DCon Platform — Build Status

ThingsBoard CE Migration · Secure Portal

Last updated2026-07-17

Overall progress authoring complete · deployment gated on credentials

Phase 0.5 — Infra inspection & alignment

Inspected SignalCommand + FilePort (read-only). Standalone Neon-based plan locked. SignalCommand's real API surface mapped for Phase E.

Done

Phase A — Assessment & export

Read-only export complete — 38 devices (+ credentials), 15 device profiles (9 MQTT), 7 dashboards, 3 rule chains, 33 widget bundles, 1 customer. 0 PE integrations/converters (clean migration); white-label is the only PE feature. See EXPORT-SUMMARY.md.

Export done

Phase B — Target infrastructure (IaC)

Docker Compose (ThingsBoard CE → Neon Postgres), Cloudflare Tunnel config, Grafana provisioning, bootstrap/backup/upgrade scripts — all authored. Deploy pending Neon + host + Cloudflare access.

Authored

Phase C — Migration scripts

tb-import.mjs, device-repoint runbook generator, telemetry migration — authored. Runs once source export + target instance exist.

Authored

Phase D — Secure portal (entry points)

Customer + Employee login live on the v2 site (/login, header & footer). Cloudflare Access (MFA) + ThingsBoard roles wire up when the backend deploys.

Live (front)

Phase E — SignalCommand “DCon Network” filter

Designed: pipe DCon telemetry into SignalCommand as a licensed signal source + map layer + tab (uses SC's existing Pro/API-key tiering + hazard-threatened-assets overlay). Built once telemetry flows. Zero changes to SignalCommand until then.

Designed

🔑 Blocked on you

✓ThingsBoard login — received; read-only export done. (rotate the password when ready)
✓Neon — received & verified (PostgreSQL 17.10, direct endpoint, empty DB ready).
3Compute host — DigitalOcean droplet being created (Ubuntu 24.04, Premium AMD 4 GB). Send the droplet IP.
4Cloudflare token with Tunnel + Access + DNS on the dcon-rmc.com zone (or the Tunnel token) — to publish app.dcon-rmc.com with MFA.
5Decisions: confirm Path A · telemetry history (fresh vs 30–90 days) · any field Edge gateways? · portal MFA (email code vs authenticator).

Deliverables

INFRA-PLAN.md (standalone Neon architecture)
ASSESSMENT.md (inventory, PE-gaps, cost, risk)
infra/ — Docker Compose, Cloudflared, Grafana
infra/ — bootstrap · backup · upgrade scripts
scripts/ — tb-export · tb-import · repoint · telemetry

Portal login entry points on v2 site
Live ThingsBoard CE instance (app.dcon-rmc.com)
Migrated + validated entities
Grafana dashboards + Cloudflare Access MFA
SignalCommand DCon-network licensed filter

Isolation guarantee

This is a standalone product for DCon. FilePort and SignalCommand are read-only references only — no file in either project is created, changed, or deployed by this work. The DCon platform runs on its own Neon project, its own host, and its own Cloudflare Access org. SignalCommand integration (Phase E) is additive and opt-in, surfaced later behind a licensed filter — with no impact until you approve it.

v2 Site Portal Login

Repo: dcon-rmc (private GitHub) — marketing site + platform/. Secrets are git-ignored.