# AudioPen Nextcloud Webhook

A Node.js service that receives notes from AudioPen and uploads them to Nextcloud via WebDAV. Includes a web UI for self-service setup — each user enters their own Nextcloud credentials and gets a unique webhook URL.

When AudioPen sends a webhook, the service:

1. Validates the token in the URL
2. Parses the note content (title, body, original transcript)
3. Creates a timestamped Markdown file
4. Uploads it to the user's configured Nextcloud folder

Example filename:

```text
2026-05-19T22-15-10.123Z-my-note-title.md
```

## Setup

### 1. Configure environment

Generate an encryption key (required — used to encrypt Nextcloud passwords at rest):

```bash
node -e "console.log(require('crypto').randomBytes(32).toString('hex'))"
```

Create a `.env` file in the project root:

```env
ENCRYPTION_KEY=paste-your-generated-key-here
ADMIN_PASSWORD=choose-a-strong-password
PORT=3000
# USERS_FILE=users.json  # optional, defaults to users.json
```

`ENCRYPTION_KEY` is required — the server will not start without it. `ADMIN_PASSWORD` is required to create new accounts via the web UI; without it, registration is disabled (existing users can still update their settings via their token URL).

### 2. Install dependencies

```bash
npm install
```

### 3. Run as a systemd service

Copy the included service file and enable it:

```bash
sudo cp audiopen-nextcloud.service /etc/systemd/system/
sudo systemctl daemon-reload
sudo systemctl enable --now audiopen-nextcloud
```

Check status or view logs:

```bash
sudo systemctl status audiopen-nextcloud
sudo journalctl -u audiopen-nextcloud -f
```

The service expects the app to be installed at `/opt/audiopen-nextcloud` with a `.env` file in that directory.

#### Running manually (without systemd)

```bash
node server.js
```

### 4. Register users

Open `http://localhost:3000` in a browser. Each user fills in their Nextcloud credentials and the admin password, then receives:

- A **webhook URL** to paste into AudioPen (`/webhook/<token>`)
- A **settings page URL** to bookmark for updating credentials later (`/?token=<token>`)

### Returning users

Visiting `/?token=<token>` pre-fills the form with existing settings and allows updating credentials without needing the admin password.

## Manual user management

User credentials are stored in `users.json` (gitignored). You can also edit this file directly — see `users.json.example` for the format.