From bd0e505b4532aefc4ba7b02e3484e1ad9beefee9 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?M=C3=A1rcio=20Fernandes?= <marcio.fernandes@outlook.pt>
Date: Thu, 1 Jan 2026 22:46:16 +0000
Subject: [PATCH] node-red add authentication

---
 README.md                                     | 12 +----------
 services/node-red/README.md                   | 20 +++++++++++++++++++
 services/node-red/deploy/app/.gitignore       |  1 +
 services/node-red/deploy/app/deployment.yaml  |  8 +++++++-
 .../node-red/deploy/app/kustomization.yaml    |  6 +++++-
 .../deploy/app/node-red-settings.example.js   | 10 ++++++++++
 6 files changed, 44 insertions(+), 13 deletions(-)
 create mode 100644 services/node-red/README.md
 create mode 100644 services/node-red/deploy/app/.gitignore
 create mode 100644 services/node-red/deploy/app/node-red-settings.example.js

diff --git a/README.md b/README.md
index 5c954ad..0cbf8d0 100644
--- a/README.md
+++ b/README.md
@@ -71,17 +71,7 @@ Deployments and scripts on services/Zigbee2mqtt repo folder.
 
 ## node-red
 
-**Deploy app:**
-
-```bash
-./services/node-red/ops-scripts/apply-app.sh
-```
-
-**Deploy Infra:**
-
-```bash
-./services/node-red/ops-scripts/apply-infra.sh
-```
+check [readme](./services/node-red/README.md) for more information on setup and configuration.
 
 ## core-dns
 
diff --git a/services/node-red/README.md b/services/node-red/README.md
new file mode 100644
index 0000000..ae687b1
--- /dev/null
+++ b/services/node-red/README.md
@@ -0,0 +1,20 @@
+# node-red
+
+**Deploy app:**
+
+```bash
+./services/node-red/ops-scripts/apply-app.sh
+```
+
+**Deploy Infra:**
+
+```bash
+./services/node-red/ops-scripts/apply-infra.sh
+```
+
+Create password to add to node-red settings file.
+
+``` bash
+#npm install bcryptjs
+node -e "console.log(require('bcryptjs').hashSync(process.argv[1], 8));" YOUR-PASSWORD
+```
diff --git a/services/node-red/deploy/app/.gitignore b/services/node-red/deploy/app/.gitignore
new file mode 100644
index 0000000..3aaad90
--- /dev/null
+++ b/services/node-red/deploy/app/.gitignore
@@ -0,0 +1 @@
+node-red-settings.js
\ No newline at end of file
diff --git a/services/node-red/deploy/app/deployment.yaml b/services/node-red/deploy/app/deployment.yaml
index 5be0489..7cf1e20 100644
--- a/services/node-red/deploy/app/deployment.yaml
+++ b/services/node-red/deploy/app/deployment.yaml
@@ -22,6 +22,9 @@ spec:
         volumeMounts:
         - name: node-red-data
           mountPath: /data
+        - name: node-red-settings 
+          mountPath: /data/settings.js 
+          subPath: settings.js
         resources:
           requests:
             memory: "128Mi"
@@ -32,4 +35,7 @@ spec:
       volumes:
       - name: node-red-data
         persistentVolumeClaim:
-          claimName: node-red
\ No newline at end of file
+          claimName: node-red
+      - name: node-red-settings 
+        secret: 
+          secretName: node-red-settings
\ No newline at end of file
diff --git a/services/node-red/deploy/app/kustomization.yaml b/services/node-red/deploy/app/kustomization.yaml
index 0701c0a..3a2912b 100644
--- a/services/node-red/deploy/app/kustomization.yaml
+++ b/services/node-red/deploy/app/kustomization.yaml
@@ -5,4 +5,8 @@ resources:
   - deployment.yaml
   - service.yaml
 generatorOptions:
-  disableNameSuffixHash: true
\ No newline at end of file
+  disableNameSuffixHash: true
+secretGenerator:
+- name: node-red-settings 
+  files: 
+    - settings.js=./node-red-settings.js
\ No newline at end of file
diff --git a/services/node-red/deploy/app/node-red-settings.example.js b/services/node-red/deploy/app/node-red-settings.example.js
new file mode 100644
index 0000000..54e55ad
--- /dev/null
+++ b/services/node-red/deploy/app/node-red-settings.example.js
@@ -0,0 +1,10 @@
+module.exports = {
+    adminAuth: {
+        type: "credentials",
+        users: [{
+            username: "?????",
+            password: "??????",
+            permissions: "*"
+        }]
+    }
+}