lfg2025/archy
1
0
Fork 0
Code Issues 20 Pull Requests Actions Packages Projects Releases 61 Wiki Activity
archy/apps
History
archipelago 745e180102 fix(quadlet): escape % for systemd specifiers — bitcoind RPC creds were /bin/bash 
The creds-off-argv script used printf "rpcuser=%s" in the manifest's
custom_args; quadlet copies Exec= into the generated service's ExecStart,
where systemd expands %s (user's shell) at load time — bitcoind's rpc.conf
came out as rpcuser=/bin/bash and every RPC consumer got 401s on quadlet
nodes (framework-pt: bitcoin-status, HA block-height sensor, LND chain RPC).

Two-layer fix: quadlet.rs now escapes % -> %% in Exec/Entrypoint/HealthCmd/
Environment emission (with regression test), and the bitcoin manifests write
rpc.conf with plain echo so the catalog also heals nodes still running older
binaries. Release catalog regenerated with the fixed scripts.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-07-22 03:47:06 -04:00
..
aiui
fix: harden all 23 app manifests with no_new_privileges, user, seccomp (MAINT-04)
2026-03-11 18:13:28 +00:00
archy-btcpay-db
fix(apps): repoint image refs from retired git.tx1138.com to vps2
2026-07-10 09:51:38 -04:00
archy-mempool-db
fix(apps): repoint image refs from retired git.tx1138.com to vps2
2026-07-10 09:51:38 -04:00
archy-mempool-web
fix(mempool): health-check 127.0.0.1 not localhost (stops false-unhealthy loop)
2026-06-28 15:09:34 -04:00
archy-nbxplorer
fix(apps): repoint image refs from retired git.tx1138.com to vps2
2026-07-10 09:51:38 -04:00
barkd
feat(wallet): Ark protocol support via barkd sidecar
2026-07-14 21:56:21 +01:00
bitcoin-core
fix(quadlet): escape % for systemd specifiers — bitcoind RPC creds were /bin/bash
2026-07-22 03:47:06 -04:00
bitcoin-knots
fix(quadlet): escape % for systemd specifiers — bitcoind RPC creds were /bin/bash
2026-07-22 03:47:06 -04:00
bitcoin-ui
feat(container): bitcoin-ui pre-start hook renders nginx.conf from embedded template
2026-04-23 02:19:52 -04:00
botfights
app-platform: generate catalog from app manifests
2026-06-11 00:24:20 -04:00
btcpay-server
fix(apps): persist btcpay plugins and wire the internal LND node
2026-07-10 17:48:27 +01:00
core-lightning
fix: harden all 23 app manifests with no_new_privileges, user, seccomp (MAINT-04)
2026-03-11 18:13:28 +00:00
did-wallet
fix(apps): resolve latent host-port collisions + detect at load time
2026-07-10 12:25:42 -04:00
electrs-ui
feat(container): bitcoin-ui pre-start hook renders nginx.conf from embedded template
2026-04-23 02:19:52 -04:00
electrumx
fix(electrumx): probe bitcoin-knots/bitcoin-core for the daemon host instead of hardcoding knots
2026-07-18 19:55:06 -04:00
fedimint
feat(container): manifest-declared generated secrets + companion/quadlet hardening
2026-06-21 05:11:07 -04:00
fedimint-clientd
integration: preserve deployed 1.8.0 OTA work
2026-06-30 05:08:17 -04:00
fedimint-gateway
fix(apps): repoint image refs from retired git.tx1138.com to vps2
2026-07-10 09:51:38 -04:00
filebrowser
fix(apps): repoint image refs from retired git.tx1138.com to vps2
2026-07-10 09:51:38 -04:00
fips-ui
feat(fips): connect to public mesh anchor over TCP + wire daemon updates
2026-06-15 06:41:48 -04:00
gitea
app-platform: generate catalog from app manifests
2026-06-11 00:24:20 -04:00
grafana
app-platform: generate catalog from app manifests
2026-06-11 00:24:20 -04:00
home-assistant
fix(pine): bump Home Assistant to 2026.7.3 — satellite keepalive support
2026-07-21 21:39:04 +00:00
immich
fix(immich): declare the caps its root process needs over the subuid-owned data tree
2026-07-05 16:33:30 -04:00
immich-postgres
fix(immich): name containers underscore to match runtime lifecycle code
2026-06-21 09:20:38 -04:00
immich-redis
fix(immich): name containers underscore to match runtime lifecycle code
2026-06-21 09:20:38 -04:00
indeedhub
chore: purge retired git.tx1138.com registry host from the codebase
2026-07-10 18:55:32 +01:00
indeedhub-api
feat(indeedhub): manifest-driven 7-member stack, orchestrator-first (#20 phase 3)
2026-06-21 15:46:26 -04:00
indeedhub-ffmpeg
feat(indeedhub): manifest-driven 7-member stack, orchestrator-first (#20 phase 3)
2026-06-21 15:46:26 -04:00
indeedhub-minio
feat(indeedhub): manifest-driven 7-member stack, orchestrator-first (#20 phase 3)
2026-06-21 15:46:26 -04:00
indeedhub-postgres
feat(indeedhub): manifest-driven 7-member stack, orchestrator-first (#20 phase 3)
2026-06-21 15:46:26 -04:00
indeedhub-redis
feat(indeedhub): manifest-driven 7-member stack, orchestrator-first (#20 phase 3)
2026-06-21 15:46:26 -04:00
indeedhub-relay
feat(indeedhub): manifest-driven 7-member stack, orchestrator-first (#20 phase 3)
2026-06-21 15:46:26 -04:00
jellyfin
app-platform: type manifest launch interfaces
2026-06-11 00:52:16 -04:00
lightning-stack
fix(apps): resolve latent host-port collisions + detect at load time
2026-07-10 12:25:42 -04:00
lnd
fix: fresh-ISO feedback bug-bash — onboarding, status truthfulness, recovery, kiosk, logs
2026-07-02 08:00:39 -04:00
lnd-ui
chore(release): stage v1.7.52-alpha
2026-05-05 11:29:18 -04:00
mempool
fix(orchestrator): generalize launch-port fallback + archival-bitcoin dependency gating
2026-07-01 03:59:00 -04:00
mempool-api
fix(apps): repoint image refs from retired git.tx1138.com to vps2
2026-07-10 09:51:38 -04:00
morphos-server
fix(apps): resolve latent host-port collisions + detect at load time
2026-07-10 12:25:42 -04:00
netbird
feat(netbird): manifest-driven migration via reusable orchestrator primitives
2026-06-23 13:39:53 -04:00
netbird-dashboard
feat(netbird): manifest-driven migration via reusable orchestrator primitives
2026-06-23 13:39:53 -04:00
netbird-server
feat(netbird): manifest-driven migration via reusable orchestrator primitives
2026-06-23 13:39:53 -04:00
nextcloud
app-platform: type manifest launch interfaces
2026-06-11 00:52:16 -04:00
nostr-rs-relay
app-platform: generate catalog from app manifests
2026-06-11 00:24:20 -04:00
photoprism
app-platform: type manifest launch interfaces
2026-06-11 00:52:16 -04:00
pine
feat(pine): 1.3.0 manifests — openwakeword member + live node status on the launcher page
2026-07-22 02:59:34 -04:00
pine-openwakeword
feat(pine): 1.3.0 manifests — openwakeword member + live node status on the launcher page
2026-07-22 02:59:34 -04:00
pine-piper
feat(pine): add Pine voice-assistant app package (manifests + icon)
2026-07-21 05:14:32 -04:00
pine-whisper
feat(pine): add Pine voice-assistant app package (manifests + icon)
2026-07-21 05:14:32 -04:00
portainer
chore: snapshot release workspace
2026-06-12 03:00:15 -04:00
router
fix: harden all 23 app manifests with no_new_privileges, user, seccomp (MAINT-04)
2026-03-11 18:13:28 +00:00
searxng
app-platform: generate catalog from app manifests
2026-06-11 00:24:20 -04:00
strfry
fix(apps): strfry healthcheck probes 127.0.0.1:7777, not localhost:8090
2026-07-09 19:42:06 -04:00
uptime-kuma
app-platform: generate catalog from app manifests
2026-06-11 00:24:20 -04:00
vaultwarden
app-platform: type manifest launch interfaces
2026-06-11 00:52:16 -04:00
build.sh
mid code commit
2026-01-24 23:18:24 +00:00
DEVELOPMENT.md
chore: snapshot release workspace
2026-06-12 03:00:15 -04:00
PORTS.md
chore: snapshot release workspace
2026-06-12 03:00:15 -04:00
QUICKSTART.md
chore: snapshot release workspace
2026-06-12 03:00:15 -04:00
README.md
chore(apps): remove six fake bookmark apps
2026-07-14 06:56:03 -04:00

README.md

Archipelago App Manifests

Containerized applications for the Archipelago Bitcoin Node OS. All apps run in rootless Podman with security hardening (cap-drop ALL, readonly root, non-root user, memory limits).

App Categories

Bitcoin & Lightning

  • bitcoin-knots — Full Bitcoin node (v28.1)
  • lnd — Lightning Network Daemon (v0.17.4-beta)
  • btcpay-server — Payment processor (v1.13.5)
  • mempool — Block explorer and fee estimator (v2.5.0)
  • electrumx — Electrum server
  • fedimint — Federated Bitcoin minting (v0.10.0)

Nostr

  • nostr-rs-relay — High-performance Rust relay (v0.9.0)
  • nostrudel — Nostr web client (v0.40.0)

Web5 & Identity

  • did-wallet — Web5 DID Wallet

Self-Hosted Services

  • nextcloud (v28), jellyfin (v10.8.13), immich (release), photoprism (v240915)
  • vaultwarden (v1.30.0-alpine), penpot (v2.4)
  • homeassistant (v2024.1), filebrowser (v2.27.0), searxng (2024.11.17)
  • ollama (v0.5.4), grafana (v10.2.0), portainer (v2.19.4)

Networking

  • tailscale (stable), nginx-proxy-manager (v2.12.1)

Custom & External

  • indeedhub — Bitcoin documentary streaming (custom build)
  • router — Mesh routing and network management
  • botfights — External web app

Manifest Format

Each app has a manifest.yml defining container image, resources, dependencies, security policies, health checks, and network config. See docs/app-manifest-spec.md for the spec.

Quick Reference