Add certUrl support: required for external agent connections (thanks si458)

Author: andlo

README.md

@@ -87,7 +87,8 @@ Forward port `4430` on your router to your HA host IP.
 | Option | Default | Description |
 |--------|---------|-------------|
 | `data_path` | `/data/meshcentral-data` | Where MeshCentral stores its data |
-| `hostname` | *(auto)* | Public hostname for agent connections — set this to your external URL (Cloudflare, Nabu Casa etc.) |
+| `hostname` | *(auto)* | Public hostname for agent connections — set this to your external URL |
+| `cert_url` | *(empty)* | **Required for external agent connections** — set to your full external URL (e.g. `https://mesh.yourdomain.com`). MeshCentral uses this to verify agent connections. Without this, agents outside your local network cannot connect. |
 | `allow_device_sharing` | `false` | Allow device sharing with other users |
 
 ## Ports

meshcentral/config.yaml

@@ -16,11 +16,13 @@
   "options": {
     "data_path": "/data/meshcentral-data",
     "hostname": "",
+    "cert_url": "",
     "allow_device_sharing": false
   },
   "schema": {
     "data_path": "str",
     "hostname": "str",
+    "cert_url": "str",
     "allow_device_sharing": "bool"
   },
   "map": [

meshcentral/run.sh

@@ -3,6 +3,7 @@
 # Read config from HA add-on options
 HOSTNAME=$(bashio::config 'hostname')
 DATA_PATH=$(bashio::config 'data_path')
+CERT_URL=$(bashio::config 'cert_url')
 ALLOW_SHARING=$(bashio::config 'allow_device_sharing')
 
 # Use HA hostname if not set
@@ -27,7 +28,6 @@ if [ ! -f "$CONFIG_FILE" ]; then
     "port": 443,
     "redirPort": 80,
     "tlsOffload": true,
-    "_comment_tlsOffload": "Set to true because HA handles TLS via Ingress/Nabu Casa",
     "selfUpdate": false,
     "cleanErrorLog": 5
   },
@@ -36,7 +36,8 @@ if [ ! -f "$CONFIG_FILE" ]; then
       "title": "MeshCentral",
       "title2": "Home Assistant",
       "newAccounts": false,
-      "_comment_newAccounts": "Set to true only to create your first admin account, then set back to false",
+      "_comment_newAccounts": "Set to true temporarily to create your first admin account",
+      "certUrl": "${CERT_URL}",
       "mstsc": false
     }
   }