DeviceShelf Server for Windows (amd64)
=============================================
(Deutsch: README.de.txt · Français: README.fr.txt · Español: README.es.txt
 Italiano: README.it.txt · العربية: README.ar.txt · 中文: README.zh.txt)

The headless 24/7 edition of DeviceShelf: continuously scans your network,
alerts on new/missing devices, watches ports/WAN/DNS/TLS, and serves a
dashboard + API — no GUI. Same engine as the desktop app.


>>> DO THIS FIRST (Windows 11 / Smart App Control) <<<
------------------------------------------------------
This Windows build is not code-signed yet, so Windows tags the files as "from the
internet" and SmartScreen/Smart App Control may warn about install.exe.
Clear it in 5 seconds BEFORE extracting:

  Right-click the downloaded .ZIP  ->  Properties  ->  tick "Unblock"  ->  OK
  ...then extract the zip. Now install.exe runs normally.

(If SmartScreen still warns: "More info" -> "Run anyway". If Smart App Control
is ON and hard-blocks it, use the command-line install at the bottom. A signed
release is planned.)


INSTALL (recommended) — as a 24/7 service
-----------------------------------------
1. Double-click  install.exe  and confirm the Windows admin prompt (UAC).
   It installs and starts the service, then shows the dashboard URL and the
   access token, and opens the dashboard in your browser.
2. That's it — the service runs in the background and starts with Windows.

Uninstall: double-click  uninstall.exe  (also confirms UAC).


IF WINDOWS BLOCKS THE FILE (unsigned build)
------------------------------------------
This Windows build is not yet code-signed, so Windows may warn:
- SmartScreen ("Windows protected your PC"): "More info" -> "Run anyway".
- Before extracting: right-click the downloaded .zip -> Properties -> tick
  "Unblock" -> OK, then extract.  (PowerShell: Unblock-File .\*.exe)
- Smart App Control (Windows 11, if ON) hard-blocks unsigned apps; until we
  ship a signed build you'd need it set to Off/Evaluation. A signed release
  is planned.


DASHBOARD & TOKEN
-----------------
- URL on the server itself:  http://localhost:8088
- URL from another device:   http://<this-server-IP>:8088
- A token is ALWAYS required when the dashboard is reachable on the LAN (the
  default). You never invent it — the server auto-generates one on first run.
- Read the token any time, from a terminal in this folder:
    deviceshelf-server.exe -token
  (it also prints when install.exe runs and on the console of a hand-run server;
   or read the file directly:
    type "%windir%\System32\config\systemprofile\AppData\Roaming\DeviceShelf\api-token")
- On first browser access, paste the token when asked.
- Allow access if the Windows Firewall prompts, so the scan reaches your LAN.


QUICK TEST WITHOUT INSTALLING
-----------------------------
Double-click  deviceshelf-server.exe  — it prints the token and dashboard URL
on the console and scans your LAN. Close the window or press Ctrl+C to stop.


COMMAND-LINE INSTALL (optional — if install.exe is blocked)
-----------------------------------------------------------
install.exe just wraps these commands; run them yourself if you prefer, or if
Smart App Control blocks the installer. Open an ADMIN terminal: Start -> type
"cmd" -> right-click -> "Run as administrator". Then:
    cd /d "PATH\TO\THE\EXTRACTED\FOLDER"
    deviceshelf-server.exe -service install
    deviceshelf-server.exe -service start
    deviceshelf-server.exe -token          (shows the dashboard login token)
That does exactly what install.exe does. Uninstall: -service stop, then
-service uninstall.


CONFIGURATION (optional, system environment variables)
------------------------------------------------------
As administrator, then restart the service:
  License (else 7-day trial):  setx /M DEVICESHELF_LICENSE "YOUR-TOKEN"
  Own API token:               setx /M DEVICESHELF_API_TOKEN "long-random-value"
  Port / interval:             setx /M DEVICESHELF_API_PORT "8088"
                               setx /M DEVICESHELF_INTERVAL "5m"
Restart:  deviceshelf-server.exe -service stop  &&  ... -service start


NOTES
-----
- The service runs as Local System; its data lives under the system profile,
  not your user folder (see the token path above).
- Passive DHCP fingerprinting is not available on Windows (as in the desktop
  app). Scanning, monitoring, SNMP, alerts, dashboard, API: all included.
- LIVE BANDWIDTH / ACTIVE ARP: the default deviceshelf-server.exe runs without
  packet capture. If you have Npcap installed (https://npcap.com), use
  deviceshelf-server-pcap.exe instead — same server, plus live per-device
  bandwidth and active ARP scanning. Without Npcap that exe will not start;
  the default one always works.
- Questions/bugs: hello@deviceshelf.app
