fix: container stability, OnlyOffice removal, node bootstrapping, UI fixes

Container orchestration:
- Add --network-alias to all archy-net containers (fixes Podman DNS)
- Fix bitcoin-knots health check: expand $BITCOIN_RPC_PASS at creation
- Increase bitcoin-knots memory limit to 4g, reduce dbcache to 2048
- Enable podman-restart.service in ISO for auto-start on boot
- Fix UI container Dockerfiles: ENTRYPOINT [], user root for rootless

App changes:
- Remove OnlyOffice (incompatible with rootless Podman)
- Replace with CryptPad reference (single-process, e2e encrypted)
- Fix NPM port mapping: 8181 → 81
- Fix OnlyOffice port mapping: 8044 → 9980 (now CryptPad: 3003)

AIUI & proxy:
- Add MODEL_MAP to claude-api-proxy (ISO + deploy)
- Map legacy model IDs (claude-haiku-4.5 → claude-haiku-4-5-20251001)

Kiosk:
- Move chromium-kiosk data dir to /var/lib/archipelago (data partition)
- Remove --metrics-recording-only (contradicted --disable-metrics)

Node bootstrapping:
- Add bootstrap-switchover.sh for live node updates
- ElectrumX UI improvements and nginx proxy fixes
- LND UI nginx config updates

Backend:
- Bitcoin health check uses .cookie auth (no plaintext creds)
- ElectrumX status endpoint improvements
- Network alias flag in install.rs for DNS reliability

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

docker/electrs-ui/index.html

@@ -355,7 +355,10 @@
 
         async function updateStatus() {
             try {
-                var resp = await fetch('electrs-status');
+                var resp = await fetch('/electrs-status');
+                if (!resp.ok) {
+                    throw new Error('Backend unavailable (HTTP ' + resp.status + ')');
+                }
                 var data = await resp.json();
 
                 // Extract Tor onion from status response
@@ -410,8 +413,14 @@
                     document.getElementById('connSubtitle').textContent = 'Connections will be available once ElectrumX has completed syncing.';
                 }
             } catch (e) {
-                document.getElementById('syncStatusText').textContent = 'Unable to fetch status: ' + e.message;
-                document.getElementById('syncStatusText').style.color = '#f87171';
+                var msg = e.message || 'Unknown error';
+                if (msg.indexOf('HTTP 5') !== -1 || msg.indexOf('Failed to fetch') !== -1 || msg.indexOf('NetworkError') !== -1) {
+                    msg = 'Waiting for Archipelago backend...';
+                }
+                document.getElementById('syncStatusText').textContent = msg;
+                document.getElementById('syncStatusText').style.color = '#fbbf24';
+                document.getElementById('statusDot').className = 'status-dot bg-yellow animate-pulse';
+                document.getElementById('statusText').textContent = 'Connecting';
             }
         }
 

docker/electrs-ui/nginx.conf

@@ -5,14 +5,8 @@ server {
     root /usr/share/nginx/html;
     index index.html;
 
-    location /electrs-status {
-        proxy_pass http://127.0.0.1:5678/electrs-status;
-        proxy_http_version 1.1;
-        proxy_set_header Host $host;
-        proxy_set_header X-Real-IP $remote_addr;
-        add_header Access-Control-Allow-Origin *;
-    }
-
+    # electrs-status is fetched via absolute /electrs-status path,
+    # handled by the host nginx → backend at :5678 directly
     location / {
         try_files $uri $uri/ /index.html;
     }