viewer: expose hidden IP list; fix hide-ip env duplication

deploy/decoy-viewer.service

@@ -3,7 +3,7 @@ Description=Local read-only honeypot evidence viewer (loopback only)
 After=network-online.target
 [Service]
 EnvironmentFile=/etc/decoy.env
-ExecStart=/usr/bin/python3 /opt/decoy/viewer.py --bind=${VIEWER_BIND} --port=${VIEWER_PORT} --log-dir=${VIEWER_LOG_DIR} --hide-ip=${VIEWER_HIDE_IP}
+ExecStart=/usr/bin/python3 /opt/decoy/viewer.py --bind=${VIEWER_BIND} --port=${VIEWER_PORT} --log-dir=${VIEWER_LOG_DIR}
 WorkingDirectory=/opt/decoy
 UMask=0077
 NoNewPrivileges=true

viewer.py

@@ -237,7 +237,8 @@ class Handler(http.server.BaseHTTPRequestHandler):
                     break
         page_rows = rows[page * size:(page + 1) * size]
         body = json.dumps({'events': page_rows, 'scanned': scanned, 'page': page, 'size': size,
-                           'has_more': len(rows) >= need, 'hidden': len(hidden)}, ensure_ascii=True).encode()
+                           'has_more': len(rows) >= need, 'hidden': len(hidden),
+                           'hidden_ips': sorted(hidden)}, ensure_ascii=True).encode()
         self.send(200, body, 'application/json', (('Content-Disposition', 'inline'),))
 
     def artifact(self, sha, query):