INTENDED FOR USE WITH PALE MOON - DOES NOT WORK WITH FIREFOX 29 OR LATER

This is a lightweight implementation of Mozillas' User API v1.0 and Storage API v1.1 without LDAP, MySQL, Redis etc. overhead. It is multi users capable and depends only on werkzeug.

The Pale Moon web browser continues to use the Sync 1.1 (Weave) standard, thus this project has been partially resurrected to support running a lightweight, personal sync server.

Being lightweight and simple, weave-minimal does not support advanced features such as user quotas or password resets. Its focus is on being simple to deploy and use.

Note, that the name originates from the deprecated Weave Minimal Server, but shares nothing beside the name; see FSyncMS for a still working, PHP based sync server.

Only Python 3 is supported, as python 2.x is EOL. See weave-minimal --help for a list of parameters and a short description.

$ weave-minimal --enable-registration
 * Running on http://127.0.0.1:8080/

Required dependencies:

• python3
• python3-werkzeug

Optional dependencies:

• python3-gevent

The version of weave-minimal in pip is out of date. Currently the only supported install paths are a manual clone or the Arch Linux AUR package.

Weave-minimal will read an ini-style config file from /etc/weave-minimal.conf. See the example config in the examples/ directory for supported options.

To run weave-minimal as a daemon, see the example systemd service unit file in the examples/ directory.

• EN: Firefox Sync server right on router
• DE: Uberspace und dein Firefox Sync Server, FastCGI wrapper

0. Migrate from the official servers: write down your email address and sync key (you can reset your password anyway) and unlink your client. If you want to keep your previous sync key, enter the key in the advanced settings.

1. Create a new account in the sync preferences. Choose a valid email address and password and enter the custom url into the server location (leave the trailing slash!). If you get an error, check the SSL certificate first.

2. If no errors come up, click continue and wait a minute. If you sync tabs, quit, re-open and manually sync otherwise you'll get an empty tab list.

3. Connect other clients is as easy as with the Pale Moon servers (the client actually uses Pale Moon's J-PAKE server for this): click I already have an account and write the three codes into an already linked browser using Pair Device. Optionally you can use the manual prodecure but the you have to enter your sync key by hand.

4. Once you have registered your clients, you can close the registration by running weave-minimal without the --enable-registration flag.

Q: Is this implementation standard compliant?
A: Yes, it passes the official functional test suite (with minor modifications).

Q: Is it compatible with the latest version of Firefox?
A: Not guaranteed. There is a new API draft, but not used in Firefox/Firefox ESR before 2014.

Q: Can I use a custom certificate for HTTPS?
A: Yes, but import the CA or visit the url before you enable syncing. Firefox will show you a misleading error "invalid url" if you did not accept this cert before! If you are using Firefox on Android, you have to accept the certificate with the default Android Browser (called "Browser"). Also see here for information on a bug in Firefox for Android that might cause you troubles.

Q: It does not sync!
A: Make sure, that $ curl http://example.tld/prefix/user/1.0/example/node/weave returns the correct sync url. Next, try to restart your browser. If that doesn't help, please file a bug report.

Mozilla assumes, you're using their services, therefore you can not enter a non-valid email-address and Firefox will prevent you from doing this. But there's an alternate way:

Instead of entering all your details into the first screen of "Firefox Sync Setup" you click on "I already have a Firefox Sync Account". Before you can go to the next step, you have to set up a user account in weave.

$ weave-minimal --register bob:secret123
[info] database for `bob` created at `.data/bob.c203011d1453ba7c`

Now you can continue your Firefox Sync Setup and click "I don't have the device with me" and enter your username, password, "use custom server" -> url and secret passphrase. That's all.

To run weave-minimal using lighttpd and mod_proxy you need to pass the public url, e.g. weave-minimal --base-url=http://example.org/sync ...

$HTTP["url"] =~ "^/weave/" {
    proxy.server = ("" =>
       (("host" => "127.0.0.1", "port" => 8080)))
    setenv.add-request-header  = ("X-Forwarded-Proto" => "https") # optionally for HTTPS
}

location ^~ /weave/ {
    proxy_set_header        Host $host;
    proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header        X-Forwarded-Proto $scheme;
    proxy_set_header        X-Script-Name /weave;
    proxy_pass              http://127.0.0.1:8080;
}

<Location /sync>
    ProxyPass http://127.0.0.1:8080
    RequestHeader set X-Forwarded-Proto "https"
</Location>

You can skip RequestHeader, if apache proxies the service on regular http.

For higher concurrency (if possible at all with SQLite), gevent will be used if installed (pip install gevent). Furthermore, weave-minimal exports an application object for uWSGI and Gunicorn, e.g.:

$ env ENABLE_REGISTRATION=1 DATA_DIR=/var/lib/... gunicorn weave -b localhost:1234

Do not use multiple processes to run weave-minimal. The code does not acquire inter-process locks on the database and I have no plans to add an IPC concurrency pattern to the rather simple code base (programmer's lame excuse, I know).