refactor: migrate UptimeRobot configuration from client-side dynamic form to environment variable-based monitoring

.env.example

@@ -45,12 +45,14 @@ CLOUDFLARE_PROXY_URL=
 # If unset, proxy still works but without app-to-worker auth
 # Generate with: openssl rand -hex 24
 CLOUDFLARE_PROXY_SECRET=
-# Comma-separated list of domains to proxy. Use "*" to proxy everything.
-CLOUDFLARE_PROXY_DOMAINS=api.telegram.org,discord.com,discordapp.com
-
-# Dashboard helper hardening
-UPTIMEROBOT_SETUP_ENABLED=true
-UPTIMEROBOT_RATE_LIMIT_PER_MINUTE=5
+# Extra domains to proxy, merged with built-in defaults (Telegram, Discord, WhatsApp,
+# Facebook, Google). Comma-separated. Set to "*" to proxy ALL external traffic.
+# Leave unset to proxy only the built-in default domains.
+# CLOUDFLARE_PROXY_DOMAINS=api.sendgrid.com,smtp.sendgrid.net,slack.com
+
+# UptimeRobot keep-alive: add your Main API key (NOT Read-only or Monitor-specific).
+# Monitor is created automatically at boot. Status shown on the dashboard.
+# UPTIMEROBOT_API_KEY=ur_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
 
 # Max seconds to wait for n8n readiness at startup
 N8N_STARTUP_TIMEOUT=180

README.md

@@ -12,6 +12,8 @@ secrets:
     description: HuggingFace token with write access. Used for automatic workspace backup.
   - name: CLOUDFLARE_WORKERS_TOKEN
     description: Cloudflare API token for automatic Worker proxy setup.
+  - name: UPTIMEROBOT_API_KEY
+    description: UptimeRobot API key for automatic monitor setup.
 ---
 
 <!-- Badges -->
@@ -45,7 +47,7 @@ secrets:
 - 🔐 **Secure by Default:** Uses n8n's native user management and restricted file permissions (`umask 0077`).
 - 🌐 **Built-in Connectivity:** Includes transparent outbound proxying via Cloudflare Workers for Telegram, WhatsApp-related APIs, Google APIs, Discord, and other external services.
 - 📊 **Premium Dashboard:** Beautiful Web UI at `/` for real-time monitoring of uptime, sync health, and n8n status.
-- ⏰ **Easy Keep-Alive:** Set up a one-time UptimeRobot monitor directly from the dashboard to keep your free Space awake.
+- ⏰ **Easy Keep-Alive:** Add `UPTIMEROBOT_API_KEY` as a Space secret and the monitor is created automatically at boot — no manual setup.
 - 🐳 **Optimized Infrastructure:** Minimal resource usage with clean startup logs and production-ready proxying.
 
 ## 🎥 Video Tutorial
@@ -124,14 +126,7 @@ Hugging8n automatically creates a private dataset named `hugging8n-backup` in yo
 
 ## 💓 Staying Alive *(Recommended on Free HF Spaces)*
 
-To help keep your Space awake, set up an external [UptimeRobot](https://uptimerobot.com/) monitor directly from the dashboard UI.
-
-1. Open your Space's dashboard (`/`).
-2. Find the **Keep Space Awake** section.
-3. Paste your UptimeRobot **Main API key**.
-4. Click **Create Monitor**.
-
-Hugging8n will automatically create a monitor for your Space's `/health` endpoint.
+Add your [UptimeRobot](https://uptimerobot.com/) **Main API key** as a Space secret named `UPTIMEROBOT_API_KEY`. Hugging8n will automatically create a monitor for your Space's `/health` endpoint at boot. The dashboard shows the current status (configured, setting up, or failed).
 
 ## 🔐 Security & Advanced *(Optional)*
 
@@ -142,14 +137,13 @@ Customize your instance with these environment variables:
 | `GENERIC_TIMEZONE` | `UTC` | Timezone for your n8n instance |
 | `N8N_LOG_LEVEL` | `error` | Set to `info` or `debug` for more details |
 | `CLOUDFLARE_WORKERS_TOKEN` | — | Cloudflare API token for automatic Worker setup |
-| `CLOUDFLARE_PROXY_DOMAINS` | `*` | Comma-separated domains to proxy (or `*` for all external traffic) |
+| `CLOUDFLARE_PROXY_DOMAINS` | — | Extra domains to proxy, merged with built-in defaults. Set to `*` to proxy all external traffic. Leave unset to use defaults only. |
 | `CLOUDFLARE_PROXY_SECRET` | — | Optional shared secret for proxy authentication |
 | `CLOUDFLARE_WORKER_NAME` | auto | Custom name for the automatically created Worker |
 | `CLOUDFLARE_ACCOUNT_ID` | auto | Optional Cloudflare account ID override |
 | `SPACE_HOST_OVERRIDE` | — | Override detected host for custom domains |
 | `N8N_STARTUP_TIMEOUT` | `180` | Max seconds to wait for n8n readiness |
-| `UPTIMEROBOT_SETUP_ENABLED` | `true` | Enable/disable dashboard helper endpoint |
-| `UPTIMEROBOT_RATE_LIMIT_PER_MINUTE` | `5` | Rate limit for monitor creation |
+| `UPTIMEROBOT_API_KEY` | — | UptimeRobot Main API key. When set, a monitor is created automatically at boot. |
 
 ## 💻 Local Development
 
@@ -177,9 +171,9 @@ docker run -p 7861:7861 --env-file .env hugging8n
 
 ## 🐛 Troubleshooting
 
-- **Telegram/Google/WhatsApp not connecting:** Ensure `CLOUDFLARE_WORKERS_TOKEN` or `CLOUDFLARE_PROXY_URL` is set correctly, or keep `CLOUDFLARE_PROXY_DOMAINS=*`.
+- **Telegram/Google/WhatsApp not connecting:** Ensure `CLOUDFLARE_WORKERS_TOKEN` or `CLOUDFLARE_PROXY_URL` is set. Use `CLOUDFLARE_PROXY_DOMAINS=*` to proxy all external traffic.
 - **Workflows not saving:** Check if `HF_TOKEN` has **Write** access to your account.
-- **Space keeps sleeping:** Use the dashboard to set up an UptimeRobot monitor.
+- **Space keeps sleeping:** Add `UPTIMEROBOT_API_KEY` as a Space secret to enable automatic keep-awake monitoring.
 - **Authentication errors:** n8n v2 uses its own internal users; ensure you created the owner account on first run.
 
 ## 🌟 More Projects
@@ -202,9 +196,11 @@ Similar projects by [@somratpro](https://github.com/somratpro) — all free, one
 If Hugging8n saves you time, consider buying me a coffee to keep the projects alive!
 
 **USDT (TRC-20 / TRON network only)**
+
 ```
 TELx8TJz1W1h7n6SgpgGNNGZXpJCEUZrdB
 ```
+
 > [!WARNING]
 > Send **USDT on TRC-20 network only**. Sending other tokens or using a different network will result in permanent loss.
 

cloudflare-proxy-setup.py

@@ -12,13 +12,33 @@ from pathlib import Path
 API_BASE = "https://api.cloudflare.com/client/v4"
 ENV_FILE = Path("/tmp/hugging8n-cloudflare-proxy.env")
 DEFAULT_ALLOWED = [
+    # Messaging
     "api.telegram.org",
     "discord.com",
     "discordapp.com",
     "gateway.discord.gg",
     "status.discord.com",
     "web.whatsapp.com",
+    # Social — confirmed/likely blocked by HF firewall
     "graph.facebook.com",
+    "graph.instagram.com",
+    "api.twitter.com",
+    "api.x.com",
+    "upload.twitter.com",
+    "api.linkedin.com",
+    "www.linkedin.com",
+    "open.tiktokapis.com",
+    "oauth.reddit.com",
+    # Video
+    "youtube.com",
+    "www.youtube.com",
+    # AI APIs
+    "api.openai.com",
+    # Email HTTP APIs (SMTP ports are blocked; use these instead)
+    "api.resend.com",
+    "api.sendgrid.com",
+    "api.mailgun.net",
+    # Google
     "googleapis.com",
     "google.com",
     "googleusercontent.com",
@@ -210,10 +230,17 @@ def main() -> int:
 
         worker_name = derive_worker_name()
         allowed_raw = os.environ.get("CLOUDFLARE_PROXY_DOMAINS", "").strip()
-        allow_proxy_all = not allowed_raw or allowed_raw == "*"
-        allowed_targets = DEFAULT_ALLOWED if allow_proxy_all else [
-            value.strip() for value in allowed_raw.split(",") if value.strip()
-        ]
+        allow_proxy_all = allowed_raw == "*"
+        if allow_proxy_all:
+            allowed_targets = DEFAULT_ALLOWED
+        else:
+            extra = [v.strip() for v in allowed_raw.split(",") if v.strip()]
+            seen = set(DEFAULT_ALLOWED)
+            allowed_targets = list(DEFAULT_ALLOWED)
+            for domain in extra:
+                if domain not in seen:
+                    allowed_targets.append(domain)
+                    seen.add(domain)
         proxy_secret = existing_secret or secrets.token_urlsafe(24)
         worker_source = render_worker(proxy_secret, allowed_targets, allow_proxy_all)
 

cloudflare-proxy.js

@@ -23,11 +23,31 @@ if (
 
 const DEBUG = process.env.CLOUDFLARE_PROXY_DEBUG === "true";
 const PROXY_SHARED_SECRET = (process.env.CLOUDFLARE_PROXY_SECRET || "").trim();
-const PROXY_DOMAINS = process.env.CLOUDFLARE_PROXY_DOMAINS || "*";
-const BLOCKED_DOMAINS = PROXY_DOMAINS.split(",")
-  .map((domain) => domain.trim())
-  .filter(Boolean);
-const PROXY_ALL = PROXY_DOMAINS === "*";
+const DEFAULT_PROXY_DOMAINS = [
+  "api.telegram.org", "discord.com", "discordapp.com",
+  "gateway.discord.gg", "status.discord.com", "web.whatsapp.com",
+  "graph.facebook.com", "graph.instagram.com",
+  "api.twitter.com", "api.x.com", "upload.twitter.com",
+  "api.linkedin.com", "www.linkedin.com",
+  "open.tiktokapis.com", "oauth.reddit.com",
+  "youtube.com", "www.youtube.com",
+  "api.openai.com",
+  "api.resend.com", "api.sendgrid.com", "api.mailgun.net",
+  "googleapis.com", "google.com", "googleusercontent.com", "gstatic.com",
+];
+const PROXY_DOMAINS_RAW = (process.env.CLOUDFLARE_PROXY_DOMAINS || "").trim();
+const PROXY_ALL = PROXY_DOMAINS_RAW === "*";
+let BLOCKED_DOMAINS;
+if (PROXY_ALL) {
+  BLOCKED_DOMAINS = [];
+} else {
+  const extra = PROXY_DOMAINS_RAW.split(",").map((d) => d.trim()).filter(Boolean);
+  const seen = new Set(DEFAULT_PROXY_DOMAINS);
+  BLOCKED_DOMAINS = [...DEFAULT_PROXY_DOMAINS];
+  for (const d of extra) {
+    if (!seen.has(d)) { BLOCKED_DOMAINS.push(d); seen.add(d); }
+  }
+}
 
 if (PROXY_URL) {
   try {

health-server.js

@@ -1,5 +1,4 @@
 const http = require("http");
-const https = require("https");
 const fs = require("fs");
 const net = require("net");
 
@@ -7,15 +6,9 @@ const PORT = Number(process.env.PUBLIC_PORT || 7861);
 const TARGET_PORT = Number(process.env.N8N_PORT || 5678);
 const TARGET_HOST = "127.0.0.1";
 const SYNC_STATUS_FILE = "/tmp/hugging8n-sync-status.json";
+const UPTIMEROBOT_STATUS_FILE = "/tmp/hugging8n-uptimerobot-status.json";
+const UPTIMEROBOT_API_KEY_SET = !!process.env.UPTIMEROBOT_API_KEY;
 const startTime = Date.now();
-const UPTIMEROBOT_SETUP_ENABLED =
-  String(process.env.UPTIMEROBOT_SETUP_ENABLED || "true").toLowerCase() ===
-  "true";
-const UPTIMEROBOT_RATE_WINDOW_MS = 60 * 1000;
-const UPTIMEROBOT_RATE_MAX = Number(
-  process.env.UPTIMEROBOT_RATE_LIMIT_PER_MINUTE || 5,
-);
-const uptimerobotRateMap = new Map();
 
 function parseRequestUrl(url) {
   try {
@@ -38,6 +31,15 @@ function getStatus() {
   };
 }
 
+function getUptimeRobotStatus() {
+  try {
+    if (fs.existsSync(UPTIMEROBOT_STATUS_FILE)) {
+      return JSON.parse(fs.readFileSync(UPTIMEROBOT_STATUS_FILE, "utf8"));
+    }
+  } catch {}
+  return null;
+}
+
 function probeN8nHealth(timeoutMs = 1500) {
   return new Promise((resolve) => {
     const request = http.get(
@@ -60,46 +62,6 @@ function probeN8nHealth(timeoutMs = 1500) {
   });
 }
 
-function getRequesterIp(req) {
-  return (
-    req.headers["x-forwarded-for"]?.split(",")[0]?.trim() ||
-    req.socket.remoteAddress ||
-    "unknown"
-  );
-}
-
-function isRateLimited(req) {
-  const now = Date.now();
-  const ip = getRequesterIp(req);
-  const bucket = uptimerobotRateMap.get(ip) || [];
-  const recent = bucket.filter((ts) => now - ts < UPTIMEROBOT_RATE_WINDOW_MS);
-  recent.push(now);
-  uptimerobotRateMap.set(ip, recent);
-  return recent.length > UPTIMEROBOT_RATE_MAX;
-}
-
-// Prune stale rate-limit buckets every 5 minutes to prevent unbounded growth.
-setInterval(() => {
-  const cutoff = Date.now() - UPTIMEROBOT_RATE_WINDOW_MS;
-  for (const [ip, timestamps] of uptimerobotRateMap) {
-    if (timestamps.every((ts) => ts < cutoff)) uptimerobotRateMap.delete(ip);
-  }
-}, 5 * 60 * 1000).unref();
-
-function isAllowedUptimeSetupOrigin(req) {
-  const host = String(req.headers.host || "").toLowerCase();
-  const origin = String(req.headers.origin || "").toLowerCase();
-  const referer = String(req.headers.referer || "").toLowerCase();
-  if (!host) return false;
-  if (origin && !origin.includes(host)) return false;
-  if (referer && !referer.includes(host)) return false;
-  return true;
-}
-
-function isValidUptimeApiKey(key) {
-  return /^[A-Za-z0-9_-]{20,128}$/.test(String(key || ""));
-}
-
 function renderDashboard(data) {
   const { status } = data.sync;
   const getBadge = (status) => {
@@ -115,42 +77,31 @@ function renderDashboard(data) {
     return `<div class="status-badge ${cls}">${cls === "status-online" ? '<div class="pulse"></div>' : ""}${String(status).toUpperCase()}</div>`;
   };
 
-  const keepAwakeHtml = data.isPrivate
-    ? `
-            <div id="uptimerobot-private-note" class="helper-summary">
-                <strong>This Space is private.</strong> External monitors cannot reliably access private HF health URLs, so keep-awake setup is only available on public Spaces.
-            </div>
-        `
-    : `
-            <div id="uptimerobot-public-flow">
-                <div id="uptimerobot-summary" class="helper-summary">
-                    One-time setup for public Spaces. Paste your UptimeRobot <strong>Main API key</strong> to create the monitor.
-                </div>
-                <button id="uptimerobot-toggle" class="helper-toggle" type="button">
-                    Set Up Monitor
-                </button>
-                <div id="uptimerobot-shell" class="helper-shell hidden">
-                    <div class="helper-copy">
-                        Do <strong>not</strong> use the Read-only API key or a Monitor-specific API key.
-                    </div>
-                    <div class="helper-row">
-                        <input
-                            id="uptimerobot-key"
-                            class="helper-input"
-                            type="password"
-                            placeholder="Paste your UptimeRobot Main API key"
-                            autocomplete="off"
-                        />
-                        <button id="uptimerobot-btn" class="helper-button" type="button">
-                            Create Monitor
-                        </button>
-                    </div>
-                    <div class="helper-note">
-                        One-time setup. Your key is only used to create the monitor for this Space.
-                    </div>
-                </div>
-            </div>
-        `;
+  const urStatus = data.uptimerobotStatus;
+  let keepAwakeHtml;
+  if (urStatus?.configured) {
+    keepAwakeHtml = `
+            <div class="helper-summary success">
+                ${getBadge("configured")}
+                <span>UptimeRobot monitor active for <code>${urStatus.url || "your /health endpoint"}</code>.</span>
+            </div>`;
+  } else if (urStatus?.configured === false) {
+    keepAwakeHtml = `
+            <div class="helper-summary error">
+                ${getBadge("failed")}
+                <span>Monitor setup failed. Check Space logs for details.</span>
+            </div>`;
+  } else if (UPTIMEROBOT_API_KEY_SET) {
+    keepAwakeHtml = `
+            <div class="helper-summary">
+                ${getBadge("syncing")} Setting up UptimeRobot monitor&hellip;
+            </div>`;
+  } else {
+    keepAwakeHtml = `
+            <div class="helper-summary">
+                <strong>Not configured.</strong> Add <code>UPTIMEROBOT_API_KEY</code> to Space secrets to enable keep-awake monitoring.
+            </div>`;
+  }
 
   return `
 <!DOCTYPE html>
@@ -196,7 +147,7 @@ function renderDashboard(data) {
         }
         h1 { font-size: 2.5rem; margin-bottom: 8px; letter-spacing: -1px; }
         .subtitle { color: var(--text-muted); margin-bottom: 32px; font-weight: 300; }
-        
+
         .stats {
             display: grid;
             grid-template-columns: 1fr 1fr;
@@ -233,7 +184,7 @@ function renderDashboard(data) {
         .status-online { background: rgba(34, 197, 94, 0.2); color: var(--success); }
         .status-syncing { background: rgba(245, 158, 11, 0.2); color: var(--warning); }
         .status-offline { background: rgba(239, 68, 68, 0.2); color: var(--error); }
-        
+
         .pulse {
             width: 8px;
             height: 8px;
@@ -269,80 +220,7 @@ function renderDashboard(data) {
             text-align: left;
         }
         .keep-alive h3 { font-size: 0.85rem; color: var(--text-muted); margin-bottom: 12px; }
-        
-        .helper-card {
-            width: 100%;
-        }
-        .helper-copy {
-            color: var(--text-muted);
-            font-size: 0.85rem;
-            line-height: 1.6;
-            margin-top: 10px;
-        }
-        .helper-copy strong {
-            color: var(--text);
-        }
-        .helper-row {
-            display: flex;
-            gap: 10px;
-            margin-top: 16px;
-            flex-wrap: wrap;
-        }
-        .helper-input {
-            flex: 1;
-            min-width: 240px;
-            background: rgba(255, 255, 255, 0.04);
-            border: 1px solid rgba(255, 255, 255, 0.08);
-            color: var(--text);
-            border-radius: 12px;
-            padding: 12px 16px;
-            font: inherit;
-        }
-        .helper-input::placeholder {
-            color: var(--text-muted);
-        }
-        .helper-button {
-            background: var(--accent);
-            color: #fff;
-            border: 0;
-            border-radius: 12px;
-            padding: 12px 18px;
-            font: inherit;
-            font-weight: 600;
-            cursor: pointer;
-        }
-        .helper-button:disabled {
-            opacity: 0.6;
-            cursor: wait;
-        }
-        .hidden {
-            display: none !important;
-        }
-        .helper-note {
-            margin-top: 10px;
-            font-size: 0.82rem;
-            color: var(--text-muted);
-        }
-        .helper-result {
-            margin-top: 14px;
-            padding: 12px 14px;
-            border-radius: 12px;
-            font-size: 0.9rem;
-            display: none;
-        }
-        .helper-result.ok {
-            display: block;
-            background: rgba(34, 197, 94, 0.1);
-            color: var(--success);
-        }
-        .helper-result.error {
-            display: block;
-            background: rgba(239, 68, 68, 0.1);
-            color: var(--error);
-        }
-        .helper-shell {
-            margin-top: 12px;
-        }
+
         .helper-summary {
             margin-top: 14px;
             padding: 12px 14px;
@@ -351,34 +229,28 @@ function renderDashboard(data) {
             color: var(--text-muted);
             font-size: 0.85rem;
             line-height: 1.5;
-        }
-        .helper-summary strong {
-            color: var(--text);
-        }
-        .helper-summary.success {
-            background: rgba(34, 197, 94, 0.08);
-        }
-        .helper-toggle {
-            margin-top: 14px;
-            display: inline-flex;
+            display: flex;
             align-items: center;
-            justify-content: center;
-            background: rgba(255, 255, 255, 0.04);
+            gap: 10px;
+            flex-wrap: wrap;
+        }
+        .helper-summary strong { color: var(--text); }
+        .helper-summary code {
+            background: rgba(255,255,255,0.06);
+            padding: 2px 6px;
+            border-radius: 6px;
+            font-size: 0.82rem;
             color: var(--text);
-            border: 1px solid rgba(255, 255, 255, 0.08);
-            border-radius: 12px;
-            padding: 10px 16px;
-            font: inherit;
-            font-weight: 600;
-            cursor: pointer;
         }
+        .helper-summary.success { background: rgba(34, 197, 94, 0.08); }
+        .helper-summary.error { background: rgba(239, 68, 68, 0.08); }
     </style>
 </head>
 <body>
     <div class="dashboard">
         <h1>🔗 Hugging8n</h1>
         <p class="subtitle">Workflow Automation Space</p>
-        
+
         <div class="stats">
             <div class="stat-card">
                 <div class="stat-label">Uptime</div>
@@ -401,233 +273,15 @@ function renderDashboard(data) {
 
         <a href="/home/workflows" target="_blank" class="btn-primary">Open n8n Editor</a>
 
-        <div class="keep-alive helper-card">
+        <div class="keep-alive">
             <span class="stat-label">Keep Space Awake</span>
             ${keepAwakeHtml}
-            <div id="uptimerobot-result" class="helper-result"></div>
         </div>
     </div>
-
-    <script>
-        function getCurrentSearch() {
-            return window.location.search || '';
-        }
-
-        const monitorStateKey = 'hugging8n_uptimerobot_setup_v1';
-        const KEEP_AWAKE_PRIVATE = ${data.isPrivate ? "true" : "false"};
-
-        function setMonitorUiState(isConfigured) {
-            const summary = document.getElementById('uptimerobot-summary');
-            const shell = document.getElementById('uptimerobot-shell');
-            const toggle = document.getElementById('uptimerobot-toggle');
-
-            if (!summary || !shell || !toggle) return;
-
-            if (isConfigured) {
-                summary.classList.add('success');
-                summary.innerHTML = '<strong>Already set up.</strong> Your UptimeRobot monitor should keep this public Space awake.';
-                shell.classList.add('hidden');
-                toggle.textContent = 'Set Up Again';
-            } else {
-                summary.classList.remove('success');
-                summary.innerHTML = 'One-time setup for public Spaces. Paste your UptimeRobot <strong>Main API key</strong> to create the monitor.';
-                toggle.textContent = 'Set Up Monitor';
-            }
-        }
-
-        function restoreMonitorUiState() {
-            try {
-                const value = window.localStorage.getItem(monitorStateKey);
-                setMonitorUiState(value === 'done');
-            } catch {
-                setMonitorUiState(false);
-            }
-        }
-
-        function toggleMonitorSetup() {
-            const shell = document.getElementById('uptimerobot-shell');
-            shell.classList.toggle('hidden');
-        }
-
-        async function setupUptimeRobot() {
-            const input = document.getElementById('uptimerobot-key');
-            const button = document.getElementById('uptimerobot-btn');
-            const result = document.getElementById('uptimerobot-result');
-            const apiKey = input.value.trim();
-
-            if (!apiKey) {
-                result.className = 'helper-result error';
-                result.textContent = 'Paste your UptimeRobot Main API key first.';
-                return;
-            }
-
-            button.disabled = true;
-            button.textContent = 'Creating...';
-            result.className = 'helper-result';
-            result.textContent = '';
-
-            try {
-                const res = await fetch('/uptimerobot/setup' + getCurrentSearch(), {
-                    method: 'POST',
-                    headers: { 'Content-Type': 'application/json' },
-                    body: JSON.stringify({ apiKey })
-                });
-                const data = await res.json();
-
-                if (!res.ok) {
-                    throw new Error(data.message || 'Failed to create monitor.');
-                }
-
-                result.className = 'helper-result ok';
-                result.textContent = data.message || 'UptimeRobot monitor is ready.';
-                input.value = '';
-                try {
-                    window.localStorage.setItem(monitorStateKey, 'done');
-                } catch {}
-                setMonitorUiState(true);
-                document.getElementById('uptimerobot-shell').classList.add('hidden');
-            } catch (error) {
-                result.className = 'helper-result error';
-                result.textContent = error.message || 'Failed to create monitor.';
-            } finally {
-                button.disabled = false;
-                button.textContent = 'Create Monitor';
-            }
-        }
-
-        if (!KEEP_AWAKE_PRIVATE) {
-            restoreMonitorUiState();
-            document.getElementById('uptimerobot-btn').addEventListener('click', setupUptimeRobot);
-            document.getElementById('uptimerobot-toggle').addEventListener('click', toggleMonitorSetup);
-        }
-    </script>
 </body>
 </html>`;
 }
 
-async function resolveSpaceIsPrivate(req) {
-  const host = (req.headers.host || "").split(":")[0];
-  if (!host.endsWith(".hf.space")) return false;
-
-  const params = new URLSearchParams(req.url.split("?")[1] || "");
-  const token = params.get("__sign");
-  if (!token) return false;
-  try {
-    const payload = JSON.parse(
-      Buffer.from(token.split(".")[1], "base64").toString(),
-    );
-    const sub = payload.sub || "";
-    const match_sub = sub.match(/^\/spaces\/([^/]+)\/([^/]+)$/);
-    if (!match_sub) return false;
-    return new Promise((resolve) => {
-      https
-        .get(
-          `https://huggingface.co/api/spaces/${match_sub[1]}/${match_sub[2]}`,
-          { headers: { "User-Agent": "Hugging8n" } },
-          (res) => {
-            resolve(
-              res.statusCode === 401 ||
-                res.statusCode === 403 ||
-                res.statusCode === 404,
-            );
-          },
-        )
-        .on("error", () => resolve(false));
-    });
-  } catch {
-    return false;
-  }
-}
-
-function readRequestBody(req) {
-  return new Promise((resolve, reject) => {
-    let body = "";
-    req.on("data", (chunk) => {
-      body += chunk;
-      if (body.length > 1024 * 64) {
-        reject(new Error("Request too large"));
-        req.destroy();
-      }
-    });
-    req.on("end", () => resolve(body));
-    req.on("error", reject);
-  });
-}
-
-function postUptimeRobot(path, form) {
-  const body = new URLSearchParams(form).toString();
-  return new Promise((resolve, reject) => {
-    const request = https.request(
-      {
-        hostname: "api.uptimerobot.com",
-        port: 443,
-        method: "POST",
-        path,
-        headers: {
-          "Content-Type": "application/x-www-form-urlencoded",
-          "Content-Length": Buffer.byteLength(body),
-        },
-      },
-      (response) => {
-        let raw = "";
-        response.setEncoding("utf8");
-        response.on("data", (chunk) => {
-          raw += chunk;
-        });
-        response.on("end", () => {
-          try {
-            resolve(JSON.parse(raw));
-          } catch {
-            reject(new Error("Unexpected response from UptimeRobot"));
-          }
-        });
-      },
-    );
-    request.on("error", reject);
-    request.write(body);
-    request.end();
-  });
-}
-
-async function createUptimeRobotMonitor(apiKey, host) {
-  const cleanHost = String(host || "")
-    .replace(/^https?:\/\//, "")
-    .replace(/\/.*$/, "");
-  if (!cleanHost.endsWith(".hf.space")) {
-    throw new Error("Uptime setup is only supported on .hf.space hosts.");
-  }
-  if (!cleanHost) throw new Error("Missing Space host.");
-  const monitorUrl = `https://${cleanHost}/health`;
-  const existing = await postUptimeRobot("/v2/getMonitors", {
-    api_key: apiKey,
-    format: "json",
-    logs: "0",
-    response_times: "0",
-    response_times_limit: "1",
-  });
-  const existingMonitor = Array.isArray(existing.monitors)
-    ? existing.monitors.find((m) => m.url === monitorUrl)
-    : null;
-  if (existingMonitor) {
-    return {
-      created: false,
-      message: `Monitor already exists for ${monitorUrl}`,
-    };
-  }
-  const created = await postUptimeRobot("/v2/newMonitor", {
-    api_key: apiKey,
-    format: "json",
-    type: "1",
-    friendly_name: `Hugging8n ${cleanHost}`,
-    url: monitorUrl,
-    interval: "300",
-  });
-  if (created.stat !== "ok") {
-    throw new Error(created?.error?.message || "Failed to create monitor.");
-  }
-  return { created: true, message: `Monitor created for ${monitorUrl}` };
-}
-
 const server = http.createServer(async (req, res) => {
   const url = parseRequestUrl(req.url);
   const pathname = url.pathname;
@@ -655,53 +309,14 @@ const server = http.createServer(async (req, res) => {
       }),
     );
   }
-  if (pathname === "/uptimerobot/setup" && req.method === "POST") {
-    void (async () => {
-      try {
-        if (!UPTIMEROBOT_SETUP_ENABLED) {
-          res.writeHead(403, { "Content-Type": "application/json" });
-          return res.end(
-            JSON.stringify({ message: "Uptime setup is disabled." }),
-          );
-        }
-        if (isRateLimited(req)) {
-          res.writeHead(429, { "Content-Type": "application/json" });
-          return res.end(JSON.stringify({ message: "Too many requests." }));
-        }
-        if (!isAllowedUptimeSetupOrigin(req)) {
-          res.writeHead(403, { "Content-Type": "application/json" });
-          return res.end(
-            JSON.stringify({ message: "Invalid request origin." }),
-          );
-        }
-
-        const body = await readRequestBody(req);
-        const { apiKey } = JSON.parse(body || "{}");
-        if (!isValidUptimeApiKey(apiKey)) {
-          res.writeHead(400, { "Content-Type": "application/json" });
-          return res.end(
-            JSON.stringify({ message: "A valid API key is required." }),
-          );
-        }
-        const result = await createUptimeRobotMonitor(apiKey, req.headers.host);
-        res.writeHead(200, { "Content-Type": "application/json" });
-        res.end(JSON.stringify(result));
-      } catch (e) {
-        res.writeHead(400, { "Content-Type": "application/json" });
-        res.end(JSON.stringify({ message: e.message || "Invalid request." }));
-      }
-    })();
-    return;
-  }
   if (pathname === "/" || pathname === "/dashboard") {
     const uptime = Math.floor((Date.now() - startTime) / 1000);
-    const isPrivate = await resolveSpaceIsPrivate(req);
     res.writeHead(200, { "Content-Type": "text/html" });
     return res.end(
       renderDashboard({
         uptimeHuman: `${Math.floor(uptime / 3600)}h ${Math.floor((uptime % 3600) / 60)}m`,
         sync: getStatus(),
-        isPrivate,
+        uptimerobotStatus: getUptimeRobotStatus(),
       }),
     );
   }

setup-uptimerobot.sh

@@ -4,6 +4,7 @@ set -euo pipefail
 API_URL="https://api.uptimerobot.com/v2"
 API_KEY="${UPTIMEROBOT_API_KEY:-}"
 SPACE_HOST_INPUT="${1:-${SPACE_HOST:-}}"
+STATUS_FILE="/tmp/hugging8n-uptimerobot-status.json"
 
 if [ -z "$API_KEY" ]; then
   echo "Missing UPTIMEROBOT_API_KEY."
@@ -22,7 +23,7 @@ SPACE_HOST_CLEAN="${SPACE_HOST_CLEAN%%/*}"
 
 MONITOR_URL="https://${SPACE_HOST_CLEAN}/health"
 MONITOR_NAME="${UPTIMEROBOT_MONITOR_NAME:-Hugging8n ${SPACE_HOST_CLEAN}}"
-INTERVAL="${UPTIMEROBOT_INTERVAL:-5}"
+INTERVAL="${UPTIMEROBOT_INTERVAL:-300}"
 
 MONITORS_RESPONSE=$(curl -sS -X POST "${API_URL}/getMonitors" \
   -d "api_key=${API_KEY}" \
@@ -36,6 +37,8 @@ MONITOR_ID=$(printf '%s' "$MONITORS_RESPONSE" | jq -r --arg url "$MONITOR_URL" '
 ')
 
 if [ -n "$MONITOR_ID" ]; then
+  printf '{"configured":true,"monitorId":"%s","url":"%s","alreadyExisted":true,"timestamp":"%s"}\n' \
+    "$MONITOR_ID" "$MONITOR_URL" "$(date -u +%Y-%m-%dT%H:%M:%SZ)" > "$STATUS_FILE"
   echo "Monitor already exists (id=${MONITOR_ID}) for ${MONITOR_URL}"
   exit 0
 fi
@@ -59,9 +62,13 @@ CREATE_RESPONSE=$(curl "${CURL_ARGS[@]}")
 CREATE_STATUS=$(printf '%s' "$CREATE_RESPONSE" | jq -r '.stat // "fail"')
 
 if [ "$CREATE_STATUS" != "ok" ]; then
+  printf '{"configured":false,"error":"creation failed","timestamp":"%s"}\n' \
+    "$(date -u +%Y-%m-%dT%H:%M:%SZ)" > "$STATUS_FILE"
   printf '%s\n' "$CREATE_RESPONSE"
   exit 1
 fi
 
 NEW_ID=$(printf '%s' "$CREATE_RESPONSE" | jq -r '.monitor.id // empty')
+printf '{"configured":true,"monitorId":"%s","url":"%s","timestamp":"%s"}\n' \
+  "${NEW_ID:-}" "$MONITOR_URL" "$(date -u +%Y-%m-%dT%H:%M:%SZ)" > "$STATUS_FILE"
 echo "Created UptimeRobot monitor ${NEW_ID:-"(id unavailable)"} for ${MONITOR_URL}"

start.sh

@@ -77,7 +77,6 @@ CLOUDFLARE_WORKERS_TOKEN="${CLOUDFLARE_WORKERS_TOKEN:-${CLOUDFLARE_API_TOKEN:-}}
 export CLOUDFLARE_WORKERS_TOKEN
 CF_PROXY_ENV_FILE="/tmp/hugging8n-cloudflare-proxy.env"
 if [ -n "${CLOUDFLARE_WORKERS_TOKEN:-}" ] || [ -n "${CLOUDFLARE_PROXY_URL:-}" ]; then
-  export CLOUDFLARE_PROXY_DOMAINS="${CLOUDFLARE_PROXY_DOMAINS:-*}"
   export CLOUDFLARE_PROXY_DEBUG="${CLOUDFLARE_PROXY_DEBUG:-false}"
   echo "Preparing Cloudflare outbound proxy..."
   python3 "$APP_DIR/cloudflare-proxy-setup.py" || true
@@ -119,6 +118,11 @@ fi
 node "$APP_DIR/health-server.js" &
 PROXY_PID=$!
 
+if [ -n "${UPTIMEROBOT_API_KEY:-}" ] && [ -n "${SPACE_HOST_DETECTED:-}" ]; then
+  echo "Setting up UptimeRobot monitor..."
+  bash "$APP_DIR/setup-uptimerobot.sh" "$SPACE_HOST_DETECTED" || true
+fi
+
 n8n start &
 N8N_PID=$!