I have two questions, also for @fhunleth.
The first is very similar to @lucaong’s question: How stable would you say that NervesHub is now, seven months after your last status update?
As for the second: What are the current SSL-settings that NervesHub uses by default? Is it using the sane secure defaults outlined in @voltone 's SSL client shootout (which has also been distilled into this talk)?
Hey - I somehow missed these, so sorry for the late replies.
Here’s the status of NervesHub:
One could say that NervesHub is public already - every line of code used by it is open-source. It’s a fairly large Apache 2-licensed Phoenix/LiveView project. Our hosted NervesHub lets anyone register an account (albeit via using mix commands rather than via the web UI). The plan is still to remove the “beta” tag and make our hosted NervesHub look public.
I’d say that if you want to use NervesHub for a commercial device and are comfortable with Elixir tooling that there’s no reason to wait. If your deployment has special needs from the firmware update server that aren’t supported, please check with us. Our hosted NervesHub enforces quotas to keep our costs in line. We’ve been bumping quotas pretty liberally for those who have asked, and once billing is available, you’ll not have to talk with us.
If you’re at a company that is uncomfortable using our hosted NervesHub for firmware updates (no offense taken - my company is one of these), you can setup NervesHub on your own AWS servers. I’m not an AWS person and this doesn’t seem easy to me, but I’m told that if you’re familiar with AWS that it’s ok. We still need to add how to do this to our docs.
Finally, with regard to the security question and SSL settings, both Justin Schneck and I talk with voltone periodically regarding security. I’m sure that we can do better and we’re due for another review. Please DM us or email support@nerves-hub.com, or if it’s proactive/best practice kind of thing, then PRs/GitHub issues would be most appreciated.
Awesome! That sounds great. Thanks for the answer and for the outstanding work on Nerves and its ecosystem!
There is any update on access to nerves hub servers, or any advance with the documentation to deploy into AWS?
We are currently working on additional documentation for this. You can find the PR here: Add docs for first time setup by Mrjaco12 · Pull Request #6 · nerves-hub/documentation · GitHub