udash

This project contains the frontend of Udash, a dashboard to monitor and manage Updatecli instances.

npm install

npm run dev

npm run build

npm run lint

This application relies on the config.json file at /usr/share/nginx/html/config.json for runtime configuration.

The frontend base path is defined at runtime with APP_BASE_PATH. Set it in the runtime config files to mount the SPA below a subpath such as /udash/.

config.json

.public/config.json

{
   "AUTH_ENABLED": false,
   "OAUTH_DOMAIN": "https://your-instance.zitadel.cloud",
   "OAUTH_CLIENTID": "xxx",
   "OAUTH_SCOPE": "openid profile email offline_access urn:zitadel:iam:org:project:id:PROJECT_ID:aud",
   "API_BASE_URL": "/api",
   "APP_BASE_PATH": "/udash/",
   "MAX_HISTORY_DAYS": 30
}

The app bootstraps from config.json before loading the Vue bundle, then exposes the same values on window.config.

MAX_HISTORY_DAYS caps how far back the interface looks: it sets how far the dashboard date filter reaches and the window of the activity chart on the home page. It defaults to 30 when unset and is capped at the API's own maximum of 366.

Raising it does not change how much work the backend does by default — the date filter still starts on the last day whatever the maximum, so a wider range is only ever queried when someone explicitly asks for one. Lower it on instances where a large report history makes the wider queries expensive.

Authentication uses the standards-based OpenID Connect Authorization Code + PKCE flow via oidc-client-ts, and works with any compliant provider (the reference deployment uses Zitadel). It is toggled and configured entirely at runtime through config.json, so the same image serves both authenticated and open deployments:

• AUTH_ENABLED — set to true to require authentication. Defaults to false.
• OAUTH_DOMAIN — the provider's issuer URL (e.g. https://your-instance.zitadel.cloud).
• OAUTH_CLIENTID — the SPA application's client ID.
• OAUTH_SCOPE — requested scopes. Include openid profile email offline_access (offline_access enables silent token refresh). For Zitadel, add the project audience scope urn:zitadel:iam:org:project:id:<PROJECT_ID>:aud so the access token is accepted by the API. Defaults to openid profile email offline_access when omitted.

Register the app in the provider as a User Agent / SPA application with PKCE, and add the app's base URL (the value of APP_BASE_PATH resolved against the deployment origin) as both an allowed redirect URI and post-logout redirect URI.

For the local development environment, the runtime config file must be located at public/config.json. A .gitignore rule ensures this file is not committed to the git repository.

The docker image configuration can be overridden by mounting a custom config.json file at runtime.

docker run -d -p 80:80 \
  -v /path/to/config.json:/usr/share/nginx/html/config.json \
  --name udash-front udash-front:latest

See Vite Configuration Reference.