update CHANGELOG.md

Support HTTPS and direct H.264
feat: add HTTPS support feat: enable direct H.264 streaming over HTTP style: optimize menu bar and settings styling
2026-11-11 10:29:19 -06:00 · 2025-05-08 16:39:13 +08:00 · 2025-05-08 14:50:32 +08:00 · 2025-05-07 23:23:39 -07:00 · 2025-05-07 19:25:49 +02:00 · 2025-05-07 19:23:26 +02:00
387 changed files with 43260 additions and 10424 deletions
--- a/.gitignore
+++ b/.gitignore
@@ -16,4 +16,16 @@ web/web
 .idea
 .vscode

-NanoKVM-Server
+NanoKVM-Server
+
+support/sg2002/kvm_system/build
+support/sg2002/kvm_system/dist
+support/sg2002/kvm_system/CMakeLists.txt
+
+support/sg2002/kvm_vision_test/build
+support/sg2002/kvm_vision_test/dist
+support/sg2002/kvm_vision_test/CMakeLists.txt
+
+support/sg2002/additional/original
+kvmapp/server/dl_lib
+kvmapp/kvm_system/kvm_system
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -0,0 +1,148 @@
+## 2.2.7 [e18ec22](https://github.com/sipeed/NanoKVM/commit/e18ec2219d22886529575d1fdaad5c320e05f5b2) (2025-05-08)
+
+* feat: add HTTPS support
+* feat: support direct H.264 streaming over HTTP
+* Localization
+  * update Russian translation (thanks to [polyzium](https://github.com/polyzium))
+  * update Dutch translation (thanks to [LeonStraathof](https://github.com/LeonStraathof))
+  * update Ukrainian translation (thanks to [click0](https://github.com/click0))
+  * update German translation (thanks to [3limin4tor](https://github.com/3limin4tor))
+
+## 2.2.6 [c83dc55](https://github.com/sipeed/NanoKVM/commit/c83dc5565c9dbed22336661a8832edbd93a06d11) (2025-04-17)
+
+* feat: add mouse jiggler to prevent system sleep
+* feat: add support for swap memory
+* feat: add support for customizing the device hostname
+* feat: add support for customizing the web page title
+* feat: add support for assigning custom names to Wake-on-LAN MAC addresses
+* feat: add confirmation prompts for power operations
+* feat: add logo to the login page (thanks to [S33G](https://github.com/S33G))
+* fix: fix possible privacy issues with MIC drivers. [Repair Record](https://github.com/sipeed/NanoKVM/commit/f9244b36df090a05cd59ba11ea4fd01e9b638995)
+* fix: fix iptables rule that could interfere with SSH connections (thanks to [scpcom](https://github.com/scpcom))
+* fix: fix the static IP gateway configuration might not apply correctly (thanks to [xitation](https://github.com/xitation))
+* perf: optimized OLED display handling and sleep logic
+* perf: improve H.264 streaming reliability by adding a heartbeat mechanism
+* perf: set the minimum screen size to 640x480
+* perf: add display of both wired and wireless IPv4 addresses in the settings page
+* perf: update the Thai language translations (thanks to [ChokunPlayZ](https://github.com/ChokunPlayZ))
+* chore: bump axios to 1.8.4
+* chore: bump golang.org/x/net to v0.39.0
+* chore: bump github.com/golang-jwt/jwt/v5 to to v5.2.2
+
+## 2.2.5 [3286cc2](https://github.com/sipeed/NanoKVM/commit/3286cc2f85a14133d65935cb476c833dcf151459) (2025-03-26)
+
+* fix: server crash caused by MJPEG frame detection error
+* feat: add HID-Only mode
+* feat: support preview updates
+* perf: improve image reading performance by optimizing screen parameters
+
+## 2.2.4 [1bf986d](https://github.com/sipeed/NanoKVM/commit/1bf986d41b34d568c1ffee5df90ce61b6b08456b) (2025-03-21)
+
+* fix: resolve USB initialization issue
+* fix: correct abnormal updates in certain models
+* perf: add version restrictions for production testing
+
+## 2.2.3 [6ef83cb](https://github.com/sipeed/NanoKVM/commit/6ef83cb22fcd77f721d32c97c85d12f2bfc3035a) (2025-03-21)
+
+* feat: add support for setting H.264 GOP
+* fix: resolve deadlock caused by HDMI resolution errors
+* perf: merge H.264 SPS and PPS into I-frame
+* perf: refactor MJPEG frame detection
+* perf: added more configuration options to the serial port terminal (thanks to [@mekaris](https://github.com/mekaris))
+* perf: improve the `update-nanokvm.py` script (thanks to [@reishoku](https://github.com/reishoku))
+* perf: disable mDNS by default in new products
+* perf: update log timestamp to millisecond precision
+* chore: bump Go to 1.23
+* chore: bump `golang.org/x/net` to v0.37.0
+
+## 2.2.2 [58d5ab2](https://github.com/sipeed/NanoKVM/commit/58d5ab2d37244b1e1a68b925a5c23c324c489ad3) (2025-03-11)
+
+* feat: add watchdog for NanoKVM-Server
+* feat: add support for UE chip
+* feat: support system reboot
+* feat: support enable/disable mDNS
+* fix: resolve UE chip cannot start server
+* perf: refactor automatic resolution detection
+* perf: add output prompt for unsupported resolutions
+* perf: add lock to kvmv_read_img
+* perf: configurable VENC automatic recycling feature
+* perf: add maximum limit for vi
+* perf: add tooltips to menu bar (thanks to [@S33G](https://github.com/S33G))
+* perf: menu bar is now draggable (thanks to [@forumi0721](https://github.com/forumi0721))
+* perf: image list support auto-refresh (thanks to [@forumi0721](https://github.com/forumi0721))
+* perf: update translations
+
+## 2.2.1 [b5e48a0](https://github.com/sipeed/NanoKVM/commit/b5e48a07e82df3aedd60442342ae50b95684a697) (2025-02-21)
+
+* fix: mounted image were not being detected correctly
+* perf: add support for CD-ROM mode when mounting image (thanks to [@scpcom](https://github.com/scpcom))
+* perf: add a loading state during login
+* perf: add changelog link in settings
+* perf: update translation and cleanup the code (thanks to [@ChokunPlayZ](https://github.com/ChokunPlayZ) [@Stoufiler](https://github.com/Stoufiler) [@polyzium](https://github.com/polyzium) [@Jonher937](https://github.com/Jonher937) [@S33G](https://github.com/S33G))
+
+## 2.2.0 [0dbf8c0](https://github.com/sipeed/NanoKVM/commit/0dbf8c007f2d0183d0f0601c3da6d3c3fccd8b31) (2025-02-17)
+
+NanoKVM [Image v1.4.0](https://github.com/sipeed/NanoKVM/releases/tag/v1.4.0) has been released!
+
+> Please refer to the [wiki](https://wiki.sipeed.com/hardware/en/kvm/NanoKVM/system/introduction.html) for more details about the image and application.
+
+* fix: improve password update notification logic (thanks to [@li20034](https://github.com/li20034))
+* perf: increase update wait time to 10s (from 6s)
+* perf: update Korean translation (thanks to [@forumi0721](https://github.com/forumi0721))
+* perf: update Traditional Chinese translation (thanks to [@protonchang](https://github.com/protonchang))
+* refactor: update `libkvm.so` and `libkvm_mmf.so` libraries
+
+## 2.1.6 [6eb4a4e](https://github.com/sipeed/NanoKVM/commit/6eb4a4ea6254f465a47f9881d13934c686649061) (2025-02-14)
+
+* feat: support downloading image from online URL (thanks to [@Itxaka](https://github.com/Itxaka))
+* feat: add keyboard shortcut `Ctrl+Alt+Del` (thanks to [@CaffeeLake](https://github.com/CaffeeLake))
+* fix: fix the CSRF issue
+* perf: add an option to configure custom ICE servers (thanks to [@VMFortress](https://github.com/VMFortress))
+* perf: removed unnecessary modifications to DNS configuration
+* perf: add an SSH enable/disable toggle in the web UI
+* perf: add a Tailscale enable/disable toggle in the web UI
+* perf: download Tailscale installation package from the official source
+* perf: automatic enable/disable GOMEMLIMIT on tailscale start/stop
+* perf: add JWT configuration
+  * secretKey: customize secret key. If empty, generated a random 64-byte secret key by default
+  * refreshTokenDuration: customize token expiration time
+  * revokeTokensOnLogout: invalidate all JWT tokens on logout
+* perf: implement secure password storage using bcrypt hashing
+* perf: implement integrity checks for online updates
+* refactor: refactor HDMI module and remove the dependency `libmaixcam_lib.so`
+* refactor: web terminal use pty instead of SSH
+* refactor: move Tailscale APIs from the `network` module to the `extensions` module
+
+## 2.1.5 [85f6447](https://github.com/sipeed/NanoKVM/commit/85f6447a16cc2591c6459b7d3dfda4d4cb75e98c) (2025-01-14)
+
+* feat: add HDMI reset for NanoKVM-PCIe
+* fix: remove unnecessary lock acquisition during HID reset
+* refactor: refactor Tailscale
+
+## 2.1.4 [d7ca7c4](https://github.com/sipeed/NanoKVM/commit/d7ca7c453d821ad099bf79b463969419041279cb) (2025-01-10)
+
+* feat: support configuring OLED sleep settings
+* feat: support setting the `GOMEMLIMIT` environment variable
+* fix: fix Wi-Fi configuration
+* perf: password changes now update both the web user and the system root user
+* perf: add MAC address verification for Wake-on-LAN
+* refactor: a lot update to web UI
+* refactor: refactor Tailscale
+
+## 2.1.3 [26078fe](https://github.com/sipeed/NanoKVM/commit/26078fe46e43d4543d7b09901b4992e4fbe4f01f) (2024-12-27)
+
+* feat: add API to retrieve Wi-Fi information
+* fix: fix keyboard modifier keys
+* fix: update keyboard and mouse HID codes
+* fix: update hardware version information
+
+## 2.1.2 [5a39562](https://github.com/sipeed/NanoKVM/commit/5a39562f2d32695933f4e7e86866136236cc9903) (2024-12-04)
+
+* feat: add hardware version to configuration
+* feat: add Wi-Fi configuration support for NanoKVM-PCIe
+* perf: update web UI
+* chore: add dependency libraries
+
+## 2.1.1 [74a303b](https://github.com/sipeed/NanoKVM/commit/74a303bd5cbb58f9d8ddd81abaaf4919dbbfb71b) （2024-11-06）
+
+* feat: support h264
--- a/README.md
+++ b/README.md
@@ -3,64 +3,86 @@ NanoKVM

 <div align="center">

-![](https://wiki.sipeed.com/hardware/zh/kvm/assets/NanoKVM/1_intro/NanoKVM_3.jpg)
+![](https://wiki.sipeed.com/hardware/assets/NanoKVM/introduce/NanoKVM_3.png)

 <h3>
-    <a href="https://wiki.sipeed.com/hardware/zh/lichee/RV_Nano/1_intro.html"> Quick Start </a> |
+    <a href="https://wiki.sipeed.com/hardware/en/kvm/NanoKVM/introduction.html"> Quick Start </a>
+    |
    <a href="https://cn.dl.sipeed.com/shareURL/KVM/nanoKVM"> Hardware </a>
 </h3>

-English | [中文](./README_ZH.md)
+English | [中文](./README_ZH.md) | [日本語](./README_JA.md)

 </div>

-> Your NanoKVM Power by RISC-V !
+> Your NanoKVM is powered by [RISC-V](https://en.wikipedia.org/wiki/RISC-V)!
 > If you have any issues or suggestions, creating issue here, or tell us with [MaixHub Discussion](https://maixhub.com/discussion/nanokvm).

-## Opensource & Contribution & Shipping
-
-The star is coming to 2K! We will organize and opensource backend source code in Mid October！(and it is also the time all preoreders  (before 10.1) ship out)
-
-### Update 10.18
-
-We have opensourced the backend code in 10.8, and thank you for Civil PR it immediately, we will give you newest NanoKVM-PCIe as a reward！   
-The mid-Oct batch is starting testing and packaging, most order before 10.1 will ship out next and next next week.   
-The aliexpress shipping date is change to Dec since 10.1, it is a conservative delivery time. the order in Oct. should send out during 11.15~12.15.   
-
 ## Introduction

 Lichee NanoKVM is an IP-KVM product based on LicheeRV Nano, inheriting the extreme size and powerful features of LicheeRV Nano.
-The Lichee NanoKVM is available in two versions:
-NanoKVM Lite is a basic configuration that is suitable for individual users with certain DIY capabilities and enterprise users with bulk requirements.
-The NanoKVM Full is a full version with a sophisticated case and complete accessories, as well as a built-in system mirror card that is ready to use at boot, and is recommended for individual users.

-![](https://wiki.sipeed.com/hardware/zh/kvm/assets/NanoKVM/1_intro/NanoKVM_1.jpg)
+The Lichee NanoKVM is now available in three versions:
+
+* NanoKVM-Cube Lite is a basic configuration that is suitable for individual users with certain DIY capabilities and enterprise users with bulk requirements.
+
+* NanoKVM-Cube Full is a full version with a sophisticated case and complete accessories, as well as a built-in system mirror card that is ready to use at boot, and is recommended for individual users.
+
+* NanoKVM-PCle is a new form with a built-in PCle baffle that can be fixed inside the chassis. NanoKVM-PCle adds optional WiFi and PoE functions based on NanoKVM-Cube; it has its own PCle slot and can draw power from the motherboard PCle slot; in addition, the wired connection (ETH) is also more stable, meeting more professional needs.
+
+<div align="center">
+
+![NanoKVM-Cube](https://wiki.sipeed.com/hardware/zh/kvm/assets/NanoKVM/1_intro/NanoKVM_1.jpg)
+
+![NanoKVM-PCIe](https://wiki.sipeed.com/hardware/assets/NanoKVM/introduce/NanoKVM-PCIe.png)
+
+</div>
+
+> For users concerned about security, you can read this issue: [#301](https://github.com/sipeed/NanoKVM/issues/301). You will find explanations addressing all security concerns.
+> GitHub, as an open and transparent platform, provides a space for discussing so-called "backdoor" concerns. Open-source makes products more secure!
+
+## Project Structure
+
+``` shell
+├── kvmapp          # APP update package
+│   ├── jpg_stream  # Compatible for direct updates from very old versions
+│   ├── kvm_new_app # Triggers necessary components for kvm_system update
+│   ├── kvm_system  # kvm_system application
+│   ├── server      # NanoKVM front-end and back-end applications
+│   └── system      # Necessary system components
+├── web             # NanoKVM front-end
+├── server          # NanoKVM back-end
+├── support         # Auxiliary functions (image subsystem, system status, system updates, screen, keys, etc.)
+│   ├── sg2002      # NanoKVM-Lite/Full/PCIe
+│   └── h618        # NanoKVM-Pro
+├── ...
+```

 ## Tech Specs

-| Products | NanoKVM (Lite) | NanoKVM (Full) | PiKVM V4 |
-| --- | --- | --- | --- |
-| Compute Units   | LicheeRV Nano(RISCV) | LicheeRV Nano(RISCV) | CM4 (ARM) |
-| Resolution       | 1080P @ 60fps | 1080P @ 60fps | 1080P @ 60fps |
-| Video encoding  | MJPEG, H264(developing) | MJPEG, H264(developing) | MJPEG, H264 |
-| Video delay     | 90～230ms | 90～230ms | 100～230ms |
-| UEFI/BIOS               | ✓ | ✓ | ✓ |
-| Virtual HID | ✓ | ✓ | ✓ |
-| Virtual CD-ROM | ✓ | ✓ | ✓ |
-| IPMI      | ✓ | ✓ | ✓ |
-| Wake-on-LAN | ✓ | ✓ | ✓ |
-| ETH | 100M/10M | 100M/10M | 1000M/100M/10M |
-| ATX power control | None，Users can connect by their own | USB interface IO control board | RJ-45 interface IO control board |
-| OLED | None，Users can connect by their own | 128x64 0.96" white | 128x32 0.91" white |
-| UART | 2 | 2 | 1 |
-| TF Card | None | ✓ | ✓ |
-| Expansion | None | PoE | WiFi/LTE |
-| Power consumption | 0.2A@5V | 0.2A@5V | Peak 2.6A@5V |
-| Power input | PC USB can be powered | PC USB or auxiliary power supply | DC 5V 3A power supply is required |
-| Cooling | Silent fanless | Silent fanless | Fan cooling |
-| Size | 23x37x15mm <br> ～1/30 PiKVM V4 size | 40x36x36mm <br/> ～1/7 PiKVM V4 size | 120x68x44mm |
+| Products           | NanoKVM (Lite)                        | NanoKVM (Full)                    | PiKVM V4                           |
+|------------------- |-------------------------------------- |---------------------------------- |----------------------------------- |
+| Compute Units      | LicheeRV Nano(RISCV)                  | LicheeRV Nano(RISCV)              | CM4 (ARM)                          |
+| Resolution         | 1080P @ 60fps                         | 1080P @ 60fps                     | 1080P @ 60fps                      |
+| Video encoding     | MJPEG, H264                           | MJPEG, H264                       | MJPEG, H264                        |
+| Video delay        | 90～230ms                             | 90～230ms                         | 100～230ms                         |
+| UEFI/BIOS          | ✓                                     | ✓                                 | ✓                                  |
+| Virtual HID        | ✓                                     | ✓                                 | ✓                                  |
+| Virtual CD-ROM     | ✓                                     | ✓                                 | ✓                                  |
+| IPMI               | ✓                                     | ✓                                 | ✓                                  |
+| Wake-on-LAN        | ✓                                     | ✓                                 | ✓                                  |
+| ETH                | 100M/10M                              | 100M/10M                          | 1000M/100M/10M                     |
+| ATX power control  | None，Users can connect by their own  | USB interface IO control board    | RJ-45 interface IO control board   |
+| OLED               | None，Users can connect by their own  | 128x64 0.96" white                | 128x32 0.91" white                 |
+| UART               | 2                                     | 2                                 | 1                                  |
+| TF Card            | None                                  | ✓                                 | ✓                                  |
+| Expansion          | None                                  | PoE                               | WiFi/LTE                           |
+| Power consumption  | 0.2A@5V                               | 0.2A@5V                           | Peak 2.6A@5V                       |
+| Power input        | PC USB can be powered                 | PC USB or auxiliary power supply  | DC 5V 3A power supply is required  |
+| Cooling            | Silent fanless                        | Silent fanless                    | Fan cooling                        |
+| Size               | 23x37x15mm   ～1/30 PiKVM V4 size     | 40x36x36mm   ～1/7 PiKVM V4 size  | 120x68x44mm                        |

-![](https://wiki.sipeed.com/hardware/zh/kvm/assets/NanoKVM/1_intro/NanoKVM_2.jpg)
+![NanoKVM PCB Pinout](https://wiki.sipeed.com/hardware/zh/kvm/assets/NanoKVM/1_intro/NanoKVM_2.jpg)

 ## Hardware platform NanoKVM

@@ -70,11 +92,52 @@ The NanoKVM Lite is constructed by the LicheeRV Nano and HDMItoCSI board, and th

 The NanoKVM image is built on LicheeRV Nano SDK and MaixCDK, and is compatible with materials that use the LicheeRV Nano, opposite the KVM software cannot be used with the LicheeRV Nano or other SG2002 products. If you would like to build an HDMI input application on LicheeRV Nano or MaixCam, please contact us for technical support.

-Note: Out of the 256MB memory in SG2002, 105MB is currently allocated for the multimedia subsystem, which NanoKVM will use for video image acquisition and processing
+Note: Out of the 256MB memory in SG2002, 158MB is currently allocated for the multimedia subsystem, which NanoKVM will use for video image acquisition and processing.

-+ [NanoKVM-A Schematic](https://cn.dl.sipeed.com/fileList/KVM/nanoKVM/HDK/02_Schematic/SCH_RV_Nano_KVM_A_30111.pdf)
-+ [NanoKVM-B Schematic](https://cn.dl.sipeed.com/fileList/KVM/nanoKVM/HDK/02_Schematic/SCH_HDMI_MIPI_31011.pdf)
-+ [NanoKVM img](https://github.com/sipeed/NanoKVM/releases/tag/NanoKVM)
+* [NanoKVM-A Schematic](https://cn.dl.sipeed.com/fileList/KVM/nanoKVM/HDK/02_Schematic/SCH_RV_Nano_KVM_A_30111.pdf)
+* [NanoKVM-B Schematic](https://cn.dl.sipeed.com/fileList/KVM/nanoKVM/HDK/02_Schematic/SCH_RV_Nano_KVM_B_30131.pdf)
+* [NanoKVM img](https://github.com/sipeed/NanoKVM/releases/tag/NanoKVM)
+
+## Roadmap
+
+**Enhancements:**
+
+* [x] Refactor the HDMI module and remove the libmaixcam_lib.so dependency
+* [x] Disable SSH by default and add an enable/disable toggle in the web UI
+* [x] Disable Tailscale by default and add an enable/disable toggle in the web UI
+* [x] Add JWT configuration options to the configuration file
+* [x] Secure password storage with bcrypt
+
+**Distribution:**
+
+* [x] Distribute applications via GitHub
+* [x] Implement integrity checks for online updates
+* [ ] Support offline updates
+
+**Bug Fixes:**
+
+* [x] Fix the DNS issue
+* [x] Fix the CSRF vulnerability
+
+**Features**
+
+* [ ] [79](https://github.com/sipeed/NanoKVM/issues/79) Support Zerotier
+* [ ] [99](https://github.com/sipeed/NanoKVM/issues/99) Support WireGuard
+* [ ] [249](https://github.com/sipeed/NanoKVM/issues/249) Add Mouse Jiggler
+
+## Contributing
+
+1. Fork the repository
+2. Create a feature branch
+3. Commit your changes
+4. Push to the branch
+5. Create a Pull Request
+
+Thanks for your interest in contributing to NanoKVM!
+
+Please keep your pull requests small and focused. This will make it easier to review and merge.
+
+> Developers who have contributed high-quality Pull Requests will receive a NanoKVM Cube, PCIe, or Pro as a token of our appreciation.

 ## Where to buy

@@ -82,11 +145,11 @@ Note: Out of the 256MB memory in SG2002, 105MB is currently allocated for the mu
 * [淘宝](https://item.taobao.com/item.htm?id=811206560480)
 * [Preorder (anyother country that not support in Aliexpress or Taobao)](https://sipeed.com/nanokvm)

-
 ## Community

 * [MaixHub Discussion](https://maixhub.com/discussion/nanokvm)
 * QQ group: 703230713

+## License

-
+This project is licensed under the GPL-3.0 License - see the LICENSE file for details.
--- a/README_JA.md
+++ b/README_JA.md
@@ -0,0 +1,129 @@
+NanoKVM
+======
+
+<div align="center">
+
+![](https://wiki.sipeed.com/hardware/assets/NanoKVM/introduce/NanoKVM_3.png)
+
+<h3>
+    <a href="https://wiki.sipeed.com/hardware/en/kvm/NanoKVM/introduction.html"> クイックスタート </a>
+    |
+    <a href="https://cn.dl.sipeed.com/shareURL/KVM/nanoKVM"> ハードウェア </a>
+</h3>
+
+[English](./README.md) | [中文](./README_ZH.md) | 日本語
+
+</div>
+
+> NanoKVM は [RISC-V](https://en.wikipedia.org/wiki/RISC-V) を搭載しています！
+> 使用中に問題や提案がある場合は、ここで issue を提出するか、[MaixHub Discussion](https://maixhub.com/discussion/nanokvm) でお知らせください。
+
+## オープンソース & コントリビューション
+
+### 2025.02.19 更新
+
+NanoKVM のすべてのコンポーネントはオープンソース化されており、[front-end](https://github.com/sipeed/NanoKVM/tree/main/web)、[back-end](https://github.com/sipeed/NanoKVM/tree/main/server)、[kvm_vision](https://github.com/sipeed/NanoKVM/tree/main/vision/components/kvm)、[kvm_mmf](https://github.com/sipeed/NanoKVM/tree/main/vision/components/kvm_mmf)、[kvm_system](https://github.com/sipeed/NanoKVM/tree/main/support)、[kvmapp update package](https://github.com/sipeed/NanoKVM-System/tree/main/kvmapp)、[system sdk](https://github.com/sipeed/LicheeRV-Nano-Build/tree/NanoKVM)、[packaging methods](https://github.com/sipeed/LicheeRV-Nano-Build/blob/NanoKVM/kvm/NanoKVM_img.sh)が含まれます。
+
+### 2025.02.14 更新
+
+最新のアプリケーションバージョン v2.1.6 には、多くのセキュリティ強化とバグ修正が追加されているため、一般のユーザーはこのバージョン以降へのアップグレードをお勧めします。
+
+### 2025.02.05 更新
+
+セキュリティを懸念しているユーザーは、この issue をお読みください: <https://github.com/sipeed/NanoKVM/issues/301>、セキュリティに関するすべての懸念事項について説明されています。
+GitHub は、オープンで透明性のあるプラットフォームとして、いわゆる「バックドア」の懸念事項を議論する場を提供しています。オープンソースであることにより、製品のセキュリティがさらに強化されます！
+
+### 2024.10.18 更新
+
+10/08にバックエンドコードをオープンソース化しました。すぐにPRを提出してくれたCivilに感謝します。最新のNanoKVM-PCIeを報酬として提供します！
+10月中旬のバッチはテストとパッケージングを開始しており、10/01以前のほとんどの注文は次週と次々週に出荷されます。
+10/01以降、アリエクスプレスの出荷日は12月に変更されました。これは保守的な納期です。10月の注文は11/15〜12/15の間に発送される予定です。
+
+## 紹介
+
+Lichee NanoKVMは、LicheeRV NanoをベースにしたIP-KVM製品で、LicheeRV Nanoの極小サイズと強力な機能を継承しています。
+Lichee NanoKVMは2つのバージョンがあります：
+NanoKVM Liteは基本構成で、一定のDIY能力を持つ個人ユーザーや大量のニーズを持つ企業ユーザーに適しています。
+NanoKVM Fullは完全版で、洗練されたケースと完全なアクセサリーを備え、起動時にすぐに使用できるシステムミラーカードが内蔵されており、個人ユーザーに推奨されます。
+
+![NanoKVM 分解画像](https://wiki.sipeed.com/hardware/zh/kvm/assets/NanoKVM/1_intro/NanoKVM_1.jpg)
+
+## 技術仕様
+
+| 製品                   | NanoKVM (Lite)                        | NanoKVM (Full)                    | PiKVM V4                           |
+|----------------------- |-------------------------------------- |---------------------------------- |----------------------------------- |
+| 計算ユニット           | LicheeRV Nano(RISCV)                  | LicheeRV Nano(RISCV)              | CM4 (ARM)                          |
+| 解像度                 | 1080P @ 60fps                         | 1080P @ 60fps                     | 1080P @ 60fps                      |
+| ビデオエンコーディング | MJPEG, H264                           | MJPEG, H264                       | MJPEG, H264                        |
+| ビデオ遅延             | 90～230ms                             | 90～230ms                         | 100～230ms                         |
+| UEFI/BIOS              | ✓                                    | ✓                                | ✓                                 |
+| 仮想HID                | ✓                                    | ✓                                | ✓                                 |
+| 仮想CD-ROM             | ✓                                    | ✓                                | ✓                                 |
+| IPMI                   | ✓                                    | ✓                                | ✓                                 |
+| Wake-on-LAN            | ✓                                    | ✓                                | ✓                                 |
+| ETH                    | 100M/10M                              | 100M/10M                          | 1000M/100M/10M                     |
+| ATX電源制御            | なし、ユーザーが自分で接続            | USBインターフェースIO制御ボード   | RJ-45インターフェースIO制御ボード  |
+| OLED                   | なし、ユーザーが自分で接続            | 128x64 0.96" 白                   | 128x32 0.91" 白                    |
+| UART                   | 2                                     | 2                                 | 1                                  |
+| TFカード               | なし                                  | ✓                                | ✓                                 |
+| 拡張                   | なし                                  | PoE                               | WiFi/LTE                           |
+| 消費電力               | 0.2A@5V                               | 0.2A@5V                           | ピーク時 2.6A@5V                   |
+| 電源入力               | PC USBで給電可能                      | PC USBまたは補助電源              | DC 5V 3A電源が必要                 |
+| 冷却                   | 静音ファンレス                        | 静音ファンレス                    | ファン冷却                         |
+| サイズ                 | 23x37x15mm   ～1/30 PiKVM V4サイズ    | 40x36x36mm   ～1/7 PiKVM V4サイズ | 120x68x44mm                        |
+
+![NanoKVM PCB ピン配置](https://wiki.sipeed.com/hardware/zh/kvm/assets/NanoKVM/1_intro/NanoKVM_2.jpg)
+
+## NanoKVM ハードウェアプラットフォーム
+
+NanoKVMはSipeed [LicheeRV Nano](https://wiki.sipeed.com/hardware/zh/lichee/RV_Nano/1_intro.html)に基づいており、仕様、回路図、寸法図は[こちら](http://cn.dl.sipeed.com/shareURL/LICHEE/LicheeRV_Nano)で確認できます。
+
+NanoKVM LiteはLicheeRV NanoとHDMItoCSIボードで構成され、NanoKVM FULLはNanoKVM LiteにNanoKVM-A/Bボードとシェルを追加しています。HDMItoCSIボードはHDMI信号を変換するために使用されます。NanoKVM-AにはOLED、ATX制御出力（USB Type-Cインターフェース）、補助電源供給およびATX電源オン/オフおよびリセットボタンが含まれています。NanoKVM-Bは一端がAボードに接続され、他端がコンピュータのATXピンに接続され、コンピュータの電源をリモートで制御します。
+
+NanoKVMイメージはLicheeRV Nano SDKおよびMaixCDKに基づいて構築されており、LicheeRV Nanoを使用する資料と互換性があります。逆に、KVMソフトウェアはLicheeRV Nanoや他のSG2002製品では使用できません。LicheeRV NanoやMaixCamでHDMI入力アプリケーションを構築したい場合は、技術サポートを受けるためにお問い合わせください。
+
+注：SG2002の256MBメモリのうち、現在158MBがマルチメディアサブシステムに割り当てられており、NanoKVMはビデオ画像の取得と処理にこのメモリを使用します。
+
+ [NanoKVM-A 回路図](https://cn.dl.sipeed.com/fileList/KVM/nanoKVM/HDK/02_Schematic/SCH_RV_Nano_KVM_A_30111.pdf)
+ [NanoKVM-B 回路図](https://cn.dl.sipeed.com/fileList/KVM/nanoKVM/HDK/02_Schematic/SCH_HDMI_MIPI_31011.pdf)
+ [NanoKVM イメージダウンロード](https://github.com/sipeed/NanoKVM/releases/tag/NanoKVM)
+
+## ロードマップ
+
+### Q1 2025
+
+**改善:**
+
+- [x] HDMI モジュールをリファクタリングし、libmaixcam_lib.so の依存関係を削除
+- [x] SSH をデフォルトで無効にし、Web UI に有効/無効の切り替えを追加
+- [x] Tailscale をデフォルトで無効にし、Web UI に有効/無効の切り替えを追加
+- [x] 設定ファイルに JWT 設定オプションを追加
+- [x] bcrypt を利用したパスワードストレージのセキュリティ保護
+
+**配布:**
+
+- [x] GitHub 経由でのアプリケーション配布
+- [x] オンラインでの更新の際に整合性チェックを実施
+- [ ] オフラインでの更新をサポート
+
+**バグ修正:**
+
+- [x] DNS の問題を修正
+- [x] CSRF の脆弱性を修正
+
+**機能**
+
+- [ ] [79](https://github.com/sipeed/NanoKVM/issues/79) Zerotier をサポート
+- [ ] [99](https://github.com/sipeed/NanoKVM/issues/99) WireGuard をサポート
+- [ ] [249](https://github.com/sipeed/NanoKVM/issues/249) Mouse Jiggler を追加
+
+## 購入方法
+
+* [Aliexpress(グローバル、米国とロシアを除く)](https://www.aliexpress.com/item/1005007369816019.html)
+* [淘宝](https://item.taobao.com/item.htm?id=811206560480)
+* [予約注文 (淘宝とアリエクスプレスがサポートされていない国)](https://sipeed.com/nanokvm)
+
+## コミュニティ
+
+* [MaixHub Discussion](https://maixhub.com/discussion/nanokvm)
+* QQグループ: 703230713
--- a/README_ZH.md
+++ b/README_ZH.md
@@ -3,29 +3,61 @@ NanoKVM

 <div align="center">

-![](https://wiki.sipeed.com/hardware/zh/kvm/assets/NanoKVM/1_intro/NanoKVM_3.jpg)
+![](https://wiki.sipeed.com/hardware/assets/NanoKVM/introduce/NanoKVM_3.png)

 <h3>
-    <a href="https://wiki.sipeed.com/hardware/zh/lichee/RV_Nano/1_intro.html"> 快速开始 </a> |
-    <a href="https://cn.dl.sipeed.com/shareURL/KVM/nanoKVM"> 硬件资料 </a>
+    <a href="https://wiki.sipeed.com/hardware/en/kvm/NanoKVM/introduction.html"> Quick Start </a>
+    |
+    <a href="https://cn.dl.sipeed.com/shareURL/KVM/nanoKVM"> Hardware </a>
 </h3>

-[English](./README.md) | 中文
+[English](./README.md) | 中文 | [日本語](./README_JA.md)

 </div>

 > Your NanoKVM Power by RISC-V !
 > 如果您在使用过程中有任何问题或建议，请在这里提交 issue， 或在 [MaixHub Discussion](https://maixhub.com/discussion/nanokvm)告诉我们.

-
 ## 简介

 Lichee NanoKVM 是基于 LicheeRV Nano 的 IP-KVM 产品，继承了 LicheeRV Nano的极致体积 和 强大功能。
-Lichee NanoKVM分为两个版本：
-NanoKVM Lite 为基础版配置，适合 具有一定DIY能力的个人用户 和 有批量需求的企业用户。
-NanoKVM Full 为完整版配置，带精致外壳和完整配件，内置开机即用的系统镜像卡，推荐个人用户购买。

-![](https://wiki.sipeed.com/hardware/zh/kvm/assets/NanoKVM/1_intro/NanoKVM_1.jpg)
+Lichee NanoKVM 目前有三个版本：
+
+* NanoKVM-Cube Lite 为基础版配置，适合 具有一定DIY能力的个人用户 和 有批量需求的企业用户。
+* NanoKVM-Cube Full 为完整版配置，带精致外壳和完整配件，内置开机即用的系统镜像卡，推荐个人用户购买。
+* NanoKVM-PCle 为全新形态，内置 PCle 挡板，可固定在机箱内部。NanoKVM-PCle 在 NanoKVM-Cube 基础上增加了可选的 WiFi 和 PoE 功能；拥有自家的 PCle 插槽，可从主板 PCle 插槽取电；另外有线连接（ETH）也更加稳定，满足更多专业需求。
+
+<div align="center">
+
+![NanoKVM-Cube](https://wiki.sipeed.com/hardware/zh/kvm/assets/NanoKVM/1_intro/NanoKVM_1.jpg)
+
+![NanoKVM-PCIe](https://wiki.sipeed.com/hardware/assets/NanoKVM/introduce/NanoKVM-PCIe.png)
+
+</div>
+
+> 对于关注安全的用户，可以阅读此问题 [#301](https://github.com/sipeed/NanoKVM/issues/301)，您会找到有关所有安全问题的解释。GitHub 作为一个开放和透明的平台，为讨论所谓的“后门”担忧提供了空间。开源使产品更加安全！
+
+## 项目结构
+
+``` shell
+├── kvmapp          # APP更新包
+│   ├── jpg_stream  # 兼容从非常老的版本中直接更新
+│   ├── kvm_new_app # 触发 kvm_system 更新必要组件
+│   ├── kvm_system  # kvm_system 应用
+│   ├── server      # NanoKVM 前后端应用
+│   └── system      # 必要系统组件
+├── server          # NanoKVM 后端
+├── support         # 辅助功能(图像子系统、系统状态、系统更新、屏幕、按键……)
+│   ├── sg2002      # NanoKVM-Lite/Full/PCIe
+│   └── h618        # NanoKVM-Pro
+├── web             # NanoKVM 前端
+├── LICENSE
+├── README_JA.md
+├── README.md
+├── README_ZH.md
+└── CHANGELOG.md
+```

 ## 参数

@@ -33,7 +65,7 @@ NanoKVM Full 为完整版配置，带精致外壳和完整配件，内置开机
 | --- | --- | --- | --- |
 | 计算单元                | LicheeRV Nano(RISCV) | LicheeRV Nano(RISCV) | CM4 (ARM) |
 | 分辨率                  | 1080P @ 60fps | 1080P @ 60fps | 1080P @ 60fps |
-| 视频编码                | MJPEG, H264(developing) | MJPEG, H264(developing) | MJPEG, H264 |
+| 视频编码                | MJPEG, H264 | MJPEG, H264 | MJPEG, H264 |
 | 视频延迟                | 90～230ms | 90～230ms | 100～230ms |
 | UEFI/BIOS               | ✓ | ✓ | ✓ |
 | 模拟USB键鼠 | ✓ | ✓ | ✓ |
@@ -63,10 +95,9 @@ NanoKVM 镜像在LicheeRV Nano SDK 和 MaixCDK 基础上构建，可以兼容使

 注: SG2002的256MB内存中, 目前划分105MB用于多媒体子系统, NanoKVM会在视频图像采集和处理中使用这部分内存.

-+ [NanoKVM-A 原理图](https://cn.dl.sipeed.com/fileList/KVM/nanoKVM/HDK/02_Schematic/SCH_RV_Nano_KVM_A_30111.pdf)
-+ [NanoKVM-B 原理图](https://cn.dl.sipeed.com/fileList/KVM/nanoKVM/HDK/02_Schematic/SCH_HDMI_MIPI_31011.pdf)
-+ [NanoKVM 镜像下载](https://github.com/sipeed/NanoKVM/releases/tag/NanoKVM)
-
+* [NanoKVM-A 原理图](https://cn.dl.sipeed.com/fileList/KVM/nanoKVM/HDK/02_Schematic/SCH_RV_Nano_KVM_A_30111.pdf)
+* [NanoKVM-B 原理图](https://cn.dl.sipeed.com/fileList/KVM/nanoKVM/HDK/02_Schematic/SCH_HDMI_MIPI_31011.pdf)
+* [NanoKVM 镜像下载](https://github.com/sipeed/NanoKVM/releases/tag/NanoKVM)

 ## 购买渠道

@@ -78,6 +109,3 @@ NanoKVM 镜像在LicheeRV Nano SDK 和 MaixCDK 基础上构建，可以兼容使

 * [MaixHub Discussion](https://maixhub.com/discussion/nanokvm)
 * QQ group: 703230713
-
-
-
--- a/kvmapp/jpg_stream/S95nanokvm
+++ b/kvmapp/jpg_stream/S95nanokvm
@@ -0,0 +1,91 @@
+#!/bin/sh
+# nanokvm Rev2.1
+
+case "$1" in
+  start)
+    echo -n kvm > /boot/hostname.prefix
+    cp /mnt/data/sensor_cfg.ini.LT /mnt/data/sensor_cfg.ini
+
+    str_value=$(cat /sys/class/cvi-base/base_uid | awk '{print $2}')
+    first_uint=$(echo $str_value | cut -d'_' -f1)
+    second_uint=$(echo $str_value | cut -d'_' -f2)
+    result="$first_uint$second_uint"
+    echo $result > /device_key
+
+    # if [ ! -e /etc/kvm/hw ]
+    # then
+
+    # fi
+
+    # echo 504 > /sys/class/gpio/export   # pwr led
+    # echo 505 > /sys/class/gpio/export   # hdd led
+    # echo 503 > /sys/class/gpio/export   # pwr key
+    # echo 507 > /sys/class/gpio/export   # rst key
+
+    # echo in > /sys/class/gpio/gpio504/direction     # pwr led
+    # echo in > /sys/class/gpio/gpio505/direction     # hdd led
+    # echo out > /sys/class/gpio/gpio503/direction    # pwr key
+    # echo out > /sys/class/gpio/gpio507/direction    # rst key
+
+    iptables -A INPUT -i eth0 -p tcp --dport 80 -m state --state NEW,ESTABLISHED -j ACCEPT
+    iptables -A OUTPUT -o eth0 -p tcp --sport 80 -m state --state ESTABLISHED -j ACCEPT
+    iptables -A OUTPUT -o eth0 -p tcp --dport 22 -m state --state NEW,ESTABLISHED -j ACCEPT
+    iptables -A INPUT -i eth0 -p tcp --sport 22 -m state --state ESTABLISHED -j ACCEPT
+    iptables -A OUTPUT -o eth0 -p tcp --sport 8000 -m state --state ESTABLISHED -j DROP
+
+    cp -r /kvmapp/kvm_system /tmp/
+    /tmp/kvm_system/kvm_system &
+
+    # if [ -e /kvmapp/kvm_stream ]
+    # then
+    #   cp -r /kvmapp/kvm_stream /tmp/
+    #   /tmp/kvm_stream/kvm_stream &
+    # fi
+    
+    cp -r /kvmapp/server /tmp/
+    /tmp/server/NanoKVM-Server &
+  ;;
+  stop)
+    killall kvm_system
+    # killall kvm_stream
+    killall NanoKVM-Server
+    rm -r /tmp/kvm_system
+    # rm -r /tmp/kvm_stream
+    rm -r /tmp/server
+    echo "OK"
+  ;;
+  # restart_stream)
+  #   killall kvm_stream
+  #   rm -r /tmp/kvm_stream
+  #   if [ -e /kvmapp/kvm_stream ]
+  #   then
+  #     cp -r /kvmapp/kvm_stream /tmp/
+  #     /tmp/kvm_stream/kvm_stream &
+  #     echo "OK"
+  #   fi
+  # ;;
+  restart)
+    killall kvm_system
+    # killall kvm_stream
+    killall NanoKVM-Server
+    rm -r /tmp/kvm_system
+    # rm -r /tmp/kvm_stream
+    rm -r /tmp/server
+    
+    cp -r /kvmapp/kvm_system /tmp/
+    /tmp/kvm_system/kvm_system &
+
+    # if [ -e /kvmapp/kvm_stream ]
+    # then
+    #   cp -r /kvmapp/kvm_stream /tmp/
+    #   /tmp/kvm_stream/kvm_stream &
+    # fi
+    
+    cp -r /kvmapp/server /tmp/
+    /tmp/server/NanoKVM-Server &
+
+    sync
+
+    echo "OK"
+  ;;
+esac
--- a/kvmapp/jpg_stream/jpg_stream
+++ b/kvmapp/jpg_stream/jpg_stream
@@ -0,0 +1,5 @@
+rm /etc/init.d/S95webkvm
+cp /kvmapp/jpg_stream/S95nanokvm /etc/init.d/
+cp /kvmapp/jpg_stream/dl_lib/libmaixcam_lib.so /kvmapp/kvm_system/dl_lib
+rm -r /kvmapp/jpg_stream
+/etc/init.d/S95nanokvm restart
--- a/kvmapp/kvm_new_app
+++ b/kvmapp/kvm_new_app
--- a/kvmapp/kvm_system/kvm_stream
+++ b/kvmapp/kvm_system/kvm_stream
--- a/kvmapp/system/init.d/S00kmod
+++ b/kvmapp/system/init.d/S00kmod
@@ -0,0 +1,32 @@
+#!/bin/sh
+
+if [ "$1" = "start" ]
+then
+	. /etc/profile
+	printf "load kernel module: "
+	cd /mnt/system/ko/
+	insmod soph_sys.ko
+	insmod soph_base.ko
+	insmod soph_rtos_cmdqu.ko
+	insmod soph_fast_image.ko
+	insmod soph_mipi_rx.ko
+	insmod soph_snsr_i2c.ko
+	insmod soph_vi.ko
+	insmod soph_vpss.ko
+	insmod soph_dwa.ko
+	insmod soph_vo.ko
+	insmod soph_rgn.ko
+	insmod soph_wdt.ko
+	insmod soph_clock_cooling.ko
+	insmod soph_tpu.ko
+	insmod soph_vcodec.ko
+	insmod soph_jpeg.ko
+	insmod soph_vc_driver.ko MaxVencChnNum=9 MaxVdecChnNum=9
+	insmod soph_rtc.ko
+	insmod soph_ive.ko
+	insmod soph_mon.ko
+	insmod soph_pwm.ko
+	insmod soph_wiegand.ko
+	echo "OK"
+	exit 0
+fi
--- a/kvmapp/system/init.d/S01fs
+++ b/kvmapp/system/init.d/S01fs
@@ -0,0 +1,42 @@
+#!/bin/sh
+
+if [ "$1" = "start" ]
+then
+                # use all sdcard free space for data
+                parted -s /dev/mmcblk0 "resizepart 2 -0"
+                echo "yes
+                8192MB
+                " | parted ---pretend-input-tty /dev/mmcblk0 "resizepart 2 8192MB"
+                # resize data filesystem
+                (resize2fs /dev/mmcblk0p2) &
+
+
+        . /etc/profile
+        printf "mounting filesystem : "
+        mkdir -p /boot
+        mount -t vfat /dev/mmcblk0p1 /boot
+        mount -t configfs configfs /sys/kernel/config
+        mount -t debugfs debugfs /sys/kernel/debug
+
+        if [ -e /boot/usb.disk0 ]
+        then
+                if [ ! -e /etc/kvm.disk0 ]
+                then
+                        touch /etc/kvm.disk0
+                        # use all sdcard free space for data
+                        parted -s /dev/mmcblk0 "mkpart primary 8193MB 100%"
+                        sleep 1
+                        # resize data filesystem
+                        (mkfs.exfat /dev/mmcblk0p3) &
+                        sleep 1
+                fi
+        fi
+
+        if [ -e /dev/mmcblk0p3 ]
+        then
+                mkdir -p /data
+                mount /dev/mmcblk0p3 /data
+        fi
+
+        echo "OK"
+fi
--- a/kvmapp/system/init.d/S03usbdev
+++ b/kvmapp/system/init.d/S03usbdev
@@ -0,0 +1,139 @@
+#!/bin/sh
+# kvmhwd Rev2.1
+
+start_usb_dev(){
+    . /etc/profile
+    echo "usb mode: device"
+    cd /sys/kernel/config/usb_gadget
+
+    mkdir g0
+    cd g0
+
+    echo 0x3346 > idVendor
+    echo 0x1009 > idProduct
+    mkdir strings/0x409
+    echo '0123456789ABCDEF' > strings/0x409/serialnumber
+    echo 'sipeed' > strings/0x409/manufacturer
+    echo 'NanoKVM' > strings/0x409/product
+
+    mkdir configs/c.1
+    echo 0xE0 > configs/c.1/bmAttributes
+    echo 120 > configs/c.1/MaxPower
+    mkdir configs/c.1/strings/0x409
+    echo "NanoKVM" >  configs/c.1/strings/0x409/configuration
+
+    if [ -e /boot/usb.ncm ]
+    then
+        mkdir functions/ncm.usb0
+        ln -s functions/ncm.usb0 configs/c.1/
+    else
+        if [ -e /boot/usb.rndis0 ]
+        then
+                mkdir functions/rndis.usb0
+                ln -s functions/rndis.usb0 configs/c.1/
+        fi
+    fi
+
+    if [ ! -e /boot/disable_hid ]
+    then
+        # keyboard
+        mkdir functions/hid.GS0
+        if [ -e /boot/BIOS ]
+        then
+            echo 1 > functions/hid.GS0/subclass
+        fi
+        if [ ! -e /boot/usb.notwakeup ]
+        then
+            echo 1 > functions/hid.GS0/wakeup_on_write
+        fi
+        echo 1 > functions/hid.GS0/protocol
+        echo 8 > functions/hid.GS0/report_length
+        echo -ne \\x05\\x01\\x09\\x06\\xa1\\x01\\x05\\x07\\x19\\xe0\\x29\\xe7\\x15\\x00\\x25\\x01\\x75\\x01\\x95\\x08\\x81\\x02\\x95\\x01\\x75\\x08\\x81\\x03\\x95\\x05\\x75\\x01\\x05\\x08\\x19\\x01\\x29\\x05\\x91\\x02\\x95\\x01\\x75\\x03\\x91\\x03\\x95\\x06\\x75\\x08\\x15\\x00\\x25\\x65\\x05\\x07\\x19\\x00\\x29\\x65\\x81\\x00\\xc0 > functions/hid.GS0/report_desc
+        ln -s functions/hid.GS0 configs/c.1
+
+        # mouse
+        mkdir functions/hid.GS1
+        if [ -e /boot/BIOS ]
+        then
+            echo 1 > functions/hid.GS1/subclass
+        fi
+        if [ ! -e /boot/usb.notwakeup ]
+        then
+            echo 1 > functions/hid.GS1/wakeup_on_write
+        fi
+        echo 2 > functions/hid.GS1/protocol
+        echo 4 > functions/hid.GS1/report_length
+        echo -ne \\x5\\x1\\x9\\x2\\xa1\\x1\\x9\\x1\\xa1\\x0\\x5\\x9\\x19\\x1\\x29\\x3\\x15\\x0\\x25\\x1\\x95\\x3\\x75\\x1\\x81\\x2\\x95\\x1\\x75\\x5\\x81\\x3\\x5\\x1\\x9\\x30\\x9\\x31\\x9\\x38\\x15\\x81\\x25\\x7f\\x75\\x8\\x95\\x3\\x81\\x6\\xc0\\xc0 > functions/hid.GS1/report_desc        
+        ln -s functions/hid.GS1 configs/c.1
+
+        # touchpad
+        mkdir functions/hid.GS2
+        if [ -e /boot/BIOS ]
+        then
+            echo 1 > functions/hid.GS2/subclass
+        fi
+        if [ ! -e /boot/usb.notwakeup ]
+        then
+            echo 1 > functions/hid.GS2/wakeup_on_write
+        fi
+        echo 2 > functions/hid.GS2/protocol
+        echo 6 > functions/hid.GS2/report_length
+        echo -ne \\x05\\x01\\x09\\x02\\xa1\\x01\\x09\\x01\\xa1\\x00\\x05\\x09\\x19\\x01\\x29\\x03\\x15\\x00\\x25\\x01\\x95\\x03\\x75\\x01\\x81\\x02\\x95\\x01\\x75\\x05\\x81\\x01\\x05\\x01\\x09\\x30\\x09\\x31\\x15\\x00\\x26\\xff\\x7f\\x35\\x00\\x46\\xff\\x7f\\x75\\x10\\x95\\x02\\x81\\x02\\x05\\x01\\x09\\x38\\x15\\x81\\x25\\x7f\\x35\\x00\\x45\\x00\\x75\\x08\\x95\\x01\\x81\\x06\\xc0\\xc0 > functions/hid.GS2/report_desc
+        ln -s functions/hid.GS2 configs/c.1
+    fi
+
+    if [ -e /boot/usb.disk0 ]
+    then
+            mkdir functions/mass_storage.disk0
+            ln -s functions/mass_storage.disk0 configs/c.1/
+            echo 1 > functions/mass_storage.disk0/lun.0/removable
+            if [ -e /boot/usb.disk0.ro ]
+            then
+                    echo 1 > functions/mass_storage.disk0/lun.0/ro
+                    echo 0 > functions/mass_storage.disk0/lun.0/cdrom
+            fi
+            disk=$(cat /boot/usb.disk0)
+            if [ -z "${disk}" ]
+            then
+                    # if [ ! -e /mnt/usbdisk.img ]
+                    # then
+                    #         fallocate -l 8G /mnt/usbdisk.img
+                    #         mkfs.vfat /mnt/usbdisk.img
+                    # fi
+                    echo /dev/mmcblk0p3 > functions/mass_storage.disk0/lun.0/file
+            else
+                    cat /boot/usb.disk0 > functions/mass_storage.disk0/lun.0/file
+            fi
+    fi
+
+    ls /sys/class/udc/ | cat > UDC
+    echo device > /proc/cviusb/otg_role
+}
+
+start_usb_host(){
+    echo '' > /sys/kernel/config/usb_gadget/g0/UDC
+    echo host > /proc/cviusb/otg_role
+}
+
+restart_usb_dev(){
+    echo > /sys/kernel/config/usb_gadget/g0/UDC
+    sleep 1
+    ls /sys/class/udc/ | cat > /sys/kernel/config/usb_gadget/g0/UDC
+    echo "USB Restart OK!"
+}
+
+case "$1" in
+  start)
+    start_usb_dev
+  ;;
+  restart)
+    restart_usb_dev
+  ;;
+  stop)
+    start_usb_host
+  ;;
+  stop_start)
+    start_usb_host
+    start_usb_dev
+  ;;
+esac
--- a/kvmapp/system/init.d/S03usbhid
+++ b/kvmapp/system/init.d/S03usbhid
@@ -0,0 +1,93 @@
+#!/bin/sh
+# kvmhwd hid only
+
+start_usb_dev(){
+    . /etc/profile
+    echo "usb mode: device"
+    cd /sys/kernel/config/usb_gadget
+
+    mkdir g0
+    cd g0
+
+    echo 0x0101 > bcdUSB
+    echo 0x0623 > bcdDevice
+    echo 0x3346 > idVendor
+    echo 0x1009 > idProduct
+    mkdir strings/0x409
+    # echo '0' > strings/0x409/serialnumber
+    echo 'sipeed' > strings/0x409/manufacturer
+    echo 'NanoKVM' > strings/0x409/product
+
+    mkdir configs/c.1
+    echo 0xA0 > configs/c.1/bmAttributes
+    echo 200 > configs/c.1/MaxPower
+    mkdir configs/c.1/strings/0x409
+    echo "NanoKVM" >  configs/c.1/strings/0x409/configuration
+
+    # keyboard
+    mkdir functions/hid.GS0
+    echo 1 > functions/hid.GS0/subclass
+    if [ ! -e /boot/usb.notwakeup ]
+    then
+        echo 1 > functions/hid.GS0/wakeup_on_write
+    fi
+    echo 1 > functions/hid.GS0/protocol
+    echo 8 > functions/hid.GS0/report_length
+    echo -ne \\x05\\x01\\x09\\x06\\xa1\\x01\\x05\\x07\\x19\\xe0\\x29\\xe7\\x15\\x00\\x25\\x01\\x75\\x01\\x95\\x08\\x81\\x02\\x95\\x01\\x75\\x08\\x81\\x03\\x95\\x05\\x75\\x01\\x05\\x08\\x19\\x01\\x29\\x05\\x91\\x02\\x95\\x01\\x75\\x03\\x91\\x03\\x95\\x06\\x75\\x08\\x15\\x00\\x25\\x65\\x05\\x07\\x19\\x00\\x29\\x65\\x81\\x00\\xc0 > functions/hid.GS0/report_desc
+    ln -s functions/hid.GS0 configs/c.1
+
+    # mouse
+    mkdir functions/hid.GS1
+    echo 1 > functions/hid.GS1/subclass
+    if [ ! -e /boot/usb.notwakeup ]
+    then
+        echo 1 > functions/hid.GS1/wakeup_on_write
+    fi
+    echo 2 > functions/hid.GS1/protocol
+    echo 4 > functions/hid.GS1/report_length
+    echo -ne \\x5\\x1\\x9\\x2\\xa1\\x1\\x9\\x1\\xa1\\x0\\x5\\x9\\x19\\x1\\x29\\x3\\x15\\x0\\x25\\x1\\x95\\x3\\x75\\x1\\x81\\x2\\x95\\x1\\x75\\x5\\x81\\x3\\x5\\x1\\x9\\x30\\x9\\x31\\x9\\x38\\x15\\x81\\x25\\x7f\\x75\\x8\\x95\\x3\\x81\\x6\\xc0\\xc0 > functions/hid.GS1/report_desc        
+    ln -s functions/hid.GS1 configs/c.1
+
+    # touchpad
+    mkdir functions/hid.GS2
+    echo 1 > functions/hid.GS2/subclass
+    if [ ! -e /boot/usb.notwakeup ]
+    then
+        echo 1 > functions/hid.GS2/wakeup_on_write
+    fi
+    echo 2 > functions/hid.GS2/protocol
+    echo 6 > functions/hid.GS2/report_length
+    echo -ne \\x05\\x01\\x09\\x02\\xa1\\x01\\x09\\x01\\xa1\\x00\\x05\\x09\\x19\\x01\\x29\\x03\\x15\\x00\\x25\\x01\\x95\\x03\\x75\\x01\\x81\\x02\\x95\\x01\\x75\\x05\\x81\\x01\\x05\\x01\\x09\\x30\\x09\\x31\\x15\\x00\\x26\\xff\\x7f\\x35\\x00\\x46\\xff\\x7f\\x75\\x10\\x95\\x02\\x81\\x02\\x05\\x01\\x09\\x38\\x15\\x81\\x25\\x7f\\x35\\x00\\x45\\x00\\x75\\x08\\x95\\x01\\x81\\x06\\xc0\\xc0 > functions/hid.GS2/report_desc
+    ln -s functions/hid.GS2 configs/c.1
+
+    ls /sys/class/udc/ | cat > UDC
+    echo device > /proc/cviusb/otg_role
+}
+
+start_usb_host(){
+    echo '' > /sys/kernel/config/usb_gadget/g0/UDC
+    echo host > /proc/cviusb/otg_role
+}
+
+restart_usb_dev(){
+    echo > /sys/kernel/config/usb_gadget/g0/UDC
+    sleep 1
+    ls /sys/class/udc/ | cat > /sys/kernel/config/usb_gadget/g0/UDC
+    echo "USB Restart OK!"
+}
+
+case "$1" in
+  start)
+    start_usb_dev
+  ;;
+  restart)
+    restart_usb_dev
+  ;;
+  stop)
+    start_usb_host
+  ;;
+  stop_start)
+    start_usb_host
+    start_usb_dev
+  ;;
+esac
--- a/kvmapp/system/init.d/S15kvmhwd
+++ b/kvmapp/system/init.d/S15kvmhwd
@@ -0,0 +1,234 @@
+#!/bin/sh
+# kvmhwd Rev2.4
+
+Alpha_OLED_RST_Pin=371
+Beta_OLED_RST_Pin=502
+Beta_OLED_SCL=595
+Beta_OLED_SDA=507
+WiFi_EN_Pin=506
+Alpha_PWR_LED_Pin=504
+Alpha_HDD_LED_Pin=505
+Alpha_PWR_KEY_Pin=503
+Alpha_RST_KEY_Pin=507
+Beta_PWR_LED_Pin=504
+Beta_PWR_KEY_Pin=503
+Beta_RST_KEY_Pin=505
+PCIe_HDMI_RST_Pin=451
+
+init_alpha_hw(){
+  devmem 0x030010D0 32 0x2  # I2C1_SCL
+  devmem 0x030010DC 32 0x2  # I2C1_SDA
+  devmem 0x030010D4 32 0x3  # OLED_RST
+  devmem 0x0300103C 32 0x3  # GPIOA15
+  devmem 0x03001050 32 0x3  # GPIOA22
+  devmem 0x0300105C 32 0x3  # GPIOA23
+  devmem 0x03001060 32 0x3  # GPIOA24
+  devmem 0x03001054 32 0x3  # GPIOA25
+  devmem 0x03001058 32 0x3  # GPIOA27
+  
+	devmem 0x03001068 32 0x6  # GPIOA 18 UART1 RX
+	devmem 0x03001064 32 0x6  # GPIOA 19 UART1 TX
+	devmem 0x03001070 32 0x2  # GPIOA 28 UART2 TX
+	devmem 0x03001074 32 0x2  # GPIOA 29 UART2 RX
+
+  echo ${Alpha_OLED_RST_Pin} > /sys/class/gpio/export  # OLED_RST
+  echo out > /sys/class/gpio/gpio${Alpha_OLED_RST_Pin}/direction
+  echo 1 > /sys/class/gpio/gpio${Alpha_OLED_RST_Pin}/value
+
+  echo ${Alpha_PWR_LED_Pin} > /sys/class/gpio/export   # pwr led
+  echo ${Alpha_HDD_LED_Pin} > /sys/class/gpio/export   # hdd led
+  echo ${Alpha_PWR_KEY_Pin} > /sys/class/gpio/export   # pwr key
+  echo ${Alpha_RST_KEY_Pin} > /sys/class/gpio/export   # rst key
+
+  echo in > /sys/class/gpio/gpio${Alpha_PWR_LED_Pin}/direction     # pwr led
+  echo in > /sys/class/gpio/gpio${Alpha_HDD_LED_Pin}/direction     # hdd led
+  echo out > /sys/class/gpio/gpio${Alpha_PWR_KEY_Pin}/direction    # pwr key
+  echo out > /sys/class/gpio/gpio${Alpha_RST_KEY_Pin}/direction    # rst key
+
+  rmmod /mnt/system/ko/i2c-gpio.ko
+  rmmod /mnt/system/ko/i2c-algo-bit.ko
+
+  # rm /etc/init.d/S25wifimod
+  # rm /etc/init.d/S30wifi
+}
+
+init_beta_pcie_hw(){
+  devmem 0x0300103C 32 0x3  # GPIOA15
+  devmem 0x03001050 32 0x3  # GPIOA22
+  devmem 0x0300105C 32 0x3  # GPIOA23
+  devmem 0x03001060 32 0x3  # GPIOA24
+  devmem 0x03001054 32 0x3  # GPIOA25
+  devmem 0x03001058 32 0x3  # GPIOA27
+
+  devmem 0x030010E4 32 0x0  # SDIO CLK
+  devmem 0x030010E0 32 0x0  # SDIO CMD
+  devmem 0x030010DC 32 0x0  # SDIO D0
+  devmem 0x030010D8 32 0x0  # SDIO D1
+  devmem 0x030010D4 32 0x0  # SDIO D2
+  devmem 0x030010D0 32 0x0  # SDIO D3
+
+	devmem 0x03001068 32 0x6  # GPIOA 18 UART1 RX
+	devmem 0x03001064 32 0x6  # GPIOA 19 UART1 TX
+	devmem 0x03001070 32 0x2  # GPIOA 28 UART2 TX
+	devmem 0x03001074 32 0x2  # GPIOA 29 UART2 RX
+
+  echo ${Beta_OLED_RST_Pin} > /sys/class/gpio/export  # Beta OLED_RST
+  echo out > /sys/class/gpio/gpio${Beta_OLED_RST_Pin}/direction
+  echo 1 > /sys/class/gpio/gpio${Beta_OLED_RST_Pin}/value
+
+  echo ${Beta_PWR_LED_Pin} > /sys/class/gpio/export   # pwr led
+  echo ${Beta_PWR_KEY_Pin} > /sys/class/gpio/export   # pwr key
+  echo ${Beta_RST_KEY_Pin} > /sys/class/gpio/export   # rst key
+  echo ${PCIe_HDMI_RST_Pin} > /sys/class/gpio/export   # hdmi rst key
+
+  echo in > /sys/class/gpio/gpio${Beta_PWR_LED_Pin}/direction     # pwr led
+  echo out > /sys/class/gpio/gpio${Beta_PWR_KEY_Pin}/direction    # pwr key
+  echo out > /sys/class/gpio/gpio${Beta_RST_KEY_Pin}/direction    # rst key
+  echo out > /sys/class/gpio/gpio${PCIe_HDMI_RST_Pin}/direction    # rst key
+
+  echo 1 > /sys/class/gpio/gpio${PCIe_HDMI_RST_Pin}/value    # rst key
+
+  rmmod /mnt/system/ko/i2c-gpio.ko
+  rmmod /mnt/system/ko/i2c-algo-bit.ko
+  insmod /mnt/system/ko/i2c-algo-bit.ko
+  insmod /mnt/system/ko/i2c-gpio.ko
+}
+
+kvm_hw_detect(){
+  if [ ! -e /etc/kvm/hdmi_version ]
+  then
+    rm /etc/kvm/hw
+  fi
+  if [ -e /etc/kvm/hw ]
+  then
+    echo "/etc/kvm/hw exist"
+  else
+    echo "/etc/kvm/hw not exist"
+    if [ -d "/etc/kvm/" ]
+    then
+      echo "/etc/kvm/ exist"
+    else
+      mkdir /etc/kvm/
+    fi
+    devmem 0x0300104C 32 0x3  # GPIOA26 / WiFi_EN
+    echo ${WiFi_EN_Pin} > /sys/class/gpio/export  # WiFi_EN
+    echo out > /sys/class/gpio/gpio${WiFi_EN_Pin}/direction
+    echo 0 > /sys/class/gpio/gpio${WiFi_EN_Pin}/value
+
+    devmem 0x0300103C 32 0x3  # GPIOA15
+    devmem 0x03001050 32 0x3  # GPIOA22
+    devmem 0x0300105C 32 0x3  # GPIOA23
+    devmem 0x03001060 32 0x3  # GPIOA24
+    devmem 0x03001054 32 0x3  # GPIOA25
+    devmem 0x03001058 32 0x3  # GPIOA27
+
+    devmem 0x030010D0 32 0x2  # I2C1_SCL
+    devmem 0x030010DC 32 0x2  # I2C1_SDA
+    devmem 0x030010D4 32 0x3  # OLED_RST
+    echo ${Alpha_OLED_RST_Pin} > /sys/class/gpio/export  # OLED_RST
+    echo out > /sys/class/gpio/gpio${Alpha_OLED_RST_Pin}/direction
+    echo 1 > /sys/class/gpio/gpio${Alpha_OLED_RST_Pin}/value
+
+    kvm_tmp=$(i2cdetect -ry 1 0x3d 0x3d | grep 3d)
+    if [ -n "$kvm_tmp" ]
+    then
+      # alpha hw
+      echo "alpha" > /etc/kvm/hw
+    else
+      # beta/pcie hw
+      echo ${Alpha_OLED_RST_Pin} > /sys/class/gpio/unexport  # OLED_RST
+      echo ${Beta_OLED_RST_Pin} > /sys/class/gpio/export  # Beta_OLED_RST_Pin
+      echo out > /sys/class/gpio/gpio${Beta_OLED_RST_Pin}/direction
+      echo 1 > /sys/class/gpio/gpio${Beta_OLED_RST_Pin}/value
+
+      rmmod /mnt/system/ko/i2c-gpio.ko
+      rmmod /mnt/system/ko/i2c-algo-bit.ko
+      insmod /mnt/system/ko/i2c-algo-bit.ko
+      insmod /mnt/system/ko/i2c-gpio.ko
+
+      kvm_tmp=$(i2cdetect -ry 4 0x2c 0x2c | grep 2c)
+      if [ -n "$kvm_tmp" ]
+      then
+        echo "c" > /etc/kvm/hdmi_version
+      else
+        kvm_tmp1=$(i2cdetect -ry 4 0x2b 0x2b | grep 2b)
+        if [ -n "$kvm_tmp1" ]
+        then
+          echo "ux" > /etc/kvm/hdmi_version
+        else
+          echo "ue" > /etc/kvm/hdmi_version
+        fi
+      fi
+
+      kvm_tmp=$(i2cdetect -ry 5 0x3c 0x3c | grep 3c)
+      if [ -n "$kvm_tmp" ]
+      then
+        echo "pcie" > /etc/kvm/hw
+        sync
+        reboot
+      else
+        echo "beta" > /etc/kvm/hw
+        # rm /etc/init.d/S25wifimod
+        # rm /etc/init.d/S30wifi
+        sync
+      fi
+
+      echo 1 > /sys/class/gpio/gpio${WiFi_EN_Pin}/value
+      echo ${WiFi_EN_Pin} > /sys/class/gpio/unexport  # WiFi_EN
+    fi
+  fi
+  sync
+}
+
+kvm_hw_init(){
+    FIND_FILE="/etc/kvm/hw"
+    if [ `grep -c "alpha" $FIND_FILE` -ne '0' ]
+    then
+        echo "hw = alpha!"
+        init_alpha_hw
+    fi
+    if [ `grep -c "beta" $FIND_FILE` -ne '0' ]
+    then
+        echo "hw = beta!"
+        init_beta_pcie_hw
+    fi
+    if [ `grep -c "pcie" $FIND_FILE` -ne '0' ]
+    then
+        echo "hw = pcie!"
+        init_beta_pcie_hw
+    fi
+}
+
+kvm_hdmi_version_detect(){
+  hdmi_tmp=$(i2cdetect -ry 4 0x2c 0x2c | grep 2c)
+  if [ -n "$hdmi_tmp" ]
+  then
+    echo "c" > /etc/kvm/hdmi_version
+  else
+    hdmi_tmp1=$(i2cdetect -ry 4 0x2b 0x2b | grep 2b)
+    if [ -n "$hdmi_tmp1" ]
+    then
+      echo "ux" > /etc/kvm/hdmi_version
+    else
+      echo "ue" > /etc/kvm/hdmi_version
+    fi
+  fi
+}
+
+case "$1" in
+  start)
+    kvm_hw_detect
+    kvm_hw_init
+  ;;
+  re-detect)
+    rm /etc/kvm/hw
+    kvm_hw_detect
+    kvm_hw_init
+  ;;
+  re-init)
+    kvm_hw_init
+  ;;
+  get_hdmi_version)
+    kvm_hdmi_version_detect
+  ;;
+esac
--- a/kvmapp/system/init.d/S30eth
+++ b/kvmapp/system/init.d/S30eth
@@ -0,0 +1,119 @@
+#!/bin/sh
+
+. /etc/profile
+
+# /boot/eth.nodhcp for example
+# ipaddr/net        gw[optional]
+# 192.168.0.101/24 192.168.0.1
+# 192.168.3.116/22  
+
+RESERVE_INET="192.168.0.1/24"
+
+start() {
+    printf "start ethernet: "
+    if [ -e /boot/eth.nodhcp ] 
+    then
+        [ -e /boot/eth.nodhcp ] &&
+            cat /boot/eth.nodhcp | while read inet gw
+            do
+                addr=${inet%/*}
+                netid=${inet#*/}
+                [ -z $gw ] &&
+                gw=$( echo $addr| ( IFS='.' read a b c d; echo $((
+                    (((((($a<<8)+$b)<<8)+$c)<<8)+$d)
+                        & (((1<<$netid)-1)<<(32-$netid))
+                    ))
+                )) &&
+                gw=$(($gw>>24&0xff)).$(($gw>>16&0xff)).$(($gw>>8&0xff)).$((1+( $gw>>0&0xff )))
+
+                arping -Dqc2 -Ieth0 $addr || continue
+                ip a add $inet brd + dev eth0
+                ip r add default via $gw dev eth0
+                cp -f /etc/resolv.conf /etc/resolv.conf.old
+                cat > /etc/resolv.conf << EOF
+nameserver $gw
+nameserver 8.8.4.4
+nameserver 8.8.8.8
+nameserver 114.114.114.114
+nameserver 119.29.29.29
+nameserver 223.5.5.5
+EOF
+                break
+            done &&
+            ip a show dev eth0|grep inet || (
+                udhcpc -i eth0 -t 3 -T 1 -A 5 -b -p /run/udhcpc.eth0.pid &>/dev/null
+                ip a show dev eth0|grep inet
+            ) || (
+                # failed to apply dynamic addr, need a available static addr to visit the LAN 
+                inet=$RESERVE_INET
+                addr=${inet%/*}
+                ip a add $inet brd + dev eth0
+            ) || exit 1
+    else
+        (udhcpc -i eth0 -t 10 -T 1 -A 5 -b -p /run/udhcpc.eth0.pid) &
+    fi
+
+    echo "OK"
+}
+stop() {
+    [[ ! -e "/run/udhcpc.eth0.pid" ]] && echo "udhcpc is not running..." && exit 1
+    kill `cat /run/udhcpc.eth0.pid`
+    rm /run/udhcpc.eth0.pid
+}
+
+case "$1" in
+        start)
+                start
+                ;;
+        stop)
+                stop
+                ;;
+        restart|reload)
+                $0 stop
+                $0 start
+                ;;
+        doc)
+                cat <<EOF
+If you want to set your own static ip address
+    rather then fetch it by dhcp.
+Then you need to create a file \`/boot/eth.nodhcp\`,
+    and edit it following the format below:
+    \`addr/netid        gw[optional]\` in one line
+    for example (support muti definations, checks with arp):
+    1. 192.168.0.101/24 192.168.0.1
+    2. 192.168.3.116/22
+Delete this file if you change to use dhcp default.
+ATTENTION: If all the STATIC address you set in the file is
+    already in use on this LAN checked with arp, then none
+    of them will be yours. And it will trigger dhcp, try to 
+    fetch DYNAMIC one. If it's also failed, your address will 
+    be the REVERSE one, 192.168.0.1/24. Just to be sure that
+    you can visit your NanoKVM device through eth to fix some
+    problems by ssh, unless you must disassemble it and modify
+    or rewrite the TFCard once again.
+EOF
+                echo ""
+                cat <<EOF
+如果您想自行设置静态 ip 地址而不是使用 dhcp 来获取它。
+
+那么您需要新建一个文件 \`/boot/eth.nodhcp\`，然后按照以下格式编辑它：
+    \`addr/netid        gw[optional]\` 在一行内
+示例（支持多个预设，会通过 arp 检查是否占用）：
+    1. 192.168.0.101/24 192.168.0.1
+    2. 192.168.3.116/22
+
+如果您想改回默认 dhcp 获取 ip 地址的方式，删除该文件后即可恢复。
+
+注意：如果您预设的所有静态 ip 地址都被 arp 检测到已占用，则不会成功设置。
+    此时会触发 dhcp 尝试获取 ip 地址，如果仍失败，那么最终会强制设置成
+    192.168.90.1/24。这是为了保证您的 NanoKVM 设备总是能有一个可用的
+    ip 地址，方便您通过局域网 ssh 连接设备进行一些修复，否则您可能需要
+    拆开外壳以手动修改 TF 卡或重新烧卡。
+
+
+EOF
+                ;;
+        *)
+                echo "Usage: $0 {start|stop|restart}"
+                exit 1
+esac
--- a/kvmapp/system/init.d/S30wifi
+++ b/kvmapp/system/init.d/S30wifi
@@ -0,0 +1,175 @@
+#!/bin/sh
+
+. /etc/profile
+
+gen_hostapd_conf() {
+	ssid="${1}"
+	pass="${2}"
+	echo "ctrl_interface=/var/run/hostapd"
+	echo "ctrl_interface_group=0"
+	echo "ssid=${ssid}"
+	echo "hw_mode=g"
+	echo "channel=1"
+	echo "beacon_int=100"
+	echo "dtim_period=2"
+	echo "max_num_sta=255"
+	echo "rts_threshold=-1"
+	echo "fragm_threshold=-1"
+	echo "macaddr_acl=0"
+	echo "auth_algs=3"
+	echo "wpa=2"
+	echo "wpa_passphrase=${pass}"
+	echo "ieee80211n=1"
+}
+
+gen_udhcpd_conf() {
+    interface=${1}
+    ipv4_prefix=${2}
+    echo "start ${ipv4_prefix}.100"
+    echo "end ${ipv4_prefix}.200"
+    echo "interface ${interface}"
+    echo "pidfile /var/run/udhcpd.${interface}.pid"
+    echo "lease_file /var/lib/misc/udhcpd.${interface}.leases"
+    echo "option subnet 255.255.255.0"
+    echo "option lease 864000"
+}
+
+gen_dnsmasq_conf() {
+    ipv4_prefix=${1}
+    echo "bind-interfaces"
+    echo "interface=wlan0"
+    echo "address=/config.kvm/${ipv4_prefix}.1"
+    echo "no-hosts"
+    echo "dhcp-range=${ipv4_prefix}.2,${ipv4_prefix}.254"
+    echo "dhcp-option=6,${ipv4_prefix}.1"
+    echo "dhcp-option=3,${ipv4_prefix}.1"
+    echo "dhcp-authoritative"
+}
+
+start() {
+    echo "wifi mode: sta"
+    ssid=""
+    pass=""
+    if [ -e /boot/wifi.ssid ] && [ -e /boot/wifi.pass ]; then
+        echo "Updating WiFi credentials from /boot to /etc/kvm/"
+
+        rm -f /etc/kvm/wifi.ssid /etc/kvm/wifi.pass
+
+        mv /boot/wifi.ssid /etc/kvm/wifi.ssid
+        mv /boot/wifi.pass /etc/kvm/wifi.pass
+
+        chown root:root /etc/kvm/wifi.ssid /etc/kvm/wifi.pass
+        chmod 644 /etc/kvm/wifi.ssid /etc/kvm/wifi.pass
+    fi
+    if [ -e /etc/kvm/wifi.ssid ]
+    then
+        ssid=`cat /etc/kvm/wifi.ssid`
+    fi
+    if [ -e /etc/kvm/wifi.pass ]
+    then
+        pass=`cat /etc/kvm/wifi.pass`
+    fi
+    echo "ctrl_interface=/var/run/wpa_supplicant" > /etc/wpa_supplicant.conf
+    wpa_passphrase "$ssid" "$pass" >> /etc/wpa_supplicant.conf
+    wpa_supplicant -B -i wlan0 -c /etc/wpa_supplicant.conf
+    if [ ! -e /boot/wifi.nodhcp ]
+    then
+        (udhcpc -i wlan0 -t 10 -T 1 -A 5 -b -p /run/udhcpc.wlan0.pid) &
+    fi
+}
+
+ap_start() {
+    echo "wifi mode: ap"
+    id2=$(printf "%d" 0x$(sha512sum /sys/class/cvi-base/base_uid | head -c 2))
+    id3=$(printf "%d" 0x$(sha512sum /sys/class/cvi-base/base_uid | head -c 4 | tail -c 2))
+    if [ "$id2" = "$id3" ]
+    then
+        id2=$((id2 + 1))
+    fi
+    if [ "$id2" -ge 255 ]
+    then
+        id2=253
+    fi
+    if [ "$id3" -ge 255 ]
+    then
+        id3=254
+    fi
+    ssid=""
+    pass=""
+    if [ -e /kvmapp/kvm/ap.ssid ]
+    then
+        ssid=`cat /kvmapp/kvm/ap.ssid`
+    fi
+    if [ -e /kvmapp/kvm/ap.pass ]
+    then
+        pass=`cat /kvmapp/kvm/ap.pass`
+    fi
+    gen_hostapd_conf "$ssid" "$pass" > /etc/hostapd.conf
+    ipv4_prefix=10.$id3.$id2
+    if [ ! -e /etc/udhcpd.wlan0.conf ]
+    then
+        gen_udhcpd_conf wlan0 "${ipv4_prefix}"  > /etc/udhcpd.wlan0.conf
+    fi
+    # gen_dnsmasq_conf "${ipv4_prefix}"  > /etc/dnsmasq.conf
+
+    # iptables --policy INPUT ACCEPT
+    # iptables --policy FORWARD ACCEPT
+    # iptables --policy OUTPUT ACCEPT
+    # iptables -F
+    # iptables -t nat -F
+    # iptables -t nat -A PREROUTING -i wlan0 -p udp --dport 53 -j DNAT --to ${ipv4_prefix}.1
+
+    ifconfig wlan0 up
+    ip route del default || true
+    ip add flush dev wlan0
+    ip addr add $ipv4_prefix.1/24 dev wlan0
+    # dnsmasq --pid-file=/tmp/dnsmasq.run -C /etc/dnsmasq.conf
+    hostapd -B -i wlan0 /etc/hostapd.conf
+    udhcpd -S /etc/udhcpd.wlan0.conf
+}
+
+stop() {
+	ps -ef|grep hostapd|grep -v grep|awk '{print $1}'|xargs kill -2 || true
+	ps -ef|grep "udhcpd -S /etc/udhcpd.wlan0.conf" |grep -v grep|awk '{print $1}'|xargs kill -2 || true
+	killall wpa_supplicant || true
+	if [ -e /run/udhcpc.wlan0.pid ]
+	then
+		kill `cat /run/udhcpc.wlan0.pid` || true
+		rm -f /run/udhcpc.wlan0.pid
+	fi
+	if [ -e /var/run/udhcpd.wlan0.pid ]
+	then
+		kill `cat /var/run/udhcpd.wlan0.pid`  || true
+		rm -f /var/run/udhcpd.wlan0.pid
+	fi
+	if [ -e /tmp/dnsmasq.run ]
+	then
+		kill `cat /tmp/dnsmasq.run`  || true
+		rm -f /tmp/dnsmasq.run
+	fi
+	# if [ -e /etc/wpa_supplicant.conf]
+	# then
+	# 	echo > /etc/wpa_supplicant.conf
+	# fi
+	airmon-ng stop wlan0mon || true
+}
+
+restart() {
+	stop
+	start
+}
+
+if [ "${1}" = "start" ]
+then
+	start
+elif [ "${1}" = "stop" ]
+then
+	stop
+elif [ "${1}" = "ap" ]
+then
+    stop
+	ap_start
+elif [ "${1}" = "restart" ]
+then
+	restart
+fi
--- a/kvmapp/system/init.d/S50avahi-daemon
+++ b/kvmapp/system/init.d/S50avahi-daemon
@@ -0,0 +1,20 @@
+#!/bin/sh
+#
+# avahi-daemon init script
+
+DAEMON=/usr/sbin/avahi-daemon
+case "$1" in
+    start)
+	$DAEMON -c || $DAEMON -D
+	;;
+    stop)
+	$DAEMON -c && $DAEMON -k
+	;;
+    reload)
+	$DAEMON -c && $DAEMON -r
+	;;
+    *)
+	echo "Usage: S50avahi-daemon {start|stop|reload}" >&2
+	exit 1
+	;;
+esac
--- a/kvmapp/system/init.d/S50ssdpd
+++ b/kvmapp/system/init.d/S50ssdpd
@@ -0,0 +1,49 @@
+#!/bin/sh
+
+DAEMON=ssdpd
+PIDFILE=/var/run/$DAEMON.pid
+CFGFILE=/etc/default/$DAEMON
+
+DAEMON_ARGS=""
+
+# Read configuration variable file if it is present
+# shellcheck source=/dev/null
+[ -r "$CFGFILE" ] && . "$CFGFILE"
+
+# shellcheck disable=SC2086
+start() {
+        printf 'Starting %s: ' "$DAEMON"
+        if start-stop-daemon -S -q -p "$PIDFILE" -x "$DAEMON" -- $DAEMON_ARGS; then
+                echo "OK"
+        else
+                echo "FAIL"
+        fi
+}
+
+stop() {
+        printf 'Stopping %s: ' "$DAEMON"
+        if start-stop-daemon -K -q -p "$PIDFILE" -x "$DAEMON"; then
+                echo "OK"
+        else
+                echo "FAIL"
+        fi
+}
+
+restart() {
+        stop
+        start
+}
+
+case "$1" in
+        start|stop|restart)
+                "$1"
+                ;;
+        reload)
+                restart
+                ;;
+        *)
+                echo "Usage: $0 {start|stop|restart|reload}"
+                exit 1
+esac
+
+exit $?
--- a/kvmapp/system/init.d/S50sshd
+++ b/kvmapp/system/init.d/S50sshd
@@ -0,0 +1,73 @@
+#!/bin/sh
+#
+# sshd        Starts sshd.
+#
+
+# Ensure required binaries exist
+[ -x /usr/bin/ssh-keygen ] || exit 0
+[ -x /usr/sbin/sshd ] || exit 1
+
+PIDFILE="/var/run/sshd.pid"
+
+umask 077
+
+startssh() {
+    # Generate SSH keys if they do not exist
+    [ ! -f /etc/ssh/ssh_host_rsa_key ] && /usr/bin/ssh-keygen -A
+
+        printf "Starting sshd: "
+        /usr/sbin/sshd
+        touch /var/lock/sshd
+        echo "OK"
+}
+
+start() {
+    if [ -e /etc/kvm/ssh_stop ]; then
+        if [ -e /boot/start_ssh_once ]; then
+            rm -f /boot/start_ssh_once
+            startssh
+        else
+            echo "SSH does not start"
+            exit 0
+        fi
+    else
+        startssh
+    fi
+}
+
+stop() {
+        printf "Stopping sshd: "
+        killall sshd 2>/dev/null
+        rm -f /var/lock/sshd
+        echo "OK"
+}
+
+restart() {
+        stop
+        start
+}
+
+case "$1" in
+    start)
+        start
+        ;;
+    stop)
+        stop
+        ;;
+    restart|reload)
+        restart
+        ;;
+    permanent_on)
+        rm -f /etc/kvm/ssh_stop
+        start
+        ;;
+    permanent_off)
+        touch /etc/kvm/ssh_stop
+        stop
+        ;;
+    *)
+        echo "Usage: $0 {start|stop|restart|permanent_on|permanent_off}"
+        exit 1
+esac
+
+exit 0
--- a/kvmapp/system/init.d/S80dnsmasq
+++ b/kvmapp/system/init.d/S80dnsmasq
@@ -0,0 +1,29 @@
+#!/bin/sh
+
+DAEMON="dnsmasq"
+PIDFILE="/var/run/$DAEMON.pid"
+
+[ -f /etc/dnsmasq.conf ] || exit 0
+
+case "$1" in
+	start)
+		printf "Starting dnsmasq: "
+		start-stop-daemon -S -p "$PIDFILE" -x "/usr/sbin/$DAEMON" -- \
+			--pid-file="$PIDFILE"
+		[ $? = 0 ] && echo "OK" || echo "FAIL"
+		;;
+	stop)
+		printf "Stopping dnsmasq: "
+		start-stop-daemon -K -q -p "$PIDFILE" -x "/usr/sbin/$DAEMON"
+		[ $? = 0 ] && echo "OK" || echo "FAIL"
+		;;
+	restart|reload)
+		$0 stop
+		$0 start
+		;;
+	*)
+		echo "Usage: $0 {start|stop|restart}"
+		exit 1
+esac
+
+exit 0
--- a/kvmapp/system/init.d/S95nanokvm
+++ b/kvmapp/system/init.d/S95nanokvm
@@ -0,0 +1,69 @@
+#!/bin/sh
+# nanokvm Rev3.1
+
+case "$1" in
+  start)
+    echo -n kvm > /boot/hostname.prefix
+
+    # Copy sensor config if the file exists
+    [ -f /mnt/data/sensor_cfg.ini.LT ] && cp /mnt/data/sensor_cfg.ini.LT /mnt/data/sensor_cfg.ini
+
+    # Generate unique device key
+    if [ -f /sys/class/cvi-base/base_uid ]; then
+        str_value=$(awk '{print $2}' /sys/class/cvi-base/base_uid)
+        first_uint=$(echo "$str_value" | cut -d'_' -f1)
+        second_uint=$(echo "$str_value" | cut -d'_' -f2)
+        echo "$first_uint$second_uint" > /device_key
+    fi
+
+    # Set iptables rules (skip if already present)
+    iptables -C INPUT -i eth0 -p tcp --dport 80 -m state --state NEW,ESTABLISHED -j ACCEPT 2>/dev/null || \
+    iptables -A INPUT -i eth0 -p tcp --dport 80 -m state --state NEW,ESTABLISHED -j ACCEPT
+
+    iptables -C OUTPUT -o eth0 -p tcp --sport 80 -m state --state ESTABLISHED -j ACCEPT 2>/dev/null || \
+    iptables -A OUTPUT -o eth0 -p tcp --sport 80 -m state --state ESTABLISHED -j ACCEPT
+
+    iptables -C INPUT -i eth0 -p tcp --sport 22 -m state --state NEW,ESTABLISHED -j ACCEPT 2>/dev/null || \
+    iptables -A INPUT -i eth0 -p tcp --sport 22 -m state --state NEW,ESTABLISHED -j ACCEPT
+
+    iptables -C OUTPUT -o eth0 -p tcp --dport 22 -m state --state ESTABLISHED -j ACCEPT 2>/dev/null || \
+    iptables -A OUTPUT -o eth0 -p tcp --dport 22 -m state --state ESTABLISHED -j ACCEPT
+
+    iptables -C OUTPUT -o eth0 -p tcp --sport 8000 -m state --state ESTABLISHED -j DROP 2>/dev/null || \
+    iptables -A OUTPUT -o eth0 -p tcp --sport 8000 -m state --state ESTABLISHED -j DROP
+
+    # Start services
+    cp -r /kvmapp/kvm_system /tmp/
+    /tmp/kvm_system/kvm_system &
+
+    cp -r /kvmapp/server /tmp/
+    /tmp/server/NanoKVM-Server &
+   ;;
+
+  stop)
+    killall kvm_system
+    killall NanoKVM-Server
+    rm -r /tmp/kvm_system /tmp/server
+    echo "OK"
+   ;;
+
+  restart)
+    killall kvm_system
+    killall NanoKVM-Server
+    rm -r /tmp/kvm_system /tmp/server
+
+    cp -r /kvmapp/kvm_system /tmp/
+    /tmp/kvm_system/kvm_system &
+
+    cp -r /kvmapp/server /tmp/
+    /tmp/server/NanoKVM-Server &
+
+    sync
+    echo "OK"
+   ;;
+    
+  *)
+    echo "Usage: $0 {start|stop|restart}"
+    exit 1
+  ;;
+esac
--- a/kvmapp/system/init.d/S98tailscaled
+++ b/kvmapp/system/init.d/S98tailscaled
@@ -0,0 +1,114 @@
+#!/bin/sh
+
+DAEMON="tailscaled"
+PIDFILE="/var/run/$DAEMON.pid"
+
+# Set the port to listen on for incoming VPN packets.
+# Remote nodes will automatically be informed about the new port number,
+# but you might want to configure this in order to set external firewall
+# settings.
+PORT="41641"
+
+# Extra flags you might want to pass to tailscaled.
+FLAGS=""
+
+# You need tailscaled at /usr/sbin to server, and tailscale at /usr/bin to operate
+# STATIC version needed. Download page at https://pkgs.tailscale.com/stable/#static
+PKG_URL_LATEST="https://pkgs.tailscale.com/stable/tailscale_latest_riscv64.tgz"
+[ ! -x /usr/sbin/$DAEMON ] &&
+    echo "/usr/sbin/$DAEMON not found, please download it from $PKG_URL_LATEST" &&
+    echo "Then unpack it, copy $DAEMON to /usr/sbin and copy tailscale to /usr/bin" &&
+    exit 1
+VERSION=$(/usr/sbin/$DAEMON --version|sed -n '1p'|xargs echo -n)
+
+[ -x /usr/bin/tailscale ] || echo "/usr/bin/tailscale not found, your installation of tailscale may be broken"
+
+# just for those need forwarding
+[ ! -f /etc/sysctl.d/99-tailscale.conf ] &&
+    mkdir -p /etc/sysctl.d/ &&
+    echo "missing /etc/sysctl.d/99-tailscale.conf, try make it below:" &&
+    (tee /etc/sysctl.d/99-tailscale.conf <<EOF
+net.ipv4.ip_forward = 1
+net.ipv6.conf.all.forwarding = 1
+EOF
+    ) &&
+    echo "if this message repeats showing, please look at $0 if you need forwarding"
+
+case "$1" in
+        start)
+                tailscale set --accept-dns=false
+                if [ -f /etc/kvm/GOMEMLIMIT ]; then
+                     value=$(cat /etc/kvm/GOMEMLIMIT)
+                     export GOMEMLIMIT="${value}MiB"
+                else
+                     export GOMEMLIMIT=1024MiB
+                fi
+                
+                echo "GOMEMLIMIT set to ${GOMEMLIMIT}"
+                printf "Starting $DAEMON[$VERSION]: "
+                start-stop-daemon -S -bmq -p "$PIDFILE" -x "/usr/sbin/$DAEMON" -- \
+                    --state=/var/lib/tailscale/tailscaled.state \
+                    --socket=/var/run/tailscale/tailscaled.sock \
+                    --port=${PORT} \
+                    $FLAGS
+                [ $? = 0 ] && echo "OK" || echo "FAIL"
+                ;;
+        stop)
+                printf "Stopping $DAEMON: "
+                start-stop-daemon -K -p "$PIDFILE"
+                [ $? = 0 ]  && (echo "OK"; rm -f "$PIDFILE") || echo "FAIL"
+                printf "cleaning tailscaled: "
+                /usr/sbin/$DAEMON --cleanup &>/dev/null
+                [ $? = 0 ] && echo "OK" || echo "FAIL"
+                ;;
+        restart|reload)
+                $0 stop
+                $0 start
+                ;;
+        doc)
+                cat <<EOF
+To use tailscale, you need to meet these conditions below:
+  1. Both tailscale and tailscaled were installed.
+  2. At least one tailscale's account were registered.
+     (https://login.tailscale.com/start)
+  3. Your NanoKVM device must keep online.
+
+Then, follow the steps below:
+  1. Login in https://login.tailscale.com on your PC
+     to enter into yout admin console.
+  2. Run 'tailscale login' on your device, and copy the link showed
+     to open on your PC, and confirm the auth.
+  3. Congratulations, your NanoKVM device is now on the tailnet, try to
+     visit it from all your device which on the same tailnet.
+  4. run 'tailscale set --webclient' and manage your device
+     on the web interface from localnet and tailenet.
+
+Added: no more action to be repeat after your device reboot.
+EOF
+                echo ""
+                cat <<EOF
+为了正常使用 tailscale, 你需要满足以下几个条件：
+  1. tailscale 和 tailscaled 这两个静态链接的二进制程序
+     都已经正确安装在系统上。
+  2. 至少注册一个 tailscale 的帐号才能使用其服务。
+     (https://login.tailscale.com/start)
+  3. 你的 NanoKVM 设备必须保持在线。
+
+然后，跟着以下步骤操作：
+  1. 在你的电脑上登录 https://login.tailscale.com 以进入控制台。
+  2. 在你的 NanoKVM ssh 终端上执行 'tailscale login', 然后复制
+     出现的链接到浏览器上，登录并通过验证。
+  3. 祝贺，你的 NanoKVM 现在已经加入了 tailnet 然后你可以从任意
+     同样已加入同一 tailnet 的设备去访问你的 NanoKVM。
+  4. 执行 'tailscale set --webclient' 然后你就可以从 '局域网' 和
+     'tailnet' 来访问特定网页，用来管理你的设备。
+
+补充: 不需要重复上面的操作，哪怕你的设备重启过。
+EOF
+                ;;
+        *)
+                echo "Usage: $0 {start|stop|restart}"
+                exit 1
+esac
+
+exit 0
--- a/kvmapp/system/ko/soph_mipi_rx.ko
+++ b/kvmapp/system/ko/soph_mipi_rx.ko
--- a/kvmapp/system/update-nanokvm.py
+++ b/kvmapp/system/update-nanokvm.py
@@ -0,0 +1,96 @@
+import os
+import shutil
+import time
+import zipfile
+import pathlib
+import requests
+
+temporary: str = "/root/.kvm-cache/"
+
+
+def mkdir() -> None:
+    if pathlib.Path(temporary).exists():
+        shutil.rmtree(temporary)
+    pathlib.Path(temporary).mkdir()
+    print(f"Created temporary directory {temporary}")
+
+
+def read(file: str) -> str:
+    return pathlib.Path(file).read_text().replace("\n", "")
+
+
+def download_firmware() -> None:
+    print("Downloading firmware...")
+
+    now = int(time.time())
+    url = f"https://cdn.sipeed.com/nanokvm/latest.zip?n={now}"
+    print(f"Downloading firmware from {url}")
+
+    response = requests.get(url)
+
+    if response.status_code != 200:
+        raise Exception(f"Failed to download firmware, status: {response.status_code}")
+
+    content_type = response.headers.get("content-type")
+    if content_type != "application/zip":
+        raise Exception(f"Failed to download firmware, content_type: {content_type}")
+
+    zip_file = f"{temporary}/latest.zip"
+    with open(zip_file, "wb") as f:
+        for chunk in response.iter_content(chunk_size=1024):
+            f.write(chunk)
+
+    with zipfile.ZipFile(zip_file, "r") as f:
+        f.extractall(temporary)
+
+    print("Completed downloading firmware.")
+
+
+def update() -> None:
+    backup_dir   = pathlib.Path("/root/old")
+    firmware_dir = pathlib.Path("/kvmapp")
+
+    if backup_dir.exists():
+      shutil.rmtree(backup_dir)
+
+    if firmware_dir.exists():
+      firmware_dir.rename(backup_dir)
+
+    pathlib.Path(f"{temporary}/latest").rename(firmware_dir)
+
+
+def change_permissions() -> None:
+    for root, dirs, files in os.walk("/kvmapp"):
+        os.chmod(root, 0o755)
+
+        for file in files:
+            file_path = os.path.join(root, file)
+            os.chmod(file_path, 0o755)
+
+    print("change permissions done")
+
+
+def main() -> None:
+    try:
+        print("Stopping nanokvm service...")
+        os.system("/etc/init.d/S95nanokvm stop")
+
+        print("Staring update...")
+
+        mkdir()
+        download_firmware()
+        update()
+        change_permissions()
+
+        version = read("/kvmapp/version")
+        print(f"Successfully updated to version: {version}")
+        print("restart service\nthe nanokvm will reboot")
+    except Exception as e:
+        print(f"update failed\n{e}")
+    finally:
+        shutil.rmtree(temporary)
+        os.system("/etc/init.d/S95nanokvm restart")
+
+
+if __name__ == "__main__":
+    main()
--- a/server/README.md
+++ b/server/README.md
@@ -1,31 +1,99 @@
 # NanoKVM Server

-The code of NanoKVM backend server. For more documentation, please refer to [Wiki](https://wiki.sipeed.com/nanokvm).
+This is the backend server implementation for NanoKVM.
+
+For detailed documentation, please visit our [Wiki](https://wiki.sipeed.com/nanokvm).

 ## Structure

 ```shell
 server
-├── config       // server config
-├── logger       // server log
-├── main.go
-├── middleware   // server middleware
-├── proto        // api request and response arguments
-├── router       // api routes
-├── service      // api handlers
-└── utils        // utils functions
+├── common       // Common utility components
+├── config       // Server configuration
+├── dl_lib       // Shared object libraries
+├── include      // Header files for shared objects
+├── logger       // Logging system
+├── middleware   // Server middleware components
+├── proto        // API request/response definitions
+├── router       // API route handlers
+├── service      // Core service implementations
+├── utils        // Utility functions
+└── main.go
 ```

-## Development
+## Configuration

-The configuration file path is `/etc/kvm/server.yaml`. There are two configurable options:
+The configuration file path is `/etc/kvm/server.yaml`.

- `log: error`: log level, default is `error`. Too many logs may affect service performance, it is recommended to use the `error` level in production environment.
+```yaml
+proto: http
+port:
+    http: 80
+    https: 443
+cert:
+    crt: server.crt
+    key: server.key

- `authentication: enable`: Whether to enable authentication, default is `enable`. Logging in is required after each service restart, use `disable` will skip the authentication check and don't need to log in again. Please delete this configuration for production environments!
+# Log level (debug/info/warn/error)
+# Note: Use 'info' or 'error' in production, 'debug' only for development
+logger:
+    level: info
+    file: stdout

-## Deployment
+# Authentication setting (enable/disable)
+# Note: Only disable authentication in development environment
+authentication: enable

-Work in progress.
+jwt:
+   # JWT secret key. If left empty, a random 64-byte key will be generated automatically.
+   secretKey: ""
+   # JWT token expiration time in seconds. Default: 2678400 (31 days)
+   refreshTokenDuration: 2678400
+   # Invalidate all JWT tokens when the user logs out. Default: true
+   revokeTokensOnLogout: true

-The project requires CGO. It must be compiled on Linux with a toolchain installed. More details will be added later.
+# Address for custom STUN server
+# Note: You can disable the STUN service by setting it to 'disable' (e.g., in a LAN environment)
+stun: stun.l.google.com:19302
+
+# Address and authentication for custom TURN server
+turn:
+    turnAddr: example_addr
+    turnUser: example_user
+    turnCred: example_cred
+```
+
+## Compile & Deploy
+
+Note: Use Linux operating system (x86-64). This build process is not compatible with ARM, Windows or macOS.
+
+1. Install the Toolchain
+    1. Download the toolchain from the following link: [Download Link](https://sophon-file.sophon.cn/sophon-prod-s3/drive/23/03/07/16/host-tools.tar.gz).
+    2. Extract the file and add the `host-tools/gcc/riscv64-linux-musl-x86_64/bin` directory to your PATH environment variable.
+    3. Run `riscv64-unknown-linux-musl-gcc -v`. If there is version information in the output, the installation is successful.
+
+2. Compile the Project
+    1. Run `cd server` from the project root directory.
+    2. Run `go mod tidy` to install Go dependencies.
+    3. (Optional) If you compiled `libkvm.so` yourself, you need to modify its RPATH by `patchelf --add-rpath \$ORIGIN ./dl_lib/libkvm.so`.
+    4. Run `CGO_ENABLED=1 GOOS=linux GOARCH=riscv64 CC=riscv64-unknown-linux-musl-gcc CGO_CFLAGS="-mcpu=c906fdv -march=rv64imafdcv0p7xthead -mcmodel=medany -mabi=lp64d" go build` to compile the project.
+    5. After compilation, an executable file named `NanoKVM-Server` will be generated.
+
+3. Modify RPATH
+    1. Run `sudo apt install patchelf` or `pip install patchelf` to install patchelf.
+    2. Run `patchelf --version`. Ensure the version is 0.14 or higher`.
+    3. Run `patchelf --add-rpath \$ORIGIN/dl_lib NanoKVM-Server` to modify the RPATH of the executable file.
+
+4. Deploy the Application
+    1. File uploads requires SSH. Please enable it in the Web Settings: `Settings > SSH`;
+    2. Replace the original file in the NanoKVM `/kvmapp/server/` directory with the newly compiled `NanoKVM-Server`.
+    3. Restart the service on NanoKVM by executing `/etc/init.d/S95nanokvm restart`.
+
+## Manually Update
+
+> File uploads requires SSH. Please enable it in the Web Settings: `Settings > SSH`;
+
+1. Download the latest application from [GitHub](https://github.com/sipeed/NanoKVM/releases);
+2. Unzip the downloaded file and rename the unzipped folder to `kvmapp`;
+3. Back up the existing `/kvmapp` directory on your NanoKVM, then replace it with the new `kvmapp` folder;
+4. Run `/etc/init.d/S95nanokvm restart` on your NanoKVM to restart the service.
--- a/server/README_JA.md
+++ b/server/README_JA.md
@@ -0,0 +1,97 @@
+# NanoKVM サーバー
+
+これは NanoKVM のバックエンドサーバーの実装です。
+
+詳細なドキュメントについては、[Wiki](https://wiki.sipeed.com/nanokvm) を参照してください。
+
+## 構造
+
+```shell
+server
+├── common       // 共通ユーティリティコンポーネント
+├── config       // サーバー設定
+├── dl_lib       // 共有オブジェクトライブラリ
+├── include      // 共有オブジェクトのヘッダーファイル
+├── logger       // ロギングシステム
+├── middleware   // サーバーミドルウェアコンポーネント
+├── proto        // API リクエスト/レスポンス定義
+├── router       // API ルートハンドラ
+├── service      // コアサービスの実装
+├── utils        // ユーティリティ関数
+└── main.go
+```
+
+## 設定
+
+設定ファイルのパスは `/etc/kvm/server.yaml` です。
+
+```yaml
+proto: http
+port:
+    http: 80
+    https: 443
+cert:
+    crt: server.crt
+    key: server.key
+
+# ログレベル (debug/info/warn/error)
+# 注意: 本番環境では 'info' または 'error' を使用し、'debug' は開発環境でのみ使用してください
+logger:
+    level: info
+    file: stdout
+
+# 認証設定 (enable/disable)
+# 注意: 認証を無効にするのは開発環境でのみ行ってください
+authentication: enable
+
+jwt:
+   # JWT 秘密鍵の設定。 空のままにすると、サーバー起動時にランダムな 64 バイトの鍵が自動的に生成されます。
+   secretKey: ""
+   # JWT トークンの有効期限（秒単位）。 デフォルト: 2678400 (31 日)
+   refreshTokenDuration: 2678400
+   # ユーザーがログアウトすると、すべての JWT トークンが無効になります。 デフォルト: true
+   revokeTokensOnLogout: true
+
+# カスタム STUN サーバーのアドレス
+stun: stun.l.google.com:19302
+
+# カスタム TURN サーバーのアドレスと認証情報
+turn:
+    turnAddr: turn.cloudflare.com:3478
+    turnUser: example_user
+    turnCred: example_cred
+```
+
+## コンパイルとデプロイ
+
+注意: Linux オペレーティングシステム (x86-64) を使用してください。このビルドプロセスは ARM、Windows、macOS では互換性がありません。
+
+1. ツールチェーンのインストール
+    1. 以下のリンクからツールチェーンをダウンロードします: [ダウンロードリンク](https://sophon-file.sophon.cn/sophon-prod-s3/drive/23/03/07/16/host-tools.tar.gz)。
+    2. ファイルを解凍し、`host-tools/gcc/riscv64-linux-musl-x86_64/bin` ディレクトリを PATH 環境変数に追加します。
+    3. `riscv64-unknown-linux-musl-gcc -v` を実行します。バージョン情報が表示されれば、インストールは成功です。
+
+2. プロジェクトのコンパイル
+    1. プロジェクトのルートディレクトリから `cd server` を実行します。
+    2. `go mod tidy` を実行して Go の依存関係をインストールします。
+    3. `CGO_ENABLED=1 GOOS=linux GOARCH=riscv64 CC=riscv64-unknown-linux-musl-gcc CGO_CFLAGS="-mcpu=c906fdv -march=rv64imafdcv0p7xthead -mcmodel=medany -mabi=lp64d" go build` を実行してプロジェクトをコンパイルします。
+    4. コンパイルが完了すると、`NanoKVM-Server` という名前の実行ファイルが生成されます。
+
+3. RPATH の変更
+    1. `sudo apt install patchelf` または `pip install patchelf` を実行して patchelf をインストールします。
+    2. `patchelf --version` を実行します。バージョンが 0.14 以上であることを確認します。
+    3. `patchelf --add-rpath \$ORIGIN/dl_lib NanoKVM-Server` を実行して、実行ファイルの RPATH を変更します。
+
+4. アプリケーションのデプロイ
+    1. デプロイ前に、ブラウザでアプリケーションを最新バージョンに更新します。手順は[こちら](https://wiki.sipeed.com/hardware/en/kvm/NanoKVM/system/updating.html)を参照してください。
+    2. コンパイルして生成された `NanoKVM-Server` ファイルを使用して、NanoKVM の `/kvmapp/server/` ディレクトリ内の元のファイルを置き換えます。
+    3. NanoKVM で `/etc/init.d/S95nanokvm restart` を実行してサービスを再起動します。
+
+## 手動更新
+
+> ファイルのアップロードには SSH が必要です。Web 設定で有効にしてください: `設定 > SSH`
+
+1. [GitHub](https://github.com/sipeed/NanoKVM/releases) から最新のアプリケーションをダウンロードします。
+2. ダウンロードしたファイルを解凍し、解凍したフォルダーの名前を `kvmapp` に変更します。
+3. NanoKVM 上の既存の `/kvmapp` ディレクトリをバックアップし、新しい `kvmapp` フォルダーに置き換えます。
+4. NanoKVM で `/etc/init.d/S95nanokvm restart` を実行してサービスを再起動します。
--- a/server/README_ZH.md
+++ b/server/README_ZH.md
@@ -6,25 +6,91 @@ NanoKVM 后端服务的代码。更多文档请参考 [Wiki](https://wiki.sipeed

 ```shell
 server
+├── common       // 公用组件
 ├── config       // 服务配置
+├── dl_lib       // so 文件
+├── include      // 头文件
 ├── logger       // 服务日志
-├── main.go
 ├── middleware   // 中间件
 ├── proto        // api 请求响应参数
 ├── router       // api 路由
 ├── service      // api 处理逻辑
-└── utils        // 工具函数
+├── utils        // 工具函数
+└── main.go
 ```

-## 开发
+## 配置文件

-配置文件路径为 `/etc/kvm/server.yaml`。有两个可配置的选项：
+配置文件路径为 `/etc/kvm/server.yaml`。

- `log: error`：日志等级，默认为 `error`。日志过多可能会影响服务性能，生产环境中建议使用 `error` 等级。
- `authentication: enable`：是否启用鉴权，默认开启。服务每次重启后都需要重新登录，将该选项设为 `disable` 会跳过鉴权检查，可以不用重复登录。生产环境请删除该条配置！
+```yaml
+proto: http
+port:
+    http: 80
+    https: 443
+cert:
+    crt: server.crt
+    key: server.key

-## 部署
+# 日志级别（debug/info/warn/error）
+# 注意：在生产环境中使用 info 或 error。debug 模式仅在开发环境中使用。
+logger:
+    level: info
+    file: stdout

-待完善。
+# 鉴权设置（enable/disable）
+# 注意：生产环境中请勿使用 disable。
+authentication: enable

-项目中使用了 CGO，需要使用 Linux 并安装工具链后才能编译。这部分内容会晚一点更新。
+jwt:
+   # jwt 密钥。设置为空则使用随机生成的64位密钥
+   secretKey: ""
+   # jwt token 过期时间（单位：秒），默认为2678400（31天）
+   refreshTokenDuration: 2678400
+   # 在帐号登出时是否使所有 jwt token 失效。默认为 true
+   revokeTokensOnLogout: true
+
+# 自定义 STUN 服务器的地址
+# 注意：可以设置为“disable”来禁用 STUN 服务（例如在局域网环境中使用时）
+stun: stun.l.google.com:19302
+
+turn:
+    turnAddr: example_addr
+    turnUser: example_user
+    turnCred: example_cred
+```
+
+## 编译部署
+
+**注意：请使用 Linux 操作系统（x86-64）。该工具链无法在 ARM、Windows 或 macOS 下使用。**
+
+1. 安装工具链
+   1. 下载工具链：[下载地址](https://sophon-file.sophon.cn/sophon-prod-s3/drive/23/03/07/16/host-tools.tar.gz)；
+   2. 解压下载文件，然后将 `host-tools/gcc/riscv64-linux-musl-x86_64/bin` 目录加入到环境变量；
+   3. 执行 `riscv64-unknown-linux-musl-gcc -v`，如果显示版本信息则安装成功。
+
+2. 编译
+   1. 在项目根目录下执行 `cd server` 进入 server 目录；
+   2. 执行 `go mod tidy` 安装 Go 依赖包；
+   3. （可选）如果您手动编译了 `libkvm.so`，则需要通过 `patchelf --add-rpath \$ORIGIN ./dl_lib/libkvm.so` 修改其 RPATH 属性。
+   4. 执行 `CGO_ENABLED=1 GOOS=linux GOARCH=riscv64 CC=riscv64-unknown-linux-musl-gcc CGO_CFLAGS="-mcpu=c906fdv -march=rv64imafdcv0p7xthead -mcmodel=medany -mabi=lp64d" go build` 进行编译；
+   5. 编译完成后，会生成可执行文件 `NanoKVM-Server`。
+
+3. 修改 RPATH
+   1. 执行 `sudo apt install patchelf` 或 `pip install patchelf` 安装 patchelf；
+   2. 执行 `patchelf --version`，确保版本大于等于 0.14；
+   3. 执行 `patchelf --add-rpath \$ORIGIN/dl_lib NanoKVM-Server` 修改可执行文件的 RPATH 属性。
+
+4. 部署
+   1. 上传文件需要启用 SSH 功能。请在 Web `设置 - SSH` 中检查 SSH 是否已经启用；
+   2. 使用编译生成的 `NanoKVM-Server` 文件，替换 NanoKVM 中 `/kvmapp/server/` 目录下的原始文件；
+   3. 在 NanoKVM 中执行 `/etc/init.d/S95nanokvm restart` 重启服务。
+
+## 手动更新
+
+> 请确保已经在 Web 界面的 `设置 - SSH` 中启用了 SSH 功能，以便上传文件。
+
+1. 从 [GitHub](https://github.com/sipeed/NanoKVM/releases) 下载最新的应用安装包；
+2. 解压缩下载的安装包，并将解压后的文件夹重命名为 `kvmapp`；
+3. 备份 NanoKVM 系统中的 `/kvmapp` 目录，然后用解压后的 `kvmapp` 文件夹替换现有目录。
+4. 在 NanoKVM 中执行 `/etc/init.d/S95nanokvm restart` 重启服务。
--- a/server/common/cgo.go
+++ b/server/common/cgo.go
@@ -20,9 +20,7 @@ var (
 	kvmVisionOnce sync.Once
 )

-type KvmVision struct {
-	mutex sync.Mutex
-}
+type KvmVision struct{}

 func GetKvmVision() *KvmVision {
 	kvmVisionOnce.Do(func() {
@@ -44,9 +42,6 @@ func GetKvmVision() *KvmVision {
 }

 func (k *KvmVision) ReadMjpeg(width uint16, height uint16, quality uint16) (data []byte, result int) {
-	k.mutex.Lock()
-	defer k.mutex.Unlock()
-
 	var (
 		kvmData  *C.uint8_t
 		dataSize C.uint32_t
@@ -72,10 +67,7 @@ func (k *KvmVision) ReadMjpeg(width uint16, height uint16, quality uint16) (data
 	return
 }

-func (k *KvmVision) ReadH264(width uint16, height uint16, bitRate uint16) (data []byte, sps []byte, pps []byte, result int) {
-	k.mutex.Lock()
-	defer k.mutex.Unlock()
-
+func (k *KvmVision) ReadH264(width uint16, height uint16, bitRate uint16) (data []byte, result int) {
 	var (
 		kvmData  *C.uint8_t
 		dataSize C.uint32_t
@@ -97,52 +89,36 @@ func (k *KvmVision) ReadH264(width uint16, height uint16, bitRate uint16) (data

 	data = C.GoBytes(unsafe.Pointer(kvmData), C.int(dataSize))

-	if result == 3 {
-		sps, _ = k.ReadH264SPS()
-		pps, _ = k.ReadH264PPS()
-	}
-
 	log.Debugf("read kvm image: %v", result)
 	return
 }

-func (k *KvmVision) ReadH264SPS() ([]byte, int) {
-	var (
-		kvmData  *C.uint8_t
-		dataSize C.uint32_t
-	)
-
-	result := C.kvmv_get_sps_frame(&kvmData, &dataSize)
-	if result < 0 {
-		log.Errorf("failed to read sps: %v", result)
-		return nil, int(result)
+func (k *KvmVision) SetHDMI(enable bool) int {
+	hdmiEnable := C.uint8_t(0)
+	if enable {
+		hdmiEnable = C.uint8_t(1)
 	}

-	data := C.GoBytes(unsafe.Pointer(kvmData), C.int(dataSize))
+	result := int(C.kvmv_hdmi_control(hdmiEnable))
+	if result < 0 {
+		log.Errorf("failed to set hdmi to %t", enable)
+		return result
+	}

-	return data, int(result)
+	return result
 }

-func (k *KvmVision) ReadH264PPS() ([]byte, int) {
-	var (
-		kvmData  *C.uint8_t
-		dataSize C.uint32_t
-	)
+func (k *KvmVision) SetGop(gop uint8) {
+	_gop := C.uint8_t(gop)
+	C.set_h264_gop(_gop)
+}

-	result := C.kvmv_get_pps_frame(&kvmData, &dataSize)
-	if result < 0 {
-		log.Errorf("failed to read pps: %v", result)
-		return nil, int(result)
-	}
-
-	data := C.GoBytes(unsafe.Pointer(kvmData), C.int(dataSize))
-	return data, int(result)
+func (k *KvmVision) SetFrameDetect(frame uint8) {
+	_frame := C.uint8_t(frame)
+	C.set_frame_detact(_frame)
 }

 func (k *KvmVision) Close() {
-	k.mutex.Lock()
-	defer k.mutex.Unlock()
-
 	C.kvmv_deinit()
 	log.Debugf("stop kvm vision...")
 }
--- a/server/common/screen.go
+++ b/server/common/screen.go
@@ -8,6 +8,7 @@ type Screen struct {
 	FPS     int
 	Quality uint16
 	BitRate uint16
+	GOP     uint8
 }

 var (
@@ -46,6 +47,7 @@ func GetScreen() *Screen {
 			Quality: 80,
 			FPS:     30,
 			BitRate: 3000,
+			GOP:     30,
 		}
 	})

@@ -70,6 +72,24 @@ func SetScreen(key string, value int) {

 	case "fps":
 		screen.FPS = validateFPS(value)
+
+	case "gop":
+		screen.GOP = uint8(value)
+	}
+}
+
+func CheckScreen() {
+	if _, ok := ResolutionMap[screen.Height]; !ok {
+		screen.Width = 1920
+		screen.Height = 1080
+	}
+
+	if _, ok := QualityMap[screen.Quality]; !ok {
+		screen.Quality = 80
+	}
+
+	if _, ok := BitRateMap[screen.BitRate]; !ok {
+		screen.BitRate = 3000
 	}
 }

--- a/server/config/config.go
+++ b/server/config/config.go
@@ -2,28 +2,24 @@ package config

 import (
 	"bytes"
-	"crypto/rand"
-	"encoding/base64"
 	"errors"
-	"fmt"
 	"log"
 	"os"
 	"sync"
-	"time"

 	"github.com/spf13/viper"
 	"gopkg.in/yaml.v3"
 )

 var (
-	config Config
-	once   sync.Once
+	instance Config
+	once     sync.Once
 )

 func GetInstance() *Config {
 	once.Do(initialize)

-	return &config
+	return &instance
 }

 func initialize() {
@@ -43,20 +39,16 @@ func initialize() {
 		log.Fatalf("Failed to validate configuration!")
 	}

-	if err := viper.Unmarshal(&config); err != nil {
+	if err := viper.Unmarshal(&instance); err != nil {
 		log.Fatalf("Failed to parse configuration: %s", err)
 	}

-	if config.Authentication == "disable" {
+	checkDefaultValue()
+
+	if instance.Authentication == "disable" {
 		log.Println("NOTICE: Authentication is disabled! Please ensure your service is secure!")
 	}

-	if config.SecretKey == "" {
-		config.SecretKey = generateRandomString()
-	}
-
-	config.Hardware = getHardware()
-
 	log.Println("config loaded successfully")
 }

@@ -128,16 +120,3 @@ func validate() error {

 	return readByDefault()
 }
-
-// Generate random string for secret key.
-func generateRandomString() string {
-	b := make([]byte, 64)
-	_, err := rand.Read(b)
-	if err != nil {
-		currentTime := time.Now().UnixNano()
-		timeString := fmt.Sprintf("%d", currentTime)
-		return fmt.Sprintf("%064s", timeString)
-	}
-
-	return base64.URLEncoding.EncodeToString(b)
-}
--- a/server/config/default.go
+++ b/server/config/default.go
@@ -1,7 +1,7 @@
 package config

 var defaultConfig = &Config{
-	Protocol: "http",
+	Proto: "http",
 	Port: Port{
 		Http:  80,
 		Https: 443,
@@ -14,5 +14,37 @@ var defaultConfig = &Config{
 		Level: "info",
 		File:  "stdout",
 	},
+	JWT: JWT{
+		SecretKey:            "",
+		RefreshTokenDuration: 2678400,
+		RevokeTokensOnLogout: true,
+	},
+	Stun: "stun.l.google.com:19302",
+	Turn: Turn{
+		TurnAddr: "",
+		TurnUser: "",
+		TurnCred: "",
+	},
 	Authentication: "enable",
 }
+
+func checkDefaultValue() {
+	if instance.JWT.SecretKey == "" {
+		instance.JWT.SecretKey = generateRandomSecretKey()
+		instance.JWT.RevokeTokensOnLogout = true
+	}
+
+	if instance.JWT.RefreshTokenDuration == 0 {
+		instance.JWT.RefreshTokenDuration = 2678400
+	}
+
+	if instance.Stun == "" {
+		instance.Stun = "stun.l.google.com:19302"
+	}
+
+	if instance.Authentication == "" {
+		instance.Authentication = "enable"
+	}
+
+	instance.Hardware = getHardware()
+}
--- a/server/config/file.go
+++ b/server/config/file.go
@@ -0,0 +1,45 @@
+package config
+
+import (
+	"os"
+
+	log "github.com/sirupsen/logrus"
+	"gopkg.in/yaml.v3"
+)
+
+const ConfigurationFile = "/etc/kvm/server.yaml"
+
+func Read() (*Config, error) {
+	data, err := os.ReadFile(ConfigurationFile)
+	if err != nil {
+		log.Errorf("failed to read config: %v", err)
+		return nil, err
+	}
+
+	var conf Config
+
+	if err := yaml.Unmarshal(data, &conf); err != nil {
+		log.Fatalf("failed to unmarshal config: %v", err)
+		return nil, err
+	}
+
+	log.Debugf("read %s successfully", ConfigurationFile)
+	return &conf, nil
+}
+
+func Write(conf *Config) error {
+	data, err := yaml.Marshal(&conf)
+	if err != nil {
+		log.Errorf("failed to marshal config: %v", err)
+		return err
+	}
+
+	err = os.WriteFile(ConfigurationFile, data, 0644)
+	if err != nil {
+		log.Errorf("failed to write config: %v", err)
+		return err
+	}
+
+	log.Debugf("write to %s successfully", ConfigurationFile)
+	return nil
+}
--- a/server/config/hardware.go
+++ b/server/config/hardware.go
@@ -12,19 +12,34 @@ type HWVersion int
 const (
 	HWVersionAlpha HWVersion = iota
 	HWVersionBeta
+	HWVersionPcie
+
+	HWVersionFile = "/etc/kvm/hw"
 )

-const (
-	hwVersionFile = "/etc/kvm/hw"
+var HWAlpha = Hardware{
+	Version:      HWVersionAlpha,
+	GPIOReset:    "/sys/class/gpio/gpio507/value",
+	GPIOPower:    "/sys/class/gpio/gpio503/value",
+	GPIOPowerLED: "/sys/class/gpio/gpio504/value",
+	GPIOHDDLed:   "/sys/class/gpio/gpio505/value",
+}

-	gpioPower    = "/sys/class/gpio/gpio503/value"
-	gpioPowerLED = "/sys/class/gpio/gpio504/value"
+var HWBeta = Hardware{
+	Version:      HWVersionBeta,
+	GPIOReset:    "/sys/class/gpio/gpio505/value",
+	GPIOPower:    "/sys/class/gpio/gpio503/value",
+	GPIOPowerLED: "/sys/class/gpio/gpio504/value",
+	GPIOHDDLed:   "",
+}

-	gpioResetAlpha  = "/sys/class/gpio/gpio507/value"
-	gpioHDDLedAlpha = "/sys/class/gpio/gpio505/value"
-
-	gpioResetBeta = "/sys/class/gpio/gpio505/value"
-)
+var HWPcie = Hardware{
+	Version:      HWVersionPcie,
+	GPIOReset:    "/sys/class/gpio/gpio505/value",
+	GPIOPower:    "/sys/class/gpio/gpio503/value",
+	GPIOPowerLED: "/sys/class/gpio/gpio504/value",
+	GPIOHDDLed:   "",
+}

 func (h HWVersion) String() string {
 	switch h {
@@ -32,39 +47,46 @@ func (h HWVersion) String() string {
 		return "Alpha"
 	case HWVersionBeta:
 		return "Beta"
+	case HWVersionPcie:
+		return "PCIE"
 	default:
 		return "Unknown"
 	}
 }

 func getHwVersion() HWVersion {
-	content, err := os.ReadFile(hwVersionFile)
-	if err == nil {
-		version := strings.ReplaceAll(string(content), "\n", "")
-		if version == "beta" {
-			return HWVersionBeta
-		}
+	content, err := os.ReadFile(HWVersionFile)
+	if err != nil {
+		return HWVersionAlpha
+	}
+
+	version := strings.ReplaceAll(string(content), "\n", "")
+	if version == "beta" {
+		return HWVersionBeta
+	} else if version == "pcie" {
+		return HWVersionPcie
 	}

 	return HWVersionAlpha
 }

-func getHardware() Hardware {
-	h := Hardware{}
+func getHardware() (h Hardware) {
+	version := getHwVersion()

-	h.Version = getHwVersion()
-	h.GPIOPower = gpioPower
-	h.GPIOPowerLED = gpioPowerLED
-
-	switch h.Version {
+	switch version {
 	case HWVersionAlpha:
-		h.GPIOHDDLed = gpioHDDLedAlpha
-		h.GPIOReset = gpioResetAlpha
+		h = HWAlpha
+
 	case HWVersionBeta:
-		h.GPIOReset = gpioResetBeta
+		h = HWBeta
+
+	case HWVersionPcie:
+		h = HWPcie
+
 	default:
-		log.Fatalf("Unsupported hardware version: %s", h.Version)
+		h = HWAlpha
+		log.Errorf("Unsupported hardware version: %s", version)
 	}

-	return h
+	return
 }
--- a/server/config/jwt.go
+++ b/server/config/jwt.go
@@ -0,0 +1,28 @@
+package config
+
+import (
+	"crypto/rand"
+	"encoding/base64"
+	"fmt"
+	"time"
+)
+
+// RegenerateSecretKey regenerate secret key when logout
+func RegenerateSecretKey() {
+	if instance.JWT.RevokeTokensOnLogout {
+		instance.JWT.SecretKey = generateRandomSecretKey()
+	}
+}
+
+// Generate random string for secret key.
+func generateRandomSecretKey() string {
+	b := make([]byte, 64)
+	_, err := rand.Read(b)
+	if err != nil {
+		currentTime := time.Now().UnixNano()
+		timeString := fmt.Sprintf("%d", currentTime)
+		return fmt.Sprintf("%064s", timeString)
+	}
+
+	return base64.URLEncoding.EncodeToString(b)
+}
--- a/server/config/types.go
+++ b/server/config/types.go
@@ -1,12 +1,14 @@
 package config

 type Config struct {
-	Protocol       string `yaml:"proto"`
+	Proto          string `yaml:"proto"`
 	Port           Port   `yaml:"port"`
 	Cert           Cert   `yaml:"cert"`
 	Logger         Logger `yaml:"logger"`
 	Authentication string `yaml:"authentication"`
-	SecretKey      string `yaml:"secretKey"`
+	JWT            JWT    `yaml:"jwt"`
+	Stun           string `yaml:"stun"`
+	Turn           Turn   `yaml:"turn"`

 	Hardware Hardware `yaml:"-"`
 }
@@ -26,6 +28,18 @@ type Cert struct {
 	Key string `yaml:"key"`
 }

+type JWT struct {
+	SecretKey            string `yaml:"secretKey"`
+	RefreshTokenDuration uint64 `yaml:"refreshTokenDuration"`
+	RevokeTokensOnLogout bool   `yaml:"revokeTokensOnLogout"`
+}
+
+type Turn struct {
+	TurnAddr string `yaml:"turnAddr"`
+	TurnUser string `yaml:"turnUser"`
+	TurnCred string `yaml:"turnCred"`
+}
+
 type Hardware struct {
 	Version      HWVersion `yaml:"-"`
 	GPIOReset    string    `yaml:"-"`
--- a/server/dl_lib/libaaccomm2.so
+++ b/server/dl_lib/libaaccomm2.so
--- a/server/dl_lib/libaacdec2.so
+++ b/server/dl_lib/libaacdec2.so
--- a/server/dl_lib/libaacenc2.so
+++ b/server/dl_lib/libaacenc2.so
--- a/server/dl_lib/libaacsbrdec2.so
+++ b/server/dl_lib/libaacsbrdec2.so
--- a/server/dl_lib/libaacsbrenc2.so
+++ b/server/dl_lib/libaacsbrenc2.so
--- a/server/dl_lib/libae.so
+++ b/server/dl_lib/libae.so
--- a/server/dl_lib/libaf.so
+++ b/server/dl_lib/libaf.so
--- a/server/dl_lib/libawb.so
+++ b/server/dl_lib/libawb.so
--- a/server/dl_lib/libcli.so
+++ b/server/dl_lib/libcli.so
--- a/server/dl_lib/libcvi_RES1.so
+++ b/server/dl_lib/libcvi_RES1.so
--- a/server/dl_lib/libcvi_VoiceEngine.so
+++ b/server/dl_lib/libcvi_VoiceEngine.so
--- a/server/dl_lib/libcvi_audio.so
+++ b/server/dl_lib/libcvi_audio.so
--- a/server/dl_lib/libcvi_bin.so
+++ b/server/dl_lib/libcvi_bin.so
--- a/server/dl_lib/libcvi_bin_isp.so
+++ b/server/dl_lib/libcvi_bin_isp.so
--- a/server/dl_lib/libcvi_ispd2.so
+++ b/server/dl_lib/libcvi_ispd2.so
--- a/server/dl_lib/libcvi_ive.so
+++ b/server/dl_lib/libcvi_ive.so
--- a/server/dl_lib/libcvi_ssp.so
+++ b/server/dl_lib/libcvi_ssp.so
--- a/server/dl_lib/libcvi_vqe.so
+++ b/server/dl_lib/libcvi_vqe.so
--- a/server/dl_lib/libdnvqe.so
+++ b/server/dl_lib/libdnvqe.so
--- a/server/dl_lib/libini.so
+++ b/server/dl_lib/libini.so
--- a/server/dl_lib/libisp.so
+++ b/server/dl_lib/libisp.so
--- a/server/dl_lib/libisp_algo.so
+++ b/server/dl_lib/libisp_algo.so
--- a/server/dl_lib/libjson-c.so.5
+++ b/server/dl_lib/libjson-c.so.5
--- a/server/dl_lib/libkvm.so
+++ b/server/dl_lib/libkvm.so
--- a/server/dl_lib/libkvm_mmf.so
+++ b/server/dl_lib/libkvm_mmf.so
--- a/server/dl_lib/libmipi_tx.so
+++ b/server/dl_lib/libmipi_tx.so
--- a/server/dl_lib/libmisc.so
+++ b/server/dl_lib/libmisc.so
--- a/server/dl_lib/libopencv_core.so.409
+++ b/server/dl_lib/libopencv_core.so.409
--- a/server/dl_lib/libopencv_highgui.so.409
+++ b/server/dl_lib/libopencv_highgui.so.409
--- a/server/dl_lib/libopencv_imgcodecs.so.409
+++ b/server/dl_lib/libopencv_imgcodecs.so.409
--- a/server/dl_lib/libopencv_imgproc.so.409
+++ b/server/dl_lib/libopencv_imgproc.so.409
--- a/server/dl_lib/libosdc.so
+++ b/server/dl_lib/libosdc.so
--- a/server/dl_lib/libraw_dump.so
+++ b/server/dl_lib/libraw_dump.so
--- a/server/dl_lib/libsys.so
+++ b/server/dl_lib/libsys.so
--- a/server/dl_lib/libtinyalsa.so
+++ b/server/dl_lib/libtinyalsa.so
--- a/server/dl_lib/libvdec.so
+++ b/server/dl_lib/libvdec.so
--- a/server/dl_lib/libvenc.so
+++ b/server/dl_lib/libvenc.so
--- a/server/dl_lib/libvpu.so
+++ b/server/dl_lib/libvpu.so
--- a/server/go.mod
+++ b/server/go.mod
@@ -1,12 +1,15 @@
 module NanoKVM-Server

-go 1.22.1
+go 1.23.0
+
+toolchain go1.23.2

 require (
+	github.com/creack/pty v1.1.24
 	github.com/gin-gonic/contrib v0.0.0-20240508051311-c1c6bf0061b0
 	github.com/gin-gonic/gin v1.10.0
 	github.com/go-playground/validator/v10 v10.20.0
-	github.com/golang-jwt/jwt/v5 v5.2.1
+	github.com/golang-jwt/jwt/v5 v5.2.2
 	github.com/gorilla/websocket v1.5.3
 	github.com/mervick/aes-everywhere/go/aes256 v0.0.0-20240803013625-6759956693c0
 	github.com/pion/webrtc/v4 v4.0.1
@@ -14,7 +17,7 @@ require (
 	github.com/sirupsen/logrus v1.9.3
 	github.com/spf13/viper v1.19.0
 	github.com/unrolled/secure v1.15.0
-	golang.org/x/crypto v0.28.0
+	golang.org/x/crypto v0.37.0
 	gopkg.in/yaml.v3 v3.0.1
 )

@@ -70,9 +73,9 @@ require (
 	go.uber.org/multierr v1.9.0 // indirect
 	golang.org/x/arch v0.8.0 // indirect
 	golang.org/x/exp v0.0.0-20230905200255-921286631fa9 // indirect
-	golang.org/x/net v0.29.0 // indirect
-	golang.org/x/sys v0.26.0 // indirect
-	golang.org/x/text v0.19.0 // indirect
+	golang.org/x/net v0.39.0 // indirect
+	golang.org/x/sys v0.32.0 // indirect
+	golang.org/x/text v0.24.0 // indirect
 	google.golang.org/protobuf v1.34.1 // indirect
 	gopkg.in/ini.v1 v1.67.0 // indirect
 )
--- a/server/go.sum
+++ b/server/go.sum
@@ -6,6 +6,8 @@ github.com/cloudwego/base64x v0.1.4 h1:jwCgWpFanWmN8xoIUHa2rtzmkd5J2plF/dnLS6Xd/
 github.com/cloudwego/base64x v0.1.4/go.mod h1:0zlkT4Wn5C6NdauXdJRhSKRlJvmclQ1hhJgA0rcu/8w=
 github.com/cloudwego/iasm v0.2.0 h1:1KNIy1I1H9hNNFEEH3DVnI4UujN+1zjpuk6gwHLTssg=
 github.com/cloudwego/iasm v0.2.0/go.mod h1:8rXZaNYT2n95jn+zTI1sDr+IgcD2GVs0nlbbQPiEFhY=
+github.com/creack/pty v1.1.24 h1:bJrF4RRfyJnbTJqzRLHzcGaZK1NeM5kTC9jGgovnR1s=
+github.com/creack/pty v1.1.24/go.mod h1:08sCNb52WyoAwi2QDyzUCTgcvVFhUzewun7wtTfvcwE=
 github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
 github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
 github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc h1:U9qPSI2PIWSS1VwoXQT9A3Wy9MM3WgvqSxFWenqJduM=
@@ -34,6 +36,8 @@ github.com/goccy/go-json v0.10.2 h1:CrxCmQqYDkv1z7lO7Wbh2HN93uovUHgrECaO5ZrCXAU=
 github.com/goccy/go-json v0.10.2/go.mod h1:6MelG93GURQebXPDq3khkgXZkazVtN9CRI+MGFi0w8I=
 github.com/golang-jwt/jwt/v5 v5.2.1 h1:OuVbFODueb089Lh128TAcimifWaLhJwVflnrgM17wHk=
 github.com/golang-jwt/jwt/v5 v5.2.1/go.mod h1:pqrtFR0X4osieyHYxtmOUWsAWrfe1Q5UVIyoH402zdk=
+github.com/golang-jwt/jwt/v5 v5.2.2 h1:Rl4B7itRWVtYIHFrSNd7vhTiz9UpLdi6gZhZ3wEeDy8=
+github.com/golang-jwt/jwt/v5 v5.2.2/go.mod h1:pqrtFR0X4osieyHYxtmOUWsAWrfe1Q5UVIyoH402zdk=
 github.com/google/go-cmp v0.5.9 h1:O2Tfq5qg4qc4AmwVlvv0oLiVAGB7enBSJ2x2DqQFi38=
 github.com/google/go-cmp v0.5.9/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY=
 github.com/google/gofuzz v1.0.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg=
@@ -156,21 +160,35 @@ go.uber.org/multierr v1.9.0/go.mod h1:X2jQV1h+kxSjClGpnseKVIxpmcjrj7MNnI0bnlfKTV
 golang.org/x/arch v0.0.0-20210923205945-b76863e36670/go.mod h1:5om86z9Hs0C8fWVUuoMHwpExlXzs5Tkyp9hOrfG7pp8=
 golang.org/x/arch v0.8.0 h1:3wRIsP3pM4yUptoR96otTUOXI367OS0+c9eeRi9doIc=
 golang.org/x/arch v0.8.0/go.mod h1:FEVrYAQjsQXMVJ1nsMoVVXPZg6p2JE2mx8psSWTDQys=
-golang.org/x/crypto v0.28.0 h1:GBDwsMXVQi34v5CCYUm2jkJvu4cbtru2U4TN2PSyQnw=
-golang.org/x/crypto v0.28.0/go.mod h1:rmgy+3RHxRZMyY0jjAJShp2zgEdOqj2AO7U0pYmeQ7U=
+golang.org/x/crypto v0.31.0 h1:ihbySMvVjLAeSH1IbfcRTkD/iNscyz8rGzjF/E5hV6U=
+golang.org/x/crypto v0.31.0/go.mod h1:kDsLvtWBEx7MV9tJOj9bnXsPbxwJQ6csT/x4KIN4Ssk=
+golang.org/x/crypto v0.36.0 h1:AnAEvhDddvBdpY+uR+MyHmuZzzNqXSe/GvuDeob5L34=
+golang.org/x/crypto v0.36.0/go.mod h1:Y4J0ReaxCR1IMaabaSMugxJES1EpwhBHhv2bDHklZvc=
+golang.org/x/crypto v0.37.0 h1:kJNSjF/Xp7kU0iB2Z+9viTPMW4EqqsrywMXLJOOsXSE=
+golang.org/x/crypto v0.37.0/go.mod h1:vg+k43peMZ0pUMhYmVAWysMK35e6ioLh3wB8ZCAfbVc=
 golang.org/x/exp v0.0.0-20230905200255-921286631fa9 h1:GoHiUyI/Tp2nVkLI2mCxVkOjsbSXD66ic0XW0js0R9g=
 golang.org/x/exp v0.0.0-20230905200255-921286631fa9/go.mod h1:S2oDrQGGwySpoQPVqRShND87VCbxmc6bL1Yd2oYrm6k=
-golang.org/x/net v0.29.0 h1:5ORfpBpCs4HzDYoodCDBbwHzdR5UrLBZ3sOnUJmFoHo=
-golang.org/x/net v0.29.0/go.mod h1:gLkgy8jTGERgjzMic6DS9+SP0ajcu6Xu3Orq/SpETg0=
+golang.org/x/net v0.33.0 h1:74SYHlV8BIgHIFC/LrYkOGIwL19eTYXQ5wc6TBuO36I=
+golang.org/x/net v0.33.0/go.mod h1:HXLR5J+9DxmrqMwG9qjGCxZ+zKXxBru04zlTvWlWuN4=
+golang.org/x/net v0.37.0 h1:1zLorHbz+LYj7MQlSf1+2tPIIgibq2eL5xkrGk6f+2c=
+golang.org/x/net v0.37.0/go.mod h1:ivrbrMbzFq5J41QOQh0siUuly180yBYtLp+CKbEaFx8=
+golang.org/x/net v0.39.0 h1:ZCu7HMWDxpXpaiKdhzIfaltL9Lp31x/3fCP11bc6/fY=
+golang.org/x/net v0.39.0/go.mod h1:X7NRbYVEA+ewNkCNyJ513WmMdQ3BineSwVtN2zD/d+E=
 golang.org/x/sys v0.0.0-20220715151400-c0bba94af5f8/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.26.0 h1:KHjCJyddX0LoSTb3J+vWpupP9p0oznkqVk/IfjymZbo=
-golang.org/x/sys v0.26.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
-golang.org/x/term v0.25.0 h1:WtHI/ltw4NvSUig5KARz9h521QvRC8RmF/cuYqifU24=
-golang.org/x/term v0.25.0/go.mod h1:RPyXicDX+6vLxogjjRxjgD2TKtmAO6NZBsBRfrOLu7M=
-golang.org/x/text v0.19.0 h1:kTxAhCbGbxhK0IwgSKiMO5awPoDQ0RpfiVYBfK860YM=
-golang.org/x/text v0.19.0/go.mod h1:BuEKDfySbSR4drPmRPG/7iBdf8hvFMuRexcpahXilzY=
+golang.org/x/sys v0.28.0 h1:Fksou7UEQUWlKvIdsqzJmUmCX3cZuD2+P3XyyzwMhlA=
+golang.org/x/sys v0.28.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
+golang.org/x/sys v0.31.0 h1:ioabZlmFYtWhL+TRYpcnNlLwhyxaM9kWTDEmfnprqik=
+golang.org/x/sys v0.31.0/go.mod h1:BJP2sWEmIv4KK5OTEluFJCKSidICx8ciO85XgH3Ak8k=
+golang.org/x/sys v0.32.0 h1:s77OFDvIQeibCmezSnk/q6iAfkdiQaJi4VzroCFrN20=
+golang.org/x/sys v0.32.0/go.mod h1:BJP2sWEmIv4KK5OTEluFJCKSidICx8ciO85XgH3Ak8k=
+golang.org/x/text v0.21.0 h1:zyQAAkrwaneQ066sspRyJaG9VNi/YJ1NfzcGB3hZ/qo=
+golang.org/x/text v0.21.0/go.mod h1:4IBbMaMmOPCJ8SecivzSH54+73PCFmPWxNTLm+vZkEQ=
+golang.org/x/text v0.23.0 h1:D71I7dUrlY+VX0gQShAThNGHFxZ13dGLBHQLVl1mJlY=
+golang.org/x/text v0.23.0/go.mod h1:/BLNzu4aZCJ1+kcD0DNRotWKage4q2rGVAg4o22unh4=
+golang.org/x/text v0.24.0 h1:dd5Bzh4yt5KYA8f9CJHCP4FB4D51c2c6JvN37xJJkJ0=
+golang.org/x/text v0.24.0/go.mod h1:L8rBsPeo2pSS+xqN0d5u2ikmjtmoJbDBT1b7nHvFCdU=
 google.golang.org/protobuf v1.34.1 h1:9ddQBjfCyZPOHPUiPxpYESBLc+T8P3E+Vo4IbKZgFWg=
 google.golang.org/protobuf v1.34.1/go.mod h1:c6P6GXX6sHbq/GpV6MGZEdwhWPcYBgnhAHhKbcUYpos=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
--- a/server/include/kvm_vision.h
+++ b/server/include/kvm_vision.h
@@ -1,3 +1,5 @@
+
+
 #ifndef KVM_VISION_H_
 #define KVM_VISION_H_

@@ -11,6 +13,7 @@ extern "C" {
 #include <stdint.h>
 #include <stdlib.h>
 #include <pthread.h>
+#include <time.h>

 #define IMG_BUFFER_FULL			-3
 #define IMG_VENC_ERROR			-2
@@ -21,7 +24,14 @@ extern "C" {
 #define IMG_H264_TYPE_IF		3
 #define IMG_H264_TYPE_PF		4

+#define NORMAL_RES                      0
+#define NEW_RES                         1
+#define UNSUPPORT_RES                   2
+#define UNKNOWN_RES                     3
+#define ERROR_RES                       4
+
 void kvmv_init(uint8_t _debug_info_en);
+void set_venc_auto_recyc(uint8_t _enable);
 /**********************************************************************************
 * @name    kvmv_read_img
 * @author  Sipeed BuGu
@@ -35,25 +45,30 @@ void kvmv_init(uint8_t _debug_info_en);
 * @param	_pp_kvm_data		@output: 	Encode data
 * @param	_p_kvmv_data_size	@output: 	Encode data size
 * @return
+        -7: HDMI INPUT RES ERROR
+        -6: Unsupported resolution, please modify it in the host settings.
+        -5: Retrieving image, please wait
+        -4: Modifying image resolution, please wait
        -3: img buffer full
        -2: VENC Error
        -1: No images were acquired
         0: Acquire MJPEG encoded images
-         1: Acquire H264 encoded images(SPS)
-         2: Acquire H264 encoded images(PPS)
+         1: Acquire H264 encoded images(SPS)[Deprecated]
+         2: Acquire H264 encoded images(PPS)[Deprecated]
         3: Acquire H264 encoded images(I)
         4: Acquire H264 encoded images(P)
+         5: IMG not changed
 **********************************************************************************/
 int kvmv_read_img(uint16_t _width, uint16_t _height, uint8_t _type, uint16_t _qlty, uint8_t** _pp_kvm_data, uint32_t* _p_kvmv_data_size);
-int kvmv_get_sps_frame(uint8_t** _pp_kvm_data, uint32_t* _p_kvmv_data_size);
-int kvmv_get_pps_frame(uint8_t** _pp_kvm_data, uint32_t* _p_kvmv_data_size);
 int free_kvmv_data(uint8_t ** _pp_kvm_data);
 void free_all_kvmv_data();
 void set_h264_gop(uint8_t _gop);
+void set_frame_detact(uint8_t _frame_detact);
 void kvmv_deinit();
+uint8_t kvmv_hdmi_control(uint8_t _en);

 #ifdef __cplusplus
 }
 #endif

-#endif // KVM_VISION_H_
+#endif // KVM_VISION_H_
--- a/server/logger/formatter.go
+++ b/server/logger/formatter.go
@@ -22,7 +22,7 @@ func (f *formatter) Format(entry *logrus.Entry) ([]byte, error) {
 		buffer = &bytes.Buffer{}
 	}

-	now := entry.Time.Format("2006-01-02 15:04:05")
+	now := entry.Time.Format("2006-01-02 15:04:05.000")

 	if entry.HasCaller() {
 		fileName := filepath.Base(entry.Caller.File)
--- a/server/main.go
+++ b/server/main.go
@@ -1,15 +1,21 @@
 package main

 import (
+	"fmt"
+	"log"
+	"net/http"
+	"os"
+	"os/signal"
+	"strings"
+	"syscall"
+	"time"
+
 	"NanoKVM-Server/common"
 	"NanoKVM-Server/config"
 	"NanoKVM-Server/logger"
 	"NanoKVM-Server/middleware"
 	"NanoKVM-Server/router"
-	"fmt"
-	"os"
-	"os/signal"
-	"syscall"
+	"NanoKVM-Server/service/vm/jiggler"

 	"github.com/gin-gonic/gin"
 	cors "github.com/rs/cors/wrapper/gin"
@@ -18,42 +24,61 @@ import (
 func main() {
 	initialize()
 	defer dispose()
-	signalHandler()

-	gin.SetMode(gin.ReleaseMode)
-	r := gin.New()
-	r.Use(gin.Recovery())
-	r.Use(cors.AllowAll())
-
-	router.Init(r)
-
-	run(r)
+	run()
 }

 func initialize() {
 	logger.Init()
+
+	// init screen parameters
 	_ = common.GetScreen()
-	_ = common.GetKvmVision()
+
+	// init HDMI
+	vision := common.GetKvmVision()
+	vision.SetHDMI(false)
+	time.Sleep(10 * time.Millisecond)
+	vision.SetHDMI(true)
+
+	// run mouse jiggler
+	jiggler.GetJiggler().Run()
+
+	sigChan := make(chan os.Signal, 1)
+	signal.Notify(sigChan, syscall.SIGINT, syscall.SIGTERM, syscall.SIGQUIT)
+	go func() {
+		sig := <-sigChan
+		log.Printf("\nReceived signal: %v\n", sig)
+
+		dispose()
+		os.Exit(0)
+	}()
 }

-func run(r *gin.Engine) {
+func run() {
 	conf := config.GetInstance()

+	gin.SetMode(gin.ReleaseMode)
+	r := gin.New()
+	r.Use(gin.Recovery())
+	if conf.Authentication == "disable" {
+		r.Use(cors.AllowAll())
+	}
+
+	router.Init(r)
+
 	httpAddr := fmt.Sprintf(":%d", conf.Port.Http)
 	httpsAddr := fmt.Sprintf(":%d", conf.Port.Https)

-	if conf.Protocol == "https" {
-		r.Use(middleware.Tls())
-
+	if conf.Proto == "https" {
 		go func() {
-			if err := r.Run(httpAddr); err != nil {
-				panic("start http server failed")
+			r.Use(middleware.Tls())
+			err := r.RunTLS(httpsAddr, conf.Cert.Crt, conf.Cert.Key)
+			if err != nil {
+				panic("start https server failed")
 			}
 		}()

-		if err := r.RunTLS(httpsAddr, conf.Cert.Crt, conf.Cert.Key); err != nil {
-			panic("start https server failed")
-		}
+		runRedirect(httpAddr, httpsAddr)
 	} else {
 		if err := r.Run(httpAddr); err != nil {
 			panic("start http server failed")
@@ -61,19 +86,26 @@ func run(r *gin.Engine) {
 	}
 }

+func runRedirect(httpPort string, httpsPort string) {
+	err := http.ListenAndServe(httpPort, http.HandlerFunc(func(w http.ResponseWriter, req *http.Request) {
+		host := req.Host
+		if strings.Contains(host, httpPort) {
+			host = strings.Split(host, httpPort)[0]
+		}
+
+		targetURL := "https://" + host + req.URL.String()
+		if httpsPort != ":443" {
+			targetURL = "https://" + host + httpsPort + req.URL.String()
+		}
+
+		http.Redirect(w, req, targetURL, http.StatusTemporaryRedirect)
+	}))
+
+	if err != nil {
+		panic("start http server failed")
+	}
+}
+
 func dispose() {
 	common.GetKvmVision().Close()
 }
-
-func signalHandler() {
-	sigChan := make(chan os.Signal, 1)
-	signal.Notify(sigChan, syscall.SIGINT, syscall.SIGTERM, syscall.SIGQUIT)
-
-	go func() {
-		sig := <-sigChan
-		fmt.Printf("\nReceived signal: %v\n", sig)
-
-		dispose()
-		os.Exit(0)
-	}()
-}
--- a/server/middleware/jwt.go
+++ b/server/middleware/jwt.go
@@ -16,10 +16,6 @@ type Token struct {
 	jwt.RegisteredClaims
 }

-const (
-	ExpireDuration = 31 * 24 * time.Hour
-)
-
 func CheckToken() gin.HandlerFunc {
 	return func(c *gin.Context) {
 		conf := config.GetInstance()
@@ -46,24 +42,25 @@ func CheckToken() gin.HandlerFunc {
 func GenerateJWT(username string) (string, error) {
 	conf := config.GetInstance()

+	expireDuration := time.Duration(conf.JWT.RefreshTokenDuration) * time.Second
+
 	claims := Token{
 		Username: username,
 		RegisteredClaims: jwt.RegisteredClaims{
-			ExpiresAt: jwt.NewNumericDate(time.Now().Add(ExpireDuration)),
+			ExpiresAt: jwt.NewNumericDate(time.Now().Add(expireDuration)),
 		},
 	}

 	t := jwt.NewWithClaims(jwt.SigningMethodHS256, claims)

-	return t.SignedString([]byte(conf.SecretKey))
+	return t.SignedString([]byte(conf.JWT.SecretKey))
 }

 func ParseJWT(jwtToken string) (*Token, error) {
 	conf := config.GetInstance()

 	t, err := jwt.ParseWithClaims(jwtToken, &Token{}, func(token *jwt.Token) (interface{}, error) {
-		secretKey := conf.SecretKey
-		return []byte(secretKey), nil
+		return []byte(conf.JWT.SecretKey), nil
 	})
 	if err != nil {
 		log.Debugf("parse jwt error: %s", err)
--- a/server/proto/application.go
+++ b/server/proto/application.go
@@ -5,6 +5,10 @@ type GetVersionRsp struct {
 	Latest  string `json:"latest"`
 }

-type GetLibRsp struct {
-	Exist bool `json:"exist"`
+type GetPreviewRsp struct {
+	Enabled bool `json:"enabled"`
+}
+
+type SetPreviewReq struct {
+	Enable bool `validate:"omitempty"`
 }
--- a/server/proto/auth.go
+++ b/server/proto/auth.go
@@ -9,6 +9,10 @@ type LoginRsp struct {
 	Token string `json:"token"`
 }

+type GetAccountRsp struct {
+	Username string `json:"username"`
+}
+
 type ChangePasswordReq struct {
 	Username string `json:"username" validate:"required"`
 	Password string `json:"password" validate:"required"`
@@ -17,3 +21,8 @@ type ChangePasswordReq struct {
 type IsPasswordUpdatedRsp struct {
 	IsUpdated bool `json:"isUpdated"`
 }
+
+type ConnectWifiReq struct {
+	Ssid     string `validate:"required"`
+	Password string `valid:"required"`
+}
--- a/server/proto/download.go
+++ b/server/proto/download.go
@@ -0,0 +1,11 @@
+package proto
+
+type ImageEnabledRsp struct {
+	Enabled bool `json:"enabled"`
+}
+
+type StatusImageRsp struct {
+	Status     string `json:"status"`
+	File       string `json:"file"`
+	Percentage string `json:"percentage"`
+}
--- a/server/proto/hid.go
+++ b/server/proto/hid.go
@@ -0,0 +1,9 @@
+package proto
+
+type GetHidModeRsp struct {
+	Mode string `json:"mode"` // normal or hid-only
+}
+
+type SetHidModeReq struct {
+	Mode string `validate:"required"` // normal or hid-only
+}
--- a/server/proto/network.go
+++ b/server/proto/network.go
@@ -12,22 +12,33 @@ type DeleteMacReq struct {
 	Mac string `form:"mac" validate:"required"`
 }

+type SetMacNameReq struct {
+	Mac  string `form:"mac" validate:"required"`
+	Name string `form:"name" validate:"required"`
+}
+
+type TailscaleState string
+
+const (
+	TailscaleNotInstall TailscaleState = "notInstall"
+	TailscaleNotRunning TailscaleState = "notRunning"
+	TailscaleNotLogin   TailscaleState = "notLogin"
+	TailscaleStopped    TailscaleState = "stopped"
+	TailscaleRunning    TailscaleState = "running"
+)
+
 type GetTailscaleStatusRsp struct {
-	Status  string `json:"status"` // notInstall | notLogin | stopped | running
-	Name    string `json:"name"`
-	IP      string `json:"ip"`
-	Account string `json:"account"`
-}
-
-type UpdateTailscaleStatusReq struct {
-	Command string // up | down
-}
-
-type UpdateTailscaleStatusRsp struct {
-	Status string `json:"status"` // stopped | running
+	State   TailscaleState `json:"state"`
+	Name    string         `json:"name"`
+	IP      string         `json:"ip"`
+	Account string         `json:"account"`
 }

 type LoginTailscaleRsp struct {
-	Status string `json:"status"`
-	Url    string `json:"url"`
+	Url string `json:"url"`
+}
+
+type GetWifiRsp struct {
+	Supported bool `json:"supported"`
+	Connected bool `json:"connected"`
 }
--- a/server/proto/storage.go
+++ b/server/proto/storage.go
@@ -5,9 +5,14 @@ type GetImagesRsp struct {
 }

 type MountImageReq struct {
-	File string `json:"file" validate:"omitempty"`
+	File  string `json:"file" validate:"omitempty"`
+	Cdrom bool   `json:"cdrom" validate:"omitempty"`
 }

 type GetMountedImageRsp struct {
 	File string `json:"file"`
 }
+
+type GetCdRomRsp struct {
+	Cdrom int64 `json:"cdrom"`
+}
--- a/server/proto/stream.go
+++ b/server/proto/stream.go
@@ -1,9 +1,9 @@
 package proto

-type GetFrameDetectRsp struct {
-	Enabled bool `json:"enabled"`
+type UpdateFrameDetectReq struct {
+	Enabled bool `validate:"omitempty"`
 }

-type UpdateFrameDetectRsp struct {
-	Enabled bool `json:"enabled"`
+type StopFrameDetectReq struct {
+	Duration int `validate:"omitempty"`
 }
--- a/server/proto/vm.go
+++ b/server/proto/vm.go
@@ -1,13 +1,24 @@
 package proto

+type IP struct {
+	Name    string `json:"name"`
+	Addr    string `json:"addr"`
+	Version string `json:"version"`
+	Type    string `json:"type"`
+}
+
 type GetInfoRsp struct {
-	Ip          string `json:"ip"`
+	IPs         []IP   `json:"ips"`
 	Mdns        string `json:"mdns"`
 	Image       string `json:"image"`
 	Application string `json:"application"`
 	DeviceKey   string `json:"deviceKey"`
 }

+type GetHardwareRsp struct {
+	Version string `json:"version"`
+}
+
 type SetGpioReq struct {
 	Type     string `validate:"required"`  // reset / power
 	Duration uint   `validate:"omitempty"` // press time (unit: milliseconds)
@@ -56,3 +67,68 @@ type UpdateVirtualDeviceReq struct {
 type UpdateVirtualDeviceRsp struct {
 	On bool `json:"on"`
 }
+
+type SetMemoryLimitReq struct {
+	Enabled bool  `validate:"omitempty"`
+	Limit   int64 `validate:"omitempty"`
+}
+
+type GetMemoryLimitRsp struct {
+	Enabled bool  `json:"enabled"`
+	Limit   int64 `json:"limit"`
+}
+
+type SetOledReq struct {
+	Sleep int `validate:"omitempty"`
+}
+
+type GetOLEDRsp struct {
+	Exist bool `json:"exist"`
+	Sleep int  `json:"sleep"`
+}
+
+type GetSSHStateRsp struct {
+	Enabled bool `json:"enabled"`
+}
+
+type GetSwapRsp struct {
+	Size int64 `json:"size"` // unit: MB
+}
+
+type SetSwapReq struct {
+	Size int64 `validate:"omitempty"` // unit: MB
+}
+
+type GetMouseJigglerRsp struct {
+	Enabled bool   `json:"enabled"`
+	Mode    string `json:"mode"`
+}
+
+type SetMouseJigglerReq struct {
+	Enabled bool   `validate:"omitempty"`
+	Mode    string `validate:"omitempty"`
+}
+
+type GetMdnsStateRsp struct {
+	Enabled bool `json:"enabled"`
+}
+
+type SetHostnameReq struct {
+	Hostname string `validate:"required"`
+}
+
+type GetHostnameRsp struct {
+	Hostname string `json:"hostname"`
+}
+
+type SetWebTitleReq struct {
+	Title string `validate:"omitempty"`
+}
+
+type GetWebTitleRsp struct {
+	Title string `json:"title"`
+}
+
+type SetTlsReq struct {
+	Enabled bool `validate:"omitempty"`
+}
--- a/server/router/application.go
+++ b/server/router/application.go
@@ -13,4 +13,7 @@ func applicationRouter(r *gin.Engine) {

 	api.GET("/application/version", service.GetVersion) // get application version
 	api.POST("/application/update", service.Update)     // update application
+
+	api.GET("/application/preview", service.GetPreview)  // get preview updates state
+	api.POST("/application/preview", service.SetPreview) // set preview updates state
 }
--- a/server/router/auth.go
+++ b/server/router/auth.go
@@ -15,5 +15,7 @@ func authRouter(r *gin.Engine) {
 	api := r.Group("/api").Use(middleware.CheckToken())

 	api.GET("/auth/password", service.IsPasswordUpdated) // is password updated
+	api.GET("/auth/account", service.GetAccount)         // get account
 	api.POST("/auth/password", service.ChangePassword)   // change password
+	api.POST("/auth/logout", service.Logout)             // logout
 }
--- a/server/router/download.go
+++ b/server/router/download.go
@@ -0,0 +1,17 @@
+package router
+
+import (
+	"NanoKVM-Server/service/download"
+	"github.com/gin-gonic/gin"
+
+	"NanoKVM-Server/middleware"
+)
+
+func downloadRouter(r *gin.Engine) {
+	service := download.NewService()
+	api := r.Group("/api").Use(middleware.CheckToken())
+
+	api.POST("/download/image", service.DownloadImage)       // download image
+	api.GET("/download/image/status", service.StatusImage)   // download image
+	api.GET("/download/image/enabled", service.ImageEnabled) // download image
+}
--- a/server/router/extensions.go
+++ b/server/router/extensions.go
@@ -0,0 +1,25 @@
+package router
+
+import (
+	"NanoKVM-Server/middleware"
+	"NanoKVM-Server/service/extensions/tailscale"
+
+	"github.com/gin-gonic/gin"
+)
+
+func extensionsRouter(r *gin.Engine) {
+	api := r.Group("/api/extensions").Use(middleware.CheckToken())
+
+	ts := tailscale.NewService()
+
+	api.POST("/tailscale/install", ts.Install)     // install tailscale
+	api.POST("/tailscale/uninstall", ts.Uninstall) // uninstall tailscale
+	api.GET("/tailscale/status", ts.GetStatus)     // get tailscale status
+	api.POST("/tailscale/up", ts.Up)               // run tailscale up
+	api.POST("/tailscale/down", ts.Down)           // run tailscale down
+	api.POST("/tailscale/login", ts.Login)         // tailscale login
+	api.POST("/tailscale/logout", ts.Logout)       // tailscale logout
+	api.POST("/tailscale/start", ts.Start)         // tailscale start
+	api.POST("/tailscale/stop", ts.Stop)           // tailscale stop
+	api.POST("/tailscale/restart", ts.Restart)     // tailscale restart
+}
--- a/server/router/hid.go
+++ b/server/router/hid.go
@@ -13,4 +13,7 @@ func hidRouter(r *gin.Engine) {

 	api.POST("/hid/reset", service.Reset) // reset hid
 	api.POST("/hid/paste", service.Paste) // paste
+
+	api.GET("/hid/mode", service.GetHidMode)  // get hid mode
+	api.POST("/hid/mode", service.SetHidMode) // set hid mode
 }
--- a/server/router/network.go
+++ b/server/router/network.go
@@ -9,15 +9,14 @@ import (

 func networkRouter(r *gin.Engine) {
 	service := network.NewService()
+
+	r.POST("/api/network/wifi", service.ConnectWifi) // connect Wi-Fi
+
 	api := r.Group("/api").Use(middleware.CheckToken())

-	api.POST("/network/wol", service.WakeOnLAN)       // wake on lan
-	api.GET("/network/wol/mac", service.GetMac)       // get mac list
-	api.DELETE("/network/wol/mac", service.DeleteMac) // delete mac
-
-	api.POST("/network/tailscale/install", service.InstallTailscale)     // install tailscale
-	api.GET("/network/tailscale/status", service.GetTailscaleStatus)     // get tailscale status
-	api.POST("/network/tailscale/status", service.UpdateTailscaleStatus) // update tailscale status
-	api.POST("/network/tailscale/login", service.LoginTailscale)         // tailscale login
-	api.POST("/network/tailscale/logout", service.LogoutTailscale)       // tailscale logout
+	api.POST("/network/wol", service.WakeOnLAN)           // wake on lan
+	api.GET("/network/wol/mac", service.GetMac)           // get mac list
+	api.DELETE("/network/wol/mac", service.DeleteMac)     // delete mac
+	api.POST("/network/wol/mac/name", service.SetMacName) // set mac name
+	api.GET("/network/wifi", service.GetWifi)             // get Wi-Fi information
 }
--- a/server/router/router.go
+++ b/server/router/router.go
@@ -37,4 +37,6 @@ func server(r *gin.Engine) {
 	networkRouter(r)
 	hidRouter(r)
 	wsRouter(r)
+	downloadRouter(r)
+	extensionsRouter(r)
 }
--- a/server/router/storage.go
+++ b/server/router/storage.go
@@ -14,4 +14,5 @@ func storageRouter(r *gin.Engine) {
 	api.GET("/storage/image", service.GetImages)               // get image list
 	api.GET("/storage/image/mounted", service.GetMountedImage) // get mounted image
 	api.POST("/storage/image/mount", service.MountImage)       // mount image
+	api.GET("/storage/cdrom", service.GetCdRom)                // get CD-ROM flag
 }
--- a/server/router/stream.go
+++ b/server/router/stream.go
@@ -2,6 +2,7 @@ package router

 import (
 	"NanoKVM-Server/middleware"
+	"NanoKVM-Server/service/stream/direct"
 	"NanoKVM-Server/service/stream/h264"
 	"NanoKVM-Server/service/stream/mjpeg"

@@ -12,9 +13,9 @@ func streamRouter(r *gin.Engine) {
 	api := r.Group("/api").Use(middleware.CheckToken())

 	api.GET("/stream/mjpeg", mjpeg.Connect)                      // mjpeg stream
-	api.GET("/stream/mjpeg/detect", mjpeg.GetFrameDetect)        // get frame detect state
-	api.POST("/stream/mjpeg/detect", mjpeg.UpdateFrameDetect)    // update frame detect state
+	api.POST("/stream/mjpeg/detect", mjpeg.UpdateFrameDetect)    // update frame detect
 	api.POST("/stream/mjpeg/detect/stop", mjpeg.StopFrameDetect) // temporary stop frame detect

-	api.GET("/stream/h264", h264.Connect) // h264 stream
+	api.GET("/stream/h264", h264.Connect)          // h264 stream (webrtc)
+	api.GET("/stream/h264/direct", direct.Connect) // h264 stream (http)
 }
--- a/server/router/vm.go
+++ b/server/router/vm.go
@@ -9,9 +9,11 @@ import (

 func vmRouter(r *gin.Engine) {
 	service := vm.NewService()
+
 	api := r.Group("/api").Use(middleware.CheckToken())

-	api.GET("/vm/info", service.GetInfo) // get device information
+	api.GET("/vm/info", service.GetInfo)         // get device information
+	api.GET("/vm/hardware", service.GetHardware) // get hardware version

 	api.POST("/vm/gpio", service.SetGpio)     // update gpio
 	api.GET("/vm/gpio", service.GetGpio)      // get gpio
@@ -26,4 +28,36 @@ func vmRouter(r *gin.Engine) {

 	api.GET("/vm/device/virtual", service.GetVirtualDevice)     // get virtual device
 	api.POST("/vm/device/virtual", service.UpdateVirtualDevice) // update virtual device
+
+	api.GET("/vm/memory/limit", service.GetMemoryLimit)  // get memory limit
+	api.POST("/vm/memory/limit", service.SetMemoryLimit) // set memory limit
+
+	api.GET("/vm/oled", service.GetOLED)  // get OLED configuration
+	api.POST("/vm/oled", service.SetOLED) // set OLED configuration
+
+	api.POST("/vm/hdmi/reset", service.ResetHdmi) // reset hdmi (pcie only)
+
+	api.GET("/vm/ssh", service.GetSSHState)         // get SSH state
+	api.POST("/vm/ssh/enable", service.EnableSSH)   // enable SSH
+	api.POST("/vm/ssh/disable", service.DisableSSH) // disable SSH
+
+	api.GET("/vm/swap", service.GetSwap)  // get swap file size
+	api.POST("/vm/swap", service.SetSwap) // set swap file size
+
+	api.GET("/vm/mouse-jiggler", service.GetMouseJiggler)   // get mouse jiggler
+	api.POST("/vm/mouse-jiggler/", service.SetMouseJiggler) // set mouse jiggler
+
+	api.GET("/vm/hostname", service.GetHostname)  // Get Hostname
+	api.POST("/vm/hostname", service.SetHostname) // Set Hostname
+
+	api.GET("/vm/web-title", service.GetWebTitle)  // Get web title
+	api.POST("/vm/web-title", service.SetWebTitle) // Set web title
+
+	api.GET("/vm/mdns", service.GetMdnsState)         // get mDNS state
+	api.POST("/vm/mdns/enable", service.EnableMdns)   // enable mDNS
+	api.POST("/vm/mdns/disable", service.DisableMdns) // disable mDNS
+
+	api.POST("/vm/tls", service.SetTls) // enable/disable TLS
+
+	api.POST("/vm/system/reboot", service.Reboot) // reboot system
 }
--- a/server/service/application/application.go
+++ b/server/service/application/application.go
@@ -1,211 +0,0 @@
-package application
-
-import (
-	"fmt"
-	"io"
-	"net/http"
-	"os"
-	"os/exec"
-	"strings"
-	"time"
-
-	"github.com/gin-gonic/gin"
-	log "github.com/sirupsen/logrus"
-
-	"NanoKVM-Server/proto"
-	"NanoKVM-Server/utils"
-)
-
-const (
-	maxTries = 3
-)
-
-func (s *Service) GetVersion(c *gin.Context) {
-	var rsp proto.Response
-	log.Debugf("get version api triggered")
-
-	// current version
-	currentVersion := "1.0.0"
-	content, err := os.ReadFile(versionFile)
-	if err == nil {
-		currentVersion = strings.ReplaceAll(string(content), "\n", "")
-	}
-	log.Debugf("current version: %s", currentVersion)
-
-	// latest version
-	url := fmt.Sprintf("%s?now=%d", versionURL, time.Now().Unix())
-	resp, err := http.Get(url)
-	if err != nil {
-		log.Debugf("get latest version failed: %v", err)
-		rsp.ErrRsp(c, -2, "Unable to access sipeed.com. Please check your network.")
-		return
-	}
-	defer func() {
-		_ = resp.Body.Close()
-	}()
-
-	body, err := io.ReadAll(resp.Body)
-	if err != nil {
-		log.Errorf("read body failed: %v", err)
-		rsp.ErrRsp(c, -4, "read body failed")
-		return
-	}
-
-	if resp.StatusCode != http.StatusOK {
-		log.Errorf("server responded with status code: %d", resp.StatusCode)
-		rsp.ErrRsp(c, -3, fmt.Sprintf("get version failed, server returns status code: %d, body: %s", resp.StatusCode, string(body)))
-		return
-	}
-
-	latestVersion := strings.ReplaceAll(string(body), "\n", "")
-
-	rsp.OkRspWithData(c, &proto.GetVersionRsp{
-		Current: currentVersion,
-		Latest:  latestVersion,
-	})
-}
-
-func (s *Service) Update(c *gin.Context) {
-	var rsp proto.Response
-	log.Debugf("update application api triggered")
-
-	if err := updateApp(); err != nil {
-		log.Debugf("update failed: %s", err)
-		rsp.ErrRsp(c, -1, fmt.Sprintf("update failed: %s", err))
-		return
-	}
-
-	rsp.OkRsp(c)
-	log.Debugf("update application success")
-
-	// Sleep for a second before restarting the device
-	time.Sleep(1 * time.Second)
-
-	_ = exec.Command("sh", "-c", "/etc/init.d/S95nanokvm restart").Run()
-}
-
-func updateApp() error {
-	log.Debugf("update application")
-	_ = os.RemoveAll(temporary)
-	_ = os.MkdirAll(temporary, 0o755)
-	defer func() {
-		_ = os.RemoveAll(temporary)
-	}()
-
-	if err := downloadLib(); err != nil {
-		log.Errorf("download lib failed: %s", err)
-		return err
-	}
-
-	if err := downloadApp(); err != nil {
-		log.Errorf("download app failed: %s", err)
-		return err
-	}
-
-	err := utils.MoveFile(temporary+"/"+libName, temporary+"/latest/kvm_system/dl_lib/"+libName) // move lib
-	if err != nil {
-		log.Errorf("rename lib failed: %s", err)
-		return err
-	}
-
-	// backup old version
-	err = os.RemoveAll(backup)
-	if err != nil {
-		log.Errorf("remove backup failed: %s", err)
-		return err
-	}
-
-	err = utils.MoveFilesRecursively(workspace, backup)
-	if err != nil {
-		log.Errorf("backuping old libraries failed: %s", err)
-		return err
-	}
-
-	// update
-	err = utils.MoveFilesRecursively(temporary+"/latest", workspace)
-	if err != nil {
-		log.Errorf("failed to move update back in place: %s", err)
-		return err
-	}
-
-	// modify permissions
-	err = utils.ChmodRecursively(workspace, 0o755)
-	if err != nil {
-		log.Errorf("chmod failed: %s", err)
-		return err
-	}
-
-	return nil
-}
-
-func downloadApp() error {
-	var err error
-	log.Debugf("downloading latest application...")
-	url := fmt.Sprintf("%s?now=%d", applicationURL, time.Now().Unix())
-	for i := range maxTries {
-		log.Debugf("attempt #%d/%d", i+1, maxTries)
-		if i > 0 {
-			time.Sleep(time.Second * 3) // wait for 3 seconds before retrying the download attempt
-		}
-
-		var req *http.Request
-		req, err = http.NewRequest("GET", url, nil)
-		if err != nil {
-			log.Errorf("new request err: %s", err)
-			continue
-		}
-
-		zipFile := temporary + "/latest.zip"
-		log.Debugf("update will be saved to: %s", zipFile)
-		err = utils.Download(req, zipFile)
-		if err != nil {
-			log.Errorf("downloading latest application failed, try again...")
-			continue
-		}
-
-		err = utils.Unzip(zipFile, temporary)
-		if err != nil {
-			log.Errorf("unzip app failed: %s", err)
-			continue
-		}
-
-		return nil
-	}
-	return err
-}
-
-func downloadLib() error {
-	log.Debugf("downloading libs...")
-	content, err := os.ReadFile("/device_key")
-	if err != nil {
-		log.Errorf("error reading device key: %s", err)
-		return err
-	}
-	deviceKey := strings.ReplaceAll(string(content), "\n", "")
-
-	for i := range maxTries {
-		log.Debugf("attempt #%d/%d", i+1, maxTries)
-		if i > 0 {
-			time.Sleep(time.Second * 3) // wait for 3 seconds before retrying the download attempt
-		}
-
-		var req *http.Request
-		url := fmt.Sprintf("%s?uid=%s", libURL, deviceKey)
-		req, err = http.NewRequest("GET", url, nil)
-		if err != nil {
-			log.Errorf("error creating new request: %s", err)
-			continue
-		}
-		req.Header.Set("token", "MaixVision2024")
-
-		target := fmt.Sprintf("%s/%s", temporary, libName)
-
-		err = utils.Download(req, target)
-		if err != nil {
-			log.Errorf("downloading lib failed: %s", err)
-			continue
-		}
-		return nil
-	}
-	return err
-}
--- a/server/service/application/preview.go
+++ b/server/service/application/preview.go
@@ -0,0 +1,60 @@
+package application
+
+import (
+	"NanoKVM-Server/proto"
+	"os"
+
+	"github.com/gin-gonic/gin"
+	log "github.com/sirupsen/logrus"
+)
+
+const (
+	PreviewUpdatesFlag = "/etc/kvm/preview_updates"
+)
+
+func (s *Service) GetPreview(c *gin.Context) {
+	var rsp proto.Response
+
+	isEnabled := isPreviewEnabled()
+
+	rsp.OkRspWithData(c, &proto.GetPreviewRsp{
+		Enabled: isEnabled,
+	})
+}
+
+func (s *Service) SetPreview(c *gin.Context) {
+	var req proto.SetPreviewReq
+	var rsp proto.Response
+
+	if err := proto.ParseFormRequest(c, &req); err != nil {
+		rsp.ErrRsp(c, -1, "invalid arguments")
+		return
+	}
+
+	if req.Enable == isPreviewEnabled() {
+		rsp.OkRsp(c)
+		return
+	}
+
+	if req.Enable {
+		if err := os.WriteFile(PreviewUpdatesFlag, []byte("1"), 0o644); err != nil {
+			log.Errorf("failed to write %s: %s", PreviewUpdatesFlag, err)
+			rsp.ErrRsp(c, -2, "enable failed")
+			return
+		}
+	} else {
+		if err := os.Remove(PreviewUpdatesFlag); err != nil {
+			log.Errorf("failed to remove %s: %s", PreviewUpdatesFlag, err)
+			rsp.ErrRsp(c, -3, "disable failed")
+			return
+		}
+	}
+
+	rsp.OkRsp(c)
+	log.Debugf("set preview updates state: %t", req.Enable)
+}
+
+func isPreviewEnabled() bool {
+	_, err := os.Stat(PreviewUpdatesFlag)
+	return err == nil
+}
--- a/server/service/application/service.go
+++ b/server/service/application/service.go
@@ -1,15 +1,12 @@
 package application

 const (
-	versionURL     = "https://cdn.sipeed.com/nanokvm/latest"
-	applicationURL = "https://cdn.sipeed.com/nanokvm/latest.zip"
-	libURL         = "https://maixvision.sipeed.com/api/v1/nanokvm/encryption"
+	StableURL  = "https://cdn.sipeed.com/nanokvm"
+	PreviewURL = "https://cdn.sipeed.com/nanokvm/preview"

-	temporary   = "/root/.kvmcache"
-	workspace   = "/kvmapp"
-	backup      = "/root/old"
-	libName     = "libmaixcam_lib.so"
-	versionFile = "/kvmapp/version"
+	AppDir    = "/kvmapp"
+	BackupDir = "/root/old"
+	CacheDir  = "/root/.kvmcache"
 )

 type Service struct{}
--- a/Show More
+++ b/Show More