naturallaw777
587c19c2a5
fix(hub): persistent browser profile so logout survives window reopen
...
The Hub launcher used an ephemeral /tmp profile deleted on exit, which
wiped the hub_manual_logout marker cookie. On reopen, /auto-login minted a
new session and logged the user straight back in without a password.
Use a persistent per-user profile under XDG_STATE_HOME and drop the
deletion trap so the logout marker survives close/reopen. Keep
--skip-origin-startup-dialog. Adds regression tests.
2026-08-15 17:22:58 -05:00
naturallaw777
c862ed5806
Skip Brave Origin startup dialog in Hub launcher
2026-08-15 17:15:12 -05:00
naturallaw777
5edf594eac
Switch default browser to Brave Origin (brave-origin)
2026-08-15 16:58:33 -05:00
naturallaw777
de32699539
fix(hub): recover from expired sessions and preserve logout
2026-08-15 16:43:37 -05:00
naturallaw777
30b753ec40
feat: add Bitcoin Core Tor IBD gossip control
2026-08-15 14:44:13 -05:00
naturallaw777
3541f6baa1
Replace Bitcoin Knots with Bitcoin Core
2026-08-13 13:43:17 -05:00
naturallaw777
8f89a4350a
fix: prevent Bitcoin Core switch from hanging the Hub UI
2026-08-11 18:47:40 -05:00
naturallaw777
cb2b49174e
docs: update CHANGELOG.md for v1.1.0
2026-08-11 13:51:41 -05:00
naturallaw777
6563acef0a
docs: update README ISO download links to v1.1.0
2026-08-11 13:51:41 -05:00
naturallaw777
a053ee77fb
chore: bump VERSION to v1.1.0 for ISO naming
2026-08-11 13:51:41 -05:00
naturallaw777
61287dfece
perf: speed up Hub service status loading
2026-08-11 13:35:59 -05:00
naturallaw777
4193c56397
fix: correct RTL and Mempool Hub versions
2026-08-11 13:07:28 -05:00
naturallaw777
f85f1a2c9f
Update Documentation
2026-08-11 12:18:21 -05:00
naturallaw777
894707a87c
Correctly escape DDNS placeholder in Nix string
2026-08-11 10:11:44 -05:00
naturallaw777
43fc01d350
Fix Nix interpolation in DDNS runner
2026-08-11 10:06:32 -05:00
naturallaw777
1f0a1ab865
Import consolidated security hardening from PRs #419 and #420
2026-08-11 09:57:06 -05:00
naturallaw777
a10ef95b5c
chore: nix flake update - drop nix-bitcoin
2026-08-09 20:19:35 -05:00
naturallaw777
b64061135a
fix(scripts): keep ISO artifacts out of the repo and auto-update README on release
2026-08-07 18:31:20 -05:00
naturallaw777
8b169a04e3
chore: release v1.0.6
2026-08-07 16:11:59 -05:00
naturallaw777
d0c2ea933c
docs: update CHANGELOG.md for v1.0.6
2026-08-07 16:03:21 -05:00
naturallaw777
b66c50c195
fix(scripts): resolve tag range detection and improve release diagnostics
2026-08-07 16:02:09 -05:00
naturallaw777
1737e6c7d8
fix(scripts): add token scope diagnostics and un-silence gh release errors
2026-08-07 15:59:22 -05:00
naturallaw777
782b279e0a
docs: update CHANGELOG.md for v1.0.6
2026-08-07 15:55:26 -05:00
naturallaw777
564e9835ea
chore: bump VERSION to v1.0.6 for ISO naming
2026-08-07 15:55:26 -05:00
naturallaw777
9df52256d4
fix: harden error handling and sanitize exception details across security endpoints (CWE-209)
2026-08-07 15:36:44 -05:00
naturallaw777
9051aed737
fix: sanitize exception handling in verify-integrity and security-reset (CWE-209)
2026-08-07 14:58:24 -05:00
naturallaw777
899f570ded
fix: sanitize api_security_reset errors to prevent exception information exposure (CWE-209)
2026-08-07 14:31:38 -05:00
naturallaw777
56db634900
fix: use canonical prefix containment check for CodeQL path-injection
2026-08-07 14:22:44 -05:00
naturallaw777
3522270373
fix: pass sanitized abs_path to os.chown to resolve CodeQL path injection at 4338
2026-08-07 14:17:34 -05:00
naturallaw777
4555764d87
fix: add CodeQL-recognized path sanitization for domain_name
2026-08-07 13:44:26 -05:00
naturallaw777
5130076400
fix: add CodeQL-recognized path sanitization for domain_name
2026-08-07 13:33:55 -05:00
naturallaw777
f0a640519d
fix: remove domain substring check for CodeQL incomplete-url
2026-08-07 13:26:41 -05:00
naturallaw777
a14ef03d40
fix: use sentinel for njalla header check (CodeQL incomplete-url-substring)
2026-08-07 13:07:06 -05:00
naturallaw777
1ecf245a07
fix: prevent reflected XSS in lnurl-qr print endpoint
2026-08-07 12:59:08 -05:00
naturallaw777
bd0d2cd812
removed temp patch file
2026-08-07 12:16:11 -05:00
naturallaw777
592f2bd12f
fix: separate web auth hash from system password file
...
- Add FREE_PASSWORD_FILE_WEB for scrypt hashes
- Legacy fallback + auto-migrate in _check_password
- chpasswd sync in api_change_password and security reset endpoint
2026-08-07 12:04:07 -05:00
naturallaw777
501c5abe64
docs: add SECURITY.md detailing security policy and best practices
2026-08-06 14:09:35 -05:00
naturallaw777
4d1c3565c9
docs: update CHANGELOG.md for v1.0.5
2026-08-04 09:33:09 -05:00
naturallaw777
3678aedc88
chore: bump VERSION to v1.0.5 for ISO naming
2026-08-04 09:33:09 -05:00
naturallaw777
991c790816
Nixpkgs Update
2026-08-04 09:07:09 -05:00
naturallaw777
a343afffaa
Nixpkgs Upddate
2026-08-03 18:06:18 -05:00
naturallaw777
4a6ba3eacc
docs: update CHANGELOG.md for v1.0.4
2026-07-29 10:19:00 -05:00
naturallaw777
537d4781f2
chore: bump VERSION to v1.0.4 for ISO naming
2026-07-29 10:19:00 -05:00
naturallaw777
1a6e456d06
Updated Contributing
2026-07-27 18:22:40 -05:00
naturallaw777
ccda5e3246
Updated Readme
2026-07-27 18:04:17 -05:00
naturallaw777
aef7582083
Added contributing and updated readme
2026-07-27 17:56:38 -05:00
naturallaw777
0f8c15e6a1
removed .tests, not needed
2026-07-27 10:35:54 -05:00
naturallaw777
586625f110
removed .github, not needed
2026-07-27 10:34:33 -05:00
naturallaw777
c78370647a
removed nix directory, not needed
2026-07-27 10:33:32 -05:00
naturallaw777
e30610ddac
removed docs/ai added not necessary
2026-07-27 10:29:34 -05:00
naturallaw777
1503060f7c
fixed duplicate systemd lnd strings
2026-07-27 09:40:32 -05:00
naturallaw777
72f4a7b39e
updated nixpkgs and btc clients
2026-07-25 09:37:18 -05:00
naturallaw777
e0656b6cc0
nixpkgs update
2026-07-19 16:59:19 -05:00
naturallaw777
d99d7213ec
updated readme
2026-07-15 15:25:14 -05:00
naturallaw777
08f9bf9850
nixpkgs update and btc client update
2026-07-13 13:02:42 -05:00
naturallaw777
0988a3fb6d
Merge remote-tracking branch 'github/main' into staging-dev
2026-07-13 12:46:51 -05:00
naturallaw777
f9044466a1
Update nixpkgs
2026-07-04 11:25:52 -05:00
naturallaw777
4aaf10f3a0
Update nixpkgs
2026-06-30 12:14:53 -05:00
naturallaw777
83c9acb511
updated nixpkgs and btc clients
2026-06-25 16:26:43 -05:00
naturallaw777
bf9c6dd627
added onlyoffice
2026-06-24 13:19:41 -05:00
naturallaw777
1a8b18f5bc
removed uneeded livekit-cli
2026-06-18 16:51:15 -05:00
naturallaw777
4329dde0a1
nixpkgs update
2026-06-18 16:05:02 -05:00
naturallaw777
b93e8202d1
nixpkgs update
2026-06-09 11:03:40 -05:00
naturallaw777
6c48a9e239
sync and removed element-desktop and bitwarden desktop
2026-06-05 10:29:20 -05:00
naturallaw777
2903a61944
updated nix packages
2026-06-05 10:27:51 -05:00
naturallaw777
d9811d2375
updated stable branch
2026-06-05 10:04:13 -05:00
naturallaw777
7f185b0355
moved to new bitcoin-knots with bip110
2026-06-04 16:06:58 -05:00
naturallaw777
2e9a2644d9
updated config for gnome 50 support
2026-05-27 11:15:09 -05:00
naturallaw777
85d1f5a0c2
overall nixpkgs update
2026-05-27 09:35:36 -05:00
naturallaw777
9e3a9fcdc3
update readme
2026-05-23 11:28:02 -05:00
naturallaw777
c0eb237e6a
overall nixpkgs update
2026-05-21 17:02:38 -05:00
naturallaw777
690b5d5a8d
nixpkgs update
2026-05-14 10:17:11 -05:00
naturallaw777
eff48cafa2
blocked rxrpc kernal moduel
2026-05-08 15:20:18 -05:00
naturallaw777
c616cbed9b
updated nixpkgs
2026-05-08 08:04:35 -05:00
naturallaw777
970b9a6741
fix for gnome keyring
2026-04-30 11:42:35 -05:00
naturallaw777
64371c5572
fix for gnome keyring
2026-04-30 10:46:58 -05:00
naturallaw777
1aeab706b6
nix package update
2026-04-29 16:10:09 -05:00
naturallaw777
daacc83afc
updated bitcoind for better launch
2026-04-29 16:00:27 -05:00
naturallaw777
18476d208f
bitcon knots fix
2026-04-18 10:08:20 -05:00
naturallaw777
c275a9caa3
nixpkgs update
2026-04-18 09:45:57 -05:00
naturallaw777
4d55a98ca1
updated rpc bitcoinnd port
2026-04-17 18:05:24 -05:00
naturallaw777
c3c0a9035c
updated hub to proper bitcoinnd port
2026-04-16 11:30:02 -05:00
naturallaw777
c3b6fc5e3f
updated electrs and bitciond
2026-04-16 11:17:33 -05:00
naturallaw777
b4b62f18a8
updated electrs for localhost
2026-04-15 19:18:17 -05:00
naturallaw777
b7df44eb09
updated bitcoind and eletrs for localhost
2026-04-15 19:13:33 -05:00
naturallaw777
b10c9d4ff6
updated elementcalling firewall typo
2026-04-14 13:30:27 -05:00
naturallaw777
5ee1c06106
updated elementcalling firewall
2026-04-14 13:28:35 -05:00
naturallaw777
717cb43214
nixpkgs update
2026-04-14 08:50:54 -05:00
naturallaw777
19fa297b24
cleaned up code
2026-04-14 08:49:26 -05:00
naturallaw777
b89ce496d3
update readme
2026-04-13 19:59:42 -05:00
naturallaw777
a656c35776
update readme
2026-04-13 19:05:47 -05:00
naturallaw777
61fc7595fb
update readme
2026-04-13 18:50:04 -05:00
naturallaw777
34fa8269e5
updated caddy icon
2026-04-13 18:24:58 -05:00
naturallaw777
c7a7362d7a
readme update
2026-04-12 09:26:15 -05:00
naturallaw777
31bd7c4afc
readme update
2026-04-12 08:32:54 -05:00
naturallaw777
95f7b34ec5
readme update
2026-04-12 08:30:11 -05:00
naturallaw777
800b772998
readme update
2026-04-12 00:11:46 -05:00
naturallaw777
27162616c0
nixpkgs update
2026-04-11 20:21:24 -05:00
naturallaw777
c6231a428f
fixed icon color
2026-04-11 20:12:12 -05:00
naturallaw777
ce1d089193
cleaned up repo
2026-04-11 20:02:43 -05:00
naturallaw777