copilot-swe-agent[bot] and GitHub
e81f6643fc
fix: desktop-only safety fixes (nix-bitcoin compat, mkForce, conditional caddy)
...
1. Add nix-bitcoin.generateSecrets = lib.mkDefault true global compat
default in role-logic.nix so Desktop Only systems can evaluate while
nix-bitcoin is still globally imported by the flake.
2. Harden Desktop Only role: change all server/node service and feature
disables from lib.mkDefault false to lib.mkForce false so they cannot
be overridden by custom.nix or option defaults.
- sovran_systemsOS.services: synapse, bitcoin, vaultwarden, wordpress, nextcloud
- sovran_systemsOS.features: haven, mempool, element-calling, bitcoin-core
- sovran_systemsOS.web.btcpayserver
3. Make Caddy conditional in caddy.nix:
enable = needsHttpsPorts || extraVhosts != ""
so Caddy does not run on Desktop Only installs with no web services.
2026-07-03 23:35:30 +00:00
copilot-swe-agent[bot] and GitHub
d3beee602d
feat: migrate Matrix federation from port 8448 to .well-known/matrix/server on 443
...
- modules/core/caddy.nix: replace $MATRIX:8448 site with .well-known/matrix/server handler inside $MATRIX vhost
- modules/element-calling.nix: add .well-known/matrix/server respond directive, remove $MATRIX:8448 block
- modules/synapse.nix: remove 8448 TCP/UDP firewall openings
- app/sovran_systemsos_web/server.py: remove _PORTS_MATRIX_FEDERATION constant, set matrix-synapse.service to [], simplify api_service_detail to only check LiveKit extra ports
- app/sovran_systemsos_web/static/onboarding.js: remove 8448 row from Step 4, update totals to 3/8 (3 required + 5 optional)
2026-06-13 14:52:26 +00:00
d500d15e12
fix(caddy): preserve hub session cookie on mDNS vhost
...
Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/45cc1510-356d-4d59-a6d2-b9b4903cff23
Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com >
2026-04-17 22:56:23 +00:00
cdb93ad8dc
fix: detect existing Nextcloud/WordPress installs and add dedicated php-fpm pools
...
Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/6d5b7710-ee06-40ff-8975-f8edca8b879f
Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com >
2026-04-17 03:51:10 +00:00
b86fe94d82
Fix: BTCPay off by default in Node role, Caddy conditional ACME/ports
...
Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/2e2b84a8-c5e9-4eea-8bee-fc587bb3a6fa
Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com >
2026-04-13 22:55:37 +00:00
fb4c268b8e
Fix /var/lib/domains ownership and WordPress ADMIN_EMAIL generation
...
Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/755b414e-9b63-448b-a57c-41d0ca45b5eb
Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com >
2026-04-08 16:09:10 +00:00
a2d2dac2b9
Add cache-busting and Clear-Site-Data headers for sovransystemsos.local browser access
...
Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/0e1cbb58-3e7f-412b-be95-8907caaab6f3
Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com >
2026-04-08 14:52:13 +00:00
naturallaw777
8839620e63
updated caddy.nix
2026-04-07 17:36:26 -05:00
dd8867b52f
feat: add sovran_systemsOS.caddy.extraVirtualHosts NixOS option
...
Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/e966dd20-b74e-4ec5-b4db-68aa06129162
Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com >
2026-04-07 13:06:35 +00:00
6584b63c36
Revert commit 7c047a1: restore LAN access to Hub, RTL, and Mempool
...
Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/c92f1a7f-7c42-44f1-a86d-089383bafc94
Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com >
2026-04-05 14:43:49 +00:00
7c047a16b7
Security: restrict RTL, Mempool ports to LAN-only; remove global firewall rules
...
Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/1110322d-bc41-4d5d-9a4c-e5f7a5d2ef57
Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com >
2026-04-05 14:29:09 +00:00
ed1548ea81
Add Avahi mDNS hostName override and Caddy .local block for sovransystemsos.local LAN access
...
Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/ca3945d7-a2cb-4121-bd89-a5e3fe31fc47
Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com >
2026-04-04 00:40:24 +00:00
0a323d7b3c
Revert hostName/mDNS/Caddy .local block changes from PR #34
...
Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/8d17fed2-7329-442e-bfa5-a96a38fb31e4
Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com >
2026-04-04 00:24:10 +00:00
08452e06cc
feat: enable mDNS (Avahi) and local reverse proxy for sovransystemsos.local
...
Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/4159c571-2bfb-48fc-a6bc-e0765ef88ef6
Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com >
2026-04-03 21:08:21 +00:00
e6cdb3b840
Add RTL and Mempool LAN reverse proxies, open firewall ports
...
Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/d29c1b82-a70e-4092-88c7-b521a1b3cac3
Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com >
2026-04-03 15:21:01 +00:00
naturallaw777
8161796fdb
fixed roles
2026-03-27 15:42:21 -05:00
naturallaw777
aaed7170f5
fixed caddy
2026-03-27 15:21:15 -05:00
naturallaw777
3a77231a1e
ownership
2026-03-27 15:00:05 -05:00
naturallaw777
e1e9376792
initial retooling
2026-03-27 14:23:08 -05:00
copilot-swe-agent[bot]andGitHub
naturallaw777