konairius/homelab
10
0
Fork 0
Code Issues 8 Pull Requests 2 Packages Projects Releases 1 Wiki Activity

chore(esphome): trim Shelly BLE proxy to WiFi + API only

Browse Source 
Per how it's actually run: drop OTA and the fallback AP/captive_portal — this is
a fixed, low-value proxy, so updates and any WiFi recovery are done by re-flashing
over USB. Secrets shrink to iot_wifi_ssid / iot_wifi_password /
shelly_ble_proxy_api_key (the api encryption key stays; it's the ble-agent
handoff). README secrets list + flashing note updated to match.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
This commit is contained in:
claude-bot
2026-07-13 11:01:51 +02:00
co-authored by Claude Opus 4.8
parent 71d1111879
commit fdddbe7e78
2 changed files with 6 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files
esphome/README.md
+4 -5
View File
@@ -23,8 +23,6 @@ The dashboard's `secrets.yaml` (on the PVC — **not** in git) must define:
```yaml
iot_wifi_ssid: "<IoT SSID>"
iot_wifi_password: "<...>"
shelly_ble_proxy_ap_password: "<recovery AP password, 8+ chars>"
shelly_ble_proxy_ota_password: "<...>"
# 32-byte base64 — dashboard "Generate", or: openssl rand -base64 32
# This value is the handoff to the ble-agent (its BLE_PROXY_NOISE_PSK).
shelly_ble_proxy_api_key: "<...>"
@@ -32,6 +30,7 @@ shelly_ble_proxy_api_key: "<...>"
## Flashing
First flash is browser-side over USB (ESP Web Tools / Web Serial, Chrome/Edge):
plug the Atom Echo into your computer, open the dashboard, **Install → Plug into
this computer**. After that, updates are OTA.
USB only — the config has no OTA and no recovery AP by design. Flash (and any
later update or WiFi-recovery) is browser-side over USB (ESP Web Tools / Web
Serial, Chrome/Edge): plug the Atom Echo into your computer, open the dashboard,
**Install → Plug into this computer**.
esphome/shelly-ble-proxy.yaml
+2 -9
View File
@@ -36,18 +36,11 @@ api:
encryption:
key: !secret shelly_ble_proxy_api_key
ota:
- platform: esphome
password: !secret shelly_ble_proxy_ota_password
# No OTA and no fallback AP/captive_portal, deliberately — this is a fixed,
# low-value proxy: updates and any WiFi-recovery are done by re-flashing over USB.
wifi:
ssid: !secret iot_wifi_ssid
password: !secret iot_wifi_password
ap: # recovery AP if the IoT WiFi is down at boot
ssid: "${friendly_name} Setup"
password: !secret shelly_ble_proxy_ap_password
captive_portal:
# Active BLE proxy — enables the GATT connect + characteristic read/write that
# Shelly's mOS RPC-over-BLE needs to provision a WiFi-less device