added control page

docker-compose.yml

@@ -7,6 +7,7 @@ services:
       - sqlite-data:/data
     environment:
       - DB_PATH=/data/speedtest.db
+      - SPEEDTEST_ENABLED=${SPEEDTEST_ENABLED:-true}
 
   ping:
     build: ./measurement
@@ -17,9 +18,23 @@ services:
       - sqlite-data:/data
     environment:
       - DB_PATH=/data/speedtest.db
-      - PING_INTERVAL=5
+      - PING_INTERVAL=${PING_INTERVAL:-5}
     command: python3 /app/run_ping.py
 
+  control:
+    build: ./measurement
+    container_name: control
+    restart: unless-stopped
+    ports:
+      - "${CONTROL_PORT:-80}:80"
+    volumes:
+      - sqlite-data:/data
+    environment:
+      - DB_PATH=/data/speedtest.db
+      - SPEEDTEST_ENABLED=${SPEEDTEST_ENABLED:-true}
+      - GRAFANA_PORT=${GRAFANA_PORT}
+    command: python3 /app/control.py
+
   grafana:
     image: grafana/grafana:latest
     container_name: grafana
@@ -30,8 +45,14 @@ services:
       - GF_SECURITY_ADMIN_USER=${GRAFANA_ADMIN_USER}
       - GF_SECURITY_ADMIN_PASSWORD=${GRAFANA_ADMIN_PASSWORD}
       - GF_INSTALL_PLUGINS=frser-sqlite-datasource
+      - GF_AUTH_ANONYMOUS_ENABLED=true
+      - GF_AUTH_ANONYMOUS_ORG_NAME=Main Org.
+      - GF_AUTH_ANONYMOUS_ORG_ROLE=Viewer
+      - GF_AUTH_ANONYMOUS_HIDE_VERSION=true
     volumes:
-      - sqlite-data:/data
+      # :ro because any Grafana viewer (incl. anonymous) can send arbitrary SQL
+      # to the datasource API; the mount and mode=ro keep that harmless.
+      - sqlite-data:/data:ro
       - ./grafana/provisioning:/etc/grafana/provisioning
 
 volumes: