Telemetry
Encrypted ingestion, per-org OpenObserve and live charts
Every sensor point travels encrypted end-to-end from the microcontroller to the platform.
Encrypted ingestion
Devices push measurements over the /ws/sensor/ingest WebSocket: ChaCha20-framed
messages, strict validation, capped discovery of new measurement names, and an
anti-clone lease (first live wins, silence reaper) that prevents two boards from
impersonating the same device.
OpenObserve per organization
Ingestion remote-writes Prometheus metrics to OpenObserve with per-organization isolation and correlated tokens. Reads go through a PromQL proxy with anti-injection guards.
Live cache
Every numeric point is mirrored to Valkey on reception, so "last value" reads for charts and device reads are instant — no historical query just to show the current value.
Quick charts
The Visualisation page catalogs discovered series (metric × device) and overlays up to six series over 1 h/6 h/24 h windows with lightweight SVG charts.
