# Android / Termux Deployment

Run the eSIM provisioning server on an Android device using [Termux](https://termux.dev) (no root required for basic operation).

## Prerequisites

- Android 9 or later
- **Termux** installed from [F-Droid](https://f-droid.org/packages/com.termux/) (not the Play Store version — it is outdated)
- Optional: **Termux:Boot** (F-Droid) for automatic start on reboot
- 5G-capable device with a pre-provisioned SIM for gNB backhaul

## Install

```bash
# In Termux, from the repo root:
bash android/termux_setup.sh
```

The script will:
1. Update Termux packages
2. Install Python, nginx, and required libraries
3. Deploy the server files to `~/esim-provisioning/`
4. Write a localised `config.yaml`
5. Configure nginx on port 8080
6. Initialise the SQLite database

## Start the Server

```bash
~/esim-provisioning/start.sh
```

## WiFi Hotspot

1. Go to **Settings → Network → Hotspot & Tethering → WiFi Hotspot**
2. Set a name (e.g. `Emergency-5G`) and **remove the password** (open network)
3. Enable the hotspot

Clients connect to the hotspot, then navigate to:
```
http://192.168.43.1:8080/activate
```

> Most Android devices use `192.168.43.1` as the hotspot gateway. Samsung and Pixel devices may differ — check with `ip route` in Termux and update `config.yaml` accordingly.

## Captive Portal Limitation

Without root, full DNS hijacking is not possible. Clients will **not** be automatically redirected — they must open the URL manually or scan a QR code posted at the deployment site.

With root + Termux, install `dnsmasq` via `pkg install dnsmasq` and add:
```
address=/#/192.168.43.1
```
to `/data/data/com.termux/files/usr/etc/dnsmasq.conf`, then run `dnsmasq`.

## Configuration

Edit `~/esim-provisioning/config.yaml` to set your MCC, MNC, and OP key, then restart:
```bash
pkill -f server.app
CONFIG_PATH=~/esim-provisioning/config.yaml python -m server.app &
```

## Auto-Start on Reboot (Termux:Boot)

Install **Termux:Boot** from F-Droid. The setup script copies `start.sh` to
`~/.termux/boot/` automatically. Open Termux:Boot once to enable it.