Panel: give the API Server a name, and a tab to set it in

The Web App can be pointed at more than one DriverVault, but a server it
adds is only ever identified by the URL that was typed into the connect
dialog. Nothing on the other end says what it is called, so the switcher
has no name to show that the operator did not invent locally.

So the server now carries one. SERVER_NAME joins the config, defaulting to
"DriverVault API Server" so /api/health always has something a client can
display rather than an empty string every caller has to special-case.

GET/PUT /api/admin/server-config follow the pb-config and webapp-config
shape exactly: superadmin only, applied at runtime and then persisted to
.env, with the same "applied but could not be saved" warning when the write
fails. There is no /test sibling, because a name is a label and not an
address - there is nothing to probe. The length cap counts runes rather
than bytes, so a 64-character Polish or Danish name is not cut off at the
halfway mark.

/api/health reports it, unauthenticated, which is the point of the whole
change: a client adding this server by URL can label it from the probe it
already makes, instead of needing a second and authenticated call before it
can draw the entry.

In the panel it is a new API Server tab, first in the superadmin group
since it is this server itself, ahead of the PocketBase and Web App tabs
that describe what it talks to. Strings in all three languages, and the
route table in the README and the API reference tab both grow the two new
endpoints.

Known gap, deliberately not closed here: the compose files do not pass
SERVER_NAME, so under Docker a rename from the panel writes the container's
.env and no volume keeps it - it reverts to the default the next time the
container is recreated. Wiring it as ${SERVER_NAME:-} would make the host
.env authoritative, at the cost of the other trap the previous commit
documented, where the environment silently overrides the panel on every
restart. That is a call about the deployment, not about this endpoint.

Verified by new tests over the handler: the rename applies at runtime,
lands in .env, reaches /api/health, is rejected without touching .env when
blank or over-long, and accepts a name of exactly the limit in multi-byte
runes. go build, go vet and go test ./... pass. Drove the built panel in a
browser against a stub backend - the tab renders, loads the current name,
saves, and reads correctly in Polish - and ran the rebuilt api-server.exe
and webapp.exe end to end, confirming the embedded bundle really contains
the new tab and that SERVER_NAME reaches /api/health through both the
server itself and the Web App's proxy.

Not verified: no Docker build, so the images still serve the old panel
until they are rebuilt and pushed.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

API Server/.env.example

@@ -18,6 +18,13 @@ POCKETBASE_URL=http://10.2.1.10:8027
 POCKETBASE_ADMIN_EMAIL=
 POCKETBASE_ADMIN_PASSWORD=
 
+# This server's display name, reported by GET /api/health so a client pointed at
+# several DriverVaults can tell them apart (the Web App's server switcher labels
+# an added server with it). Editable at runtime from the panel (API Server
+# section), which writes the change back into this file. Max 64 characters;
+# unset falls back to "DriverVault API Server".
+SERVER_NAME=
+
 # CORS allowed origins for browser clients (comma separated, or * for any).
 # Native mobile apps are not subject to CORS. Editable at runtime from the panel
 # (Web App section), which writes the change back into this file.

API Server/README.md

@@ -167,6 +167,7 @@ PATCH  /api/orgs/{id}                  DELETE /api/orgs/{id}
 # superadmin — connection + plugin management
 GET    /api/admin/pb-config            PUT    /api/admin/pb-config       POST /api/admin/pb-config/test
 GET    /api/admin/webapp-config        PUT    /api/admin/webapp-config   POST /api/admin/webapp-config/test
+GET    /api/admin/server-config        PUT    /api/admin/server-config
 GET    /api/admin/plugins              POST   /api/admin/plugins
 GET    /api/admin/plugins/{name}       PUT    /api/admin/plugins/{name}
 DELETE /api/admin/plugins/{name}       POST   /api/admin/plugins/{name}/health

API Server/internal/api/dist/index.html

@@ -6,7 +6,7 @@
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
     <meta name="theme-color" content="#2563eb" />
     <title>DriverVault · API Server</title>
-    <script type="module" crossorigin src="/assets/index-OHZkxAdj.js"></script>
+    <script type="module" crossorigin src="/assets/index-B4_v9nDZ.js"></script>
     <link rel="stylesheet" crossorigin href="/assets/index-D3MeNcl7.css">
   </head>
   <body>

API Server/internal/api/health.go

@@ -12,6 +12,9 @@ func (s *Server) handleHealth(w http.ResponseWriter, r *http.Request) {
 	writeJSON(w, http.StatusOK, map[string]any{
 		"status":  "ok",
 		"service": "drivervault-api",
+		// The operator-chosen display name, so a client adding this server by URL
+		// can label it without a second (authenticated) call.
+		"name": s.serverName(),
 		"time": time.Now().UTC().Format(time.RFC3339),
 	})
 }

API Server/internal/api/server.go

@@ -39,6 +39,7 @@
 //	POST   /api/admin/pb-config/test
 //	GET    /api/admin/webapp-config    PUT    /api/admin/webapp-config
 //	POST   /api/admin/webapp-config/test
+//	GET    /api/admin/server-config    PUT    /api/admin/server-config
 //	GET    /api/admin/plugins          POST   /api/admin/plugins
 //	GET    /api/admin/plugins/{name}   PUT    /api/admin/plugins/{name}
 //	DELETE /api/admin/plugins/{name}   POST   /api/admin/plugins/{name}/health
@@ -308,6 +309,21 @@ func (s *Server) setWebAppConfig(url string, allowOrigins []string) {
 	s.cfg.AllowOrigins = append([]string(nil), allowOrigins...)
 }
 
+// serverName snapshots this server's display name. /api/health reads it per
+// request so a rename from the panel needs no restart.
+func (s *Server) serverName() string {
+	s.mu.RLock()
+	defer s.mu.RUnlock()
+	return s.cfg.ServerName
+}
+
+// setServerName renames this server at runtime.
+func (s *Server) setServerName(name string) {
+	s.mu.Lock()
+	defer s.mu.Unlock()
+	s.cfg.ServerName = name
+}
+
 // pbSettings snapshots the PocketBase connection for the settings endpoints.
 func (s *Server) pbSettings() (url, adminEmail, adminPassword string) {
 	s.mu.RLock()
@@ -394,6 +410,11 @@ func (s *Server) Handler() http.Handler {
 	mux.HandleFunc("POST /api/admin/webapp-config/test", s.requireSuperadminAuth(s.handleTestWebAppConfig))
 	mux.HandleFunc("PUT /api/admin/webapp-config", s.requireSuperadminAuth(s.handleUpdateWebAppConfig))
 
+	// API Server settings — superadmin only. This server's own display name,
+	// which clients pointed at several DriverVaults use to tell them apart.
+	mux.HandleFunc("GET /api/admin/server-config", s.requireSuperadminAuth(s.handleGetServerConfig))
+	mux.HandleFunc("PUT /api/admin/server-config", s.requireSuperadminAuth(s.handleUpdateServerConfig))
+
 	// Plugins — external-service integrations, managed by a superadmin.
 	mux.HandleFunc("GET /api/admin/plugins", s.requireSuperadminAuth(s.handleListPlugins))
 	mux.HandleFunc("POST /api/admin/plugins", s.requireSuperadminAuth(s.handleRegisterPlugin))

API Server/internal/api/settings.go

@@ -246,6 +246,62 @@ func (s *Server) handleUpdateWebAppConfig(w http.ResponseWriter, r *http.Request
 	})
 }
 
+// maxServerNameLen bounds the display name. It is shown in client server
+// pickers, so it has to stay short enough to render in one; the limit is on
+// runes rather than bytes so a non-Latin name is not cut off early.
+const maxServerNameLen = 64
+
+// serverConfigView is this API Server's own identity as returned to the panel.
+type serverConfigView struct {
+	Name string `json:"name"`
+}
+
+// GET /api/admin/server-config — this server's display name.
+func (s *Server) handleGetServerConfig(w http.ResponseWriter, r *http.Request) {
+	writeJSON(w, http.StatusOK, serverConfigView{Name: s.serverName()})
+}
+
+// serverConfigBody is the editable API Server payload.
+type serverConfigBody struct {
+	Name string `json:"name"`
+}
+
+// PUT /api/admin/server-config — rename this server at runtime and persist it to
+// .env. /api/health reads the name per request, so the new one is live at once.
+func (s *Server) handleUpdateServerConfig(w http.ResponseWriter, r *http.Request) {
+	var b serverConfigBody
+	if err := json.NewDecoder(r.Body).Decode(&b); err != nil {
+		writeError(w, http.StatusBadRequest, "invalid json")
+		return
+	}
+	name := strings.TrimSpace(b.Name)
+	if name == "" {
+		writeError(w, http.StatusBadRequest, "a server name is required")
+		return
+	}
+	if len([]rune(name)) > maxServerNameLen {
+		writeError(w, http.StatusBadRequest, "server name is too long (max "+strconv.Itoa(maxServerNameLen)+" characters)")
+		return
+	}
+
+	// Apply at runtime, then persist so the change survives a restart.
+	s.setServerName(name)
+	if err := config.UpdateEnvFile(config.EnvFile, map[string]string{"SERVER_NAME": name}); err != nil {
+		// The runtime change already took effect; report that persistence failed.
+		log.Printf("server-config: persist to %s failed: %v", config.EnvFile, err)
+		writeJSON(w, http.StatusOK, map[string]any{
+			"config":  serverConfigView{Name: name},
+			"warning": "applied for this session, but could not be saved to .env: " + err.Error(),
+		})
+		return
+	}
+
+	log.Printf("server-config: server renamed to %s (by superadmin)", name)
+	writeJSON(w, http.StatusOK, map[string]any{
+		"config": serverConfigView{Name: name},
+	})
+}
+
 // cleanOrigins trims each origin and drops the blanks, so a trailing comma or a
 // stray space in the panel's text field can't register an unmatchable origin.
 func cleanOrigins(in []string) []string {

API Server/internal/api/settings_test.go

@@ -0,0 +1,114 @@
+package api
+
+import (
+	"encoding/json"
+	"net/http"
+	"net/http/httptest"
+	"os"
+	"strings"
+	"testing"
+
+	"drivervault/apiserver/internal/config"
+	"drivervault/apiserver/internal/pb"
+)
+
+// The server name is applied at runtime and persisted to .env, and /api/health
+// reports it without a restart — the three things the panel's API Server tab
+// relies on.
+func TestServerConfigRenameAppliesAndPersists(t *testing.T) {
+	t.Chdir(t.TempDir()) // UpdateEnvFile writes ./.env
+
+	s := New(config.Config{ServerName: config.DefaultServerName}, pb.New("", "", ""))
+
+	rec := httptest.NewRecorder()
+	s.handleUpdateServerConfig(rec, httptest.NewRequest(http.MethodPut, "/api/admin/server-config",
+		strings.NewReader(`{"name":"  Home Garage  "}`)))
+	if rec.Code != http.StatusOK {
+		t.Fatalf("rename: got %d, want 200: %s", rec.Code, rec.Body)
+	}
+	var out struct {
+		Config  serverConfigView `json:"config"`
+		Warning string           `json:"warning"`
+	}
+	if err := json.Unmarshal(rec.Body.Bytes(), &out); err != nil {
+		t.Fatalf("decode: %v", err)
+	}
+	if out.Warning != "" {
+		t.Fatalf("unexpected warning: %s", out.Warning)
+	}
+	if out.Config.Name != "Home Garage" {
+		t.Errorf("name = %q, want %q (surrounding space trimmed)", out.Config.Name, "Home Garage")
+	}
+
+	if got := s.serverName(); got != "Home Garage" {
+		t.Errorf("runtime name = %q, want %q", got, "Home Garage")
+	}
+
+	env, err := os.ReadFile(config.EnvFile)
+	if err != nil {
+		t.Fatalf("read .env: %v", err)
+	}
+	if !strings.Contains(string(env), "SERVER_NAME=Home Garage") {
+		t.Errorf(".env missing the rename, got:\n%s", env)
+	}
+
+	// The name reaches clients through the public liveness probe.
+	rec = httptest.NewRecorder()
+	s.handleHealth(rec, httptest.NewRequest(http.MethodGet, "/api/health", nil))
+	var health struct {
+		Name string `json:"name"`
+	}
+	if err := json.Unmarshal(rec.Body.Bytes(), &health); err != nil {
+		t.Fatalf("decode health: %v", err)
+	}
+	if health.Name != "Home Garage" {
+		t.Errorf("health name = %q, want %q", health.Name, "Home Garage")
+	}
+}
+
+func TestServerConfigRejectsUnusableNames(t *testing.T) {
+	t.Chdir(t.TempDir())
+
+	cases := map[string]string{
+		"empty":    `{"name":""}`,
+		"blank":    `{"name":"   "}`,
+		"too long": `{"name":"` + strings.Repeat("x", maxServerNameLen+1) + `"}`,
+		"bad json": `{`,
+		"no name":  `{}`,
+	}
+	for name, body := range cases {
+		t.Run(name, func(t *testing.T) {
+			s := New(config.Config{ServerName: config.DefaultServerName}, pb.New("", "", ""))
+			rec := httptest.NewRecorder()
+			s.handleUpdateServerConfig(rec, httptest.NewRequest(http.MethodPut, "/api/admin/server-config",
+				strings.NewReader(body)))
+			if rec.Code != http.StatusBadRequest {
+				t.Fatalf("got %d, want 400: %s", rec.Code, rec.Body)
+			}
+			if got := s.serverName(); got != config.DefaultServerName {
+				t.Errorf("name changed to %q on a rejected request", got)
+			}
+			if _, err := os.Stat(config.EnvFile); err == nil {
+				t.Error(".env written for a rejected request")
+			}
+		})
+	}
+}
+
+// A name of exactly the limit is accepted — the bound is inclusive, and it is
+// counted in runes, so a 64-character non-Latin name fits.
+func TestServerConfigCountsRunesNotBytes(t *testing.T) {
+	t.Chdir(t.TempDir())
+
+	s := New(config.Config{ServerName: config.DefaultServerName}, pb.New("", "", ""))
+	name := strings.Repeat("ł", maxServerNameLen)
+	rec := httptest.NewRecorder()
+	s.handleUpdateServerConfig(rec, httptest.NewRequest(http.MethodPut, "/api/admin/server-config",
+		strings.NewReader(`{"name":"`+name+`"}`)))
+	if rec.Code != http.StatusOK {
+		t.Fatalf("got %d, want 200: %s", rec.Code, rec.Body)
+	}
+	if got := s.serverName(); got != name {
+		t.Errorf("name = %q, want the %d-rune name", got, maxServerNameLen)
+	}
+}

API Server/internal/config/config.go

@@ -16,6 +16,12 @@ type Config struct {
 	WebAppURL     string
 	AllowOrigins  []string
 
+	// ServerName is this server's display name. It is what clients that can be
+	// pointed at more than one DriverVault call this one — the Web App's server
+	// switcher labels an added server with it — so it is reported by /api/health
+	// rather than kept for the panel alone.
+	ServerName string
+
 	// UsersCollection is the PocketBase auth collection holding app users.
 	UsersCollection string
 
@@ -51,6 +57,10 @@ type Config struct {
 // and that runtime settings changes persist back into.
 const EnvFile = ".env"
 
+// DefaultServerName labels a server whose operator has not named one, so
+// /api/health always carries something a client can display.
+const DefaultServerName = "DriverVault API Server"
+
 // AdminConfigured reports whether a service account has been supplied.
 func (c Config) AdminConfigured() bool {
 	return c.PocketBaseAdminEmail != "" && c.PocketBaseAdminPassword != ""
@@ -66,6 +76,7 @@ func Load() Config {
 		PocketBaseURL:           strings.TrimRight(firstEnvOr("http://10.2.1.10:8027", "POCKETBASE_URL", "PB_URL"), "/"),
 		WebAppURL:               strings.TrimRight(getenv("WEBAPP_URL", "http://localhost:8090"), "/"),
 		AllowOrigins:            splitCSV(firstEnvOr("*", "CORS_ALLOW_ORIGINS", "CORS_ORIGINS")),
+		ServerName:              strings.TrimSpace(getenv("SERVER_NAME", DefaultServerName)),
 		UsersCollection:         getenv("AUTH_USERS_COLLECTION", "users"),
 		PocketBaseAdminEmail:    firstEnv("POCKETBASE_ADMIN_EMAIL", "PB_ADMIN_EMAIL"),
 		PocketBaseAdminPassword: firstEnv("POCKETBASE_ADMIN_PASSWORD", "PB_ADMIN_PASSWORD"),

API Server/panel/src/App.vue

@@ -6,6 +6,7 @@ import { me, token, restore, logout, isManager, isSuperadmin } from "./api";
 import LoginView from "./components/LoginView.vue";
 import StatusCard from "./components/StatusCard.vue";
 import PocketBaseCard from "./components/PocketBaseCard.vue";
+import ServerCard from "./components/ServerCard.vue";
 import WebAppCard from "./components/WebAppCard.vue";
 import PluginsCard from "./components/PluginsCard.vue";
 import UsersCard from "./components/UsersCard.vue";
@@ -37,6 +38,7 @@ const sections = computed(() => {
   }
   if (isSuperadmin.value) {
     out.push(
+      { id: "server", label: t("sections.server") },
       { id: "pocketbase", label: t("sections.pocketbase") },
       { id: "webapp", label: t("sections.webapp") },
       { id: "plugins", label: t("sections.plugins") },
@@ -145,6 +147,8 @@ const superadminApi = [
   { method: "GET", path: "/api/admin/pb-config", desc: "PocketBase connection + live probe" },
   { method: "POST", path: "/api/admin/pb-config/test", desc: "Probe a candidate connection" },
   { method: "PUT", path: "/api/admin/pb-config", desc: "Apply + persist a connection" },
+  { method: "GET", path: "/api/admin/server-config", desc: "This server's display name" },
+  { method: "PUT", path: "/api/admin/server-config", desc: "Rename this server (applied + persisted)" },
   { method: "GET", path: "/api/admin/webapp-config", desc: "Web App URL + CORS origins, with a live probe" },
   { method: "POST", path: "/api/admin/webapp-config/test", desc: "Probe a candidate Web App address" },
   { method: "PUT", path: "/api/admin/webapp-config", desc: "Apply + persist Web App settings" },
@@ -245,6 +249,7 @@ const superadminApi = [
       <StatusCard v-if="section === 'overview'" />
       <UsersCard v-else-if="section === 'users'" />
       <OrgsCard v-else-if="section === 'orgs'" />
+      <ServerCard v-else-if="section === 'server'" />
       <PocketBaseCard v-else-if="section === 'pocketbase'" />
       <WebAppCard v-else-if="section === 'webapp'" />
       <PluginsCard v-else-if="section === 'plugins'" />

API Server/panel/src/components/ServerCard.vue

@@ -0,0 +1,75 @@
+<script setup>
+import { ref, onMounted } from "vue";
+import { request } from "../api";
+import { t } from "../i18n";
+
+// Superadmin-only: this server's display name. Like the PocketBase and Web App
+// cards, the change is applied at runtime AND persisted to the server's .env,
+// so it survives a restart. There is nothing to probe here — the name is a
+// label, not an address — so this card saves without a test button.
+const form = ref({ name: "" });
+const error = ref("");
+const notice = ref("");
+const busy = ref(false);
+
+async function load() {
+  try {
+    const view = await request("/api/admin/server-config");
+    form.value = { name: view.name };
+  } catch (e) {
+    error.value = e.message;
+  }
+}
+onMounted(load);
+
+async function save() {
+  error.value = "";
+  notice.value = "";
+  busy.value = true;
+  try {
+    const out = await request("/api/admin/server-config", {
+      method: "PUT",
+      body: { name: form.value.name },
+    });
+    form.value = { name: out.config.name };
+    notice.value = out.warning || t("server.savedNotice");
+  } catch (e) {
+    error.value = e.message;
+  } finally {
+    busy.value = false;
+  }
+}
+</script>
+
+<template>
+  <div class="dh-card overflow-hidden">
+    <div class="border-b border-subtle px-5 py-4">
+      <div class="text-base font-bold tracking-[-0.02em] text-strong">{{ t("server.title") }}</div>
+      <p class="mt-0.5 text-xs text-muted">{{ t("server.subtitle") }}</p>
+    </div>
+
+    <div class="flex flex-col gap-4 px-5 py-4">
+      <div>
+        <label class="dh-label" for="server-name">{{ t("server.name") }}</label>
+        <input
+          id="server-name"
+          v-model="form.name"
+          class="dh-input"
+          maxlength="64"
+          placeholder="DriverVault API Server"
+          @keyup.enter="save"
+        />
+        <p class="mt-1 text-xs text-muted">{{ t("server.nameHint") }}</p>
+      </div>
+
+      <p v-if="notice" class="rounded-control bg-info-soft px-3 py-2 text-xs text-info">{{ notice }}</p>
+      <p v-if="error" class="rounded-control bg-danger-soft px-3 py-2 text-xs text-danger">{{ error }}</p>
+
+      <div class="flex items-center gap-2">
+        <button class="dh-btn" :disabled="busy" @click="save">{{ t("server.saveApply") }}</button>
+        <span class="flex-1"></span>
+        <span class="eyebrow">{{ t("server.persistedEnv") }}</span>
+      </div>
+    </div>
+  </div>
+</template>

API Server/panel/src/i18n/da.json

@@ -14,6 +14,7 @@
     "overview": "Oversigt",
     "users": "Brugere",
     "orgs": "Organisationer",
+    "server": "API-server",
     "pocketbase": "PocketBase",
     "webapp": "Webapp",
     "plugins": "Plugins",
@@ -84,6 +85,16 @@
     "confirmDeleteOwn": "Slet din organisation „{name}“? Du fjernes fra den og bliver en almindelig bruger."
   },
 
+  "server": {
+    "title": "API-server",
+    "subtitle": "Hvordan denne server identificerer sig over for de klienter, der forbinder til den",
+    "name": "Servernavn",
+    "nameHint": "Vises af klienter, der kan pege på mere end én DriverVault, for eksempel webappens serverskifter. Returneres af /api/health.",
+    "saveApply": "Gem og anvend",
+    "persistedEnv": "gemt i .env",
+    "savedNotice": "Gemt. Det nye navn gælder fra næste anmodning."
+  },
+
   "pocketbase": {
     "title": "PocketBase",
     "subtitle": "Databaseforbindelse brugt af hvert endpoint",

API Server/panel/src/i18n/en.json

@@ -14,6 +14,7 @@
     "overview": "Overview",
     "users": "Users",
     "orgs": "Organizations",
+    "server": "API Server",
     "pocketbase": "PocketBase",
     "webapp": "Web App",
     "plugins": "Plugins",
@@ -84,6 +85,16 @@
     "confirmDeleteOwn": "Delete your organization \"{name}\"? You will be removed from it and become a regular user."
   },
 
+  "server": {
+    "title": "API Server",
+    "subtitle": "How this server identifies itself to the clients that connect to it",
+    "name": "Server name",
+    "nameHint": "Shown by clients that can be pointed at more than one DriverVault, such as the Web App's server switcher. Reported by /api/health.",
+    "saveApply": "Save & apply",
+    "persistedEnv": "persisted to .env",
+    "savedNotice": "Saved. The new name applies to the next request."
+  },
+
   "pocketbase": {
     "title": "PocketBase",
     "subtitle": "Database connection used by every endpoint",

API Server/panel/src/i18n/pl.json

@@ -14,6 +14,7 @@
     "overview": "Przegląd",
     "users": "Użytkownicy",
     "orgs": "Organizacje",
+    "server": "Serwer API",
     "pocketbase": "PocketBase",
     "webapp": "Aplikacja webowa",
     "plugins": "Wtyczki",
@@ -84,6 +85,16 @@
     "confirmDeleteOwn": "Usunąć Twoją organizację „{name}”? Zostaniesz z niej usunięty i staniesz się zwykłym użytkownikiem."
   },
 
+  "server": {
+    "title": "Serwer API",
+    "subtitle": "Jak ten serwer przedstawia się klientom, które się z nim łączą",
+    "name": "Nazwa serwera",
+    "nameHint": "Widoczna w klientach, które można skierować na więcej niż jeden DriverVault, na przykład w przełączniku serwerów aplikacji webowej. Zwracana przez /api/health.",
+    "saveApply": "Zapisz i zastosuj",
+    "persistedEnv": "zapisano w .env",
+    "savedNotice": "Zapisano. Nowa nazwa obowiązuje od następnego żądania."
+  },
+
   "pocketbase": {
     "title": "PocketBase",
     "subtitle": "Połączenie z bazą danych używane przez każdy punkt końcowy",