archy

archy-dev

feat: add archy-dev CLI scaffold for app developers

2026-03-14 05:47:29 +00:00

lib

feat(13-09): widen same-host deploy guard from containment-only to any mismatch

2026-08-04 04:19:49 -04:00

resilience

security: parameterize node addresses; drop dead APP_URLS config

2026-08-07 10:53:25 -04:00

security

feat(lnd): rotate Lightning macaroons from the dashboard, and stop stranding BTCPay

2026-08-08 07:45:51 -04:00

tor

chore(release): stage v1.7.54-alpha

2026-05-06 09:23:57 -04:00

app-catalog-image-smoke-test.py

feat(registry): move image and OTA references to the public domain

2026-08-07 11:31:20 -04:00

app-surface-smoke-test.sh

security: parameterize node addresses; drop dead APP_URLS config

2026-08-07 10:53:25 -04:00

archipelago-tailscale.service

Enhance README and RPC for package management

2026-02-01 18:46:35 +00:00

archipelago-wg

feat: ISO networking stack — relay + nvpn v0.3.7 + WireGuard

2026-04-08 15:06:27 +02:00

audit-secrets.sh

fix(security): make audit-secrets.sh actually scan the files that leaked

2026-08-07 09:58:51 -04:00

bitcoin-stack-lifecycle-test.sh

security: parameterize node addresses; drop dead APP_URLS config

2026-08-07 10:53:25 -04:00

bootstrap-switchover.sh

feat(registry): move image and OTA references to the public domain

2026-08-07 11:31:20 -04:00

build-aiui.sh

feat(build): build-aiui.sh rejects a prod bundle carrying mock hosts

2026-08-07 19:21:55 -04:00

build-bitcoin-image.sh

fix(bitcoin): bulletproof multi-version switching (Knots & Core)

2026-06-29 05:46:04 -04:00

build-iso-release.sh

feat(release): gated ISO build pipeline

2026-07-25 16:34:54 -04:00

check-app-catalog-drift.py

fix(btcpay): pin 2.4.2 (actively exploited 2FA bypass); teach drift check the release catalog

2026-08-07 12:19:24 -04:00

check-catalog-registry-trust.py

feat(release): guard the catalog against publishing untrusted registry hosts

2026-08-07 12:24:34 -04:00

check-installer-image-pins.py

fix(update): never advertise a downgrade as an update; clear every stale BTCPay pin

2026-08-07 12:42:11 -04:00

check-manifest-shell.py

fix(bitcoin): repair the startup script I broke in 1.7.124, and gate against it

2026-08-05 18:45:02 -04:00

check-release-assets.sh

fix(release): publish the manifest only after assets are proven fetchable

2026-08-07 18:05:55 -04:00

check-release-manifest.sh

chore(release): require curated release notes

2026-05-17 18:59:12 -04:00

configure-tailscale-nginx.sh

Enhance README and RPC for package management

2026-02-01 18:46:35 +00:00

container-doctor.sh

security: remove all infrastructure and internal process material from the repo

2026-08-07 10:37:20 -04:00

container-specs.sh

security: remove all infrastructure and internal process material from the repo

2026-08-07 10:37:20 -04:00

create-release-manifest.sh

feat(registry): move image and OTA references to the public domain

2026-08-07 11:31:20 -04:00

create-release.sh

feat(registry): move image and OTA references to the public domain

2026-08-07 11:31:20 -04:00

deploy-bitcoin-knots.sh

feat(registry): move image and OTA references to the public domain

2026-08-07 11:31:20 -04:00

deploy-config.example

backend: harden rootless app lifecycle orchestration

2026-06-11 00:24:32 -04:00

dev-container-test.sh

feat(registry): move image and OTA references to the public domain

2026-08-07 11:31:20 -04:00

dev-start.sh

security: parameterize node addresses; drop dead APP_URLS config

2026-08-07 10:53:25 -04:00

first-boot-containers.sh

merge: bring the open-source readiness work onto the phase-13 branch

2026-08-08 09:02:32 -04:00

fix-companion-manifests.sh

chore(scripts): one-shot node-side companion-manifest repair script

2026-08-06 07:59:34 -04:00

fix-indeedhub-containers.sh

backend: harden rootless app lifecycle orchestration

2026-06-11 00:24:32 -04:00

generate-app-catalog.py

fix(fips): app launch ports allowed through the mesh firewall

2026-07-26 22:23:46 +01:00

generate-app-catalog.sh

fix(catalog): generate against the fleet's trust floor, not the repo's host

2026-08-09 04:52:18 -04:00

image-versions.sh

fix(catalog): generate against the fleet's trust floor, not the repo's host

2026-08-09 04:52:18 -04:00

install-tui-demo.sh

fix(iso): stop printing a web password that doesn't work

2026-08-07 20:27:50 -04:00

iso-smoke-test.sh

feat(release): gated ISO build pipeline

2026-07-25 16:34:54 -04:00

nginx-app-iframe-patch.conf

Implement multi-container app installation for Immich and Penpot, enhance Docker package scanning, and update Nginx configuration for iframe support

2026-02-25 18:04:41 +00:00

nginx-archipelago-patch.conf

Update Fedimint configuration and enhance onboarding process

2026-02-17 15:03:34 +00:00

nginx-https-app-proxies.conf

app-platform: remove revoked onlyoffice app

2026-06-11 01:03:45 -04:00

nginx-penpot-iframe-patch.conf

Implement multi-container app installation for Immich and Penpot, enhance Docker package scanning, and update Nginx configuration for iframe support

2026-02-25 18:04:41 +00:00

nginx-pwa-snippet.conf

Enhance PWA support with new install prompt and configuration updates

2026-02-18 13:48:45 +00:00

optimize-debian.sh

feat: rootless podman, session hardening, boot stability, sidebar fix

2026-03-18 13:53:27 +00:00

ota-crash-guard.sh

feat(update): auto-rollback OTA binaries that crash-loop before they can self-verify

2026-07-18 19:42:54 -04:00

publish-companion-apk.sh

fix(android): force v1+v2+v3 signing & clean-build guards in companion publish

2026-06-26 11:53:25 +01:00

publish-release-assets.sh

fix(release): publish the manifest only after assets are proven fetchable

2026-08-07 18:05:55 -04:00

reconcile-containers.sh

fix(security): publish the loopback-pinned UI images and pin the new tags

2026-08-05 09:07:05 -04:00

run-e2e-tests.sh

fix: zero-amount invoices, identity.verify DID extraction, tor service permissions

2026-03-09 09:53:36 +00:00

run-post-install-tests.sh

security: remove node credentials from tracked files (open-source Phase 1)

2026-08-07 09:59:10 -04:00

run-tests.sh

chore: prepare repository for public launch

2026-07-27 17:51:43 +01:00

self-update.sh

feat(registry): move image and OTA references to the public domain

2026-08-07 11:31:20 -04:00

setup-node-ca.sh

fix: cap peer browse, containerise the cert section, serve LAN HTTPS

2026-08-07 03:52:57 -04:00

sign-catalog.sh

feat(release): guard the catalog against publishing untrusted registry hosts

2026-08-07 12:24:34 -04:00

sign-iso-checksums.sh

feat(iso): per-device secrets on first boot + checksum emission and signing

2026-07-13 13:41:16 +01:00

sign-manifest.sh

chore(trust): flip the signing checks to the new release root

2026-08-05 09:31:28 -04:00

smoke-test.sh

security: parameterize node addresses; drop dead APP_URLS config

2026-08-07 10:53:25 -04:00

sync-npm-public-hosts.sh

app-platform: remove unsupported saleor release surface

2026-06-11 01:16:21 -04:00

sync-whats-new.py

feat(release): gate that Settings 'What's New' modal stays in sync with CHANGELOG

2026-06-14 08:31:43 -04:00

tor-helper.sh

fix(tor): make the helper's restart actually recover Tor, and stop lying about it

2026-08-09 06:49:36 -04:00

trust-archipelago-cert.sh

security: parameterize node addresses; drop dead APP_URLS config

2026-08-07 10:53:25 -04:00

uptime-monitor.sh

fix: WebSocket race conditions, Vue error handler, remove sudo podman, add container health checks

2026-03-21 01:11:05 +00:00

validate-app-manifest.sh

fix(registry): repair two regressions from the domain migration; port the manifest validator to python

2026-08-07 12:08:39 -04:00

verify-aiui-deploy.sh

fix(13-09): verify-aiui-deploy false-negative — pipefail EPIPEs curl on grep -q early exit

2026-08-05 13:05:42 -04:00

verify-seed-derivation.py

feat(identity): seed-derivation verifier + KAT; rename "Your DID"→"Node DID"

2026-06-16 10:17:29 -04:00