chore: snapshot release workspace

scripts/container-specs.sh

@@ -180,7 +180,7 @@ load_spec_bitcoin-knots() {
   local btc_rpc_headroom="-rpcthreads=16 -rpcworkqueue=256"
   local btc_txrelay_flags="-rpcwhitelistdefault=0"
   if [ -f "$SECRETS_DIR/bitcoin-rpc-txrelay-rpcauth" ]; then
-    btc_txrelay_flags="$btc_txrelay_flags -rpcauth=$(cat "$SECRETS_DIR/bitcoin-rpc-txrelay-rpcauth") -rpcwhitelist=txrelay:sendrawtransaction,testmempoolaccept,getmempoolinfo,getrawmempool,getmempoolentry,getnetworkinfo,getblockchaininfo,getblockcount,getblockhash,getblockheader,getrawtransaction,decoderawtransaction,decodescript,estimatesmartfee"
+    btc_txrelay_flags="$btc_txrelay_flags -rpcauth=$(cat "$SECRETS_DIR/bitcoin-rpc-txrelay-rpcauth") -rpcwhitelist=txrelay:sendrawtransaction,submitpackage,testmempoolaccept,getmempoolinfo,getrawmempool,getmempoolentry,getnetworkinfo,getblockchaininfo,getblockcount,getblockhash,getblock,getblockheader,getrawtransaction,gettxout,gettxspendingprevout,decoderawtransaction,decodescript,estimatesmartfee,uptime,ping,getconnectioncount,getpeerinfo,getindexinfo,getdeploymentinfo,getchaintips"
   fi
   # Dynamic: prune on small disk
   if [ "${DISK_GB:-0}" -lt 1000 ]; then

scripts/deploy-tailscale.sh

@@ -298,6 +298,32 @@ deploy_node() {
         ' 2>/dev/null || true
     fi
 
+    step "Syncing kiosk display helpers"
+    KIOSK_LAUNCHER="$PROJECT_DIR/image-recipe/configs/archipelago-kiosk-launcher.sh"
+    if [ -f "$KIOSK_LAUNCHER" ]; then
+        scp $SSH_OPTS "$KIOSK_LAUNCHER" "$TARGET:/tmp/archipelago-kiosk-launcher" 2>/dev/null || true
+        ssh $SSH_OPTS "$TARGET" '
+            sudo install -m 755 /tmp/archipelago-kiosk-launcher /usr/local/bin/archipelago-kiosk-launcher
+            rm -f /tmp/archipelago-kiosk-launcher
+            echo "   Kiosk launcher updated"
+        ' 2>/dev/null || true
+    fi
+    for unit in archipelago-kiosk.service archipelago-kiosk-watchdog.service; do
+        KIOSK_UNIT="$PROJECT_DIR/image-recipe/configs/$unit"
+        [ -f "$KIOSK_UNIT" ] || continue
+        scp $SSH_OPTS "$KIOSK_UNIT" "$TARGET:/tmp/$unit" 2>/dev/null || true
+        ssh $SSH_OPTS "$TARGET" "
+            if ! diff -q '/tmp/$unit' '/etc/systemd/system/$unit' >/dev/null 2>&1; then
+                sudo install -m 644 '/tmp/$unit' '/etc/systemd/system/$unit'
+                sudo systemctl daemon-reload
+                echo '   $unit updated'
+            else
+                echo '   $unit unchanged'
+            fi
+            rm -f '/tmp/$unit'
+        " 2>/dev/null || true
+    done
+
     # ── Step 13: Rootless podman prereqs ─────────────────────────────
     step "Setting up rootless podman prerequisites"
     ssh $SSH_OPTS "$TARGET" '

scripts/deploy-to-target.sh

@@ -703,6 +703,33 @@ if [ "$LIVE" = true ]; then
         rm -f /tmp/archipelago.service
       ' 2>/dev/null || true
     fi
+
+    # Sync kiosk display helpers and units for HDMI/TV nodes. Existing nodes may
+    # not have a git checkout, so live deploy must carry these outside OTA too.
+    KIOSK_LAUNCHER="$PROJECT_DIR/image-recipe/configs/archipelago-kiosk-launcher.sh"
+    if [ -f "$KIOSK_LAUNCHER" ]; then
+      scp $SSH_OPTS "$KIOSK_LAUNCHER" "$TARGET_HOST:/tmp/archipelago-kiosk-launcher" 2>/dev/null || true
+      ssh $SSH_OPTS "$TARGET_HOST" '
+        sudo install -m 755 /tmp/archipelago-kiosk-launcher /usr/local/bin/archipelago-kiosk-launcher
+        rm -f /tmp/archipelago-kiosk-launcher
+        echo "   Kiosk launcher updated"
+      ' 2>/dev/null || true
+    fi
+    for unit in archipelago-kiosk.service archipelago-kiosk-watchdog.service; do
+      KIOSK_UNIT="$PROJECT_DIR/image-recipe/configs/$unit"
+      [ -f "$KIOSK_UNIT" ] || continue
+      scp $SSH_OPTS "$KIOSK_UNIT" "$TARGET_HOST:/tmp/$unit" 2>/dev/null || true
+      ssh $SSH_OPTS "$TARGET_HOST" "
+        if ! diff -q '/tmp/$unit' '/etc/systemd/system/$unit' >/dev/null 2>&1; then
+          sudo install -m 644 '/tmp/$unit' '/etc/systemd/system/$unit'
+          sudo systemctl daemon-reload
+          echo '   $unit updated'
+        else
+          echo '   $unit unchanged'
+        fi
+        rm -f '/tmp/$unit'
+      " 2>/dev/null || true
+    done
     if [ -n "${TELEMETRY_COLLECTOR_URL:-}" ]; then
       progress "Syncing telemetry collector config"
       TMP_TELEMETRY_ENV="$(mktemp)"

scripts/image-versions.sh

@@ -44,7 +44,7 @@ SEARXNG_IMAGE="$ARCHY_REGISTRY/searxng:latest"
 CRYPTPAD_IMAGE="$ARCHY_REGISTRY/cryptpad:2024.12.0"
 FILEBROWSER_IMAGE="$ARCHY_REGISTRY/filebrowser:v2.27.0"
 NPM_IMAGE="$ARCHY_REGISTRY/nginx-proxy-manager:latest"
-PORTAINER_IMAGE="$ARCHY_REGISTRY/portainer:latest"
+PORTAINER_IMAGE="$ARCHY_REGISTRY/portainer:2.19.4"
 
 # Networking
 TAILSCALE_IMAGE="$ARCHY_REGISTRY/tailscale:stable"
@@ -90,7 +90,6 @@ INDEEDHUB_REDIS_IMAGE="$ARCHY_REGISTRY/redis:7.4.8-alpine"
 GITEA_IMAGE="docker.io/gitea/gitea:1.23"
 
 # DWN (Decentralized Web Node)
-DWN_SERVER_IMAGE="$ARCHY_REGISTRY/dwn-server:main"
 
 # Immich stack
 IMMICH_POSTGRES_IMAGE="$ARCHY_REGISTRY/immich-postgres:14-vectorchord0.4.3-pgvectors0.2.0"

scripts/self-update.sh

@@ -312,9 +312,16 @@ if [ -n "$UI_REBUILD_LIST" ]; then
     fi
 fi
 
+# Update kiosk display helpers used by HDMI/TV installs.
+if [ -f "$REPO_DIR/image-recipe/configs/archipelago-kiosk-launcher.sh" ]; then
+    sudo install -m 755 "$REPO_DIR/image-recipe/configs/archipelago-kiosk-launcher.sh" \
+        /usr/local/bin/archipelago-kiosk-launcher
+    ok "Updated archipelago-kiosk-launcher"
+fi
+
 # Update systemd services if changed
 SYSTEMD_UNITS_CHANGED=false
-for unit in archipelago.service archipelago-fips.service; do
+for unit in archipelago.service archipelago-fips.service archipelago-kiosk.service archipelago-kiosk-watchdog.service; do
     src="$REPO_DIR/image-recipe/configs/$unit"
     dst="/etc/systemd/system/$unit"
     [ -f "$src" ] || continue