- Add local_net entries to PJSIP transports in LAN/VPN mode when
VLAN/VPN subnets are configured, so Asterisk recognizes VPN traffic
as local and mobile devices no longer appear offline on VPN
- Auto-detect VPN interfaces (Tailscale, WireGuard, OpenVPN) and
suggest their subnets in the VLAN/VPN configuration menu
- Add rtp_keepalive=15, rtp_timeout=120, and rtp_timeout_hold=120
to mobile device endpoints to maintain NAT mappings during
WiFi-to-cellular transitions (fixes one-way audio)
- Reduce qualify_frequency from 60s to 30s for faster re-registration
detection when mobile devices change networks
- Update README with VPN troubleshooting and one-way audio guidance
including client-side fixes for Sipnetic and Linphone
https://claude.ai/code/session_01Vm6NLaQuzM4VosAotqS1q8
Stop command improvements:
- Shows actual netstat and systemctl commands being run
- Displays output from each command
- Runs netstat checks between stop attempts
- More transparent debugging
UI improvements:
- Consistent 100px width for action selects and buttons
- Sort dropdown visible in devices header
New features:
- Rename button for rooms (uses prompt dialog)
- Rename button for categories (uses prompt dialog)
- PUT /api/rooms/{ext} endpoint for renaming
- PUT /api/categories/{id} endpoint for renaming
- Python functions: rename_room(), rename_category()
- Add sort dropdown: Extension, Name, Category, Status (Online first), Transport
- Consistent width for action selects (95px) and buttons (65px)
- Extract renderDevices() function for re-sorting without API calls
- Store statusCache globally for sort comparisons
Stop command fix:
- Use double-stop pattern (stop, check port, stop again if needed)
- Print commands being run for debugging
Web Admin UI improvements:
- Sort devices by extension number
- Add Category dropdown to change device category from device list
- Rooms page: card layout with vertical member list, delete room button
- Categories page: card layout with vertical device list, move-to dropdown
- Add Room modal and functionality
- Add Category modal and functionality
- Consistent formatting across all pages (card layout, tables)
- Remove from room/category via buttons on those pages
New API endpoints:
- PUT /api/devices/{ext}/category - change device category
- POST /api/rooms - create new room
- DELETE /api/rooms/{ext} - delete room
- POST /api/categories - create new category
- DELETE /api/categories/{id} - delete category
Python functions added:
- change_device_category()
- create_room(), delete_room()
- create_category(), delete_category()
Goal: Web admin can now fully replace the script for client management
- Fix stop command: mask service before stopping to prevent
Restart=always from respawning the process
- Add "Add to Room" dropdown on device list to add clients to rooms
- Show clickable member badges in rooms (click to remove from room)
- Categories page now displays devices grouped under each category
- Add API endpoints for room membership management (POST/DELETE)
Stop command improvements:
- Added verbose progress output
- Uses pgrep to check if process is running
- Multiple kill attempts with escalating force
- Falls back to lsof if fuser unavailable
- Verifies process is stopped
Transport detection:
- If media_encryption=sdes/dtls found without explicit transport,
assume TLS (for older device configs)
Rename functionality:
- Added rename_device() Python function
- Added do_PUT API handler
- Added rename modal in HTML
- Added showRenameModal/renameDevice JavaScript functions
- Rename button added next to Delete in device list
Status detection:
- Fixed parsing of 'pjsip show endpoints' output
- Looks for Endpoint: header then Contact: line with Avail/NonQual
- Matches bash script logic
Stop command improvements:
- Kill remaining processes with pkill after systemctl stop
- Force kill (-9) if processes still running after 1 second
- Release port with fuser -k as final cleanup
Status detection fix:
- Parse 'pjsip show endpoints' output correctly
- Look for Endpoint: header to get extension number
- Check Contact: lines for 'Avail' or 'NonQual' status
- Matches the bash script's detection logic
Previously the script was only created if it didn't exist,
so updates to the parser weren't being applied. Now the
Python script is regenerated every time to ensure the
latest version is used.
The Python parser was waiting for password= which comes much later
in the auth section. Rewrote to match the simpler bash approach:
- Find device comment line, parse name/category/AA tag
- Find next [extension] line, add device to list
- Update transport/encryption if found in following lines
This matches how show_registered_devices() works in bash.
Port persistence:
- Add WEB_ADMIN_PORT to save_config() and load_config()
- Save config when port is changed in web_admin_menu
- Remove hardcoded initialization that overrode saved config
Device listing fix:
- Rewrite get_devices() parser to properly track state across sections
- Fix regex to handle variable spacing in device comment lines
- Continue tracking device through auth section to capture password
- Devices now properly listed in web admin interface
Fixes:
- Extension deletion now properly removes all sections (endpoint, auth, aor)
using awk for reliable multi-section removal
- Extension renaming now preserves AA tags correctly
- LAN/VPN devices now explicitly use transport=transport-udp to prevent
TLS fallback issues that caused clients to go offline immediately
- LAN devices now have media_encryption=no to prevent SRTP negotiation issues
New Features:
- Web Admin interface for browser-based client management
- View device status (online/offline) in real-time
- Add/delete devices via web interface
- View rooms and categories
- HTTP Basic authentication with SHA256 password hashing
- Access at http://server:8080/clients
- Accessible via Server Settings > Web Admin menu
Verified:
- PTT is correctly disabled by default (only enabled when user configures it)
Changes:
- Update main menu header to use ${SCRIPT_VERSION} variable
- Update pjsip.conf header comment to use ${SCRIPT_VERSION}
- Update Baresip instructions header to use ${SCRIPT_VERSION}
- Changed Baresip heredoc from single-quoted to allow variable expansion
This ensures version display always matches the SCRIPT_VERSION variable
at line 44, eliminating hardcoded version mismatches.
Changes:
- Show both Linphone and Baresip setup in add_device_menu() output
- Remove separate menu requirement - both apps shown together
- Change language from "/e/OS-specific" to generic "if Linphone has audio issues"
- Update domain examples from sip.mydomain.com to asterisk.mydomain.com
- Add note that credentials work for other SIP apps (Zoiper, sipnetic)
- Verify no user FQDN hardcoded in script
This provides immediate access to both SIP app configurations when adding
a device, with clear headers distinguishing between the two approaches.
Based on actual user experience configuring Baresip Android app.
Previous instructions were incorrect/incomplete.
KEY CHANGES:
1. Removed /e/OS-specific language:
- Now generic: "Use if Linphone has audio issues"
- Applicable to all privacy ROMs, not just /e/OS
2. Accurate two-step setup process:
- Step 1: Add account with just SIP URI (ext@domain)
- Step 2: Edit account to add auth username, password, proxy
- This matches actual app behavior
3. Critical field corrections:
- Auth Username: JUST extension number (not ext@domain)
- Outbound Proxy: JUST domain (not sip:server:port format)
- Media Encryption: srtp (select from dropdown)
4. No provisioning URL:
- Clarified Baresip doesn't support remote provisioning
- Must configure manually (unlike Linphone)
5. Added top bar icon reference:
- ☰ = Menu, ✓ = Save, ⋮ = Options
- 📞 = Call, 🔊 = Speaker, 🔇 = Mute, ✕ = Hangup
6. Default action clarification:
- May not exist in all Baresip versions
- Provided alternatives: long-press or phone icon
7. Comprehensive troubleshooting:
- Registration failure solutions
- Dialing issues
- Audio problems
- Screen-off audio (rare with Baresip)
8. Extension dialing guidance:
- Method 1: Just the number (101, 202)
- Method 2: Full format (ext@domain) if needed
9. File renamed:
- .conf → .txt for better readability on phones
Output format:
- Detailed step-by-step instructions
- Quick reference summary at end
- Troubleshooting section
- Icon reference guide
This addresses all user-reported configuration issues and provides
accurate, tested setup instructions based on real app usage.
Baresip works significantly better than Linphone on /e/OS for background
audio operation. Adding dedicated provisioning support.
NEW FEATURE: Baresip Config Generator
- Added create_baresip_config() function in Provisioning Manager
- Generates account configuration with full setup instructions
- Provides both config file and manual entry instructions
- Includes /e/OS-specific permission guidance
Key Benefits of Baresip on /e/OS:
- Better background audio handling than Linphone
- Works with screen off without special hacks
- Lightweight and efficient
- Handles /e/OS microphone permissions more reliably
Configuration Generator Creates:
- Account line in baresip format with all parameters
- Manual entry instructions for Baresip app
- Audio settings recommendations (OpenSL ES)
- Default action setup (Call, not Message)
- Extension dialing guidance
- /e/OS permission instructions
Usage:
- Server Settings → Provisioning Manager → Create Baresip Config
- Enter extension, password, display name
- Get config file with complete setup instructions
- Download via HTTP provisioning or copy to phone
Menu Updates:
- Provisioning Manager option 4: Create Baresip Config
- Option numbers renumbered (Status=5, Directory=6, Troubleshoot=7)
This addresses the persistent /e/OS audio issues by providing a better
SIP client alternative that actually works with /e/OS's privacy model.
- Updated header from 'Easy Asterisk v1.23' to 'v0.9.9'
- Updated pjsip.conf comment from v1.23 to v0.9.9
- Removed 'COTURN: Not installed' status line from main menu
- All COTURN references now completely removed from UI
User-visible changes:
- Main menu now correctly shows 'Easy Asterisk v0.9.9'
- Status section only shows Server and Client (no COTURN line)
- pjsip.conf generated with correct version comment
PROBLEM ADDRESSED:
Users with /e/OS (eFoundation OS) experience no audio transmission unless
Linphone app has focus. This is due to /e/OS's strict privacy controls
preventing background microphone access.
CHANGES:
1. Enhanced linphone.xml template:
- Added keep_service_alive=1 for service persistence
- Added start_at_boot=1 for automatic startup
- Added audio section with speaker routing
- Force audio_route_speaker=1 for background operation
- Updated instructions to reference /e/OS troubleshooting
2. New troubleshoot_eos_audio() function:
- Comprehensive 9-step troubleshooting guide
- Linphone app audio settings configuration
- /e/OS privacy settings walkthrough
- Advanced Privacy feature management
- Network permission configuration
- Autostart and battery optimization settings
- XML provisioning verification
- Speaker mode workaround
- Nuclear option: disable privacy features temporarily
- Alternative SIP app suggestions (Zoiper, CSipSimple, Wave)
- Testing methodology
- Technical explanation of the issue
- Community resources and forum links
3. Added menu item in Provisioning Manager:
- Option 6: "Troubleshoot /e/OS Audio Issues"
- Easily accessible from provisioning workflow
TECHNICAL DETAILS:
The issue occurs because /e/OS restricts background microphone access
even with permissions granted. The OS suspends audio capture when apps
lose focus. Workarounds include forcing speaker mode, disabling specific
privacy features, or using alternative SIP clients with better /e/OS
compatibility.
TESTING STEPS:
1. Make call with Linphone in foreground (audio works)
2. Press Home button
3. If audio stops, issue is confirmed
4. Follow troubleshooting guide in order
This addresses privacy-focused Android ROM compatibility issues and
provides users with clear, actionable solutions.
This is a comprehensive update that removes COTURN and adds several
major features focused on direct LAN/VPN/port-forwarding connections.
VERSION & LICENSE:
- Updated version from v0.9.8.7 to v0.9.9
- Changed license to GNU General Public License v3.0
- Updated copyright header and license information
REMOVED FEATURES:
- Removed all COTURN/TURN relay server code and dependencies
- Removed TURN configuration variables from config system
- Removed TURN firewall rules from UFW configuration
- Removed IP update timer for COTURN
- Focus shifted to direct connections via LAN/VPN/Port-Forwarding
NEW FEATURE: VLAN Configuration
- Added "Configure VLAN Subnets" menu item in Server Settings
- Created configure_vlan_subnets() function with interactive prompts
- Support for multiple VLAN subnets to prevent 30-second call drops
- Updated pjsip.conf generation with multiple local_net entries
- Server IP address now documented in transport configurations
- Added comprehensive split-horizon DNS setup guide
- Includes ctrld.toml examples, dnsmasq configuration, UFW rules
- Provides OPNSense firewall rules and DHCP configuration guidance
NEW FEATURE: Provisioning Manager
- Added provisioning_manager_menu() with full HTTP server management
- Setup HTTP/HTTPS provisioning on ports 8088/8089
- Automatic http.conf configuration with TLS support
- Created symlink management (/usr/share/asterisk <-> /var/lib/asterisk)
- Fixes 404 errors on Ubuntu/Debian systems
- Interactive linphone.xml creator with server-specific settings
- Built-in nano editor for linphone.xml modifications
- Includes Android audio focus fix (prevents pause on screen off)
- Battery optimization instructions for Android devices
- Provisioning status display with file listings
NEW FEATURE: Manual Update System
- Added manual_update_asterisk() function with automatic backups
- Creates timestamped backups before updates
- Automatic rollback on update failure
- Provides rollback instructions for manual recovery
- Update safety with configuration preservation
NEW FEATURE: Room Directory
- Added show_room_directory() visual display
- Distinguishes Ring Groups (📞) from Page Groups (📢)
- Shows extension, members, timeout, and type for each room
- Educational descriptions of group types
INFRASTRUCTURE CHANGES:
- Added provisioning firewall ports (8088/8089) to UFW
- Reorganized code structure with clear section headers
- Added PROVISIONING_DIR constant for /var/lib/asterisk/static-http
- Cleaned up configuration variable management
- Improved menu organization and numbering
MENU UPDATES:
- Server Settings: Added Provisioning Manager (#10)
- Tools Menu: Added Room Directory (#4) and Manual Update (#5)
- Removed COTURN menu item from Server Settings
- Renumbered VLAN Subnets to option #9
DOCUMENTATION:
- Split-horizon DNS guide with ctrld configuration
- dnsmasq setup instructions for local DNS responses
- UFW firewall rules for DNS security
- OPNSense VLAN firewall configuration examples
- Complete DHCP setup guidance for multi-VLAN environments
This update represents a major shift toward direct networking
approaches while providing better VLAN support and client provisioning
capabilities for production deployments.
This update adds comprehensive VLAN support to prevent the common
issue of calls dropping after 30 seconds in multi-VLAN environments.
Changes:
- Added new menu item "Configure VLAN Subnets" in Server Settings
- Created configure_vlan_subnets() function to manage VLAN configuration
- Updated pjsip.conf generation to include multiple local_net entries
- Added server IP address as comment in transport sections for reference
- Persist VLAN settings (HAS_VLANS, VLAN_SUBNETS) in config file
- Updated script version to v0.9.8.8
Technical details:
- The generate_pjsip_conf() function now builds multiple local_net
entries when VLANs are configured
- Each VLAN subnet is added as a separate local_net line in the
transport configuration
- Server IP is detected and documented in transport sections
- Transports continue to bind to 0.0.0.0 for all-interface listening
This fixes the issue where Asterisk would treat devices on different
VLANs as external connections, causing NAT issues and call drops.
This commit adds export and import functionality for client configurations
to the Client Settings menu, allowing users to save and restore provisioned
clients during Asterisk reinstallations.
Features:
- Export clients: Creates a tar.gz archive containing all provisioned devices,
categories, and rooms with metadata (saved to /root/asterisk-clients-*.tar.gz)
- Import clients: Restores client configurations from export archives with
two modes:
* Merge mode: Imports only non-conflicting devices (default)
* Replace mode: Removes all existing devices and replaces with imported ones
- Conflict detection: Automatically detects extension conflicts and offers to
skip conflicting devices
- Backup protection: Creates timestamped backups before import operations
- Validation: Verifies export file format and device count before import
Technical details:
- Extracts device configurations from /etc/asterisk/pjsip.conf
- Preserves categories from /etc/easy-asterisk/categories.conf
- Preserves rooms/ring groups from /etc/easy-asterisk/rooms.conf
- Automatically reloads PJSIP and rebuilds dialplan after import
- Handles category and room deduplication during merge imports
Menu additions:
- Client Settings -> Export Clients (option 4)
- Client Settings -> Import Clients (option 5)
Claude