commit efa02394dcc7fc4430f5e28fbc2b809584efebb2
Author: Roby <roberto@iv3jdv.net>
Date:   Sun Apr 26 01:36:09 2026 +0200

    Initial commit

diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..071f847
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1,26 @@
+# Ignora le cartelle temporanee di Python
+__pycache__/
+*.pyc
+
+# Ignora il database SQLite (non vogliamo pubblicare i log e le password hashate!)
+*.db
+monitor.db
+monitor.db-journal
+monitor.db-shm
+monitor.db-wal
+
+# Ignora i file di configurazione reali (pubblicherai solo i .example.json)
+config.json
+clients.json
+
+# Ignora i file dati scaricati in automatico (sono grandi e dinamici)
+dmrid.dat
+nxdn.csv
+telemetry_cache.json
+
+# Ignora log di sistema eventuali
+*.log
+
+# Ignora le configurazioni reali dell'agente remoto
+*.ini
+!*.example.ini
diff --git a/README.md b/README.md
new file mode 100644
index 0000000..fe34289
--- /dev/null
+++ b/README.md
@@ -0,0 +1,58 @@
+# 📡 Fleet Control Console (Server)
+
+🌍 *[Read in English](#english) | 🇮🇹 [Leggi in Italiano](#italiano)*
+
+---
+
+<a name="english"></a>
+## 🇬🇧 English
+
+**Fleet Control Console** is a professional, real-time command and control (C2) dashboard designed for amateur radio repeater networks (MMDVM). 
+
+![Dashboard Screenshot](images/dashboard.png)
+
+### 🤖 Remote Agent
+To monitor your remote nodes (Raspberry Pi), download the dedicated lightweight agent here:
+`[Insert your Agent Repository URL here]`
+
+### ✨ Features
+* **Zero-Latency Real-Time UI:** Powered by WebSockets (Socket.IO).
+* **Web Push Notifications:** Instant alerts on desktop or mobile.
+* **Centralized Telemetry & Service Management.**
+* **Global Operations:** Switch profiles instantly.
+
+### 🚀 Installation & Setup
+1. Read `install.txt` to install system prerequisites (compilers).
+2. `python3 -m venv venv && source venv/bin/activate`
+3. `pip install -r requirements.txt`
+4. Configure `config.json` and generate VAPID keys.
+5. Run via Gunicorn: `gunicorn -k "geventwebsocket.gunicorn.workers.GeventWebSocketWorker" -w 1 --bind 0.0.0.0:9000 app:app`
+
+---
+
+<a name="italiano"></a>
+## 🇮🇹 Italiano
+
+**Fleet Control Console** è una dashboard di comando e controllo (C2) professionale in tempo reale per le reti di ripetitori radioamatoriali (MMDVM).
+
+![Schermata Dashboard](images/dashboard.png)
+
+### 🤖 Agente Remoto
+Per monitorare i tuoi nodi remoti (Raspberry Pi), scarica l'agente dedicato qui:
+`[Inserisci qui l'URL del tuo Repository Agent]`
+
+### ✨ Funzionalità
+* **Interfaccia Real-Time a Latenza Zero** tramite WebSockets.
+* **Notifiche Push Web** per allarmi critici.
+* **Telemetria Centralizzata e Gestione Servizi.**
+* **Operazioni Globali** su tutta la rete.
+
+### 🚀 Installazione
+1. Leggi `install.txt` per i requisiti di sistema (compilatori Linux).
+2. `python3 -m venv venv && source venv/bin/activate`
+3. `pip install -r requirements.txt`
+4. Configura `config.json` con credenziali MQTT e chiavi VAPID.
+5. Avvia con Gunicorn.
+
+---
+*Created by IV3JDV @ ARIFVG - 2026*
diff --git a/app.py b/app.py
new file mode 100644
index 0000000..6e5b7bb
--- /dev/null
+++ b/app.py
@@ -0,0 +1,784 @@
+from flask import Flask, render_template, request, session, jsonify, send_from_directory
+from paho.mqtt import client as mqtt_client
+from werkzeug.security import generate_password_hash, check_password_hash
+import json
+import os
+import sqlite3
+import urllib.request
+import threading
+import time
+import logging
+from pywebpush import webpush, WebPushException
+from logging.handlers import RotatingFileHandler
+from flask_socketio import SocketIO, emit
+
+# --- LOGGING CONFIGURATION ---
+logging.basicConfig(
+    handlers=[
+        RotatingFileHandler('/opt/web-control/fleet_console.log', maxBytes=10000000, backupCount=3),
+        logging.StreamHandler()
+    ],
+    level=logging.INFO,
+    format='[%(asctime)s] %(levelname)s - %(message)s',
+    datefmt='%Y-%m-%d %H:%M:%S'
+)
+logger = logging.getLogger("FleetHub")
+# Silence HTTP request spam (GET /api/states 200 OK)
+logging.getLogger('werkzeug').setLevel(logging.ERROR)
+
+# --- PATHS ---
+DB_PATH = '/opt/web-control/monitor.db'
+CACHE_FILE = '/opt/web-control/telemetry_cache.json'
+CONFIG_PATH = '/opt/web-control/config.json'
+DMR_IDS_PATH = '/opt/web-control/dmrid.dat'
+NXDN_IDS_PATH = '/opt/web-control/nxdn.csv'
+CLIENTS_PATH = '/opt/web-control/clients.json'
+
+def init_db():
+    conn = sqlite3.connect(DB_PATH)
+    c = conn.cursor()
+
+    c.execute('PRAGMA journal_mode=WAL;') # <-- MAGIC: Enable simultaneous read/write!
+
+    c.execute('''CREATE TABLE IF NOT EXISTS radio_logs
+                 (id INTEGER PRIMARY KEY AUTOINCREMENT, timestamp DATETIME, client_id TEXT, 
+                  source_id TEXT, target TEXT, slot INTEGER, duration REAL, ber REAL, loss REAL)''')
+    try:
+        c.execute("ALTER TABLE radio_logs ADD COLUMN protocol TEXT DEFAULT 'DMR'")
+    except: pass 
+
+    try:
+        c.execute("ALTER TABLE radio_logs ADD COLUMN source_ext TEXT DEFAULT ''")
+    except: pass
+
+    c.execute('''CREATE TABLE IF NOT EXISTS users
+                 (id INTEGER PRIMARY KEY AUTOINCREMENT, username TEXT UNIQUE, password_hash TEXT, 
+                  role TEXT, allowed_nodes TEXT)''')
+
+    c.execute('''CREATE TABLE IF NOT EXISTS push_subscriptions
+             (id INTEGER PRIMARY KEY AUTOINCREMENT, username TEXT, subscription TEXT UNIQUE)''')
+
+    c.execute('''CREATE TABLE IF NOT EXISTS audit_logs
+                 (id INTEGER PRIMARY KEY AUTOINCREMENT, timestamp DATETIME, username TEXT, 
+                  client_id TEXT, command TEXT)''')
+
+    c.execute("SELECT COUNT(*) FROM users")
+    if c.fetchone()[0] == 0:
+        #  Default value if missing config file
+         def_user = "admin"
+         def_pass = "admin123"
+        
+        # Try read config.json
+         try:
+             with open(CONFIG_PATH, 'r') as f:
+                 cfg = json.load(f)
+                 def_user = cfg.get("web_admin", {}).get("default_user", "admin")
+                 def_pass = cfg.get("web_admin", {}).get("default_pass", "admin123")
+         except Exception:
+             pass
+
+         h = generate_password_hash(def_pass)
+         c.execute("INSERT INTO users (username, password_hash, role, allowed_nodes) VALUES (?,?,?,?)",
+                   (def_user, h, 'admin', 'all'))
+         logger.info(f">>> DEFAULT USER CREATED - User: {def_user} | Pass: {def_pass} <<<")
+
+    conn.commit()
+    conn.close()
+
+init_db()
+
+# --- ID DATABASE LOADING ---
+user_db = {}
+nxdn_db = {}
+
+def load_ids():
+    global user_db, nxdn_db
+    user_db.clear()
+    nxdn_db.clear()
+
+    if os.path.exists(DMR_IDS_PATH):
+        with open(DMR_IDS_PATH, 'r', encoding='utf-8', errors='ignore') as f:
+            for l in f:
+                sep = '\t' if '\t' in l else (',' if ',' in l else ';')
+                p = l.strip().split(sep)
+                if len(p) >= 2 and p[0].strip().isdigit(): 
+                    user_db[p[0].strip()] = p[1].strip()
+                    
+    if os.path.exists(NXDN_IDS_PATH):
+        with open(NXDN_IDS_PATH, 'r', encoding='utf-8', errors='ignore') as f:
+            for l in f:
+                sep = '\t' if '\t' in l else (',' if ',' in l else ';')
+                p = l.strip().split(sep)
+                if len(p) >= 2 and p[0].strip().isdigit():
+                    nxdn_db[p[0].strip()] = p[1].strip()
+
+load_ids()
+
+def get_call(id, proto="DMR"):
+    sid = str(id)
+    if proto == "NXDN": return nxdn_db.get(sid, sid)
+    return user_db.get(sid, sid)
+
+def save_cache(data):
+    with open(CACHE_FILE, 'w') as f: json.dump(data, f)
+    socketio.emit('dati_aggiornati')
+
+def save_to_sqlite(client_id, data, protocol="DMR"):
+    conn = sqlite3.connect(DB_PATH)
+    c = conn.cursor()
+    c.execute("INSERT INTO radio_logs (timestamp, client_id, protocol, source_id, target, slot, duration, ber, source_ext) VALUES (datetime('now', 'localtime'), ?, ?, ?, ?, ?, ?, ?, ?)",
+              (client_id, protocol, str(data.get('source_id', '---')), str(data.get('destination_id', '---')), data.get('slot', 0), round(data.get('duration', 0), 1), round(data.get('ber', 0), 2), str(data.get('source_ext', ''))))
+    conn.commit()
+    conn.close()
+    socketio.emit('dati_aggiornati')
+
+app = Flask(__name__)
+socketio = SocketIO(app, cors_allowed_origins="*")
+app.secret_key = 'ari_fvg_secret_ultra_secure'
+client_states = {}
+device_configs = {}
+client_telemetry = {}
+last_notified_errors = {}
+device_health = {}
+last_seen_reflector = {}
+network_mapping = {}  
+
+if os.path.exists(CACHE_FILE):
+    try:
+        with open(CACHE_FILE, 'r') as f: client_telemetry = json.load(f)
+    except: client_telemetry = {}
+
+active_calls = {}
+with open(CONFIG_PATH) as f: config = json.load(f)
+
+# --- MQTT CALLBACKS ---
+def on_connect(client, userdata, flags, reason_code, properties=None):
+    if reason_code == 0:
+        logger.info("✅ Successfully connected to MQTT Broker! Subscribing to topics...")
+        client.subscribe([
+            ("servizi/+/stat", 0), 
+            ("dmr-gateway/+/json", 0), 
+            ("devices/+/services", 0), 
+            ("nxdn-gateway/+/json", 0), 
+            ("ysf-gateway/+/json", 0), 
+            ("p25-gateway/+/json", 0), 
+            ("dstar-gateway/+/json", 0), 
+            ("mmdvm/+/json", 0), 
+            ("devices/#", 0), 
+            ("data/#", 0)
+        ])
+    else:
+        logger.error(f"❌ MQTT Connection Error. Reason code: {reason_code}")
+
+def on_disconnect(client, userdata, disconnect_flags, reason_code, properties=None):
+    logger.warning(f"⚠️ MQTT Disconnection detected! Reason code: {reason_code}. Attempting automatic reconnection...")
+
+def on_message(client, userdata, msg):
+    try:
+        topic = msg.topic
+        payload = msg.payload.decode().strip()
+        parts = topic.split('/')
+        if len(parts) < 2: return
+        cid = parts[1].lower()
+
+        # --- CAPTURE FULL CONFIGURATIONS ---
+        if parts[0] == 'data' and len(parts) >= 4 and parts[3] == 'full_config':
+            cid_conf = parts[1].lower()
+            svc_name = parts[2].lower()
+            if cid_conf not in device_configs:
+                device_configs[cid_conf] = {}
+            try:
+                device_configs[cid_conf][svc_name] = json.loads(payload)
+                logger.debug(f"Configuration saved for {cid_conf} -> {svc_name}")
+            except Exception as e:
+                logger.error(f"Error parsing config JSON: {e}")
+
+        # --- NODE AND SERVICE STATE MANAGEMENT ---
+        elif parts[0] == 'servizi':
+            client_states[cid] = payload
+            socketio.emit('dati_aggiornati')  # <--- WEBSOCKET
+            
+            # --- PUSH TRIGGER: NODE STATE ---
+            if payload.upper() == 'OFFLINE':
+                if last_notified_errors.get(f"{cid}_NODE") != 'OFFLINE':
+                    broadcast_push_notification(f"💀 NODE OFFLINE: {cid.upper()}", "Connection lost with broker.")
+                    last_notified_errors[f"{cid}_NODE"] = 'OFFLINE'
+            elif payload.upper() == 'ONLINE':
+                if last_notified_errors.get(f"{cid}_NODE") == 'OFFLINE':
+                    broadcast_push_notification(f"🌤️ NODE ONLINE: {cid.upper()}", "Node is back online.")
+                    del last_notified_errors[f"{cid}_NODE"]
+                    
+            if payload.upper() not in ['OFF', 'OFFLINE', '']:
+                tel = client_telemetry.get(cid, {})
+                if isinstance(tel, dict) and '🔄' in str(tel.get('ts1', '')):
+                    client_telemetry[cid] = {"ts1": "Waiting...", "ts2": "Waiting...", "alt": ""}
+                    save_cache(client_telemetry)
+
+        # --- DEVICE HEALTH MANAGEMENT ---
+        elif parts[0] == 'devices' and len(parts) >= 3 and parts[2] == 'services':
+            try:
+                data = json.loads(payload)
+                device_health[cid] = {
+                    "cpu": round(data.get("cpu_usage_percent", 0), 1),
+                    "temp": round(data.get("cpu_temp", 0), 1),
+                    "ram": round(data.get("memory_usage_percent", 0), 1),
+                    "disk": round(data.get("disk_usage_percent", 0), 1),
+                    "processes": data.get("processes", {}),
+                    "files": data.get("files", data.get("config_files", [])),
+                    "profiles": data.get("profiles", {"A": "PROFILE A", "B": "PROFILE B"})
+                }
+                socketio.emit('dati_aggiornati')  # <--- WEBSOCKET
+
+                # --- PUSH TRIGGER: SERVICE ERRORS ---
+                processes = data.get("processes", {})
+                for svc_name, svc_status in processes.items():
+                    status_key = f"{cid}_{svc_name}"
+                    s_lower = svc_status.lower()
+                    if s_lower in ["error", "stopped", "failed"]:
+                        if last_notified_errors.get(status_key) != s_lower:
+                            msg_err = f"Service {svc_name} KO ({svc_status})"
+                            if s_lower == "error": msg_err += " - Auto-healing failed! ⚠️"
+                            broadcast_push_notification(f"🚨 ALARM: {cid.upper()}", msg_err)
+                            last_notified_errors[status_key] = s_lower
+                    elif s_lower == "online" and status_key in last_notified_errors:
+                        broadcast_push_notification(f"✅ RESTORED: {cid.upper()}", f"Service {svc_name} back ONLINE.")
+                        del last_notified_errors[status_key]
+                # -----------------------------------------
+
+            except Exception as e: 
+                logger.error(f"Error parsing health data: {e}")
+
+        # --- DMR GATEWAY MANAGEMENT ---
+        elif len(parts) >= 4 and parts[0] == 'data' and parts[2].lower() == 'dmrgateway' and (parts[3].upper().startswith('NETWORK') or parts[3].upper().startswith('DMR NETWORK')):
+            try:
+                cid = parts[1].lower()
+                data = json.loads(payload)
+                
+                if cid not in network_mapping:
+                    network_mapping[cid] = {"ts1": "", "ts2": ""}
+                
+                if str(data.get("Enabled")) == "1":
+                    net_name = data.get("Name", "Net").upper()
+                    is_ts1 = False
+                    is_ts2 = False
+                    
+                    keys_to_check = ["PassAllTG", "PassAllPC", "TGRewrite", "PCRewrite", "TypeRewrite", "SrcRewrite"]
+                    for k in keys_to_check:
+                        val = str(data.get(k, "")).strip()
+                        if val.startswith("1"): is_ts1 = True
+                        if val.startswith("2"): is_ts2 = True
+                        
+                    if is_ts1: network_mapping[cid]["ts1"] = net_name
+                    if is_ts2: network_mapping[cid]["ts2"] = net_name
+                    socketio.emit('dati_aggiornati')  # <--- WEBSOCKET
+                        
+            except Exception as e:
+                logger.error(f"Error parsing DMRGateway for {cid}: {e}")
+
+        # --- OTHER GATEWAYS MANAGEMENT ---
+        elif parts[0] in ['dmr-gateway', 'nxdn-gateway', 'ysf-gateway', 'p25-gateway', 'dstar-gateway']:
+            data = json.loads(payload)
+            proto = "DMR"
+            if "nxdn" in parts[0]: proto = "NXDN"
+            elif "ysf" in parts[0]: proto = "YSF"
+            elif "p25" in parts[0]: proto = "P25"
+            elif "dstar" in parts[0]: proto = "D-STAR"
+            
+            m = ""
+            if 'status' in data: 
+                m = data['status'].get('message', '')
+            elif 'link' in data:
+                l = data['link']
+                dest = str(l.get('reflector') or l.get('talkgroup') or '---').strip()
+                action = l.get('action')
+                if action == 'linking': last_seen_reflector[f"{cid}_{proto}"] = dest
+                elif action == 'unlinking': last_seen_reflector[f"{cid}_{proto}"] = "---"
+                m = f"{'Link' if action=='linking' else 'Unlinked'} {dest}"
+            
+            if m: save_to_sqlite(cid, {'source_id': "🌐 " + m, 'destination_id': 'NET'}, protocol=proto)
+
+        # --- MMDVM AND TRAFFIC MANAGEMENT ---
+        elif parts[0] == 'mmdvm':
+            data = json.loads(payload)
+            if cid not in active_calls: active_calls[cid] = {}
+            if cid not in client_telemetry or not isinstance(client_telemetry.get(cid), dict):
+                client_telemetry[cid] = {"ts1": "Waiting...", "ts2": "Waiting...", "alt": "", "idle": True}
+
+            if 'MMDVM' in data and data['MMDVM'].get('mode') == 'idle':
+                client_telemetry[cid]["idle"] = True
+                save_cache(client_telemetry)
+                return 
+
+            client_telemetry[cid]["idle"] = False
+
+            if 'DMR' in data:
+                d = data['DMR']
+                act = d.get('action')
+                sk = f"ts{d.get('slot', 1)}"
+                if act in ['start', 'late_entry']:
+                    src = get_call(d.get('source_id'))
+                    dst = str(d.get('destination_id'))
+                    active_calls[cid][sk] = {'src': src, 'dst': dst}
+                    client_telemetry[cid]["alt"] = ""
+                    client_telemetry[cid][sk] = f"🎙️ {src} ➔ TG {dst}"
+                    socketio.emit('dati_aggiornati')  # <--- WEBSOCKET
+                elif act in ['end', 'lost']:
+                    info = active_calls[cid].get(sk, {'src': '---', 'dst': '---'})
+                    d['source_id'], d['destination_id'] = info['src'], info['dst']
+                    save_to_sqlite(cid, d, protocol="DMR")
+                    client_telemetry[cid][sk] = f"{'✅' if act=='end' else '⚠️'} {info['src']}"
+                    save_cache(client_telemetry)
+                    if sk in active_calls[cid]: del active_calls[cid][sk]
+
+            else:
+                for k, ico, name in [('NXDN','🟢','NXDN'),('YSF','🟣','YSF'),('P25','🟠','P25'),('D-Star','🔵','D-STAR')]:
+                    if k in data:
+                        p = data[k]
+                        act = p.get('action')
+                        
+                        if act == 'start':
+                            if k == 'NXDN': src = get_call(p.get('source_id', '---'), 'NXDN')
+                            elif k == 'P25': src = get_call(p.get('source_id', '---'), 'DMR')
+                            else: src = str(p.get('Callsign', p.get('source_cs', p.get('source_info', p.get('source_id', '---')))))
+                            
+                            t_list = [p.get('reflector'), p.get('destination_cs'), p.get('destination_id')]
+                            current_target = next((str(x).strip() for x in t_list if x and str(x).strip() not in ['', '---', '0', 'CQCQCQ']), None)
+                            
+                            if not current_target or current_target == cid.upper():
+                                target = last_seen_reflector.get(f"{cid}_{name}", "---")
+                            else:
+                                target = current_target
+
+                            active_calls[cid][k] = {'src': src, 'dst': target, 'ext': str(p.get('source_ext', ''))}
+                            client_telemetry[cid].update({"ts1":"","ts2":"","alt": f"{ico} {name}: {src} ➔ {target}"})
+                            socketio.emit('dati_aggiornati')  # <--- WEBSOCKET
+                        
+                        elif act in ['end', 'lost']:
+                            info = active_calls[cid].get(k, {'src': '---', 'dst': '---', 'ext': ''})
+                            p.update({'source_id': info['src'], 'destination_id': info['dst'], 'source_ext': info['ext']})
+                            save_to_sqlite(cid, p, protocol=name)
+                            client_telemetry[cid]["alt"] = f"{'✅' if act=='end' else '⚠️'} {name}: {info['src']}"
+                            save_cache(client_telemetry)
+                            if k in active_calls[cid]: del active_calls[cid][k]
+    except Exception as e: 
+        logger.error(f"MQTT MSG ERROR: {e}")
+
+# --- MQTT CLIENT INITIALIZATION ---
+mqtt_backend = mqtt_client.Client(mqtt_client.CallbackAPIVersion.VERSION2, "flask_backend")
+mqtt_backend.username_pw_set(config['mqtt']['user'], config['mqtt']['password'])
+mqtt_backend.on_connect = on_connect
+mqtt_backend.on_disconnect = on_disconnect
+mqtt_backend.on_message = on_message
+mqtt_backend.connect(config['mqtt']['broker'], config['mqtt']['port'])
+mqtt_backend.loop_start()
+
+@app.route('/')
+def index(): return render_template('index.html')
+
+@app.route('/api/clients')
+def get_clients():
+    if os.path.exists(CLIENTS_PATH):
+        with open(CLIENTS_PATH, 'r') as f: return jsonify(json.load(f))
+    return jsonify([])
+
+@app.route('/api/logs')
+def get_logs():
+    conn = sqlite3.connect(DB_PATH, timeout=10)
+    c = conn.cursor()
+    c.execute("SELECT timestamp, client_id, protocol, source_id, target, slot, duration, ber, source_ext FROM radio_logs ORDER BY id DESC LIMIT 60")
+    logs = c.fetchall()
+    conn.close()
+    return jsonify(logs)
+
+@app.route('/api/states', methods=['GET'])
+def get_states():
+    return jsonify({
+        "states": client_states,
+        "telemetry": client_telemetry,
+        "health": device_health,
+        "networks": network_mapping
+    })
+
+@app.route('/api/stats')
+def get_stats():
+    # Leggiamo il parametro 'node' (di default 'all')
+    node = request.args.get('node', 'all').lower()
+    
+    conn = sqlite3.connect(DB_PATH)
+    c = conn.cursor()
+    
+    # Prepariamo il filtro aggiuntivo se è stato selezionato un nodo
+    node_filter = ""
+    params = []
+    if node != 'all':
+        node_filter = " AND LOWER(client_id) = ?"
+        params.append(node)
+    
+    # 1. Top 5 TalkGroups di OGGI
+    c.execute(f"""SELECT target, COUNT(*) as cnt FROM radio_logs 
+                 WHERE target NOT IN ('---', 'NET', '') 
+                 AND date(timestamp) = date('now', 'localtime'){node_filter} 
+                 GROUP BY target ORDER BY cnt DESC LIMIT 5""", params)
+    top_tgs = [{"target": row[0], "count": row[1]} for row in c.fetchall()]
+    
+    # 2. Top 5 Callsign di OGGI
+    c.execute(f"""SELECT source_id, COUNT(*) as cnt FROM radio_logs 
+                 WHERE source_id NOT LIKE '🌐%' 
+                 AND date(timestamp) = date('now', 'localtime'){node_filter} 
+                 GROUP BY source_id ORDER BY cnt DESC LIMIT 5""", params)
+    top_calls = [{"call": row[0], "count": row[1]} for row in c.fetchall()]
+    
+    # 3. Tempo medio dei transiti di OGGI
+    c.execute(f"""SELECT AVG(duration) FROM radio_logs 
+                 WHERE duration > 0.5 
+                 AND date(timestamp) = date('now', 'localtime'){node_filter}""", params)
+    avg_dur = c.fetchone()[0]
+    avg_dur = round(avg_dur, 1) if avg_dur else 0
+    
+    # 4. Totale transiti di OGGI
+    c.execute(f"SELECT COUNT(*) FROM radio_logs WHERE date(timestamp) = date('now', 'localtime'){node_filter}", params)
+    today_tx = c.fetchone()[0]
+    
+    conn.close()
+    return jsonify({
+        "top_tgs": top_tgs,
+        "top_calls": top_calls,
+        "avg_duration": avg_dur,
+        "today_tx": today_tx
+    })
+
+@app.route('/api/service_control', methods=['POST'])
+def service_control():
+    if session.get('role') != 'admin': return jsonify({"error": "Unauthorized"}), 403
+    d = request.json
+    cid = d.get('clientId').lower()
+    action = d.get('action')
+    service = d.get('service')
+    mqtt_backend.publish(f"devices/{cid}/control", f"{action}:{service}")
+    conn = sqlite3.connect(DB_PATH)
+    c = conn.cursor()
+    c.execute("INSERT INTO audit_logs (timestamp, username, client_id, command) VALUES (datetime('now','localtime'), ?, ?, ?)",
+              (session.get('user'), cid, f"SVC_{action.upper()}_{service}"))
+    conn.commit()
+    conn.close()
+    return jsonify({"success": True})
+
+@app.route('/api/login', methods=['POST'])
+def login():
+    d = request.json
+    username, password = d.get('user'), d.get('pass')
+    conn = sqlite3.connect(DB_PATH)
+    conn.row_factory = sqlite3.Row
+    c = conn.cursor()
+    c.execute("SELECT * FROM users WHERE username = ?", (username,))
+    user = c.fetchone()
+    conn.close()
+    if user and check_password_hash(user['password_hash'], password):
+        session['logged_in'] = True
+        session['user'] = user['username']
+        session['role'] = user['role']
+        session['allowed_nodes'] = user['allowed_nodes']
+        return jsonify({"success": True, "role": user['role'], "allowed_nodes": user['allowed_nodes']})
+    return jsonify({"success": False}), 401
+
+@app.route('/api/command', methods=['POST'])
+def cmd():
+    if not session.get('logged_in'): return jsonify({"success": False, "error": "Not authenticated"}), 403
+    d = request.json
+    cid = d['clientId'].lower()
+    cmd_type = d['type']
+    username = session.get('user')
+    role = session.get('role')
+    allowed = session.get('allowed_nodes', '')
+    is_allowed = (role == 'admin' or allowed == 'all' or cid in [x.strip() for x in allowed.split(',')])
+    if cmd_type == 'REBOOT' and role != 'admin':
+        return jsonify({"success": False, "error": "Only Admins can reboot."}), 403
+    if is_allowed:
+        mqtt_backend.publish(f"servizi/{cid}/cmnd", cmd_type)
+        conn = sqlite3.connect(DB_PATH)
+        c = conn.cursor()
+        c.execute("INSERT INTO audit_logs (timestamp, username, client_id, command) VALUES (datetime('now','localtime'), ?, ?, ?)",
+                  (username, cid, cmd_type))
+        conn.commit()
+        conn.close()
+        client_telemetry[cid] = {"ts1": "🔄 Sent...", "ts2": "🔄 Sent...", "alt": ""}
+        return jsonify({"success": True})
+    return jsonify({"success": False, "error": "You do not have permission for this node."}), 403
+
+@app.route('/api/update_nodes', methods=['POST'])
+def update_nodes():
+    if session.get('role') != 'admin': return jsonify({"error": "Unauthorized"}), 403
+    mqtt_backend.publish("devices/control/request", "update")
+    return jsonify({"success": True})
+
+    # Mandiamo il comando "update" direttamente nel topic privato di ciascun nodo
+    for client in clients_list:
+        cid = client['id'].lower()
+        mqtt_backend.publish(f"devices/{cid}/control", "update", qos=1)
+        
+    logger.info("📢 Inviato comando REQ CONFIG diretto a tutti i nodi della flotta.")
+    return jsonify({"success": True})
+
+@app.route('/api/users', methods=['GET'])
+def get_users():
+    if session.get('role') != 'admin': return jsonify({"error": "Unauthorized"}), 403
+    conn = sqlite3.connect(DB_PATH)
+    conn.row_factory = sqlite3.Row
+    c = conn.cursor()
+    c.execute("SELECT id, username, role, allowed_nodes FROM users")
+    users = [dict(row) for row in c.fetchall()]
+    conn.close()
+    return jsonify(users)
+
+@app.route('/api/users', methods=['POST'])
+def add_user():
+    if session.get('role') != 'admin': return jsonify({"error": "Unauthorized"}), 403
+    d = request.json
+    username = d.get('username')
+    password = d.get('password')
+    role = d.get('role', 'operator')
+    allowed = d.get('allowed_nodes', '')
+    if not username or not password:
+        return jsonify({"success": False, "error": "Missing data"})
+    h = generate_password_hash(password)
+    try:
+        conn = sqlite3.connect(DB_PATH)
+        c = conn.cursor()
+        c.execute("INSERT INTO users (username, password_hash, role, allowed_nodes) VALUES (?,?,?,?)",
+                  (username, h, role, allowed))
+        conn.commit()
+        conn.close()
+        return jsonify({"success": True})
+    except sqlite3.IntegrityError:
+        return jsonify({"success": False, "error": "Username already exists"})
+
+@app.route('/api/users/<int:user_id>', methods=['DELETE'])
+def delete_user(user_id):
+    if session.get('role') != 'admin': return jsonify({"error": "Unauthorized"}), 403
+    conn = sqlite3.connect(DB_PATH)
+    c = conn.cursor()
+    c.execute("SELECT username FROM users WHERE id = ?", (user_id,))
+    u = c.fetchone()
+    if u and u[0] == session.get('user'):
+        conn.close()
+        return jsonify({"success": False, "error": "You cannot delete yourself!"})
+    c.execute("DELETE FROM users WHERE id = ?", (user_id,))
+    conn.commit()
+    conn.close()
+    return jsonify({"success": True})
+
+@app.route('/api/users/<int:user_id>', methods=['PUT'])
+def update_user(user_id):
+    if session.get('role') != 'admin': 
+        return jsonify({"error": "Unauthorized"}), 403
+        
+    data = request.json
+    role = data.get('role', 'operator')
+    allowed = data.get('allowed_nodes', 'all')
+    password = data.get('password')
+
+    try:
+        conn = sqlite3.connect(DB_PATH)
+        c = conn.cursor()
+        
+        if password and password.strip() != "":
+            h = generate_password_hash(password)
+            c.execute("UPDATE users SET password_hash=?, role=?, allowed_nodes=? WHERE id=?", 
+                      (h, role, allowed, user_id))
+        else:
+            c.execute("UPDATE users SET role=?, allowed_nodes=? WHERE id=?", 
+                      (role, allowed, user_id))
+            
+        conn.commit()
+        conn.close()
+        return jsonify({"success": True})
+    except Exception as e:
+        return jsonify({"success": False, "error": str(e)})
+
+@app.route('/api/change_password', methods=['POST'])
+def change_password():
+    if not session.get('logged_in'): 
+        return jsonify({"success": False, "error": "Not authenticated"}), 403
+    d = request.json
+    new_pass = d.get('new_password')
+    user_to_change = d.get('username')
+    if session.get('role') != 'admin' and session.get('user') != user_to_change:
+        return jsonify({"success": False, "error": "Unauthorized"}), 403
+    if not new_pass:
+        return jsonify({"success": False, "error": "Password cannot be empty"}), 400
+    h = generate_password_hash(new_pass)
+    conn = sqlite3.connect(DB_PATH)
+    c = conn.cursor()
+    c.execute("UPDATE users SET password_hash = ? WHERE username = ?", (h, user_to_change))
+    conn.commit()
+    conn.close()
+    return jsonify({"success": True})
+
+@app.route('/api/global_command', methods=['POST'])
+def global_cmd():
+    if session.get('role') != 'admin': 
+        return jsonify({"success": False, "error": "Admin action only!"}), 403
+    d = request.json
+    cmd_type = d.get('type') 
+    clients_list = []
+    if os.path.exists(CLIENTS_PATH):
+        with open(CLIENTS_PATH, 'r') as f:
+            clients_list = json.load(f)
+    conn = sqlite3.connect(DB_PATH)
+    c = conn.cursor()
+    for client in clients_list:
+        cid = client['id'].lower()
+        mqtt_backend.publish(f"servizi/{cid}/cmnd", cmd_type)
+        c.execute("INSERT INTO audit_logs (timestamp, username, client_id, command) VALUES (datetime('now','localtime'), ?, ?, ?)",
+                  (session.get('user'), cid, f"GLOBAL_OVERRIDE_{cmd_type}"))
+    conn.commit()
+    conn.close()
+    return jsonify({"success": True})
+
+def auto_update_ids():
+    while True:
+        try:
+            with open(CONFIG_PATH, 'r') as f:
+                current_cfg = json.load(f)
+            target_time = current_cfg.get("update_schedule", "03:00")
+            urls = current_cfg.get("id_urls", {
+                "dmr": "https://radioid.net/static/dmrid.dat",
+                "nxdn": "https://radioid.net/static/nxdn.csv"
+            })
+            now = time.strftime("%H:%M")
+            if now == target_time:
+                logger.info(f">>> [AUTO-UPDATE] Scheduled time reached ({now}). Downloading...")
+                urllib.request.urlretrieve(urls["dmr"], DMR_IDS_PATH)
+                urllib.request.urlretrieve(urls["nxdn"], NXDN_IDS_PATH)
+                load_ids()
+                logger.info(f">>> [AUTO-UPDATE] Completed successfully.")
+                time.sleep(65) 
+        except Exception as e:
+            logger.error(f">>> [AUTO-UPDATE] Error: {e}")
+        time.sleep(30)
+
+@app.route('/api/ui_config', methods=['GET'])
+def get_ui_config():
+    try:
+        with open(CONFIG_PATH, 'r') as f:
+            cfg = json.load(f)
+        ui_cfg = cfg.get("ui", {
+            "profileA_Name": "PROFILE A",
+            "profileA_Color": "#3498db",
+            "profileB_Name": "PROFILE B",
+            "profileB_Color": "#9b59b6"
+        })
+        return jsonify(ui_cfg)
+    except Exception as e:
+        return jsonify({"error": str(e)}), 500
+
+@app.route('/api/config', methods=['GET'])
+def get_config_api():
+    if session.get('role') != 'admin': return jsonify({"error": "Unauthorized"}), 403
+    with open(CONFIG_PATH, 'r') as f:
+        cfg = json.load(f)
+    return jsonify({
+        "update_schedule": cfg.get("update_schedule", "03:00"),
+        "url_dmr": cfg.get("id_urls", {}).get("dmr", ""),
+        "url_nxdn": cfg.get("id_urls", {}).get("nxdn", "")
+    })
+
+@app.route('/api/config', methods=['POST'])
+def save_config_api():
+    if session.get('role') != 'admin': return jsonify({"error": "Unauthorized"}), 403
+    new_data = request.json
+    with open(CONFIG_PATH, 'r') as f:
+        cfg = json.load(f)
+    cfg["update_schedule"] = new_data.get("update_schedule", "03:00")
+    if "id_urls" not in cfg: cfg["id_urls"] = {}
+    cfg["id_urls"]["dmr"] = new_data.get("url_dmr", "")
+    cfg["id_urls"]["nxdn"] = new_data.get("url_nxdn", "")
+    with open(CONFIG_PATH, 'w') as f:
+        json.dump(cfg, f, indent=4)
+    return jsonify({"success": True})
+
+@app.route('/api/config_file/<cid>/<service>', methods=['GET'])
+def get_config_file(cid, service):
+    if session.get('role') != 'admin': return jsonify({"error": "Unauthorized"}), 403
+    cid = cid.lower()
+    service = service.lower()
+    config_data = device_configs.get(cid, {}).get(service)
+    
+    if not config_data:
+        return jsonify({"error": "Configuration not received yet. Wait or send an UPDATE command."}), 404
+    return jsonify({"success": True, "data": config_data})
+
+@app.route('/api/config_file', methods=['POST'])
+def save_config_file():
+    if session.get('role') != 'admin': return jsonify({"error": "Unauthorized"}), 403
+    d = request.json
+    cid = d.get('clientId').lower()
+    service = d.get('service').lower()
+    new_config = d.get('config_data')
+    topic_set = f"devices/{cid}/config_set/{service}"
+    mqtt_backend.publish(topic_set, json.dumps(new_config))
+    conn = sqlite3.connect(DB_PATH)
+    c = conn.cursor()
+    c.execute("INSERT INTO audit_logs (timestamp, username, client_id, command) VALUES (datetime('now','localtime'), ?, ?, ?)",
+              (session.get('user'), cid, f"EDIT_CONFIG_{service.upper()}"))
+    conn.commit()
+    conn.close()
+    return jsonify({"success": True})
+
+@app.route('/manifest.json')
+def serve_manifest():
+    return send_from_directory('.', 'manifest.json')
+
+@app.route('/sw.js')
+def serve_sw():
+    return send_from_directory('.', 'sw.js')
+
+@app.route('/icon-512.png')
+def serve_icon():
+    return send_from_directory('.', 'icon-512.png')
+
+def broadcast_push_notification(title, body):
+    wp_config = config.get('webpush')
+    if not wp_config: return
+    
+    conn = sqlite3.connect(DB_PATH)
+    c = conn.cursor()
+    c.execute("SELECT id, subscription FROM push_subscriptions")
+    subs = c.fetchall()
+    
+    for sub_id, sub_json in subs:
+        try:
+            webpush(
+                subscription_info=json.loads(sub_json),
+                data=json.dumps({"title": title, "body": body}),
+                vapid_private_key=wp_config['vapid_private_key'],
+                vapid_claims={"sub": wp_config['vapid_claim_email']}
+            )
+        except WebPushException as ex:
+            if ex.response and ex.response.status_code == 410: 
+                c.execute("DELETE FROM push_subscriptions WHERE id = ?", (sub_id,))
+                conn.commit()
+        except Exception as e:
+            logger.error(f"Generic Push Error: {e}")
+    conn.close()
+
+@app.route('/api/vapid_public_key')
+def get_vapid_key():
+    return jsonify({"public_key": config.get('webpush', {}).get('vapid_public_key', '')})
+
+@app.route('/api/subscribe', methods=['POST'])
+def subscribe_push():
+    if not session.get('logged_in'): return jsonify({"error": "Unauthorized"}), 403
+    sub_data = request.json
+    conn = sqlite3.connect(DB_PATH)
+    c = conn.cursor()
+    c.execute("INSERT OR IGNORE INTO push_subscriptions (username, subscription) VALUES (?, ?)", 
+              (session.get('user'), json.dumps(sub_data)))
+    conn.commit()
+    conn.close()
+    return jsonify({"success": True})
+
+threading.Thread(target=auto_update_ids, daemon=True).start()
+
+if __name__ == '__main__':
+    socketio.run(app, host='0.0.0.0', port=9000)
diff --git a/clients.json.example b/clients.json.example
new file mode 100644
index 0000000..c596588
--- /dev/null
+++ b/clients.json.example
@@ -0,0 +1,6 @@
+[
+    {"_comment": "Enter each repeater/node you want to control. The ID must match the MQTT topic"},
+    { "id": "repeater1", "name": "NAME 1" },
+    { "id": "repeater2", "name": "NAME 2" },
+    { "id": "repeater3", "name": "NAME 3" }
+]
diff --git a/config.json.example b/config.json.example
new file mode 100644
index 0000000..510e0fd
--- /dev/null
+++ b/config.json.example
@@ -0,0 +1,28 @@
+{
+    "mqtt": {
+        "broker": "your_mqtt_broker_address",
+        "port": 1883,
+        "user": "your_username",
+        "password": "your_password"
+    },
+    "web_admin": {
+        "default_user": "admin",
+        "default_pass": "admin123"
+    },
+    "webpush": {
+        "vapid_public_key": "INSERT_GENERATED_PUBLIC_KEY_HERE",
+        "vapid_private_key": "INSERT_GENERATED_PRIVATE_KEY_HERE",
+        "vapid_claim_email": "mailto:your@email.com"
+    },
+    "ui": {
+        "profileA_Name": "PROFILE A",
+        "profileA_Color": "#3b82f6",
+        "profileB_Name": "PROFILE B",
+        "profileB_Color": "#eab308"
+    },
+    "update_schedule": "03:00",
+    "id_urls": {
+        "dmr": "https://radioid.net/static/dmrid.dat",
+        "nxdn": "https://radioid.net/static/nxdn.csv"
+    }
+}
diff --git a/icon-512.png b/icon-512.png
new file mode 100644
index 0000000..5bb7d67
Binary files /dev/null and b/icon-512.png differ
diff --git a/images/dashboard.png b/images/dashboard.png
new file mode 100644
index 0000000..6f85f7b
Binary files /dev/null and b/images/dashboard.png differ
diff --git a/install.txt b/install.txt
new file mode 100644
index 0000000..642232f
--- /dev/null
+++ b/install.txt
@@ -0,0 +1,106 @@
+============================================================
+       INSTALLATION GUIDE - FLEET CONTROL CONSOLE (SERVER)
+============================================================
+
+------------------------------------------------------------
+1. PRE-REQUISITES (CRITICAL)
+------------------------------------------------------------
+Before installing Python dependencies, you must install 
+system compilers and development libraries.
+
+Debian/Ubuntu:
+   sudo apt update
+   sudo apt install build-essential python3-dev libssl-dev libffi-dev
+
+Upgrade base pip tools:
+   pip install --upgrade pip setuptools wheel
+
+Create a virtual environment (Recommended):
+   python3 -m venv venv
+   source venv/bin/activate
+   pip install -r requirements.txt
+
+------------------------------------------------------------
+2. SERVER SETUP (CENTRAL HUB)
+------------------------------------------------------------
+The server handles the web interface and user permissions.
+
+Steps:
+1. Configure 'config.json' using 'config.example.json'.
+2. Enter MQTT credentials and VAPID keys.
+3. Define repeaters in the 'clients.json' file.
+4. Install production WSGI server packages (if not in requirements):
+   pip install gunicorn gevent gevent-websocket
+5. Start the production server: 
+   gunicorn -k "geventwebsocket.gunicorn.workers.GeventWebSocketWorker" -w 1 --bind 0.0.0.0:9000 app:app
+
+------------------------------------------------------------
+3. GENERATING VAPID KEYS (PUSH NOTIFICATIONS)
+------------------------------------------------------------
+⚠️ WARNING: Web Push Notifications strictly require the 
+dashboard to be accessed via a secure HTTPS connection.
+They will NOT work over standard HTTP.
+
+1. Go to https://vapidkeys.com/ and generate the keys.
+2. Copy 'Public Key' and 'Private Key' into 'config.json'.
+3. Set 'vapid_claim_email' (e.g., "mailto:your@email.com").
+
+------------------------------------------------------------
+4. RUNNING AS A SERVICE (SYSTEMD)
+------------------------------------------------------------
+Configuration:
+1. Copy .service file to '/etc/systemd/system/':
+   sudo cp fleet-console.service /etc/systemd/system/
+2. Reload systemd: sudo systemctl daemon-reload
+3. Enable on boot: sudo systemctl enable fleet-console
+4. Start service:  sudo systemctl start fleet-console
+
+============================================================
+       GUIDA ALL'INSTALLAZIONE - SERVER
+============================================================
+
+------------------------------------------------------------
+1. REQUISITI PRELIMINARI (CRITICI)
+------------------------------------------------------------
+Prima di installare le dipendenze Python, è necessario 
+installare i compilatori di sistema. Senza questi, 
+l'installazione di 'gevent' fallirà su VPS vergini.
+
+Esegui su Debian/Ubuntu:
+   sudo apt update
+   sudo apt install build-essential python3-dev libssl-dev libffi-dev
+
+Aggiorna gli strumenti di base di pip:
+   pip install --upgrade pip setuptools wheel
+
+Crea un ambiente virtuale (consigliato):
+   python3 -m venv venv
+   source venv/bin/activate
+   pip install -r requirements.txt
+
+------------------------------------------------------------
+2. SETUP DEL SERVER
+------------------------------------------------------------
+Passaggi:
+1. Configura 'config.json' partendo da 'config.example.json'.
+2. Inserisci credenziali MQTT e chiavi VAPID.
+3. Definisci i ripetitori in 'clients.json'.
+4. Avvia il server di produzione: 
+   gunicorn -k "geventwebsocket.gunicorn.workers.GeventWebSocketWorker" -w 1 --bind 0.0.0.0:9000 app:app
+
+------------------------------------------------------------
+3. GENERAZIONE CHIAVI VAPID
+------------------------------------------------------------
+⚠️ ATTENZIONE: Le notifiche push richiedono HTTPS.
+
+1. Vai su https://vapidkeys.com/ e genera le chiavi.
+2. Copia 'Public Key' e 'Private Key' nel 'config.json'.
+3. Imposta 'vapid_claim_email' (es. "mailto:tua@email.com").
+
+------------------------------------------------------------
+4. ESECUZIONE COME SERVIZIO
+------------------------------------------------------------
+1. sudo cp fleet-console.service /etc/systemd/system/
+2. sudo systemctl daemon-reload
+3. sudo systemctl enable fleet-console
+4. sudo systemctl start fleet-console
diff --git a/manifest.json b/manifest.json
new file mode 100644
index 0000000..74eef20
--- /dev/null
+++ b/manifest.json
@@ -0,0 +1,15 @@
+{
+  "name": "Fleet Control Console",
+  "short_name": "Fleet C2",
+  "start_url": "/",
+  "display": "standalone",
+  "background_color": "#0f172a",
+  "theme_color": "#3b82f6",
+  "icons": [
+    {
+      "src": "/icon-512.png",
+      "sizes": "512x512",
+      "type": "image/png"
+    }
+  ]
+}
diff --git a/requirements-server.txt b/requirements-server.txt
new file mode 100644
index 0000000..a5289ca
--- /dev/null
+++ b/requirements-server.txt
@@ -0,0 +1,8 @@
+Flask
+Flask-SocketIO
+Werkzeug
+pywebpush
+paho-mqtt
+gunicorn
+gevent
+gevent-websocket
diff --git a/sw.js b/sw.js
new file mode 100644
index 0000000..79d751a
--- /dev/null
+++ b/sw.js
@@ -0,0 +1,63 @@
+const CACHE_NAME = 'fleet-c2-v2'; // Incrementiamo la versione
+const urlsToCache = [
+  '/',
+  '/manifest.json',
+  '/icon-512.png'
+];
+
+// --- 1. GESTIONE CACHE (Il tuo codice originale) ---
+self.addEventListener('install', event => {
+  event.waitUntil(
+    caches.open(CACHE_NAME)
+      .then(cache => cache.addAll(urlsToCache))
+  );
+});
+
+self.addEventListener('fetch', event => {
+  event.respondWith(
+    fetch(event.request).catch(() => caches.match(event.request))
+  );
+});
+
+// --- 2. GESTIONE NOTIFICHE PUSH (Il nuovo codice) ---
+self.addEventListener('push', function(event) {
+    console.log('[Service Worker] Notifica Push ricevuta.');
+
+    let data = { title: 'Fleet Alert', body: 'Nuovo messaggio dal sistema.' };
+
+    if (event.data) {
+        try {
+            data = event.data.json();
+        } catch (e) {
+            data.body = event.data.text();
+        }
+    }
+
+    const options = {
+        body: data.body,
+        icon: '/icon-512.png',
+        badge: '/icon-512.png',
+        vibrate: [200, 100, 200],
+        data: {
+            dateOfArrival: Date.now(),
+            primaryKey: '1'
+        },
+        actions: [
+            { action: 'explore', title: 'Apri Dashboard' },
+            { action: 'close', title: 'Chiudi' }
+        ]
+    };
+
+    event.waitUntil(
+        self.registration.showNotification(data.title, options)
+    );
+});
+
+self.addEventListener('notificationclick', function(event) {
+    event.notification.close();
+    if (event.action === 'explore') {
+        event.waitUntil(
+            clients.openWindow('/')
+        );
+    }
+});
diff --git a/systemd/fleet-control.service b/systemd/fleet-control.service
new file mode 100644
index 0000000..d00d798
--- /dev/null
+++ b/systemd/fleet-control.service
@@ -0,0 +1,19 @@
+[Unit]
+Description=Fleet Control Console - Central Hub
+After=network.target
+
+[Service]
+Type=simple
+User=root
+WorkingDirectory=/opt/web-control
+ExecStart=/usr/local/bin/gunicorn -k "geventwebsocket.gunicorn.workers.GeventWebSocketWorker" -w 1 --graceful-timeout 2 --bind 0.0.0.0:9000 app:app
+TimeoutStopSec=3
+Restart=always
+RestartSec=5
+
+StandardOutput=syslog
+StandardError=syslog
+SyslogIdentifier=fleet-console
+
+[Install]
+WantedBy=multi-user.target
diff --git a/templates/index.html b/templates/index.html
new file mode 100644
index 0000000..9ef8e54
--- /dev/null
+++ b/templates/index.html
@@ -0,0 +1,1230 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+    <link rel="icon" href="data:,">
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>Fleet Control Console</title>
+    <link rel="manifest" href="/manifest.json">
+    <meta name="theme-color" content="#0f172a">
+    <meta name="apple-mobile-web-app-capable" content="yes">
+    <meta name="apple-mobile-web-app-status-bar-style" content="black-translucent">
+    <link rel="apple-touch-icon" href="/icon-512.png">
+    <meta name="apple-mobile-web-app-title" content="Fleet C2">
+    <link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;600;800&family=JetBrains+Mono:wght@400;700&display=swap" rel="stylesheet">
+<style>
+        /* --- TEMA NOC (Network Operations Center) --- */
+        :root { 
+            --primary: #2f81f7; --success: #2ea043; --danger: #da3633; --accent: #a371f7; 
+            --bg-gradient: #0d1117; /* Sfondo nero/grigio profondissimo */
+            --card-bg: #161b22;     /* Sfondo grigio antracite per i pannelli */
+            --border-color: #30363d;/* Bordi netti e sottili */
+            --text-main: #c9d1d9;   /* Bianco attenuato anti-affaticamento */
+            --text-muted: #8b949e;  /* Grigio tecnico per label */
+            --topbar-bg: #161b22;
+        }
+        
+        /* Modalità scura "pura" se il toggle viene premuto */
+        body.dark-mode { 
+            --bg-gradient: #010409; --card-bg: #0d1117; --border-color: #21262d;
+            --text-main: #f0f6fc; --topbar-bg: #0d1117;
+        }
+
+        * { box-sizing: border-box; }
+        body { font-family: 'Inter', sans-serif; background: var(--bg-gradient); margin: 0; padding: 0; color: var(--text-main); transition: background-color 0.3s; min-height: 100vh; }
+        
+        /* Barra superiore squadrata e tecnica */
+        #top-bar-container { position: sticky; top: 15px; z-index: 100; padding: 0 20px; display: flex; justify-content: center; }
+        #top-bar { background: var(--topbar-bg); padding: 12px 30px; display: flex; justify-content: space-between; align-items: center; border-radius: 6px; border: 1px solid var(--border-color); width: 100%; max-width: 1400px; }
+        .title-brand { font-size: 1.2rem; font-weight: 800; letter-spacing: 2px; color: var(--text-main); font-family: 'JetBrains Mono', monospace; }
+        
+        .theme-switch { background: transparent; border: 1px solid var(--border-color); color: var(--text-muted); padding: 6px 14px; border-radius: 4px; cursor: pointer; font-weight: 600; font-size: 0.85rem; font-family: 'JetBrains Mono', monospace; }
+        .theme-switch:hover { color: var(--text-main); border-color: var(--text-main); }
+        
+        .grid { display: grid; grid-template-columns: repeat(auto-fill, minmax(340px, 1fr)); gap: 20px; max-width: 1400px; margin: 30px auto; padding: 0 20px; }
+        
+        /* Pannelli Ripetitori - Zero ombre, bordi netti */
+        .card { background: var(--card-bg) !important; border-radius: 4px; padding: 20px; border: 1px solid var(--border-color); border-top: 4px solid var(--border-color) !important; display: flex; flex-direction: column; box-shadow: none !important; filter: none !important; opacity: 1 !important; }
+        .card.online { border-top-color: var(--success) !important; }
+        
+        .card-header { display: flex; justify-content: space-between; align-items: center; margin-bottom: 15px; border-bottom: 1px solid var(--border-color); padding-bottom: 10px; }
+        .client-name { font-size: 1.1rem; font-weight: 700; white-space: nowrap; overflow: hidden; text-overflow: ellipsis; flex: 1; }
+        .badge-id { font-size: 0.75rem; font-family: 'JetBrains Mono', monospace; background: #010409; padding: 4px 8px; border-radius: 3px; border: 1px solid var(--border-color); color: var(--text-muted); }
+        
+        /* Telemetria stile terminale */
+        .health-bar { display: flex; justify-content: space-between; font-size: 0.75rem; font-weight: 600; background: #010409; padding: 8px 12px; border-radius: 3px; margin-bottom: 15px; border: 1px solid var(--border-color); font-family: 'JetBrains Mono', monospace; }
+        
+        /* Display Stato */
+        .status-display { text-align: center; font-family: 'JetBrains Mono', monospace; font-size: 0.9rem; font-weight: 700; padding: 8px; border-radius: 3px; background: #010409; border: 1px solid var(--border-color); margin-bottom: 15px; color: var(--text-muted); }
+        .card.online .status-display { color: var(--success); border-color: rgba(46, 160, 67, 0.4); }
+        .status-offline { color: var(--danger) !important; border-color: rgba(218, 54, 51, 0.4) !important; }
+        
+        /* TimeSlots Override */
+        .ts-container { display: flex; flex-direction: column; gap: 6px; margin-bottom: 15px; }
+        .dmr-info { font-size: 0.85rem; font-weight: 600; font-family: 'JetBrains Mono', monospace; padding: 8px 12px; border-radius: 3px; background: #010409 !important; border: 1px solid var(--border-color); border-left: 4px solid var(--border-color) !important; color: var(--text-muted) !important; white-space: nowrap; overflow: hidden; text-overflow: ellipsis; }
+        
+        /* Terminal Log interno ai pannelli */
+        .terminal-log { background: #010409; color: var(--text-muted); font-family: 'JetBrains Mono', monospace; font-size: 0.75rem; border-radius: 3px; padding: 10px; height: 130px; overflow-y: auto; border: 1px solid var(--border-color); line-height: 1.4; margin-bottom: 15px; box-shadow: inset 0 2px 10px rgba(0,0,0,0.5); }
+        
+        /* Bottoni flat */
+        .actions { display: none; gap: 8px; flex-wrap: wrap; margin-top: auto; }
+        .btn-cmd { flex: 1; padding: 8px 10px; border: 1px solid var(--border-color); background: #010409 !important; border-radius: 3px; font-weight: 600; font-size: 0.75rem; cursor: pointer; color: var(--text-main) !important; font-family: 'JetBrains Mono', monospace; transition: border-color 0.2s ease; display: flex; align-items: center; justify-content: center; gap: 5px; box-shadow: none !important; }
+        .btn-cmd:hover { border-color: var(--text-main); }
+        
+        /* Tabella LastHeard */
+        .table-container { background: var(--card-bg); border-radius: 6px; border: 1px solid var(--border-color); overflow: hidden; max-height: 400px; overflow-y: auto; margin: 0 20px 40px 20px; box-shadow: none; }
+        table { width: 100%; border-collapse: collapse; text-align: left; font-size: 0.85rem; font-family: 'JetBrains Mono', monospace; }
+        thead { background: var(--topbar-bg); position: sticky; top: 0; z-index: 1; border-bottom: 1px solid var(--border-color); }
+        th { padding: 12px 15px; font-weight: 600; text-transform: uppercase; font-size: 0.75rem; color: var(--text-muted); }
+        td { padding: 10px 15px; border-bottom: 1px solid var(--border-color); color: var(--text-main); }
+        
+        /* Animazioni Uniformate per i transiti */
+        @keyframes pulse-border { 
+            0% { border-color: var(--border-color); } 
+            50% { border-color: var(--pulse-color, var(--primary)); } 
+            100% { border-color: var(--border-color); } 
+        }
+        .tx-active-unified { 
+            animation: pulse-border 1.5s infinite !important; 
+            color: var(--text-main) !important; 
+            border-left: 4px solid var(--pulse-color, var(--primary)) !important; 
+            background: #010409 !important; 
+        }
+        
+        /* La vecchia classe blink la teniamo solo per gli allarmi rossi dei demoni KO */
+        @keyframes flat-blink { 0% { border-color: var(--border-color); } 50% { border-color: var(--danger); } 100% { border-color: var(--border-color); } }
+        .blink { animation: flat-blink 1.5s infinite; color: var(--danger) !important; }
+        
+        /* Finestre Modali (Popup) */
+        .modal-overlay { display:none; position:fixed; top:0; left:0; width:100%; height:100%; background:rgba(1, 4, 9, 0.85); z-index:1000; align-items:center; justify-content:center; }
+        .modal-content { background:var(--card-bg); border:1px solid var(--border-color); padding:25px; border-radius:6px; max-height: 90vh; overflow-y: auto; box-shadow: 0 10px 30px rgba(0,0,0,0.8); }
+        
+        /* Elementi Input e Form */
+        .auth-btn { background: #010409; color: var(--text-main); border: 1px solid var(--border-color); padding: 6px 12px; border-radius: 4px; font-weight: 600; cursor: pointer; font-size: 0.8rem; font-family: 'JetBrains Mono', monospace; transition: border-color 0.2s; }
+        .auth-btn:hover { border-color: var(--text-main); }
+        input, select { background: #010409; border: 1px solid var(--border-color); color: var(--text-main); padding: 8px 12px; border-radius: 4px; font-family: 'JetBrains Mono', monospace; outline: none; }
+        input:focus { border-color: var(--primary); }
+        input:disabled { opacity: 0.5; cursor: not-allowed; }
+        option { background: var(--card-bg); color: var(--text-main); }
+        
+        /* Ottimizzazione Mobile */
+        @media (max-width: 768px) {
+            #top-bar-container { top: 10px; padding: 0 10px; }
+            #top-bar { flex-direction: column; padding: 15px; gap: 12px; border-radius: 8px; }
+            .title-brand { font-size: 1.1rem; text-align: center; width: 100%; }
+            #top-bar > div { width: 100%; flex-wrap: wrap; justify-content: center; gap: 8px !important; }
+            #auth-container { width: 100%; justify-content: center; flex-wrap: wrap; padding-top: 12px; border-top: 1px solid var(--border-color); }
+            #auth-container > span { width: 100%; text-align: center; margin-bottom: 8px; font-family: 'JetBrains Mono', monospace; }
+            .auth-btn, .theme-switch { flex: 1 1 auto; text-align: center; }
+        }
+    </style>
+</head>
+<body>
+
+<div id="top-bar-container">
+    <div id="top-bar">
+        <div class="title-brand">FLEET CONTROL CONSOLE</div>
+        <div style="display: flex; align-items: center; gap: 12px;">
+            <button class="theme-switch" id="lang-btn" onclick="toggleLang()" data-i18n-title="ttLang">🇮🇹 ITA</button>
+            <button class="theme-switch" id="push-btn" onclick="subscribeToPush()">🔔 PUSH</button>
+            <div id="auth-container" style="display:flex; align-items:center; gap:8px;"></div>
+        </div>
+    </div>
+</div>
+
+<div class="grid" id="client-grid"></div>
+
+<div style="max-width: 1400px; margin: 0 auto 15px auto; padding: 0 20px; display: flex; justify-content: space-between; align-items: center; flex-wrap: wrap; gap: 10px;">
+    <h3 style="margin: 0; font-weight: 800; display: flex; align-items: center; gap: 10px; color: var(--text-main);">
+        <span style="font-size: 1.5rem;">📊</span> <span data-i18n="statTitle">DAILY STATISTICS</span>
+    </h3>
+    <select id="stat-node-filter" onchange="refreshStats()" style="background: var(--card-bg); border: 1px solid var(--border-color); color: var(--text-main); padding: 8px 15px; border-radius: 6px; font-family: 'JetBrains Mono', monospace; font-weight: bold; cursor: pointer; outline: none;">
+        <option value="all">🌐 ALL NODES</option>
+    </select>
+</div>
+
+<div style="max-width: 1400px; margin: 0 auto 30px auto; padding: 0 20px; display: grid; grid-template-columns: repeat(auto-fit, minmax(300px, 1fr)); gap: 20px;">
+    <div class="card" style="padding: 15px; border-top-color: var(--accent) !important;">
+        <h4 style="margin: 0 0 10px 0; color: var(--accent); font-family: 'JetBrains Mono', monospace;" data-i18n="statTopTG">🎯 TOP TALKGROUPS</h4>
+        <div id="stat-tgs" style="font-size: 0.85rem; color: var(--text-muted); line-height: 1.8;" data-i18n="statLoading">Loading...</div>
+    </div>
+    
+    <div class="card" style="padding: 15px; border-top-color: var(--success) !important;">
+        <h4 style="margin: 0 0 10px 0; color: var(--success); font-family: 'JetBrains Mono', monospace;" data-i18n="statTopCall">🗣️ TOP CALLSIGNS</h4>
+        <div id="stat-calls" style="font-size: 0.85rem; color: var(--text-muted); line-height: 1.8;" data-i18n="statLoading">Loading...</div>
+    </div>
+    
+    <div class="card" style="padding: 15px; border-top-color: var(--primary) !important; display: flex; justify-content: space-around; align-items: center; text-align: center;">
+        <div>
+            <div style="font-size: 1.8rem; font-weight: 800; color: var(--text-main); font-family: 'JetBrains Mono', monospace;"><span id="stat-avg">--</span>s</div>
+            <div style="font-size: 0.75rem; color: var(--text-muted); text-transform: uppercase; font-weight: bold;" data-i18n="statAvgDur">⏱️ AVERAGE DURATION</div>
+        </div>
+        <div style="width: 1px; height: 50px; background: var(--border-color);"></div> 
+        <div>
+            <div style="font-size: 1.8rem; font-weight: 800; color: var(--text-main); font-family: 'JetBrains Mono', monospace;"><span id="stat-today">--</span></div>
+            <div style="font-size: 0.75rem; color: var(--text-muted); text-transform: uppercase; font-weight: bold;" data-i18n="statTodayTx">📡 TRANSITS TODAY</div>
+        </div>
+    </div>
+</div>
+
+<div style="max-width: 1400px; margin: 0 auto;">
+    <h3 style="margin-left: 20px; font-weight: 800; display: flex; align-items: center; gap: 10px; color: var(--text-main);">
+        <span style="font-size: 1.5rem;">📡</span> <span data-i18n="lastTransits">Lastheard</span>
+    </h3>
+    <div class="table-container">
+        <table>
+            <thead>
+                <tr>
+                    <th data-i18n="thTime">Time</th>
+                    <th data-i18n="thRep">Repeater</th>
+                    <th data-i18n="thMode">Mode</th>
+                    <th style="text-align: center;">Slot</th>
+                    <th data-i18n="thCall">Callsign</th>
+                    <th>Target / TG</th>
+                    <th data-i18n="thDur">Duration</th>
+                    <th>BER</th>
+                </tr>
+            </thead>
+            <tbody id="log-body"></tbody>
+        </table>
+    </div>
+</div>
+
+<footer>
+    <div style="text-align: center; padding: 25px; color: var(--text-muted); font-size: 0.85rem; font-weight: 600; display: flex; justify-content: center; align-items: center; gap: 15px; flex-wrap: wrap;">
+        <span>&copy; 2026 <strong>IV3JDV @ ARIFVG</strong></span>
+        
+        <span style="opacity: 0.5;">|</span>
+        
+        <a href="https://git.arifvg.it/iv3jdv/fleet-control-console" target="_blank" style="color: inherit; text-decoration: none; display: flex; align-items: center; gap: 6px; transition: color 0.2s;" title="Private Gitea Repository">
+            <svg height="18" viewBox="0 0 24 24" width="18" style="fill: currentColor; vertical-align: middle;">
+                <path d="M15 4V3H1V4H2V12C2 13.1 2.9 14 4 14H10C11.1 14 12 13.1 12 12V4H15ZM10 12H4V4H10V12ZM14 4H12V5H14V4Z" />
+            </svg>
+            <span>Gitea Home</span>
+        </a>
+
+        <span style="opacity: 0.5;">|</span>
+
+        <a href="https://github.com/picchiosat/fleet-control-console" target="_blank" style="color: inherit; text-decoration: none; display: flex; align-items: center; gap: 6px; transition: color 0.2s;" title="Public GitHub Mirror">
+            <svg height="18" viewBox="0 0 16 16" width="18" style="fill: currentColor; vertical-align: middle;">
+                <path d="M8 0C3.58 0 0 3.58 0 8c0 3.54 2.29 6.53 5.47 7.59.4.07.55-.17.55-.38 0-.19-.01-.82-.01-1.49-2.01.37-2.53-.49-2.69-.94-.09-.23-.48-.94-.82-1.13-.28-.15-.68-.52-.01-.53.63-.01 1.08.58 1.23.82.72 1.21 1.87.87 2.33.66.07-.52.28-.87.51-1.07-1.78-.2-3.64-.89-3.64-3.95 0-.87.31-1.59.82-2.15-.08-.2-.36-1.02.08-2.12 0 0 .67-.21 2.2.82.64-.18 1.32-.27 2-.27.68 0 1.36.09 2 .27 1.53-1.04 2.2-.82 2.2-.82.44 1.1.16 1.92.08 2.12.51.56.82 1.27.82 2.15 0 3.07-1.87 3.75-3.65 3.95.29.25.54.73.54 1.48 0 1.07-.01 1.93-.01 2.2 0 .21.15.46.55.38A8.013 8.013 0 0016 8c0-4.42-3.58-8-8-8z"></path>
+            </svg>
+            <span>GitHub Mirror</span>
+        </a>
+
+        <span style="opacity: 0.5;">|</span>
+        <span id="last-update">Sync: --:--</span>
+    </div>
+</footer>
+
+<div id="login-modal" class="modal-overlay">
+    <div class="modal-content" style="width:90%; max-width:400px;">
+        <div style="display:flex; justify-content:space-between; align-items:center; border-bottom:1px solid var(--border-color); padding-bottom:15px; margin-bottom:20px;">
+            <h2 style="margin:0; color:var(--primary);" data-i18n="loginTitle">🔒 System Login</h2>
+            <button onclick="closeLoginModal()" style="background:none; border:none; font-size:1.5rem; cursor:pointer; color:var(--danger);" title="Close">✖</button>
+        </div>
+        <div style="display:flex; flex-direction:column; gap:15px;">
+            <input type="text" id="modal-username" placeholder="Username" style="width:100%; padding:12px; font-size:1rem;" onkeypress="handleLoginEnter(event)">
+            <input type="password" id="modal-password" placeholder="Password" style="width:100%; padding:12px; font-size:1rem;" onkeypress="handleLoginEnter(event)">
+            <button onclick="performLogin()" class="btn-cmd" style="background:var(--success); width:100%; padding:12px; margin-top:10px; font-size:1rem;">LOGIN</button>
+        </div>
+    </div>
+</div>
+
+<div id="admin-modal" class="modal-overlay">
+    <div class="modal-content" style="width:90%; max-width:900px;">
+        <div style="display:flex; justify-content:space-between; align-items:center; border-bottom:1px solid var(--border-color); padding-bottom:15px; margin-bottom:20px;">
+            <h2 style="margin:0;" data-i18n="adminTitle">🛠️ User & System Management</h2>
+            <button onclick="closeAdmin()" style="background:none; border:none; font-size:1.5rem; cursor:pointer; color:var(--danger);" title="Close">✖</button>
+        </div>
+        
+        <div style="display:flex; flex-wrap:wrap; gap:10px; margin-bottom:20px; background:rgba(0,0,0,0.05); padding:15px; border-radius:16px; align-items:center;">
+            <input type="text" id="new-user" placeholder="Username" style="flex:1; min-width:120px;">
+            <input type="password" id="new-pass" placeholder="Password" style="flex:1; min-width:120px;">
+            <select id="new-role" style="flex:0.5; min-width:100px;">
+                <option value="operator" data-i18n="roleOp">Operator</option>
+                <option value="admin">Admin</option>
+            </select>
+            <input type="text" id="new-nodes" placeholder="Nodes (eg: ir3uic,ir3q)" style="flex:2; min-width:150px;">
+            <button id="btn-user-submit" onclick="submitUser()" class="btn-cmd" style="background:var(--success); flex:0.5;" data-i18n="btnAdd">+ ADD</button>
+            <button id="btn-user-cancel" onclick="cancelEdit()" class="btn-cmd" style="background:var(--text-muted); flex:0.2; display:none;" title="Cancel">✖</button>
+        </div>
+        
+        <div style="margin-bottom:20px; background:rgba(59, 130, 246, 0.05); padding:20px; border-radius:16px; border: 1px solid var(--primary);">
+            <h4 style="margin:0 0 15px 0; color:var(--primary);" data-i18n="adminDBSync">⚙️ Database Sync Configuration</h4>
+            <div style="display:grid; grid-template-columns: 1fr 1fr; gap:15px; margin-bottom:15px;">
+                <div><label style="font-size:0.8rem; font-weight:bold; display:block; margin-bottom:5px;">URL DB DMR (.dat):</label><input type="text" id="url-dmr-input" style="width:100%;"></div>
+                <div><label style="font-size:0.8rem; font-weight:bold; display:block; margin-bottom:5px;">URL DB NXDN (.csv):</label><input type="text" id="url-nxdn-input" style="width:100%;"></div>
+            </div>
+            <div style="display:flex; justify-content:space-between; align-items:center; border-top:1px solid var(--border-color); padding-top:15px;">
+                <div style="display:flex; align-items:center; gap:10px;"><label style="font-size:0.8rem; font-weight:bold;" data-i18n="adminTime">Daily Update Time:</label><input type="time" id="update-time-input"></div>
+                <button onclick="saveSettings()" class="btn-cmd" style="background:var(--accent); max-width: 250px;" data-i18n="adminSave">SAVE CONFIGURATION</button>
+            </div>
+        </div>
+        <div style="overflow-x:auto;">
+            <table style="width:100%; border-collapse:collapse; text-align:left;">
+                <thead><tr><th>ID</th><th data-i18n="thUser">User</th><th data-i18n="thRole">Role</th><th data-i18n="thNodes">Nodes</th><th style="text-align:center;" data-i18n="thActs">Actions</th></tr></thead>
+                <tbody id="users-table-body"></tbody>
+            </table>
+        </div>
+    </div>
+</div>
+
+<div id="services-modal" class="modal-overlay">
+    <div class="modal-content" style="width:90%; max-width:550px;">
+        <div style="display:flex; justify-content:space-between; align-items:center; border-bottom:1px solid var(--border-color); padding-bottom:15px; margin-bottom:15px;">
+            <h2 style="margin:0; color:var(--accent);"><span data-i18n="modSvcTitle">⚙️ System Daemons:</span> <span id="svc-modal-title" style="color:var(--text-main);"></span></h2>
+            <button onclick="closeServicesModal()" style="background:none; border:none; font-size:1.5rem; cursor:pointer; color:var(--danger);" title="Close">✖</button>
+        </div>
+        <div id="services-list" style="max-height: 400px; overflow-y: auto; padding-right:10px;"></div>
+    </div>
+</div>
+
+<div id="configs-modal" class="modal-overlay">
+    <div class="modal-content" style="width:90%; max-width:500px;">
+        <div style="display:flex; justify-content:space-between; align-items:center; border-bottom:1px solid var(--border-color); padding-bottom:15px; margin-bottom:15px;">
+            <h2 style="margin:0; color:#8e44ad;" data-i18n="modFileTitle">📂 Configuration Files</h2>
+            <button onclick="closeConfigsModal()" style="background:none; border:none; font-size:1.5rem; cursor:pointer; color:var(--danger);" title="Close">✖</button>
+        </div>
+        <div id="configs-list" style="display:flex; flex-direction:column; gap:10px;"></div>
+    </div>
+</div>
+
+<div id="editor-modal" class="modal-overlay" style="background:rgba(0,0,0,0.8); z-index: 3000;">
+    <div class="modal-content" style="width:95%; max-width:900px; border: 1px solid var(--accent);">
+        <div style="display:flex; justify-content:space-between; align-items:center; margin-bottom:10px;">
+            <h3 style="margin:0; color:var(--accent);"><span data-i18n="modEditTitle">📝 INI File Editor:</span> <span id="editor-title" style="color:var(--text-main);"></span></h3>
+            <button onclick="closeEditorModal()" style="background:none; border:none; font-size:1.5rem; cursor:pointer; color:var(--danger);" title="Close">✖</button>
+        </div>
+        <div style="background:rgba(239, 68, 68, 0.1); border-left:4px solid var(--danger); padding:10px; margin-bottom:15px; font-size:0.85rem; font-weight:bold; border-radius: 8px;" data-i18n="warnEdit">
+            ⚠️ WARNING: This editor directly manipulates remote node parameters.
+        </div>
+        <textarea id="config-textarea" spellcheck="false" style="width:100%; height:55vh; background:#0f172a; color:#10b981; font-family:'JetBrains Mono', monospace; font-size:0.95rem; padding:15px; border-radius:12px; border:1px solid #334155; resize:none; box-sizing:border-box; outline:none;"></textarea>
+        <div style="display:flex; justify-content:space-between; margin-top:20px; align-items:center;">
+            <span id="editor-status" style="font-size:0.9rem; font-weight:bold;"></span>
+            <button onclick="saveConfig()" class="btn-cmd" style="background:var(--danger); max-width: 250px;" data-i18n="btnSave">💾 SAVE & SEND</button>
+        </div>
+    </div>
+</div>
+
+<div id="alert-modal" class="modal-overlay" style="z-index: 5000;">
+    <div class="modal-content" style="width:90%; max-width:400px; text-align:center; border: 2px solid var(--primary);" id="alert-box">
+        <h2 style="margin-top:0;" id="alert-title">ℹ️ INFO</h2>
+        <p style="margin-bottom:25px; color:var(--text-main); font-weight: 600;" id="alert-desc">Message</p>
+        <button onclick="document.getElementById('alert-modal').style.display='none'" class="btn-cmd" style="background:var(--primary); padding:12px; width:100%;">OK</button>
+    </div>
+</div>
+
+<div id="confirm-modal" class="modal-overlay" style="z-index: 4000;">
+    <div class="modal-content" style="width:90%; max-width:400px; text-align:center; border: 2px solid var(--danger);" id="confirm-box">
+        <h2 style="margin-top:0;" id="confirm-title">⚠️ WARNING</h2>
+        <p style="margin-bottom:25px; color:var(--text-main); font-weight: 600;" id="confirm-desc">Are you sure?</p>
+        <div style="display:flex; flex-direction:column; gap:15px;">
+            <button id="confirm-yes-btn" onclick="executeConfirmAction()" class="btn-cmd" style="background:var(--danger); padding:15px; font-size:1.1rem; font-weight:800;">YES, PROCEED</button>
+            <button id="confirm-cancel-btn" onclick="document.getElementById('confirm-modal').style.display='none'" class="btn-cmd" style="background:var(--text-muted); padding:12px; margin-top:10px;">CANCEL</button>
+        </div>
+    </div>
+</div>
+
+<div id="password-modal" class="modal-overlay" style="z-index: 3000;">
+    <div class="modal-content" style="width:90%; max-width:400px; text-align:center; border: 1px solid var(--accent);">
+        <h2 style="margin-top:0; color:var(--accent);">🔑 <span data-i18n="btnPass">PASSWORD CHANGE</span></h2>
+        <p style="margin-bottom:20px; color:var(--text-main); font-weight: 600;" data-i18n="promptPass">Enter the new password:</p>
+        <input type="password" id="new-password-input" style="width:100%; padding:12px; font-size:1rem; margin-bottom:20px; text-align:center;" placeholder="***">
+        <div style="display:flex; flex-direction:column; gap:10px;">
+            <button onclick="executePasswordChange()" class="btn-cmd" style="background:var(--success); padding:15px; font-size:1.1rem; font-weight:800;" data-i18n="titleSave">💾 SAVE</button>
+            <button onclick="closePasswordModal()" class="btn-cmd" style="background:var(--text-muted); padding:12px;" data-i18n="btnCancel">CANCEL</button>
+        </div>
+    </div>
+</div>
+
+<div id="override-modal" class="modal-overlay" style="z-index: 3000;">
+    <div class="modal-content" style="width:90%; max-width:400px; text-align:center;">
+        <h2 style="margin-top:0; color:var(--danger);">🚨 <span data-i18n="titleGlobal">GLOBAL OVERRIDE</span> 🚨</h2>
+        <p style="margin-bottom:25px; color:var(--text-muted); font-weight: 600;" id="override-desc">Select the profile to send to the ENTIRE network:</p>
+        <div style="display:flex; flex-direction:column; gap:15px;">
+            <button id="btn-global-A" onclick="sendGlobalAction('A')" class="btn-cmd" style="background:var(--accent); padding:15px; font-size:1.1rem;">PROFILE A</button>
+            <button id="btn-global-B" onclick="sendGlobalAction('B')" class="btn-cmd" style="background:#eab308; padding:15px; font-size:1.1rem;">PROFILE B</button>
+            <button onclick="document.getElementById('override-modal').style.display='none'" class="btn-cmd" style="background:var(--text-muted); padding:12px; margin-top:10px;" data-i18n="btnCancel">CANCEL</button>
+        </div>
+    </div>
+</div>
+
+<div id="reset-hat-modal" class="modal-overlay" style="z-index: 3000;">
+    <div class="modal-content" style="width:90%; max-width:400px; text-align:center; border: 1px solid var(--danger);">
+        <h2 style="margin-top:0; color:var(--danger);">🔌 <span data-i18n="btnHat">RESET HAT</span> 🔌</h2>
+        <p style="margin-bottom:25px; color:var(--text-main); font-weight: 600;" id="reset-hat-desc">Do you want to send a PHYSICAL RESET to the radio board?</p>
+        <div style="display:flex; flex-direction:column; gap:15px;">
+            <button onclick="executeHatReset()" class="btn-cmd blink" style="background:var(--danger); padding:15px; font-size:1.1rem; font-weight:800;" data-i18n="btnConfReset">⚠️ CONFIRM RESET</button>
+            <button onclick="closeHatResetModal()" class="btn-cmd" style="background:var(--text-muted); padding:12px; margin-top:10px;" data-i18n="btnCancel">CANCEL</button>
+        </div>
+    </div>
+</div>
+
+<div id="update-modal" class="modal-overlay" style="z-index: 3000;">
+    <div class="modal-content" style="width:90%; max-width:400px; text-align:center; border: 1px solid var(--accent);">
+        <h2 style="margin-top:0; color:var(--accent);">🔄 <span data-i18n="modUpdateTitle">GLOBAL UPDATE</span> 🔄</h2>
+        <p style="margin-bottom:25px; color:var(--text-main); font-weight: 600;" data-i18n="confUpdate">Do you want to request updated data from all nodes in the fleet?</p>
+        <div style="display:flex; flex-direction:column; gap:15px;">
+            <button onclick="executeUpdateRequest()" class="btn-cmd" style="background:var(--accent); padding:15px; font-size:1.1rem; font-weight:800;" data-i18n="btnReqCfg">🔄 REQ CONFIG</button>
+            <button onclick="closeUpdateModal()" class="btn-cmd" style="background:var(--text-muted); padding:12px; margin-top:10px;" data-i18n="btnCancel">CANCEL</button>
+        </div>
+    </div>
+</div>
+
+<script src="https://cdnjs.cloudflare.com/ajax/libs/socket.io/4.7.2/socket.io.min.js"></script>
+
+<script>
+    // --- 1. TRANSLATION SYSTEM (i18n) ---
+    const i18n = {
+        en: {
+            themeLight: "☀️ LIGHT", themeDark: "🌙 DARK",
+            lastTransits: "Lastheard", loginTitle: "🔒 System Login",
+            thTime: "Time", thRep: "Repeater", thMode: "Mode", thCall: "Callsign", thDur: "Duration",
+            thUser: "User", thRole: "Role", thNodes: "Nodes", thActs: "Actions",
+            btnReqCfg: "🔄 REQ CONFIG", btnGlobal: "🚨 GLOBAL OVERRIDE", btnAdmin: "🛠️ ADMIN", btnPass: "🔑 PASS", btnLogout: "LOGOUT",
+            btnSvc: "⚙️ SVC", btnFile: "📂 FILE", btnBoot: "🔄 BOOT", btnAdd: "+ ADD",
+            waitNet: "> Waiting network...", waitData: "Waiting for node data...", forceUpdate: "🔄 FORCE UPDATE",
+            adminTitle: "🛠️ User & System Management", adminDBSync: "⚙️ Database Sync Config", adminTime: "Daily Update Time:", adminSave: "SAVE CONFIG", roleOp: "Operator",
+            modSvcTitle: "⚙️ System Daemons:", modFileTitle: "📂 Config Files", modEditTitle: "📝 INI Editor:",
+            warnEdit: "⚠️ WARNING: This editor directly manipulates remote node parameters.",
+            btnEdit: "📝 EDIT", btnStart: "▶ START", btnRestart: "🔄 RESTART", btnStop: "🛑 STOP", btnSave: "💾 SAVE & SEND",
+            btnHat: "🔌 RESET HAT", confHat: "Are you sure you want to physically reset the MMDVM board on node ",
+            confOp: "Confirm operation on ", confTgOn: "ENABLE Telegram notifications for ", confTgOff: "MUTE Telegram notifications for ", confOvr: "Are you sure you want to overwrite file on ",
+            warnDaemon: "⚠️ SVC KO - CHECK DAEMONS ⚠️",
+            promptOvr: "GLOBAL OVERRIDE", promptOvrConfirm: "Confirm sending to ENTIRE network?",
+            modUpdateTitle: "🔄 GLOBAL UPDATE", confUpdate: "Do you want to request updated data and configuration files from all nodes in the fleet?", alertUpdateOk: "Request sent successfully!",
+            btnConfReset: "⚠️ CONFIRM RESET", btnCancel: "CANCEL", promptPass: "Enter the new password:",
+            titleError: "❌ ERROR", titleSuccess: "✅ SUCCESS", titleAction: "⚙️ CONFIRM ACTION", titleDelete: "🗑️ DELETE USER", titleSave: "💾 SAVE", titleGlobal: "🚨 GLOBAL OVERRIDE",
+            btnYes: "YES, PROCEED", msgDelUser: "Confirm user deletion?", msgPassOk: "Password updated successfully!", msgPassErr: "Failed to update password.", msgLoginFail: "Login Failed",
+            msgConfigSaved: "Configuration saved!", msgConfigErr: "Error saving configuration", msgNetErr: "Network Error", msgOvrSel: "Select the profile to send to the ENTIRE network:",
+            msgOvrOk: "Command successfully sent to the network!", msgMissUser: "Missing Username", msgMissPass: "Password required for new user", btnSvcKo: "⚠️ DAEMON KO",
+            phNewPass: "New pass (empty to keep)", phPass: "Password",
+            titleSwitch: "SWITCH PROFILE", confSwitch: "Are you sure you want to switch to", titleBoot: "SYSTEM REBOOT", confBoot: "Are you sure you want to REBOOT node ",
+            ttReqCfg: "Request immediate data update", ttGlobal: "Force profile switch on network", ttAdmin: "User and system management", ttPass: "Change your password", ttLogout: "Log out",
+            ttProfA: "Switch to Profile A", ttProfB: "Switch to Profile B", ttTgOn: "Enable Telegram notifications", ttTgOff: "Disable Telegram notifications", ttSvc: "Manage system daemons", ttFile: "Edit .ini configuration files", ttHat: "Send physical reset to modem", ttBoot: "Reboot node operating system",
+            ttSwitchTo: "Switch to profile: ", ttSvcStart: "Start service", ttSvcRestart: "Restart service", ttSvcEdit: "Edit configuration", ttSvcStop: "Stop service", ttLang: "Change language", ttTheme: "Change visual theme",
+            statTopTG: "🎯 TOP TALKGROUPS", statTopCall: "🗣️ TOP CALLSIGNS", statLoading: "Loading...", statAvgDur: "⏱️ AVERAGE DURATION", statTodayTx: "📡 TRANSITS TODAY", statNoData: "No data",
+            statTitle: "DAILY STATISTICS", statAllNodes: "ALL NODES"
+        },
+        it: {
+            themeLight: "☀️ CHIARO", themeDark: "🌙 SCURO",
+            lastTransits: "Ultimi ascolti", loginTitle: "🔒 Login di Sistema",
+            thTime: "Ora", thRep: "Ripetitore", thMode: "Modo", thCall: "Nominativo", thDur: "Durata",
+            thUser: "Utente", thRole: "Ruolo", thNodes: "Nodi", thActs: "Azioni",
+            btnReqCfg: "🔄 RICHIEDI CONFIG", btnGlobal: "🚨 OVERRIDE GLOBALE", btnAdmin: "🛠️ ADMIN", btnPass: "🔑 PASS", btnLogout: "LOGOUT",
+            btnSvc: "⚙️ SVC", btnFile: "📂 FILE", btnBoot: "🔄 BOOT", btnAdd: "+ AGGIUNGI",
+            waitNet: "> Attesa rete...", waitData: "In attesa dei dati dal nodo...", forceUpdate: "🔄 FORZA AGGIORNAMENTO",
+            adminTitle: "🛠️ Gestione Utenti e Sistema", adminDBSync: "⚙️ Sincronizzazione Database", adminTime: "Orario Aggiornamento:", adminSave: "SALVA CONFIG", roleOp: "Operatore",
+            modSvcTitle: "⚙️ Demoni Sistema:", modFileTitle: "📂 File di Configurazione", modEditTitle: "📝 Editor INI:",
+            warnEdit: "⚠️ ATTENZIONE: Questo editor manipola direttamente i parametri del nodo remoto.",
+            btnEdit: "📝 MODIFICA", btnStart: "▶ START", btnRestart: "🔄 RESTART", btnStop: "🛑 STOP", btnSave: "💾 SALVA ED INVIA",
+            btnHat: "🔌 RESET HAT", confHat: "Sei sicuro di voler resettare fisicamente la scheda MMDVM sul nodo ",
+            confOp: "Confermi l'operazione su ", confTgOn: "Vuoi ATTIVARE le notifiche Telegram per il nodo ", confTgOff: "Vuoi SILENZIARE le notifiche Telegram per il nodo ", confOvr: "Sei sicuro di voler sovrascrivere il file su ",
+            warnDaemon: "⚠️ SVC KO - CONTROLLA DEMONI ⚠️",
+            promptOvr: "OVERRIDE GLOBALE", promptOvrConfirm: "Confermi l'invio a TUTTA la rete?",
+            modUpdateTitle: "🔄 AGGIORNAMENTO GLOBALE", confUpdate: "Vuoi richiedere i dati e i file di configurazione aggiornati a tutti i nodi della flotta?", alertUpdateOk: "Richiesta inviata con successo!",
+            btnConfReset: "⚠️ CONFERMA RESET", btnCancel: "ANNULLA", promptPass: "Inserisci la nuova password:",
+            titleError: "❌ ERRORE", titleSuccess: "✅ OK", titleAction: "⚙️ CONFERMA AZIONE", titleDelete: "🗑️ ELIMINA UTENTE", titleSave: "💾 SALVATAGGIO", titleGlobal: "🚨 OVERRIDE GLOBALE",
+            btnYes: "SI, PROCEDI", msgDelUser: "Confermi l'eliminazione dell'utente?", msgPassOk: "Password aggiornata con successo!", msgPassErr: "Errore durante l'aggiornamento della password.", msgLoginFail: "Login Fallito",
+            msgConfigSaved: "Configurazione salvata!", msgConfigErr: "Errore durante il salvataggio", msgNetErr: "Errore di rete", msgOvrSel: "Seleziona il profilo da inviare a TUTTA la rete:",
+            msgOvrOk: "Comando inviato con successo a tutta la rete!", msgMissUser: "Username mancante", msgMissPass: "Password obbligatoria per il nuovo utente", btnSvcKo: "⚠️ DEMONE KO",
+            phNewPass: "Nuova pass (vuota per non cambiare)", phPass: "Password",
+            titleSwitch: "CAMBIO PROFILO", confSwitch: "Sei sicuro di voler passare al", titleBoot: "RIAVVIO SISTEMA", confBoot: "Sei sicuro di voler RIAVVIARE il nodo ",
+            ttReqCfg: "Richiedi aggiornamento dati", ttGlobal: "Forza cambio profilo globale", ttAdmin: "Gestione utenti e sistema", ttPass: "Cambia la tua password", ttLogout: "Disconnetti",
+            ttProfA: "Passa al Profilo A", ttProfB: "Passa al Profilo B", ttTgOn: "Abilita notifiche Telegram", ttTgOff: "Disabilita notifiche Telegram", ttSvc: "Gestisci demoni di sistema", ttFile: "Modifica file .ini da remoto", ttHat: "Reset fisico scheda modem", ttBoot: "Riavvia sistema operativo",
+            ttSwitchTo: "Passa al profilo: ", ttSvcStart: "Avvia servizio", ttSvcRestart: "Riavvia servizio", ttSvcEdit: "Modifica configurazione", ttSvcStop: "Ferma servizio", ttLang: "Cambia lingua", ttTheme: "Cambia tema visivo",
+            statTopTG: "🎯 TOP TALKGROUPS", statTopCall: "🗣️ TOP CALLSIGNS", statLoading: "Caricamento...", statAvgDur: "⏱️ DURATA MEDIA", statTodayTx: "📡 TRANSITI OGGI", statNoData: "Nessun dato",
+            statTitle: "STATISTICHE GIORNALIERE", statAllNodes: "TUTTA LA RETE"
+        }
+    };
+    let currentLang = localStorage.getItem('lang') || 'en'; 
+    function t(key) { return i18n[currentLang][key] || key; }
+    function toggleLang() { currentLang = currentLang === 'it' ? 'en' : 'it'; localStorage.setItem('lang', currentLang); location.reload(); }
+    
+    function applyTranslations() {
+        document.getElementById('lang-btn').innerText = currentLang === 'it' ? "🇬🇧 ENG" : "🇮🇹 ITA";
+        
+        // Translate innerHTML
+        document.querySelectorAll('[data-i18n]').forEach(el => {
+            const key = el.getAttribute('data-i18n');
+            if (i18n[currentLang][key]) el.innerHTML = i18n[currentLang][key];
+        });
+        
+        // Translate tooltips (titles)
+        document.querySelectorAll('[data-i18n-title]').forEach(el => {
+            const key = el.getAttribute('data-i18n-title');
+            if (i18n[currentLang][key]) el.title = i18n[currentLang][key];
+        });
+
+        // Translate placeholders
+        const newPassInput = document.getElementById('new-pass');
+        if (newPassInput && editingUserId) newPassInput.placeholder = t('phNewPass');
+        else if (newPassInput) newPassInput.placeholder = t('phPass');
+    }
+
+    // --- GLOBAL VARIABLES & THEMES ---
+    let clients = [];
+    let isAuthenticated = sessionStorage.getItem('is_admin') === 'true';
+    let globalHealthData = {};
+    let editingUserId = null; 
+    let currentResetHatId = null; 
+    let confirmActionCallback = null; 
+
+    // --- NEW GLOBAL GLASSMORPHISM POPUPS ---
+    function customAlert(title, desc, isError = false) {
+        const color = isError ? 'var(--danger)' : 'var(--success)';
+        document.getElementById('alert-title').innerHTML = title;
+        document.getElementById('alert-title').style.color = color;
+        document.getElementById('alert-box').style.borderColor = color;
+        document.getElementById('alert-desc').innerHTML = desc;
+        document.getElementById('alert-modal').style.display = 'flex';
+    }
+
+    function customConfirm(title, desc, color, callback) {
+        document.getElementById('confirm-title').innerHTML = title;
+        document.getElementById('confirm-title').style.color = color;
+        document.getElementById('confirm-box').style.borderColor = color;
+        document.getElementById('confirm-desc').innerHTML = desc;
+        document.getElementById('confirm-yes-btn').style.background = color;
+        document.getElementById('confirm-yes-btn').innerText = t('btnYes');
+        document.getElementById('confirm-cancel-btn').innerText = t('btnCancel');
+        confirmActionCallback = callback;
+        document.getElementById('confirm-modal').style.display = 'flex';
+    }
+
+    function executeConfirmAction() {
+        document.getElementById('confirm-modal').style.display = 'none';
+        if (confirmActionCallback) {
+            confirmActionCallback();
+            confirmActionCallback = null;
+        }
+    }
+
+    // --- API & COMMAND FUNCTIONS ---
+    function sendCommand(clientId, type, customTitle, customMsg, customColor) {
+        const title = customTitle || t('titleAction');
+        const msg = customMsg || `${t('confOp')}<b>${clientId.toUpperCase()}</b>?`;
+        const color = customColor || "var(--primary)";
+
+        customConfirm(title, msg, color, async () => {
+            try {
+                const res = await fetch('/api/command', { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ clientId, type }) });
+                const data = await res.json();
+                if(!data.success) { customAlert(t('titleError'), data.error, true); }
+                refreshStates();
+            } catch (e) { console.error(e); }
+        });
+    }
+    
+    function confirmSwitch(id, mode) { 
+        const data = globalHealthData[id.toLowerCase()];
+        let profileName = mode === 'A' ? "PROFILE A" : "PROFILE B";
+        if (data && data.profiles && data.profiles[mode]) {
+            profileName = data.profiles[mode];
+        }
+        const title = `🔄 ${t('titleSwitch')}`;
+        const msg = `${t('confSwitch')} <b>${profileName}</b> -> <b>${id.toUpperCase()}</b>?`;
+        const color = mode === 'A' ? "var(--accent)" : "#eab308";
+        sendCommand(id, mode, title, msg, color); 
+    }
+    
+    function confirmReboot(id) { 
+        const title = `🔄 ${t('titleBoot')}`;
+        const msg = `${t('confBoot')}<b>${id.toUpperCase()}</b>?`;
+        sendCommand(id, 'REBOOT', title, msg, "var(--danger)"); 
+    }
+    
+    function confirmHatReset(id) { 
+        currentResetHatId = id;
+        document.getElementById('reset-hat-desc').innerText = `${t('confHat')}${id.toUpperCase()}?`;
+        document.getElementById('reset-hat-modal').style.display = 'flex';
+    }
+    function closeHatResetModal() {
+        document.getElementById('reset-hat-modal').style.display = 'none';
+        currentResetHatId = null;
+    }
+    async function executeHatReset() {
+        if (!currentResetHatId) return;
+        const clientId = currentResetHatId;
+        closeHatResetModal(); 
+        try {
+            const res = await fetch('/api/command', { 
+                method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ clientId: clientId, type: 'RESET_HAT' }) 
+            });
+            const data = await res.json();
+            if(!data.success) { customAlert(t('titleError'), data.error, true); }
+            refreshStates();
+        } catch (e) { console.error(e); }
+    }
+
+    function sendGlobalUpdate() { document.getElementById('update-modal').style.display = 'flex'; }
+    function closeUpdateModal() { document.getElementById('update-modal').style.display = 'none'; }
+    
+    async function executeUpdateRequest() {
+        closeUpdateModal();
+        try {
+            await fetch('/api/update_nodes', { method: 'POST' });
+            customAlert(t('titleSuccess'), t('alertUpdateOk'));
+        } catch (e) { console.error(e); }
+    }
+
+    function sendTgCommand(clientId, comando) {
+        const msg = (comando === 'TG:ON') ? t('confTgOn') : t('confTgOff');
+        customConfirm("💬 TELEGRAM", `${msg}<b>${clientId.toUpperCase()}</b>?`, "var(--primary)", async () => {
+            try {
+                const res = await fetch('/api/command', { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ clientId: clientId, type: comando }) });
+                const data = await res.json();
+                if(!data.success) { customAlert(t('titleError'), data.error, true); }
+                refreshStates();
+            } catch (e) { console.error(e); }
+        });
+    }
+
+    // --- MAIN UI INIT ---
+    async function initUI() {
+        applyTranslations();
+        try {
+            const response = await fetch('/api/clients');
+            clients = await response.json(); // <-- CORREZIONE 2: Ora carichiamo i dati prima di usarli!
+
+            // Popola il menu a tendina delle statistiche
+            const statSelect = document.getElementById('stat-node-filter');
+            if (statSelect) {
+                let opts = `<option value="all">🌐 ${t('statAllNodes')}</option>`;
+                clients.forEach(c => {
+                    opts += `<option value="${c.id}">${c.name} (${c.id.toUpperCase()})</option>`;
+                });
+                statSelect.innerHTML = opts;
+            }
+
+            const grid = document.getElementById('client-grid');
+            const authContainer = document.getElementById('auth-container');
+
+            const role = sessionStorage.getItem('user_role');
+            const allowed = sessionStorage.getItem('allowed_nodes') || "";
+
+            if (isAuthenticated) {
+                let adminBtn = role === 'admin' ? `
+                    <button onclick="sendGlobalUpdate()" class="auth-btn" style="background:#f59e0b; color:white;" data-i18n-title="ttReqCfg" title="${t('ttReqCfg')}">${t('btnReqCfg')}</button>
+                    <button onclick="triggerGlobalEmergency()" class="auth-btn" style="background:#ef4444; color:white;" data-i18n-title="ttGlobal" title="${t('ttGlobal')}">${t('btnGlobal')}</button>
+                    <button onclick="openAdmin()" class="auth-btn" style="background:var(--accent); color:white;" data-i18n-title="ttAdmin" title="${t('ttAdmin')}">${t('btnAdmin')}</button>` : '';
+                
+                authContainer.innerHTML = `${adminBtn}
+                                           <span style="font-weight:800; font-size:0.9rem; margin: 0 10px;">👤 ${sessionStorage.getItem('user_name').toUpperCase()}</span>
+                                           <button onclick="changeMyPassword()" class="auth-btn" style="background:#64748b; color:white;" data-i18n-title="ttPass" title="${t('ttPass')}">${t('btnPass')}</button>
+                                           <button onclick="logout()" class="auth-btn" style="background:var(--text-main); color:var(--card-bg);" data-i18n-title="ttLogout" title="${t('ttLogout')}">${t('btnLogout')}</button>`;
+            } else {
+                authContainer.innerHTML = `<button onclick="openLoginModal()" class="auth-btn" style="background:var(--primary); color:white; padding: 8px 25px;">LOGIN</button>`;
+            }
+
+            grid.innerHTML = clients.map(c => {
+                let canControl = (role === 'admin' || allowed === 'all' || allowed.includes(c.id));
+                let showReboot = (role === 'admin'); 
+
+                return `
+                    <div class="card" id="card-${c.id}">
+                        <div class="card-header">
+                            <span class="client-name" title="${c.name}">${c.name}</span>
+                            <span class="badge-id">ID: ${c.id.toUpperCase()}</span>
+                        </div>
+
+                        <div class="health-bar" id="health-${c.id}" style="display: none;">
+                            <span>⚡ <span id="cpu-${c.id}">--</span>%</span>
+                            <span>🌡️ <span id="temp-${c.id}">--</span>°C</span>
+                            <span>🧠 <span id="ram-${c.id}">--</span>%</span>
+                            <span>💾 <span id="disk-${c.id}">--</span>%</span>
+                        </div>
+                        
+                        <div class="status-display" id="status-${c.id}">Offline</div>
+                        
+                        <div id="ts-container-${c.id}" class="ts-container">
+                            <div class="dmr-info" id="dmr-ts1-${c.id}">TS1: ...</div>
+                            <div class="dmr-info" id="dmr-ts2-${c.id}">TS2: ...</div>
+                        </div>
+                        <div class="dmr-info" id="dmr-alt-${c.id}" style="display: none; text-align: center; font-weight: 800;"></div>
+                        
+                        <div class="terminal-log" id="sys-log-${c.id}">${t('waitNet')}</div>
+
+                        <div id="svc-warn-${c.id}" class="blink" style="display: none; text-align: center; margin-bottom: 15px; border-radius: 12px; padding: 10px;">
+                            <span style="font-size: 0.85rem;" data-i18n="warnDaemon">${t('warnDaemon')}</span>
+                        </div>
+
+                        <div class="actions" style="${(isAuthenticated && canControl) ? 'display:flex;' : 'display:none'}">
+                            <button id="btn-profA-${c.id}" class="btn-cmd" style="background: var(--accent);" title="${t('ttProfA')}" onclick="confirmSwitch('${c.id}', 'A')">PROFILE A</button>
+                            <button id="btn-profB-${c.id}" class="btn-cmd" style="background: #eab308;" title="${t('ttProfB')}" onclick="confirmSwitch('${c.id}', 'B')">PROFILE B</button>
+                            
+                            <div style="width: 100%; display: flex; gap: 10px;">
+                                <button class="btn-cmd" style="background: var(--success);" title="${t('ttTgOn')}" onclick="sendTgCommand('${c.id}', 'TG:ON')">🔔 Telegram ON</button>
+                                <button class="btn-cmd" style="background: var(--text-muted);" title="${t('ttTgOff')}" onclick="sendTgCommand('${c.id}', 'TG:OFF')">🔇 Telegram OFF</button>
+                            </div>
+                            ${showReboot ? `
+                            <button id="btn-svc-${c.id}" class="btn-cmd" style="background: #334155;" title="${t('ttSvc')}" onclick="openServicesModal('${c.id}')">${t('btnSvc')}</button>
+                            <button class="btn-cmd" style="background: #8e44ad;" title="${t('ttFile')}" onclick="openConfigsModal('${c.id}')">${t('btnFile')}</button>
+                            <button class="btn-cmd" style="background: #ea580c;" title="${t('ttHat')}" onclick="confirmHatReset('${c.id}')">${t('btnHat')}</button>
+                            <button class="btn-cmd btn-reboot" style="background: var(--danger);" title="${t('ttBoot')}" onclick="confirmReboot('${c.id}')">${t('btnBoot')}</button>
+                            ` : ''}
+                        </div>
+                    </div>`;
+            }).join('');
+
+            refreshStates(); refreshLogs(); refreshStats();
+        } catch (e) { console.error(e); }
+    }
+
+    // --- LOGIN MODAL LOGIC ---
+    function openLoginModal() {
+        document.getElementById('login-modal').style.display = 'flex';
+        setTimeout(() => document.getElementById('modal-username').focus(), 100);
+    }
+    function closeLoginModal() {
+        document.getElementById('login-modal').style.display = 'none';
+        document.getElementById('modal-username').value = ''; document.getElementById('modal-password').value = '';
+    }
+    function handleLoginEnter(e) { if (e.key === 'Enter') performLogin(); }
+    async function performLogin() {
+        const user = document.getElementById('modal-username').value; const pass = document.getElementById('modal-password').value;
+        if (!user || !pass) return;
+        const res = await fetch('/api/login', { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ user, pass }) });
+        const data = await res.json();
+        if (res.ok) { 
+            sessionStorage.setItem('is_admin', 'true'); sessionStorage.setItem('user_name', user); sessionStorage.setItem('user_role', data.role); sessionStorage.setItem('allowed_nodes', data.allowed_nodes); location.reload(); 
+        } else { 
+            customAlert(t('titleError'), t('msgLoginFail'), true); 
+        }
+    }
+    function logout() { sessionStorage.clear(); location.reload(); }
+
+    async function refreshStates() {
+        try {
+            const res = await fetch('/api/states');
+            const data = await res.json();
+            clients.forEach(c => {
+                const statusDiv = document.getElementById(`status-${c.id}`);
+                const cardDiv = document.getElementById(`card-${c.id}`);
+                if (!statusDiv || !cardDiv) return;
+
+                let stateValue = data.states[c.id.toLowerCase()] || data.states[c.id] || "OFFLINE";
+                stateValue = String(stateValue).trim().toUpperCase();
+                statusDiv.innerText = stateValue;
+                const isOnline = !stateValue.includes("OFF") && stateValue !== "";
+
+                let telemetryObj = data.telemetry[c.id.toLowerCase()] || data.telemetry[c.id] || { ts1: "...", ts2: "...", alt: "", idle: true };
+                if (typeof telemetryObj === 'string') telemetryObj = { ts1: telemetryObj, ts2: "...", alt: "", idle: true };
+
+                const tsContainer = document.getElementById(`ts-container-${c.id}`);
+                const ts1Div = document.getElementById(`dmr-ts1-${c.id}`);
+                const ts2Div = document.getElementById(`dmr-ts2-${c.id}`);
+                const altDiv = document.getElementById(`dmr-alt-${c.id}`);
+                
+                let isTx = false;
+                let activeModeColor = "var(--success)";
+                let isIdle = telemetryObj.idle === true;
+
+                if (telemetryObj.alt && telemetryObj.alt !== "") {
+                    if (tsContainer) tsContainer.style.display = "none";
+                    if (altDiv) {
+                        altDiv.style.display = "block"; altDiv.innerText = telemetryObj.alt;
+                        let altText = telemetryObj.alt.toUpperCase();
+                        
+                        // Assegna il colore in base al modo
+                        if (altText.includes("NXDN")) activeModeColor = "#10b981"; 
+                        else if (altText.includes("YSF")) activeModeColor = "#8b5cf6"; 
+                        else if (altText.includes("D-STAR")) activeModeColor = "#06b6d4"; 
+                        else if (altText.includes("P25")) activeModeColor = "#f59e0b";
+                        
+                        isTx = altText.includes("🟢") || altText.includes("🟣") || altText.includes("🔵") || altText.includes("🟠");
+                        
+                        // Passiamo il colore al CSS per l'animazione
+                        altDiv.style.setProperty('--pulse-color', activeModeColor);
+                        if (isTx) { 
+                            altDiv.classList.add('tx-active-unified'); 
+                        } else { 
+                            altDiv.classList.remove('tx-active-unified');
+                            altDiv.style.setProperty('color', 'var(--text-muted)', 'important');
+                            altDiv.style.setProperty('border-left', `4px solid var(--border-color)`, 'important');
+                        }
+                    }
+                } else {
+                    if (altDiv) altDiv.style.display = "none";
+                    if (tsContainer) tsContainer.style.display = "flex";
+                    
+                    let netObj = data.networks && data.networks[c.id.toLowerCase()] ? data.networks[c.id.toLowerCase()] : {ts1: "", ts2: ""};
+                    activeModeColor = "var(--primary)"; // Default Blu per il DMR
+                    
+                    if (ts1Div && ts2Div) {
+                        [ts1Div, ts2Div].forEach((div, idx) => {
+                            const val = idx === 0 ? telemetryObj.ts1 : telemetryObj.ts2;
+                            const netName = idx === 0 ? netObj.ts1 : netObj.ts2;
+                            const baseLabel = `TS${idx + 1}`;
+                            const fullLabel = netName ? `${baseLabel} [${netName}]` : baseLabel;
+
+                            div.innerText = `${fullLabel}: ${val}`;
+                            div.style.setProperty('--pulse-color', activeModeColor);
+                            
+                            if (val.includes("🎙️")) {
+                                isTx = true;
+                                div.classList.add('tx-active-unified');
+                            } else {
+                                div.classList.remove('tx-active-unified');
+                                div.style.setProperty('color', 'var(--text-muted)', 'important');
+                                div.style.setProperty('border-left', '4px solid var(--border-color)', 'important');
+                            }
+                        });
+                    }
+                }
+
+                let healthObj = data.health && data.health[c.id.toLowerCase()];
+                const healthContainer = document.getElementById(`health-${c.id}`);
+                const cpuSpan = document.getElementById(`cpu-${c.id}`); const tempSpan = document.getElementById(`temp-${c.id}`); const ramSpan = document.getElementById(`ram-${c.id}`); const diskSpan = document.getElementById(`disk-${c.id}`);
+
+                if (healthObj && isOnline) {
+                    healthContainer.style.display = 'flex';
+                    let cpu = healthObj.cpu; cpuSpan.innerText = cpu; cpuSpan.style.color = cpu < 50 ? 'var(--success)' : (cpu < 80 ? '#f59e0b' : 'var(--danger)');
+                    
+                    // FIXED TEMPERATURE VARIABLE NAME HERE
+                    let tempVal = healthObj.temp; 
+                    tempSpan.innerText = tempVal; 
+                    tempSpan.style.color = tempVal < 55 ? 'var(--success)' : (tempVal < 70 ? '#f59e0b' : 'var(--danger)');
+                    
+                    ramSpan.innerText = healthObj.ram; let d = healthObj.disk; diskSpan.innerText = d; diskSpan.style.color = d < 85 ? 'inherit' : (d < 95 ? '#f59e0b' : 'var(--danger)');
+                    
+                    let profA = (healthObj.profiles && healthObj.profiles.A) ? healthObj.profiles.A : "PROFILE A"; let profB = (healthObj.profiles && healthObj.profiles.B) ? healthObj.profiles.B : "PROFILE B";
+                    const btnA = document.getElementById(`btn-profA-${c.id}`); const btnB = document.getElementById(`btn-profB-${c.id}`);
+                    
+                    if (btnA) {
+                        if (btnA.innerText !== profA) btnA.innerText = profA;
+                        btnA.title = `${t('ttSwitchTo')}${profA}`;
+                    }
+                    if (btnB) {
+                        if (btnB.innerText !== profB) btnB.innerText = profB;
+                        btnB.title = `${t('ttSwitchTo')}${profB}`;
+                    }
+
+                } else { if (healthContainer) healthContainer.style.display = 'none'; }
+
+                globalHealthData[c.id.toLowerCase()] = healthObj;
+                
+                let hasOfflineService = false;
+                if (healthObj && healthObj.processes) {
+                    for (const [svcName, svcStatus] of Object.entries(healthObj.processes)) { if (svcStatus.toLowerCase() !== 'online') { hasOfflineService = true; break; } }
+                }
+                const warnBadge = document.getElementById(`svc-warn-${c.id}`); const btnSvc = document.getElementById(`btn-svc-${c.id}`);
+                
+                if (warnBadge) warnBadge.style.display = hasOfflineService ? 'block' : 'none';
+                if (btnSvc) {
+                    if (hasOfflineService) { btnSvc.style.background = 'var(--danger)'; btnSvc.classList.add('blink'); btnSvc.innerHTML = t('btnSvcKo'); } 
+                    else { btnSvc.style.background = '#334155'; btnSvc.classList.remove('blink'); btnSvc.innerHTML = t('btnSvc'); }
+                }
+
+                if (isOnline) {
+                    cardDiv.classList.add('online'); statusDiv.classList.remove('status-offline');
+                    cardDiv.style.opacity = "1"; cardDiv.style.filter = "none";
+                    
+                    let targetBorderColor = activeModeColor; 
+                    if (!isTx && isIdle) { targetBorderColor = "var(--border-color)"; }
+                    cardDiv.style.setProperty('border-top-color', targetBorderColor, 'important');
+                    
+                    if(isTx) {
+                        // Creiamo un alone luminoso che sia SEMPRE dello stesso colore del modo attivo
+                        let shadowRGB = '59, 130, 246'; // Blu di default (per DMR e var(--primary))
+                        if (activeModeColor === '#10b981') shadowRGB = '16, 185, 129'; // Verde (NXDN)
+                        else if (activeModeColor === '#8b5cf6') shadowRGB = '139, 92, 246'; // Viola (YSF)
+                        else if (activeModeColor === '#06b6d4') shadowRGB = '6, 182, 212'; // Ciano (D-STAR)
+                        else if (activeModeColor === '#f59e0b') shadowRGB = '245, 158, 11'; // Arancione (P25)
+
+                        cardDiv.style.boxShadow = `0 0 20px rgba(${shadowRGB}, 0.5)`;
+                    } else {
+                        cardDiv.style.boxShadow = 'var(--glass-shadow)';
+                    }
+                } else {
+                    cardDiv.classList.remove('online'); statusDiv.classList.add('status-offline');
+                    cardDiv.style.opacity = "0.7"; cardDiv.style.filter = "grayscale(80%)";
+                    cardDiv.style.setProperty('border-top-color', '#64748b', 'important'); 
+                    cardDiv.style.boxShadow = 'var(--glass-shadow)';
+                }
+            });
+            document.getElementById('last-update').innerText = "Sync: " + new Date().toLocaleTimeString();
+        } catch (e) { console.error(e); }
+    }
+
+    async function refreshLogs() {
+        try {
+            const res = await fetch('/api/logs'); const logs = await res.json();
+            const tbody = document.getElementById('log-body'); let tableHTML = ""; let networkLogs = {};
+            logs.forEach(row => {
+                const time = row[0] ? row[0].split(' ')[1] : "--:--"; 
+                const clientId = row[1]; 
+                const protocol = row[2] || "DMR"; 
+                let source = row[3] || "---"; 
+                const target = row[4] || "---"; 
+                const rawSlot = row[5]; 
+                const source_ext = row[8]; // <--- NUOVO CAMPO DAL BACKEND
+
+                // Formattiamo il source_ext se presente e non vuoto
+                if (source_ext && source_ext.trim() !== "") {
+                    source = `${source} <span style="font-size:0.8em; color:#94a3b8; font-family:'JetBrains Mono', monospace;">/${source_ext}</span>`;
+                }
+
+                const slotDisplay = protocol === "DMR" ? `TS${rawSlot}` : "--";
+                let protoColor = "#3b82f6"; if (protocol === "NXDN") protoColor = "#10b981"; else if (protocol === "YSF") protoColor = "#8b5cf6"; else if (protocol === "D-STAR") protoColor = "#06b6d4"; else if (protocol === "P25") protoColor = "#f59e0b";
+                
+                if (source.includes("🌐")) {
+                    if (!networkLogs[clientId]) networkLogs[clientId] = "";
+                    networkLogs[clientId] += `<div style="border-bottom:1px solid rgba(255,255,255,0.1); padding:4px 0;"><span style="color:#64748b;">[${time}]</span> <span style="color:${protoColor}; font-weight:bold;">[${protocol}]</span> <span style="color:#cbd5e1;">${source.replace("🌐", "").trim()}</span></div>`;
+                } else {
+                    tableHTML += `<tr><td>${time}</td><td><b style="color:var(--text-main);">${clientId.toUpperCase()}</b></td><td><span style="background:${protoColor}; color:white; padding:3px 8px; border-radius:8px; font-size:0.7rem; font-weight:800;">${protocol}</span></td><td style="font-family:'JetBrains Mono', monospace; font-weight:bold; text-align:center;">${slotDisplay}</td><td style="color:var(--accent); font-weight:800;">${source}</td><td style="font-family:'JetBrains Mono', monospace;">${target.trim()}</td><td>${row[6]}s</td><td>${row[7]}%</td></tr>`;
+                }
+            });
+            tbody.innerHTML = tableHTML;
+            clients.forEach(c => { const localDiv = document.getElementById(`sys-log-${c.id}`); if (localDiv && networkLogs[c.id]) { localDiv.innerHTML = networkLogs[c.id]; } });
+        } catch (e) { console.error(e); }
+    }
+
+    async function refreshStats() {
+        try {
+            const node = document.getElementById('stat-node-filter').value || 'all';
+            const res = await fetch(`/api/stats?node=${node}`);
+            const data = await res.json();
+            
+            // Compila Top TG
+            let tgsHtml = data.top_tgs.map((t, i) => `<div><b style="color:var(--text-main);">${i+1}. ${t.target}</b> <span style="float:right; background:rgba(128,128,128,0.1); padding:2px 6px; border-radius:4px;">${t.count} tx</span></div>`).join('');
+            document.getElementById('stat-tgs').innerHTML = tgsHtml || t('statNoData');
+            
+            // Compila Top Callsign
+            let callsHtml = data.top_calls.map((c, i) => `<div><b style="color:var(--text-main);">${i+1}. ${c.call}</b> <span style="float:right; background:rgba(128,128,128,0.1); padding:2px 6px; border-radius:4px;">${c.count} tx</span></div>`).join('');
+            document.getElementById('stat-calls').innerHTML = callsHtml || t('statNoData');
+            
+            // Compila Medie e Totali
+            document.getElementById('stat-avg').innerText = data.avg_duration;
+            document.getElementById('stat-today').innerText = data.today_tx;
+            
+        } catch (e) { console.error("Errore caricamento statistiche:", e); }
+    }
+
+    // --- USER MANAGEMENT (ADD & EDIT) ---
+    async function openAdmin() { document.getElementById('admin-modal').style.display = 'flex'; loadUsers(); loadSettings(); cancelEdit(); }
+    function closeAdmin() { document.getElementById('admin-modal').style.display = 'none'; cancelEdit(); }
+    
+    async function loadUsers() {
+        const res = await fetch('/api/users'); const users = await res.json();
+        document.getElementById('users-table-body').innerHTML = users.map(u => `
+            <tr>
+                <td>${u.id}</td>
+                <td style="font-weight:bold;">${u.username}</td>
+                <td><span style="background:rgba(128,128,128,0.2); padding:2px 8px; border-radius:6px; font-size:0.8rem;">${u.role.toUpperCase()}</span></td>
+                <td>${u.allowed_nodes}</td>
+                <td style="text-align:center;">
+                    <button onclick="startEditUser(${u.id}, '${u.username}', '${u.role}', '${u.allowed_nodes}')" class="btn-cmd" style="background:var(--accent); padding:6px; width:auto; display:inline-block; margin-right:5px;" title="Edit User">✏️</button>
+                    <button onclick="deleteUser(${u.id})" class="btn-cmd" style="background:var(--danger); padding:6px; width:auto; display:inline-block;" title="Delete User">🗑️</button>
+                </td>
+            </tr>`).join('');
+    }
+
+    function startEditUser(id, username, role, nodes) {
+        editingUserId = id;
+        document.getElementById('new-user').value = username;
+        document.getElementById('new-user').disabled = true;
+        document.getElementById('new-pass').value = "";
+        document.getElementById('new-pass').placeholder = t('phNewPass');
+        document.getElementById('new-role').value = role;
+        document.getElementById('new-nodes').value = nodes;
+        
+        const btnSubmit = document.getElementById('btn-user-submit');
+        btnSubmit.innerHTML = t('titleSave');
+        btnSubmit.style.background = "var(--accent)";
+        document.getElementById('btn-user-cancel').style.display = "block";
+    }
+
+    function cancelEdit() {
+        editingUserId = null;
+        document.getElementById('new-user').value = "";
+        document.getElementById('new-user').disabled = false;
+        document.getElementById('new-pass').value = "";
+        document.getElementById('new-pass').placeholder = t('phPass');
+        document.getElementById('new-role').value = "operator";
+        document.getElementById('new-nodes').value = "";
+        
+        const btnSubmit = document.getElementById('btn-user-submit');
+        btnSubmit.innerHTML = t('btnAdd');
+        btnSubmit.style.background = "var(--success)";
+        document.getElementById('btn-user-cancel').style.display = "none";
+    }
+
+    async function submitUser() {
+        const username = document.getElementById('new-user').value; 
+        const password = document.getElementById('new-pass').value; 
+        const role = document.getElementById('new-role').value; 
+        let allowed = document.getElementById('new-nodes').value;
+        
+        if (!username) return customAlert(t('titleError'), t('msgMissUser'), true);
+        
+        const payload = { username, role, allowed_nodes: allowed || 'all' };
+        if (password) payload.password = password;
+
+        if (editingUserId) {
+            const res = await fetch(`/api/users/${editingUserId}`, { method: 'PUT', headers: {'Content-Type': 'application/json'}, body: JSON.stringify(payload) });
+            const data = await res.json(); 
+            if (data.success) { cancelEdit(); loadUsers(); } else customAlert(t('titleError'), data.error, true);
+        } else {
+            if (!password) return customAlert(t('titleError'), t('msgMissPass'), true);
+            const res = await fetch('/api/users', { method: 'POST', headers: {'Content-Type': 'application/json'}, body: JSON.stringify(payload) });
+            const data = await res.json(); 
+            if (data.success) { cancelEdit(); loadUsers(); } else customAlert(t('titleError'), data.error, true);
+        }
+    }
+
+    function deleteUser(id) { 
+        customConfirm(t('titleDelete'), t('msgDelUser'), "var(--danger)", async () => {
+            await fetch(`/api/users/${id}`, {method: 'DELETE'}); 
+            loadUsers(); 
+            cancelEdit(); 
+        });
+    }
+    
+    // --- EMERGENCY & SETTINGS ---
+    function triggerGlobalEmergency() {
+        let nameA = "PROFILE A";
+        let nameB = "PROFILE B";
+        for (const id in globalHealthData) {
+            if (globalHealthData[id] && globalHealthData[id].profiles) {
+                nameA = globalHealthData[id].profiles.A || nameA;
+                nameB = globalHealthData[id].profiles.B || nameB;
+                break;
+            }
+        }
+        
+        document.getElementById('btn-global-A').innerText = nameA;
+        document.getElementById('btn-global-B').innerText = nameB;
+        document.getElementById('override-desc').innerText = t('msgOvrSel');
+        document.getElementById('override-modal').style.display = 'flex';
+    }
+
+    function sendGlobalAction(action) {
+        document.getElementById('override-modal').style.display = 'none';
+        
+        customConfirm(t('titleGlobal'), t('promptOvrConfirm'), "var(--danger)", async () => {
+            try {
+                const res = await fetch('/api/global_command', { method: 'POST', headers: {'Content-Type': 'application/json'}, body: JSON.stringify({type: action}) }); 
+                const d = await res.json(); 
+                if(d.success) {
+                    customAlert(t('titleSuccess'), t('msgOvrOk')); 
+                } else {
+                    customAlert(t('titleError'), d.error, true);
+                }
+                refreshStates();
+            } catch(e) { console.error(e); }
+        });
+    }
+
+    function changeMyPassword() { 
+        document.getElementById('new-password-input').value = '';
+        document.getElementById('password-modal').style.display = 'flex';
+        setTimeout(() => document.getElementById('new-password-input').focus(), 100);
+    }
+    function closePasswordModal() { document.getElementById('password-modal').style.display = 'none'; }
+    async function executePasswordChange() {
+        const p = document.getElementById('new-password-input').value;
+        if (!p) return;
+        closePasswordModal();
+        try {
+            const res = await fetch('/api/change_password', { method: 'POST', headers: {'Content-Type': 'application/json'}, body: JSON.stringify({username: sessionStorage.getItem('user_name'), new_password: p}) }); 
+            if ((await res.json()).success) { 
+                customAlert(t('titleSuccess'), t('msgPassOk'));
+                setTimeout(() => logout(), 1500);
+            } else {
+                customAlert(t('titleError'), t('msgPassErr'), true);
+            }
+        } catch(e) { console.error(e); }
+    }
+
+    async function loadSettings() { try { const res = await fetch('/api/config'); const data = await res.json(); document.getElementById('update-time-input').value = data.update_schedule; document.getElementById('url-dmr-input').value = data.url_dmr; document.getElementById('url-nxdn-input').value = data.url_nxdn; } catch (e) { console.error(e); } }
+    
+    async function saveSettings() { 
+        const payload = { update_schedule: document.getElementById('update-time-input').value, url_dmr: document.getElementById('url-dmr-input').value, url_nxdn: document.getElementById('url-nxdn-input').value }; 
+        try { 
+            const res = await fetch('/api/config', { method: 'POST', headers: {'Content-Type': 'application/json'}, body: JSON.stringify(payload) }); 
+            const data = await res.json(); 
+            if (data.success) customAlert(t('titleSuccess'), t('msgConfigSaved')); 
+            else customAlert(t('titleError'), t('msgConfigErr'), true); 
+        } catch (e) { console.error(e); } 
+    }
+
+    function openConfigsModal(clientId) {
+        const data = globalHealthData[clientId.toLowerCase()];
+        const listDiv = document.getElementById('configs-list');
+        let listaFile = data ? (data.config_files || data.files || []) : [];
+        if (listaFile.length === 0) {
+            listDiv.innerHTML = `<div style="text-align:center; padding:20px;"><p style="color:var(--text-muted); margin-bottom:15px;">${t('waitData')}</p><button onclick="sendGlobalUpdate(); closeConfigsModal();" class="btn-cmd" style="background:var(--accent);">${t('forceUpdate')}</button></div>`;
+        } else {
+            listDiv.innerHTML = listaFile.map(filename => `
+                <div style="display:flex; justify-content:space-between; align-items:center; padding:12px; background:rgba(128,128,128,0.1); border-radius:12px; border:1px solid var(--border-color); margin-bottom:8px;">
+                    <span style="font-family:'JetBrains Mono',monospace; font-weight:bold;">${filename.toUpperCase()}.ini</span>
+                    <button onclick="closeConfigsModal(); openEditorModal('${clientId}', '${filename}')" class="btn-cmd" style="background:#8e44ad; max-width:120px;" title="${t('ttFile')}">${t('btnEdit')}</button>
+                </div>`).join('');
+        }
+        document.getElementById('configs-modal').style.display = 'flex';
+    }
+    function closeConfigsModal() { document.getElementById('configs-modal').style.display = 'none'; }
+
+    function openServicesModal(clientId) { document.getElementById('svc-modal-title').innerText = clientId.toUpperCase(); document.getElementById('services-modal').style.display = 'flex'; renderServicesList(clientId); }
+    function closeServicesModal() { document.getElementById('services-modal').style.display = 'none'; }
+    function renderServicesList(clientId) {
+        const data = globalHealthData[clientId.toLowerCase()]; const listDiv = document.getElementById('services-list');
+        if (!data || !data.processes || Object.keys(data.processes).length === 0) { listDiv.innerHTML = "<p style='text-align:center; color:var(--text-muted);'>No service data available.</p>"; return; }
+        let html = "";
+        for (const [name, status] of Object.entries(data.processes)) {
+            const isOnline = status.toLowerCase() === 'online'; const statusColor = isOnline ? 'var(--success)' : 'var(--danger)'; const statusAnim = isOnline ? '' : 'animation: pulse-glow 1.5s infinite;';
+            html += `
+            <div style="display:flex; justify-content:space-between; align-items:center; padding:15px; border-bottom:1px solid var(--border-color); background:rgba(128,128,128,0.05); border-radius:12px; margin-bottom:8px; border-left: 5px solid ${statusColor};">
+                <div>
+                    <strong style="font-size:1.1rem; display:block; font-family:'JetBrains Mono',monospace;">${name}</strong>
+                    <span style="color:${statusColor}; font-size:0.8rem; font-weight:800; ${statusAnim}">${status.toUpperCase()}</span>
+                </div>
+                <div style="display:flex; gap:8px;">
+                    ${!isOnline ? `<button onclick="controlService('${clientId}', '${name}', 'start')" class="btn-cmd" style="background:var(--success);" title="${t('ttSvcStart')}">▶</button>` : ''}
+                    <button onclick="controlService('${clientId}', '${name}', 'restart')" class="btn-cmd" style="background:#f59e0b;" title="${t('ttSvcRestart')}">🔄</button>
+                    <button onclick="openEditorModal('${clientId}', '${name}')" class="btn-cmd" style="background:#8e44ad;" title="${t('ttSvcEdit')}">📝</button>
+                    ${isOnline ? `<button onclick="controlService('${clientId}', '${name}', 'stop')" class="btn-cmd" style="background:var(--danger);" title="${t('ttSvcStop')}">🛑</button>` : ''}
+                </div>
+            </div>`;
+        }
+        listDiv.innerHTML = html;
+    }
+
+    function controlService(clientId, service, action) { 
+        customConfirm(t('titleAction'), `${t('confOp')}<b>${service}</b>?`, "var(--accent)", async () => {
+            try { 
+                const res = await fetch('/api/service_control', { method: 'POST', headers: {'Content-Type': 'application/json'}, body: JSON.stringify({ clientId, service, action }) }); 
+                const data = await res.json(); 
+                if(!data.success) customAlert(t('titleError'), "Error: " + data.error, true); 
+            } catch(e) { console.error(e); } 
+        });
+    }
+
+    let currentEditClient = ""; let currentEditService = "";
+    async function openEditorModal(clientId, service) {
+        currentEditClient = clientId; currentEditService = service;
+        document.getElementById('editor-title').innerText = `${service.toUpperCase()} @ ${clientId.toUpperCase()}`;
+        document.getElementById('config-textarea').value = "Connecting to server..."; document.getElementById('editor-status').innerText = "";
+        document.getElementById('editor-modal').style.display = 'flex';
+        try { const res = await fetch(`/api/config_file/${clientId}/${service}`); const data = await res.json(); if (data.success) document.getElementById('config-textarea').value = data.data.raw_text || "Empty file"; else document.getElementById('config-textarea').value = "ERROR:\n" + data.error; } catch(e) { document.getElementById('config-textarea').value = "Connection error."; }
+    }
+    function closeEditorModal() { document.getElementById('editor-modal').style.display = 'none'; }
+    
+    function saveConfig() {
+        const textValue = document.getElementById('config-textarea').value; const statusSpan = document.getElementById('editor-status');
+        customConfirm(t('titleSave'), `${t('confOvr')}<b>${currentEditClient.toUpperCase()}</b>?`, "var(--danger)", async () => {
+            statusSpan.innerText = "Sending..."; statusSpan.style.color = "var(--success)";
+            try {
+                const res = await fetch('/api/config_file', { method: 'POST', headers: {'Content-Type': 'application/json'}, body: JSON.stringify({ clientId: currentEditClient, service: currentEditService, config_data: { "raw_text": textValue } }) });
+                const data = await res.json();
+                if (data.success) { 
+                    customAlert(t('titleSuccess'), "File updated!"); 
+                    closeEditorModal(); 
+                } else { 
+                    customAlert(t('titleError'), "Server error: " + data.error, true); 
+                    statusSpan.innerText = "❌ Error"; 
+                }
+            } catch(e) { 
+                customAlert(t('titleError'), t('msgNetErr'), true); 
+                statusSpan.innerText = "❌ Network Error"; 
+            }
+        });
+    }
+
+    // --- FUNZIONE PER ISCRIVERSI ALLE PUSH ---
+    async function subscribeToPush() {
+        if (!('serviceWorker' in navigator)) return;
+
+        const permission = await Notification.requestPermission();
+        if (permission !== 'granted') {
+            customAlert("Error", "Push notifications permission denied.", true);
+            return;
+        }
+
+        try {
+            const reg = await navigator.serviceWorker.ready;
+            const res = await fetch('/api/vapid_public_key');
+            const { public_key } = await res.json();
+
+            const subscription = await reg.pushManager.subscribe({
+                userVisibleOnly: true,
+                applicationServerKey: urlB64ToUint8Array(public_key)
+            });
+
+            await fetch('/api/subscribe', {
+                method: 'POST',
+                headers: { 'Content-Type': 'application/json' },
+                body: JSON.stringify(subscription)
+            });
+
+            customAlert("Success", "Push notifications enabled successfully!");
+            document.getElementById('push-btn').style.color = 'var(--success)';
+        } catch (e) {
+            console.error(e);
+            customAlert("Error", "Failed to enable notifications.", true);
+        }
+    }
+
+    // --- FUNZIONE PER CONTROLLARE IL COLORE DEL BOTTONE ---
+    async function checkPushStatus() {
+        if (!('serviceWorker' in navigator) || !('PushManager' in window)) return;
+        
+        try {
+            const reg = await navigator.serviceWorker.ready;
+            const subscription = await reg.pushManager.getSubscription();
+            
+            const btn = document.getElementById('push-btn');
+            if (subscription && btn) {
+                btn.style.color = 'var(--success)';
+            }
+        } catch(e) {
+            console.error("Errore nel controllo stato Push:", e);
+        }
+    }
+
+    // Helper per convertire la chiave VAPID
+    function urlB64ToUint8Array(base64String) {
+        const padding = '='.repeat((4 - base64String.length % 4) % 4);
+        const base64 = (base64String + padding).replace(/\-/g, '+').replace(/_/g, '/');
+        const rawData = window.atob(base64);
+        const outputArray = new Uint8Array(rawData.length);
+        for (let i = 0; i < rawData.length; ++i) outputArray[i] = rawData.charCodeAt(i);
+        return outputArray;
+    }
+
+    // AVVIO DELLA DASHBOARD
+    initUI();
+    checkPushStatus();
+
+    // --- MOTORE WEBSOCKET REAL-TIME ---
+    const socket = io();
+
+    socket.on('connect', () => {
+        console.log("🟢 Connesso al server via WebSocket in tempo reale!");
+        refreshStates(); 
+        refreshLogs();
+        refreshStats();
+    });
+
+    socket.on('dati_aggiornati', function() {
+        console.log("⚡ Rilevato nuovo traffico! Scatto istantaneo dell'interfaccia...");
+        refreshStates(); 
+        refreshLogs();
+        refreshStats();   
+    });
+</script>
+<script>
+    if ('serviceWorker' in navigator) {
+        window.addEventListener('load', () => {
+            navigator.serviceWorker.register('/sw.js').then(reg => {
+                console.log('ServiceWorker registrato con successo!', reg.scope);
+            }).catch(err => {
+                console.log('Registrazione ServiceWorker fallita: ', err);
+            });
+        });
+    }
+</script>
+</body>
+</html>
diff --git a/test-push.py b/test-push.py
new file mode 100644
index 0000000..f44a7c5
--- /dev/null
+++ b/test-push.py
@@ -0,0 +1,11 @@
+import sqlite3
+import json
+from app import broadcast_push_notification, init_db
+
+#  Proviamo a inviare una notifica a tutti gli iscritti nel DB
+print("🚀 Starting notification test...")
+broadcast_push_notification(
+    "⚠️ ALLERTA FLOTTA", 
+    "Test Push Notification: System Online!"
+)
+print("✅ Command sent.")