feat(webserver): Add X-Valetudo-Version header

lib/webserver/WebServer.js

@@ -10,6 +10,7 @@ const listEndpoints = require("express-list-endpoints");
 
 const Logger = require("../Logger");
 
+const Middlewares = require("./middlewares");
 const RobotRouter = require("./RobotRouter");
 const ValetudoRouter = require("./ValetudoRouter");
 
@@ -39,6 +40,9 @@ class WebServer {
         this.app.use(compression());
         this.app.use(bodyParser.json());
 
+        this.app.disable("x-powered-by");
+        this.app.use(Middlewares.VersionMiddleware);
+
         const authMiddleware = this.createAuthMiddleware();
         const dynamicAuth = dynamicMiddleware.create([]);
         this.app.use(dynamicAuth.handle());

lib/webserver/middlewares/VersionMiddleware.js

@@ -0,0 +1,25 @@
+const Tools = require("../../Tools");
+
+const version = Tools.GET_VALETUDO_VERSION();
+const commitId = Tools.GET_COMMIT_ID();
+/**
+ * The main purpose of these headers is to make it easier
+ * to find internet-facing valetudo instances using shodan.io
+ * so that I can be mad about them
+ *
+ * Don't do that.
+ * Use a VPN or at least a reverse-proxy with proper auth.
+ *
+ * By ignoring this warning, you opt-in to valetudo
+ * telemetry data collection via the cloud
+ *
+ *
+ * @param {object} req
+ * @param {object} res
+ * @param {Function} next
+ */
+module.exports = function addVersionHeader(req, res, next) {
+    res.header("X-Valetudo-Version", version);
+    res.header("X-Valetudo-Commit-Id", commitId);
+    next();
+};

lib/webserver/middlewares/index.js

@@ -0,0 +1,3 @@
+module.exports = {
+    VersionMiddleware: require("./VersionMiddleware")
+};