Harden and rewrite for release

examples/client.toml

@@ -0,0 +1,25 @@
+# Copy to ~/.config/rex/client.toml on the device.
+# This file contains the connect key and must be readable only by the client
+# service account (chmod 600 ~/.config/rex/client.toml).
+
+device_name = "desk"
+api_key = "REPLACE_WITH_THE_DESK_CONNECT_KEY"
+
+# WSS through an Nginx reverse proxy. No port means the normal HTTPS/WSS port.
+endpoint = "rex.example.net"
+scheme = "wss"
+
+# For a direct server listener instead, use for example:
+# endpoint = "192.0.2.10"
+# scheme = "ws"     # only on a trusted network
+# port = 8010
+
+# Only names are sent to the server. argv remains local and is executed without
+# a shell, so each action must name an executable followed by its arguments.
+[[actions]]
+name = "lock"
+argv = ["/usr/local/bin/lock-screen"]
+
+[[actions]]
+name = "wake-display"
+argv = ["/usr/bin/dpms", "force", "on"]