A
8672b0de6b
Full working closed-loop eSIM provisioning stack (spec in claude.md / plan/): Flask API, SQLite subscriber store, credential/profile generator, Open5GS and free5gc core adapters, captive portal, operational scripts, systemd units, network configs, and a 44-test suite. Profile generation currently returns a mock JSON profile; real SGP.22 generation via pySim is the planned Phase-2 upgrade. Fixes two bugs found while getting the suite green: - generate_imsi hardcoded a 10-digit MSIN, producing 16-digit IMSIs for a 3-digit MNC; MSIN length is now 15 - len(mcc) - len(mnc). - check_rate_limit compared timestamps as strings across mismatched formats (SQLite CURRENT_TIMESTAMP vs Python isoformat); both sides now normalized via SQLite datetime() so the window check is chronologically correct. Add .gitignore for venv, caches, runtime config.yaml, and databases. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
24 lines
657 B
Plaintext
24 lines
657 B
Plaintext
# dnsmasq configuration for eSIM provisioning captive portal
|
|
# Install: cp configs/dnsmasq.conf /etc/dnsmasq.d/esim-provisioning.conf
|
|
|
|
# Only listen on the WiFi AP interface
|
|
interface=wlan0
|
|
bind-interfaces
|
|
|
|
# DHCP address pool for connecting clients
|
|
dhcp-range=192.168.4.10,192.168.4.250,24h
|
|
|
|
# DNS hijacking: return the AP IP for every domain query
|
|
# This triggers the OS captive-portal detection and redirects all HTTP traffic.
|
|
address=/#/192.168.4.1
|
|
|
|
# Do not forward DNS queries upstream (keep it fully local)
|
|
no-resolv
|
|
|
|
# DHCP lease file
|
|
dhcp-leasefile=/var/lib/misc/dnsmasq.leases
|
|
|
|
# Logging (disable in production to reduce I/O)
|
|
log-queries
|
|
log-dhcp
|