fw-BH-barrel-automation/README.md

fw-BH-barrel-automation

Automation of barrel control for BohemaHouse winery

MQTT

• User: winery_device
• Pass: B2h3maH@use

AP

• SSID: esphome-bohemahouse-xxxxxx
• Pass: bohemahouse

Local IP (OTA)

• User: bohemahouse
• Pass: B2h3maH@use

---

1. Mosquitto (MQTT Broker)

Installation:

sudo apt update
sudo apt install -y mosquitto mosquitto-clients

Configuration (Authentication & WebSockets): Create the password file using the credentials above:

sudo mosquitto_passwd -c /etc/mosquitto/passwd winery_device

Edit the Mosquitto configuration:

sudo nano /etc/mosquitto/conf.d/default.conf

Add the following configuration to allow standard MQTT locally and WebSockets for external Apache proxying:

# Standard MQTT (Local)
listener 1883
allow_anonymous false
password_file /etc/mosquitto/passwd

# WebSockets (Required for Apache reverse proxy from outside)
listener 9001
protocol websockets

Restart the service:

sudo systemctl restart mosquitto

2. Node-RED

Installation: Use the official installation script for Linux/Raspberry Pi:

bash <(curl -sL https://raw.githubusercontent.com/node-red/linux-sh-script/master/node-red-pi-setup)

Start and Enable on Boot:

sudo systemctl enable nodered.service
sudo systemctl start nodered.service

Access Node-RED at: http://<SERVER_IP>:1880

3. InfluxDB (v2)

Installation:

curl -O https://dl.influxdata.com/influxdb/releases/influxdb2_2.7.5-1_$(dpkg --print-architecture).deb
sudo dpkg -i influxdb2_2.7.5-1_*.deb
sudo systemctl enable --now influxdb

Configuration:

• Access the dashboard at http://<SERVER_IP>:8086
• Setup Organization: BohemaHouse
• Setup Bucket: barrels
• Generate an All Access API Token. In Node-RED, install node-red-contrib-influxdb and use this token to connect the output node.

4. Grafana

Installation:

sudo apt-get install -y apt-transport-https software-properties-common wget
sudo wget -q -O /usr/share/keyrings/grafana.key https://apt.grafana.com/gpg.key
echo "deb [signed-by=/usr/share/keyrings/grafana.key] https://apt.grafana.com stable main" | sudo tee /etc/apt/sources.list.d/grafana.list
sudo apt update
sudo apt install -y grafana

Change Port (Avoids conflict with Gitea on port 3000):

sudo nano /etc/grafana/grafana.ini

Find the [server] section, uncomment the port line, and change it:

http_port = 3030

Start and Enable on Boot:

sudo systemctl enable --now grafana-server

Access Grafana at: http://<SERVER_IP>:3030 Note: Connect to InfluxDB using the Flux query language.

---

Remote Access (Apache Reverse Proxy for Mosquitto)

To safely receive MQTT packages from outside the local network using your existing Apache server, you should expose Mosquitto via MQTT over WebSockets.

1. Enable Apache WebSocket Proxy Modules:

sudo a2enmod proxy
sudo a2enmod proxy_wstunnel
sudo systemctl restart apache2

2. Apache VirtualHost Configuration: Add the following ProxyPass rules inside your existing HTTPS <VirtualHost *:443> block for your domain (e.g., in /etc/apache2/sites-available/yourdomain.conf):

# Proxy MQTT WebSockets to local Mosquitto on port 9001
ProxyPass /mqtt ws://127.0.0.1:9001/
ProxyPassReverse /mqtt ws://127.0.0.1:9001/

3. Apply Changes:

sudo systemctl reload apache2

Connecting from the Outside: Your external devices (like the ESP32 or an external web dashboard) can now connect to your MQTT broker using the WebSocket protocol over TLS:

• URL: wss://yourdomain.com/mqtt
• Username/Password: Use the winery_device credentials.