Refactor: Rename NanoKVM to BatchuKVM and update server URL

2025-12-09 20:35:38 +09:00
commit 8cf674c9e5
396 changed files with 54380 additions and 0 deletions
--- a/server/README.md
+++ b/server/README.md
@@ -0,0 +1,99 @@
+# NanoKVM Server
+
+This is the backend server implementation for NanoKVM.
+
+For detailed documentation, please visit our [Wiki](https://wiki.sipeed.com/nanokvm).
+
+## Structure
+
+```shell
+server
+├── common       // Common utility components
+├── config       // Server configuration
+├── dl_lib       // Shared object libraries
+├── include      // Header files for shared objects
+├── logger       // Logging system
+├── middleware   // Server middleware components
+├── proto        // API request/response definitions
+├── router       // API route handlers
+├── service      // Core service implementations
+├── utils        // Utility functions
+└── main.go
+```
+
+## Configuration
+
+The configuration file path is `/etc/kvm/server.yaml`.
+
+```yaml
+proto: http
+port:
+    http: 80
+    https: 443
+cert:
+    crt: server.crt
+    key: server.key
+
+# Log level (debug/info/warn/error)
+# Note: Use 'info' or 'error' in production, 'debug' only for development
+logger:
+    level: info
+    file: stdout
+
+# Authentication setting (enable/disable)
+# Note: Only disable authentication in development environment
+authentication: enable
+
+jwt:
+   # JWT secret key. If left empty, a random 64-byte key will be generated automatically.
+   secretKey: ""
+   # JWT token expiration time in seconds. Default: 2678400 (31 days)
+   refreshTokenDuration: 2678400
+   # Invalidate all JWT tokens when the user logs out. Default: true
+   revokeTokensOnLogout: true
+
+# Address for custom STUN server
+# Note: You can disable the STUN service by setting it to 'disable' (e.g., in a LAN environment)
+stun: stun.l.google.com:19302
+
+# Address and authentication for custom TURN server
+turn:
+    turnAddr: example_addr
+    turnUser: example_user
+    turnCred: example_cred
+```
+
+## Compile & Deploy
+
+Note: Use Linux operating system (x86-64). This build process is not compatible with ARM, Windows or macOS.
+
+1. Install the Toolchain
+    1. Download the toolchain from the following link: [Download Link](https://sophon-file.sophon.cn/sophon-prod-s3/drive/23/03/07/16/host-tools.tar.gz).
+    2. Extract the file and add the `host-tools/gcc/riscv64-linux-musl-x86_64/bin` directory to your PATH environment variable.
+    3. Run `riscv64-unknown-linux-musl-gcc -v`. If there is version information in the output, the installation is successful.
+
+2. Compile the Project
+    1. Run `cd server` from the project root directory.
+    2. Run `go mod tidy` to install Go dependencies.
+    3. (Optional) If you compiled `libkvm.so` yourself, you need to modify its RPATH by `patchelf --add-rpath \$ORIGIN ./dl_lib/libkvm.so`.
+    4. Run `CGO_ENABLED=1 GOOS=linux GOARCH=riscv64 CC=riscv64-unknown-linux-musl-gcc CGO_CFLAGS="-mcpu=c906fdv -march=rv64imafdcv0p7xthead -mcmodel=medany -mabi=lp64d" go build` to compile the project.
+    5. After compilation, an executable file named `NanoKVM-Server` will be generated.
+
+3. Modify RPATH
+    1. Run `sudo apt install patchelf` or `pip install patchelf` to install patchelf.
+    2. Run `patchelf --version`. Ensure the version is 0.14 or higher`.
+    3. Run `patchelf --add-rpath \$ORIGIN/dl_lib NanoKVM-Server` to modify the RPATH of the executable file.
+
+4. Deploy the Application
+    1. File uploads requires SSH. Please enable it in the Web Settings: `Settings > SSH`;
+    2. Replace the original file in the NanoKVM `/kvmapp/server/` directory with the newly compiled `NanoKVM-Server`.
+    3. Restart the service on NanoKVM by executing `/etc/init.d/S95nanokvm restart`.
+
+## Manually Update
+
+> File uploads requires SSH. Please enable it in the Web Settings: `Settings > SSH`;
+
+1. Download the latest application from [GitHub](https://github.com/sipeed/NanoKVM/releases);
+2. Unzip the downloaded file and rename the unzipped folder to `kvmapp`;
+3. Back up the existing `/kvmapp` directory on your NanoKVM, then replace it with the new `kvmapp` folder;
+4. Run `/etc/init.d/S95nanokvm restart` on your NanoKVM to restart the service.
--- a/server/README_JA.md
+++ b/server/README_JA.md
@@ -0,0 +1,97 @@
+# NanoKVM サーバー
+
+これは NanoKVM のバックエンドサーバーの実装です。
+
+詳細なドキュメントについては、[Wiki](https://wiki.sipeed.com/nanokvm) を参照してください。
+
+## 構造
+
+```shell
+server
+├── common       // 共通ユーティリティコンポーネント
+├── config       // サーバー設定
+├── dl_lib       // 共有オブジェクトライブラリ
+├── include      // 共有オブジェクトのヘッダーファイル
+├── logger       // ロギングシステム
+├── middleware   // サーバーミドルウェアコンポーネント
+├── proto        // API リクエスト/レスポンス定義
+├── router       // API ルートハンドラ
+├── service      // コアサービスの実装
+├── utils        // ユーティリティ関数
+└── main.go
+```
+
+## 設定
+
+設定ファイルのパスは `/etc/kvm/server.yaml` です。
+
+```yaml
+proto: http
+port:
+    http: 80
+    https: 443
+cert:
+    crt: server.crt
+    key: server.key
+
+# ログレベル (debug/info/warn/error)
+# 注意: 本番環境では 'info' または 'error' を使用し、'debug' は開発環境でのみ使用してください
+logger:
+    level: info
+    file: stdout
+
+# 認証設定 (enable/disable)
+# 注意: 認証を無効にするのは開発環境でのみ行ってください
+authentication: enable
+
+jwt:
+   # JWT 秘密鍵の設定。 空のままにすると、サーバー起動時にランダムな 64 バイトの鍵が自動的に生成されます。
+   secretKey: ""
+   # JWT トークンの有効期限（秒単位）。 デフォルト: 2678400 (31 日)
+   refreshTokenDuration: 2678400
+   # ユーザーがログアウトすると、すべての JWT トークンが無効になります。 デフォルト: true
+   revokeTokensOnLogout: true
+
+# カスタム STUN サーバーのアドレス
+stun: stun.l.google.com:19302
+
+# カスタム TURN サーバーのアドレスと認証情報
+turn:
+    turnAddr: turn.cloudflare.com:3478
+    turnUser: example_user
+    turnCred: example_cred
+```
+
+## コンパイルとデプロイ
+
+注意: Linux オペレーティングシステム (x86-64) を使用してください。このビルドプロセスは ARM、Windows、macOS では互換性がありません。
+
+1. ツールチェーンのインストール
+    1. 以下のリンクからツールチェーンをダウンロードします: [ダウンロードリンク](https://sophon-file.sophon.cn/sophon-prod-s3/drive/23/03/07/16/host-tools.tar.gz)。
+    2. ファイルを解凍し、`host-tools/gcc/riscv64-linux-musl-x86_64/bin` ディレクトリを PATH 環境変数に追加します。
+    3. `riscv64-unknown-linux-musl-gcc -v` を実行します。バージョン情報が表示されれば、インストールは成功です。
+
+2. プロジェクトのコンパイル
+    1. プロジェクトのルートディレクトリから `cd server` を実行します。
+    2. `go mod tidy` を実行して Go の依存関係をインストールします。
+    3. `CGO_ENABLED=1 GOOS=linux GOARCH=riscv64 CC=riscv64-unknown-linux-musl-gcc CGO_CFLAGS="-mcpu=c906fdv -march=rv64imafdcv0p7xthead -mcmodel=medany -mabi=lp64d" go build` を実行してプロジェクトをコンパイルします。
+    4. コンパイルが完了すると、`NanoKVM-Server` という名前の実行ファイルが生成されます。
+
+3. RPATH の変更
+    1. `sudo apt install patchelf` または `pip install patchelf` を実行して patchelf をインストールします。
+    2. `patchelf --version` を実行します。バージョンが 0.14 以上であることを確認します。
+    3. `patchelf --add-rpath \$ORIGIN/dl_lib NanoKVM-Server` を実行して、実行ファイルの RPATH を変更します。
+
+4. アプリケーションのデプロイ
+    1. デプロイ前に、ブラウザでアプリケーションを最新バージョンに更新します。手順は[こちら](https://wiki.sipeed.com/hardware/en/kvm/NanoKVM/system/updating.html)を参照してください。
+    2. コンパイルして生成された `NanoKVM-Server` ファイルを使用して、NanoKVM の `/kvmapp/server/` ディレクトリ内の元のファイルを置き換えます。
+    3. NanoKVM で `/etc/init.d/S95nanokvm restart` を実行してサービスを再起動します。
+
+## 手動更新
+
+> ファイルのアップロードには SSH が必要です。Web 設定で有効にしてください: `設定 > SSH`
+
+1. [GitHub](https://github.com/sipeed/NanoKVM/releases) から最新のアプリケーションをダウンロードします。
+2. ダウンロードしたファイルを解凍し、解凍したフォルダーの名前を `kvmapp` に変更します。
+3. NanoKVM 上の既存の `/kvmapp` ディレクトリをバックアップし、新しい `kvmapp` フォルダーに置き換えます。
+4. NanoKVM で `/etc/init.d/S95nanokvm restart` を実行してサービスを再起動します。
--- a/server/README_ZH.md
+++ b/server/README_ZH.md
@@ -0,0 +1,96 @@
+# NanoKVM Server
+
+NanoKVM 后端服务的代码。更多文档请参考 [Wiki](https://wiki.sipeed.com/nanokvm) 。
+
+## 目录结构
+
+```shell
+server
+├── common       // 公用组件
+├── config       // 服务配置
+├── dl_lib       // so 文件
+├── include      // 头文件
+├── logger       // 服务日志
+├── middleware   // 中间件
+├── proto        // api 请求响应参数
+├── router       // api 路由
+├── service      // api 处理逻辑
+├── utils        // 工具函数
+└── main.go
+```
+
+## 配置文件
+
+配置文件路径为 `/etc/kvm/server.yaml`。
+
+```yaml
+proto: http
+port:
+    http: 80
+    https: 443
+cert:
+    crt: server.crt
+    key: server.key
+
+# 日志级别（debug/info/warn/error）
+# 注意：在生产环境中使用 info 或 error。debug 模式仅在开发环境中使用。
+logger:
+    level: info
+    file: stdout
+
+# 鉴权设置（enable/disable）
+# 注意：生产环境中请勿使用 disable。
+authentication: enable
+
+jwt:
+   # jwt 密钥。设置为空则使用随机生成的64位密钥
+   secretKey: ""
+   # jwt token 过期时间（单位：秒），默认为2678400（31天）
+   refreshTokenDuration: 2678400
+   # 在帐号登出时是否使所有 jwt token 失效。默认为 true
+   revokeTokensOnLogout: true
+
+# 自定义 STUN 服务器的地址
+# 注意：可以设置为“disable”来禁用 STUN 服务（例如在局域网环境中使用时）
+stun: stun.l.google.com:19302
+
+turn:
+    turnAddr: example_addr
+    turnUser: example_user
+    turnCred: example_cred
+```
+
+## 编译部署
+
+**注意：请使用 Linux 操作系统（x86-64）。该工具链无法在 ARM、Windows 或 macOS 下使用。**
+
+1. 安装工具链
+   1. 下载工具链：[下载地址](https://sophon-file.sophon.cn/sophon-prod-s3/drive/23/03/07/16/host-tools.tar.gz)；
+   2. 解压下载文件，然后将 `host-tools/gcc/riscv64-linux-musl-x86_64/bin` 目录加入到环境变量；
+   3. 执行 `riscv64-unknown-linux-musl-gcc -v`，如果显示版本信息则安装成功。
+
+2. 编译
+   1. 在项目根目录下执行 `cd server` 进入 server 目录；
+   2. 执行 `go mod tidy` 安装 Go 依赖包；
+   3. （可选）如果您手动编译了 `libkvm.so`，则需要通过 `patchelf --add-rpath \$ORIGIN ./dl_lib/libkvm.so` 修改其 RPATH 属性。
+   4. 执行 `CGO_ENABLED=1 GOOS=linux GOARCH=riscv64 CC=riscv64-unknown-linux-musl-gcc CGO_CFLAGS="-mcpu=c906fdv -march=rv64imafdcv0p7xthead -mcmodel=medany -mabi=lp64d" go build` 进行编译；
+   5. 编译完成后，会生成可执行文件 `NanoKVM-Server`。
+
+3. 修改 RPATH
+   1. 执行 `sudo apt install patchelf` 或 `pip install patchelf` 安装 patchelf；
+   2. 执行 `patchelf --version`，确保版本大于等于 0.14；
+   3. 执行 `patchelf --add-rpath \$ORIGIN/dl_lib NanoKVM-Server` 修改可执行文件的 RPATH 属性。
+
+4. 部署
+   1. 上传文件需要启用 SSH 功能。请在 Web `设置 - SSH` 中检查 SSH 是否已经启用；
+   2. 使用编译生成的 `NanoKVM-Server` 文件，替换 NanoKVM 中 `/kvmapp/server/` 目录下的原始文件；
+   3. 在 NanoKVM 中执行 `/etc/init.d/S95nanokvm restart` 重启服务。
+
+## 手动更新
+
+> 请确保已经在 Web 界面的 `设置 - SSH` 中启用了 SSH 功能，以便上传文件。
+
+1. 从 [GitHub](https://github.com/sipeed/NanoKVM/releases) 下载最新的应用安装包；
+2. 解压缩下载的安装包，并将解压后的文件夹重命名为 `kvmapp`；
+3. 备份 NanoKVM 系统中的 `/kvmapp` 目录，然后用解压后的 `kvmapp` 文件夹替换现有目录。
+4. 在 NanoKVM 中执行 `/etc/init.d/S95nanokvm restart` 重启服务。
--- a/server/build.sh
+++ b/server/build.sh
@@ -0,0 +1,64 @@
+#!/bin/bash
+
+set -e
+
+# Configuration Variables
+BINARY_NAME="NanoKVM-Server"
+CC_COMPILER="riscv64-unknown-linux-musl-gcc"
+CGO_CFLAGS_OPTS="-mcpu=c906fdv -march=rv64imafdcv0p7xthead -mcmodel=medany -mabi=lp64d"
+
+# Define colors for output
+GREEN='\033[0;32m'
+RED='\033[0;31m'
+YELLOW='\033[1;33m'
+NC='\033[0m' # No Color
+
+# Helper function to check if a command exists
+check_dependency() {
+    if ! command -v "$1" &> /dev/null; then
+        echo -e "${RED}[ERROR] Required command '$1' not found.${NC}"
+        echo "Please install it or ensure it is in your PATH."
+        exit 1
+    fi
+}
+
+# ------------------------------------------------------------------------------
+# Step 1: Check Prerequisites
+# ------------------------------------------------------------------------------
+echo -e "${YELLOW}[INFO] Checking build environment...${NC}"
+
+check_dependency "go"
+check_dependency "patchelf"
+check_dependency "$CC_COMPILER"
+
+echo -e "${GREEN}[OK] All dependencies found.${NC}"
+
+# ------------------------------------------------------------------------------
+# Step 2: Build the Binary
+# ------------------------------------------------------------------------------
+echo -e "${YELLOW}[INFO] Starting cross-compilation for RISC-V 64-bit (BoringCrypto enabled)...${NC}"
+
+export CGO_ENABLED=1
+export GOOS=linux
+export GOARCH=riscv64
+# export GOEXPERIMENT=boringcrypto
+export CC="$CC_COMPILER"
+export CGO_CFLAGS="$CGO_CFLAGS_OPTS"
+
+go build -o "$BINARY_NAME" -v
+
+if [ -f "$BINARY_NAME" ]; then
+    echo -e "${GREEN}[SUCCESS] Binary '$BINARY_NAME' created successfully.${NC}"
+else
+    echo -e "${RED}[ERROR] Build failed. Binary not found.${NC}"
+    exit 1
+fi
+
+# ------------------------------------------------------------------------------
+# Step 3: Patch RPATH
+# ------------------------------------------------------------------------------
+echo -e "${YELLOW}[INFO] Patching RPATH with patchelf...${NC}"
+
+patchelf --add-rpath '$ORIGIN/dl_lib' "$BINARY_NAME"
+
+echo -e "${GREEN}[DONE] Build script completed successfully!${NC}"
--- a/server/common/kvm_vision.go
+++ b/server/common/kvm_vision.go
@@ -0,0 +1,111 @@
+package common
+
+/*
+	#cgo CFLAGS: -I../include
+	#cgo LDFLAGS: -L../dl_lib -lkvm
+	#include "kvm_vision.h"
+*/
+import "C"
+import (
+	"sync"
+	"unsafe"
+
+	log "github.com/sirupsen/logrus"
+)
+
+var (
+	kvmVision     *KvmVision
+	kvmVisionOnce sync.Once
+)
+
+type KvmVision struct{}
+
+func GetKvmVision() *KvmVision {
+	kvmVisionOnce.Do(func() {
+		kvmVision = &KvmVision{}
+
+		logLevel := C.uint8_t(0)
+		C.kvmv_init(logLevel)
+		log.Debugf("kvm vision initialized")
+	})
+
+	return kvmVision
+}
+
+func (k *KvmVision) ReadMjpeg(width uint16, height uint16, quality uint16) (data []byte, result int) {
+	var (
+		kvmData  *C.uint8_t
+		dataSize C.uint32_t
+	)
+
+	result = int(C.kvmv_read_img(
+		C.uint16_t(width),
+		C.uint16_t(height),
+		C.uint8_t(0),
+		C.uint16_t(quality),
+		&kvmData,
+		&dataSize,
+	))
+	if result < 0 {
+		log.Errorf("failed to read kvm image: %v", result)
+		return
+	}
+	defer C.free_kvmv_data(&kvmData)
+
+	data = C.GoBytes(unsafe.Pointer(kvmData), C.int(dataSize))
+	return
+}
+
+func (k *KvmVision) ReadH264(width uint16, height uint16, bitRate uint16) (data []byte, result int) {
+	var (
+		kvmData  *C.uint8_t
+		dataSize C.uint32_t
+	)
+
+	result = int(C.kvmv_read_img(
+		C.uint16_t(width),
+		C.uint16_t(height),
+		C.uint8_t(1),
+		C.uint16_t(bitRate),
+		&kvmData,
+		&dataSize,
+	))
+	if result < 0 {
+		log.Errorf("failed to read kvm image: %v", result)
+		return
+	}
+	defer C.free_kvmv_data(&kvmData)
+
+	data = C.GoBytes(unsafe.Pointer(kvmData), C.int(dataSize))
+	return
+}
+
+func (k *KvmVision) SetHDMI(enable bool) int {
+	hdmiEnable := C.uint8_t(0)
+	if enable {
+		hdmiEnable = C.uint8_t(1)
+	}
+
+	result := int(C.kvmv_hdmi_control(hdmiEnable))
+	if result < 0 {
+		log.Errorf("failed to set hdmi to %t", enable)
+		return result
+	}
+
+	return result
+}
+
+func (k *KvmVision) SetGop(gop uint8) {
+	_gop := C.uint8_t(gop)
+	C.set_h264_gop(_gop)
+}
+
+func (k *KvmVision) SetFrameDetect(frame uint8) {
+	_frame := C.uint8_t(frame)
+	C.set_frame_detact(_frame)
+}
+
+func (k *KvmVision) Close() {
+	C.kvmv_deinit()
+	log.Debugf("stop kvm vision...")
+}
--- a/server/common/screen.go
+++ b/server/common/screen.go
@@ -0,0 +1,105 @@
+package common
+
+import "sync"
+
+type Screen struct {
+	Width   uint16
+	Height  uint16
+	FPS     int
+	Quality uint16
+	BitRate uint16
+	GOP     uint8
+}
+
+var (
+	screen     *Screen
+	screenOnce sync.Once
+)
+
+// ResolutionMap height to width
+var ResolutionMap = map[uint16]uint16{
+	1080: 1920,
+	720:  1280,
+	600:  800,
+	480:  640,
+	0:    0,
+}
+
+var QualityMap = map[uint16]bool{
+	100: true,
+	80:  true,
+	60:  true,
+	50:  true,
+}
+
+var BitRateMap = map[uint16]bool{
+	5000: true,
+	3000: true,
+	2000: true,
+	1000: true,
+}
+
+func GetScreen() *Screen {
+	screenOnce.Do(func() {
+		screen = &Screen{
+			Width:   0,
+			Height:  0,
+			Quality: 80,
+			FPS:     30,
+			BitRate: 3000,
+			GOP:     30,
+		}
+	})
+
+	return screen
+}
+
+func SetScreen(key string, value int) {
+	switch key {
+	case "resolution":
+		height := uint16(value)
+		if width, ok := ResolutionMap[height]; ok {
+			screen.Width = width
+			screen.Height = height
+		}
+
+	case "quality":
+		if value > 100 {
+			screen.BitRate = uint16(value)
+		} else {
+			screen.Quality = uint16(value)
+		}
+
+	case "fps":
+		screen.FPS = validateFPS(value)
+
+	case "gop":
+		screen.GOP = uint8(value)
+	}
+}
+
+func CheckScreen() {
+	if _, ok := ResolutionMap[screen.Height]; !ok {
+		screen.Width = 1920
+		screen.Height = 1080
+	}
+
+	if _, ok := QualityMap[screen.Quality]; !ok {
+		screen.Quality = 80
+	}
+
+	if _, ok := BitRateMap[screen.BitRate]; !ok {
+		screen.BitRate = 3000
+	}
+}
+
+func validateFPS(fps int) int {
+	if fps > 60 {
+		return 60
+	}
+	if fps < 10 {
+		return 10
+	}
+
+	return fps
+}
--- a/server/config/config.go
+++ b/server/config/config.go
@@ -0,0 +1,122 @@
+package config
+
+import (
+	"bytes"
+	"errors"
+	"log"
+	"os"
+	"sync"
+
+	"github.com/spf13/viper"
+	"gopkg.in/yaml.v3"
+)
+
+var (
+	instance Config
+	once     sync.Once
+)
+
+func GetInstance() *Config {
+	once.Do(initialize)
+
+	return &instance
+}
+
+func initialize() {
+	if err := readByFile(); err != nil {
+		if errors.As(err, &viper.ConfigFileNotFoundError{}) {
+			create()
+		}
+
+		if err = readByDefault(); err != nil {
+			log.Fatalf("Failed to read default configuration!")
+		}
+
+		log.Println("using default configuration")
+	}
+
+	if err := validate(); err != nil {
+		log.Fatalf("Failed to validate configuration!")
+	}
+
+	if err := viper.Unmarshal(&instance); err != nil {
+		log.Fatalf("Failed to parse configuration: %s", err)
+	}
+
+	checkDefaultValue()
+
+	if instance.Authentication == "disable" {
+		log.Println("NOTICE: Authentication is disabled! Please ensure your service is secure!")
+	}
+
+	log.Println("config loaded successfully")
+}
+
+func readByFile() error {
+	viper.SetConfigName("server")
+	viper.SetConfigType("yaml")
+	viper.AddConfigPath("/etc/kvm/")
+
+	return viper.ReadInConfig()
+}
+
+func readByDefault() error {
+	data, err := yaml.Marshal(defaultConfig)
+	if err != nil {
+		log.Printf("failed to marshal default config: %s", err)
+		return err
+	}
+
+	return viper.ReadConfig(bytes.NewBuffer(data))
+}
+
+// Create configuration file.
+func create() {
+	var (
+		file *os.File
+		data []byte
+		err  error
+	)
+
+	_ = os.MkdirAll("/etc/kvm", 0o644)
+
+	file, err = os.OpenFile("/etc/kvm/server.yaml", os.O_WRONLY|os.O_CREATE|os.O_TRUNC, 0o644)
+	if err != nil {
+		log.Printf("open config failed: %s", err)
+		return
+	}
+	defer func() {
+		_ = file.Close()
+	}()
+
+	if data, err = yaml.Marshal(defaultConfig); err != nil {
+		log.Printf("failed to marshal default config: %s", err)
+		return
+	}
+
+	if _, err = file.Write(data); err != nil {
+		log.Printf("failed to save config: %s", err)
+		return
+	}
+
+	if err = file.Sync(); err != nil {
+		log.Printf("failed to sync config: %s", err)
+		return
+	}
+
+	log.Println("create file /etc/kvm/server.yaml with default configuration")
+}
+
+// Validate the configuration. This is to ensure compatibility with earlier versions.
+func validate() error {
+	if viper.GetInt("port.http") > 0 && viper.GetInt("port.https") > 0 {
+		return nil
+	}
+
+	_ = os.Remove("/etc/kvm/server.yaml")
+	log.Println("delete empty configuration file")
+
+	create()
+
+	return readByDefault()
+}
--- a/server/config/default.go
+++ b/server/config/default.go
@@ -0,0 +1,50 @@
+package config
+
+var defaultConfig = &Config{
+	Proto: "http",
+	Port: Port{
+		Http:  80,
+		Https: 443,
+	},
+	Cert: Cert{
+		Crt: "server.crt",
+		Key: "server.key",
+	},
+	Logger: Logger{
+		Level: "info",
+		File:  "stdout",
+	},
+	JWT: JWT{
+		SecretKey:            "",
+		RefreshTokenDuration: 2678400,
+		RevokeTokensOnLogout: true,
+	},
+	Stun: "stun.l.google.com:19302",
+	Turn: Turn{
+		TurnAddr: "",
+		TurnUser: "",
+		TurnCred: "",
+	},
+	Authentication: "enable",
+}
+
+func checkDefaultValue() {
+	if instance.JWT.SecretKey == "" {
+		instance.JWT.SecretKey = generateRandomSecretKey()
+		instance.JWT.RevokeTokensOnLogout = true
+	}
+
+	if instance.JWT.RefreshTokenDuration == 0 {
+		instance.JWT.RefreshTokenDuration = 2678400
+	}
+
+	if instance.Stun == "" {
+		instance.Stun = "stun.l.google.com:19302"
+	}
+
+	if instance.Authentication == "" {
+		instance.Authentication = "enable"
+	}
+
+	instance.Hardware = getHardware()
+}
--- a/server/config/file.go
+++ b/server/config/file.go
@@ -0,0 +1,45 @@
+package config
+
+import (
+	"os"
+
+	log "github.com/sirupsen/logrus"
+	"gopkg.in/yaml.v3"
+)
+
+const ConfigurationFile = "/etc/kvm/server.yaml"
+
+func Read() (*Config, error) {
+	data, err := os.ReadFile(ConfigurationFile)
+	if err != nil {
+		log.Errorf("failed to read config: %v", err)
+		return nil, err
+	}
+
+	var conf Config
+
+	if err := yaml.Unmarshal(data, &conf); err != nil {
+		log.Fatalf("failed to unmarshal config: %v", err)
+		return nil, err
+	}
+
+	log.Debugf("read %s successfully", ConfigurationFile)
+	return &conf, nil
+}
+
+func Write(conf *Config) error {
+	data, err := yaml.Marshal(&conf)
+	if err != nil {
+		log.Errorf("failed to marshal config: %v", err)
+		return err
+	}
+
+	err = os.WriteFile(ConfigurationFile, data, 0644)
+	if err != nil {
+		log.Errorf("failed to write config: %v", err)
+		return err
+	}
+
+	log.Debugf("write to %s successfully", ConfigurationFile)
+	return nil
+}
--- a/server/config/hardware.go
+++ b/server/config/hardware.go
@@ -0,0 +1,95 @@
+package config
+
+import (
+	"os"
+	"strings"
+
+	log "github.com/sirupsen/logrus"
+)
+
+type HWVersion int
+
+const (
+	HWVersionAlpha HWVersion = iota
+	HWVersionBeta
+	HWVersionPcie
+
+	HWVersionFile = "/etc/kvm/hw"
+)
+
+var HWAlpha = Hardware{
+	Version:      HWVersionAlpha,
+	GPIOReset:    "/sys/class/gpio/gpio507/value",
+	GPIOPower:    "/sys/class/gpio/gpio503/value",
+	GPIOPowerLED: "/sys/class/gpio/gpio504/value",
+	GPIOHDDLed:   "/sys/class/gpio/gpio505/value",
+}
+
+var HWBeta = Hardware{
+	Version:      HWVersionBeta,
+	GPIOReset:    "/sys/class/gpio/gpio505/value",
+	GPIOPower:    "/sys/class/gpio/gpio503/value",
+	GPIOPowerLED: "/sys/class/gpio/gpio504/value",
+	GPIOHDDLed:   "",
+}
+
+var HWPcie = Hardware{
+	Version:      HWVersionPcie,
+	GPIOReset:    "/sys/class/gpio/gpio505/value",
+	GPIOPower:    "/sys/class/gpio/gpio503/value",
+	GPIOPowerLED: "/sys/class/gpio/gpio504/value",
+	GPIOHDDLed:   "",
+}
+
+func (h HWVersion) String() string {
+	switch h {
+	case HWVersionAlpha:
+		return "Alpha"
+	case HWVersionBeta:
+		return "Beta"
+	case HWVersionPcie:
+		return "PCIE"
+	default:
+		return "Unknown"
+	}
+}
+
+func GetHwVersion() HWVersion {
+	content, err := os.ReadFile(HWVersionFile)
+	if err != nil {
+		return HWVersionAlpha
+	}
+
+	version := strings.ReplaceAll(string(content), "\n", "")
+	switch version {
+	case "alpha":
+		return HWVersionAlpha
+	case "beta":
+		return HWVersionBeta
+	case "pcie":
+		return HWVersionPcie
+	default:
+		return HWVersionAlpha
+	}
+}
+
+func getHardware() (h Hardware) {
+	version := GetHwVersion()
+
+	switch version {
+	case HWVersionAlpha:
+		h = HWAlpha
+
+	case HWVersionBeta:
+		h = HWBeta
+
+	case HWVersionPcie:
+		h = HWPcie
+
+	default:
+		h = HWAlpha
+		log.Errorf("Unsupported hardware version: %s", version)
+	}
+
+	return
+}
--- a/server/config/jwt.go
+++ b/server/config/jwt.go
@@ -0,0 +1,28 @@
+package config
+
+import (
+	"crypto/rand"
+	"encoding/base64"
+	"fmt"
+	"time"
+)
+
+// RegenerateSecretKey regenerate secret key when logout
+func RegenerateSecretKey() {
+	if instance.JWT.RevokeTokensOnLogout {
+		instance.JWT.SecretKey = generateRandomSecretKey()
+	}
+}
+
+// Generate random string for secret key.
+func generateRandomSecretKey() string {
+	b := make([]byte, 64)
+	_, err := rand.Read(b)
+	if err != nil {
+		currentTime := time.Now().UnixNano()
+		timeString := fmt.Sprintf("%d", currentTime)
+		return fmt.Sprintf("%064s", timeString)
+	}
+
+	return base64.URLEncoding.EncodeToString(b)
+}
--- a/server/config/types.go
+++ b/server/config/types.go
@@ -0,0 +1,49 @@
+package config
+
+type Config struct {
+	Proto          string `yaml:"proto"`
+	Port           Port   `yaml:"port"`
+	Cert           Cert   `yaml:"cert"`
+	Logger         Logger `yaml:"logger"`
+	Authentication string `yaml:"authentication"`
+	JWT            JWT    `yaml:"jwt"`
+	Stun           string `yaml:"stun"`
+	Turn           Turn   `yaml:"turn"`
+
+	Hardware Hardware `yaml:"-"`
+}
+
+type Logger struct {
+	Level string `yaml:"level"`
+	File  string `yaml:"file"`
+}
+
+type Port struct {
+	Http  int `yaml:"http"`
+	Https int `yaml:"https"`
+}
+
+type Cert struct {
+	Crt string `yaml:"crt"`
+	Key string `yaml:"key"`
+}
+
+type JWT struct {
+	SecretKey            string `yaml:"secretKey"`
+	RefreshTokenDuration uint64 `yaml:"refreshTokenDuration"`
+	RevokeTokensOnLogout bool   `yaml:"revokeTokensOnLogout"`
+}
+
+type Turn struct {
+	TurnAddr string `yaml:"turnAddr"`
+	TurnUser string `yaml:"turnUser"`
+	TurnCred string `yaml:"turnCred"`
+}
+
+type Hardware struct {
+	Version      HWVersion `yaml:"-"`
+	GPIOReset    string    `yaml:"-"`
+	GPIOPower    string    `yaml:"-"`
+	GPIOPowerLED string    `yaml:"-"`
+	GPIOHDDLed   string    `yaml:"-"`
+}
--- a/server/dl_lib/libaaccomm2.so
+++ b/server/dl_lib/libaaccomm2.so
--- a/server/dl_lib/libaacdec2.so
+++ b/server/dl_lib/libaacdec2.so
--- a/server/dl_lib/libaacenc2.so
+++ b/server/dl_lib/libaacenc2.so
--- a/server/dl_lib/libaacsbrdec2.so
+++ b/server/dl_lib/libaacsbrdec2.so
--- a/server/dl_lib/libaacsbrenc2.so
+++ b/server/dl_lib/libaacsbrenc2.so
--- a/server/dl_lib/libae.so
+++ b/server/dl_lib/libae.so
--- a/server/dl_lib/libaf.so
+++ b/server/dl_lib/libaf.so
--- a/server/dl_lib/libawb.so
+++ b/server/dl_lib/libawb.so
--- a/server/dl_lib/libcli.so
+++ b/server/dl_lib/libcli.so
--- a/server/dl_lib/libcvi_RES1.so
+++ b/server/dl_lib/libcvi_RES1.so
--- a/server/dl_lib/libcvi_VoiceEngine.so
+++ b/server/dl_lib/libcvi_VoiceEngine.so
--- a/server/dl_lib/libcvi_audio.so
+++ b/server/dl_lib/libcvi_audio.so
--- a/server/dl_lib/libcvi_bin.so
+++ b/server/dl_lib/libcvi_bin.so
--- a/server/dl_lib/libcvi_bin_isp.so
+++ b/server/dl_lib/libcvi_bin_isp.so
--- a/server/dl_lib/libcvi_ispd2.so
+++ b/server/dl_lib/libcvi_ispd2.so
--- a/server/dl_lib/libcvi_ive.so
+++ b/server/dl_lib/libcvi_ive.so
--- a/server/dl_lib/libcvi_ssp.so
+++ b/server/dl_lib/libcvi_ssp.so
--- a/server/dl_lib/libcvi_vqe.so
+++ b/server/dl_lib/libcvi_vqe.so
--- a/server/dl_lib/libdnvqe.so
+++ b/server/dl_lib/libdnvqe.so
--- a/server/dl_lib/libini.so
+++ b/server/dl_lib/libini.so
--- a/server/dl_lib/libisp.so
+++ b/server/dl_lib/libisp.so
--- a/server/dl_lib/libisp_algo.so
+++ b/server/dl_lib/libisp_algo.so
--- a/server/dl_lib/libjson-c.so.5
+++ b/server/dl_lib/libjson-c.so.5
--- a/server/dl_lib/libkvm.so
+++ b/server/dl_lib/libkvm.so
--- a/server/dl_lib/libkvm_mmf.so
+++ b/server/dl_lib/libkvm_mmf.so
--- a/server/dl_lib/libmipi_tx.so
+++ b/server/dl_lib/libmipi_tx.so
--- a/server/dl_lib/libmisc.so
+++ b/server/dl_lib/libmisc.so
--- a/server/dl_lib/libopencv_core.so.409
+++ b/server/dl_lib/libopencv_core.so.409
--- a/server/dl_lib/libopencv_highgui.so.409
+++ b/server/dl_lib/libopencv_highgui.so.409
--- a/server/dl_lib/libopencv_imgcodecs.so.409
+++ b/server/dl_lib/libopencv_imgcodecs.so.409
--- a/server/dl_lib/libopencv_imgproc.so.409
+++ b/server/dl_lib/libopencv_imgproc.so.409
--- a/server/dl_lib/libosdc.so
+++ b/server/dl_lib/libosdc.so
--- a/server/dl_lib/libraw_dump.so
+++ b/server/dl_lib/libraw_dump.so
--- a/server/dl_lib/libsys.so
+++ b/server/dl_lib/libsys.so
--- a/server/dl_lib/libtinyalsa.so
+++ b/server/dl_lib/libtinyalsa.so
--- a/server/dl_lib/libvdec.so
+++ b/server/dl_lib/libvdec.so
--- a/server/dl_lib/libvenc.so
+++ b/server/dl_lib/libvenc.so
--- a/server/dl_lib/libvpu.so
+++ b/server/dl_lib/libvpu.so
--- a/server/go.mod
+++ b/server/go.mod
@@ -0,0 +1,79 @@
+module NanoKVM-Server
+
+go 1.24.0
+
+require (
+	github.com/creack/pty v1.1.24
+	github.com/gin-gonic/contrib v0.0.0-20240508051311-c1c6bf0061b0
+	github.com/gin-gonic/gin v1.10.0
+	github.com/go-playground/validator/v10 v10.20.0
+	github.com/golang-jwt/jwt/v5 v5.2.2
+	github.com/gorilla/websocket v1.5.3
+	github.com/mervick/aes-everywhere/go/aes256 v0.0.0-20240803013625-6759956693c0
+	github.com/pion/dtls/v3 v3.0.3
+	github.com/pion/rtp v1.8.18
+	github.com/pion/webrtc/v4 v4.0.1
+	github.com/rs/cors/wrapper/gin v0.0.0-20240830163046-1084d89a1692
+	github.com/sirupsen/logrus v1.9.3
+	github.com/spf13/viper v1.19.0
+	github.com/unrolled/secure v1.15.0
+	golang.org/x/crypto v0.45.0
+	gopkg.in/yaml.v3 v3.0.1
+)
+
+require (
+	github.com/bytedance/sonic v1.11.6 // indirect
+	github.com/bytedance/sonic/loader v0.1.1 // indirect
+	github.com/cloudwego/base64x v0.1.4 // indirect
+	github.com/cloudwego/iasm v0.2.0 // indirect
+	github.com/fsnotify/fsnotify v1.7.0 // indirect
+	github.com/gabriel-vasile/mimetype v1.4.3 // indirect
+	github.com/gin-contrib/sse v0.1.0 // indirect
+	github.com/go-playground/locales v0.14.1 // indirect
+	github.com/go-playground/universal-translator v0.18.1 // indirect
+	github.com/goccy/go-json v0.10.2 // indirect
+	github.com/google/uuid v1.6.0 // indirect
+	github.com/hashicorp/hcl v1.0.0 // indirect
+	github.com/json-iterator/go v1.1.12 // indirect
+	github.com/klauspost/cpuid/v2 v2.2.7 // indirect
+	github.com/leodido/go-urn v1.4.0 // indirect
+	github.com/magiconair/properties v1.8.7 // indirect
+	github.com/mattn/go-isatty v0.0.20 // indirect
+	github.com/mitchellh/mapstructure v1.5.0 // indirect
+	github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
+	github.com/modern-go/reflect2 v1.0.2 // indirect
+	github.com/pelletier/go-toml/v2 v2.2.2 // indirect
+	github.com/pion/datachannel v1.5.9 // indirect
+	github.com/pion/ice/v4 v4.0.2 // indirect
+	github.com/pion/interceptor v0.1.39 // indirect
+	github.com/pion/logging v0.2.3 // indirect
+	github.com/pion/mdns/v2 v2.0.7 // indirect
+	github.com/pion/randutil v0.1.0 // indirect
+	github.com/pion/rtcp v1.2.15 // indirect
+	github.com/pion/sctp v1.8.33 // indirect
+	github.com/pion/sdp/v3 v3.0.9 // indirect
+	github.com/pion/srtp/v3 v3.0.4 // indirect
+	github.com/pion/stun/v3 v3.0.0 // indirect
+	github.com/pion/transport/v3 v3.0.7 // indirect
+	github.com/pion/turn/v4 v4.0.0 // indirect
+	github.com/rs/cors v1.11.0 // indirect
+	github.com/sagikazarmark/locafero v0.4.0 // indirect
+	github.com/sagikazarmark/slog-shim v0.1.0 // indirect
+	github.com/sourcegraph/conc v0.3.0 // indirect
+	github.com/spf13/afero v1.11.0 // indirect
+	github.com/spf13/cast v1.6.0 // indirect
+	github.com/spf13/pflag v1.0.5 // indirect
+	github.com/subosito/gotenv v1.6.0 // indirect
+	github.com/twitchyliquid64/golang-asm v0.15.1 // indirect
+	github.com/ugorji/go/codec v1.2.12 // indirect
+	github.com/wlynxg/anet v0.0.3 // indirect
+	go.uber.org/atomic v1.9.0 // indirect
+	go.uber.org/multierr v1.9.0 // indirect
+	golang.org/x/arch v0.8.0 // indirect
+	golang.org/x/exp v0.0.0-20230905200255-921286631fa9 // indirect
+	golang.org/x/net v0.47.0 // indirect
+	golang.org/x/sys v0.38.0 // indirect
+	golang.org/x/text v0.31.0 // indirect
+	google.golang.org/protobuf v1.34.1 // indirect
+	gopkg.in/ini.v1 v1.67.0 // indirect
+)
--- a/server/go.sum
+++ b/server/go.sum
@@ -0,0 +1,186 @@
+github.com/bytedance/sonic v1.11.6 h1:oUp34TzMlL+OY1OUWxHqsdkgC/Zfc85zGqw9siXjrc0=
+github.com/bytedance/sonic v1.11.6/go.mod h1:LysEHSvpvDySVdC2f87zGWf6CIKJcAvqab1ZaiQtds4=
+github.com/bytedance/sonic/loader v0.1.1 h1:c+e5Pt1k/cy5wMveRDyk2X4B9hF4g7an8N3zCYjJFNM=
+github.com/bytedance/sonic/loader v0.1.1/go.mod h1:ncP89zfokxS5LZrJxl5z0UJcsk4M4yY2JpfqGeCtNLU=
+github.com/cloudwego/base64x v0.1.4 h1:jwCgWpFanWmN8xoIUHa2rtzmkd5J2plF/dnLS6Xd/0Y=
+github.com/cloudwego/base64x v0.1.4/go.mod h1:0zlkT4Wn5C6NdauXdJRhSKRlJvmclQ1hhJgA0rcu/8w=
+github.com/cloudwego/iasm v0.2.0 h1:1KNIy1I1H9hNNFEEH3DVnI4UujN+1zjpuk6gwHLTssg=
+github.com/cloudwego/iasm v0.2.0/go.mod h1:8rXZaNYT2n95jn+zTI1sDr+IgcD2GVs0nlbbQPiEFhY=
+github.com/creack/pty v1.1.24 h1:bJrF4RRfyJnbTJqzRLHzcGaZK1NeM5kTC9jGgovnR1s=
+github.com/creack/pty v1.1.24/go.mod h1:08sCNb52WyoAwi2QDyzUCTgcvVFhUzewun7wtTfvcwE=
+github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
+github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
+github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc h1:U9qPSI2PIWSS1VwoXQT9A3Wy9MM3WgvqSxFWenqJduM=
+github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
+github.com/frankban/quicktest v1.14.6 h1:7Xjx+VpznH+oBnejlPUj8oUpdxnVs4f8XU8WnHkI4W8=
+github.com/frankban/quicktest v1.14.6/go.mod h1:4ptaffx2x8+WTWXmUCuVU6aPUX1/Mz7zb5vbUoiM6w0=
+github.com/fsnotify/fsnotify v1.7.0 h1:8JEhPFa5W2WU7YfeZzPNqzMP6Lwt7L2715Ggo0nosvA=
+github.com/fsnotify/fsnotify v1.7.0/go.mod h1:40Bi/Hjc2AVfZrqy+aj+yEI+/bRxZnMJyTJwOpGvigM=
+github.com/gabriel-vasile/mimetype v1.4.3 h1:in2uUcidCuFcDKtdcBxlR0rJ1+fsokWf+uqxgUFjbI0=
+github.com/gabriel-vasile/mimetype v1.4.3/go.mod h1:d8uq/6HKRL6CGdk+aubisF/M5GcPfT7nKyLpA0lbSSk=
+github.com/gin-contrib/sse v0.1.0 h1:Y/yl/+YNO8GZSjAhjMsSuLt29uWRFHdHYUb5lYOV9qE=
+github.com/gin-contrib/sse v0.1.0/go.mod h1:RHrZQHXnP2xjPF+u1gW/2HnVO7nvIa9PG3Gm+fLHvGI=
+github.com/gin-gonic/contrib v0.0.0-20240508051311-c1c6bf0061b0 h1:EUFmvQ8ffefnSAmaUZd9HZYZSw9w/bFjp3FiNaJ5WmE=
+github.com/gin-gonic/contrib v0.0.0-20240508051311-c1c6bf0061b0/go.mod h1:iqneQ2Df3omzIVTkIfn7c1acsVnMGiSLn4XF5Blh3Yg=
+github.com/gin-gonic/gin v1.10.0 h1:nTuyha1TYqgedzytsKYqna+DfLos46nTv2ygFy86HFU=
+github.com/gin-gonic/gin v1.10.0/go.mod h1:4PMNQiOhvDRa013RKVbsiNwoyezlm2rm0uX/T7kzp5Y=
+github.com/go-playground/assert/v2 v2.2.0 h1:JvknZsQTYeFEAhQwI4qEt9cyV5ONwRHC+lYKSsYSR8s=
+github.com/go-playground/assert/v2 v2.2.0/go.mod h1:VDjEfimB/XKnb+ZQfWdccd7VUvScMdVu0Titje2rxJ4=
+github.com/go-playground/locales v0.14.1 h1:EWaQ/wswjilfKLTECiXz7Rh+3BjFhfDFKv/oXslEjJA=
+github.com/go-playground/locales v0.14.1/go.mod h1:hxrqLVvrK65+Rwrd5Fc6F2O76J/NuW9t0sjnWqG1slY=
+github.com/go-playground/universal-translator v0.18.1 h1:Bcnm0ZwsGyWbCzImXv+pAJnYK9S473LQFuzCbDbfSFY=
+github.com/go-playground/universal-translator v0.18.1/go.mod h1:xekY+UJKNuX9WP91TpwSH2VMlDf28Uj24BCp08ZFTUY=
+github.com/go-playground/validator/v10 v10.20.0 h1:K9ISHbSaI0lyB2eWMPJo+kOS/FBExVwjEviJTixqxL8=
+github.com/go-playground/validator/v10 v10.20.0/go.mod h1:dbuPbCMFw/DrkbEynArYaCwl3amGuJotoKCe95atGMM=
+github.com/goccy/go-json v0.10.2 h1:CrxCmQqYDkv1z7lO7Wbh2HN93uovUHgrECaO5ZrCXAU=
+github.com/goccy/go-json v0.10.2/go.mod h1:6MelG93GURQebXPDq3khkgXZkazVtN9CRI+MGFi0w8I=
+github.com/golang-jwt/jwt/v5 v5.2.2 h1:Rl4B7itRWVtYIHFrSNd7vhTiz9UpLdi6gZhZ3wEeDy8=
+github.com/golang-jwt/jwt/v5 v5.2.2/go.mod h1:pqrtFR0X4osieyHYxtmOUWsAWrfe1Q5UVIyoH402zdk=
+github.com/google/go-cmp v0.5.9 h1:O2Tfq5qg4qc4AmwVlvv0oLiVAGB7enBSJ2x2DqQFi38=
+github.com/google/go-cmp v0.5.9/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY=
+github.com/google/gofuzz v1.0.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg=
+github.com/google/uuid v1.6.0 h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0=
+github.com/google/uuid v1.6.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
+github.com/gorilla/websocket v1.5.3 h1:saDtZ6Pbx/0u+bgYQ3q96pZgCzfhKXGPqt7kZ72aNNg=
+github.com/gorilla/websocket v1.5.3/go.mod h1:YR8l580nyteQvAITg2hZ9XVh4b55+EU/adAjf1fMHhE=
+github.com/hashicorp/hcl v1.0.0 h1:0Anlzjpi4vEasTeNFn2mLJgTSwt0+6sfsiTG8qcWGx4=
+github.com/hashicorp/hcl v1.0.0/go.mod h1:E5yfLk+7swimpb2L/Alb/PJmXilQ/rhwaUYs4T20WEQ=
+github.com/json-iterator/go v1.1.12 h1:PV8peI4a0ysnczrg+LtxykD8LfKY9ML6u2jnxaEnrnM=
+github.com/json-iterator/go v1.1.12/go.mod h1:e30LSqwooZae/UwlEbR2852Gd8hjQvJoHmT4TnhNGBo=
+github.com/klauspost/cpuid/v2 v2.0.9/go.mod h1:FInQzS24/EEf25PyTYn52gqo7WaD8xa0213Md/qVLRg=
+github.com/klauspost/cpuid/v2 v2.2.7 h1:ZWSB3igEs+d0qvnxR/ZBzXVmxkgt8DdzP6m9pfuVLDM=
+github.com/klauspost/cpuid/v2 v2.2.7/go.mod h1:Lcz8mBdAVJIBVzewtcLocK12l3Y+JytZYpaMropDUws=
+github.com/knz/go-libedit v1.10.1/go.mod h1:MZTVkCWyz0oBc7JOWP3wNAzd002ZbM/5hgShxwh4x8M=
+github.com/kr/pretty v0.3.1 h1:flRD4NNwYAUpkphVc1HcthR4KEIFJ65n8Mw5qdRn3LE=
+github.com/kr/pretty v0.3.1/go.mod h1:hoEshYVHaxMs3cyo3Yncou5ZscifuDolrwPKZanG3xk=
+github.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY=
+github.com/kr/text v0.2.0/go.mod h1:eLer722TekiGuMkidMxC/pM04lWEeraHUUmBw8l2grE=
+github.com/leodido/go-urn v1.4.0 h1:WT9HwE9SGECu3lg4d/dIA+jxlljEa1/ffXKmRjqdmIQ=
+github.com/leodido/go-urn v1.4.0/go.mod h1:bvxc+MVxLKB4z00jd1z+Dvzr47oO32F/QSNjSBOlFxI=
+github.com/magiconair/properties v1.8.7 h1:IeQXZAiQcpL9mgcAe1Nu6cX9LLw6ExEHKjN0VQdvPDY=
+github.com/magiconair/properties v1.8.7/go.mod h1:Dhd985XPs7jluiymwWYZ0G4Z61jb3vdS329zhj2hYo0=
+github.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWEY=
+github.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
+github.com/mervick/aes-everywhere/go/aes256 v0.0.0-20240803013625-6759956693c0 h1:IfWxTv9SQWw2Vw48Y2CZvVam1WeDBASWnlvNL8QwyQs=
+github.com/mervick/aes-everywhere/go/aes256 v0.0.0-20240803013625-6759956693c0/go.mod h1:Eb5RMoo9kOQra/2uRiUTGP+LfNuM13Vqm7y7P34+KKo=
+github.com/mitchellh/mapstructure v1.5.0 h1:jeMsZIYE/09sWLaz43PL7Gy6RuMjD2eJVyuac5Z2hdY=
+github.com/mitchellh/mapstructure v1.5.0/go.mod h1:bFUtVrKA4DC2yAKiSyO/QUcy7e+RRV2QTWOzhPopBRo=
+github.com/modern-go/concurrent v0.0.0-20180228061459-e0a39a4cb421/go.mod h1:6dJC0mAP4ikYIbvyc7fijjWJddQyLn8Ig3JB5CqoB9Q=
+github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd h1:TRLaZ9cD/w8PVh93nsPXa1VrQ6jlwL5oN8l14QlcNfg=
+github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd/go.mod h1:6dJC0mAP4ikYIbvyc7fijjWJddQyLn8Ig3JB5CqoB9Q=
+github.com/modern-go/reflect2 v1.0.2 h1:xBagoLtFs94CBntxluKeaWgTMpvLxC4ur3nMaC9Gz0M=
+github.com/modern-go/reflect2 v1.0.2/go.mod h1:yWuevngMOJpCy52FWWMvUC8ws7m/LJsjYzDa0/r8luk=
+github.com/pelletier/go-toml/v2 v2.2.2 h1:aYUidT7k73Pcl9nb2gScu7NSrKCSHIDE89b3+6Wq+LM=
+github.com/pelletier/go-toml/v2 v2.2.2/go.mod h1:1t835xjRzz80PqgE6HHgN2JOsmgYu/h4qDAS4n929Rs=
+github.com/pion/datachannel v1.5.9 h1:LpIWAOYPyDrXtU+BW7X0Yt/vGtYxtXQ8ql7dFfYUVZA=
+github.com/pion/datachannel v1.5.9/go.mod h1:kDUuk4CU4Uxp82NH4LQZbISULkX/HtzKa4P7ldf9izE=
+github.com/pion/dtls/v3 v3.0.3 h1:j5ajZbQwff7Z8k3pE3S+rQ4STvKvXUdKsi/07ka+OWM=
+github.com/pion/dtls/v3 v3.0.3/go.mod h1:weOTUyIV4z0bQaVzKe8kpaP17+us3yAuiQsEAG1STMU=
+github.com/pion/ice/v4 v4.0.2 h1:1JhBRX8iQLi0+TfcavTjPjI6GO41MFn4CeTBX+Y9h5s=
+github.com/pion/ice/v4 v4.0.2/go.mod h1:DCdqyzgtsDNYN6/3U8044j3U7qsJ9KFJC92VnOWHvXg=
+github.com/pion/interceptor v0.1.39 h1:Y6k0bN9Y3Lg/Wb21JBWp480tohtns8ybJ037AGr9UuA=
+github.com/pion/interceptor v0.1.39/go.mod h1:Z6kqH7M/FYirg3frjGJ21VLSRJGBXB/KqaTIrdqnOic=
+github.com/pion/logging v0.2.3 h1:gHuf0zpoh1GW67Nr6Gj4cv5Z9ZscU7g/EaoC/Ke/igI=
+github.com/pion/logging v0.2.3/go.mod h1:z8YfknkquMe1csOrxK5kc+5/ZPAzMxbKLX5aXpbpC90=
+github.com/pion/mdns/v2 v2.0.7 h1:c9kM8ewCgjslaAmicYMFQIde2H9/lrZpjBkN8VwoVtM=
+github.com/pion/mdns/v2 v2.0.7/go.mod h1:vAdSYNAT0Jy3Ru0zl2YiW3Rm/fJCwIeM0nToenfOJKA=
+github.com/pion/randutil v0.1.0 h1:CFG1UdESneORglEsnimhUjf33Rwjubwj6xfiOXBa3mA=
+github.com/pion/randutil v0.1.0/go.mod h1:XcJrSMMbbMRhASFVOlj/5hQial/Y8oH/HVo7TBZq+j8=
+github.com/pion/rtcp v1.2.15 h1:LZQi2JbdipLOj4eBjK4wlVoQWfrZbh3Q6eHtWtJBZBo=
+github.com/pion/rtcp v1.2.15/go.mod h1:jlGuAjHMEXwMUHK78RgX0UmEJFV4zUKOFHR7OP+D3D0=
+github.com/pion/rtp v1.8.18 h1:yEAb4+4a8nkPCecWzQB6V/uEU18X1lQCGAQCjP+pyvU=
+github.com/pion/rtp v1.8.18/go.mod h1:bAu2UFKScgzyFqvUKmbvzSdPr+NGbZtv6UB2hesqXBk=
+github.com/pion/sctp v1.8.33 h1:dSE4wX6uTJBcNm8+YlMg7lw1wqyKHggsP5uKbdj+NZw=
+github.com/pion/sctp v1.8.33/go.mod h1:beTnqSzewI53KWoG3nqB282oDMGrhNxBdb+JZnkCwRM=
+github.com/pion/sdp/v3 v3.0.9 h1:pX++dCHoHUwq43kuwf3PyJfHlwIj4hXA7Vrifiq0IJY=
+github.com/pion/sdp/v3 v3.0.9/go.mod h1:B5xmvENq5IXJimIO4zfp6LAe1fD9N+kFv+V/1lOdz8M=
+github.com/pion/srtp/v3 v3.0.4 h1:2Z6vDVxzrX3UHEgrUyIGM4rRouoC7v+NiF1IHtp9B5M=
+github.com/pion/srtp/v3 v3.0.4/go.mod h1:1Jx3FwDoxpRaTh1oRV8A/6G1BnFL+QI82eK4ms8EEJQ=
+github.com/pion/stun/v3 v3.0.0 h1:4h1gwhWLWuZWOJIJR9s2ferRO+W3zA/b6ijOI6mKzUw=
+github.com/pion/stun/v3 v3.0.0/go.mod h1:HvCN8txt8mwi4FBvS3EmDghW6aQJ24T+y+1TKjB5jyU=
+github.com/pion/transport/v3 v3.0.7 h1:iRbMH05BzSNwhILHoBoAPxoB9xQgOaJk+591KC9P1o0=
+github.com/pion/transport/v3 v3.0.7/go.mod h1:YleKiTZ4vqNxVwh77Z0zytYi7rXHl7j6uPLGhhz9rwo=
+github.com/pion/turn/v4 v4.0.0 h1:qxplo3Rxa9Yg1xXDxxH8xaqcyGUtbHYw4QSCvmFWvhM=
+github.com/pion/turn/v4 v4.0.0/go.mod h1:MuPDkm15nYSklKpN8vWJ9W2M0PlyQZqYt1McGuxG7mA=
+github.com/pion/webrtc/v4 v4.0.1 h1:6Unwc6JzoTsjxetcAIoWH81RUM4K5dBc1BbJGcF9WVE=
+github.com/pion/webrtc/v4 v4.0.1/go.mod h1:SfNn8CcFxR6OUVjLXVslAQ3a3994JhyE3Hw1jAuqEto=
+github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
+github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 h1:Jamvg5psRIccs7FGNTlIRMkT8wgtp5eCXdBlqhYGL6U=
+github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
+github.com/rogpeppe/go-internal v1.9.0 h1:73kH8U+JUqXU8lRuOHeVHaa/SZPifC7BkcraZVejAe8=
+github.com/rogpeppe/go-internal v1.9.0/go.mod h1:WtVeX8xhTBvf0smdhujwtBcq4Qrzq/fJaraNFVN+nFs=
+github.com/rs/cors v1.11.0 h1:0B9GE/r9Bc2UxRMMtymBkHTenPkHDv0CW4Y98GBY+po=
+github.com/rs/cors v1.11.0/go.mod h1:XyqrcTp5zjWr1wsJ8PIRZssZ8b/WMcMf71DJnit4EMU=
+github.com/rs/cors/wrapper/gin v0.0.0-20240830163046-1084d89a1692 h1:lwzJgPw5Y6pvC8mwbedX9HfdywUKcpNdcviftZsb1uY=
+github.com/rs/cors/wrapper/gin v0.0.0-20240830163046-1084d89a1692/go.mod h1:742Ialb8SOs5yB2PqRDzFcyND3280PoaS5/wcKQUQKE=
+github.com/sagikazarmark/locafero v0.4.0 h1:HApY1R9zGo4DBgr7dqsTH/JJxLTTsOt7u6keLGt6kNQ=
+github.com/sagikazarmark/locafero v0.4.0/go.mod h1:Pe1W6UlPYUk/+wc/6KFhbORCfqzgYEpgQ3O5fPuL3H4=
+github.com/sagikazarmark/slog-shim v0.1.0 h1:diDBnUNK9N/354PgrxMywXnAwEr1QZcOr6gto+ugjYE=
+github.com/sagikazarmark/slog-shim v0.1.0/go.mod h1:SrcSrq8aKtyuqEI1uvTDTK1arOWRIczQRv+GVI1AkeQ=
+github.com/sirupsen/logrus v1.9.3 h1:dueUQJ1C2q9oE3F7wvmSGAaVtTmUizReu6fjN8uqzbQ=
+github.com/sirupsen/logrus v1.9.3/go.mod h1:naHLuLoDiP4jHNo9R0sCBMtWGeIprob74mVsIT4qYEQ=
+github.com/sourcegraph/conc v0.3.0 h1:OQTbbt6P72L20UqAkXXuLOj79LfEanQ+YQFNpLA9ySo=
+github.com/sourcegraph/conc v0.3.0/go.mod h1:Sdozi7LEKbFPqYX2/J+iBAM6HpqSLTASQIKqDmF7Mt0=
+github.com/spf13/afero v1.11.0 h1:WJQKhtpdm3v2IzqG8VMqrr6Rf3UYpEF239Jy9wNepM8=
+github.com/spf13/afero v1.11.0/go.mod h1:GH9Y3pIexgf1MTIWtNGyogA5MwRIDXGUr+hbWNoBjkY=
+github.com/spf13/cast v1.6.0 h1:GEiTHELF+vaR5dhz3VqZfFSzZjYbgeKDpBxQVS4GYJ0=
+github.com/spf13/cast v1.6.0/go.mod h1:ancEpBxwJDODSW/UG4rDrAqiKolqNNh2DX3mk86cAdo=
+github.com/spf13/pflag v1.0.5 h1:iy+VFUOCP1a+8yFto/drg2CJ5u0yRoB7fZw3DKv/JXA=
+github.com/spf13/pflag v1.0.5/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg=
+github.com/spf13/viper v1.19.0 h1:RWq5SEjt8o25SROyN3z2OrDB9l7RPd3lwTWU8EcEdcI=
+github.com/spf13/viper v1.19.0/go.mod h1:GQUN9bilAbhU/jgc1bKs99f/suXKeUMct8Adx5+Ntkg=
+github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
+github.com/stretchr/objx v0.4.0/go.mod h1:YvHI0jy2hoMjB+UWwv71VJQ9isScKT/TqJzVSSt89Yw=
+github.com/stretchr/objx v0.5.0/go.mod h1:Yh+to48EsGEfYuaHDzXPcE3xhTkx73EhmCGUpEOglKo=
+github.com/stretchr/objx v0.5.2/go.mod h1:FRsXN1f5AsAjCGJKqEizvkpNtU+EGNCLh3NxZ/8L+MA=
+github.com/stretchr/testify v1.3.0/go.mod h1:M5WIy9Dh21IEIfnGCwXGc5bZfKNJtfHm1UVUgZn+9EI=
+github.com/stretchr/testify v1.7.0/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
+github.com/stretchr/testify v1.7.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
+github.com/stretchr/testify v1.8.0/go.mod h1:yNjHg4UonilssWZ8iaSj1OCr/vHnekPRkoO+kdMU+MU=
+github.com/stretchr/testify v1.8.1/go.mod h1:w2LPCIKwWwSfY2zedu0+kehJoqGctiVI29o6fzry7u4=
+github.com/stretchr/testify v1.8.4/go.mod h1:sz/lmYIOXD/1dqDmKjjqLyZ2RngseejIcXlSw2iwfAo=
+github.com/stretchr/testify v1.9.0/go.mod h1:r2ic/lqez/lEtzL7wO/rwa5dbSLXVDPFyf8C91i36aY=
+github.com/stretchr/testify v1.10.0 h1:Xv5erBjTwe/5IxqUQTdXv5kgmIvbHo3QQyRwhJsOfJA=
+github.com/stretchr/testify v1.10.0/go.mod h1:r2ic/lqez/lEtzL7wO/rwa5dbSLXVDPFyf8C91i36aY=
+github.com/subosito/gotenv v1.6.0 h1:9NlTDc1FTs4qu0DDq7AEtTPNw6SVm7uBMsUCUjABIf8=
+github.com/subosito/gotenv v1.6.0/go.mod h1:Dk4QP5c2W3ibzajGcXpNraDfq2IrhjMIvMSWPKKo0FU=
+github.com/twitchyliquid64/golang-asm v0.15.1 h1:SU5vSMR7hnwNxj24w34ZyCi/FmDZTkS4MhqMhdFk5YI=
+github.com/twitchyliquid64/golang-asm v0.15.1/go.mod h1:a1lVb/DtPvCB8fslRZhAngC2+aY1QWCk3Cedj/Gdt08=
+github.com/ugorji/go/codec v1.2.12 h1:9LC83zGrHhuUA9l16C9AHXAqEV/2wBQ4nkvumAE65EE=
+github.com/ugorji/go/codec v1.2.12/go.mod h1:UNopzCgEMSXjBc6AOMqYvWC1ktqTAfzJZUZgYf6w6lg=
+github.com/unrolled/secure v1.15.0 h1:q7x+pdp8jAHnbzxu6UheP8fRlG/rwYTb8TPuQ3rn9Og=
+github.com/unrolled/secure v1.15.0/go.mod h1:BmF5hyM6tXczk3MpQkFf1hpKSRqCyhqcbiQtiAF7+40=
+github.com/wlynxg/anet v0.0.3 h1:PvR53psxFXstc12jelG6f1Lv4MWqE0tI76/hHGjh9rg=
+github.com/wlynxg/anet v0.0.3/go.mod h1:eay5PRQr7fIVAMbTbchTnO9gG65Hg/uYGdc7mguHxoA=
+go.uber.org/atomic v1.9.0 h1:ECmE8Bn/WFTYwEW/bpKD3M8VtR/zQVbavAoalC1PYyE=
+go.uber.org/atomic v1.9.0/go.mod h1:fEN4uk6kAWBTFdckzkM89CLk9XfWZrxpCo0nPH17wJc=
+go.uber.org/multierr v1.9.0 h1:7fIwc/ZtS0q++VgcfqFDxSBZVv/Xo49/SYnDFupUwlI=
+go.uber.org/multierr v1.9.0/go.mod h1:X2jQV1h+kxSjClGpnseKVIxpmcjrj7MNnI0bnlfKTVQ=
+golang.org/x/arch v0.0.0-20210923205945-b76863e36670/go.mod h1:5om86z9Hs0C8fWVUuoMHwpExlXzs5Tkyp9hOrfG7pp8=
+golang.org/x/arch v0.8.0 h1:3wRIsP3pM4yUptoR96otTUOXI367OS0+c9eeRi9doIc=
+golang.org/x/arch v0.8.0/go.mod h1:FEVrYAQjsQXMVJ1nsMoVVXPZg6p2JE2mx8psSWTDQys=
+golang.org/x/crypto v0.45.0 h1:jMBrvKuj23MTlT0bQEOBcAE0mjg8mK9RXFhRH6nyF3Q=
+golang.org/x/crypto v0.45.0/go.mod h1:XTGrrkGJve7CYK7J8PEww4aY7gM3qMCElcJQ8n8JdX4=
+golang.org/x/exp v0.0.0-20230905200255-921286631fa9 h1:GoHiUyI/Tp2nVkLI2mCxVkOjsbSXD66ic0XW0js0R9g=
+golang.org/x/exp v0.0.0-20230905200255-921286631fa9/go.mod h1:S2oDrQGGwySpoQPVqRShND87VCbxmc6bL1Yd2oYrm6k=
+golang.org/x/net v0.47.0 h1:Mx+4dIFzqraBXUugkia1OOvlD6LemFo1ALMHjrXDOhY=
+golang.org/x/net v0.47.0/go.mod h1:/jNxtkgq5yWUGYkaZGqo27cfGZ1c5Nen03aYrrKpVRU=
+golang.org/x/sys v0.0.0-20220715151400-c0bba94af5f8/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.38.0 h1:3yZWxaJjBmCWXqhN1qh02AkOnCQ1poK6oF+a7xWL6Gc=
+golang.org/x/sys v0.38.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
+golang.org/x/text v0.31.0 h1:aC8ghyu4JhP8VojJ2lEHBnochRno1sgL6nEi9WGFGMM=
+golang.org/x/text v0.31.0/go.mod h1:tKRAlv61yKIjGGHX/4tP1LTbc13YSec1pxVEWXzfoeM=
+google.golang.org/protobuf v1.34.1 h1:9ddQBjfCyZPOHPUiPxpYESBLc+T8P3E+Vo4IbKZgFWg=
+google.golang.org/protobuf v1.34.1/go.mod h1:c6P6GXX6sHbq/GpV6MGZEdwhWPcYBgnhAHhKbcUYpos=
+gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
+gopkg.in/check.v1 v1.0.0-20190902080502-41f04d3bba15 h1:YR8cESwS4TdDjEe65xsg0ogRM/Nc3DYOhEAlW+xobZo=
+gopkg.in/check.v1 v1.0.0-20190902080502-41f04d3bba15/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
+gopkg.in/ini.v1 v1.67.0 h1:Dgnx+6+nfE+IfzjUEISNeydPJh9AXNNsWbGP9KzCsOA=
+gopkg.in/ini.v1 v1.67.0/go.mod h1:pNLf8WUiyNEtQjuu5G5vTm06TEv9tsIgeAvK8hOrP4k=
+gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
+gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
+gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
+nullprogram.com/x/optparse v1.0.0/go.mod h1:KdyPE+Igbe0jQUrVfMqDMeJQIJZEuyV7pjYmp6pbG50=
+rsc.io/pdf v0.1.1/go.mod h1:n8OzWcQ6Sp37PL01nO98y4iUCRdTGarVfzxY20ICaU4=
--- a/server/include/kvm_vision.h
+++ b/server/include/kvm_vision.h
@@ -0,0 +1,74 @@
+
+
+#ifndef KVM_VISION_H_
+#define KVM_VISION_H_
+
+#ifdef __cplusplus
+extern "C" {
+#endif
+#include <fcntl.h> /* low-level i/o */
+#include <unistd.h>
+#include <string.h>
+#include <stdio.h>
+#include <stdint.h>
+#include <stdlib.h>
+#include <pthread.h>
+#include <time.h>
+
+#define IMG_BUFFER_FULL			-3
+#define IMG_VENC_ERROR			-2
+#define IMG_NOT_EXIST			-1
+#define IMG_MJPEG_TYPE			0
+#define IMG_H264_TYPE_SPS		1
+#define IMG_H264_TYPE_PPS		2
+#define IMG_H264_TYPE_IF		3
+#define IMG_H264_TYPE_PF		4
+
+#define NORMAL_RES                      0
+#define NEW_RES                         1
+#define UNSUPPORT_RES                   2
+#define UNKNOWN_RES                     3
+#define ERROR_RES                       4
+
+void kvmv_init(uint8_t _debug_info_en);
+void set_venc_auto_recyc(uint8_t _enable);
+/**********************************************************************************
+ * @name    kvmv_read_img
+ * @author  Sipeed BuGu
+ * @date    2024/10/25
+ * @version R1.0
+ * @brief   Acquire the encoded image with auto init
+ * @param	_width				@input: 	Output image width
+ * @param	_height				@input: 	Output image height
+ * @param	_type				@input: 	Encode type
+ * @param	_qlty				@input: 	MJPEG: (50-100) | H264:  (500-10000)
+ * @param	_pp_kvm_data		@output: 	Encode data
+ * @param	_p_kvmv_data_size	@output: 	Encode data size
+ * @return
+        -7: HDMI INPUT RES ERROR
+        -6: Unsupported resolution, please modify it in the host settings.
+        -5: Retrieving image, please wait
+        -4: Modifying image resolution, please wait
+        -3: img buffer full
+        -2: VENC Error
+        -1: No images were acquired
+         0: Acquire MJPEG encoded images
+         1: Acquire H264 encoded images(SPS)[Deprecated]
+         2: Acquire H264 encoded images(PPS)[Deprecated]
+         3: Acquire H264 encoded images(I)
+         4: Acquire H264 encoded images(P)
+         5: IMG not changed
+ **********************************************************************************/
+int kvmv_read_img(uint16_t _width, uint16_t _height, uint8_t _type, uint16_t _qlty, uint8_t** _pp_kvm_data, uint32_t* _p_kvmv_data_size);
+int free_kvmv_data(uint8_t ** _pp_kvm_data);
+void free_all_kvmv_data();
+void set_h264_gop(uint8_t _gop);
+void set_frame_detact(uint8_t _frame_detact);
+void kvmv_deinit();
+uint8_t kvmv_hdmi_control(uint8_t _en);
+
+#ifdef __cplusplus
+}
+#endif
+
+#endif // KVM_VISION_H_
--- a/server/logger/formatter.go
+++ b/server/logger/formatter.go
@@ -0,0 +1,42 @@
+package logger
+
+import (
+	"bytes"
+	"fmt"
+	"path/filepath"
+
+	"github.com/sirupsen/logrus"
+)
+
+type formatter struct{}
+
+func (f *formatter) Format(entry *logrus.Entry) ([]byte, error) {
+	var (
+		text   string
+		buffer *bytes.Buffer
+	)
+
+	if entry.Buffer != nil {
+		buffer = entry.Buffer
+	} else {
+		buffer = &bytes.Buffer{}
+	}
+
+	now := entry.Time.Format("2006-01-02 15:04:05.000")
+
+	if entry.HasCaller() {
+		fileName := filepath.Base(entry.Caller.File)
+		text = fmt.Sprintf(
+			"[%s] [%s] [%s:%d] %s\n",
+			now, entry.Level, fileName, entry.Caller.Line, entry.Message,
+		)
+	} else {
+		text = fmt.Sprintf(
+			"[%s] [%s] %s \n",
+			now, entry.Level, entry.Message,
+		)
+	}
+
+	buffer.WriteString(text)
+	return buffer.Bytes(), nil
+}
--- a/server/logger/logger.go
+++ b/server/logger/logger.go
@@ -0,0 +1,51 @@
+package logger
+
+import (
+	"os"
+	"path/filepath"
+
+	"NanoKVM-Server/config"
+
+	"github.com/sirupsen/logrus"
+)
+
+func openLogFile(filename string) (*os.File, error) {
+	absPath, err := filepath.Abs(filename)
+	if err != nil {
+		return nil, err
+	}
+
+	file, err := os.OpenFile(absPath, os.O_CREATE|os.O_WRONLY|os.O_APPEND, 0o644)
+	if err != nil {
+		return nil, err
+	}
+
+	return file, nil
+}
+
+func Init() {
+	conf := config.GetInstance()
+
+	level, err := logrus.ParseLevel(conf.Logger.Level)
+	if err != nil {
+		level = logrus.ErrorLevel
+	}
+
+	logrus.SetLevel(level)
+	if conf.Logger.File == "" || conf.Logger.File == "stdout" {
+		logrus.SetOutput(os.Stdout)
+	} else {
+		fh, err := openLogFile(conf.Logger.File)
+		if err != nil {
+			logrus.Error("open log file failed:", err)
+			logrus.SetOutput(os.Stdout)
+		} else {
+			logrus.SetOutput(fh)
+		}
+	}
+
+	logrus.SetReportCaller(true)
+	logrus.SetFormatter(&formatter{})
+
+	logrus.Info("logger set success")
+}
--- a/server/main.go
+++ b/server/main.go
@@ -0,0 +1,114 @@
+package main
+
+import (
+	"fmt"
+	"log"
+	"net/http"
+	"os"
+	"os/signal"
+	"strings"
+	"syscall"
+	"time"
+
+	"NanoKVM-Server/common"
+	"NanoKVM-Server/config"
+	"NanoKVM-Server/logger"
+	"NanoKVM-Server/middleware"
+	"NanoKVM-Server/router"
+	"NanoKVM-Server/service/vm/jiggler"
+	"NanoKVM-Server/utils"
+
+	"github.com/gin-gonic/gin"
+	cors "github.com/rs/cors/wrapper/gin"
+)
+
+func main() {
+	initialize()
+	defer dispose()
+
+	run()
+}
+
+func initialize() {
+	logger.Init()
+
+	// init screen parameters
+	_ = common.GetScreen()
+
+	// init HDMI
+	vision := common.GetKvmVision()
+	vision.SetHDMI(false)
+	time.Sleep(10 * time.Millisecond)
+	if !utils.IsHdmiDisabled() {
+		vision.SetHDMI(true)
+	}
+
+	// run mouse jiggler
+	jiggler.GetJiggler().Run()
+
+	sigChan := make(chan os.Signal, 1)
+	signal.Notify(sigChan, syscall.SIGINT, syscall.SIGTERM, syscall.SIGQUIT)
+	go func() {
+		sig := <-sigChan
+		log.Printf("\nReceived signal: %v\n", sig)
+
+		dispose()
+		os.Exit(0)
+	}()
+}
+
+func run() {
+	conf := config.GetInstance()
+
+	gin.SetMode(gin.ReleaseMode)
+	r := gin.New()
+	r.Use(gin.Recovery())
+	if conf.Authentication == "disable" {
+		r.Use(cors.AllowAll())
+	}
+
+	router.Init(r)
+
+	httpAddr := fmt.Sprintf(":%d", conf.Port.Http)
+	httpsAddr := fmt.Sprintf(":%d", conf.Port.Https)
+
+	if conf.Proto == "https" {
+		go func() {
+			r.Use(middleware.Tls())
+			err := r.RunTLS(httpsAddr, conf.Cert.Crt, conf.Cert.Key)
+			if err != nil {
+				panic("start https server failed")
+			}
+		}()
+
+		runRedirect(httpAddr, httpsAddr)
+	} else {
+		if err := r.Run(httpAddr); err != nil {
+			panic("start http server failed")
+		}
+	}
+}
+
+func runRedirect(httpPort string, httpsPort string) {
+	err := http.ListenAndServe(httpPort, http.HandlerFunc(func(w http.ResponseWriter, req *http.Request) {
+		host := req.Host
+		if strings.Contains(host, httpPort) {
+			host = strings.Split(host, httpPort)[0]
+		}
+
+		targetURL := "https://" + host + req.URL.String()
+		if httpsPort != ":443" {
+			targetURL = "https://" + host + httpsPort + req.URL.String()
+		}
+
+		http.Redirect(w, req, targetURL, http.StatusTemporaryRedirect)
+	}))
+
+	if err != nil {
+		panic("start http server failed")
+	}
+}
+
+func dispose() {
+	common.GetKvmVision().Close()
+}
--- a/server/middleware/jwt.go
+++ b/server/middleware/jwt.go
@@ -0,0 +1,75 @@
+package middleware
+
+import (
+	"net/http"
+	"time"
+
+	"github.com/gin-gonic/gin"
+	"github.com/golang-jwt/jwt/v5"
+	log "github.com/sirupsen/logrus"
+
+	"NanoKVM-Server/config"
+)
+
+type Token struct {
+	Username string `json:"username"`
+	jwt.RegisteredClaims
+}
+
+func CheckToken() gin.HandlerFunc {
+	return func(c *gin.Context) {
+		conf := config.GetInstance()
+
+		if conf.Authentication == "disable" {
+			c.Next()
+			return
+		}
+
+		cookie, err := c.Cookie("nano-kvm-token")
+		if err == nil {
+			_, err = ParseJWT(cookie)
+			if err == nil {
+				c.Next()
+				return
+			}
+		}
+
+		c.JSON(http.StatusUnauthorized, "unauthorized")
+		c.Abort()
+	}
+}
+
+func GenerateJWT(username string) (string, error) {
+	conf := config.GetInstance()
+
+	expireDuration := time.Duration(conf.JWT.RefreshTokenDuration) * time.Second
+
+	claims := Token{
+		Username: username,
+		RegisteredClaims: jwt.RegisteredClaims{
+			ExpiresAt: jwt.NewNumericDate(time.Now().Add(expireDuration)),
+		},
+	}
+
+	t := jwt.NewWithClaims(jwt.SigningMethodHS256, claims)
+
+	return t.SignedString([]byte(conf.JWT.SecretKey))
+}
+
+func ParseJWT(jwtToken string) (*Token, error) {
+	conf := config.GetInstance()
+
+	t, err := jwt.ParseWithClaims(jwtToken, &Token{}, func(token *jwt.Token) (interface{}, error) {
+		return []byte(conf.JWT.SecretKey), nil
+	})
+	if err != nil {
+		log.Debugf("parse jwt error: %s", err)
+		return nil, err
+	}
+
+	if claims, ok := t.Claims.(*Token); ok && t.Valid {
+		return claims, nil
+	} else {
+		return nil, err
+	}
+}
--- a/server/middleware/tls.go
+++ b/server/middleware/tls.go
@@ -0,0 +1,26 @@
+package middleware
+
+import (
+	"github.com/gin-gonic/gin"
+	"github.com/unrolled/secure"
+)
+
+func Tls() gin.HandlerFunc {
+	secureMiddleware := secure.New(secure.Options{
+		SSLRedirect: true,
+	})
+
+	secureFunc := func(c *gin.Context) {
+		err := secureMiddleware.Process(c.Writer, c.Request)
+		if err != nil {
+			c.Abort()
+			return
+		}
+
+		if status := c.Writer.Status(); status > 300 && status < 399 {
+			c.Abort()
+		}
+	}
+
+	return secureFunc
+}
--- a/server/proto/application.go
+++ b/server/proto/application.go
@@ -0,0 +1,14 @@
+package proto
+
+type GetVersionRsp struct {
+	Current string `json:"current"`
+	Latest  string `json:"latest"`
+}
+
+type GetPreviewRsp struct {
+	Enabled bool `json:"enabled"`
+}
+
+type SetPreviewReq struct {
+	Enable bool `validate:"omitempty"`
+}
--- a/server/proto/auth.go
+++ b/server/proto/auth.go
@@ -0,0 +1,28 @@
+package proto
+
+type LoginReq struct {
+	Username string `validate:"required"`
+	Password string `validate:"required"`
+}
+
+type LoginRsp struct {
+	Token string `json:"token"`
+}
+
+type GetAccountRsp struct {
+	Username string `json:"username"`
+}
+
+type ChangePasswordReq struct {
+	Username string `json:"username" validate:"required"`
+	Password string `json:"password" validate:"required"`
+}
+
+type IsPasswordUpdatedRsp struct {
+	IsUpdated bool `json:"isUpdated"`
+}
+
+type ConnectWifiReq struct {
+	Ssid     string `validate:"required"`
+	Password string `valid:"required"`
+}
--- a/server/proto/download.go
+++ b/server/proto/download.go
@@ -0,0 +1,11 @@
+package proto
+
+type ImageEnabledRsp struct {
+	Enabled bool `json:"enabled"`
+}
+
+type StatusImageRsp struct {
+	Status     string `json:"status"`
+	File       string `json:"file"`
+	Percentage string `json:"percentage"`
+}
--- a/server/proto/hid.go
+++ b/server/proto/hid.go
@@ -0,0 +1,9 @@
+package proto
+
+type GetHidModeRsp struct {
+	Mode string `json:"mode"` // normal or hid-only
+}
+
+type SetHidModeReq struct {
+	Mode string `validate:"required"` // normal or hid-only
+}
--- a/server/proto/network.go
+++ b/server/proto/network.go
@@ -0,0 +1,44 @@
+package proto
+
+type WakeOnLANReq struct {
+	Mac string `form:"mac" validate:"required"`
+}
+
+type GetMacRsp struct {
+	Macs []string `json:"macs"`
+}
+
+type DeleteMacReq struct {
+	Mac string `form:"mac" validate:"required"`
+}
+
+type SetMacNameReq struct {
+	Mac  string `form:"mac" validate:"required"`
+	Name string `form:"name" validate:"required"`
+}
+
+type TailscaleState string
+
+const (
+	TailscaleNotInstall TailscaleState = "notInstall"
+	TailscaleNotRunning TailscaleState = "notRunning"
+	TailscaleNotLogin   TailscaleState = "notLogin"
+	TailscaleStopped    TailscaleState = "stopped"
+	TailscaleRunning    TailscaleState = "running"
+)
+
+type GetTailscaleStatusRsp struct {
+	State   TailscaleState `json:"state"`
+	Name    string         `json:"name"`
+	IP      string         `json:"ip"`
+	Account string         `json:"account"`
+}
+
+type LoginTailscaleRsp struct {
+	Url string `json:"url"`
+}
+
+type GetWifiRsp struct {
+	Supported bool `json:"supported"`
+	Connected bool `json:"connected"`
+}
--- a/server/proto/request.go
+++ b/server/proto/request.go
@@ -0,0 +1,49 @@
+package proto
+
+import (
+	"os"
+
+	"github.com/gin-gonic/gin"
+	"github.com/go-playground/validator/v10"
+	log "github.com/sirupsen/logrus"
+)
+
+var env = os.Getenv(gin.EnvGinMode)
+
+// ValidateRequest Validates request parameters.
+func ValidateRequest(req interface{}) error {
+	validate := validator.New()
+
+	if err := validate.Struct(req); err != nil {
+		log.Errorf("validate request failed, err: %s", err)
+		return err
+	}
+
+	if env == "" || env == "debug" {
+		log.Debugf("request: %+v\n", req)
+	}
+
+	return nil
+}
+
+// ParseQueryRequest Validates GET requests.
+func ParseQueryRequest(c *gin.Context, req interface{}) error {
+	var err error
+	if err = c.ShouldBindQuery(req); err != nil {
+		log.Errorf("parse request failed, err: %s", err)
+		return err
+	}
+
+	return ValidateRequest(req)
+}
+
+// ParseFormRequest Validates POST Requests.
+func ParseFormRequest(c *gin.Context, req interface{}) error {
+	var err error
+	if err = c.ShouldBind(req); err != nil {
+		log.Errorf("parse request failed, err: %s", err)
+		return err
+	}
+
+	return ValidateRequest(req)
+}
--- a/server/proto/response.go
+++ b/server/proto/response.go
@@ -0,0 +1,50 @@
+package proto
+
+import (
+	"net/http"
+
+	"github.com/gin-gonic/gin"
+)
+
+type Response struct {
+	Code int         `json:"code"` // Status code. 0-success, others-failure
+	Msg  string      `json:"msg"`  // Status details
+	Data interface{} `json:"data"` // Returned data
+}
+
+func (r *Response) Ok() {
+	r.Code = 0
+	r.Msg = "success"
+}
+
+func (r *Response) OkWithData(data interface{}) {
+	r.Ok()
+	r.Data = data
+}
+
+func (r *Response) Err(code int, msg string) {
+	r.Code = code
+	r.Msg = msg
+}
+
+// OkRsp Successful response without data.
+func (r *Response) OkRsp(c *gin.Context) {
+	r.Ok()
+
+	c.JSON(http.StatusOK, r)
+}
+
+// OkRspWithData Successful response with data.
+func (r *Response) OkRspWithData(c *gin.Context, data interface{}) {
+	r.Ok()
+	r.Data = data
+
+	c.JSON(http.StatusOK, r)
+}
+
+// ErrRsp Failed response.
+func (r *Response) ErrRsp(c *gin.Context, code int, msg string) {
+	r.Err(code, msg)
+
+	c.JSON(http.StatusOK, r)
+}
--- a/server/proto/storage.go
+++ b/server/proto/storage.go
@@ -0,0 +1,22 @@
+package proto
+
+type GetImagesRsp struct {
+	Files []string `json:"files"`
+}
+
+type MountImageReq struct {
+	File  string `json:"file" validate:"omitempty"`
+	Cdrom bool   `json:"cdrom" validate:"omitempty"`
+}
+
+type GetMountedImageRsp struct {
+	File string `json:"file"`
+}
+
+type GetCdRomRsp struct {
+	Cdrom int64 `json:"cdrom"`
+}
+
+type DeleteImageReq struct {
+	File string `json:"file" validate:"required"`
+}
--- a/server/proto/stream.go
+++ b/server/proto/stream.go
@@ -0,0 +1,9 @@
+package proto
+
+type UpdateFrameDetectReq struct {
+	Enabled bool `validate:"omitempty"`
+}
+
+type StopFrameDetectReq struct {
+	Duration int `validate:"omitempty"`
+}
--- a/server/proto/vm.go
+++ b/server/proto/vm.go
@@ -0,0 +1,138 @@
+package proto
+
+type IP struct {
+	Name    string `json:"name"`
+	Addr    string `json:"addr"`
+	Version string `json:"version"`
+	Type    string `json:"type"`
+}
+
+type GetInfoRsp struct {
+	IPs         []IP   `json:"ips"`
+	Mdns        string `json:"mdns"`
+	Image       string `json:"image"`
+	Application string `json:"application"`
+	DeviceKey   string `json:"deviceKey"`
+}
+
+type GetHardwareRsp struct {
+	Version string `json:"version"`
+}
+
+type SetGpioReq struct {
+	Type     string `validate:"required"`  // reset / power
+	Duration uint   `validate:"omitempty"` // press time (unit: milliseconds)
+}
+
+type GetGpioRsp struct {
+	PWR bool `json:"pwr"` // power led
+	HDD bool `json:"hdd"` // hdd led
+}
+
+type SetScreenReq struct {
+	Type  string `validate:"required"` // resolution / fps / quality
+	Value int    `validate:"number"`   // value
+}
+
+type GetScriptsRsp struct {
+	Files []string `json:"files"`
+}
+
+type UploadScriptRsp struct {
+	File string `json:"file"`
+}
+
+type RunScriptReq struct {
+	Name string `validate:"required"`
+	Type string `validate:"required"` // foreground | background
+}
+
+type RunScriptRsp struct {
+	Log string `json:"log"`
+}
+
+type DeleteScriptReq struct {
+	Name string `validate:"required"`
+}
+
+type GetVirtualDeviceRsp struct {
+	Network bool `json:"network"`
+	Disk    bool `json:"disk"`
+}
+
+type UpdateVirtualDeviceReq struct {
+	Device string `validate:"required"`
+}
+
+type UpdateVirtualDeviceRsp struct {
+	On bool `json:"on"`
+}
+
+type SetMemoryLimitReq struct {
+	Enabled bool  `validate:"omitempty"`
+	Limit   int64 `validate:"omitempty"`
+}
+
+type GetMemoryLimitRsp struct {
+	Enabled bool  `json:"enabled"`
+	Limit   int64 `json:"limit"`
+}
+
+type SetOledReq struct {
+	Sleep int `validate:"omitempty"`
+}
+
+type GetOLEDRsp struct {
+	Exist bool `json:"exist"`
+	Sleep int  `json:"sleep"`
+}
+
+type GetGetHdmiStateRsp struct {
+	Enabled bool `json:"enabled"`
+}
+
+type GetSSHStateRsp struct {
+	Enabled bool `json:"enabled"`
+}
+
+type GetSwapRsp struct {
+	Size int64 `json:"size"` // unit: MB
+}
+
+type SetSwapReq struct {
+	Size int64 `validate:"omitempty"` // unit: MB
+}
+
+type GetMouseJigglerRsp struct {
+	Enabled bool   `json:"enabled"`
+	Mode    string `json:"mode"`
+}
+
+type SetMouseJigglerReq struct {
+	Enabled bool   `validate:"omitempty"`
+	Mode    string `validate:"omitempty"`
+}
+
+type GetMdnsStateRsp struct {
+	Enabled bool `json:"enabled"`
+}
+
+type SetHostnameReq struct {
+	Hostname string `validate:"required"`
+}
+
+type GetHostnameRsp struct {
+	Hostname string `json:"hostname"`
+}
+
+type SetWebTitleReq struct {
+	Title string `validate:"omitempty"`
+}
+
+type GetWebTitleRsp struct {
+	Title string `json:"title"`
+}
+
+type SetTlsReq struct {
+	Enabled bool `validate:"omitempty"`
+}
--- a/server/router/application.go
+++ b/server/router/application.go
@@ -0,0 +1,19 @@
+package router
+
+import (
+	"NanoKVM-Server/middleware"
+	"NanoKVM-Server/service/application"
+
+	"github.com/gin-gonic/gin"
+)
+
+func applicationRouter(r *gin.Engine) {
+	service := application.NewService()
+	api := r.Group("/api").Use(middleware.CheckToken())
+
+	api.GET("/application/version", service.GetVersion) // get application version
+	api.POST("/application/update", service.Update)     // update application
+
+	api.GET("/application/preview", service.GetPreview)  // get preview updates state
+	api.POST("/application/preview", service.SetPreview) // set preview updates state
+}
--- a/server/router/auth.go
+++ b/server/router/auth.go
@@ -0,0 +1,21 @@
+package router
+
+import (
+	"github.com/gin-gonic/gin"
+
+	"NanoKVM-Server/middleware"
+	"NanoKVM-Server/service/auth"
+)
+
+func authRouter(r *gin.Engine) {
+	service := auth.NewService()
+
+	r.POST("/api/auth/login", service.Login) // login
+
+	api := r.Group("/api").Use(middleware.CheckToken())
+
+	api.GET("/auth/password", service.IsPasswordUpdated) // is password updated
+	api.GET("/auth/account", service.GetAccount)         // get account
+	api.POST("/auth/password", service.ChangePassword)   // change password
+	api.POST("/auth/logout", service.Logout)             // logout
+}
--- a/server/router/download.go
+++ b/server/router/download.go
@@ -0,0 +1,17 @@
+package router
+
+import (
+	"NanoKVM-Server/service/download"
+	"github.com/gin-gonic/gin"
+
+	"NanoKVM-Server/middleware"
+)
+
+func downloadRouter(r *gin.Engine) {
+	service := download.NewService()
+	api := r.Group("/api").Use(middleware.CheckToken())
+
+	api.POST("/download/image", service.DownloadImage)       // download image
+	api.GET("/download/image/status", service.StatusImage)   // download image
+	api.GET("/download/image/enabled", service.ImageEnabled) // download image
+}
--- a/server/router/extensions.go
+++ b/server/router/extensions.go
@@ -0,0 +1,25 @@
+package router
+
+import (
+	"NanoKVM-Server/middleware"
+	"NanoKVM-Server/service/extensions/tailscale"
+
+	"github.com/gin-gonic/gin"
+)
+
+func extensionsRouter(r *gin.Engine) {
+	api := r.Group("/api/extensions").Use(middleware.CheckToken())
+
+	ts := tailscale.NewService()
+
+	api.POST("/tailscale/install", ts.Install)     // install tailscale
+	api.POST("/tailscale/uninstall", ts.Uninstall) // uninstall tailscale
+	api.GET("/tailscale/status", ts.GetStatus)     // get tailscale status
+	api.POST("/tailscale/up", ts.Up)               // run tailscale up
+	api.POST("/tailscale/down", ts.Down)           // run tailscale down
+	api.POST("/tailscale/login", ts.Login)         // tailscale login
+	api.POST("/tailscale/logout", ts.Logout)       // tailscale logout
+	api.POST("/tailscale/start", ts.Start)         // tailscale start
+	api.POST("/tailscale/stop", ts.Stop)           // tailscale stop
+	api.POST("/tailscale/restart", ts.Restart)     // tailscale restart
+}
--- a/server/router/hid.go
+++ b/server/router/hid.go
@@ -0,0 +1,19 @@
+package router
+
+import (
+	"github.com/gin-gonic/gin"
+
+	"NanoKVM-Server/middleware"
+	"NanoKVM-Server/service/hid"
+)
+
+func hidRouter(r *gin.Engine) {
+	service := hid.NewService()
+	api := r.Group("/api").Use(middleware.CheckToken())
+
+	api.POST("/hid/paste", service.Paste) // paste
+
+	api.GET("/hid/mode", service.GetHidMode)  // get hid mode
+	api.POST("/hid/mode", service.SetHidMode) // set hid mode
+	api.POST("/hid/reset", service.ResetHid)  // reset hid
+}
--- a/server/router/network.go
+++ b/server/router/network.go
@@ -0,0 +1,22 @@
+package router
+
+import (
+	"github.com/gin-gonic/gin"
+
+	"NanoKVM-Server/middleware"
+	"NanoKVM-Server/service/network"
+)
+
+func networkRouter(r *gin.Engine) {
+	service := network.NewService()
+
+	r.POST("/api/network/wifi", service.ConnectWifi) // connect Wi-Fi
+
+	api := r.Group("/api").Use(middleware.CheckToken())
+
+	api.POST("/network/wol", service.WakeOnLAN)           // wake on lan
+	api.GET("/network/wol/mac", service.GetMac)           // get mac list
+	api.DELETE("/network/wol/mac", service.DeleteMac)     // delete mac
+	api.POST("/network/wol/mac/name", service.SetMacName) // set mac name
+	api.GET("/network/wifi", service.GetWifi)             // get Wi-Fi information
+}
--- a/server/router/router.go
+++ b/server/router/router.go
@@ -0,0 +1,42 @@
+package router
+
+import (
+	"fmt"
+	"os"
+	"path/filepath"
+
+	"github.com/gin-gonic/contrib/static"
+	"github.com/gin-gonic/gin"
+	log "github.com/sirupsen/logrus"
+)
+
+func Init(r *gin.Engine) {
+	web(r)
+	server(r)
+	log.Debugf("router init done")
+}
+
+func web(r *gin.Engine) {
+	execPath, err := os.Executable()
+	if err != nil {
+		panic("invalid executable path")
+	}
+
+	execDir := filepath.Dir(execPath)
+	webPath := fmt.Sprintf("%s/web", execDir)
+
+	r.Use(static.Serve("/", static.LocalFile(webPath, true)))
+}
+
+func server(r *gin.Engine) {
+	authRouter(r)
+	applicationRouter(r)
+	vmRouter(r)
+	streamRouter(r)
+	storageRouter(r)
+	networkRouter(r)
+	hidRouter(r)
+	wsRouter(r)
+	downloadRouter(r)
+	extensionsRouter(r)
+}
--- a/server/router/storage.go
+++ b/server/router/storage.go
@@ -0,0 +1,19 @@
+package router
+
+import (
+	"github.com/gin-gonic/gin"
+
+	"NanoKVM-Server/middleware"
+	"NanoKVM-Server/service/storage"
+)
+
+func storageRouter(r *gin.Engine) {
+	service := storage.NewService()
+	api := r.Group("/api").Use(middleware.CheckToken())
+
+	api.GET("/storage/image", service.GetImages)               // get image list
+	api.GET("/storage/image/mounted", service.GetMountedImage) // get mounted image
+	api.POST("/storage/image/mount", service.MountImage)       // mount image
+	api.GET("/storage/cdrom", service.GetCdRom)                // get CD-ROM flag
+	api.POST("/storage/image/delete", service.DeleteImage)     // delete image
+}
--- a/server/router/stream.go
+++ b/server/router/stream.go
@@ -0,0 +1,21 @@
+package router
+
+import (
+	"NanoKVM-Server/middleware"
+	"NanoKVM-Server/service/stream/direct"
+	"NanoKVM-Server/service/stream/mjpeg"
+	"NanoKVM-Server/service/stream/webrtc"
+
+	"github.com/gin-gonic/gin"
+)
+
+func streamRouter(r *gin.Engine) {
+	api := r.Group("/api").Use(middleware.CheckToken())
+
+	api.GET("/stream/mjpeg", mjpeg.Connect)                      // mjpeg stream
+	api.POST("/stream/mjpeg/detect", mjpeg.UpdateFrameDetect)    // update frame detect
+	api.POST("/stream/mjpeg/detect/stop", mjpeg.StopFrameDetect) // temporary stop frame detect
+
+	api.GET("/stream/h264", webrtc.Connect)        // h264 stream (webrtc)
+	api.GET("/stream/h264/direct", direct.Connect) // h264 stream (http)
+}
--- a/server/router/vm.go
+++ b/server/router/vm.go
@@ -0,0 +1,67 @@
+package router
+
+import (
+	"github.com/gin-gonic/gin"
+
+	"NanoKVM-Server/middleware"
+	"NanoKVM-Server/service/vm"
+)
+
+func vmRouter(r *gin.Engine) {
+	service := vm.NewService()
+
+	api := r.Group("/api").Use(middleware.CheckToken())
+
+	api.GET("/vm/info", service.GetInfo)         // get device information
+	api.GET("/vm/hardware", service.GetHardware) // get hardware version
+
+	api.POST("/vm/gpio", service.SetGpio)     // update gpio
+	api.GET("/vm/gpio", service.GetGpio)      // get gpio
+	api.POST("/vm/screen", service.SetScreen) // update screen
+
+	api.GET("/vm/terminal", service.Terminal) // web terminal
+
+	api.GET("/vm/script", service.GetScripts)           // get script
+	api.POST("/vm/script/upload", service.UploadScript) // upload script
+	api.POST("/vm/script/run", service.RunScript)       // run script
+	api.DELETE("/vm/script", service.DeleteScript)      // delete script
+
+	api.GET("/vm/device/virtual", service.GetVirtualDevice)     // get virtual device
+	api.POST("/vm/device/virtual", service.UpdateVirtualDevice) // update virtual device
+
+	api.GET("/vm/memory/limit", service.GetMemoryLimit)  // get memory limit
+	api.POST("/vm/memory/limit", service.SetMemoryLimit) // set memory limit
+
+	api.GET("/vm/oled", service.GetOLED)  // get OLED configuration
+	api.POST("/vm/oled", service.SetOLED) // set OLED configuration
+
+	// Only supported by PCIe version
+	api.GET("/vm/hdmi", service.GetHdmiState)         // get HDMI state
+	api.POST("/vm/hdmi/reset", service.ResetHdmi)     // reset hdmi
+	api.POST("/vm/hdmi/enable", service.EnableHdmi)   // enable hdmi
+	api.POST("/vm/hdmi/disable", service.DisableHdmi) // disable hdmi
+
+	api.GET("/vm/ssh", service.GetSSHState)         // get SSH state
+	api.POST("/vm/ssh/enable", service.EnableSSH)   // enable SSH
+	api.POST("/vm/ssh/disable", service.DisableSSH) // disable SSH
+
+	api.GET("/vm/swap", service.GetSwap)  // get swap file size
+	api.POST("/vm/swap", service.SetSwap) // set swap file size
+
+	api.GET("/vm/mouse-jiggler", service.GetMouseJiggler)   // get mouse jiggler
+	api.POST("/vm/mouse-jiggler/", service.SetMouseJiggler) // set mouse jiggler
+
+	api.GET("/vm/hostname", service.GetHostname)  // Get Hostname
+	api.POST("/vm/hostname", service.SetHostname) // Set Hostname
+
+	api.GET("/vm/web-title", service.GetWebTitle)  // Get web title
+	api.POST("/vm/web-title", service.SetWebTitle) // Set web title
+
+	api.GET("/vm/mdns", service.GetMdnsState)         // get mDNS state
+	api.POST("/vm/mdns/enable", service.EnableMdns)   // enable mDNS
+	api.POST("/vm/mdns/disable", service.DisableMdns) // disable mDNS
+
+	api.POST("/vm/tls", service.SetTls) // enable/disable TLS
+
+	api.POST("/vm/system/reboot", service.Reboot) // reboot system
+}
--- a/server/router/ws.go
+++ b/server/router/ws.go
@@ -0,0 +1,15 @@
+package router
+
+import (
+	"github.com/gin-gonic/gin"
+
+	"NanoKVM-Server/middleware"
+	"NanoKVM-Server/service/ws"
+)
+
+func wsRouter(r *gin.Engine) {
+	service := ws.NewService()
+	api := r.Group("/api").Use(middleware.CheckToken())
+
+	api.GET("/ws", service.Connect)
+}
--- a/server/service/application/preview.go
+++ b/server/service/application/preview.go
@@ -0,0 +1,60 @@
+package application
+
+import (
+	"NanoKVM-Server/proto"
+	"os"
+
+	"github.com/gin-gonic/gin"
+	log "github.com/sirupsen/logrus"
+)
+
+const (
+	PreviewUpdatesFlag = "/etc/kvm/preview_updates"
+)
+
+func (s *Service) GetPreview(c *gin.Context) {
+	var rsp proto.Response
+
+	isEnabled := isPreviewEnabled()
+
+	rsp.OkRspWithData(c, &proto.GetPreviewRsp{
+		Enabled: isEnabled,
+	})
+}
+
+func (s *Service) SetPreview(c *gin.Context) {
+	var req proto.SetPreviewReq
+	var rsp proto.Response
+
+	if err := proto.ParseFormRequest(c, &req); err != nil {
+		rsp.ErrRsp(c, -1, "invalid arguments")
+		return
+	}
+
+	if req.Enable == isPreviewEnabled() {
+		rsp.OkRsp(c)
+		return
+	}
+
+	if req.Enable {
+		if err := os.WriteFile(PreviewUpdatesFlag, []byte("1"), 0o644); err != nil {
+			log.Errorf("failed to write %s: %s", PreviewUpdatesFlag, err)
+			rsp.ErrRsp(c, -2, "enable failed")
+			return
+		}
+	} else {
+		if err := os.Remove(PreviewUpdatesFlag); err != nil {
+			log.Errorf("failed to remove %s: %s", PreviewUpdatesFlag, err)
+			rsp.ErrRsp(c, -3, "disable failed")
+			return
+		}
+	}
+
+	rsp.OkRsp(c)
+	log.Debugf("set preview updates state: %t", req.Enable)
+}
+
+func isPreviewEnabled() bool {
+	_, err := os.Stat(PreviewUpdatesFlag)
+	return err == nil
+}
--- a/server/service/application/service.go
+++ b/server/service/application/service.go
@@ -0,0 +1,16 @@
+package application
+
+const (
+	StableURL  = "https://update.tindevil.com/batchukvm"
+	PreviewURL = "https://update.tindevil.com/batchukvm/preview"
+
+	AppDir    = "/kvmapp"
+	BackupDir = "/root/old"
+	CacheDir  = "/root/.kvmcache"
+)
+
+type Service struct{}
+
+func NewService() *Service {
+	return &Service{}
+}
--- a/server/service/application/update.go
+++ b/server/service/application/update.go
@@ -0,0 +1,174 @@
+package application
+
+import (
+	"crypto/sha512"
+	"encoding/base64"
+	"fmt"
+	"io"
+	"net/http"
+	"os"
+	"os/exec"
+	"sync"
+	"time"
+
+	"github.com/gin-gonic/gin"
+	log "github.com/sirupsen/logrus"
+
+	"NanoKVM-Server/proto"
+	"NanoKVM-Server/utils"
+)
+
+const (
+	maxTries = 3
+)
+
+var (
+	updateMutex sync.Mutex
+	isUpdating  bool
+)
+
+func (s *Service) Update(c *gin.Context) {
+	var rsp proto.Response
+
+	updateMutex.Lock()
+	if isUpdating {
+		updateMutex.Unlock()
+		rsp.ErrRsp(c, -1, "update already in progress")
+		return
+	}
+	isUpdating = true
+	updateMutex.Unlock()
+
+	defer func() {
+		updateMutex.Lock()
+		isUpdating = false
+		updateMutex.Unlock()
+	}()
+
+	if err := update(); err != nil {
+		rsp.ErrRsp(c, -1, fmt.Sprintf("update failed: %s", err))
+		return
+	}
+
+	rsp.OkRsp(c)
+	log.Debugf("update application success")
+
+	// Sleep for a second before restarting the device
+	time.Sleep(1 * time.Second)
+
+	_ = exec.Command("sh", "-c", "/etc/init.d/S95nanokvm restart").Run()
+}
+
+func update() error {
+	_ = os.RemoveAll(CacheDir)
+	_ = os.MkdirAll(CacheDir, 0o755)
+	defer func() {
+		_ = os.RemoveAll(CacheDir)
+	}()
+
+	// get latest information
+	latest, err := getLatest()
+	if err != nil {
+		return err
+	}
+
+	// download
+	target := fmt.Sprintf("%s/%s", CacheDir, latest.Name)
+
+	if err := download(latest.Url, target); err != nil {
+		log.Errorf("download app failed: %s", err)
+		return err
+	}
+
+	// check sha512
+	if err := checksum(target, latest.Sha512); err != nil {
+		log.Errorf("check sha512 failed: %s", err)
+		return err
+	}
+
+	// decompress
+	dir, err := utils.UnTarGz(target, CacheDir)
+	log.Debugf("untar: %s", dir)
+	if err != nil {
+		log.Errorf("decompress app failed: %s", err)
+		return err
+	}
+
+	// backup old version
+	if err := os.RemoveAll(BackupDir); err != nil {
+		log.Errorf("remove backup failed: %s", err)
+		return err
+	}
+
+	if err := utils.MoveFilesRecursively(AppDir, BackupDir); err != nil {
+		log.Errorf("backup app failed: %s", err)
+		return err
+	}
+
+	// update
+	if err := utils.MoveFilesRecursively(dir, AppDir); err != nil {
+		log.Errorf("failed to move update back in place: %s", err)
+		return err
+	}
+
+	// modify permissions
+	if err := utils.ChmodRecursively(AppDir, 0o755); err != nil {
+		log.Errorf("chmod failed: %s", err)
+		return err
+	}
+
+	return nil
+}
+
+func download(url string, target string) (err error) {
+	for i := range maxTries {
+		log.Debugf("attempt #%d/%d", i+1, maxTries)
+		if i > 0 {
+			time.Sleep(time.Second * 3) // wait for 3 seconds before retrying the download attempt
+		}
+
+		var req *http.Request
+		req, err = http.NewRequest("GET", url, nil)
+		if err != nil {
+			log.Errorf("new request err: %s", err)
+			continue
+		}
+
+		log.Debugf("update will be saved to: %s", target)
+		err = utils.Download(req, target)
+		if err != nil {
+			log.Errorf("downloading latest application failed, try again...")
+			continue
+		}
+		return nil
+	}
+	return err
+}
+
+func checksum(filePath string, expectedHash string) error {
+	file, err := os.Open(filePath)
+	if err != nil {
+		log.Errorf("failed to open file %s: %v", filePath, err)
+		return err
+	}
+	defer func() {
+		_ = file.Close()
+	}()
+
+	hasher := sha512.New()
+
+	_, err = io.Copy(hasher, file)
+	if err != nil {
+		log.Errorf("failed to copy file contents to hasher: %v", err)
+		return err
+	}
+
+	hash := base64.StdEncoding.EncodeToString(hasher.Sum(nil))
+
+	if hash != expectedHash {
+		log.Errorf("invalid sha512 %s", hash)
+		return fmt.Errorf("invalid sha512 %s", hash)
+	}
+
+	return nil
+}
--- a/server/service/application/version.go
+++ b/server/service/application/version.go
@@ -0,0 +1,89 @@
+package application
+
+import (
+	"NanoKVM-Server/proto"
+	"encoding/json"
+	"fmt"
+	"io"
+	"net/http"
+	"os"
+	"strings"
+	"time"
+
+	"github.com/gin-gonic/gin"
+	log "github.com/sirupsen/logrus"
+)
+
+type Latest struct {
+	Version string `json:"version"`
+	Name    string `json:"name"`
+	Sha512  string `json:"sha512"`
+	Size    uint   `json:"size"`
+	Url     string `json:"url"`
+}
+
+func (s *Service) GetVersion(c *gin.Context) {
+	var rsp proto.Response
+
+	// current version
+	currentVersion := "1.0.0"
+
+	versionFile := fmt.Sprintf("%s/version", AppDir)
+	if version, err := os.ReadFile(versionFile); err == nil {
+		currentVersion = strings.ReplaceAll(string(version), "\n", "")
+	}
+
+	log.Debugf("current version: %s", currentVersion)
+
+	// latest version
+	latest, err := getLatest()
+	if err != nil {
+		rsp.ErrRsp(c, -1, "get latest version failed")
+		return
+	}
+
+	rsp.OkRspWithData(c, &proto.GetVersionRsp{
+		Current: currentVersion,
+		Latest:  latest.Version,
+	})
+}
+
+func getLatest() (*Latest, error) {
+	baseURL := StableURL
+	if isPreviewEnabled() {
+		baseURL = PreviewURL
+	}
+
+	url := fmt.Sprintf("%s/latest.json?now=%d", baseURL, time.Now().Unix())
+
+	resp, err := http.Get(url)
+	if err != nil {
+		log.Debugf("failed to request version: %v", err)
+		return nil, err
+	}
+	defer func() {
+		_ = resp.Body.Close()
+	}()
+
+	body, err := io.ReadAll(resp.Body)
+	if err != nil {
+		log.Errorf("failed to read response: %v", err)
+		return nil, err
+	}
+
+	if resp.StatusCode != http.StatusOK {
+		log.Errorf("server responded with status code: %d", resp.StatusCode)
+		return nil, fmt.Errorf("status code %d", resp.StatusCode)
+	}
+
+	var latest Latest
+	if err := json.Unmarshal(body, &latest); err != nil {
+		log.Errorf("failed to unmarshal response: %s", err)
+		return nil, err
+	}
+
+	latest.Url = fmt.Sprintf("%s/%s", baseURL, latest.Name)
+
+	log.Debugf("get application latest version: %s", latest.Version)
+	return &latest, nil
+}
--- a/server/service/auth/account.go
+++ b/server/service/auth/account.go
@@ -0,0 +1,113 @@
+package auth
+
+import (
+	"NanoKVM-Server/utils"
+	"encoding/json"
+	"errors"
+	"os"
+	"path/filepath"
+
+	log "github.com/sirupsen/logrus"
+	"golang.org/x/crypto/bcrypt"
+)
+
+const AccountFile = "/etc/kvm/pwd"
+
+type Account struct {
+	Username string `json:"username"`
+	Password string `json:"password"`	// should be named HashedPassword for clarity
+}
+
+func GetAccount() (*Account, error) {
+	if _, err := os.Stat(AccountFile); err != nil {
+		if errors.Is(err, os.ErrNotExist) {
+			return getDefaultAccount(), nil
+		}
+		return nil, err
+	}
+
+	content, err := os.ReadFile(AccountFile)
+	if err != nil {
+		return nil, err
+	}
+
+	var account Account
+	if err = json.Unmarshal(content, &account); err != nil {
+		log.Errorf("unmarshal account failed: %s", err)
+		return nil, err
+	}
+
+	return &account, nil
+}
+
+func SetAccount(username string, hashedPassword string) error {
+	account, err := json.Marshal(&Account{
+		Username: username,
+		Password: hashedPassword,
+	})
+	if err != nil {
+		log.Errorf("failed to marshal account information to json: %s", err)
+		return err
+	}
+
+	err = os.MkdirAll(filepath.Dir(AccountFile), 0o644)
+	if err != nil {
+		log.Errorf("create directory %s failed: %s", AccountFile, err)
+		return err
+	}
+
+	err = os.WriteFile(AccountFile, account, 0o644)
+	if err != nil {
+		log.Errorf("write password failed: %s", err)
+		return err
+	}
+
+	return nil
+}
+
+func CompareAccount(username string, plainPassword string) bool {
+	account, err := GetAccount()
+	if err != nil {
+		return false
+	}
+
+	if username != account.Username {
+		return false
+	}
+
+	hashedPassword, err := utils.DecodeDecrypt(plainPassword)
+	if err != nil || hashedPassword == "" {
+		return false
+	}
+
+	err = bcrypt.CompareHashAndPassword([]byte(account.Password), []byte(hashedPassword))
+	if err != nil {
+		// Compatible with old versions
+		accountHashedPassword, _ := utils.DecodeDecrypt(account.Password)
+		if accountHashedPassword == hashedPassword {
+			return true
+		}
+
+		return false
+	}
+
+	return true
+}
+
+func DelAccount() error {
+	if err := os.Remove(AccountFile); err != nil {
+		log.Errorf("failed to delete password: %s", err)
+		return err
+	}
+
+	return nil
+}
+
+func getDefaultAccount() *Account {
+	hashedPassword, _ := bcrypt.GenerateFromPassword([]byte("admin"), bcrypt.DefaultCost)
+
+	return &Account{
+		Username: "admin",
+		Password: string(hashedPassword),
+	}
+}
--- a/server/service/auth/login.go
+++ b/server/service/auth/login.go
@@ -0,0 +1,76 @@
+package auth
+
+import (
+	"NanoKVM-Server/config"
+	"NanoKVM-Server/middleware"
+	"NanoKVM-Server/proto"
+	"time"
+
+	"github.com/gin-gonic/gin"
+	log "github.com/sirupsen/logrus"
+)
+
+func (s *Service) Login(c *gin.Context) {
+	var req proto.LoginReq
+	var rsp proto.Response
+
+	// authentication disabled
+	conf := config.GetInstance()
+	if conf.Authentication == "disable" {
+		rsp.OkRspWithData(c, &proto.LoginRsp{
+			Token: "disabled",
+		})
+		return
+	}
+
+	if err := proto.ParseFormRequest(c, &req); err != nil {
+		time.Sleep(3 * time.Second)
+		rsp.ErrRsp(c, -1, "invalid parameters")
+		return
+	}
+
+	if ok := CompareAccount(req.Username, req.Password); !ok {
+		time.Sleep(2 * time.Second)
+		rsp.ErrRsp(c, -2, "invalid username or password")
+		return
+	}
+
+	token, err := middleware.GenerateJWT(req.Username)
+	if err != nil {
+		time.Sleep(1 * time.Second)
+		rsp.ErrRsp(c, -3, "generate token failed")
+		return
+	}
+
+	rsp.OkRspWithData(c, &proto.LoginRsp{
+		Token: token,
+	})
+
+	log.Debugf("login success, username: %s", req.Username)
+}
+
+func (s *Service) Logout(c *gin.Context) {
+	conf := config.GetInstance()
+
+	if conf.JWT.RevokeTokensOnLogout {
+		config.RegenerateSecretKey()
+	}
+
+	var rsp proto.Response
+	rsp.OkRsp(c)
+}
+
+func (s *Service) GetAccount(c *gin.Context) {
+	var rsp proto.Response
+
+	account, err := GetAccount()
+	if err != nil {
+		rsp.ErrRsp(c, -1, "get account failed")
+		return
+	}
+
+	rsp.OkRspWithData(c, &proto.GetAccountRsp{
+		Username: account.Username,
+	})
+	log.Debugf("get account successful")
+}
--- a/server/service/auth/password.go
+++ b/server/service/auth/password.go
@@ -0,0 +1,124 @@
+package auth
+
+import (
+	"NanoKVM-Server/proto"
+	"NanoKVM-Server/utils"
+	"errors"
+	"io"
+	"os"
+	"os/exec"
+	"time"
+
+	"github.com/gin-gonic/gin"
+	log "github.com/sirupsen/logrus"
+	"golang.org/x/crypto/bcrypt"
+)
+
+func (s *Service) ChangePassword(c *gin.Context) {
+	var req proto.ChangePasswordReq
+	var rsp proto.Response
+
+	if err := proto.ParseFormRequest(c, &req); err != nil {
+		rsp.ErrRsp(c, -1, "invalid parameters")
+		return
+	}
+
+	password, err := utils.DecodeDecrypt(req.Password)
+	if err != nil || password == "" {
+		rsp.ErrRsp(c, -2, "invalid password")
+		return
+	}
+
+	hashedPassword, err := bcrypt.GenerateFromPassword([]byte(password), bcrypt.DefaultCost)
+	if err != nil {
+		rsp.ErrRsp(c, -3, "failed to hash password")
+		return
+	}
+
+	if err = SetAccount(req.Username, string(hashedPassword)); err != nil {
+		rsp.ErrRsp(c, -4, "failed to save password")
+		return
+	}
+
+	// change root password
+	err = changeRootPassword(password)
+	if err != nil {
+		_ = DelAccount()
+		rsp.ErrRsp(c, -5, "failed to change password")
+		return
+	}
+
+	rsp.OkRsp(c)
+	log.Debugf("change password success, username: %s", req.Username)
+}
+
+func (s *Service) IsPasswordUpdated(c *gin.Context) {
+	var rsp proto.Response
+
+	if _, err := os.Stat(AccountFile); err != nil {
+		rsp.OkRspWithData(c, &proto.IsPasswordUpdatedRsp{
+			IsUpdated: false,
+		})
+		return
+	}
+
+	account, err := GetAccount()
+	if err != nil || account == nil {
+		rsp.ErrRsp(c, -1, "failed to get password")
+		return
+	}
+
+	err = bcrypt.CompareHashAndPassword([]byte(account.Password), []byte("admin"))
+
+	rsp.OkRspWithData(c, &proto.IsPasswordUpdatedRsp{
+		// If the hash is not valid, still assume it's not updated
+		// The error we want to see is password and hash not matching
+		IsUpdated: errors.Is(err, bcrypt.ErrMismatchedHashAndPassword),
+	})
+}
+
+func changeRootPassword(password string) error {
+	err := passwd(password)
+	if err != nil {
+		log.Errorf("failed to change root password: %s", err)
+		return err
+	}
+
+	log.Debugf("change root password successful.")
+	return nil
+}
+
+func passwd(password string) error {
+	cmd := exec.Command("passwd", "root")
+
+	stdin, err := cmd.StdinPipe()
+	if err != nil {
+		return err
+	}
+	defer func() {
+		_ = stdin.Close()
+	}()
+
+	cmd.Stdout = os.Stdout
+	cmd.Stderr = os.Stderr
+
+	if err = cmd.Start(); err != nil {
+		return err
+	}
+
+	if _, err = io.WriteString(stdin, password+"\n"); err != nil {
+		return err
+	}
+
+	time.Sleep(100 * time.Millisecond)
+
+	if _, err = io.WriteString(stdin, password+"\n"); err != nil {
+		return err
+	}
+
+	if err = cmd.Wait(); err != nil {
+		return err
+	}
+
+	return nil
+}
--- a/server/service/auth/service.go
+++ b/server/service/auth/service.go
@@ -0,0 +1,7 @@
+package auth
+
+type Service struct{}
+
+func NewService() *Service {
+	return &Service{}
+}
--- a/server/service/download/service.go
+++ b/server/service/download/service.go
@@ -0,0 +1,230 @@
+package download
+
+import (
+	"NanoKVM-Server/proto"
+	"fmt"
+	"github.com/gin-gonic/gin"
+	log "github.com/sirupsen/logrus"
+	"io"
+	"net/http"
+	"net/url"
+	"os"
+	"path/filepath"
+	"strings"
+	"time"
+)
+
+type Service struct{}
+
+var sentinelPath = "/tmp/.download_in_progress"
+
+func NewService() *Service {
+	// Clear sentinel
+	// If we are starting from scratch, we need to remove the sentinel file as any downloads at this point are done or broken
+	_ = os.Remove(sentinelPath)
+	return &Service{}
+}
+
+func (s *Service) ImageEnabled(c *gin.Context) {
+	var rsp proto.Response
+
+	// Check if /data mount is RO/RW
+	testFile := "/data/.testfile"
+	file, err := os.Create(testFile)
+	defer file.Close()
+	defer os.Remove(testFile)
+	if err != nil {
+		if os.IsPermission(err) {
+			rsp.OkRspWithData(c, &proto.ImageEnabledRsp{
+				Enabled: false,
+			})
+			return
+		}
+		rsp.OkRspWithData(c, &proto.ImageEnabledRsp{
+			Enabled: false,
+		})
+		return
+	}
+
+	rsp.OkRspWithData(c, &proto.ImageEnabledRsp{
+		Enabled: true,
+	})
+}
+
+func (s *Service) StatusImage(c *gin.Context) {
+	var rsp proto.Response
+
+	// Check if the sentinel file exists
+	log.Debug("StatusImage")
+	if _, err := os.Stat(sentinelPath); err == nil {
+		content, err := os.ReadFile(sentinelPath)
+		if err != nil {
+			log.Error("Failed to read sentinel file")
+			rsp.OkRspWithData(c, &proto.StatusImageRsp{
+				Status:     "in_progress",
+				File:       "",
+				Percentage: "",
+			})
+			return
+		}
+		splitted := strings.Split(string(content), ";")
+		if len(splitted) == 1 {
+			// No percentage, just the URL
+			rsp.OkRspWithData(c, &proto.StatusImageRsp{
+				Status:     "in_progress",
+				File:       splitted[0],
+				Percentage: "",
+			})
+		} else {
+			// Percentage is available
+			rsp.OkRspWithData(c, &proto.StatusImageRsp{
+				Status:     "in_progress",
+				File:       splitted[0],
+				Percentage: splitted[1],
+			})
+		}
+
+		return
+	}
+	rsp.OkRspWithData(c, &proto.StatusImageRsp{
+		Status:     "idle",
+		File:       "",
+		Percentage: "",
+	})
+}
+
+func (s *Service) DownloadImage(c *gin.Context) {
+	var req proto.MountImageReq
+	var rsp proto.Response
+
+	log.Debug("DownloadImage")
+
+	if err := proto.ParseFormRequest(c, &req); err != nil {
+		rsp.ErrRsp(c, -1, "invalid arguments")
+		return
+	}
+
+	if req.File == "" {
+		rsp.ErrRsp(c, -1, "invalid arguments")
+		return
+	}
+	// Parse the URI to see if its valid http/s
+	u, err := url.Parse(req.File)
+	if err != nil || u.Scheme == "" || u.Host == "" {
+		rsp.ErrRsp(c, -1, "invalid url")
+		return
+	}
+
+	// Set a sentinel file to mark that there is a download in progress
+	// This is to prevent multiple downloads at the same time
+	if _, err := os.Stat(sentinelPath); err == nil {
+		log.Debug("Download in progress")
+		rsp.ErrRsp(c, -1, "download in progress")
+		return
+	}
+	// Create the sentinel file
+	err = os.WriteFile(sentinelPath, []byte(req.File), 0644)
+	if err != nil {
+		log.Error("Failed to create sentinel file")
+		rsp.ErrRsp(c, -1, "failed to create sentinel file")
+		return
+	}
+
+	// Check if it actually exists and fail if it doesn't
+	resp, err := http.Head(req.File)
+	if resp.StatusCode != http.StatusOK || err != nil {
+		rsp.ErrRsp(c, resp.StatusCode, "failed when checking the url")
+		log.Error("Failed to check the URL")
+		defer os.Remove(sentinelPath)
+		return
+	}
+	defer resp.Body.Close()
+
+	// Download the image in a goroutine to not block the request
+	go func() {
+		defer os.Remove(sentinelPath)
+		resp, err = http.Get(req.File)
+		if err != nil {
+			log.Error("Failed to download the file")
+			rsp.ErrRsp(c, -1, "failed to download the file")
+			return
+		}
+		defer resp.Body.Close()
+		// Create the destination file
+		destPath := filepath.Join("/data", filepath.Base(u.Path))
+		out, err := os.Create(destPath)
+		if err != nil {
+			log.Error("Failed to create destination file")
+			rsp.ErrRsp(c, -1, "failed to create destination file")
+			return
+		}
+		defer out.Close()
+
+		lw := &loggingWriter{writer: out, totalSize: resp.ContentLength}
+		lw.startTicker()
+		_, err = io.Copy(lw, resp.Body)
+		if err != nil {
+			log.Error("Failed to save the file")
+			rsp.ErrRsp(c, -1, "failed to save the file")
+			lw.stopTicker()
+			return
+		}
+		lw.stopTicker()
+	}()
+	rsp.OkRspWithData(c, &proto.StatusImageRsp{
+		Status:     "in_progress",
+		File:       req.File,
+		Percentage: "",
+	})
+}
+
+type loggingWriter struct {
+	writer    io.Writer
+	total     int64
+	totalSize int64
+	ticker    *time.Ticker
+	done      chan bool
+}
+
+func (lw *loggingWriter) startTicker() {
+	lw.ticker = time.NewTicker(2500 * time.Millisecond)
+	lw.done = make(chan bool)
+	go func() {
+		for {
+			select {
+			case <-lw.done:
+				return
+			case <-lw.ticker.C:
+				lw.updateSentinel()
+			}
+		}
+	}()
+}
+
+func (lw *loggingWriter) stopTicker() {
+	lw.ticker.Stop()
+	lw.done <- true
+}
+
+func (lw *loggingWriter) updateSentinel() {
+	percentage := float64(lw.total) / float64(lw.totalSize) * 100
+	content, err := os.ReadFile(sentinelPath)
+	if err != nil {
+		log.Error("Failed to read sentinel file")
+		return
+	}
+	splitted := strings.Split(string(content), ";")
+	if len(splitted) == 0 {
+		return
+	}
+	err = os.WriteFile(sentinelPath, []byte(fmt.Sprintf("%s;%.2f%%", splitted[0], percentage)), 0644)
+	if err != nil {
+		log.Error("Failed to update sentinel file")
+	}
+}
+
+func (lw *loggingWriter) Write(p []byte) (int, error) {
+	n, err := lw.writer.Write(p)
+	lw.total += int64(n)
+	return n, err
+}
--- a/server/service/extensions/tailscale/cli.go
+++ b/server/service/extensions/tailscale/cli.go
@@ -0,0 +1,147 @@
+package tailscale
+
+import (
+	"NanoKVM-Server/utils"
+	"bufio"
+	"encoding/json"
+	"errors"
+	"fmt"
+	"os"
+	"os/exec"
+	"regexp"
+	"strings"
+)
+
+const (
+	ScriptPath       = "/etc/init.d/S98tailscaled"
+	ScriptBackupPath = "/kvmapp/system/init.d/S98tailscaled"
+)
+
+type Cli struct{}
+
+type TsStatus struct {
+	BackendState string `json:"BackendState"`
+
+	Self struct {
+		HostName     string   `json:"HostName"`
+		TailscaleIPs []string `json:"TailscaleIPs"`
+	} `json:"Self"`
+
+	CurrentTailnet struct {
+		Name string `json:"Name"`
+	} `json:"CurrentTailnet"`
+}
+
+func NewCli() *Cli {
+	return &Cli{}
+}
+
+func (c *Cli) Start() error {
+	for _, filePath := range []string{TailscalePath, TailscaledPath} {
+		if err := utils.EnsurePermission(filePath, 0o100); err != nil {
+			return err
+		}
+	}
+
+	commands := []string{
+		fmt.Sprintf("cp -f %s %s", ScriptBackupPath, ScriptPath),
+		fmt.Sprintf("%s start", ScriptPath),
+	}
+
+	command := strings.Join(commands, " && ")
+	return exec.Command("sh", "-c", command).Run()
+}
+
+func (c *Cli) Restart() error {
+	commands := []string{
+		fmt.Sprintf("cp -f %s %s", ScriptBackupPath, ScriptPath),
+		fmt.Sprintf("%s restart", ScriptPath),
+	}
+
+	command := strings.Join(commands, " && ")
+	return exec.Command("sh", "-c", command).Run()
+}
+
+func (c *Cli) Stop() error {
+	command := fmt.Sprintf("%s stop", ScriptPath)
+	err := exec.Command("sh", "-c", command).Run()
+	if err != nil {
+		return err
+	}
+
+	return os.Remove(ScriptPath)
+}
+
+func (c *Cli) Up() error {
+	command := "tailscale up --accept-dns=false"
+	return exec.Command("sh", "-c", command).Run()
+}
+
+func (c *Cli) Down() error {
+	command := "tailscale down"
+	return exec.Command("sh", "-c", command).Run()
+}
+
+func (c *Cli) Status() (*TsStatus, error) {
+	command := "tailscale status --json"
+	cmd := exec.Command("sh", "-c", command)
+
+	output, err := cmd.CombinedOutput()
+	if err != nil {
+		return nil, err
+	}
+
+	// output is not in standard json format
+	if outputStr := string(output); !strings.HasPrefix(outputStr, "{") {
+		index := strings.Index(outputStr, "{")
+		if index == -1 {
+			return nil, errors.New("unknown output")
+		}
+
+		output = []byte(outputStr[index:])
+	}
+
+	var status TsStatus
+	err = json.Unmarshal(output, &status)
+	if err != nil {
+		return nil, err
+	}
+
+	return &status, nil
+}
+
+func (c *Cli) Login() (string, error) {
+	command := "tailscale login --accept-dns=false --timeout=10m"
+	cmd := exec.Command("sh", "-c", command)
+
+	stderr, err := cmd.StderrPipe()
+	if err != nil {
+		return "", err
+	}
+	defer func() {
+		_ = stderr.Close()
+	}()
+
+	go func() {
+		_ = cmd.Run()
+	}()
+
+	reader := bufio.NewReader(stderr)
+	for {
+		line, err := reader.ReadString('\n')
+		if err != nil {
+			return "", err
+		}
+
+		if strings.Contains(line, "https") {
+			reg := regexp.MustCompile(`\s+`)
+			url := reg.ReplaceAllString(line, "")
+			return url, nil
+		}
+	}
+}
+
+func (c *Cli) Logout() error {
+	command := "tailscale logout"
+	return exec.Command("sh", "-c", command).Run()
+}
--- a/server/service/extensions/tailscale/install.go
+++ b/server/service/extensions/tailscale/install.go
@@ -0,0 +1,118 @@
+package tailscale
+
+import (
+	"NanoKVM-Server/utils"
+	"fmt"
+	"io"
+	"net/http"
+	"os"
+
+	log "github.com/sirupsen/logrus"
+)
+
+const (
+	OriginalURL = "https://pkgs.tailscale.com/stable/tailscale_latest_riscv64.tgz"
+	Workspace   = "/root/.tailscale"
+)
+
+func isInstalled() bool {
+	_, err1 := os.Stat(TailscalePath)
+	_, err2 := os.Stat(TailscaledPath)
+
+	return err1 == nil && err2 == nil
+}
+
+func install() error {
+	_ = os.MkdirAll(Workspace, 0o755)
+	defer func() {
+		_ = os.RemoveAll(Workspace)
+	}()
+
+	tarFile := fmt.Sprintf("%s/tailscale_riscv64.tgz", Workspace)
+
+	// download
+	if err := download(tarFile); err != nil {
+		log.Errorf("failed to download tailscale: %s", err)
+		return err
+	}
+
+	// decompress
+	dir, err := utils.UnTarGz(tarFile, Workspace)
+	if err != nil {
+		log.Errorf("failed to decompress tailscale: %s", err)
+		return err
+	}
+
+	// move
+	tailscalePath := fmt.Sprintf("%s/tailscale", dir)
+	err = utils.MoveFile(tailscalePath, TailscalePath)
+	if err != nil {
+		log.Errorf("failed to move tailscale: %s", err)
+		return err
+	}
+
+	tailscaledPath := fmt.Sprintf("%s/tailscaled", dir)
+	err = utils.MoveFile(tailscaledPath, TailscaledPath)
+	if err != nil {
+		log.Errorf("failed to move tailscaled: %s", err)
+		return err
+	}
+
+	log.Debugf("install tailscale successfully")
+	return nil
+}
+
+func download(target string) error {
+	url, err := getDownloadURL()
+	if err != nil {
+		log.Errorf("failed to get Tailscale download url: %s", err)
+		return err
+	}
+
+	resp, err := http.Get(url)
+	if err != nil {
+		log.Errorf("failed to download Tailscale: %s", err)
+		return err
+	}
+	defer func() {
+		_ = resp.Body.Close()
+	}()
+
+	if resp.StatusCode != http.StatusOK {
+		return fmt.Errorf("unexpected status code: %d", resp.StatusCode)
+	}
+
+	out, err := os.Create(target)
+	if err != nil {
+		log.Errorf("failed to create file: %s", err)
+		return err
+	}
+	defer func() {
+		_ = out.Close()
+	}()
+
+	_, err = io.Copy(out, resp.Body)
+	if err != nil {
+		log.Errorf("failed to copy response body to file: %s", err)
+		return err
+	}
+
+	log.Debugf("download Tailscale successfully")
+	return nil
+}
+
+func getDownloadURL() (string, error) {
+	resp, err := (&http.Client{}).Get(OriginalURL)
+	if err != nil {
+		return "", err
+	}
+	defer func() {
+		_ = resp.Body.Close()
+	}()
+
+	if resp.StatusCode != http.StatusOK && resp.StatusCode != http.StatusFound {
+		return "", fmt.Errorf("unexpected status code: %d", resp.StatusCode)
+	}
+
+	return resp.Request.URL.String(), nil
+}
--- a/server/service/extensions/tailscale/service.go
+++ b/server/service/extensions/tailscale/service.go
@@ -0,0 +1,237 @@
+package tailscale
+
+import (
+	"NanoKVM-Server/proto"
+	"NanoKVM-Server/utils"
+	"net"
+	"os"
+
+	"github.com/gin-gonic/gin"
+	log "github.com/sirupsen/logrus"
+)
+
+type Service struct{}
+
+const (
+	TailscalePath  = "/usr/bin/tailscale"
+	TailscaledPath = "/usr/sbin/tailscaled"
+
+	GoMemLimit int64 = 75
+)
+
+var StateMap = map[string]proto.TailscaleState{
+	"NoState":    proto.TailscaleNotRunning,
+	"Starting":   proto.TailscaleNotRunning,
+	"NeedsLogin": proto.TailscaleNotLogin,
+	"Running":    proto.TailscaleRunning,
+	"Stopped":    proto.TailscaleStopped,
+}
+
+func NewService() *Service {
+	return &Service{}
+}
+
+func (s *Service) Install(c *gin.Context) {
+	var rsp proto.Response
+
+	if !isInstalled() {
+		if err := install(); err != nil {
+			rsp.ErrRsp(c, -1, "install failed")
+			return
+		}
+
+		_ = NewCli().Start()
+	}
+
+	rsp.OkRsp(c)
+	log.Debugf("install tailscale successfully")
+}
+
+func (s *Service) Uninstall(c *gin.Context) {
+	var rsp proto.Response
+
+	_ = NewCli().Stop()
+	_ = utils.DelGoMemLimit()
+
+	_ = os.Remove(TailscalePath)
+	_ = os.Remove(TailscaledPath)
+
+	rsp.OkRsp(c)
+	log.Debugf("uninstall tailscale successfully")
+}
+
+func (s *Service) Start(c *gin.Context) {
+	var rsp proto.Response
+
+	err := NewCli().Start()
+	if err != nil {
+		rsp.ErrRsp(c, -1, "start failed")
+		log.Errorf("failed to run tailscale start: %s", err)
+		return
+	}
+
+	if !utils.IsGoMemLimitExist() {
+		_ = utils.SetGoMemLimit(GoMemLimit)
+	}
+
+	rsp.OkRsp(c)
+	log.Debugf("tailscale start successfully")
+}
+
+func (s *Service) Restart(c *gin.Context) {
+	var rsp proto.Response
+
+	err := NewCli().Restart()
+	if err != nil {
+		rsp.ErrRsp(c, -1, "restart failed")
+		log.Errorf("failed to run tailscale restart: %s", err)
+		return
+	}
+
+	rsp.OkRsp(c)
+	log.Debugf("tailscale restart successfully")
+}
+
+func (s *Service) Stop(c *gin.Context) {
+	var rsp proto.Response
+
+	err := NewCli().Stop()
+	if err != nil {
+		rsp.ErrRsp(c, -1, "stop failed")
+		log.Errorf("failed to run tailscale stop: %s", err)
+		return
+	}
+
+	_ = utils.DelGoMemLimit()
+
+	rsp.OkRsp(c)
+	log.Debugf("tailscale stop successfully")
+}
+
+func (s *Service) Up(c *gin.Context) {
+	var rsp proto.Response
+
+	err := NewCli().Up()
+	if err != nil {
+		rsp.ErrRsp(c, -1, "tailscale up failed")
+		log.Errorf("failed to run tailscale up: %s", err)
+		return
+	}
+
+	rsp.OkRsp(c)
+	log.Debugf("run tailscale up successfully")
+}
+
+func (s *Service) Down(c *gin.Context) {
+	var rsp proto.Response
+
+	err := NewCli().Down()
+	if err != nil {
+		rsp.ErrRsp(c, -1, "tailscale down failed")
+		log.Errorf("failed to run tailscale down: %s", err)
+		return
+	}
+
+	rsp.OkRsp(c)
+	log.Debugf("run tailscale down successfully")
+}
+
+func (s *Service) Login(c *gin.Context) {
+	var rsp proto.Response
+
+	// check tailscale status
+	cli := NewCli()
+	status, err := cli.Status()
+	if err != nil {
+		_ = cli.Start()
+		status, err = cli.Status()
+	}
+
+	if err != nil {
+		log.Errorf("failed to get tailscale status: %s", err)
+		rsp.ErrRsp(c, -1, "unknown status")
+		return
+	}
+
+	if status.BackendState == "Running" {
+		rsp.OkRspWithData(c, &proto.LoginTailscaleRsp{})
+		return
+	}
+
+	// get login url
+	url, err := cli.Login()
+	if err != nil {
+		log.Errorf("failed to run tailscale login: %s", err)
+		rsp.ErrRsp(c, -2, "login failed")
+		return
+	}
+
+	if !utils.IsGoMemLimitExist() {
+		_ = utils.SetGoMemLimit(GoMemLimit)
+	}
+
+	rsp.OkRspWithData(c, &proto.LoginTailscaleRsp{
+		Url: url,
+	})
+
+	log.Debugf("tailscale login url: %s", url)
+}
+
+func (s *Service) Logout(c *gin.Context) {
+	var rsp proto.Response
+
+	err := NewCli().Logout()
+	if err != nil {
+		rsp.ErrRsp(c, -1, "logout failed")
+		log.Errorf("failed to run tailscale logout: %s", err)
+		return
+	}
+
+	rsp.OkRsp(c)
+	log.Debugf("tailscale logout successfully")
+}
+
+func (s *Service) GetStatus(c *gin.Context) {
+	var rsp proto.Response
+
+	if !isInstalled() {
+		rsp.OkRspWithData(c, &proto.GetTailscaleStatusRsp{
+			State: proto.TailscaleNotInstall,
+		})
+		return
+	}
+
+	status, err := NewCli().Status()
+	if err != nil {
+		log.Debugf("failed to get tailscale status: %s", err)
+		rsp.OkRspWithData(c, &proto.GetTailscaleStatusRsp{
+			State: proto.TailscaleNotRunning,
+		})
+		return
+	}
+
+	state, ok := StateMap[status.BackendState]
+	if !ok {
+		log.Errorf("unknown tailscale state: %s", status.BackendState)
+		rsp.ErrRsp(c, -1, "unknown state")
+		return
+	}
+
+	ipv4 := ""
+	for _, tailscaleIp := range status.Self.TailscaleIPs {
+		ip := net.ParseIP(tailscaleIp)
+		if ip != nil && ip.To4() != nil {
+			ipv4 = ip.String()
+		}
+	}
+
+	data := proto.GetTailscaleStatusRsp{
+		State:   state,
+		IP:      ipv4,
+		Name:    status.Self.HostName,
+		Account: status.CurrentTailnet.Name,
+	}
+
+	rsp.OkRspWithData(c, &data)
+	log.Debugf("get tailscale status successfully")
+}
--- a/server/service/hid/hid.go
+++ b/server/service/hid/hid.go
@@ -0,0 +1,161 @@
+package hid
+
+import (
+	"errors"
+	"os"
+	"sync"
+	"time"
+
+	log "github.com/sirupsen/logrus"
+)
+
+type Hid struct {
+	g0         *os.File
+	g1         *os.File
+	g2         *os.File
+	kbMutex    sync.Mutex
+	mouseMutex sync.Mutex
+}
+
+const (
+	HID0 = "/dev/hidg0"
+	HID1 = "/dev/hidg1"
+	HID2 = "/dev/hidg2"
+)
+
+var (
+	hid     *Hid
+	hidOnce sync.Once
+)
+
+func GetHid() *Hid {
+	hidOnce.Do(func() {
+		hid = &Hid{}
+	})
+	return hid
+}
+
+func (h *Hid) Lock() {
+	h.kbMutex.Lock()
+	h.mouseMutex.Lock()
+}
+
+func (h *Hid) Unlock() {
+	h.kbMutex.Unlock()
+	h.mouseMutex.Unlock()
+}
+
+func (h *Hid) OpenNoLock() {
+	var err error
+	h.CloseNoLock()
+
+	h.g0, err = os.OpenFile(HID0, os.O_WRONLY, 0o666)
+	if err != nil {
+		log.Errorf("open %s failed: %s", HID0, err)
+	}
+
+	h.g1, err = os.OpenFile(HID1, os.O_WRONLY, 0o666)
+	if err != nil {
+		log.Errorf("open %s failed: %s", HID1, err)
+	}
+
+	h.g2, err = os.OpenFile(HID2, os.O_WRONLY, 0o666)
+	if err != nil {
+		log.Errorf("open %s failed: %s", HID2, err)
+	}
+}
+
+func (h *Hid) CloseNoLock() {
+	for _, file := range []*os.File{h.g0, h.g1, h.g2} {
+		if file != nil {
+			_ = file.Sync()
+			_ = file.Close()
+		}
+	}
+}
+
+func (h *Hid) Open() {
+	h.kbMutex.Lock()
+	defer h.kbMutex.Unlock()
+	h.mouseMutex.Lock()
+	defer h.mouseMutex.Unlock()
+
+	h.CloseNoLock()
+
+	h.OpenNoLock()
+}
+
+func (h *Hid) Close() {
+	h.kbMutex.Lock()
+	defer h.kbMutex.Unlock()
+	h.mouseMutex.Lock()
+	defer h.mouseMutex.Unlock()
+
+	h.CloseNoLock()
+}
+
+func (h *Hid) WriteHid0(data []byte) {
+	h.kbMutex.Lock()
+	_, err := h.g0.Write(data)
+	h.kbMutex.Unlock()
+
+	if err != nil {
+		if errors.Is(err, os.ErrClosed) {
+			log.Errorf("hid already closed, reopen it...")
+			h.OpenNoLock()
+		} else {
+			log.Debugf("write to %s failed: %s", HID0, err)
+		}
+		return
+	}
+
+	log.Debugf("write to %s: %v", HID0, data)
+}
+
+func (h *Hid) WriteHid1(data []byte) {
+	deadline := time.Now().Add(8 * time.Millisecond)
+
+	h.mouseMutex.Lock()
+	_ = h.g1.SetWriteDeadline(deadline)
+	_, err := h.g1.Write(data)
+	h.mouseMutex.Unlock()
+
+	if err != nil {
+		switch {
+		case errors.Is(err, os.ErrClosed):
+			log.Errorf("hid already closed, reopen it...")
+			h.OpenNoLock()
+		case errors.Is(err, os.ErrDeadlineExceeded):
+			log.Debugf("write to %s timeout", HID1)
+		default:
+			log.Errorf("write to %s failed: %s", HID1, err)
+		}
+		return
+	}
+
+	log.Debugf("write to %s: %v", HID1, data)
+}
+
+func (h *Hid) WriteHid2(data []byte) {
+	deadline := time.Now().Add(8 * time.Millisecond)
+
+	h.mouseMutex.Lock()
+	_ = h.g2.SetWriteDeadline(deadline)
+	_, err := h.g2.Write(data)
+	h.mouseMutex.Unlock()
+
+	if err != nil {
+		switch {
+		case errors.Is(err, os.ErrClosed):
+			log.Errorf("hid already closed, reopen it...")
+			h.OpenNoLock()
+		case errors.Is(err, os.ErrDeadlineExceeded):
+			log.Debugf("write to %s timeout", HID2)
+		default:
+			log.Errorf("write to %s failed: %s", HID2, err)
+		}
+		return
+	}
+
+	log.Debugf("write to %s: %v", HID2, data)
+}
--- a/server/service/hid/keyboard.go
+++ b/server/service/hid/keyboard.go
@@ -0,0 +1,15 @@
+package hid
+
+func (h *Hid) Keyboard(queue <-chan []int) {
+	for event := range queue {
+		code := byte(event[0])
+
+		var modifier byte = 0x00
+		if code > 0 {
+			modifier = byte(event[1]) | byte(event[2]) | byte(event[3]) | byte(event[4])
+		}
+
+		data := []byte{modifier, 0x00, code, 0x00, 0x00, 0x00, 0x00, 0x00}
+		h.WriteHid0(data)
+	}
+}
--- a/server/service/hid/mouse.go
+++ b/server/service/hid/mouse.go
@@ -0,0 +1,82 @@
+package hid
+
+import (
+	"encoding/binary"
+
+	log "github.com/sirupsen/logrus"
+)
+
+const (
+	MouseUp = iota
+	MouseDown
+	MouseMoveAbsolute
+	MouseMoveRelative
+	MouseScroll
+)
+
+var mouseButtonMap = map[byte]bool{
+	0x01: true,
+	0x02: true,
+	0x04: true,
+}
+
+func (h *Hid) Mouse(queue <-chan []int) {
+	for event := range queue {
+
+		switch event[0] {
+		case MouseDown:
+			h.mouseDown(event)
+		case MouseUp:
+			h.mouseUp()
+		case MouseMoveAbsolute:
+			h.mouseMoveAbsolute(event)
+		case MouseMoveRelative:
+			h.mouseMoveRelative(event)
+		case MouseScroll:
+			h.mouseScroll(event)
+		default:
+			log.Debugf("invalid mouse event: %v", event)
+		}
+	}
+}
+
+func (h *Hid) mouseDown(event []int) {
+	button := byte(event[1])
+
+	if _, ok := mouseButtonMap[button]; !ok {
+		log.Errorf("invalid mouse button: %v", event)
+		return
+	}
+
+	data := []byte{button, 0, 0, 0}
+	h.WriteHid1(data)
+}
+
+func (h *Hid) mouseUp() {
+	data := []byte{0, 0, 0, 0}
+	h.WriteHid1(data)
+}
+
+func (h *Hid) mouseScroll(event []int) {
+	direction := 0x01
+	if event[3] > 0 {
+		direction = -0x1
+	}
+
+	data := []byte{0, 0, 0, byte(direction)}
+	h.WriteHid1(data)
+}
+func (h *Hid) mouseMoveAbsolute(event []int) {
+	x := make([]byte, 2)
+	y := make([]byte, 2)
+	binary.LittleEndian.PutUint16(x, uint16(event[2]))
+	binary.LittleEndian.PutUint16(y, uint16(event[3]))
+
+	data := []byte{0, x[0], x[1], y[0], y[1], 0}
+	h.WriteHid2(data)
+}
+
+func (h *Hid) mouseMoveRelative(event []int) {
+	data := []byte{byte(event[1]), byte(event[2]), byte(event[3]), 0}
+	h.WriteHid1(data)
+}
--- a/server/service/hid/paste.go
+++ b/server/service/hid/paste.go
@@ -0,0 +1,197 @@
+package hid
+
+import (
+	"time"
+
+	"github.com/gin-gonic/gin"
+	log "github.com/sirupsen/logrus"
+
+	"NanoKVM-Server/proto"
+)
+
+type Char struct {
+	Modifiers int
+	Code      int
+}
+
+type PasteReq struct {
+	Content string `form:"content" validate:"required"`
+	Langue  string `form:"langue"`
+}
+
+func LangueSwitch(base map[rune]Char, lang string) map[rune]Char {
+	// wenn kein lang angegeben → Standardmap zurück
+	if lang == "" {
+		return base
+	}
+
+	// immer Kopie erstellen
+	m := copyMap(base)
+
+	switch lang {
+	case "de":
+		// Y tauschen
+		m['y'] = Char{0, 29}
+		m['Y'] = Char{2, 29}
+
+		// Z tauschen
+		m['z'] = Char{0, 28}
+		m['Z'] = Char{2, 28}
+
+		// deutsche Sonderzeichen hinzufügen oder remappen
+		m['\u00E4'] = Char{0, 52} // ä
+		m['\u00C4'] = Char{2, 52} // Ä
+		m['\u00F6'] = Char{0, 51} // ö
+		m['\u00D6'] = Char{2, 51} // Ö
+		m['\u00FC'] = Char{0, 47} // ü
+		m['\u00DC'] = Char{2, 47} // Ü
+		m['\u00DF'] = Char{0, 45} // ß
+
+		//Tauschen
+		m['^'] = Char{0, 53}     // muss doppelt sein
+		m['/'] = Char{2, 36}     // Shift + 7
+		m['('] = Char{2, 37}     // Shift + 8
+		m['&'] = Char{2, 35}     // Shift + 6
+		m[')'] = Char{2, 38}     // Shift + 9
+		m['`'] = Char{2, 46}     // Grave Accent / Backtick
+		m['"'] = Char{2, 31}     // Shift + 2
+		m['?'] = Char{2, 45}     // Shift + ß
+		m['{'] = Char{0x40, 36}  // ALt Gr + 7
+		m['['] = Char{0x40, 37}  // ALt Gr + 8
+		m[']'] = Char{0x40, 38}  // ALt Gr + 6
+		m['}'] = Char{0x40, 39}  // ALt Gr + 0
+		m['\\'] = Char{0x40, 45} // ALt Gr + ß
+		m['@'] = Char{0x40, 20}  // ALt Gr + q
+		m['+'] = Char{0, 48}     // Shift + +
+		m['*'] = Char{2, 48}     // Shift + +
+		m['~'] = Char{0x40, 48}  // Shift + +
+		m['#'] = Char{0, 49}     // Shift + #
+		m['\''] = Char{2, 49}    // Shift + #
+		m['<'] = Char{0, 100}    // Shift + <
+		m['>'] = Char{2, 100}    // Shift + <
+		m['|'] = Char{0x40, 100} // ALt Gr + <
+		m[';'] = Char{2, 54}     // Shift + ,
+		m[':'] = Char{2, 55}     // Shift + .
+		m['-'] = Char{0, 56}     // Shift + -
+		m['_'] = Char{2, 56}     // Shift + -
+
+		//neu
+		m['\u00B4'] = Char{0, 46}    // ´
+		m['\u00B0'] = Char{2, 53}    // °
+		m['\u00A7'] = Char{2, 32}    // §
+		m['\u20AC'] = Char{0x40, 8}  // €
+		m['\u00B2'] = Char{0x40, 31} // ²
+		m['\u00B3'] = Char{0x40, 32} // ³
+
+	}
+	return m
+}
+
+func (s *Service) Paste(c *gin.Context) {
+	var req PasteReq
+	var rsp proto.Response
+
+	if err := proto.ParseFormRequest(c, &req); err != nil {
+		rsp.ErrRsp(c, -1, "invalid arguments")
+		return
+	}
+
+	if len(req.Content) > 1024 {
+		rsp.ErrRsp(c, -2, "content too long")
+		return
+	}
+
+	charMapLocal := LangueSwitch(charMap, req.Langue)
+
+	keyUp := []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}
+
+	for _, char := range req.Content {
+		key, ok := charMapLocal[char]
+		if !ok {
+			log.Debugf("unknown key '%c' (rune: %d)", char, char)
+			continue
+		}
+
+		keyDown := []byte{byte(key.Modifiers), 0x00, byte(key.Code), 0x00, 0x00, 0x00, 0x00, 0x00}
+
+		hid.WriteHid0(keyDown)
+		hid.WriteHid0(keyUp)
+		time.Sleep(30 * time.Millisecond)
+	}
+
+	rsp.OkRsp(c)
+	log.Debugf("hid paste success, total %d characters processed", len(req.Content))
+}
+
+func copyMap(src map[rune]Char) map[rune]Char {
+	dst := make(map[rune]Char, len(src))
+	for k, v := range src {
+		dst[k] = v
+	}
+	return dst
+}
+
+var charMap = map[rune]Char{
+	// Lowercase letters
+	'a': {0, 4}, 'b': {0, 5}, 'c': {0, 6}, 'd': {0, 7}, 'e': {0, 8},
+	'f': {0, 9}, 'g': {0, 10}, 'h': {0, 11}, 'i': {0, 12}, 'j': {0, 13},
+	'k': {0, 14}, 'l': {0, 15}, 'm': {0, 16}, 'n': {0, 17}, 'o': {0, 18},
+	'p': {0, 19}, 'q': {0, 20}, 'r': {0, 21}, 's': {0, 22}, 't': {0, 23},
+	'u': {0, 24}, 'v': {0, 25}, 'w': {0, 26}, 'x': {0, 27}, 'y': {0, 28},
+	'z': {0, 29},
+
+	// Uppercase letters (Modifier 2 typically means Left Shift)
+	'A': {2, 4}, 'B': {2, 5}, 'C': {2, 6}, 'D': {2, 7}, 'E': {2, 8},
+	'F': {2, 9}, 'G': {2, 10}, 'H': {2, 11}, 'I': {2, 12}, 'J': {2, 13},
+	'K': {2, 14}, 'L': {2, 15}, 'M': {2, 16}, 'N': {2, 17}, 'O': {2, 18},
+	'P': {2, 19}, 'Q': {2, 20}, 'R': {2, 21}, 'S': {2, 22}, 'T': {2, 23},
+	'U': {2, 24}, 'V': {2, 25}, 'W': {2, 26}, 'X': {2, 27}, 'Y': {2, 28},
+	'Z': {2, 29},
+
+	// Numbers
+	'1': {0, 30}, '2': {0, 31}, '3': {0, 32}, '4': {0, 33}, '5': {0, 34},
+	'6': {0, 35}, '7': {0, 36}, '8': {0, 37}, '9': {0, 38}, '0': {0, 39},
+
+	// Shifted numbers / Symbols
+	'!': {2, 30}, // Shift + 1
+	'@': {2, 31}, // Shift + 2
+	'#': {2, 32}, // Shift + 3
+	'$': {2, 33}, // Shift + 4
+	'%': {2, 34}, // Shift + 5
+	'^': {2, 35}, // Shift + 6
+	'&': {2, 36}, // Shift + 7
+	'*': {2, 37}, // Shift + 8
+	'(': {2, 38}, // Shift + 9
+	')': {2, 39}, // Shift + 0
+
+	// Other common characters
+	'\n': {0, 40}, // Enter (Return)
+	'\t': {0, 43}, // Tab
+	' ':  {0, 44}, // Space
+	'-':  {0, 45}, // Hyphen / Minus
+	'=':  {0, 46}, // Equals
+	'[':  {0, 47}, // Left Square Bracket
+	']':  {0, 48}, // Right Square Bracket
+	'\\': {0, 49}, // Backslash
+
+	';':  {0, 51}, // Semicolon
+	'\'': {0, 52}, // Apostrophe / Single Quote
+	'`':  {0, 53}, // Grave Accent / Backtick
+	',':  {0, 54}, // Comma
+	'.':  {0, 55}, // Period / Dot
+	'/':  {0, 56}, // Slash
+
+	// Shifted symbols
+	'_': {2, 45}, // Underscore (Shift + Hyphen)
+	'+': {2, 46}, // Plus (Shift + Equals)
+	'{': {2, 47}, // Left Curly Brace (Shift + Left Square Bracket)
+	'}': {2, 48}, // Right Curly Brace (Shift + Right Square Bracket)
+	'|': {2, 49}, // Pipe (Shift + Backslash)
+
+	':': {2, 51}, // Colon (Shift + Semicolon)
+	'"': {2, 52}, // Double Quote (Shift + Apostrophe)
+	'~': {2, 53}, // Tilde (Shift + Grave Accent)
+	'<': {2, 54}, // Less Than (Shift + Comma)
+	'>': {2, 55}, // Greater Than (Shift + Period)
+	'?': {2, 56}, // Question Mark (Shift + Slash)
+}
--- a/server/service/hid/service.go
+++ b/server/service/hid/service.go
@@ -0,0 +1,11 @@
+package hid
+
+type Service struct {
+	hid *Hid
+}
+
+func NewService() *Service {
+	return &Service{
+		hid: GetHid(),
+	}
+}
--- a/server/service/hid/status.go
+++ b/server/service/hid/status.go
@@ -0,0 +1,191 @@
+package hid
+
+import (
+	"NanoKVM-Server/proto"
+	"errors"
+	"fmt"
+	"io"
+	"os"
+	"os/exec"
+	"strings"
+	"time"
+
+	"github.com/gin-gonic/gin"
+	log "github.com/sirupsen/logrus"
+)
+
+const (
+	ModeNormal  = "normal"
+	ModeHidOnly = "hid-only"
+	ModeFlag    = "/sys/kernel/config/usb_gadget/g0/bcdDevice"
+
+	ModeNormalScript  = "/kvmapp/system/init.d/S03usbdev"
+	ModeHidOnlyScript = "/kvmapp/system/init.d/S03usbhid"
+
+	USBDevScript = "/etc/init.d/S03usbdev"
+)
+
+var modeMap = map[string]string{
+	"0x0510": ModeNormal,
+	"0x0623": ModeHidOnly,
+}
+
+func (s *Service) GetHidMode(c *gin.Context) {
+	var rsp proto.Response
+
+	mode, err := getHidMode()
+	if err != nil {
+		rsp.ErrRsp(c, -1, "get HID mode failed")
+		return
+	}
+
+	rsp.OkRspWithData(c, &proto.GetHidModeRsp{
+		Mode: mode,
+	})
+	log.Debugf("get hid mode: %s", mode)
+}
+
+func (s *Service) SetHidMode(c *gin.Context) {
+	var req proto.SetHidModeReq
+	var rsp proto.Response
+
+	if err := proto.ParseFormRequest(c, &req); err != nil {
+		rsp.ErrRsp(c, -1, "invalid arguments")
+		return
+	}
+	if req.Mode != ModeNormal && req.Mode != ModeHidOnly {
+		rsp.ErrRsp(c, -2, "invalid arguments")
+		return
+	}
+
+	if mode, _ := getHidMode(); req.Mode == mode {
+		rsp.OkRsp(c)
+		return
+	}
+
+	h := GetHid()
+	h.Lock()
+	h.CloseNoLock()
+	defer func() {
+		h.OpenNoLock()
+		h.Unlock()
+	}()
+
+	srcScript := ModeNormalScript
+	if req.Mode == ModeHidOnly {
+		srcScript = ModeHidOnlyScript
+	}
+
+	if err := copyModeFile(srcScript); err != nil {
+		rsp.ErrRsp(c, -3, "operation failed")
+		return
+	}
+
+	rsp.OkRsp(c)
+
+	log.Println("reboot system...")
+	time.Sleep(500 * time.Millisecond)
+	_ = exec.Command("reboot").Run()
+}
+
+func (s *Service) ResetHid(c *gin.Context) {
+	var rsp proto.Response
+
+	h := GetHid()
+	h.Lock()
+	h.CloseNoLock()
+	defer func() {
+		h.OpenNoLock()
+		h.Unlock()
+	}()
+
+	command := fmt.Sprintf("%s restart_phy", USBDevScript)
+	err := exec.Command("sh", "-c", command).Run()
+	if err != nil {
+		log.Errorf("failed to reset hid: %v", err)
+		rsp.ErrRsp(c, -1, "failed to reset hid")
+		return
+	}
+
+	rsp.OkRsp(c)
+	log.Debugf("reset hid success")
+}
+
+func copyModeFile(srcScript string) error {
+	// open the source file
+	srcFile, err := os.Open(srcScript)
+	if err != nil {
+		log.Errorf("failed to open %s: %s", srcScript, err)
+		return err
+	}
+	defer func() {
+		_ = srcFile.Close()
+	}()
+
+	srcInfo, err := srcFile.Stat()
+	if err != nil {
+		log.Errorf("failed to get %s info: %s", srcScript, err)
+		return err
+	}
+
+	// create and copy to temporary file
+	tmpFile, err := os.CreateTemp("/etc/init.d/", ".S03usbdev-")
+	if err != nil {
+		log.Errorf("failed to create temp %s: %s", USBDevScript, err)
+		return err
+	}
+	tmpPath := tmpFile.Name()
+	defer func() {
+		_ = os.Remove(tmpPath)
+	}()
+	log.Debugf("create temporary file: %s", tmpPath)
+
+	if err := tmpFile.Chmod(srcInfo.Mode()); err != nil {
+		_ = tmpFile.Close()
+		log.Errorf("failed to set %s mode: %s", tmpPath, err)
+		return err
+	}
+
+	if _, err := io.Copy(tmpFile, srcFile); err != nil {
+		_ = tmpFile.Close()
+		log.Errorf("failed to copy %s: %s", srcScript, err)
+		return err
+	}
+
+	if err := tmpFile.Sync(); err != nil {
+		_ = tmpFile.Close()
+		log.Errorf("failed to sync %s: %s", tmpPath, err)
+		return err
+	}
+
+	if err := tmpFile.Close(); err != nil {
+		log.Errorf("failed to close %s: %s", tmpPath, err)
+		return err
+	}
+
+	// replace the target file with the temporary file
+	if err := os.Rename(tmpPath, USBDevScript); err != nil {
+		log.Errorf("failed to rename %s: %s", tmpPath, err)
+		return err
+	}
+
+	log.Debugf("copy %s to %s successful", srcScript, USBDevScript)
+	return nil
+}
+
+func getHidMode() (string, error) {
+	data, err := os.ReadFile(ModeFlag)
+	if err != nil {
+		log.Errorf("failed to read %s: %s", ModeFlag, err)
+		return "", err
+	}
+
+	key := strings.TrimSpace(string(data))
+	mode, ok := modeMap[key]
+	if !ok {
+		log.Errorf("invalid mode flag: %s", key)
+		return "", errors.New("invalid mode flag")
+	}
+
+	return mode, nil
+}
--- a/server/service/network/service.go
+++ b/server/service/network/service.go
@@ -0,0 +1,7 @@
+package network
+
+type Service struct{}
+
+func NewService() *Service {
+	return &Service{}
+}
--- a/server/service/network/wifi.go
+++ b/server/service/network/wifi.go
@@ -0,0 +1,75 @@
+package network
+
+import (
+	"NanoKVM-Server/proto"
+	"os"
+	"strings"
+
+	"github.com/gin-gonic/gin"
+	log "github.com/sirupsen/logrus"
+)
+
+const (
+	WiFiExistFile = "/etc/kvm/wifi_exist"
+	WiFiSSID      = "/etc/kvm/wifi.ssid"
+	WiFiPasswd    = "/etc/kvm/wifi.pass"
+	WiFiConnect   = "/kvmapp/kvm/wifi_try_connect"
+	WiFiStateFile = "/kvmapp/kvm/wifi_state"
+)
+
+func (s *Service) GetWifi(c *gin.Context) {
+	var rsp proto.Response
+
+	data := &proto.GetWifiRsp{}
+
+	_, err := os.Stat(WiFiExistFile)
+	if err != nil {
+		rsp.OkRspWithData(c, data)
+		return
+	}
+
+	data.Supported = true
+
+	content, err := os.ReadFile(WiFiStateFile)
+	if err != nil {
+		rsp.OkRspWithData(c, data)
+		return
+	}
+
+	state := strings.ReplaceAll(string(content), "\n", "")
+	data.Connected = state == "1"
+
+	rsp.OkRspWithData(c, data)
+	log.Debugf("get wifi state: %s", state)
+}
+
+func (s *Service) ConnectWifi(c *gin.Context) {
+	var req proto.ConnectWifiReq
+	var rsp proto.Response
+
+	if err := proto.ParseFormRequest(c, &req); err != nil {
+		rsp.ErrRsp(c, -1, "invalid parameters")
+		return
+	}
+
+	if err := os.WriteFile(WiFiSSID, []byte(req.Ssid), 0o644); err != nil {
+		log.Errorf("failed to save wifi ssid: %s", err)
+		rsp.ErrRsp(c, -2, "failed to save wifi")
+		return
+	}
+
+	if err := os.WriteFile(WiFiPasswd, []byte(req.Password), 0o644); err != nil {
+		log.Errorf("failed to save wifi password: %s", err)
+		rsp.ErrRsp(c, -3, "failed to save wifi")
+		return
+	}
+
+	if err := os.WriteFile(WiFiConnect, nil, 0o644); err != nil {
+		log.Errorf("failed to connect wifi: %s", err)
+		rsp.ErrRsp(c, -4, "failed to connect wifi")
+		return
+	}
+
+	rsp.OkRsp(c)
+	log.Debugf("set wifi successfully: %s", req.Ssid)
+}
--- a/server/service/network/wol.go
+++ b/server/service/network/wol.go
@@ -0,0 +1,223 @@
+package network
+
+import (
+	"fmt"
+	"os"
+	"os/exec"
+	"path/filepath"
+	"regexp"
+	"strings"
+
+	"github.com/gin-gonic/gin"
+	log "github.com/sirupsen/logrus"
+
+	"NanoKVM-Server/proto"
+)
+
+const (
+	WolMacFile = "/etc/kvm/cache/wol"
+)
+
+func (s *Service) WakeOnLAN(c *gin.Context) {
+	var req proto.WakeOnLANReq
+	var rsp proto.Response
+
+	if err := proto.ParseFormRequest(c, &req); err != nil {
+		rsp.ErrRsp(c, -1, "invalid arguments")
+		return
+	}
+
+	mac, err := parseMAC(req.Mac)
+	if err != nil {
+		rsp.ErrRsp(c, -2, "invalid MAC address")
+		return
+	}
+
+	command := fmt.Sprintf("ether-wake -b %s", mac)
+	cmd := exec.Command("sh", "-c", command)
+
+	output, err := cmd.CombinedOutput()
+	if err != nil {
+		log.Errorf("failed to wake on lan: %s", err)
+		rsp.ErrRsp(c, -3, string(output))
+		return
+	}
+
+	go saveMac(mac)
+
+	rsp.OkRsp(c)
+	log.Debugf("wake on lan: %s", mac)
+}
+
+func (s *Service) GetMac(c *gin.Context) {
+	var rsp proto.Response
+
+	content, err := os.ReadFile(WolMacFile)
+	if err != nil {
+		rsp.ErrRsp(c, -2, "open file error")
+		return
+	}
+
+	data := &proto.GetMacRsp{
+		Macs: strings.Split(string(content), "\n"),
+	}
+
+	rsp.OkRspWithData(c, data)
+}
+
+func (s *Service) SetMacName(c *gin.Context) {
+	var req proto.SetMacNameReq // Mac:string Name:string
+	var rsp proto.Response
+
+	if err := proto.ParseFormRequest(c, &req); err != nil {
+		rsp.ErrRsp(c, -1, "invalid arguments")
+		return
+	}
+
+	content, err := os.ReadFile(WolMacFile)
+	if err != nil {
+		log.Errorf("failed to open %s: %s", WolMacFile, err)
+		rsp.ErrRsp(c, -2, "read failed")
+		return
+	}
+
+	macs := strings.Split(string(content), "\n")
+	var newLines []string
+	macFound := false
+
+	for _, line := range macs {
+		parts := strings.Split(line, " ")
+		if req.Mac != parts[0] {
+			newLines = append(newLines, line)
+			continue
+		}
+		newLines = append(newLines, parts[0]+" "+req.Name)
+		macFound = true
+	}
+
+	if !macFound {
+		log.Errorf("failed to found mac %s: %s", req.Mac, err)
+		rsp.ErrRsp(c, -3, "write failed")
+		return
+	}
+
+	data := strings.Join(newLines, "\n")
+	err = os.WriteFile(WolMacFile, []byte(data), 0o644)
+	if err != nil {
+		log.Errorf("failed to write %s: %s", WolMacFile, err)
+		rsp.ErrRsp(c, -3, "write failed")
+		return
+	}
+
+	rsp.OkRsp(c)
+	log.Debugf("set wol mac name: %s %s", req.Mac, req.Name)
+}
+
+func (s *Service) DeleteMac(c *gin.Context) {
+	var req proto.DeleteMacReq
+	var rsp proto.Response
+
+	if err := proto.ParseFormRequest(c, &req); err != nil {
+		rsp.ErrRsp(c, -1, "invalid arguments")
+		return
+	}
+
+	content, err := os.ReadFile(WolMacFile)
+	if err != nil {
+		log.Errorf("failed to open %s: %s", WolMacFile, err)
+		rsp.ErrRsp(c, -2, "read failed")
+		return
+	}
+
+	macs := strings.Split(string(content), "\n")
+	var newMacs []string
+
+	for _, mac := range macs {
+		parts := strings.Split(mac, " ")
+		if req.Mac != parts[0] {
+			newMacs = append(newMacs, mac)
+		}
+	}
+
+	data := strings.Join(newMacs, "\n")
+	err = os.WriteFile(WolMacFile, []byte(data), 0o644)
+	if err != nil {
+		log.Errorf("failed to write %s: %s", WolMacFile, err)
+		rsp.ErrRsp(c, -3, "write failed")
+		return
+	}
+
+	rsp.OkRsp(c)
+	log.Debugf("delete wol mac: %s", req.Mac)
+}
+
+func parseMAC(mac string) (string, error) {
+	mac = strings.ToUpper(strings.TrimSpace(mac))
+
+	mac = strings.ReplaceAll(mac, "-", "")
+	mac = strings.ReplaceAll(mac, ":", "")
+	mac = strings.ReplaceAll(mac, ".", "")
+
+	matched, err := regexp.MatchString("^[0-9A-F]{12}$", mac)
+	if err != nil {
+		return "", err
+	}
+	if !matched {
+		return "", fmt.Errorf("invalid MAC address: %s", mac)
+	}
+
+	var result strings.Builder
+	for i := 0; i < 12; i += 2 {
+		if i > 0 {
+			result.WriteString(":")
+		}
+		result.WriteString(mac[i : i+2])
+	}
+
+	return result.String(), nil
+}
+
+func saveMac(mac string) {
+	if isMacExist(mac) {
+		return
+	}
+
+	err := os.MkdirAll(filepath.Dir(WolMacFile), 0o644)
+	if err != nil {
+		log.Errorf("failed to create dir: %s", err)
+		return
+	}
+
+	file, err := os.OpenFile(WolMacFile, os.O_APPEND|os.O_CREATE|os.O_WRONLY, 0o644)
+	if err != nil {
+		log.Errorf("failed to open %s: %s", WolMacFile, err)
+		return
+	}
+	defer func() {
+		_ = file.Close()
+	}()
+
+	content := fmt.Sprintf("%s\n", mac)
+	_, err = file.WriteString(content)
+	if err != nil {
+		log.Errorf("failed to write %s: %s", WolMacFile, err)
+		return
+	}
+}
+
+func isMacExist(mac string) bool {
+	content, err := os.ReadFile(WolMacFile)
+	if err != nil {
+		return false
+	}
+
+	macs := strings.Split(string(content), "\n")
+	for _, item := range macs {
+		parts := strings.Split(item, " ")
+		if mac == parts[0] {
+			return true
+		}
+	}
+
+	return false
+}
--- a/Show More
+++ b/Show More