feat: Phase 3 & 4 — monitoring, discovery, polish, deployment

Phase 3 — Discovery & Monitoring:
- Network scanner: nmap wrapper + mock fallback, fingerprint service (35 signatures)
- Status checker: ping/http/https/tcp/ssh/prometheus/health per-node checks
- APScheduler: status checks every 60s, WebSocket broadcast
- WebSocket /ws/status: live node status updates to frontend
- Sidebar panels: Pending Devices, Hidden Devices, Scan History
- Auth token persisted to localStorage (survive page refresh)
- 24 new backend tests (scan flow + status_checker)

Phase 4 — Polish & Deployment:
- Auto-layout: Dagre hierarchical TB via Toolbar button
- Export PNG: html-to-image download via Toolbar button
- Scan config modal: CIDR ranges + check interval, GET/POST /api/v1/scan/config
- Dockerfile.backend (Python 3.13 slim + nmap), Dockerfile.frontend (nginx)
- docker-compose.yml with data volume and NET_RAW cap for ping
- scripts/lxc-install.sh: Proxmox VE systemd bootstrap
- README.md: quick-start, config reference, stack overview

scripts/lxc-install.sh

@@ -0,0 +1,144 @@
+#!/usr/bin/env bash
+# Homelable — LXC/VM bootstrap installer
+# Compatible with Proxmox VE (Debian/Ubuntu LXC containers)
+# Usage: bash <(curl -fsSL https://raw.githubusercontent.com/you/homelable/main/scripts/lxc-install.sh)
+
+set -euo pipefail
+
+INSTALL_DIR=/opt/homelable
+DATA_DIR=/opt/homelable/data
+SERVICE_USER=homelable
+
+RED='\033[0;31m'; GREEN='\033[0;32m'; YELLOW='\033[1;33m'; NC='\033[0m'
+info()  { echo -e "${GREEN}[homelable]${NC} $*"; }
+warn()  { echo -e "${YELLOW}[homelable]${NC} $*"; }
+error() { echo -e "${RED}[homelable]${NC} $*"; exit 1; }
+
+[[ $EUID -ne 0 ]] && error "Run as root (sudo bash ...)"
+
+# ── Detect OS ────────────────────────────────────────────────────────────────
+if [[ -f /etc/os-release ]]; then
+  . /etc/os-release
+  OS=$ID
+else
+  error "Cannot detect OS"
+fi
+
+info "Detected: $PRETTY_NAME"
+[[ "$OS" =~ ^(debian|ubuntu)$ ]] || error "Requires Debian or Ubuntu"
+
+# ── System deps ──────────────────────────────────────────────────────────────
+info "Installing system dependencies..."
+apt-get update -qq
+apt-get install -y -qq \
+  python3 python3-pip python3-venv \
+  nmap curl git nginx
+
+# ── Node.js (for frontend build) ─────────────────────────────────────────────
+if ! command -v node &>/dev/null; then
+  info "Installing Node.js 20..."
+  curl -fsSL https://deb.nodesource.com/setup_20.x | bash -
+  apt-get install -y -qq nodejs
+fi
+
+# ── Service user ─────────────────────────────────────────────────────────────
+if ! id "$SERVICE_USER" &>/dev/null; then
+  useradd --system --shell /sbin/nologin "$SERVICE_USER"
+  info "Created user: $SERVICE_USER"
+fi
+
+# ── Clone / update repo ───────────────────────────────────────────────────────
+REPO_URL="https://github.com/you/homelable.git"   # ← update before publishing
+if [[ -d "$INSTALL_DIR/.git" ]]; then
+  info "Updating existing installation..."
+  git -C "$INSTALL_DIR" pull
+else
+  info "Cloning repository..."
+  git clone "$REPO_URL" "$INSTALL_DIR"
+fi
+
+mkdir -p "$DATA_DIR"
+
+# ── Backend ───────────────────────────────────────────────────────────────────
+info "Setting up Python backend..."
+cd "$INSTALL_DIR/backend"
+python3 -m venv .venv
+.venv/bin/pip install --quiet -r requirements.txt
+
+# Generate config.yml if missing
+if [[ ! -f config.yml ]]; then
+  cp config.yml.example config.yml 2>/dev/null || cat > config.yml <<'CONF'
+auth:
+  username: admin
+  password_hash: "$2b$12$o/LWyvmBc978CNpSsHxcveXN0WqjAGW/gBR0.U.HURWbaYD3GCDqS"
+
+scanner:
+  ranges:
+    - "192.168.1.0/24"
+
+status_checker:
+  interval_seconds: 60
+CONF
+  warn "Created default config.yml — change admin password!"
+fi
+
+# Generate .env if missing
+if [[ ! -f .env ]]; then
+  SECRET=$(python3 -c "import secrets; print(secrets.token_hex(32))")
+  cat > .env <<EOF
+SECRET_KEY=$SECRET
+SQLITE_PATH=$DATA_DIR/homelab.db
+CONFIG_PATH=$INSTALL_DIR/backend/config.yml
+CORS_ORIGINS=http://localhost
+EOF
+fi
+
+chown -R "$SERVICE_USER":"$SERVICE_USER" "$DATA_DIR"
+chown -R "$SERVICE_USER":"$SERVICE_USER" "$INSTALL_DIR/backend/.venv"
+
+# ── systemd: backend ─────────────────────────────────────────────────────────
+cat > /etc/systemd/system/homelable-backend.service <<EOF
+[Unit]
+Description=Homelable Backend
+After=network.target
+
+[Service]
+Type=simple
+User=$SERVICE_USER
+WorkingDirectory=$INSTALL_DIR/backend
+EnvironmentFile=$INSTALL_DIR/backend/.env
+ExecStart=$INSTALL_DIR/backend/.venv/bin/uvicorn app.main:app --host 127.0.0.1 --port 8000
+Restart=always
+RestartSec=5
+
+[Install]
+WantedBy=multi-user.target
+EOF
+
+# ── Frontend ──────────────────────────────────────────────────────────────────
+info "Building frontend..."
+cd "$INSTALL_DIR/frontend"
+npm ci --silent
+VITE_API_BASE=/api npm run build
+
+# ── nginx ─────────────────────────────────────────────────────────────────────
+cp "$INSTALL_DIR/docker/nginx.conf" /etc/nginx/sites-available/homelable
+# Adjust for local backend (not docker network)
+sed -i 's/http:\/\/backend:8000/http:\/\/127.0.0.1:8000/g' /etc/nginx/sites-available/homelable
+# Adjust root to dist
+sed -i "s|/usr/share/nginx/html|$INSTALL_DIR/frontend/dist|g" /etc/nginx/sites-available/homelable
+ln -sf /etc/nginx/sites-available/homelable /etc/nginx/sites-enabled/homelable
+rm -f /etc/nginx/sites-enabled/default
+nginx -t && systemctl reload nginx
+
+# ── Enable & start ────────────────────────────────────────────────────────────
+systemctl daemon-reload
+systemctl enable --now homelable-backend
+systemctl enable --now nginx
+
+info "Done!"
+echo ""
+echo -e "  ${GREEN}Homelable is running at http://$(hostname -I | awk '{print $1}')${NC}"
+echo -e "  Default login: admin / admin"
+echo -e "  ${YELLOW}Change the password in $INSTALL_DIR/backend/config.yml${NC}"
+echo ""