Back to Home
ruanrongman icon

IntelliConnect

by ruanrongman

Overview

An intelligent IoT platform enabling AI agent development, supporting various large language models, knowledge bases, voice applications, and device management for smart hardware like ESP-32.

Installation

Run Command
docker-compose -f docker/docker-compose.yml up

Environment Variables

  • MYSQL_ROOT_PASSWORD
  • MYSQL_DATABASE
  • MYSQL_USER
  • MYSQL_PASSWORD
  • REDIS_PASSWORD
  • EMQX_NODE__DB_EXTERNAL__PASSWORDS__1
  • INFLUXDB_ADMIN_USER
  • INFLUXDB_ADMIN_PASSWORD
  • INFLUXDB_DB
  • JWT_SECRET
  • MQTT_HOST
  • MQTT_USERNAME
  • MQTT_PASSWORD
  • AI_DASH_SCOPE_KEY
  • AI_GLM_KEY
  • AI_DEEP_SEEK_KEY
  • AI_SILICON_FLOW_KEY
  • AI_UNI_API_KEY
  • WEATHER_KEY
  • WX_MICRO_APPID
  • WX_MICRO_APPSECRET
  • OTA_BIN_PATH
  • STORAGE_DATABASE
  • RAG_EMBEDDING_MODEL_NAME
  • RAG_KNOWLEDGE_CHAT_EMBEDDING_STORE_URL

Security Notes

The server uses Spring Security with JWT for authentication and authorization, and correctly externalizes most secrets via `@Value` annotations. However, it incorporates a JavaScript execution sandbox (`NashornSandbox`) for rule and control scripts, which inherently introduces a significant attack surface if sandboxing can be bypassed. Additionally, the `onMessagePublish` method in `HookProviderImpl.java` contains a comment '安全屏障,后续更新' (Security barrier, subsequent updates), indicating incomplete or potential security vulnerabilities related to MQTT message processing that require further attention. The permissive CORS configuration (`addAllowedOriginPattern("*")`) may also pose risks depending on deployment context.

Similar Servers

Stats

Interest Score46
Security Score5
Cost ClassMedium
Avg Tokens750
Stars100
Forks24
Last Update2026-01-19

Tags

IoT PlatformAI AgentSpring BootMQTTMicroservices