Fix colors and update README

Author: radaron

Dockerfile

@@ -1,4 +1,3 @@
-
 FROM python:3.12 AS builder
 
 RUN pip install uv
@@ -10,22 +9,15 @@ COPY app /service/app/
 
 RUN uv sync --no-dev
 
-
 FROM python:3.12-slim
 
-
 WORKDIR /service
 
-
 COPY --from=builder /service /service
 
-
 RUN adduser --disabled-password --gecos '' --no-create-home appuser
 RUN chown -R appuser:appuser app/db
 USER appuser
 
-
-EXPOSE 8000
-
 CMD [".venv/bin/python", "-m", "uvicorn", "app.main:app", "--host", "0.0.0.0", "--port", "8000"]
 LABEL org.opencontainers.image.source=https://github.com/radaron/BackChannelServer

Makefile

@@ -1,4 +1,4 @@
-install:
+install: reqs-fe
 	uv sync --dev
 
 format:

README.md

@@ -1,207 +1,176 @@
 # BackChannel Server
 
-A FastAPI application with JWT authentication, SQLAlchemy ORM, and Docker support.
+BackChannel is a web application what provides centralized remote control for connected clients, and monitors their status in real-time.
+
+### Screenshots
+
+![BackChannel Server Interface](doc/images/Screenshot%202025-10-10%20at%2016-17-09%20BackChannel%20Server.png)
+
+![BackChannel Dashboard](doc/images/Screenshot%202025-10-10%20at%2016-18-26%20BackChannel%20Server.png)
+
+### Architecture
+```mermaid
+architecture-beta
+    group server[Server]
+    group client[Client]
+    group backlink_server[BackLink] in server
+
+    service laptop(server)[Laptop]
+    service http_port(server)[http port] in server
+    service forwarding_port1(server)[forwarding port] in server
+    service forwarding_port2(server)[forwarding port] in server
+    service web_app(server)[WebApp] in backlink_server
+    service forwarder(server)[Forwarder] in backlink_server
+    service blacklink_client(server)[BlackLink] in client
+    service ssh_port(server)[SSH port] in client
+
+    laptop:R --> L:http_port
+    laptop:B --> L:forwarding_port1
+    http_port:R --> L:web_app
+    forwarding_port1:R --> L:forwarder
+    forwarder:R <--> L:forwarding_port2
+    forwarding_port2:R <--> L:blacklink_client
+    blacklink_client:R <--> L:ssh_port
 
-## Features
-
-- 🚀 FastAPI web framework
-- 🔐 Cookie-based authentication with master password
-- 🍪 Secure session management
-- 📦 Poetry dependency management
-- 🐳 Docker containerization
-- 📊 API documentation with Swagger UI
-
-## Project Structure
-
-```
-BackChannelServer/
-├── app/
-│   ├── core/
-│   │   ├── __init__.py
-│   │   ├── config.py          # App configuration
-│   │   ├── database.py        # Database setup
-│   │   └── security.py        # JWT & password utilities
-│   ├── models/
-│   │   ├── __init__.py
-│   │   └── user.py           # SQLAlchemy models
-│   ├── routers/
-│   │   ├── __init__.py
-│   │   ├── auth.py           # Authentication endpoints
-│   │   └── client.py         # Client endpoints
-│   ├── schemas/
-│   │   ├── __init__.py
-│   │   └── user.py           # Pydantic schemas
-│   ├── __init__.py
-│   └── main.py               # FastAPI app
-├── Dockerfile
-├── .dockerignore
-├── .gitignore
-└── pyproject.toml
 ```
 
-## Quick Start
 
-### Using Poetry (Recommended)
-
-1. **Install dependencies:**
-   ```bash
-   poetry install
-   ```
-
-2. **Run the application:**
-   ```bash
-   poetry run python -m uvicorn app.main:app --host 0.0.0.0 --port 8000 --reload
-   ```
-
-3. **Access the API:**
-   - API Documentation: http://localhost:8000/docs
-   - ReDoc: http://localhost:8000/redoc
+Sequence of monitoring:
+```mermaid
+sequenceDiagram
+    actor User
+    participant Server
+    participant Client
+    loop 30 sec
+        Client->>Server: Get order
+        activate Server
+        Server-->>Client: Return empty
+        deactivate Server
+        Client->>Server: Put metrics
+    end
+    User->>Server: Get all client data
+    activate Server
+    Server-->>User: return
+    deactivate Server
+```
 
-### Using Docker
 
-1. **Build the image:**
-   ```bash
-   docker build -t backchannel-server .
-   ```
+Sequence of connecting:
+```mermaid
+sequenceDiagram
+    actor User
+    participant Server
+    participant Client
+    Client->>Server: Get order
+    activate Server
+    Server-->>Client: Return empty
+    Client->>Server: Put metrics
+    deactivate Server
+    User->>Server: Initiate connection
+    activate Server
+    Client->>Server: Get order
+    activate Server
+    Server-->>Client: Return opened port
+    deactivate Server
+    Client->>Server: Connect to opened port
+    Server-->>User: Return opened port
+    User<<->>Client: Two way connection
+    deactivate Server
+```
 
-2. **Run the container:**
-   ```bash
-   docker run -p 8000:8000 backchannel-server
-   ```
+## Getting started
 
-## Authentication
+### Generate Secret Key
 
-The application uses a simple master password for authentication:
-- **Master Password:** `admin123` (configurable via environment)
+Pull the latest docker image:
 
-### Password Hashing
+```bash
+docker pull ghcr.io/radaron/backchannel:latest
+```
 
-For enhanced security, you can use hashed passwords instead of plain text:
+Or use docker-compose:
+
+```yaml
+version: '3.8'
+services:
+  backchannel:
+    image: ghcr.io/radaron/backchannel:latest
+    ports:
+      - "8000:8000"
+      - 20000-20100:20000-20100
+    environment:
+      - SECRET_KEY=your-secret-key
+      - MASTER_PASSWORD_HASH=your-master-password-hash
+      - ALLOWED_ORIGINS=*
+    volumes:
+      - ./data:/app/data
+```
 
-#### Generate Password Hash
 
-**Option 1: Using Poetry scripts (recommended)**
-```bash
-# Hash any password
-poetry run hash-password admin123
 
-# Hash the current master password from config
-poetry run hash-master-password
-```
+For production deployment, you need to generate a secure secret key:
 
-**Option 1b: Using Make commands**
 ```bash
-make hash-password
+make generate-secret
 ```
 
-#### Using Hashed Passwords
+This will generate a UUID-based secret key that you should set in your environment.
+### Generate Password Hash
 
-Set the hashed password in your `.env` file:
 ```bash
-MASTER_PASSWORD_HASH=$2b$12$example.hash.here
-# When MASTER_PASSWORD_HASH is set, MASTER_PASSWORD is ignored for authentication
+make hash-password
 ```
+The script will prompt you to enter a password and return a base64-encoded bcrypt hash. Set this in your environment.
 
-### API Endpoints
-
-#### Authentication (`/api/v1/auth`)
-
-- `POST /api/v1/auth/login` - Login with master password (sets session cookie)
-- `POST /api/v1/auth/logout` - Logout and clear session cookie
-- `GET /api/v1/auth/me` - Get current session info
-- `GET /api/v1/auth/status` - Check authentication status
-- `POST /api/v1/auth/hash-password` - Hash a password (requires authentication)
+## Development
 
-#### Client (`/api/v1/client`)
+### Prerequisites
 
-- `GET /api/v1/client/profile` - Get session profile
-- `GET /api/v1/client/dashboard` - Get dashboard data
-- `GET /api/v1/client/stats` - Get session statistics
-- `GET /api/v1/client/protected` - Example protected endpoint
+- Python 3.12+
+- [uv](https://docs.astral.sh/uv/) package manager
+- Node.js 18+ (for frontend development)
+- Docker or OCI-compatible container runtime
 
-### Example Usage
+### Development Setup
 
-1. **Login with master password:**
+1. **Install dependencies:**
    ```bash
-   curl -c cookies.txt -X POST "http://localhost:8000/api/v1/auth/login" \
-        -H "Content-Type: application/json" \
-        -d '{"password": "admin123"}'
+   make install
    ```
 
-2. **Access protected endpoint:**
+2. **Generate security credentials:**
    ```bash
-   curl -b cookies.txt -X GET "http://localhost:8000/api/v1/client/profile"
+   # Generate a secret key
+   make generate-secret
+
+   # Generate password hash
+   make hash-password
    ```
 
-3. **Check authentication status:**
+3. **Set up environment:**
    ```bash
-   curl -b cookies.txt -X GET "http://localhost:8000/api/v1/auth/status"
+   cp backchannel.env.example backchannel.env
+   # Edit backchannel.env with your generated credentials
    ```
 
-4. **Logout:**
+4. **Build frontend and run the application:**
    ```bash
-   curl -b cookies.txt -c cookies.txt -X POST "http://localhost:8000/api/v1/auth/logout"
+   make up
    ```
 
+5. **Access the application:**
+   - http://localhost:8000
+
 ## Configuration
 
-Configuration can be customized via environment variables or the `.env` file:
+Configuration can be customized via environment variables or the `backchannel.env` file:
 
-- `SECRET_KEY` - Session secret key (change in production!)
-- `MASTER_PASSWORD` - Master password for authentication (default: admin123)
+- `SECRET_KEY` - Session secret key (required for production)
 - `MASTER_PASSWORD_HASH` - Hashed master password (preferred over plain text)
 - `SESSION_EXPIRE_MINUTES` - Session expiration time (default: 60 minutes)
 - `COOKIE_NAME` - Session cookie name (default: backchannel_session)
-
-## Development
-
-### Install development dependencies:
-```bash
-poetry install --with dev
-```
-
-### Code formatting:
-```bash
-poetry run black app/
-poetry run isort app/
-```
-
-### Type checking:
-```bash
-poetry run mypy app/
-```
-
-### Available Make Commands:
-```bash
-make install           # Install dependencies
-make run              # Run FastAPI server in development mode
-make hash-password PASSWORD=yourpass  # Hash any password
-make hash-master      # Hash current master password from config
-make format           # Format code with isort and black
-make up               # Run with Docker Compose
-```
-
-### Run tests:
-```bash
-poetry run pytest
-```
-
-## Docker Commands
-
-```bash
-# Build image
-docker build -t backchannel-server .
-
-# Run container
-docker run -p 8000:8000 backchannel-server
-
-# Run with environment variables
-docker run -p 8000:8000 -e SECRET_KEY=your-secret-key -e MASTER_PASSWORD=your-password backchannel-server
-
-# Run in background
-docker run -d -p 8000:8000 --name backchannel backchannel-server
-```
-
-## License
-
-This project is open source and available under the [MIT License](LICENSE).
+- `ALLOWED_ORIGINS` - CORS allowed origins (default: "*")
+- `PORT_RANGE_START` - Start of port range for dynamic forwarding (default: 20000)
+- `PORT_RANGE_END` - End of port range for dynamic forwarding (default: 20100)
+- `LOCAL_ADDRESS` - Local address to bind (default: "0.0.0.0")
+- `CUSTOM_MESSAGES` - Custom connection instructions (default provided)

doc/images/Screenshot 2025-10-10 at 16-17-09 BackChannel Server.png

@@ -7,13 +7,17 @@ import { BrowserRouter as Router, Routes, Route, Navigate } from 'react-router-d
 // Create a custom theme with mobile-first responsive design
 const theme = createTheme({
   palette: {
-    mode: 'light',
+    mode: 'dark',
     primary: {
       main: '#1976d2',
     },
     secondary: {
       main: '#dc004e',
     },
+    background: {
+      default: '#121212',
+      paper: '#1e1e1e',
+    },
   },
   breakpoints: {
     values: {