+	raspberrypi-utils
+	"ustreamer>=6.26"
+
+	# Systemd UDEV bug
+	"systemd>=248.3-2"
+
+	# https://bugzilla.redhat.com/show_bug.cgi?id=2035802
+	# https://archlinuxarm.org/forum/viewtopic.php?f=15&t=15725&start=40
+	"zstd>=1.5.1-2.1"
+
+	# Possible hotfix for the new os update
+	openssl-1.1
+
+	# Bootconfig
+	dos2unix
+	parted
+	e2fsprogs
+	openssh
+	# FIXME:
+	#   - https://archlinuxarm.org/forum/viewtopic.php?f=15&t=17007&p=72789
+	#   - https://github.com/pikvm/pikvm/issues/1375
+	wpa_supplicant-pikvm
+	run-parts
+
+	# fsck for /boot
+	dosfstools
+
+	# pgrep for kvmd-udev-restart-pass
+	procps-ng
+
+	# Misc
+	hostapd
+)
+optdepends=(
+	tesseract
+)
+conflicts=(
+	python-pikvm
+	python-aiohttp-pikvm
+	platformio
+	avrdude-pikvm
+	kvmd-oled
+)
+makedepends=(
+	python-setuptools
+	python-pip
+)
+source=("$url/archive/v$pkgver.tar.gz")
+md5sums=(SKIP)
+backup=(
+	etc/kvmd/{override,logging,auth,meta}.yaml
+	etc/kvmd/{ht,ipmi,vnc}passwd
+	etc/kvmd/totp.secret
+	etc/kvmd/nginx/{kvmd.ctx-{http,server},certbot.ctx-server}.conf
+	etc/kvmd/nginx/loc-{login,nocache,proxy,websocket,nobuffering,bigpost}.conf
+	etc/kvmd/nginx/{mime-types,ssl}.conf
+	etc/kvmd/nginx/nginx.conf.mako
+	etc/kvmd/janus/janus{,.plugin.ustreamer,.transport.websockets}.jcfg
+	etc/kvmd/web.css
+)
+
+
+package_kvmd() {
+	install=$pkgname.install
+
+	cd "$srcdir/kvmd-$pkgver"
+	pip install --root="$pkgdir" --no-deps .
+
+	install -Dm755 -t "$pkgdir/usr/bin" scripts/kvmd-{bootconfig,gencert,certbot}
+
+	install -Dm644 -t "$pkgdir/usr/lib/systemd/system" configs/os/services/*
+	install -DTm644 configs/os/sysusers.conf "$pkgdir/usr/lib/sysusers.d/kvmd.conf"
+	install -DTm644 configs/os/tmpfiles.conf "$pkgdir/usr/lib/tmpfiles.d/kvmd.conf"
+
+	mkdir -p "$pkgdir/usr/share/kvmd"
+	cp -r {switch,hid,web,extras,contrib/keymaps} "$pkgdir/usr/share/kvmd"
+	find "$pkgdir/usr/share/kvmd/web" -name '*.pug' -exec rm -f '{}' \;
+
+	local _cfg_default="$pkgdir/usr/share/kvmd/configs.default"
+	mkdir -p "$_cfg_default"
+	cp -r configs/* "$_cfg_default"
+
+	find "$pkgdir" -name ".gitignore" -delete
+	find "$_cfg_default" -type f -exec chmod 444 '{}' \;
+	chmod 400 "$_cfg_default/kvmd"/*passwd
+	chmod 400 "$_cfg_default/kvmd"/*.secret
+	chmod 750 "$_cfg_default/os/sudoers"
+	chmod 400 "$_cfg_default/os/sudoers"/*
+
+	mkdir -p "$pkgdir/etc/kvmd/"{nginx,vnc}"/ssl"
+	chmod 755 "$pkgdir/etc/kvmd/"{nginx,vnc}"/ssl"
+	install -Dm444 -t "$pkgdir/etc/kvmd/nginx" "$_cfg_default/nginx"/*.conf*
+	chmod 644 "$pkgdir/etc/kvmd/nginx/"{nginx,ssl}.conf*
+
+	mkdir -p "$pkgdir/etc/kvmd/janus"
+	chmod 755 "$pkgdir/etc/kvmd/janus"
+	install -Dm444 -t "$pkgdir/etc/kvmd/janus" "$_cfg_default/janus"/*.jcfg
+
+	install -Dm644 -t "$pkgdir/etc/kvmd" "$_cfg_default/kvmd"/*.yaml
+	install -Dm600 -t "$pkgdir/etc/kvmd" "$_cfg_default/kvmd"/*passwd
+	install -Dm600 -t "$pkgdir/etc/kvmd" "$_cfg_default/kvmd"/*.secret
+	install -Dm644 -t "$pkgdir/etc/kvmd" "$_cfg_default/kvmd"/web.css
+	mkdir -p "$pkgdir/etc/kvmd/override.d"
+
+	mkdir -p "$pkgdir/var/lib/kvmd/"{msd,pst}
+}
+
+
+for _variant in "${_variants[@]}"; do
+	_platform=${_variant%:*}
+	_board=${_variant#*:}
+	_base=${_platform%-*}
+	_video=${_platform#*-}
+	eval "package_kvmd-platform-$_platform-$_board() {
+		cd \"kvmd-\$pkgver\"
+
+		pkgdesc=\"PiKVM platform configs - $_platform for $_board\"
+		depends=(kvmd=$pkgver-$pkgrel \"linux-rpi-pikvm>=6.6.45-10\" \"raspberrypi-bootloader-pikvm>=20240818-1\")
+
+		backup=(
+			etc/sysctl.d/99-kvmd.conf
+			etc/udev/rules.d/99-kvmd.rules
+			etc/kvmd/main.yaml
+		)
+
+		if [[ $_base == v0 ]]; then
+			depends=(\"\${depends[@]}\" platformio-core avrdude make patch)
+		elif [[ $_base == v4plus ]]; then
+			depends=(\"\${depends[@]}\" flashrom-pikvm)
+		fi
+
+		if [[ $_platform =~ ^.*-hdmiusb$ ]]; then
+			install -Dm755 -t \"\$pkgdir/usr/bin\" scripts/kvmd-udev-hdmiusb-check
+		fi
+		if [[ $_base == v4plus ]]; then
+			install -Dm755 -t \"\$pkgdir/usr/bin\" scripts/kvmd-udev-restart-pass
+		fi
+
+		install -DTm644 configs/os/sysctl.conf \"\$pkgdir/etc/sysctl.d/99-kvmd.conf\"
+		install -DTm644 configs/os/udev/common.rules \"\$pkgdir/usr/lib/udev/rules.d/99-kvmd-common.rules\"
+		install -DTm644 configs/os/udev/$_platform-$_board.rules \"\$pkgdir/etc/udev/rules.d/99-kvmd.rules\"
+		install -DTm444 configs/kvmd/main/$_platform-$_board.yaml \"\$pkgdir/etc/kvmd/main.yaml\"
+
+		if [ -f configs/kvmd/fan/$_platform.ini ]; then
+			backup=(\"\${backup[@]}\" etc/kvmd/fan.ini)
+			depends=(\"\${depends[@]}\" \"kvmd-fan>=0.18\")
+			install -DTm444 configs/kvmd/fan/$_platform.ini \"\$pkgdir/etc/kvmd/fan.ini\"
+		fi
+
+		if [ -f configs/os/modules-load/$_platform.conf ]; then
+			backup=(\"\${backup[@]}\" etc/modules-load.d/kvmd.conf)
+			install -DTm644 configs/os/modules-load/$_platform.conf \"\$pkgdir/etc/modules-load.d/kvmd.conf\"
+		fi
+
+		if [ -f configs/os/sudoers/$_platform ]; then
+			backup=(\"\${backup[@]}\" etc/sudoers.d/99_kvmd)
+			install -DTm440 configs/os/sudoers/$_platform \"\$pkgdir/etc/sudoers.d/99_kvmd\"
+			chmod 750 \"\$pkgdir/etc/sudoers.d\"
+		fi
+
+		if [[ $_platform =~ ^.*-hdmi$ ]]; then
+			backup=(\"\${backup[@]}\" etc/kvmd/tc358743-edid.hex etc/kvmd/switch-edid.hex)
+			install -DTm444 configs/kvmd/edid/$_base.hex \"\$pkgdir/etc/kvmd/tc358743-edid.hex\"
+			ln -s tc358743-edid.hex \"\$pkgdir/etc/kvmd/switch-edid.hex\"
+		else
+			backup=(\"\${backup[@]}\" etc/kvmd/switch-edid.hex)
+			install -DTm444 configs/kvmd/edid/_no-1920x1200.hex \"\$pkgdir/etc/kvmd/switch-edid.hex\"
+		fi
+
+		mkdir -p \"\$pkgdir/usr/share/kvmd\"
+		local _platform=\"\$pkgdir/usr/share/kvmd/platform\"
+		rm -f \"\$_platform\"
+		echo PIKVM_MODEL=$_base > \"\$_platform\"
+		echo PIKVM_VIDEO=$_video >> \"\$_platform\"
+		echo PIKVM_BOARD=$_board >> \"\$_platform\"
+		chmod 444 \"\$_platform\"
+	}"
+done

README.md

@@ -4,53 +4,103 @@
 
 ### 介绍
 
-One-KVM是基于玩客云硬件和PiKVM软件的远控设备。通过移植PiKVM该软件至玩客云设备上，实现了极高的性价比，不到百元功能即可接近甚至超越部分昂贵的商业设备。
+One-KVM 是基于廉价计算机硬件和 [PiKVM]((https://github.com/pikvm/pikvm)) 软件二次开发的 BIOS 级远程控制项目。可以实现远程管理服务器或工作站，无需在被控机安装软件调整设置，实现无侵入式控制，适用范围广泛。
 
-该软件可以帮助用户通过得到控制设备的HDMI 画面和鼠标键盘，去远程管理服务器、工作站或个人PC等。 和基于软件的远程管理方式不同，无需在被控电脑安装任何软件，实现无侵入式控制。
+使用文档：[https://one-kvm.mofeng.run](https://one-kvm.mofeng.run)
 
-该项目基于PiKVM和Fruity PiKVM，提供了玩客云兼容PiKVM操作的自动处理脚本。
+演示网站：[https://kvmd-demo.mofeng.run](https://kvmd-demo.mofeng.run)
 
-![image](https://github.com/mofeng-git/One-KVM/assets/62919083/ec7e049f-ca6c-426f-bfa4-314536965db0)
+![image-20240926220156381](https://github.com/user-attachments/assets/a7848bca-e43c-434e-b812-27a45fad7910)
 
-**功能特性**
+### 软件功能
 
-![image](https://github.com/mofeng-git/One-KVM/assets/62919083/b160c03b-31c5-465b-b9f8-acf421a35f79)
+表格仅为 One-KVM 与其他基于 PiKVM 的项目的功能对比，无不良导向，如有错漏请联系更正。
 
+|         功能          |     One-KVM     |           PiKVM           |   ArmKVM    |   BLIKVM    |
+| :-------------------: | :-------------: | :-----------------------: | :---------: | :---------: |
+|       系统开源        |        √        |             √             |      √      |      √      |
+|    简体中文 WebUI     |        √        |             x             |      √      |      √      |
+|      远程视频流       |   MJPEG/H.264   |        MJPEG/H.264        | MJPEG/H.264 | MJPEG/H.264 |
+|    H.264 视频编码     |       CPU       |            GPU            |    未知     |     GPU     |
+|      远程音频流       |        √        |             √             |      √      |      √      |
+|   远程鼠键控制        |   OTG/CH9329    | OTG/CH9329/Pico/Bluetooth |     OTG     |     OTG     |
+|       VNC 控制        |        √        |             √             |      √      |      √      |
+|     ATX 电源控制      | GPIO/USB 继电器 |           GPIO            |    GPIO     |    GPIO     |
+| 虚拟存储驱动器挂载     |        √        |             √             |      √      |      √      |
+| 2.2G 以上 CD-ROM 挂载 |        x        |             x             |      √      |      √      |
+|     WOL 远程唤醒      |        √        |             √             |      √      |      √      |
+|      网页剪切板       |        √        |             √             |      √      |      √      |
+|     OCR 文字识别      |        √        |             √             |      √      |      √      |
+|       网页终端        |        √        |             √             |      √      |      √      |
+|     网络串口终端      |        x        |             x             |      √      |      √      |
+|    HDMI 切换器支持    |        √        |             √             |      √      |      √      |
+|       视频录制        |        √        |             x             |      x      |      x      |
+|      Docker 部署      |        √        |             x             |      x      |      x      |
+|    官方商业化成品     |        x        |             √             |      √      |      √      |
+|       技术支持        |        √        |             √             |      √      |      √      |
 
 ### 快速开始
 
-**方式一：直刷One-KVM镜像**
+更多详细内容可以查阅 [One-KVM文档](https://one-kvm.mofeng.run/)。
 
-本项目Releases页可以找到包含PiKVM的预编译镜像，内核版本为5.9.0-rc7。镜像名称带One-KVM前缀、burn后缀的为线刷镜像，可使用USB_Burning_Tool软件线刷至玩客云。预编译线刷镜像为开箱即用，刷好后启动设备就可以开始使用One-KVM。
+**方式一：Docker 镜像部署（推荐）**
 
-**方式二：One-KVM脚本安装**
+Docker 版本可以使用 OTG 或 CH9329 作为虚拟 HID ，支持 amd64、arm64、armv7 架构的 Linux 系统安装。
 
-一键脚本适用于玩客云Armbian 22.11.0-trunk Jammy Linux onecloud 5.10.xxx(如5.10.149 5.10.158)镜像。如若使用此项目发布的Armbian基础镜像，需注释掉脚本尾部的两个函数`override-uboot` `change-device-tree`。
+**脚本部署**
 
 ```bash
-git clone https://github.com/mofeng-git/One-KVM.git
-cd One-KVM  && ./install.sh
-
-#对于大陆网络环境，可以尝试使用下命令
-wget https://mirror.ghproxy.com/https://github.com/mofeng-git/One-KVM/archive/refs/heads/main.zip -o One-KVM-main.zip && unzip One-KVM-main.zip
-cd One-KVM-main  && ./install.sh
+curl -sSL https://one-kvm.mofeng.run/quick_start.sh -o quick_start.sh && bash quick_start.sh
 ```
-**方式三：docker镜像部署**
 
-目前仅有pikvm-ch9329_amd64，后续将支持更多控制方式和处理器架构。
+**手动部署**
+
+如果使用 OTG 作为虚拟 HID，可以使用如下部署命令：
 ```bash
-#使用示例：
-docker run -itd -p443:443 -p80:80 --name pikvm-docker --device=/dev/ttyUSB0:/dev/kvmd-hid --device=/dev/video0:/dev/kvmd-video pikvm-ch9329:0.61
+sudo docker run --name kvmd -itd --privileged=true \
+    -v /lib/modules:/lib/modules:ro -v /dev:/dev \
+    -v /sys/kernel/config:/sys/kernel/config -e OTG=1 \
+    -p 8080:8080 -p 4430:4430 -p 5900:5900 -p 623:623 \
+    silentwind0/kvmd
 ```
 
-详细内容可以参照飞书文档：[One-KVM使用文档](https://p1b237lu9xm.feishu.cn/drive/folder/IsOifWmMKlzYpRdWfcocI7jdnQA?from=from_copylink)
+如果使用 CH9329 作为虚拟 HID，可以使用如下部署命令：
+```bash
+sudo docker run --name kvmd -itd \
+    --device /dev/video0:/dev/video0 \
+    --device /dev/ttyUSB0:/dev/ttyUSB0 \
+    --device /dev/snd:/dev/snd \
+    -p 8080:8080 -p 4430:4430 -p 5900:5900 -p 623:623 \
+    silentwind0/kvmd
+```
 
-### 其他
+**方式二：直刷 One-KVM 整合包**
+
+对于部分平台硬件，本项目制作了深度适配的 One-KVM 打包镜像，开箱即用，刷好后启动设备就可以开始使用 One-KVM。免费 One-KVM 整合包也可以在本项目 Releases 页可以找到。
+
+| 整合包适配概况 | | | |
+| :-------------: | :-------------: | :-------------: | :-------------: |
+| **固件型号** | **固件代号** | **硬件情况** | **最新版本** |
+| 玩客云 | Onecloud | USB 采集卡、OTG | 241018 |
+| 私家云二代 | Cumebox2 | USB 采集卡、OTG | 241004 |
+| Vmare | Vmare-uefi | USB 采集卡、CH9329 | 241004 |
+| Virtualbox | Virtualbox-uefi | USB 采集卡、CH9329 | 241004 |
+| s905l3a  通用包 | E900v22c | USB 采集卡、OTG | 241004 |
+| 我家云 | Chainedbox | USB 采集卡、OTG | 241004 |
+| 龙芯久久派 | 2k0300 | USB 采集卡、CH9329 | 241025 |
+
+### 赞助方式
+
+这个项目基于众多开源项目二次开发，作者为此花费了大量的时间和精力进行测试和维护。若此项目对您有用，您可以考虑通过 **[为爱发电](https://afdian.com/a/silentwind)** 赞助一笔小钱支持作者。作者将能有更多的金钱来测试和维护 One-KVM 的各种配置，并在项目上投入更多的时间和精力。
 
 **感谢名单**
 
 <details>
 
+浩龙的电子嵌入式之路（赞助）
+
+Tsuki（赞助）
+
 H_xiaoming
 
 0蓝蓝0
@@ -65,13 +115,38 @@ Will
 
 观棋不语٩ ི۶
 
-以及各位讨论交流的网友
+爱发电用户_a57a4
+
+爱发电用户_2c769
+
+霜序
+
+[远方](https://runyf.cn/)（闲鱼用户名：小远技术店铺）
+
+爱发电用户_399fc
+
+[斐斐の](https://www.mmuaa.com/)
+
+爱发电用户_09451
+
+超高校级的錆鱼
+
+爱发电用户_08cff
+
+guoke
+
+mgt
+
+......
 </details>
 
-本项目间接或直接使用了下下列开源项目：
+本项目使用了下列开源项目：
 1. [pikvm/pikvm: Open and inexpensive DIY IP-KVM based on Raspberry Pi (github.com)](https://github.com/pikvm/pikvm)
-2. [hzyitc/armbian-onecloud: Armbian for onecloud. 玩客云用armbian (github.com)](https://github.com/hzyitc/armbian-onecloud/)
-3. [jacobbar/fruity-pikvm: Install Pi-KVM on debian SBCs such as Orange Pi, Banana Pi, Mango Pi, etc (github.com)](https://github.com/jacobbar/fruity-pikvm)
 
-   
+### 项目状态
+
+[![Star History Chart](https://api.star-history.com/svg?repos=mofeng-git/One-KVM&type=Date)](https://star-history.com/#mofeng-git/One-KVM&Date)
+
+![Github](https://repobeats.axiom.co/api/embed/7cfaab47e31073107771a7179078aa2a6c3f1108.svg "Repobeats analytics image")
+
 

build/Dockerfile

@@ -0,0 +1,81 @@
+FROM registry.cn-hangzhou.aliyuncs.com/silentwind/kvmd-stage-0 AS builder
+
+FROM python:3.11.11-slim-bookworm
+
+LABEL maintainer="mofeng654321@hotmail.com"
+
+COPY --from=builder /tmp/lib/* /tmp/lib/
+COPY --from=builder /tmp/ustreamer/ustreamer /tmp/ustreamer/ustreamer-dump /usr/bin/janus /usr/bin/
+COPY --from=builder /tmp/wheel/*.whl /tmp/wheel/
+COPY --from=builder /tmp/ustreamer/libjanus_ustreamer.so /usr/lib/ustreamer/janus/
+COPY --from=builder /usr/lib/janus/transports/* /usr/lib/janus/transports/
+
+ARG TARGETARCH
+
+ENV PYTHONDONTWRITEBYTECODE=1 \
+    PYTHONUNBUFFERED=1 \
+    TZ=Asia/Shanghai
+
+RUN sed -i 's/deb.debian.org/mirrors.tuna.tsinghua.edu.cn/' /etc/apt/sources.list.d/debian.sources \
+    && apt-get update \
+    && apt-get install -y --no-install-recommends \
+        libxkbcommon-x11-0 \
+        nginx \
+        tesseract-ocr \
+        tesseract-ocr-eng \
+        tesseract-ocr-chi-sim \
+        iptables \
+        sudo \
+        curl \
+        kmod \
+        libmicrohttpd12 \
+        libjansson4 \
+        libssl3 \
+        libsofia-sip-ua0 \
+        libglib2.0-0 \
+        libopus0 \
+        libogg0 \
+        libcurl4 \
+        libconfig9 \
+        libusrsctp2 \
+        libwebsockets17 \
+        libnss3 \
+        libasound2 \
+        nano \
+    && cp /tmp/lib/* /lib/*-linux-*/ \
+    && pip install --no-cache-dir --root-user-action=ignore --disable-pip-version-check /tmp/wheel/*.whl \
+    && pip install --no-cache-dir --root-user-action=ignore --disable-pip-version-check pyfatfs \
+    && if [ ${TARGETARCH} = arm ]; then ARCH=armhf; \
+       elif [ ${TARGETARCH} = arm64 ]; then ARCH=aarch64; \
+       elif [ ${TARGETARCH} = amd64 ]; then ARCH=x86_64; \
+       fi \
+    && curl https://github.com/tsl0922/ttyd/releases/download/1.7.7/ttyd.$ARCH -L -o /usr/local/bin/ttyd \
+    && chmod +x /usr/local/bin/ttyd \
+    && adduser kvmd --gecos "" --disabled-password \
+    && ln -sf /usr/share/tesseract-ocr/*/tessdata /usr/share/tessdata \
+    && mkdir -p /etc/kvmd_backup/override.d \
+               /var/lib/kvmd/msd/images \
+               /var/lib/kvmd/msd/meta \
+               /var/lib/kvmd/pst/data \
+               /var/lib/kvmd/msd/NormalFiles \
+               /opt/vc/bin \
+               /run/kvmd \
+               /tmp/kvmd-nginx \
+    && touch /run/kvmd/ustreamer.sock \
+    && rm -rf /var/lib/apt/lists/* \
+    && rm -rf /tmp/lib /tmp/wheel
+
+COPY testenv/fakes/vcgencmd scripts/kvmd* /usr/bin/
+COPY extras/ /usr/share/kvmd/extras/
+COPY web/ /usr/share/kvmd/web/
+COPY scripts/kvmd-gencert /usr/share/kvmd/
+COPY build/platform/docker /usr/share/kvmd/platform
+COPY contrib/keymaps /usr/share/kvmd/keymaps
+COPY kvmd/ build/init.sh /kvmd/
+COPY configs/kvmd/ /etc/kvmd_backup/
+COPY configs/nginx/ /etc/kvmd_backup/nginx/
+COPY configs/janus/ /etc/kvmd_backup/janus/
+COPY configs/hw_info/ /etc/kvmd_backup/hw_info/
+COPY testenv/js/ /usr/share/janus/javascript/
+
+ENTRYPOINT ["/kvmd/init.sh"]

build/Dockerfile-stage-0

@@ -0,0 +1,118 @@
+# syntax = docker/dockerfile:experimental
+FROM debian:bookworm-slim AS builder
+
+ARG TARGETARCH
+
+# 设置环境变量
+ENV DEBIAN_FRONTEND=noninteractive \
+    PIP_NO_CACHE_DIR=1 \
+    RUSTUP_DIST_SERVER="https://mirrors.tuna.tsinghua.edu.cn/rustup"
+
+# 更新源并安装依赖
+RUN sed -i 's/deb.debian.org/mirrors.tuna.tsinghua.edu.cn/' /etc/apt/sources.list.d/debian.sources \
+    && apt-get update \
+    && apt-get install -y --no-install-recommends \
+        python3-full \
+        python3-pip \
+        python3-dev \
+        build-essential \
+        libssl-dev \
+        libffi-dev \
+        python3-dev \
+        libevent-dev \
+        libjpeg-dev \
+        libbsd-dev \
+        libudev-dev \
+        git \
+        pkg-config \
+        wget \
+        curl \
+        libmicrohttpd-dev \
+        libjansson-dev \
+        libsofia-sip-ua-dev \
+        libglib2.0-dev \
+        libopus-dev \
+        libogg-dev \
+        libcurl4-openssl-dev \
+        liblua5.3-dev \
+        libconfig-dev \
+        libtool \
+        automake \
+        autoconf \
+        meson \
+        cmake \
+        libx264-dev \
+        libyuv-dev \
+        libasound2-dev \
+        libspeex-dev \
+        libspeexdsp-dev \
+        libusb-1.0-0-dev \
+    && rm -rf /var/lib/apt/lists/*
+
+COPY build/cargo_config /tmp/config
+
+# 配置 pip 源并安装 Python 依赖
+RUN --security=insecure pip config set global.index-url https://pypi.tuna.tsinghua.edu.cn/simple \
+    && if [ ${TARGETARCH} = arm ]; then \
+        mkdir -p /root/.cargo \
+        && chmod 777 /root/.cargo && mount -t tmpfs none /root/.cargo \
+        && wget https://sh.rustup.rs -O /root/rustup-init.sh \
+        && sh /root/rustup-init.sh -y \
+        && export PATH=$PATH:/root/.cargo/bin \
+        && cp /tmp/config /root/.cargo/config.toml; \
+    fi \
+    && pip install --root-user-action=ignore --disable-pip-version-check --upgrade --break-system-packages build setuptools pip \
+    && pip wheel --wheel-dir=/tmp/wheel/ cryptography \
+    && pip wheel --wheel-dir=/tmp/wheel/ \
+        aiofiles aiohttp appdirs asn1crypto async_lru async-timeout bottle cffi \
+        chardet click colorama dbus_next gpiod hidapi idna mako marshmallow \
+        more-itertools multidict netifaces packaging passlib pillow ply psutil \
+        pycparser pyelftools pyghmi pygments pyparsing pyotp qrcode requests \
+        semantic-version setproctitle six spidev tabulate urllib3 wrapt xlib \
+        yarl pyserial pyyaml zstandard supervisor
+
+# 编译安装 libnice、libsrtp、libwebsockets 和 janus-gateway
+RUN git clone --depth=1 https://gitlab.freedesktop.org/libnice/libnice /tmp/libnice \
+    && cd /tmp/libnice \
+    && meson --prefix=/usr build && ninja -C build && ninja -C build install \
+    && rm -rf /tmp/libnice \
+    && curl https://github.com/cisco/libsrtp/archive/v2.2.0.tar.gz -L -o /tmp/libsrtp-2.2.0.tar.gz \
+    && cd /tmp \
+    && tar xf libsrtp-2.2.0.tar.gz \
+    && cd libsrtp-2.2.0 \
+    && ./configure --prefix=/usr --enable-openssl \
+    && make shared_library && make install \
+    && cd /tmp \
+    && rm -rf /tmp/libsrtp* \
+    && git clone --depth=1 https://libwebsockets.org/repo/libwebsockets /tmp/libwebsockets \
+    && cd /tmp/libwebsockets \
+    && mkdir build && cd build \
+    && cmake -DLWS_MAX_SMP=1 -DLWS_WITHOUT_EXTENSIONS=0 -DCMAKE_INSTALL_PREFIX:PATH=/usr -DCMAKE_C_FLAGS="-fpic" .. \
+    && make && make install \
+    && cd /tmp \
+    && rm -rf /tmp/libwebsockets \
+    && git clone --depth=1 https://github.com/meetecho/janus-gateway.git /tmp/janus-gateway \
+    && cd /tmp/janus-gateway \
+    && sh autogen.sh \
+    && ./configure --enable-static --enable-websockets --enable-plugin-audiobridge \
+        --disable-data-channels --disable-rabbitmq --disable-mqtt --disable-all-plugins \
+        --disable-all-loggers --prefix=/usr \
+    && make && make install \
+    && cd /tmp \
+    && rm -rf /tmp/janus-gateway
+
+# 编译 ustreamer
+RUN sed --in-place --expression 's|^#include "refcount.h"$|#include "../refcount.h"|g' /usr/include/janus/plugins/plugin.h \
+    && git clone --depth=1 https://github.com/mofeng-git/ustreamer /tmp/ustreamer \
+    && sed -i '68s/-Wl,-Bstatic//' /tmp/ustreamer/src/Makefile \
+    && make -j WITH_PYTHON=1 WITH_JANUS=1 WITH_LIBX264=1 -C /tmp/ustreamer \
+    && /tmp/ustreamer/ustreamer -v \
+    && cp /tmp/ustreamer/python/dist/*.whl /tmp/wheel/
+
+# 复制必要的库文件
+RUN mkdir /tmp/lib \
+    && cd /lib/*-linux-*/ \
+    && cp libevent_core-*.so.7 libbsd.so.0 libevent_pthreads-*.so.7 libspeexdsp.so.1 \
+       libevent-*.so.7 libjpeg.so.62 libx264.so.164 libyuv.so.0 libnice.so.10 \
+       /usr/lib/libsrtp2.so.1 /usr/lib/libwebsockets.so.19 \
+       /tmp/lib/

build/build_img.sh

@@ -0,0 +1,331 @@
+#!/bin/bash
+# ========================================================================== #
+#                                                                            #
+#    KVMD - The main PiKVM daemon.                                           #
+#                                                                            #
+#    Copyright (C) 2023-2025  SilentWind <mofeng654321@hotmail.com>         #
+#                                                                            #
+#    This program is free software: you can redistribute it and/or modify    #
+#    it under the terms of the GNU General Public License as published by    #
+#    the Free Software Foundation, either version 3 of the License, or       #
+#    (at your option) any later version.                                     #
+#                                                                            #
+#    This program is distributed in the hope that it will be useful,         #
+#    but WITHOUT ANY WARRANTY; without even the implied warranty of          #
+#    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the           #
+#    GNU General Public License for more details.                            #
+#                                                                            #
+#    You should have received a copy of the GNU General Public License       #
+#    along with this program.  If not, see <https://www.gnu.org/licenses/>.  #
+#                                                                            #
+# ========================================================================== #
+
+SRCPATH=/mnt/nas/src
+BOOTFS=/tmp/bootfs
+ROOTFS=/tmp/rootfs
+OUTPUTDIR=/mnt/nas/src/output
+LOOPDEV=/dev/loop10
+DATE=241204
+export LC_ALL=C
+
+write_meta() {
+    sudo chroot --userspec "root:root" $ROOTFS bash -c "sed -i 's/localhost.localdomain/$1/g' /etc/kvmd/meta.yaml"
+}
+
+mount_rootfs() {
+    mkdir $ROOTFS
+    sudo mount $LOOPDEV  $ROOTFS || exit -1
+    sudo mount -t proc proc $ROOTFS/proc || exit -1
+    sudo mount -t sysfs sys $ROOTFS/sys || exit -1
+    sudo mount -o bind /dev $ROOTFS/dev || exit -1
+}
+
+umount_rootfs() {
+    sudo umount  $ROOTFS/sys
+    sudo umount  $ROOTFS/dev
+    sudo umount  $ROOTFS/proc
+    sudo umount $ROOTFS
+    sudo losetup -d $LOOPDEV  
+}
+
+parpare_dns() {
+    sudo chroot --userspec "root:root" $ROOTFS bash -c " \
+    mkdir -p /run/systemd/resolve/ \
+    && touch /run/systemd/resolve/stub-resolv.conf \
+    && printf '%s\n' 'nameserver 1.1.1.1' 'nameserver 1.0.0.1' > /etc/resolv.conf \
+    && bash <(curl -sSL https://gitee.com/SuperManito/LinuxMirrors/raw/main/ChangeMirrors.sh) \
+        --source mirrors.tuna.tsinghua.edu.cn --updata-software false --web-protocol http "
+}
+
+delete_armbain_verify(){
+    sudo chroot --userspec "root:root" $ROOTFS bash -c "echo 'deb  http://mirrors.ustc.edu.cn/armbian bullseye main bullseye-utils bullseye-desktop' > /etc/apt/sources.list.d/armbian.list "
+}
+
+config_file() {
+    sudo mkdir -p $ROOTFS/etc/kvmd/override.d $ROOTFS/etc/kvmd/vnc $ROOTFS/var/lib/kvmd/msd $ROOTFS/opt/vc/bin $ROOTFS/usr/share/kvmd $ROOTFS/One-KVM \
+        $ROOTFS/usr/share/janus/javascript $ROOTFS/usr/lib/ustreamer/janus $ROOTFS/run/kvmd $ROOTFS/var/lib/kvmd/msd/images $ROOTFS/var/lib/kvmd/msd/meta
+    sudo rsync -a  --exclude={src,.github} . $ROOTFS/One-KVM
+    sudo cp -r configs/kvmd/* configs/nginx configs/janus $ROOTFS/etc/kvmd
+    sudo cp -r web extras contrib/keymaps $ROOTFS/usr/share/kvmd
+    sudo cp testenv/fakes/vcgencmd $ROOTFS/usr/bin/
+    sudo cp -r testenv/js/* $ROOTFS/usr/share/janus/javascript/
+    sudo cp build/platform/$1 $ROOTFS/usr/share/kvmd/platform
+    if [ -f "$SRCPATH/image/$1/rc.local" ]; then
+        sudo cp $SRCPATH/image/$1/rc.local $ROOTFS/etc/
+    fi
+}
+
+pack_img() {
+    sudo mv $SRCPATH/tmp/rootfs.img  $OUTPUTDIR/One-KVM_by-SilentWind_$1_$DATE.img
+    if [ "$1" = "Vm" ]; then
+        sudo qemu-img convert -f raw -O vmdk $OUTPUTDIR/One-KVM_by-SilentWind_Vm_$DATE.img $OUTPUTDIR/One-KVM_by-SilentWind_Vmare-uefi_$DATE.vmdk
+        sudo qemu-img convert -f raw -O vdi $OUTPUTDIR/One-KVM_by-SilentWind_Vm_$DATE.img $OUTPUTDIR/One-KVM_by-SilentWind_Virtualbox-uefi_$DATE.vdi
+    fi
+}
+
+onecloud_rootfs() {
+    $SRCPATH/image/onecloud/AmlImg_v0.3.1_linux_amd64 unpack $SRCPATH/image/onecloud/Armbian_by-SilentWind_24.5.0-trunk_Onecloud_bookworm_legacy_5.9.0-rc7_minimal.burn.img $SRCPATH/tmp
+    simg2img $SRCPATH/tmp/6.boot.PARTITION.sparse $SRCPATH/tmp/bootfs.img
+    simg2img $SRCPATH/tmp/7.rootfs.PARTITION.sparse $SRCPATH/tmp/rootfs.img
+    mkdir $BOOTFS
+    sudo losetup $LOOPDEV $SRCPATH/tmp/bootfs.img  || exit -1
+    sudo mount $LOOPDEV $BOOTFS
+    sudo cp $SRCPATH/image/onecloud/meson8b-onecloud-fix.dtb $BOOTFS/dtb/meson8b-onecloud.dtb
+    sudo umount $BOOTFS
+    sudo losetup -d $LOOPDEV
+    dd if=/dev/zero of=/tmp/add.img bs=1M count=1024 && cat /tmp/add.img >> $SRCPATH/tmp/rootfs.img && rm /tmp/add.img
+    e2fsck -f $SRCPATH/tmp/rootfs.img && resize2fs $SRCPATH/tmp/rootfs.img
+    sudo losetup $LOOPDEV $SRCPATH/tmp/rootfs.img
+}
+
+cumebox2_rootfs() {
+    cp $SRCPATH/image/cumebox2/Armbian_24.8.1_Khadas-vim1_bookworm_current_6.6.47_minimal.img $SRCPATH/tmp/rootfs.img
+    dd if=/dev/zero of=/tmp/add.img bs=1M count=1500 && cat /tmp/add.img >> $SRCPATH/tmp/rootfs.img && rm /tmp/add.img
+    sudo parted -s $SRCPATH/tmp/rootfs.img resizepart 1 100% || exit -1
+    sudo losetup --offset $((8192*512)) $LOOPDEV $SRCPATH/tmp/rootfs.img  || exit -1
+    sudo e2fsck -f $LOOPDEV && sudo resize2fs $LOOPDEV
+}
+
+chainedbox_rootfs_and_fix_dtb() {
+    cp $SRCPATH/image/chainedbox/Armbian_24.11.0_rockchip_chainedbox_bookworm_6.1.112_server_2024.10.02_add800m.img $SRCPATH/tmp/rootfs.img
+    mkdir $BOOTFS
+    sudo losetup --offset $((32768*512)) $LOOPDEV $SRCPATH/tmp/rootfs.img  || exit -1
+    sudo mount $LOOPDEV $BOOTFS
+    sudo cp $SRCPATH/image/chainedbox/rk3328-l1pro-1296mhz-fix.dtb $BOOTFS/dtb/rockchip/rk3328-l1pro-1296mhz.dtb
+    sudo umount $BOOTFS
+    sudo losetup -d $LOOPDEV
+    sudo losetup --offset $((1081344*512)) $LOOPDEV $SRCPATH/tmp/rootfs.img
+}
+
+vm_rootfs() {
+    cp $SRCPATH/image/vm/Armbian_24.8.1_Uefi-x86_bookworm_current_6.6.47_minimal_add1g.img $SRCPATH/tmp/rootfs.img
+    sudo losetup --offset $((540672*512)) $LOOPDEV $SRCPATH/tmp/rootfs.img  || exit -1
+}
+
+e900v22c_rootfs() {
+    cp $SRCPATH/image/e900v22c/Armbian_23.08.0_amlogic_s905l3a_bookworm_5.15.123_server_2023.08.01.img $SRCPATH/tmp/rootfs.img
+    dd if=/dev/zero of=/tmp/add.img bs=1M count=400 && cat /tmp/add.img >> $SRCPATH/tmp/rootfs.img && rm /tmp/add.img
+    sudo parted -s $SRCPATH/tmp/rootfs.img resizepart 2 100% || exit -1
+    sudo losetup --offset $((532480*512)) $LOOPDEV $SRCPATH/tmp/rootfs.img  || exit -1
+    sudo e2fsck -f $LOOPDEV && sudo resize2fs $LOOPDEV
+}
+
+
+octopus-flanet_rootfs() {
+    cp $SRCPATH/image/octopus-flanet/Armbian_24.11.0_amlogic_s912_bookworm_6.1.114_server_2024.11.01.img $SRCPATH/tmp/rootfs.img
+    mkdir $BOOTFS
+    sudo losetup --offset $((8192*512)) $LOOPDEV $SRCPATH/tmp/rootfs.img  || exit -1
+    sudo mount $LOOPDEV $BOOTFS
+    sudo sed -i "s/meson-gxm-octopus-planet.dtb/meson-gxm-khadas-vim2.dtb/g" $BOOTFS/uEnv.txt
+    sudo umount $BOOTFS
+    sudo losetup -d $LOOPDEV
+    dd if=/dev/zero of=/tmp/add.img bs=1M count=400 && cat /tmp/add.img >> $SRCPATH/tmp/rootfs.img && rm /tmp/add.img
+    sudo parted -s $SRCPATH/tmp/rootfs.img resizepart 2 100% || exit -1
+    sudo losetup --offset $((1056768*512)) $LOOPDEV $SRCPATH/tmp/rootfs.img  || exit -1
+    sudo e2fsck -f $LOOPDEV && sudo resize2fs $LOOPDEV
+}
+
+
+config_cumebox2_file() {
+    sudo mkdir $ROOTFS/etc/oled
+    sudo cp $SRCPATH/image/cumebox2/v-fix.dtb $ROOTFS/boot/dtb/amlogic/meson-gxl-s905x-khadas-vim.dtb
+    sudo cp $SRCPATH/image/cumebox2/ssd $ROOTFS/usr/bin/
+    sudo cp $SRCPATH/image/cumebox2/config.json $ROOTFS/etc/oled/config.json
+}
+
+config_octopus-flanet_file() {
+    sudo cp $SRCPATH/image/octopus-flanet/model_database.conf $ROOTFS/etc/model_database.conf
+}
+
+instal_one-kvm() {
+    #$1 arch; $2 deivce: "gpio" or "video1"; $3 network: "systemd-networkd",default is network-manager
+    sudo chroot --userspec "root:root" $ROOTFS bash -c " \
+        df -h \
+        && apt-get update \
+        && apt-get install -y python3-aiofiles python3-aiohttp python3-appdirs python3-asn1crypto python3-async-timeout \
+            python3-bottle python3-cffi python3-chardet python3-click python3-colorama python3-cryptography python3-dateutil \
+            python3-dbus python3-dev python3-hidapi python3-hid python3-idna python3-libgpiod python3-mako python3-marshmallow python3-more-itertools \
+            python3-multidict python3-netifaces python3-packaging python3-passlib python3-pillow python3-ply python3-psutil \
+            python3-pycparser python3-pyelftools python3-pyghmi python3-pygments python3-pyparsing python3-requests \
+            python3-semantic-version python3-setproctitle python3-setuptools python3-six python3-spidev python3-systemd \
+            python3-tabulate python3-urllib3 python3-wrapt python3-xlib python3-yaml python3-yarl python3-pyotp python3-qrcode \
+            python3-serial python3-zstandard python3-dbus-next python3-pip python3-dev python3-build python3-wheel \
+            nginx net-tools tesseract-ocr tesseract-ocr-eng tesseract-ocr-chi-sim cpufrequtils iptables network-manager \
+            git gpiod libxkbcommon0 build-essential janus-dev libssl-dev libffi-dev libevent-dev libjpeg-dev libbsd-dev libudev-dev \
+            pkg-config libx264-dev libyuv-dev libasound2-dev libsndfile-dev libspeexdsp-dev \
+        && rm -rf /var/lib/apt/lists/* "
+
+    sudo chroot --userspec "root:root" $ROOTFS sed --in-place --expression 's|^#include "refcount.h"$|#include "../refcount.h"|g' /usr/include/janus/plugins/plugin.h
+
+    sudo chroot --userspec "root:root" $ROOTFS bash -c " \
+        git clone --depth=1 https://github.com/mofeng-git/ustreamer /tmp/ustreamer \
+        && make -j WITH_PYTHON=1 WITH_JANUS=1 WITH_LIBX264=1 -C /tmp/ustreamer \
+        && cp /tmp/ustreamer/src/ustreamer.bin /usr/bin/ustreamer \
+        && cp /tmp/ustreamer/src/ustreamer-dump.bin /usr/bin/ustreamer-dump \
+        && chmod +x /usr/bin/ustreamer /usr/bin/ustreamer-dump \
+        && cp /tmp/ustreamer/janus/libjanus_ustreamer.so /usr/lib/ustreamer/janus \
+        && pip3 install --target=/usr/lib/python3/dist-packages --break-system-packages /tmp/ustreamer/python/dist/*.whl "
+
+    if [ "$3" = "systemd-networkd" ]; then 
+        sudo chroot --userspec "root:root" $ROOTFS bash -c " \
+            echo -e '[Match]\nName=eth0\n\n[Network]\nDHCP=yes\n\n[Link]\nMACAddress=B6:AE:B3:21:42:0C' > /etc/systemd/network/99-eth0.network \
+            && systemctl mask NetworkManager \
+            && systemctl unmask systemd-networkd \
+            && systemctl enable systemd-networkd systemd-resolved "        
+    fi
+    sudo chroot --userspec "root:root" $ROOTFS bash -c " \
+        pip3 config set global.index-url https://mirrors.tuna.tsinghua.edu.cn/pypi/web/simple \
+        && pip3 install --target=/usr/lib/python3/dist-packages --break-system-packages async-lru gpiod pyfatfs \
+        && pip3 cache purge "
+
+    sudo chroot --userspec "root:root" $ROOTFS bash -c " \
+        cd /One-KVM \
+        && python3 setup.py install \
+        && bash scripts/kvmd-gencert --do-the-thing \
+        && bash scripts/kvmd-gencert --do-the-thing --vnc \
+        && kvmd-nginx-mkconf /etc/kvmd/nginx/nginx.conf.mako /etc/kvmd/nginx/nginx.conf \
+        && kvmd -m "
+
+    sudo chroot --userspec "root:root" $ROOTFS bash -c " \
+        cat /One-KVM/configs/os/sudoers/v2-hdmiusb >> /etc/sudoers \
+        && cat /One-KVM/configs/os/udev/v2-hdmiusb-generic.rules > /etc/udev/rules.d/99-kvmd.rules \
+        && echo 'libcomposite' >> /etc/modules \
+        && mv /usr/local/bin/kvmd* /usr/bin \
+        && cp /One-KVM/configs/os/services/* /etc/systemd/system/ \
+        && cp /One-KVM/configs/os/tmpfiles.conf /usr/lib/tmpfiles.d/ \
+        && chmod +x /etc/update-motd.d/* \
+        && echo 'kvmd ALL=(ALL) NOPASSWD: /etc/kvmd/custom_atx/gpio.sh' >>  /etc/sudoers \
+        && echo 'kvmd ALL=(ALL) NOPASSWD: /etc/kvmd/custom_atx/usbrelay_hid.sh' >>  /etc/sudoers \
+        && systemd-sysusers /One-KVM/configs/os/sysusers.conf \
+        && systemd-sysusers /One-KVM/configs/os/kvmd-webterm.conf \
+        && ln -sf /usr/share/tesseract-ocr/*/tessdata /usr/share/tessdata \
+        && sed -i 's/8080/80/g' /etc/kvmd/override.yaml \
+        && sed -i 's/4430/443/g' /etc/kvmd/override.yaml \
+        && chown kvmd -R /var/lib/kvmd/msd/ \
+        && systemctl enable kvmd kvmd-otg kvmd-nginx kvmd-vnc kvmd-ipmi kvmd-webterm kvmd-janus \
+        && systemctl disable nginx janus \
+        && rm -r /One-KVM "
+
+    sudo chroot --userspec "root:root" $ROOTFS bash -c " \
+        curl https://github.com/tsl0922/ttyd/releases/download/1.7.7/ttyd.$1 -L -o /usr/bin/ttyd \
+        && chmod +x /usr/bin/ttyd \
+        && mkdir -p /home/kvmd-webterm \
+        && chown kvmd-webterm /home/kvmd-webterm "
+
+    if [ "$1" = "x86_64" ]; then
+        sudo chroot --userspec "root:root" $ROOTFS bash -c " \
+            systemctl disable kvmd-otg \
+            && sed -i '2c ATX=USBRELAY_HID' /etc/kvmd/atx.sh \
+            && sed -i 's/device: \/dev\/ttyUSB0/device: \/dev\/kvmd-hid/g' /etc/kvmd/override.yaml "
+    else
+        if [ "$2" = "gpio" ]; then
+            sudo chroot --userspec "root:root" $ROOTFS bash -c " \
+                sed -i '2c ATX=GPIO' /etc/kvmd/atx.sh \
+                && sed -i 's/SHUTDOWNPIN/gpiochip1 7/g' /etc/kvmd/custom_atx/gpio.sh \
+                && sed -i 's/REBOOTPIN/gpiochip0 11/g' /etc/kvmd/custom_atx/gpio.sh "
+        else
+            sudo chroot --userspec "root:root" $ROOTFS sed -i '2c ATX=USBRELAY_HID' /etc/kvmd/atx.sh
+            
+        fi
+        if [ "$2" = "video1" ]; then
+            sudo chroot --userspec "root:root" $ROOTFS sed -i 's/\/dev\/video0/\/dev\/video1/g' /etc/kvmd/override.yaml
+        fi
+        sudo chroot --userspec "root:root" $ROOTFS bash -c " \
+            sed -i 's/ch9329/otg/g' /etc/kvmd/override.yaml \
+            && sed -i 's/device: \/dev\/ttyUSB0//g' /etc/kvmd/override.yaml \
+            && sed -i 's/#type: otg/type: otg/g' /etc/kvmd/override.yaml "
+    fi
+}
+
+pack_img_onecloud() {
+    sudo rm $SRCPATH/tmp/7.rootfs.PARTITION.sparse
+    sudo img2simg $SRCPATH/tmp/rootfs.img $SRCPATH/tmp/7.rootfs.PARTITION.sparse
+    sudo $SRCPATH/image/onecloud/AmlImg_v0.3.1_linux_amd64 pack $OUTPUTDIR/One-KVM_by-SilentWind_Onecloud_$DATE.burn.img $SRCPATH/tmp/
+    sudo rm $SRCPATH/tmp/*
+}
+
+case $1 in  
+    onecloud)  
+        onecloud_rootfs
+        mount_rootfs
+        config_file $1
+        instal_one-kvm armhf gpio systemd-networkd
+        write_meta $1
+        umount_rootfs
+        pack_img_onecloud
+        ;;
+    cumebox2)  
+        cumebox2_rootfs
+        mount_rootfs
+        config_file $1
+        config_cumebox2_file
+        parpare_dns
+        instal_one-kvm aarch64 video1
+        write_meta $1
+        umount_rootfs
+        pack_img Cumebox2
+        ;;
+    chainedbox) 
+        chainedbox_rootfs_and_fix_dtb
+        mount_rootfs
+        config_file $1
+        parpare_dns
+        instal_one-kvm aarch64 video1
+        write_meta $1
+        umount_rootfs
+        pack_img Chainedbox
+        ;;
+    vm)  
+        vm_rootfs
+        mount_rootfs
+        config_file $1
+        parpare_dns
+        instal_one-kvm x86_64
+        write_meta $1
+        umount_rootfs
+        pack_img Vm
+        ;;
+    e900v22c)  
+        e900v22c_rootfs
+        mount_rootfs
+        config_file $1
+        instal_one-kvm aarch64 video1
+        write_meta $1
+        umount_rootfs
+        pack_img E900v22c
+        ;;
+    octopus-flanet)  
+        octopus-flanet_rootfs
+        mount_rootfs
+        config_file $1
+        config_octopus-flanet_file
+        parpare_dns
+        instal_one-kvm aarch64 video1
+        write_meta $1
+        umount_rootfs
+        pack_img Octopus-Flanet
+        ;;
+    *)  
+        echo "Do no thing." 
+        ;;
+esac

build/cargo_config

@@ -0,0 +1,5 @@
+[source.crates-io]
+replace-with = 'ustc'
+
+[source.ustc]
+registry = "sparse+https://mirrors.ustc.edu.cn/crates.io-index/"

build/init.sh

@@ -0,0 +1,244 @@
+#!/bin/bash
+# ========================================================================== #
+#                                                                            #
+#    KVMD - The main PiKVM daemon.                                           #
+#                                                                            #
+#    Copyright (C) 2023-2025  SilentWind <mofeng654321@hotmail.com>         #
+#                                                                            #
+#    This program is free software: you can redistribute it and/or modify    #
+#    it under the terms of the GNU General Public License as published by    #
+#    the Free Software Foundation, either version 3 of the License, or       #
+#    (at your option) any later version.                                     #
+#                                                                            #
+#    This program is distributed in the hope that it will be useful,         #
+#    but WITHOUT ANY WARRANTY; without even the implied warranty of          #
+#    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the           #
+#    GNU General Public License for more details.                            #
+#                                                                            #
+#    You should have received a copy of the GNU General Public License       #
+#    along with this program.  If not, see <https://www.gnu.org/licenses/>.  #
+#                                                                            #
+# ========================================================================== #
+
+# 定义颜色代码
+RED='\033[0;31m'
+GREEN='\033[0;32m'
+YELLOW='\033[0;33m'
+BLUE='\033[0;34m'
+NC='\033[0m'
+
+# 输出日志的函数
+log_info() {
+    echo -e "${GREEN}[INFO] $1${NC}"
+}
+
+log_warn() {
+    echo -e "${YELLOW}[WARN] $1${NC}"
+}
+
+log_error() {
+    echo -e "${RED}[ERROR] $1${NC}"
+}
+
+# 初始化检查
+log_info "One-KVM 正在启动..."
+
+# 首次初始化配置
+if [ ! -f /etc/kvmd/.init_flag ]; then
+    log_info "首次初始化配置..."
+    
+    # 创建必要目录并移动配置文件
+    if mkdir -p /etc/kvmd/ && \
+       mv /etc/kvmd_backup/* /etc/kvmd/ && \
+       touch /etc/kvmd/.docker_flag && \
+       sed -i 's/localhost.localdomain/docker/g' /etc/kvmd/meta.yaml && \
+       sed -i 's/localhost/localhost:4430/g' /etc/kvmd/kvm_input.sh; then
+        log_info "移动配置文件完成"
+    else
+        log_error "移动配置文件失败"
+        exit 1
+    fi
+
+    # SSL证书配置
+    if ! /usr/share/kvmd/kvmd-gencert --do-the-thing; then
+        log_error "Nginx SSL 证书生成失败"
+        exit 1
+    fi
+    if ! /usr/share/kvmd/kvmd-gencert --do-the-thing --vnc; then
+        log_error "VNC SSL 证书生成失败"
+        exit 1
+    fi
+
+    # 设置用户名和密码
+    if [ ! -z "$USERNAME" ] && [ ! -z "$PASSWORD" ]; then
+        if python -m kvmd.apps.htpasswd del admin \
+            && echo "$PASSWORD" | python -m kvmd.apps.htpasswd set -i "$USERNAME" \
+            && echo "$PASSWORD -> $USERNAME:$PASSWORD" > /etc/kvmd/vncpasswd \
+            && echo "$USERNAME:$PASSWORD -> $USERNAME:$PASSWORD" > /etc/kvmd/ipmipasswd; then
+            log_info "用户凭据设置成功"
+        else
+            log_error "用户凭据设置失败"
+            exit 1
+        fi
+    else
+        log_warn "未设置 USERNAME 和 PASSWORD 环境变量，使用默认值(admin/admin)"
+    fi
+
+    # SSL开关配置
+    if [ "$NOSSL" == 1 ]; then
+        log_info "已禁用SSL"
+        if ! python -m kvmd.apps.ngxmkconf /etc/kvmd/nginx/nginx.conf.mako /etc/kvmd/nginx/nginx.conf -o nginx/https/enabled=false; then
+            log_error "Nginx 配置失败"
+            exit 1
+        fi
+    else
+        if ! python -m kvmd.apps.ngxmkconf /etc/kvmd/nginx/nginx.conf.mako /etc/kvmd/nginx/nginx.conf; then
+            log_error "Nginx 配置失败"
+            exit 1
+        fi
+    fi
+
+    # 认证配置
+    if [ "$NOAUTH" == "1" ]; then
+        sed -i "s/enabled: true/enabled: false/g" /etc/kvmd/override.yaml
+        log_info "已禁用认证"
+    fi
+
+    #add supervisord conf
+    if [ "$NOWEBTERM" == "1" ]; then
+        log_info "已禁用 WebTerm 功能"
+        rm -r /usr/share/kvmd/extras/webterm
+    else
+        cat >> /etc/kvmd/supervisord.conf  << EOF
+
+[program:kvmd-webterm]
+command=/usr/local/bin/ttyd --interface=/run/kvmd/ttyd.sock --port=0 --writable /bin/bash -c '/etc/kvmd/armbain-motd; bash'
+directory=/
+autostart=true
+autorestart=true
+priority=14
+stopasgroup=true
+stdout_logfile=/dev/stdout
+stdout_logfile_maxbytes = 0
+redirect_stderr=true
+EOF
+    fi
+
+    if [ "$NOWEBTERMWRITE" == "1" ]; then
+        sed -i "s/--writable//g" /etc/kvmd/supervisord.conf
+    fi
+
+    if [  "$NOVNC" == "1" ]; then
+        log_info "已禁用 VNC 功能"
+        rm -r /usr/share/kvmd/extras/vnc
+    else
+        cat >> /etc/kvmd/supervisord.conf << EOF
+
+[program:kvmd-vnc]
+command=python -m kvmd.apps.vnc --run
+directory=/
+autostart=true
+autorestart=true
+priority=11
+stopasgroup=true
+stdout_logfile=/dev/stdout
+stdout_logfile_maxbytes = 0
+redirect_stderr=true
+EOF
+    fi
+
+    if [  "$NOIPMI" == "1" ]; then
+        log_info "已禁用IPMI功能"
+        rm -r /usr/share/kvmd/extras/ipmi
+    else
+        cat >> /etc/kvmd/supervisord.conf << EOF
+
+[program:kvmd-ipmi]
+command=python -m kvmd.apps.ipmi --run
+directory=/
+autostart=true
+autorestart=true
+priority=12
+stopasgroup=true
+stdout_logfile=/dev/stdout
+stdout_logfile_maxbytes = 0
+redirect_stderr=true
+EOF
+    fi
+
+    #switch OTG config
+    if [ "$OTG" == "1" ]; then
+        log_info "已启用 OTG 功能"
+        sed -i "s/ch9329/otg/g" /etc/kvmd/override.yaml
+        sed -i "s/device: \/dev\/ttyUSB0//g" /etc/kvmd/override.yaml
+        if [ "$NOMSD" == 1 ]; then
+            log_info "已禁用 MSD 功能"
+        else
+            sed -i "s/#type: otg/type: otg/g" /etc/kvmd/override.yaml
+        fi
+    fi
+
+    if [ ! -z "$VIDEONUM" ]; then
+        if sed -i "s/\/dev\/video0/\/dev\/video$VIDEONUM/g" /etc/kvmd/override.yaml && \
+           sed -i "s/\/dev\/video0/\/dev\/video$VIDEONUM/g" /etc/kvmd/janus/janus.plugin.ustreamer.jcfg; then
+            log_info "视频设备已设置为 /dev/video$VIDEONUM"
+        fi
+    fi
+
+    if [ ! -z "$AUDIONUM" ]; then
+        if sed -i "s/hw:0/hw:$AUDIONUM/g" /etc/kvmd/janus/janus.plugin.ustreamer.jcfg; then
+            log_info "音频设备已设置为 hw:$AUDIONUM"
+        fi
+    fi
+
+    if [ ! -z "$CH9329SPEED" ]; then
+        if sed -i "s/speed: 9600/speed: $CH9329SPEED/g" /etc/kvmd/override.yaml; then
+            log_info "CH9329 串口速率已设置为 $CH9329SPEED"
+        fi
+    fi
+
+    if [ ! -z "$CH9329TIMEOUT" ]; then
+        if sed -i "s/read_timeout: 0.3/read_timeout: $CH9329TIMEOUT/g" /etc/kvmd/override.yaml; then
+            log_info "CH9329 超时已设置为 $CH9329TIMEOUT 秒"
+        fi
+    fi
+
+    if [ ! -z "$H264PRESET" ]; then
+        if sed -i "s/ultrafast/$H264PRESET/g" /etc/kvmd/override.yaml; then
+            log_info "H264 预设已设置为 $H264PRESET"
+        fi
+    fi
+
+    if [ ! -z "$VIDEOFORMAT" ]; then
+        if sed -i "s/format=mjpeg/format=$VIDFORMAT/g" /etc/kvmd/override.yaml; then
+            log_info "视频输入格式已设置为 $VIDFORMAT"
+        fi
+    fi
+    
+    touch /etc/kvmd/.init_flag
+    log_info "初始化配置完成"
+fi
+
+# OTG设备配置
+if [ "$OTG" == "1" ]; then
+    log_info "正在配置 OTG 设备..."
+    rm -r /run/kvmd/otg &> /dev/null
+    
+    if ! modprobe libcomposite; then
+        log_error "加载 libcomposite 模块失败"
+        exit 1
+    fi
+
+    if python -m kvmd.apps.otg start; then
+        ln -s /dev/hidg1 /dev/kvmd-hid-mouse
+        ln -s /dev/hidg0 /dev/kvmd-hid-keyboard
+        ln -s /dev/hidg2 /dev/kvmd-hid-mouse-alt
+        log_info "OTG 设备配置完成"
+    else
+        log_warn "OTG 设备挂载失败"
+        #exit 1
+    fi
+fi
+
+log_info "One-KVM 配置文件准备完成，正在启动服务..."
+exec supervisord -c /etc/kvmd/supervisord.conf

build/platform/chainedbox

@@ -0,0 +1,3 @@
+PIKVM_MODEL=v2_model
+PIKVM_VIDEO=usb_video
+PIKVM_BOARD=chainedbox

build/platform/cumebox2

@@ -0,0 +1,3 @@
+PIKVM_MODEL=v2_model
+PIKVM_VIDEO=usb_video
+PIKVM_BOARD=cumebox2

build/platform/docker

@@ -0,0 +1,3 @@
+PIKVM_MODEL=docker_model
+PIKVM_VIDEO=docker_video
+PIKVM_BOARD=docker_board

build/platform/e900v22c

@@ -0,0 +1,3 @@
+PIKVM_MODEL=v2_model
+PIKVM_VIDEO=usb_video
+PIKVM_BOARD=e900v22c

build/platform/octopus-flanet

@@ -0,0 +1,3 @@
+PIKVM_MODEL=v2_model
+PIKVM_VIDEO=usb_video
+PIKVM_BOARD=octopus-flanet

build/platform/onecloud

@@ -0,0 +1,3 @@
+PIKVM_MODEL=v2_model
+PIKVM_VIDEO=usb_video
+PIKVM_BOARD=onecloud

build/platform/vm

@@ -0,0 +1,3 @@
+PIKVM_MODEL=v2_model
+PIKVM_VIDEO=usb_video
+PIKVM_BOARD=vm

config/override.yaml

@@ -1,58 +0,0 @@
-####################################################################
-#                                                                  #
-# Override Pi-KVM system settings. This file uses the YAML syntax. #
-#                                                                  #
-#    https://github.com/pikvm/pikvm/blob/master/pages/config.md    #
-#                                                                  #
-# All overridden parameters will be applied AFTER other configs    #
-# and "!include" directives and BEFORE validation.                 #
-# Not: Sections should be combined under shared keys.              #
-#                                                                  #
-####################################################################
-vnc:
-    # See https://github.com/pikvm/pikvm/blob/master/pages/vnc.md
-    keymap: /usr/share/kvmd/keymaps/ru # Set russian keymap
-    auth:
-        vncauth:
-            enabled: true # Enable auth via /etc/kvmd/vncpasswd
-kvmd:
-    msd:
-        type: disabled
-    gpio:
-        drivers:
-            wol_server1:
-                type: wol
-                mac: 2c:56:dc:db:7c:1e
-            short_press:
-                type: cmd
-                cmd: [/usr/bin/sudo, short_press_gpio420]
-            long_press:
-                type: cmd
-                cmd: [/usr/bin/sudo, long_press_gpio420]
-        scheme:
-            wol_server1:
-                driver: wol_server1
-                pin: 0
-                mode: output
-                switch: false
-            short_button:
-                driver: short_press
-                pin: 0
-                mode: output
-                switch: false
-            long_button:
-                driver: long_press
-                pin: 0
-                mode: output
-                switch: false
-        view:
-            header:
-                title: ATX
-            table:
-                - ["#电源管理"]
-                - []
-                - ["#短按（开/关机）:", short_button|按下]
-                - ["#长按（强制关机）:", long_button|按下]
-                - []
-                - ["#网络唤醒"]
-                - ["#被控机设备", wol_server1|网络唤醒]

configs/hw_info/model

@@ -0,0 +1 @@
+Docker

configs/hw_info/serial-number

@@ -0,0 +1 @@
+docker1000000000

configs/janus/janus.jcfg

@@ -0,0 +1,18 @@
+general: {
+	debug_level = 0
+}
+nat: {
+	nice_debug = false
+	ignore_mdns = true
+}
+media: {
+	ipv6 = true
+	ipv6_linklocal = true
+	min_nack_queue = 2000
+	rtp_port_range = "20000-40000"
+	no_media_timer = 0
+	slowlink_threshold = 10
+	twcc_period = 100
+	dtls_timeout = 1000
+	nack_optimizations = true
+}

configs/janus/janus.plugin.ustreamer.jcfg

@@ -0,0 +1,7 @@
+video: {
+	sink = "kvmd::ustreamer::h264"
+}
+audio: {
+     device = "hw:0"
+     tc358743 = "/dev/video0"
+}

configs/janus/janus.transport.websockets.jcfg

@@ -0,0 +1,4 @@
+general: {
+	ws = true
+	ws_unix = "/run/kvmd/janus-ws.sock"
+}

configs/kvmd/armbain-motd

@@ -0,0 +1,46 @@
+#!/bin/bash
+# ========================================================================== #
+#                                                                            #
+#    KVMD - The main PiKVM daemon.                                           #
+#                                                                            #
+#    Copyright (C) 2023-2025  SilentWind <mofeng654321@hotmail.com>         #
+#                                                                            #
+#    This program is free software: you can redistribute it and/or modify    #
+#    it under the terms of the GNU General Public License as published by    #
+#    the Free Software Foundation, either version 3 of the License, or       #
+#    (at your option) any later version.                                     #
+#                                                                            #
+#    This program is distributed in the hope that it will be useful,         #
+#    but WITHOUT ANY WARRANTY; without even the implied warranty of          #
+#    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the           #
+#    GNU General Public License for more details.                            #
+#                                                                            #
+#    You should have received a copy of the GNU General Public License       #
+#    along with this program.  If not, see <https://www.gnu.org/licenses/>.  #
+#                                                                            #
+# ========================================================================== #
+ 
+if [ -e /etc/update-motd.d/10-armbian-header ]; then /etc/update-motd.d/10-armbian-header; fi
+if [ -e /etc/update-motd.d/30-armbian-sysinfo ]; then /etc/update-motd.d/30-armbian-sysinfo; fi
+if [ -e /etc/update-motd.d/41-armbian-config ]; then /etc/update-motd.d/41-armbian-config; fi
+ 
+printf "
+
+ ██████╗ ███╗   ██╗███████╗    ██╗  ██╗██╗   ██╗███╗   ███╗
+██╔═══██╗████╗  ██║██╔════╝    ██║ ██╔╝██║   ██║████╗ ████║
+██║   ██║██╔██╗ ██║█████╗█████╗█████╔╝ ██║   ██║██╔████╔██║
+██║   ██║██║╚██╗██║██╔══╝╚════╝██╔═██╗ ╚██╗ ██╔╝██║╚██╔╝██║
+╚██████╔╝██║ ╚████║███████╗    ██║  ██╗ ╚████╔╝ ██║ ╚═╝ ██║
+ ╚═════╝ ╚═╝  ╚═══╝╚══════╝    ╚═╝  ╚═╝  ╚═══╝  ╚═╝     ╚═╝
+
+____________________________________________________________________________
+
+项目链接：
+    * One-KVM：https://github.com/mofeng-git/One-KVM
+
+文档链接：
+    * One-KVM：https://one-kvm.mofeng.run
+
+____________________________________________________________________________
+
+"

configs/kvmd/atx.sh

@@ -0,0 +1,34 @@
+#!/bin/bash
+# ========================================================================== #
+#                                                                            #
+#    KVMD - The main PiKVM daemon.                                           #
+#                                                                            #
+#    Copyright (C) 2023-2025  SilentWind <mofeng654321@hotmail.com>         #
+#                                                                            #
+#    This program is free software: you can redistribute it and/or modify    #
+#    it under the terms of the GNU General Public License as published by    #
+#    the Free Software Foundation, either version 3 of the License, or       #
+#    (at your option) any later version.                                     #
+#                                                                            #
+#    This program is distributed in the hope that it will be useful,         #
+#    but WITHOUT ANY WARRANTY; without even the implied warranty of          #
+#    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the           #
+#    GNU General Public License for more details.                            #
+#                                                                            #
+#    You should have received a copy of the GNU General Public License       #
+#    along with this program.  If not, see <https://www.gnu.org/licenses/>.  #
+#                                                                            #
+# ========================================================================== #
+
+echo $ATX
+case $ATX in
+    GPIO)
+    sudo /etc/kvmd/custom_atx/gpio.sh $1
+    ;;
+    USBRELAY_HID)
+    sudo /etc/kvmd/custom_atx/usbrelay_hid.sh $1
+    ;;
+    *)
+    echo "No thing."
+    exit -1
+esac

configs/kvmd/auth.yaml

@@ -0,0 +1 @@
+{}

configs/kvmd/clean_when_exit.sh

@@ -0,0 +1,43 @@
+#!/bin/bash
+# ========================================================================== #
+#                                                                            #
+#    KVMD - The main PiKVM daemon.                                           #
+#                                                                            #
+#    Copyright (C) 2023-2025  SilentWind <mofeng654321@hotmail.com>         #
+#                                                                            #
+#    This program is free software: you can redistribute it and/or modify    #
+#    it under the terms of the GNU General Public License as published by    #
+#    the Free Software Foundation, either version 3 of the License, or       #
+#    (at your option) any later version.                                     #
+#                                                                            #
+#    This program is distributed in the hope that it will be useful,         #
+#    but WITHOUT ANY WARRANTY; without even the implied warranty of          #
+#    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the           #
+#    GNU General Public License for more details.                            #
+#                                                                            #
+#    You should have received a copy of the GNU General Public License       #
+#    along with this program.  If not, see <https://www.gnu.org/licenses/>.  #
+#                                                                            #
+# ========================================================================== #
+
+RED='\033[0;31m'
+GREEN='\033[0;32m'
+YELLOW='\033[0;33m'
+BLUE='\033[0;34m'
+NC='\033[0m'
+
+cleanup() {
+    if [ "$OTG" == "1" ]; then
+        echo "Trying exit OTG Port..." \
+            && python -m kvmd.apps.otg stop \
+            || echo -e "${RED}Failed to exit OTG Port${NC}"
+        rm -r /run/kvmd/otg
+    fi
+    exit 0
+}
+
+trap cleanup SIGTERM
+
+while true; do
+    sleep 3600
+done

configs/kvmd/custom_atx/gpio.sh

@@ -0,0 +1,37 @@
+#!/bin/bash
+# ========================================================================== #
+#                                                                            #
+#    KVMD - The main PiKVM daemon.                                           #
+#                                                                            #
+#    Copyright (C) 2023-2025  SilentWind <mofeng654321@hotmail.com>         #
+#                                                                            #
+#    This program is free software: you can redistribute it and/or modify    #
+#    it under the terms of the GNU General Public License as published by    #
+#    the Free Software Foundation, either version 3 of the License, or       #
+#    (at your option) any later version.                                     #
+#                                                                            #
+#    This program is distributed in the hope that it will be useful,         #
+#    but WITHOUT ANY WARRANTY; without even the implied warranty of          #
+#    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the           #
+#    GNU General Public License for more details.                            #
+#                                                                            #
+#    You should have received a copy of the GNU General Public License       #
+#    along with this program.  If not, see <https://www.gnu.org/licenses/>.  #
+#                                                                            #
+# ========================================================================== #
+case $1 in
+    short)
+    gpioset -m time -s 1 SHUTDOWNPIN=0
+    gpioset SHUTDOWNPIN=1
+    ;;
+    long)
+    gpioset -m time -s 5 SHUTDOWNPIN=0
+    gpioset SHUTDOWNPIN=1
+    ;;
+    reset)
+    gpioset -m time -s 1 REBOOTPIN=0
+    gpioset REBOOTPIN=1
+    ;;
+    *)
+    echo "No thing."
+esac

configs/kvmd/custom_atx/usbrelay_hid.py

@@ -0,0 +1,73 @@
+# ========================================================================== #
+#                                                                            #
+#    KVMD - The main PiKVM daemon.                                           #
+#                                                                            #
+#    Copyright (C) 2023-2025  SilentWind <mofeng654321@hotmail.com>         #
+#                                                                            #
+#    This program is free software: you can redistribute it and/or modify    #
+#    it under the terms of the GNU General Public License as published by    #
+#    the Free Software Foundation, either version 3 of the License, or       #
+#    (at your option) any later version.                                     #
+#                                                                            #
+#    This program is distributed in the hope that it will be useful,         #
+#    but WITHOUT ANY WARRANTY; without even the implied warranty of          #
+#    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the           #
+#    GNU General Public License for more details.                            #
+#                                                                            #
+#    You should have received a copy of the GNU General Public License       #
+#    along with this program.  If not, see <https://www.gnu.org/licenses/>.  #
+#                                                                            #
+# ========================================================================== #
+
+import sys
+import hid
+
+VENDOR_ID = 0x5131
+PRODUCT_ID = 0x2007
+
+def find_usbrelay():
+    for device in hid.enumerate():
+        if device.get("vendor_id") == VENDOR_ID and device.get("product_id") == PRODUCT_ID:
+            return device
+    return None
+
+def send_command(device_info, channel, onoff):
+    device = hid.device()
+    device.open(device_info['vendor_id'], device_info['product_id'])
+    if device is None:
+        print("Failed to open device.")
+        return
+
+    try:
+        cmd = [0xA0, channel, onoff, 0xA0 + channel + onoff]
+        device.write(bytearray(cmd))
+    finally:
+        device.close()
+
+def main():
+    if len(sys.argv) != 3:
+        print("Usage:\n"
+              "\tpython script.py id on|off")
+        return
+    
+    try:
+        id = int(sys.argv[1])
+        if sys.argv[2].lower() == 'on':
+            onoff = 1
+        elif sys.argv[2].lower() == 'off':
+            onoff = 0
+        else:
+            raise ValueError
+    except ValueError:
+        print("Invalid command, use 'on' or 'off'")
+        return
+    
+    device_info = find_usbrelay()
+    if device_info is None:
+        print("USB relay not found")
+    else:
+        send_command(device_info, id, onoff)
+        print(f"Sent command to channel {id}: {'ON' if onoff else 'OFF'}")
+
+if __name__ == "__main__":
+    main()

configs/kvmd/custom_atx/usbrelay_hid.sh

@@ -0,0 +1,40 @@
+#!/bin/bash
+# ========================================================================== #
+#                                                                            #
+#    KVMD - The main PiKVM daemon.                                           #
+#                                                                            #
+#    Copyright (C) 2023-2025  SilentWind <mofeng654321@hotmail.com>         #
+#                                                                            #
+#    This program is free software: you can redistribute it and/or modify    #
+#    it under the terms of the GNU General Public License as published by    #
+#    the Free Software Foundation, either version 3 of the License, or       #
+#    (at your option) any later version.                                     #
+#                                                                            #
+#    This program is distributed in the hope that it will be useful,         #
+#    but WITHOUT ANY WARRANTY; without even the implied warranty of          #
+#    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the           #
+#    GNU General Public License for more details.                            #
+#                                                                            #
+#    You should have received a copy of the GNU General Public License       #
+#    along with this program.  If not, see <https://www.gnu.org/licenses/>.  #
+#                                                                            #
+# ========================================================================== #
+case $1 in
+    short)
+    python3 /etc/kvmd/custom_atx/usbrelay_hid.py 1 on
+    sleep 1
+    python3 /etc/kvmd/custom_atx/usbrelay_hid.py 1 off
+    ;;
+    long)
+    python3 /etc/kvmd/custom_atx/usbrelay_hid.py 1 on
+    sleep 5
+    python3 /etc/kvmd/custom_atx/usbrelay_hid.py 1 off
+    ;;
+    reset)
+    python3 /etc/kvmd/custom_atx/usbrelay_hid.py 2 on
+    sleep 1
+    python3 /etc/kvmd/custom_atx/usbrelay_hid.py 2 off
+    ;;
+    *)
+    echo "No thing."
+esac

configs/kvmd/htpasswd

@@ -0,0 +1 @@
+admin:$apr1$.6mu9N8n$xOuGesr4JZZkdiZo/j318.

configs/kvmd/ipmipasswd

@@ -0,0 +1,14 @@
+# This file describes the credentials for IPMI users. The first pair separated by colon
+# is the login and password with which the user can access to IPMI. The second pair
+# is the name and password with which the user can access to KVMD API. The arrow is used
+# as a separator and shows the direction of user registration in the system.
+#
+# WARNING! IPMI protocol is completely unsafe by design. In short, the authentication
+# process for IPMI 2.0 mandates that the server send a salted SHA1 or MD5 hash of the
+# requested user's password to the client, prior to the client authenticating. Never use
+# the same passwords for KVMD and IPMI users. This default configuration is shown here
+# for example only.
+#
+# And even better not to use IPMI. Instead, you can directly use KVMD API via curl.
+
+admin:admin -> admin:admin

configs/kvmd/kvm_input.sh

@@ -0,0 +1,32 @@
+#!/bin/bash
+# Written by @srepac   FILENAME:  input.sh
+# Input switcher script for use with KVM switches that use CTRL+CTRL+#
+# ... pass in # into the script
+#
+usage() {
+  echo "usage: $0 <#> <pikvm-name-or-ip>        where # is the input number on the KVM switch"
+  exit 1
+}
+password=admin
+
+#HOTKEY="ScrollLock"
+HOTKEY="ControlLeft"
+
+if [[ "$1" == "" ]]; then
+  usage
+else
+  NUM="$1"
+fi
+
+if [[ "$2" == "" ]]; then
+  IP="localhost"
+else
+  IP="$2"
+fi
+
+OSD=$( echo $HOTKEY | sed -e 's/ControlLeft/CTRL/g' )
+echo "Sending $OSD + $OSD + $NUM to $IP"
+
+curl -X POST -k -u admin:$password "https://$IP/api/hid/events/send_key?key=$HOTKEY" 2> /dev/null
+curl -X POST -k -u admin:$password "https://$IP/api/hid/events/send_key?key=$HOTKEY" 2> /dev/null
+curl -X POST -k -u admin:$password "https://$IP/api/hid/events/send_key?key=Digit${NUM}" 2> /dev/null

configs/kvmd/logging.yaml

@@ -0,0 +1,20 @@
+version: 1
+disable_existing_loggers: false
+
+formatters:
+    console:
+        (): logging.Formatter
+        style: "{"
+        format: "{name:30.30} {levelname:>7} --- {message}"
+
+handlers:
+    console:
+        level: DEBUG
+        class: logging.StreamHandler
+        stream: ext://sys.stderr
+        formatter: console
+
+root:
+    level: INFO
+    handlers:
+        - console

configs/kvmd/main.yaml

@@ -11,19 +11,17 @@ kvmd:
 
     hid:
         type: otg
-        mouse_alt:
-            device: /dev/kvmd-hid-mouse-alt
 
     atx:
-        type: disabled
+        type: gpio
 
     msd:
-        type: otg
+        type: disabled
 
     streamer:
         quality: 0
         resolution:
-            default: 1280x720
+            default: 1920x1080
             available:
                 - 1920x1080
                 - 1600x1200
@@ -44,7 +42,6 @@ kvmd:
             - "--resolution={resolution}"
             - "--desired-fps={desired_fps}"
             - "--drop-same-frames=30"
-            - "--last-as-blank=0"
             - "--unix={unix}"
             - "--unix-rm"
             - "--unix-mode=0660"
@@ -52,8 +49,8 @@ kvmd:
             - "--process-name-prefix={process_name_prefix}"
             - "--notify-parent"
             - "--no-log-colors"
-            - "--sink=kvmd::ustreamer::jpeg"
-            - "--sink-mode=0660"
+            - "--jpeg-sink=kvmd::ustreamer::jpeg"
+            - "--jpeg-sink-mode=0660"
 
 
 vnc:

configs/kvmd/main/v4plus-hdmi-rpi4.yaml

@@ -0,0 +1,100 @@
+# Don't touch this file otherwise your device may stop working.
+# Use override.yaml to modify required settings.
+# You can find a working configuration in /usr/share/kvmd/configs.default/kvmd.
+
+override: !include [override.d, override.yaml]
+
+logging: !include logging.yaml
+
+kvmd:
+    auth: !include auth.yaml
+
+    info:
+        hw:
+            ignore_past: true
+        fan:
+            unix: /run/kvmd/fan.sock
+
+    hid:
+        type: otg
+        mouse_alt:
+            device: /dev/kvmd-hid-mouse-alt
+
+    atx:
+        type: gpio
+        power_led_pin: 4
+        hdd_led_pin: 5
+        power_switch_pin: 23
+        reset_switch_pin: 27
+
+    msd:
+        type: otg
+
+    streamer:
+        h264_bitrate:
+            default: 5000
+        cmd:
+            - "/usr/bin/ustreamer"
+            - "--device=/dev/kvmd-video"
+            - "--persistent"
+            - "--dv-timings"
+            - "--format=uyvy"
+            - "--format-swap-rgb"
+            - "--buffers=8"
+            - "--encoder=m2m-image"
+            - "--workers=3"
+            - "--quality={quality}"
+            - "--desired-fps={desired_fps}"
+            - "--drop-same-frames=30"
+            - "--unix={unix}"
+            - "--unix-rm"
+            - "--unix-mode=0660"
+            - "--exit-on-parent-death"
+            - "--process-name-prefix={process_name_prefix}"
+            - "--notify-parent"
+            - "--no-log-colors"
+            - "--jpeg-sink=kvmd::ustreamer::jpeg"
+            - "--jpeg-sink-mode=0660"
+            - "--h264-sink=kvmd::ustreamer::h264"
+            - "--h264-sink-mode=0660"
+            - "--h264-bitrate={h264_bitrate}"
+            - "--h264-gop={h264_gop}"
+
+    gpio:
+        drivers:
+            __v4_locator__:
+                type: locator
+
+        scheme:
+            __v3_usb_breaker__:
+                pin: 22
+                mode: output
+                initial: true
+                pulse: false
+
+            __v4_locator__:
+                driver: __v4_locator__
+                pin: 12
+                mode: output
+                pulse: false
+
+            __v4_const1__:
+                pin: 6
+                mode: output
+                initial: false
+                switch: false
+                pulse: false
+
+
+media:
+    memsink:
+        h264:
+            sink: "kvmd::ustreamer::h264"
+
+
+vnc:
+    memsink:
+        jpeg:
+            sink: "kvmd::ustreamer::jpeg"
+        h264:
+            sink: "kvmd::ustreamer::h264"

configs/kvmd/meta.yaml

@@ -0,0 +1,14 @@
+# You can write down any information and it will be available
+# at the address /api/info (if you use default nginx config).
+# If server.host (str) will be defined then this value
+# will be displayed in the web interface.
+
+server:
+    host: localhost.localdomain
+
+kvm: {
+    base_on: PiKVM,
+    app_name: One-KVM,
+    main_version: 241204,
+    author: SilentWind
+}

configs/kvmd/override.yaml

@@ -0,0 +1,176 @@
+kvmd:
+    auth:
+        enabled: true
+
+    atx:
+        type: disabled
+
+    hid:
+        type: ch9329
+        device: /dev/ttyUSB0
+        speed: 9600
+        read_timeout: 0.3
+
+        jiggler:
+            active: false
+            enabled: true
+
+        mouse_alt:
+            device: /dev/kvmd-hid-mouse-alt
+
+    msd:
+        #type: otg
+        remount_cmd: /bin/true
+        msd_path: /var/lib/kvmd/msd
+        normalfiles_path: NormalFiles
+        normalfiles_size: 256
+
+    ocr:
+        langs:
+            - eng
+            - chi_sim
+
+    streamer:
+        resolution:
+            default: 1920x1080
+
+        forever: true
+
+        desired_fps:
+            default: 30
+            max: 60
+
+        h264_bitrate:
+            default: 8000
+
+        cmd:
+            - "/usr/bin/ustreamer"
+            - "--device=/dev/video0"
+            - "--persistent"
+            - "--format=mjpeg"
+            - "--encoder=LIBX264-VIDEO"
+            - "--resolution={resolution}"
+            - "--desired-fps={desired_fps}"
+            - "--drop-same-frames=30"
+            - "--last-as-blank=0"
+            - "--unix={unix}"
+            - "--unix-rm"
+            - "--unix-mode=0666"
+            - "--exit-on-parent-death"
+            - "--process-name-prefix={process_name_prefix}"
+            - "--notify-parent"
+            - "--no-log-colors"
+            - "--h264-sink=kvmd::ustreamer::h264"
+            - "--h264-sink-mode=0660"
+            - "--jpeg-sink=kvmd::ustreamer::jpeg"
+            - "--jpeg-sink-mode=0660"
+            - "--h264-bitrate={h264_bitrate}"
+            - "--h264-gop={h264_gop}"
+            - "--h264-preset=ultrafast"
+            - "--slowdown"
+    gpio:
+        drivers:
+            wol_server1:
+                type: wol
+                mac: 2c:56:dc:db:7c:1e
+            short_press:
+                type: cmd
+                cmd: [/etc/kvmd/atx.sh, short]
+            long_press:
+                type: cmd
+                cmd: [/etc/kvmd/atx.sh, long]
+            reset_press:
+                type: cmd
+                cmd: [/etc/kvmd/atx.sh, reset]
+            input1:
+                type: cmd
+                cmd: [/etc/kvmd/kvm_input.sh, 1]    
+            input2:
+                type: cmd
+                cmd: [/etc/kvmd/kvm_input.sh, 2]
+        scheme:
+            wol_server1:
+                driver: wol_server1
+                pin: 0
+                mode: output
+                switch: false
+            short_button:
+                driver: short_press
+                pin: 0
+                mode: output
+                switch: false
+            long_button:
+                driver: long_press
+                pin: 0
+                mode: output
+                switch: false
+            reset_button:
+                driver: reset_press
+                pin: 0
+                mode: output
+                switch: false
+            input1-button:
+                driver: input1
+                pin: 0
+                mode: output
+                switch: false
+            input2-button:
+                driver: input2
+                pin: 0
+                mode: output
+                switch: false
+        view:
+            header:
+                title: 高级功能
+            table:
+                - ["#电源管理"]
+                - ["#短按（开/关机）:", short_button|按下]
+                - ["#长按（强制关机）:", long_button|按下]
+                - ["#重启:", reset_button|按下]
+                - []
+                - ["#网络唤醒"]
+                - ["#被控机设备", wol_server1|网络唤醒]
+                - []
+                - ["#KVM 切换"]
+                - ["#HDMI 1", input1-button|切换]
+                - ["#HDMI 2", input2-button|切换]
+
+
+vnc:
+    keymap: /usr/share/kvmd/keymaps/en-us
+    mouse_output: usb
+
+    auth:
+        vncauth:
+            enabled: true
+
+    memsink:
+        jpeg:
+            sink: "kvmd::ustreamer::jpeg"
+        h264:
+            sink: "kvmd::ustreamer::h264"
+
+media:
+    memsink:
+        h264:
+            sink: 'kvmd::ustreamer::h264'
+
+        jpeg:
+            sink: 'kvmd::ustreamer::jpeg'
+janus:
+    stun:
+        host: stun.cloudflare.com
+        port: 3478
+
+otgnet:
+    commands:
+        post_start_cmd:
+            - "/bin/true"
+        pre_stop_cmd:
+            - "/bin/true"
+
+nginx:
+    http:
+        port: 8080
+    https:
+        port: 4430

configs/kvmd/supervisord.conf

@@ -0,0 +1,66 @@
+[unix_http_server]
+file=/tmp/supervisor.sock
+
+[supervisord]
+nodaemon=true
+user=root
+
+[rpcinterface:supervisor]
+supervisor.rpcinterface_factory = supervisor.rpcinterface:make_main_rpcinterface
+
+[supervisorctl]
+serverurl=unix:///tmp/supervisor.sock
+
+[program:kvmd]
+command=python -m kvmd.apps.kvmd --run
+directory=/
+autostart=true
+autorestart=true
+priority=10
+stopasgroup=true
+stdout_logfile=/dev/stdout
+stdout_logfile_maxbytes = 0
+redirect_stderr=true
+
+[program:kvmd-janus]
+command=python -m kvmd.apps.janus --run
+autostart=true
+autorestart=true
+priority=13
+stopasgroup=true
+stdout_logfile=/dev/stdout
+stdout_logfile_maxbytes = 0
+redirect_stderr=true
+
+[program:kvmd-media]
+command=python -m kvmd.apps.media --run
+autostart=true
+autorestart=true
+priority=13
+stopasgroup=true
+stdout_logfile=/dev/stdout
+stdout_logfile_maxbytes = 0
+redirect_stderr=true
+
+[program:kvmd-nginx]
+command=nginx -c /etc/kvmd/nginx/nginx.conf -g 'daemon off;user root; error_log stderr;'
+autostart=true
+autorestart=true
+startsecs=10
+priority=100
+stopasgroup=true
+stdout_logfile=/dev/stdout
+stdout_logfile_maxbytes = 0
+redirect_stderr=true
+
+[program:clean_when_exit]
+command=/etc/kvmd/clean_when_exit.sh
+autostart=true
+autorestart=true
+startsecs=10
+priority=200
+stopasgroup=true
+stdout_logfile=/dev/stdout
+stdout_logfile_maxbytes = 0
+redirect_stderr=true
+

configs/kvmd/vncpasswd

@@ -0,0 +1,12 @@
+# This file describes the credentials for VNCAuth. The left part before arrow is a passphrase
+# for VNCAuth. The right part is username and password with which the user can access to KVMD API.
+# The arrow is used as a separator and shows the relationship of user registrations on the system.
+#
+# Never use the same passwords for VNC and IPMI users. This default configuration is shown here
+# for example only.
+#
+# If this file does not contain any entries, VNCAuth will be disabled and you will only be able
+# to login in using your KVMD username and password using VeNCrypt methods.
+
+# pa$$phr@se -> admin:password
+admin -> admin:admin

configs/kvmd/web.css

@@ -0,0 +1 @@
+/* Here you can customize the Web UI */

configs/nginx/certbot.ctx-server.conf

@@ -0,0 +1,5 @@
+location /.well-known/acme-challenge {
+	root /run/kvmd-certbot/webroot;
+	include /etc/kvmd/nginx/loc-nocache.conf;
+	auth_request off;
+}

configs/nginx/kvmd.ctx-http.conf

@@ -0,0 +1,7 @@
+upstream kvmd {
+	server unix:/run/kvmd/kvmd.sock fail_timeout=0s max_fails=0;
+}
+
+upstream ustreamer {
+	server unix:/run/kvmd/ustreamer.sock fail_timeout=0s max_fails=0;
+}

configs/nginx/kvmd.ctx-server.conf

@@ -0,0 +1,131 @@
+absolute_redirect off;
+
+index index.html;
+
+auth_request /auth_check;
+
+location = /auth_check {
+	internal;
+	proxy_pass http://kvmd/auth/check;
+	proxy_pass_request_body off;
+	proxy_set_header Content-Length "";
+	auth_request off;
+}
+
+location / {
+	root /usr/share/kvmd/web;
+	include /etc/kvmd/nginx/loc-login.conf;
+	include /etc/kvmd/nginx/loc-nocache.conf;
+}
+
+location @login {
+	return 302 /login;
+}
+
+location /login {
+	root /usr/share/kvmd/web;
+	auth_request off;
+}
+
+location /share {
+	root /usr/share/kvmd/web;
+	include /etc/kvmd/nginx/loc-nocache.conf;
+	auth_request off;
+}
+
+location = /share/css/user.css {
+	alias /etc/kvmd/web.css;
+	auth_request off;
+}
+
+location = /favicon.ico {
+	alias /usr/share/kvmd/web/favicon.ico;
+	include /etc/kvmd/nginx/loc-nocache.conf;
+	auth_request off;
+}
+
+location = /robots.txt {
+	alias /usr/share/kvmd/web/robots.txt;
+	include /etc/kvmd/nginx/loc-nocache.conf;
+	auth_request off;
+}
+
+location /api/ws {
+	rewrite ^/api/ws$ /ws break;
+	rewrite ^/api/ws\?(.*)$ /ws?$1 break;
+	proxy_pass http://kvmd;
+	include /etc/kvmd/nginx/loc-proxy.conf;
+	include /etc/kvmd/nginx/loc-websocket.conf;
+	auth_request off;
+}
+
+location /api/hid/print {
+	rewrite ^/api/hid/print$ /hid/print break;
+	rewrite ^/api/hid/print\?(.*)$ /hid/print?$1 break;
+	proxy_pass http://kvmd;
+	include /etc/kvmd/nginx/loc-proxy.conf;
+	include /etc/kvmd/nginx/loc-bigpost.conf;
+	auth_request off;
+}
+
+location /api/msd/read {
+	rewrite ^/api/msd/read$ /msd/read break;
+	rewrite ^/api/msd/read\?(.*)$ /msd/read?$1 break;
+	proxy_pass http://kvmd;
+	include /etc/kvmd/nginx/loc-proxy.conf;
+	include /etc/kvmd/nginx/loc-nobuffering.conf;
+	proxy_read_timeout 7d;
+	auth_request off;
+}
+
+location /api/msd/write_remote {
+	rewrite ^/api/msd/write_remote$ /msd/write_remote break;
+	rewrite ^/api/msd/write_remote\?(.*)$ /msd/write_remote?$1 break;
+	proxy_pass http://kvmd;
+	include /etc/kvmd/nginx/loc-proxy.conf;
+	include /etc/kvmd/nginx/loc-nobuffering.conf;
+	proxy_read_timeout 7d;
+	auth_request off;
+}
+
+location /api/msd/write {
+	rewrite ^/api/msd/write$ /msd/write break;
+	rewrite ^/api/msd/write\?(.*)$ /msd/write?$1 break;
+	proxy_pass http://kvmd;
+	include /etc/kvmd/nginx/loc-proxy.conf;
+	include /etc/kvmd/nginx/loc-bigpost.conf;
+	auth_request off;
+}
+
+location /api/log {
+	rewrite ^/api/log$ /log break;
+	rewrite ^/api/log\?(.*)$ /log?$1 break;
+	proxy_pass http://kvmd;
+	include /etc/kvmd/nginx/loc-proxy.conf;
+	include /etc/kvmd/nginx/loc-nobuffering.conf;
+	proxy_read_timeout 7d;
+	auth_request off;
+}
+
+location /api {
+	rewrite ^/api$ / break;
+	rewrite ^/api/(.*)$ /$1 break;
+	proxy_pass http://kvmd;
+	include /etc/kvmd/nginx/loc-proxy.conf;
+	auth_request off;
+}
+
+location /streamer {
+	rewrite ^/streamer$ / break;
+	rewrite ^/streamer\?(.*)$ ?$1 break;
+	rewrite ^/streamer/(.*)$ /$1 break;
+	proxy_pass http://ustreamer;
+	include /etc/kvmd/nginx/loc-proxy.conf;
+	include /etc/kvmd/nginx/loc-nobuffering.conf;
+}
+
+location /redfish {
+	proxy_pass http://kvmd;
+	include /etc/kvmd/nginx/loc-proxy.conf;
+	auth_request off;
+}

configs/nginx/loc-bigpost.conf

@@ -0,0 +1,4 @@
+limit_rate 6250k;
+limit_rate_after 50k;
+client_max_body_size 0;
+proxy_request_buffering off;

configs/nginx/loc-login.conf

@@ -0,0 +1,2 @@
+error_page 401 = @login;
+error_page 403 = @login;

configs/nginx/loc-nobuffering.conf

@@ -0,0 +1,3 @@
+postpone_output 0;
+proxy_buffering off;
+proxy_ignore_headers X-Accel-Buffering;

configs/nginx/loc-nocache.conf

@@ -0,0 +1,2 @@
+add_header Cache-Control "no-store, no-cache, must-revalidate, proxy-revalidate, pre-check=0, post-check=0, max-age=0";
+expires -1;

configs/nginx/loc-proxy.conf

@@ -0,0 +1,6 @@
+proxy_set_header Host $host;
+proxy_set_header X-Real-IP $remote_addr;
+proxy_set_header X-Scheme $scheme;
+proxy_set_header X-Forwarded-Proto $scheme;
+proxy_set_header X-Forwarded-Port $server_port;
+proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

configs/nginx/loc-websocket.conf

@@ -0,0 +1,5 @@
+proxy_set_header Upgrade $http_upgrade;
+proxy_set_header Connection "upgrade";
+proxy_connect_timeout 7d;
+proxy_send_timeout 7d;
+proxy_read_timeout 7d;

configs/nginx/mime-types.conf

@@ -0,0 +1,912 @@
+types {
+	application/A2L					a2l;
+	application/AML					aml;
+	application/andrew-inset			ez;
+	application/ATF					atf;
+	application/ATFX				atfx;
+	application/ATXML				atxml;
+	application/atom+xml				atom;
+	application/atomcat+xml				atomcat;
+	application/atomdeleted+xml			atomdeleted;
+	application/atomsvc+xml				atomsvc;
+	application/auth-policy+xml			apxml;
+	application/bacnet-xdd+zip			xdd;
+	application/calendar+xml			xcs;
+	application/cbor				cbor;
+	application/cccex				c3ex;
+	application/ccmp+xml				ccmp;
+	application/ccxml+xml				ccxml;
+	application/CDFX+XML				cdfx;
+	application/cdmi-capability			cdmia;
+	application/cdmi-container			cdmic;
+	application/cdmi-domain				cdmid;
+	application/cdmi-object				cdmio;
+	application/cdmi-queue				cdmiq;
+	application/CEA					cea;
+	application/cellml+xml				cellml cml;
+	application/clue_info+xml			clue;
+	application/cms					cmsc;
+	application/cpl+xml				cpl;
+	application/csrattrs				csrattrs;
+	application/dash+xml				mpd;
+	application/dashdelta				mpdd;
+	application/davmount+xml			davmount;
+	application/DCD					dcd;
+	application/dicom				dcm;
+	application/DII					dii;
+	application/DIT					dit;
+	application/dskpp+xml				xmls;
+	application/dssc+der				dssc;
+	application/dssc+xml				xdssc;
+	application/dvcs				dvc;
+	application/ecmascript				es;
+	application/efi					efi;
+	application/emma+xml				emma;
+	application/emotionml+xml			emotionml;
+	application/epub+zip				epub;
+	application/exi					exi;
+	application/fastinfoset				finf;
+	application/fdt+xml				fdt;
+	application/font-tdpfr				pfr;
+	application/geo+json				geojson;
+	application/gml+xml				gml;
+	application/gzip				gz tgz;
+	application/hyperstudio				stk;
+	application/inkml+xml				ink inkml;
+	application/ipfix				ipfix;
+	application/its+xml				its;
+	application/javascript				js;
+	application/jrd+json				jrd;
+	application/json				json;
+	application/json-patch+json			json-patch;
+	application/ld+json				jsonld;
+	application/lgr+xml				lgr;
+	application/link-format				wlnk;
+	application/lost+xml				lostxml;
+	application/lostsync+xml			lostsyncxml;
+	application/LXF					lxf;
+	application/mac-binhex40			hqx;
+	application/mads+xml				mads;
+	application/marc				mrc;
+	application/marcxml+xml				mrcx;
+	application/mathematica				nb ma mb;
+	application/mathml+xml				mml;
+	application/mbox				mbox;
+	application/metalink4+xml			meta4;
+	application/mets+xml				mets;
+	application/MF4					mf4;
+	application/mmt-usd+xml				musd;
+	application/mods+xml				mods;
+	application/mp21				m21 mp21;
+	application/msword				doc;
+	application/mxf					mxf;
+	application/n-quads				nq;
+	application/n-triples				nt;
+	application/ocsp-request			orq;
+	application/ocsp-response			ors;
+	application/octet-stream		bin lha lzh exe class so dll img iso;
+	application/oda					oda;
+	application/ODX					odx;
+	application/oebps-package+xml			opf;
+	application/ogg					ogx;
+	application/oxps				oxps;
+	application/p2p-overlay+xml			relo;
+	application/pdf					pdf;
+	application/PDX					pdx;
+	application/pgp-encrypted			pgp;
+	application/pgp-signature			sig;
+	application/pkcs10				p10;
+	application/pkcs12				p12 pfx;
+	application/pkcs7-mime				p7m p7c;
+	application/pkcs7-signature			p7s;
+	application/pkcs8				p8;
+	application/pkix-cert				cer;
+	application/pkix-crl				crl;
+	application/pkix-pkipath			pkipath;
+	application/pkixcmp				pki;
+	application/pls+xml				pls;
+	application/postscript				ps eps ai;
+	application/provenance+xml			provx;
+	application/prs.cww				cw cww;
+	application/prs.hpub+zip			hpub;
+	application/prs.nprend				rnd rct;
+	application/prs.rdf-xml-crypt			rdf-crypt;
+	application/prs.xsf+xml				xsf;
+	application/pskc+xml				pskcxml;
+	application/rdf+xml				rdf;
+	application/route-apd+xml			rapd;
+	application/route-s-tsid+xml			sls;
+	application/route-usd+xml			rusd;
+	application/reginfo+xml				rif;
+	application/relax-ng-compact-syntax		rnc;
+	application/resource-lists-diff+xml		rld;
+	application/resource-lists+xml			rl;
+	application/rfc+xml				rfcxml;
+	application/rls-services+xml			rs;
+	application/rpki-ghostbusters			gbr;
+	application/rpki-manifest			mft;
+	application/rpki-roa				roa;
+	application/rtf					rtf;
+	application/scim+json				scim;
+	application/scvp-cv-request			scq;
+	application/scvp-cv-response			scs;
+	application/scvp-vp-request			spq;
+	application/scvp-vp-response			spp;
+	application/sdp					sdp;
+	application/sgml-open-catalog			soc;
+	application/shf+xml				shf;
+	application/sieve				siv sieve;
+	application/simple-filter+xml			cl;
+	application/smil+xml				smil smi sml;
+	application/sparql-query			rq;
+	application/sparql-results+xml			srx;
+	application/sql					sql;
+	application/srgs				gram;
+	application/srgs+xml				grxml;
+	application/sru+xml				sru;
+	application/ssml+xml				ssml;
+	application/tamp-apex-update			tau;
+	application/tamp-apex-update-confirm		auc;
+	application/tamp-community-update		tcu;
+	application/tamp-community-update-confirm	cuc;
+	application/tamp-error				ter;
+	application/tamp-sequence-adjust		tsa;
+	application/tamp-sequence-adjust-confirm	sac;
+	application/tamp-update				tur;
+	application/tamp-update-confirm			tuc;
+	application/tei+xml				tei teiCorpus odd;
+	application/thraud+xml				tfi;
+	application/timestamp-query			tsq;
+	application/timestamp-reply			tsr;
+	application/timestamped-data			tsd;
+	application/trig				trig;
+	application/ttml+xml				ttml;
+	application/urc-grpsheet+xml			gsheet;
+	application/urc-ressheet+xml			rsheet;
+	application/urc-targetdesc+xml			td;
+	application/urc-uisocketdesc+xml		uis;
+	application/vnd.1000minds.decision-model+xml	1km;
+	application/vnd.3gpp.pic-bw-large		plb;
+	application/vnd.3gpp.pic-bw-small		psb;
+	application/vnd.3gpp.pic-bw-var			pvb;
+	application/vnd.3gpp2.sms			sms;
+	application/vnd.3gpp2.tcap			tcap;
+	application/vnd.3lightssoftware.imagescal	imgcal;
+	application/vnd.3M.Post-it-Notes		pwn;
+	application/vnd.accpac.simply.aso		aso;
+	application/vnd.accpac.simply.imp		imp;
+	application/vnd.acucobol			acu;
+	application/vnd.acucorp				atc acutc;
+	application/vnd.adobe.flash.movie		swf;
+	application/vnd.adobe.formscentral.fcdt		fcdt;
+	application/vnd.adobe.fxp			fxp fxpl;
+	application/vnd.adobe.xdp+xml			xdp;
+	application/vnd.adobe.xfdf			xfdf;
+	application/vnd.ahead.space			ahead;
+	application/vnd.airzip.filesecure.azf		azf;
+	application/vnd.airzip.filesecure.azs		azs;
+	application/vnd.amazon.mobi8-ebook		azw3;
+	application/vnd.americandynamics.acc		acc;
+	application/vnd.amiga.ami			ami;
+	application/vnd.anki				apkg;
+	application/vnd.anser-web-certificate-issue-initiation	cii;
+	application/vnd.anser-web-funds-transfer-initiation	fti;
+	application/vnd.apple.installer+xml		dist distz pkg mpkg;
+	application/vnd.apple.mpegurl			m3u8;
+	application/vnd.aristanetworks.swi		swi;
+	application/vnd.astraea-software.iota		iota;
+	application/vnd.audiograph			aep;
+	application/vnd.autopackage			package;
+	application/vnd.balsamiq.bmml+xml		bmml;
+	application/vnd.balsamiq.bmpr			bmpr;
+	application/vnd.blueice.multipass		mpm;
+	application/vnd.bluetooth.ep.oob		ep;
+	application/vnd.bluetooth.le.oob		le;
+	application/vnd.bmi				bmi;
+	application/vnd.businessobjects			rep;
+	application/vnd.cendio.thinlinc.clientconf	tlclient;
+	application/vnd.chemdraw+xml			cdxml;
+	application/vnd.chess-pgn			pgn;
+	application/vnd.chipnuts.karaoke-mmd		mmd;
+	application/vnd.cinderella			cdy;
+	application/vnd.citationstyles.style+xml	csl;
+	application/vnd.claymore			cla;
+	application/vnd.cloanto.rp9			rp9;
+	application/vnd.clonk.c4group			c4g c4d c4f c4p c4u;
+	application/vnd.cluetrust.cartomobile-config	c11amc;
+	application/vnd.cluetrust.cartomobile-config-pkg	c11amz;
+	application/vnd.coffeescript			coffee;
+	application/vnd.comicbook+zip			cbz;
+	application/vnd.commerce-battelle	ica icf icd ic0 ic1 ic2 ic3 ic4 ic5 ic6 ic7 ic8;
+	application/vnd.commonspace			csp cst;
+	application/vnd.contact.cmsg			cdbcmsg;
+	application/vnd.coreos.ignition+json		ign ignition;
+	application/vnd.cosmocaller			cmc;
+	application/vnd.crick.clicker			clkx;
+	application/vnd.crick.clicker.keyboard		clkk;
+	application/vnd.crick.clicker.palette		clkp;
+	application/vnd.crick.clicker.template		clkt;
+	application/vnd.crick.clicker.wordbank		clkw;
+	application/vnd.criticaltools.wbs+xml		wbs;
+	application/vnd.ctc-posml			pml;
+	application/vnd.cups-ppd			ppd;
+	application/vnd.curl				curl;
+	application/vnd.dart				dart;
+	application/vnd.data-vision.rdz			rdz;
+	application/vnd.debian.binary-package		deb udeb;
+	application/vnd.dece.data			uvf uvvf uvd uvvd;
+	application/vnd.dece.ttml+xml			uvt uvvt;
+	application/vnd.dece.unspecified		uvx uvvx;
+	application/vnd.dece.zip			uvz uvvz;
+	application/vnd.denovo.fcselayout-link		fe_launch;
+	application/vnd.desmume.movie			dsm;
+	application/vnd.dna				dna;
+	application/vnd.document+json			docjson;
+	application/vnd.doremir.scorecloud-binary-document	scld;
+	application/vnd.dpgraph				dpg mwc dpgraph;
+	application/vnd.dreamfactory			dfac;
+	application/vnd.dtg.local.flash			fla;
+	application/vnd.dvb.ait				ait;
+	application/vnd.dvb.service			svc;
+	application/vnd.dynageo				geo;
+	application/vnd.dzr				dzr;
+	application/vnd.ecowin.chart			mag;
+	application/vnd.enliven				nml;
+	application/vnd.epson.esf			esf;
+	application/vnd.epson.msf			msf;
+	application/vnd.epson.quickanime		qam;
+	application/vnd.epson.salt			slt;
+	application/vnd.epson.ssf			ssf;
+	application/vnd.ericsson.quickcall		qcall qca;
+	application/vnd.espass-espass+zip		espass;
+	application/vnd.eszigno3+xml			es3 et3;
+	application/vnd.etsi.asic-e+zip			asice sce;
+	application/vnd.etsi.asic-s+zip			asics;
+	application/vnd.etsi.timestamp-token		tst;
+	application/vnd.evolv.ecig.profile		ecigprofile;
+	application/vnd.evolv.ecig.settings		ecig;
+	application/vnd.evolv.ecig.theme		ecigtheme;
+	application/vnd.ezpix-album			ez2;
+	application/vnd.ezpix-package			ez3;
+	application/vnd.fastcopy-disk-image		dim;
+	application/vnd.fdf				fdf;
+	application/vnd.fdsn.mseed			msd mseed;
+	application/vnd.fdsn.seed			seed dataless;
+	application/vnd.filmit.zfc			zfc;
+	application/vnd.FloGraphIt			gph;
+	application/vnd.fluxtime.clip			ftc;
+	application/vnd.font-fontforge-sfd		sfd;
+	application/vnd.framemaker			fm;
+	application/vnd.frogans.fnc			fnc;
+	application/vnd.frogans.ltf			ltf;
+	application/vnd.fsc.weblaunch			fsc;
+	application/vnd.fujitsu.oasys			oas;
+	application/vnd.fujitsu.oasys2			oa2;
+	application/vnd.fujitsu.oasys3			oa3;
+	application/vnd.fujitsu.oasysgp			fg5;
+	application/vnd.fujitsu.oasysprs		bh2;
+	application/vnd.fujixerox.ddd			ddd;
+	application/vnd.fujixerox.docuworks		xdw;
+	application/vnd.fujixerox.docuworks.binder	xbd;
+	application/vnd.fujixerox.docuworks.container	xct;
+	application/vnd.fuzzysheet			fzs;
+	application/vnd.genomatix.tuxedo		txd;
+	application/vnd.geocube+xml			g3 g³;
+	application/vnd.geogebra.file			ggb;
+	application/vnd.geogebra.tool			ggt;
+	application/vnd.geometry-explorer		gex gre;
+	application/vnd.geonext				gxt;
+	application/vnd.geoplan				g2w;
+	application/vnd.geospace			g3w;
+	application/vnd.gmx				gmx;
+	application/vnd.google-earth.kml+xml		kml;
+	application/vnd.google-earth.kmz		kmz;
+	application/vnd.grafeq				gqf gqs;
+	application/vnd.groove-account			gac;
+	application/vnd.groove-help			ghf;
+	application/vnd.groove-identity-message		gim;
+	application/vnd.groove-injector			grv;
+	application/vnd.groove-tool-message		gtm;
+	application/vnd.groove-tool-template		tpl;
+	application/vnd.groove-vcard			vcg;
+	application/vnd.hal+xml				hal;
+	application/vnd.HandHeld-Entertainment+xml	zmm;
+	application/vnd.hbci				hbci hbc kom upa pkd bpd;
+	application/vnd.hdt				hdt;
+	application/vnd.hhe.lesson-player		les;
+	application/vnd.hp-HPGL				hpgl;
+	application/vnd.hp-hpid				hpi hpid;
+	application/vnd.hp-hps				hps;
+	application/vnd.hp-jlyt				jlt;
+	application/vnd.hp-PCL				pcl;
+	application/vnd.hydrostatix.sof-data		sfd-hdstx;
+	application/vnd.hzn-3d-crossword		x3d;
+	application/vnd.ibm.electronic-media		emm;
+	application/vnd.ibm.MiniPay			mpy;
+	application/vnd.ibm.modcap			list3820 listafp afp pseg3820;
+	application/vnd.ibm.rights-management		irm;
+	application/vnd.ibm.secure-container		sc;
+	application/vnd.iccprofile			icc icm;
+	application/vnd.ieee.1905			1905.1;
+	application/vnd.igloader			igl;
+	application/vnd.imagemeter.folder+zip		imf;
+	application/vnd.imagemeter.image+zip		imi;
+	application/vnd.immervision-ivp			ivp;
+	application/vnd.immervision-ivu			ivu;
+	application/vnd.ims.imsccv1p1			imscc;
+	application/vnd.insors.igm			igm;
+	application/vnd.intercon.formnet		xpw xpx;
+	application/vnd.intergeo			i2g;
+	application/vnd.intu.qbo			qbo;
+	application/vnd.intu.qfx			qfx;
+	application/vnd.ipunplugged.rcprofile		rcprofile;
+	application/vnd.irepository.package+xml		irp;
+	application/vnd.is-xpr				xpr;
+	application/vnd.isac.fcs			fcs;
+	application/vnd.jam				jam;
+	application/vnd.jcp.javame.midlet-rms		rms;
+	application/vnd.jisp				jisp;
+	application/vnd.joost.joda-archive		joda;
+	application/vnd.kahootz				ktz ktr;
+	application/vnd.kde.karbon			karbon;
+	application/vnd.kde.kchart			chrt;
+	application/vnd.kde.kformula			kfo;
+	application/vnd.kde.kivio			flw;
+	application/vnd.kde.kontour			kon;
+	application/vnd.kde.kpresenter			kpr kpt;
+	application/vnd.kde.kspread			ksp;
+	application/vnd.kde.kword			kwd kwt;
+	application/vnd.kenameaapp			htke;
+	application/vnd.kidspiration			kia;
+	application/vnd.Kinar				kne knp sdf;
+	application/vnd.koan				skp skd skm skt;
+	application/vnd.kodak-descriptor		sse;
+	application/vnd.las.las+json			lasjson;
+	application/vnd.las.las+xml			lasxml;
+	application/vnd.llamagraphics.life-balance.desktop	lbd;
+	application/vnd.llamagraphics.life-balance.exchange+xml	lbe;
+	application/vnd.lotus-1-2-3			123 wk4 wk3 wk1;
+	application/vnd.lotus-approach			apr vew;
+	application/vnd.lotus-freelance			prz pre;
+	application/vnd.lotus-notes			nsf ntf ndl ns4 ns3 ns2 nsh nsg;
+	application/vnd.lotus-organizer			or3 or2 org;
+	application/vnd.lotus-screencam			scm;
+	application/vnd.lotus-wordpro			lwp sam;
+	application/vnd.macports.portpkg		portpkg;
+	application/vnd.mapbox-vector-tile		mvt;
+	application/vnd.marlin.drm.mdcf			mdc;
+	application/vnd.maxmind.maxmind-db		mmdb;
+	application/vnd.mcd				mcd;
+	application/vnd.medcalcdata			mc1;
+	application/vnd.mediastation.cdkey		cdkey;
+	application/vnd.MFER				mwf;
+	application/vnd.mfmp				mfm;
+	application/vnd.micrografx.flo			flo;
+	application/vnd.micrografx.igx			igx;
+	application/vnd.mif				mif;
+	application/vnd.Mobius.DAF			daf;
+	application/vnd.Mobius.DIS			dis;
+	application/vnd.Mobius.MBK			mbk;
+	application/vnd.Mobius.MQY			mqy;
+	application/vnd.Mobius.MSL			msl;
+	application/vnd.Mobius.PLC			plc;
+	application/vnd.Mobius.TXF			txf;
+	application/vnd.mophun.application		mpn;
+	application/vnd.mophun.certificate		mpc;
+	application/vnd.mozilla.xul+xml			xul;
+	application/vnd.ms-3mfdocument			3mf;
+	application/vnd.ms-artgalry			cil;
+	application/vnd.ms-asf				asf;
+	application/vnd.ms-cab-compressed		cab;
+	application/vnd.ms-excel			xls xlm xla xlc xlt xlw;
+	application/vnd.ms-excel.template.macroEnabled.12	xltm;
+	application/vnd.ms-excel.addin.macroEnabled.12	xlam;
+	application/vnd.ms-excel.sheet.binary.macroEnabled.12	xlsb;
+	application/vnd.ms-excel.sheet.macroEnabled.12	xlsm;
+	application/vnd.ms-fontobject			eot;
+	application/vnd.ms-htmlhelp			chm;
+	application/vnd.ms-ims				ims;
+	application/vnd.ms-lrm				lrm;
+	application/vnd.ms-officetheme			thmx;
+	application/vnd.ms-powerpoint			ppt pps pot;
+	application/vnd.ms-powerpoint.addin.macroEnabled.12	ppam;
+	application/vnd.ms-powerpoint.presentation.macroEnabled.12	pptm;
+	application/vnd.ms-powerpoint.slide.macroEnabled.12	sldm;
+	application/vnd.ms-powerpoint.slideshow.macroEnabled.12	ppsm;
+	application/vnd.ms-powerpoint.template.macroEnabled.12	potm;
+	application/vnd.ms-project			mpp mpt;
+	application/vnd.ms-tnef				tnef tnf;
+	application/vnd.ms-word.document.macroEnabled.12	docm;
+	application/vnd.ms-word.template.macroEnabled.12	dotm;
+	application/vnd.ms-works			wcm wdb wks wps;
+	application/vnd.ms-wpl				wpl;
+	application/vnd.ms-xpsdocument			xps;
+	application/vnd.msa-disk-image			msa;
+	application/vnd.mseq				mseq;
+	application/vnd.multiad.creator			crtr;
+	application/vnd.multiad.creator.cif		cif;
+	application/vnd.musician			mus;
+	application/vnd.muvee.style			msty;
+	application/vnd.mynfc				taglet;
+	application/vnd.nervana				entity request bkm kcm;
+	application/vnd.nitf				nitf;
+	application/vnd.neurolanguage.nlu		nlu;
+	application/vnd.nintendo.nitro.rom		nds;
+	application/vnd.nintendo.snes.rom		sfc smc;
+	application/vnd.noblenet-directory		nnd;
+	application/vnd.noblenet-sealer			nns;
+	application/vnd.noblenet-web			nnw;
+	application/vnd.nokia.n-gage.ac+xml		ac;
+	application/vnd.nokia.n-gage.data		ngdat;
+	application/vnd.nokia.n-gage.symbian.install	n-gage;
+	application/vnd.nokia.radio-preset		rpst;
+	application/vnd.nokia.radio-presets		rpss;
+	application/vnd.novadigm.EDM			edm;
+	application/vnd.novadigm.EDX			edx;
+	application/vnd.novadigm.EXT			ext;
+	application/vnd.oasis.opendocument.chart			odc;
+	application/vnd.oasis.opendocument.chart-template		otc;
+	application/vnd.oasis.opendocument.database			odb;
+	application/vnd.oasis.opendocument.formula			odf;
+	application/vnd.oasis.opendocument.graphics			odg;
+	application/vnd.oasis.opendocument.graphics-template		otg;
+	application/vnd.oasis.opendocument.image			odi;
+	application/vnd.oasis.opendocument.image-template		oti;
+	application/vnd.oasis.opendocument.presentation			odp;
+	application/vnd.oasis.opendocument.presentation-template	otp;
+	application/vnd.oasis.opendocument.spreadsheet			ods;
+	application/vnd.oasis.opendocument.spreadsheet-template		ots;
+	application/vnd.oasis.opendocument.text				odt;
+	application/vnd.oasis.opendocument.text-master			odm;
+	application/vnd.oasis.opendocument.text-template		ott;
+	application/vnd.oasis.opendocument.text-web			oth;
+	application/vnd.olpc-sugar			xo;
+	application/vnd.oma.dd2+xml			dd2;
+	application/vnd.onepager			tam;
+	application/vnd.onepagertamp			tamp;
+	application/vnd.onepagertamx			tamx;
+	application/vnd.onepagertat			tat;
+	application/vnd.onepagertatp			tatp;
+	application/vnd.onepagertatx			tatx;
+	application/vnd.openblox.game+xml		obgx;
+	application/vnd.openblox.game-binary		obg;
+	application/vnd.openeye.oeb			oeb;
+	application/vnd.openofficeorg.extension		oxt;
+	application/vnd.openstreetmap.data+xml		osm;
+	application/vnd.openxmlformats-officedocument.presentationml.presentation pptx;
+	application/vnd.openxmlformats-officedocument.presentationml.slide	sldx;
+	application/vnd.openxmlformats-officedocument.presentationml.slideshow	ppsx;
+	application/vnd.openxmlformats-officedocument.presentationml.template	potx;
+	application/vnd.openxmlformats-officedocument.spreadsheetml.sheet	xlsx;
+	application/vnd.openxmlformats-officedocument.spreadsheetml.template	xltx;
+	application/vnd.openxmlformats-officedocument.wordprocessingml.document	docx;
+	application/vnd.openxmlformats-officedocument.wordprocessingml.template	dotx;
+	application/vnd.osa.netdeploy			ndc;
+	application/vnd.osgeo.mapguide.package		mgp;
+	application/vnd.osgi.dp				dp;
+	application/vnd.osgi.subsystem			esa;
+	application/vnd.oxli.countgraph			oxlicg;
+	application/vnd.palm				prc pdb pqa oprc;
+	application/vnd.panoply				plp;
+	application/vnd.pawaafile			paw;
+	application/vnd.pg.format			str;
+	application/vnd.pg.osasli			ei6;
+	application/vnd.piaccess.application-license	pil;
+	application/vnd.picsel				efif;
+	application/vnd.pmi.widget			wg;
+	application/vnd.pocketlearn			plf;
+	application/vnd.powerbuilder6			pbd;
+	application/vnd.preminet			preminet;
+	application/vnd.previewsystems.box		box vbox;
+	application/vnd.proteus.magazine		mgz;
+	application/vnd.publishare-delta-tree		qps;
+	application/vnd.pvi.ptid1			ptid;
+	application/vnd.qualcomm.brew-app-res		bar;
+	application/vnd.Quark.QuarkXPress		qxd qxt qwd qwt qxl qxb;
+	application/vnd.quobject-quoxdocument		quox quiz;
+	application/vnd.rainstor.data			tree;
+	application/vnd.rar				rar;
+	application/vnd.realvnc.bed			bed;
+	application/vnd.recordare.musicxml		mxl;
+	application/vnd.rig.cryptonote			cryptonote;
+	application/vnd.route66.link66+xml		link66;
+	application/vnd.sailingtracker.track		st;
+	application/vnd.scribus				scd sla slaz;
+	application/vnd.sealed.3df			s3df;
+	application/vnd.sealed.csf			scsf;
+	application/vnd.sealed.doc			sdoc sdo s1w;
+	application/vnd.sealed.eml			seml sem;
+	application/vnd.sealed.mht			smht smh;
+	application/vnd.sealed.ppt			sppt s1p;
+	application/vnd.sealed.tiff			stif;
+	application/vnd.sealed.xls			sxls sxl s1e;
+	application/vnd.sealedmedia.softseal.html	stml s1h;
+	application/vnd.sealedmedia.softseal.pdf	spdf spd s1a;
+	application/vnd.seemail				see;
+	application/vnd.sema				sema;
+	application/vnd.semd				semd;
+	application/vnd.semf				semf;
+	application/vnd.shana.informed.formdata		ifm;
+	application/vnd.shana.informed.formtemplate	itp;
+	application/vnd.shana.informed.interchange	iif;
+	application/vnd.shana.informed.package		ipk;
+	application/vnd.sigrok.session			sr;
+	application/vnd.SimTech-MindMapper		twd twds;
+	application/vnd.smaf				mmf;
+	application/vnd.smart.notebook			notebook;
+	application/vnd.smart.teacher			teacher;
+	application/vnd.software602.filler.form+xml	fo;
+	application/vnd.software602.filler.form-xml-zip	zfo;
+	application/vnd.solent.sdkm+xml			sdkm sdkd;
+	application/vnd.spotfire.dxp			dxp;
+	application/vnd.spotfire.sfs			sfs;
+	application/vnd.stepmania.package		smzip;
+	application/vnd.stepmania.stepchart		sm;
+	application/vnd.sun.wadl+xml			wadl;
+	application/vnd.sus-calendar			sus susp;
+	application/vnd.syncml+xml			xsm;
+	application/vnd.syncml.dm+wbxml			bdm;
+	application/vnd.syncml.dm+xml			xdm;
+	application/vnd.syncml.dmddf+xml		ddf;
+	application/vnd.tao.intent-module-archive	tao;
+	application/vnd.tcpdump.pcap			pcap cap dmp;
+	application/vnd.theqvd				qvd;
+	application/vnd.tml				vfr viaframe;
+	application/vnd.tmobile-livetv			tmo;
+	application/vnd.trid.tpt			tpt;
+	application/vnd.triscape.mxs			mxs;
+	application/vnd.trueapp				tra;
+	application/vnd.ufdl				ufdl ufd frm;
+	application/vnd.uiq.theme			utz;
+	application/vnd.umajin				umj;
+	application/vnd.unity				unityweb;
+	application/vnd.uoml+xml			uoml uo;
+	application/vnd.uri-map				urim urimap;
+	application/vnd.valve.source.material		vmt;
+	application/vnd.vcx				vcx;
+	application/vnd.vd-study			mxi study-inter model-inter;
+	application/vnd.vectorworks			vwx;
+	application/vnd.vidsoft.vidconference		vsc;
+	application/vnd.visio				vsd vst vsw vss;
+	application/vnd.visionary			vis;
+	application/vnd.vsf				vsf;
+	application/vnd.wap.sic				sic;
+	application/vnd.wap.slc				slc;
+	application/vnd.wap.wbxml			wbxml;
+	application/vnd.wap.wmlc			wmlc;
+	application/vnd.wap.wmlscriptc			wmlsc;
+	application/vnd.webturbo			wtb;
+	application/vnd.wfa.p2p				p2p;
+	application/vnd.wfa.wsc				wsc;
+	application/vnd.wmc				wmc;
+	application/vnd.wolfram.mathematica.package	m;
+	application/vnd.wolfram.player			nbp;
+	application/vnd.wordperfect			wpd;
+	application/vnd.wqd				wqd;
+	application/vnd.wt.stf				stf;
+	application/vnd.wv.csp+wbxml			wv;
+	application/vnd.xara				xar;
+	application/vnd.xfdl				xfdl xfd;
+	application/vnd.xmpie.cpkg			cpkg;
+	application/vnd.xmpie.dpkg			dpkg;
+	application/vnd.xmpie.ppkg			ppkg;
+	application/vnd.xmpie.xlim			xlim;
+	application/vnd.yamaha.hv-dic			hvd;
+	application/vnd.yamaha.hv-script		hvs;
+	application/vnd.yamaha.hv-voice			hvp;
+	application/vnd.yamaha.openscoreformat		osf;
+	application/vnd.yamaha.smaf-audio		saf;
+	application/vnd.yamaha.smaf-phrase		spf;
+	application/vnd.yaoweme				yme;
+	application/vnd.yellowriver-custom-menu		cmp;
+	application/vnd.zul				zir zirz;
+	application/vnd.zzazz.deck+xml			zaz;
+	application/voicexml+xml			vxml;
+	application/watcherinfo+xml			wif;
+	application/widget				wgt;
+	application/wsdl+xml				wsdl;
+	application/wspolicy+xml			wspolicy;
+	application/xcap-att+xml			xav;
+	application/xcap-caps+xml			xca;
+	application/xcap-diff+xml			xdf;
+	application/xcap-el+xml				xel;
+	application/xcap-error+xml			xer;
+	application/xcap-ns+xml				xns;
+	application/xhtml+xml				xhtml xhtm xht;
+	application/xml-dtd				dtd;
+	application/xop+xml				xop;
+	application/xslt+xml				xsl xslt;
+	application/xv+xml				mxml xhvml xvml xvm;
+	application/yang				yang;
+	application/yin+xml				yin;
+	application/zip					zip;
+	audio/32kadpcm					726;
+	audio/ac3					ac3;
+	audio/AMR					amr;
+	audio/AMR-WB					awb;
+	audio/asc					acn;
+	audio/ATRAC-ADVANCED-LOSSLESS			aal;
+	audio/ATRAC-X					atx;
+	audio/ATRAC3					at3 aa3 omg;
+	audio/basic					au snd;
+	audio/dls					dls;
+	audio/EVRC					evc;
+	audio/EVRCB					evb;
+	audio/EVRCNW					enw;
+	audio/EVRCWB					evw;
+	audio/iLBC					lbc;
+	audio/L16					l16;
+	audio/mobile-xmf				mxmf;
+	audio/mp4					m4a;
+	audio/mpeg					mp3 mpga mp1 mp2;
+	audio/ogg					oga ogg opus spx;
+	audio/prs.sid					sid psid;
+	audio/qcelp					qcp;
+	audio/SMV					smv;
+	audio/vnd.audikoz				koz;
+	audio/vnd.dece.audio				uva uvva;
+	audio/vnd.digital-winds				eol;
+	audio/vnd.dolby.mlp				mlp;
+	audio/vnd.dts					dts;
+	audio/vnd.dts.hd				dtshd;
+	audio/vnd.everad.plj				plj;
+	audio/vnd.lucent.voice				lvp;
+	audio/vnd.ms-playready.media.pya		pya;
+	audio/vnd.nortel.vbk				vbk;
+	audio/vnd.nuera.ecelp4800			ecelp4800;
+	audio/vnd.nuera.ecelp7470			ecelp7470;
+	audio/vnd.nuera.ecelp9600			ecelp9600;
+	audio/vnd.presonus.multitrack			multitrack;
+	audio/vnd.rip					rip;
+	audio/vnd.sealedmedia.softseal.mpeg		smp3 smp s1m;
+	font/collection					ttc;
+	font/otf					otf;
+	font/ttf					ttf;
+	font/woff					woff;
+	font/woff2					woff2;
+	image/bmp					bmp dib;
+	image/cgm					cgm;
+	image/dicom-rle					drle;
+	image/emf					emf;
+	image/fits					fits fit fts;
+	image/gif					gif;
+	image/ief					ief;
+	image/jls					jls;
+	image/jp2					jp2 jpg2;
+	image/jpeg					jpg jpeg jpe jfif;
+	image/jpm					jpm jpgm;
+	image/jpx					jpx jpf;
+	image/ktx					ktx;
+	image/png					png;
+	image/prs.btif					btif btf;
+	image/prs.pti					pti;
+	image/svg+xml					svg svgz;
+	image/t38					t38;
+	image/tiff					tiff tif;
+	image/tiff-fx					tfx;
+	image/vnd.adobe.photoshop			psd;
+	image/vnd.airzip.accelerator.azv		azv;
+	image/vnd.dece.graphic				uvi uvvi uvg uvvg;
+	image/vnd.djvu					djvu djv;
+	image/vnd.dwg					dwg;
+	image/vnd.dxf					dxf;
+	image/vnd.fastbidsheet				fbs;
+	image/vnd.fpx					fpx;
+	image/vnd.fst					fst;
+	image/vnd.fujixerox.edmics-mmr			mmr;
+	image/vnd.fujixerox.edmics-rlc			rlc;
+	image/vnd.globalgraphics.pgb			pgb;
+	image/vnd.microsoft.icon			ico;
+	image/vnd.mozilla.apng				apng;
+	image/vnd.ms-modi				mdi;
+	image/vnd.radiance				hdr rgbe xyze;
+	image/vnd.sealed.png				spng spn s1n;
+	image/vnd.sealedmedia.softseal.gif		sgif sgi s1g;
+	image/vnd.sealedmedia.softseal.jpg		sjpg sjp s1j;
+	image/vnd.tencent.tap				tap;
+	image/vnd.valve.source.texture			vtf;
+	image/vnd.wap.wbmp				wbmp;
+	image/vnd.xiff					xif;
+	image/vnd.zbrush.pcx				pcx;
+	image/wmf					wmf;
+	message/global					u8msg;
+	message/global-delivery-status			u8dsn;
+	message/global-disposition-notification		u8mdn;
+	message/global-headers				u8hdr;
+	message/rfc822					eml mail art;
+	model/gltf+json					gltf;
+	model/iges					igs iges;
+	model/mesh					msh mesh silo;
+	model/vnd.collada+xml				dae;
+	model/vnd.dwf					dwf;
+	model/vnd.gdl					gdl gsm win dor lmp rsm msm ism;
+	model/vnd.gtw					gtw;
+	model/vnd.moml+xml				moml;
+	model/vnd.mts					mts;
+	model/vnd.opengex				ogex;
+	model/vnd.parasolid.transmit.binary		x_b xmt_bin;
+	model/vnd.parasolid.transmit.text		x_t xmt_txt;
+	model/vnd.valve.source.compiled-map		bsp;
+	model/vnd.vtu					vtu;
+	model/vrml					wrl vrml;
+	model/x3d+xml					x3db;
+	model/x3d-vrml					x3dv x3dvz;
+	multipart/vnd.bint.med-plus			bmed;
+	multipart/voice-message				vpm;
+	text/cache-manifest				appcache manifest;
+	text/calendar					ics ifb;
+	text/css					css;
+	text/csv					csv;
+	text/csv-schema					csvs;
+	text/dns					soa zone;
+	text/html					html htm;
+	text/jcr-cnd					cnd;
+	text/markdown					markdown md;
+	text/mizar					miz;
+	text/n3						n3;
+	text/plain		txt asc text pm el c h cc hh cxx hxx f90 conf log;
+	text/provenance-notation			provn;
+	text/prs.fallenstein.rst			rst;
+	text/prs.lines.tag				tag dsc;
+	text/richtext					rtx;
+	text/sgml					sgml sgm;
+	text/tab-separated-values			tsv;
+	text/troff					t tr roff;
+	text/turtle					ttl;
+	text/uri-list					uris uri;
+	text/vcard					vcf vcard;
+	text/vnd.a					a;
+	text/vnd.abc					abc;
+	text/vnd.ascii-art				ascii;
+	text/vnd.debian.copyright			copyright;
+	text/vnd.DMClientScript				dms;
+	text/vnd.dvb.subtitle				sub;
+	text/vnd.esmertec.theme-descriptor		jtd;
+	text/vnd.fly					fly;
+	text/vnd.fmi.flexstor				flx;
+	text/vnd.graphviz				gv dot;
+	text/vnd.in3d.3dml				3dml 3dm;
+	text/vnd.in3d.spot				spot spo;
+	text/vnd.ms-mediapackage			mpf;
+	text/vnd.net2phone.commcenter.command		ccc;
+	text/vnd.si.uricatalogue			uric;
+	text/vnd.sun.j2me.app-descriptor		jad;
+	text/vnd.trolltech.linguist			ts;
+	text/vnd.wap.si					si;
+	text/vnd.wap.sl					sl;
+	text/vnd.wap.wml				wml;
+	text/vnd.wap.wmlscript				wmls;
+	text/xml					xml xsd rng;
+	text/xml-external-parsed-entity			ent;
+	video/3gpp					3gp 3gpp;
+	video/3gpp2					3g2 3gpp2;
+	video/iso.segment				m4s;
+	video/mj2					mj2 mjp2;
+	video/mp4					mp4 mpg4 m4v;
+	video/mpeg					mpeg mpg mpe m1v m2v;
+	video/ogg					ogv;
+	video/quicktime					mov qt;
+	video/vnd.dece.hd				uvh uvvh;
+	video/vnd.dece.mobile				uvm uvvm;
+	video/vnd.dece.mp4				uvu uvvu;
+	video/vnd.dece.pd				uvp uvvp;
+	video/vnd.dece.sd				uvs uvvs;
+	video/vnd.dece.video				uvv uvvv;
+	video/vnd.dvb.file				dvb;
+	video/vnd.fvt					fvt;
+	video/vnd.mpegurl				mxu m4u;
+	video/vnd.ms-playready.media.pyv		pyv;
+	video/vnd.nokia.interleaved-multimedia		nim;
+	video/vnd.radgamettools.bink			bik bk2;
+	video/vnd.radgamettools.smacker			smk;
+	video/vnd.sealed.mpeg1				smpg s11;
+	video/vnd.sealed.mpeg4				s14;
+	video/vnd.sealed.swf				sswf ssw;
+	video/vnd.sealedmedia.softseal.mov		smov smo s1q;
+	video/vnd.vivo					viv;
+	application/mac-compactpro			cpt;
+	application/metalink+xml			metalink;
+	application/owl+xml				owx;
+	application/rss+xml				rss;
+	application/vnd.android.package-archive		apk;
+	application/vnd.oma.dd+xml			dd;
+	application/vnd.oma.drm.content			dcf;
+	application/vnd.oma.drm.dcf			o4a o4v;
+	application/vnd.oma.drm.message			dm;
+	application/vnd.oma.drm.rights+wbxml		drc;
+	application/vnd.oma.drm.rights+xml		dr;
+	application/vnd.sun.xml.calc			sxc;
+	application/vnd.sun.xml.calc.template		stc;
+	application/vnd.sun.xml.draw			sxd;
+	application/vnd.sun.xml.draw.template		std;
+	application/vnd.sun.xml.impress			sxi;
+	application/vnd.sun.xml.impress.template	sti;
+	application/vnd.sun.xml.math			sxm;
+	application/vnd.sun.xml.writer			sxw;
+	application/vnd.sun.xml.writer.global		sxg;
+	application/vnd.sun.xml.writer.template		stw;
+	application/vnd.symbian.install			sis;
+	application/vnd.wap.mms-message			mms;
+	application/x-annodex				anx;
+	application/x-bcpio				bcpio;
+	application/x-bittorrent			torrent;
+	application/x-bzip2				bz2;
+	application/x-cdlink				vcd;
+	application/x-chrome-extension			crx;
+	application/x-cpio				cpio;
+	application/x-csh				csh;
+	application/x-director				dcr dir dxr;
+	application/x-dvi				dvi;
+	application/x-futuresplash			spl;
+	application/x-gtar				gtar;
+	application/x-hdf				hdf;
+	application/x-java-archive			jar;
+	application/x-java-jnlp-file			jnlp;
+	application/x-java-pack200			pack;
+	application/x-killustrator			kil;
+	application/x-latex				latex;
+	application/x-netcdf				nc cdf;
+	application/x-perl				pl;
+	application/x-rpm				rpm;
+	application/x-sh				sh;
+	application/x-shar				shar;
+	application/x-stuffit				sit;
+	application/x-sv4cpio				sv4cpio;
+	application/x-sv4crc				sv4crc;
+	application/x-tar				tar;
+	application/x-tcl				tcl;
+	application/x-tex				tex;
+	application/x-texinfo				texinfo texi;
+	application/x-troff-man				man 1 2 3 4 5 6 7 8;
+	application/x-troff-me				me;
+	application/x-troff-ms				ms;
+	application/x-ustar				ustar;
+	application/x-wais-source			src;
+	application/x-xpinstall				xpi;
+	application/x-xspf+xml				xspf;
+	application/x-xz				xz;
+	audio/midi					mid midi kar;
+	audio/x-aiff					aif aiff aifc;
+	audio/x-annodex					axa;
+	audio/x-flac					flac;
+	audio/x-matroska				mka;
+	audio/x-mod					mod ult uni m15 mtm 669 med;
+	audio/x-mpegurl					m3u;
+	audio/x-ms-wax					wax;
+	audio/x-ms-wma					wma;
+	audio/x-pn-realaudio				ram rm;
+	audio/x-realaudio				ra;
+	audio/x-s3m					s3m;
+	audio/x-stm					stm;
+	audio/x-wav					wav;
+	chemical/x-xyz					xyz;
+	image/webp					webp;
+	image/x-cmu-raster				ras;
+	image/x-portable-anymap				pnm;
+	image/x-portable-bitmap				pbm;
+	image/x-portable-graymap			pgm;
+	image/x-portable-pixmap				ppm;
+	image/x-rgb					rgb;
+	image/x-targa					tga;
+	image/x-xbitmap					xbm;
+	image/x-xpixmap					xpm;
+	image/x-xwindowdump				xwd;
+	text/html-sandboxed				sandboxed;
+	text/x-pod					pod;
+	text/x-setext					etx;
+	video/webm					webm;
+	video/x-annodex					axv;
+	video/x-flv					flv;
+	video/x-javafx					fxm;
+	video/x-matroska				mkv;
+	video/x-matroska-3d				mk3d;
+	video/x-ms-asf					asx;
+	video/x-ms-wm					wm;
+	video/x-ms-wmv					wmv;
+	video/x-ms-wmx					wmx;
+	video/x-ms-wvx					wvx;
+	video/x-msvideo					avi;
+	video/x-sgi-movie				movie;
+	x-conference/x-cooltalk				ice;
+	x-epoc/x-sisx-app				sisx;
+}

configs/nginx/nginx.conf.mako

@@ -0,0 +1,79 @@
+worker_processes 4;
+
+# error_log /tmp/kvmd-nginx.error.log;
+error_log stderr;
+
+include /usr/share/kvmd/extras/*/nginx.ctx-main.conf;
+
+events {
+	worker_connections 1024;
+	use epoll;
+	multi_accept on;
+}
+
+http {
+	types_hash_max_size 4096;
+	server_names_hash_bucket_size 128;
+
+	access_log off;
+
+	include /etc/kvmd/nginx/mime-types.conf;
+	default_type application/octet-stream;
+	charset utf-8;
+
+	sendfile on;
+	tcp_nodelay on;
+	tcp_nopush on;
+	keepalive_timeout 10;
+	client_max_body_size 4k;
+
+	client_body_temp_path	/tmp/kvmd-nginx/client_body_temp;
+	fastcgi_temp_path		/tmp/kvmd-nginx/fastcgi_temp;
+	proxy_temp_path			/tmp/kvmd-nginx/proxy_temp;
+	scgi_temp_path			/tmp/kvmd-nginx/scgi_temp;
+	uwsgi_temp_path			/tmp/kvmd-nginx/uwsgi_temp;
+
+	include /etc/kvmd/nginx/kvmd.ctx-http.conf;
+	include /usr/share/kvmd/extras/*/nginx.ctx-http.conf;
+
+	% if https_enabled:
+
+	server {
+		listen ${http_port};
+		% if ipv6_enabled:
+		listen [::]:${http_port};
+		% endif
+		include /etc/kvmd/nginx/certbot.ctx-server.conf;
+		location / {
+			% if https_port == 443:
+			return 301 https://$host$request_uri;
+			% else:
+			return 301 https://$host:${https_port}$request_uri;
+			% endif
+		}
+	}
+
+	server {
+		listen ${https_port} ssl http2;
+		% if ipv6_enabled:
+		listen [::]:${https_port} ssl http2;
+		% endif
+		include /etc/kvmd/nginx/ssl.conf;
+		include /etc/kvmd/nginx/kvmd.ctx-server.conf;
+		include /usr/share/kvmd/extras/*/nginx.ctx-server.conf;
+	}
+
+	% else:
+
+	server {
+		listen ${http_port};
+		% if ipv6_enabled:
+		listen [::]:${http_port};
+		% endif
+		include /etc/kvmd/nginx/certbot.ctx-server.conf;
+		include /etc/kvmd/nginx/kvmd.ctx-server.conf;
+		include /usr/share/kvmd/extras/*/nginx.ctx-server.conf;
+	}
+
+	% endif
+}

configs/nginx/ssl.conf

@@ -0,0 +1,5 @@
+ssl_protocols TLSv1.3 TLSv1.2 TLSv1.1 TLSv1;
+ssl_ciphers "EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH";
+ssl_certificate /etc/kvmd/nginx/ssl/server.crt;
+ssl_certificate_key /etc/kvmd/nginx/ssl/server.key;
+add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;

configs/os/boot-config/v0-hdmi-rpi2.txt

@@ -0,0 +1,7 @@
+# See /boot/overlays/README for all available options
+initramfs initramfs-linux.img followkernel
+
+hdmi_force_hotplug=1
+gpu_mem=128
+enable_uart=1
+dtoverlay=tc358743,i2c_pins_28_29=1

configs/os/boot-config/v0-hdmi-rpi3.txt

@@ -0,0 +1,8 @@
+# See /boot/overlays/README for all available options
+initramfs initramfs-linux.img followkernel
+
+hdmi_force_hotplug=1
+gpu_mem=128
+enable_uart=1
+dtoverlay=tc358743
+dtoverlay=disable-bt

configs/os/boot-config/v0-hdmi-zero2w.txt

@@ -0,0 +1,8 @@
+# See /boot/overlays/README for all available options
+initramfs initramfs-linux.img followkernel
+
+hdmi_force_hotplug=1
+gpu_mem=96
+enable_uart=1
+dtoverlay=tc358743,i2c_pins_28_29=1
+dtoverlay=disable-bt

configs/os/boot-config/v0-hdmiusb-rpi2.txt

@@ -0,0 +1,6 @@
+# See /boot/overlays/README for all available options
+initramfs initramfs-linux.img followkernel
+
+hdmi_force_hotplug=1
+gpu_mem=16
+enable_uart=1

configs/os/boot-config/v0-hdmiusb-rpi3.txt

@@ -0,0 +1,7 @@
+# See /boot/overlays/README for all available options
+initramfs initramfs-linux.img followkernel
+
+hdmi_force_hotplug=1
+gpu_mem=16
+enable_uart=1
+dtoverlay=disable-bt

configs/os/boot-config/v0-hdmiusb-zero2w.txt

@@ -0,0 +1,7 @@
+# See /boot/overlays/README for all available options
+initramfs initramfs-linux.img followkernel
+
+hdmi_force_hotplug=1
+gpu_mem=16
+enable_uart=1
+dtoverlay=disable-bt

configs/os/boot-config/v1-hdmi-rpi2.txt

@@ -0,0 +1,8 @@
+# See /boot/overlays/README for all available options
+initramfs initramfs-linux.img followkernel
+
+hdmi_force_hotplug=1
+gpu_mem=128
+enable_uart=1
+dtoverlay=tc358743,i2c_pins_28_29=1
+dtoverlay=spi0-1cs

configs/os/boot-config/v1-hdmi-rpi3.txt

@@ -0,0 +1,9 @@
+# See /boot/overlays/README for all available options
+initramfs initramfs-linux.img followkernel
+
+hdmi_force_hotplug=1
+gpu_mem=128
+enable_uart=1
+dtoverlay=tc358743
+dtoverlay=disable-bt
+dtoverlay=spi0-1cs

configs/os/boot-config/v1-hdmi-zero2w.txt

@@ -0,0 +1,9 @@
+# See /boot/overlays/README for all available options
+initramfs initramfs-linux.img followkernel
+
+hdmi_force_hotplug=1
+gpu_mem=96
+enable_uart=1
+dtoverlay=tc358743,i2c_pins_28_29=1
+dtoverlay=disable-bt
+dtoverlay=spi0-1cs

configs/os/boot-config/v1-hdmiusb-rpi2.txt

@@ -0,0 +1,7 @@
+# See /boot/overlays/README for all available options
+initramfs initramfs-linux.img followkernel
+
+hdmi_force_hotplug=1
+gpu_mem=16
+enable_uart=1
+dtoverlay=spi0-1cs

configs/os/boot-config/v1-hdmiusb-rpi3.txt

@@ -0,0 +1,8 @@
+# See /boot/overlays/README for all available options
+initramfs initramfs-linux.img followkernel
+
+hdmi_force_hotplug=1
+gpu_mem=16
+enable_uart=1
+dtoverlay=disable-bt
+dtoverlay=spi0-1cs

configs/os/boot-config/v1-hdmiusb-zero2w.txt

@@ -0,0 +1,8 @@
+# See /boot/overlays/README for all available options
+initramfs initramfs-linux.img followkernel
+
+hdmi_force_hotplug=1
+gpu_mem=16
+enable_uart=1
+dtoverlay=disable-bt
+dtoverlay=spi0-1cs

configs/os/boot-config/v2-hdmi-rpi3.txt

@@ -0,0 +1,9 @@
+# See /boot/overlays/README for all available options
+initramfs initramfs-linux.img followkernel
+
+hdmi_force_hotplug=1
+gpu_mem=128
+enable_uart=1
+dtoverlay=tc358743
+dtoverlay=disable-bt
+dtoverlay=dwc2,dr_mode=peripheral

configs/os/boot-config/v2-hdmi-rpi4.txt

@@ -0,0 +1,9 @@
+# See /boot/overlays/README for all available options
+initramfs initramfs-linux.img followkernel
+
+hdmi_force_hotplug=1
+gpu_mem=128
+enable_uart=1
+dtoverlay=tc358743
+dtoverlay=disable-bt
+dtoverlay=dwc2,dr_mode=peripheral

configs/os/boot-config/v2-hdmi-zero2w.txt

@@ -0,0 +1,9 @@
+# See /boot/overlays/README for all available options
+initramfs initramfs-linux.img followkernel
+
+hdmi_force_hotplug=1
+gpu_mem=96
+enable_uart=1
+dtoverlay=tc358743,i2c_pins_28_29=1
+dtoverlay=disable-bt
+dtoverlay=dwc2,dr_mode=peripheral

configs/os/boot-config/v2-hdmiusb-rpi4.txt

@@ -0,0 +1,8 @@
+# See /boot/overlays/README for all available options
+initramfs initramfs-linux.img followkernel
+
+hdmi_force_hotplug=1
+gpu_mem=16
+enable_uart=1
+dtoverlay=disable-bt
+dtoverlay=dwc2,dr_mode=peripheral

configs/os/boot-config/v3-hdmi-rpi4.txt

@@ -0,0 +1,22 @@
+# See /boot/overlays/README for all available options
+initramfs initramfs-linux.img followkernel
+
+hdmi_force_hotplug=1
+gpu_mem=128
+enable_uart=1
+dtoverlay=tc358743
+dtoverlay=disable-bt
+dtoverlay=dwc2,dr_mode=peripheral
+dtparam=act_led_gpio=13
+
+# HDMI audio capture
+dtoverlay=tc358743-audio
+
+# SPI (AUM)
+dtoverlay=spi0-1cs
+
+# I2C (display)
+dtparam=i2c_arm=on
+
+# Clock
+dtoverlay=i2c-rtc,pcf8563,wakeup-source

configs/os/boot-config/v4mini-hdmi-rpi4.txt

@@ -0,0 +1,21 @@
+# PiKVM
+# See /boot/overlays/README for all available options
+initramfs initramfs-linux.img followkernel
+
+hdmi_force_hotplug=1
+gpu_mem=128
+enable_uart=1
+dtoverlay=disable-bt
+
+# USB emulation
+dtoverlay=dwc2,dr_mode=peripheral
+
+# Video and audio
+dtoverlay=tc358743,4lane=1
+dtoverlay=tc358743-audio
+
+# I2C (display)
+dtparam=i2c_arm=on
+
+# Clock
+dtoverlay=i2c-rtc,pcf8563,wakeup-source

configs/os/boot-config/v4plus-hdmi-rpi4.txt

@@ -0,0 +1,29 @@
+# PiKVM
+# See /boot/overlays/README for all available options
+initramfs initramfs-linux.img followkernel
+
+hdmi_force_hotplug=1
+gpu_mem=128
+enable_uart=1
+dtoverlay=disable-bt
+
+# USB emulation
+dtoverlay=dwc2,dr_mode=peripheral
+
+# Video and audio
+dtoverlay=tc358743,4lane=1
+dtoverlay=tc358743-audio
+
+# Passthrough
+dtoverlay=vc4-kms-v3d
+disable_overscan=1
+
+# I2C (display)
+dtparam=i2c_arm=on
+
+# Clock
+dtoverlay=i2c-rtc,pcf8563,wakeup-source
+
+# Passthrough
+dtoverlay=vc4-kms-v3d
+disable_overscan=1

configs/os/cmdline/v0-hdmi-rpi2.sed

@@ -0,0 +1,5 @@
+s/console=ttyAMA0\,115200//g
+s/kgdboc=ttyAMA0\,115200//g
+s/console=serial0\,115200//g
+s/kgdboc=serial0\,115200//g
+s/rootwait/rootwait cma=128M/g

configs/os/cmdline/v0-hdmi-rpi3.sed

@@ -0,0 +1,5 @@
+s/console=ttyAMA0\,115200//g
+s/kgdboc=ttyAMA0\,115200//g
+s/console=serial0\,115200//g
+s/kgdboc=serial0\,115200//g
+s/rootwait/rootwait cma=128M/g

configs/os/cmdline/v0-hdmi-zero2w.sed

@@ -0,0 +1,5 @@
+s/console=ttyAMA0\,115200//g
+s/kgdboc=ttyAMA0\,115200//g
+s/console=serial0\,115200//g
+s/kgdboc=serial0\,115200//g
+s/rootwait/rootwait cma=96M/g

configs/os/cmdline/v0-hdmiusb-rpi2.sed

@@ -0,0 +1,4 @@
+s/console=ttyAMA0\,115200//g
+s/kgdboc=ttyAMA0\,115200//g
+s/console=serial0\,115200//g
+s/kgdboc=serial0\,115200//g

configs/os/cmdline/v0-hdmiusb-rpi3.sed

@@ -0,0 +1,4 @@
+s/console=ttyAMA0\,115200//g
+s/kgdboc=ttyAMA0\,115200//g
+s/console=serial0\,115200//g
+s/kgdboc=serial0\,115200//g

configs/os/cmdline/v0-hdmiusb-zero2w.sed

@@ -0,0 +1,4 @@
+s/console=ttyAMA0\,115200//g
+s/kgdboc=ttyAMA0\,115200//g
+s/console=serial0\,115200//g
+s/kgdboc=serial0\,115200//g

configs/os/cmdline/v1-hdmi-rpi2.sed

@@ -0,0 +1 @@
+s/rootwait/rootwait cma=128M/g

configs/os/cmdline/v1-hdmi-rpi3.sed

@@ -0,0 +1 @@
+s/rootwait/rootwait cma=128M/g

configs/os/cmdline/v1-hdmi-zero2w.sed

@@ -0,0 +1 @@
+s/rootwait/rootwait cma=96M/g

configs/os/cmdline/v2-hdmi-rpi3.sed

@@ -0,0 +1 @@
+s/rootwait/rootwait cma=128M/g

configs/os/cmdline/v2-hdmi-rpi4.sed

@@ -0,0 +1 @@
+s/rootwait/rootwait cma=128M/g

configs/os/cmdline/v2-hdmi-zero2w.sed

@@ -0,0 +1 @@
+s/rootwait/rootwait cma=96M/g

configs/os/cmdline/v3-hdmi-rpi4.sed

@@ -0,0 +1 @@
+s/rootwait/rootwait cma=128M/g