lfg2025/archy
1
0
Fork 0
Code Issues 20 Pull Requests Actions Packages Projects Releases 61 Wiki Activity
archy/scripts
History
Dorian 02917cc22c fix(fips): app launch ports allowed through the mesh firewall 
The companion opens catalog apps by direct port over the mesh; the
fips0 default-deny baseline blocked every one of them (apps 'stuck'
from the phone, 2026-07-26). Core now writes a second fips.d drop-in
from the generated catalog launch-port list on every install/upgrade.
Service/RPC ports (bitcoind 8332, LND 10009, Tor) stay closed.
generate-app-catalog.py emits the Rust port list alongside the TS one.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-07-26 22:23:46 +01:00
..
archy-dev
feat: add archy-dev CLI scaffold for app developers
2026-03-14 05:47:29 +00:00
lib
app-platform: remove revoked onlyoffice app
2026-06-11 01:03:45 -04:00
resilience
test(resilience): gate host-reboot batch on os-audit (L3 per-boot health)
2026-06-14 08:01:30 -04:00
tor
chore(release): stage v1.7.54-alpha
2026-05-06 09:23:57 -04:00
app-catalog-image-smoke-test.py
chore: baseline codex hardening before lifecycle refactor
2026-05-01 08:52:29 -04:00
app-surface-smoke-test.sh
chore: release v1.7.49-alpha
2026-04-30 16:37:54 -04:00
archipelago-tailscale.service
Enhance README and RPC for package management
2026-02-01 18:46:35 +00:00
archipelago-wg
feat: ISO networking stack — relay + nvpn v0.3.7 + WireGuard
2026-04-08 15:06:27 +02:00
audit-secrets.sh
refactor: update dependencies and remove unused code
2026-03-12 00:19:30 +00:00
bitcoin-stack-lifecycle-test.sh
chore: release v1.7.49-alpha
2026-04-30 16:37:54 -04:00
bootstrap-switchover.sh
chore: purge retired git.tx1138.com registry host from the codebase
2026-07-10 18:55:32 +01:00
build-bitcoin-image.sh
fix(bitcoin): bulletproof multi-version switching (Knots & Core)
2026-06-29 05:46:04 -04:00
build-iso-release.sh
feat(release): gated ISO build pipeline
2026-07-25 16:34:54 -04:00
check-app-catalog-drift.py
feat(pine): 1.3.0 manifests — openwakeword member + live node status on the launcher page
2026-07-22 02:59:34 -04:00
check-release-manifest.sh
chore(release): require curated release notes
2026-05-17 18:59:12 -04:00
configure-tailscale-nginx.sh
Enhance README and RPC for package management
2026-02-01 18:46:35 +00:00
container-doctor.sh
fix: RC hardware-test feedback — mesh serial access, federation.list, masked install errors
2026-07-13 18:08:25 +01:00
container-specs.sh
fix(bitcoin,ui): RAM-aware dbcache to stop swap-thrash 502s + snappier status + icon placeholder
2026-06-18 09:14:47 -04:00
create-release-manifest.sh
chore(release): move artifacts to gitea releases
2026-05-13 14:11:42 -04:00
create-release.sh
fix(release): close two publish-path verification gaps (§B hardening)
2026-07-08 19:04:14 -04:00
debug-frontend.sh
feat: complete Phase 1 foundation hardening + three-mode UI design doc
2026-03-04 05:23:42 +00:00
deploy-bitcoin-knots.sh
chore: purge retired git.tx1138.com registry host from the codebase
2026-07-10 18:55:32 +01:00
deploy-config-defaults.sh
fix: deploy error visibility, trap cleanup, variable quoting, frontend resilience
2026-03-21 02:06:08 +00:00
deploy-config.example
backend: harden rootless app lifecycle orchestration
2026-06-11 00:24:32 -04:00
deploy-tailscale.sh
Merge kiosk-hdmi-audio-fix: PipeWire env, in-process-gpu, asound.conf tracking
2026-07-10 20:19:47 +01:00
deploy-to-target.sh
Merge kiosk-hdmi-audio-fix: PipeWire env, in-process-gpu, asound.conf tracking
2026-07-10 20:19:47 +01:00
dev-container-test.sh
chore: purge retired git.tx1138.com registry host from the codebase
2026-07-10 18:55:32 +01:00
dev-start.sh
fix: ISO boot, container installs, VPN, nginx, companion input
2026-04-10 03:10:49 -04:00
first-boot-containers.sh
fix(iso): make baseline apps work on a fresh install with no internet
2026-07-16 07:31:28 -04:00
fix-indeedhub-containers.sh
backend: harden rootless app lifecycle orchestration
2026-06-11 00:24:32 -04:00
fleet-fips-pair.sh
ops(fips): fleet LAN fast-path pairing script (dev nodes only)
2026-04-19 01:50:20 -04:00
fleet-fips-unpair.sh
fix(ui,ops): TransportPrefsCard import path + fleet unpair script
2026-04-19 02:08:32 -04:00
generate-app-catalog.py
fix(fips): app launch ports allowed through the mesh firewall
2026-07-26 22:23:46 +01:00
generate-app-catalog.sh
docs+catalog: bitcoin multi-version rollout handoff + reproducible generator
2026-06-29 06:02:24 -04:00
image-versions.sh
fix(pine): bump Home Assistant to 2026.7.3 — satellite keepalive support
2026-07-21 21:39:04 +00:00
install-tui-demo.sh
chore: Debian 12 → 13 (Trixie) migration, service hardening
2026-04-09 21:32:08 +02:00
iso-smoke-test.sh
feat(release): gated ISO build pipeline
2026-07-25 16:34:54 -04:00
nginx-app-iframe-patch.conf
Implement multi-container app installation for Immich and Penpot, enhance Docker package scanning, and update Nginx configuration for iframe support
2026-02-25 18:04:41 +00:00
nginx-archipelago-patch.conf
Update Fedimint configuration and enhance onboarding process
2026-02-17 15:03:34 +00:00
nginx-https-app-proxies.conf
app-platform: remove revoked onlyoffice app
2026-06-11 01:03:45 -04:00
nginx-penpot-iframe-patch.conf
Implement multi-container app installation for Immich and Penpot, enhance Docker package scanning, and update Nginx configuration for iframe support
2026-02-25 18:04:41 +00:00
nginx-pwa-snippet.conf
Enhance PWA support with new install prompt and configuration updates
2026-02-18 13:48:45 +00:00
node-profile.sh
fix: companion indicator shows relay state, add node-profile script
2026-04-02 11:14:34 +01:00
optimize-debian.sh
feat: rootless podman, session hardening, boot stability, sidebar fix
2026-03-18 13:53:27 +00:00
ota-crash-guard.sh
feat(update): auto-rollback OTA binaries that crash-loop before they can self-verify
2026-07-18 19:42:54 -04:00
publish-companion-apk.sh
fix(android): force v1+v2+v3 signing & clean-build guards in companion publish
2026-06-26 11:53:25 +01:00
publish-release-assets.sh
fix(release): close two publish-path verification gaps (§B hardening)
2026-07-08 19:04:14 -04:00
reconcile-containers.sh
chore: purge retired git.tx1138.com registry host from the codebase
2026-07-10 18:55:32 +01:00
run-e2e-tests.sh
fix: zero-amount invoices, identity.verify DID extraction, tor service permissions
2026-03-09 09:53:36 +00:00
run-post-install-tests.sh
fix(iso): fail builds on missing VPN binaries, skip units cleanly, invalidate stale rootfs cache
2026-07-20 06:08:04 +01:00
run-tests.sh
test: add CI-compatible test runner script
2026-03-10 23:56:10 +00:00
self-update.sh
chore: purge retired git.tx1138.com registry host from the codebase
2026-07-10 18:55:32 +01:00
setup-aiui-server.sh
fix: WebSocket race conditions, Vue error handler, remove sudo podman, add container health checks
2026-03-21 01:11:05 +00:00
setup-https-dev.sh
chore(release): stage v1.7.52-alpha
2026-05-05 11:29:18 -04:00
setup-target-dev.sh
Refactor configuration and scripts for Archipelago backend and ISO build
2026-02-01 05:42:05 +00:00
sign-catalog.sh
feat(trust): pin release-root anchor + ship signed app-catalog
2026-07-02 09:15:43 -04:00
sign-iso-checksums.sh
feat(iso): per-device secrets on first boot + checksum emission and signing
2026-07-13 13:41:16 +01:00
sign-manifest.sh
feat(trust): verify release-root signature on the OTA manifest
2026-07-02 12:33:01 -04:00
smoke-test.sh
feat: add E2E smoke test script and CI/CD pipeline plan
2026-03-21 03:08:00 +00:00
sync-npm-public-hosts.sh
app-platform: remove unsupported saleor release surface
2026-06-11 01:16:21 -04:00
sync-whats-new.py
feat(release): gate that Settings 'What's New' modal stays in sync with CHANGELOG
2026-06-14 08:31:43 -04:00
tor-helper.sh
fix: systemd resource limits, Tor rotation transition, unwrap elimination, RPC timeouts
2026-03-21 01:46:40 +00:00
trust-archipelago-cert.sh
fix: deploy locking, safe eval replacement, first-boot error handling, script hardening
2026-03-21 01:39:22 +00:00
uptime-monitor.sh
fix: WebSocket race conditions, Vue error handler, remove sudo podman, add container health checks
2026-03-21 01:11:05 +00:00
validate-app-manifest.sh
chore: purge retired git.tx1138.com registry host from the codebase
2026-07-10 18:55:32 +01:00
verify-seed-derivation.py
feat(identity): seed-derivation verifier + KAT; rename "Your DID"→"Node DID"
2026-06-16 10:17:29 -04:00