DCon Platform — Build Status

ThingsBoard CE Migration · Secure Portal

Last updated2026-07-16

Overall progress authoring complete · deployment gated on credentials

Phase 0.5 — Infra inspection & alignment

Inspected SignalCommand + FilePort (read-only). Standalone Neon-based plan locked. SignalCommand's real API surface mapped for Phase E.

Done

Phase A — Assessment & export

ASSESSMENT.md written (PE-gap table, sizing, cost: ~$0–5/mo vs PE ~$100–300+). Read-only tb-export.mjs ready — waiting on ThingsBoard login to pull the real 38-device inventory.

Needs TB login

Phase B — Target infrastructure (IaC)

Docker Compose (ThingsBoard CE → Neon Postgres), Cloudflare Tunnel config, Grafana provisioning, bootstrap/backup/upgrade scripts — all authored. Deploy pending Neon + host + Cloudflare access.

Authored

Phase C — Migration scripts

tb-import.mjs, device-repoint runbook generator, telemetry migration — authored. Runs once source export + target instance exist.

Authored

Phase D — Secure portal (entry points)

Customer + Employee login live on the v2 site (/login, header & footer). Cloudflare Access (MFA) + ThingsBoard roles wire up when the backend deploys.

Live (front)

Phase E — SignalCommand “DCon Network” filter

Designed: pipe DCon telemetry into SignalCommand as a licensed signal source + map layer + tab (uses SC's existing Pro/API-key tiering + hazard-threatened-assets overlay). Built once telemetry flows. Zero changes to SignalCommand until then.

Designed

🔑 Blocked on you

1ThingsBoard tenant-admin login (email + password, or a JWT) for thingsboard.cloud — unblocks the read-only export & full assessment. Rotatable after.
2Neon — a new project/DB connection string (isolated from SignalCommand's).
3Compute host for the ThingsBoard app — Oracle Cloud Always Free VM (recommended, $0) or Fly.io/Railway.
4Cloudflare token with Tunnel + Access + DNS on the dcon-rmc.com zone (or the Tunnel token).
5Decisions: confirm Path A · telemetry history (fresh vs 30–90 days) · any field Edge gateways? · portal MFA (email code vs authenticator).

Deliverables

INFRA-PLAN.md (standalone Neon architecture)
ASSESSMENT.md (inventory, PE-gaps, cost, risk)
infra/ — Docker Compose, Cloudflared, Grafana
infra/ — bootstrap · backup · upgrade scripts
scripts/ — tb-export · tb-import · repoint · telemetry

Portal login entry points on v2 site
Live ThingsBoard CE instance (app.dcon-rmc.com)
Migrated + validated entities
Grafana dashboards + Cloudflare Access MFA
SignalCommand DCon-network licensed filter

Isolation guarantee

This is a standalone product for DCon. FilePort and SignalCommand are read-only references only — no file in either project is created, changed, or deployed by this work. The DCon platform runs on its own Neon project, its own host, and its own Cloudflare Access org. SignalCommand integration (Phase E) is additive and opt-in, surfaced later behind a licensed filter — with no impact until you approve it.

v2 Site Portal Login

Repo: dcon-rmc (private GitHub) — marketing site + platform/. Secrets are git-ignored.