7beb1dbc72
Add systemd.tmpfiles.rules for Bitcoin/Electrs directory permissions
...
Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/ea46340b-7cf5-404b-9cef-b5ed1fcb2ecb
Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com >
2026-04-07 20:21:07 +00:00
copilot-swe-agent[bot] and GitHub
645237fb94
Initial plan
2026-04-07 20:20:01 +00:00
Sovran_Systems and GitHub
9d9e5da628
Merge pull request #127 from naturallaw777/copilot/update-api-password-check
...
Use /etc/shadow as authoritative source for factory default password detection
2026-04-07 13:55:53 -05:00
8633b74f56
Use /etc/shadow as source of truth for factory default password detection
...
- server.py: add _is_free_password_default() helper that reads /etc/shadow
and hashes known defaults ("free", "gosovransystems") via crypt module;
update api_password_is_default to use it instead of reading the secrets file
- factory-seal.nix: replace file-based free-password check with shadow-based
cryptographic check using python3 + crypt module; add pkgs.python3 to path;
pass values via env vars to avoid shell expansion of hash $ characters
Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/31e6fc93-8b4b-47af-9c47-568da0905301
Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com >
2026-04-07 18:50:16 +00:00
copilot-swe-agent[bot] and GitHub
38eb89538f
Initial plan
2026-04-07 18:46:24 +00:00
Sovran_Systems and GitHub
23c1c51ae2
Merge pull request #126 from naturallaw777/copilot/fix-security-warning-reappearance
...
Fix legacy security warning reappearing on every reboot after password change
2026-04-07 13:29:32 -05:00
4328eb3363
Avoid storing password in variable to prevent process listing exposure
...
Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/c18311e4-609d-4edf-a2a1-a018baede373
Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com >
2026-04-07 18:27:32 +00:00
79e68e7d33
Fix security warning reappearing after every reboot
...
Add two early-exit checks in sovran-legacy-security-check before the
legacy fallthrough block:
1. Exit if /var/lib/sovran/onboarding-complete exists (Hub onboarding done)
2. Exit if /var/lib/secrets/free-password exists and is not "free" (password changed)
This prevents the boot-time service from overwriting the security-status
file that /api/change-password clears after a successful password change.
Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/c18311e4-609d-4edf-a2a1-a018baede373
Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com >
2026-04-07 18:26:54 +00:00
copilot-swe-agent[bot] and GitHub
01d009ec3b
Initial plan
2026-04-07 18:25:47 +00:00
naturallaw777
a3cda9cc2e
update flake
2026-04-07 13:14:21 -05:00
naturallaw777
9f7b9e8c7a
update flake
2026-04-07 13:13:06 -05:00
naturallaw777
a6ca190dbf
update flake and installer
2026-04-07 13:11:39 -05:00
Sovran_Systems and GitHub
df828d760a
Merge pull request #125 from naturallaw777/copilot/update-security-check-for-unsealed-state
...
[WIP] Update sovran-legacy-security-check to warn on unsealed state
2026-04-07 12:50:45 -05:00
40413118f8
Detect and warn when machine was set up without factory seal
...
Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/169de2bb-0655-4504-a270-8c0341c0d3dd
Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com >
2026-04-07 17:48:38 +00:00
copilot-swe-agent[bot] and GitHub
38cdd93ef0
Initial plan
2026-04-07 17:45:41 +00:00
Sovran_Systems and GitHub
2c99827875
Merge pull request #124 from naturallaw777/copilot/add-password-creation-step-onboarding
...
Add password creation step to first-boot onboarding wizard
2026-04-07 12:45:34 -05:00
78b70eeada
feat: add password creation step to onboarding wizard ( #2 )
...
- Add GET /api/security/password-is-default endpoint in server.py
- Add Step 2 (Create Your Password) to onboarding wizard HTML
- Renumber old steps: Domains→3, Ports→4, Complete→5
- Add 5th step dot indicator
- Update onboarding.js: TOTAL_STEPS=5, ROLE_SKIP_STEPS=[3,4] for desktop/node
- Add loadStep2/saveStep2 for password step with smart default detection
- Rename old step functions to loadStep3/saveStep3/loadStep4
- Add password form CSS styles in onboarding.css
Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/74a30916-fb2d-4f1d-9763-e380b1aa5540
Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com >
2026-04-07 17:36:59 +00:00
copilot-swe-agent[bot] and GitHub
700476d823
Initial plan
2026-04-07 17:29:46 +00:00
Sovran_Systems and GitHub
250bf83802
Merge pull request #122 from naturallaw777/copilot/fix-installer-create-password-step
...
Fix installer password step: replace chroot+sh with direct chpasswd --root
2026-04-07 12:17:24 -05:00
99b299ece3
Fix chpasswd: run directly from host with --root /mnt, no chroot needed
...
Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/3ff98bf4-8f62-4c81-90fd-36854e88266f
Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com >
2026-04-07 17:14:32 +00:00
copilot-swe-agent[bot] and GitHub
6dc591c053
Initial plan
2026-04-07 17:13:16 +00:00
Sovran_Systems and GitHub
4f5d14ee12
Merge pull request #121 from naturallaw777/copilot/fix-change-password-form-issues
...
Fix System Passwords change-password form: chpasswd path on NixOS, show/hide toggle, UX clarity
2026-04-07 12:03:23 -05:00
38423730c8
Fix chpasswd path on NixOS, add password toggle/hints/validation in change-password form
...
Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/de03873d-5cdb-4929-bd4a-4d306916b525
Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com >
2026-04-07 17:01:54 +00:00
copilot-swe-agent[bot] and GitHub
2871586048
Initial plan
2026-04-07 16:57:23 +00:00
Sovran_Systems and GitHub
ad0723c257
Merge pull request #119 from naturallaw777/copilot/fix-change-passwords-button
...
[WIP] Fix non-functional change passwords button in Hub
2026-04-07 11:45:15 -05:00
640a2c24a0
Fix Change Passwords button: add API endpoint, system password modal, fix security banner link
...
Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/bf43bea9-9f93-4f7b-b6fd-c76714e7f25b
Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com >
2026-04-07 16:44:57 +00:00
Sovran_Systems and GitHub
244b2763e1
Merge pull request #120 from naturallaw777/copilot/fix-installer-password-step
...
[WIP] Fix installer failure at 'Create Password' step
2026-04-07 11:44:49 -05:00
ac2355f18e
Fix chpasswd: find binary in Nix store and pipe password inline
...
Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/630a25f6-417a-47de-b163-b519252b403c
Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com >
2026-04-07 16:43:50 +00:00
copilot-swe-agent[bot] and GitHub
4419049ffa
Initial plan
2026-04-07 16:42:51 +00:00
copilot-swe-agent[bot] and GitHub
b005d264ea
Initial plan
2026-04-07 16:41:02 +00:00
Sovran_Systems and GitHub
7a012f3cac
Merge pull request #118 from naturallaw777/copilot/fix-update-status-handling
...
[WIP] Fix update status handling for interrupted builds
2026-04-07 11:29:49 -05:00
a30d554cf1
fix: recover stale RUNNING status files on Hub server startup
...
Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/22f9df39-fb39-4ffb-8c6b-c7323a894bee
Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com >
2026-04-07 16:29:08 +00:00
copilot-swe-agent[bot] and GitHub
bf10bd06c0
Initial plan
2026-04-07 16:26:26 +00:00
Sovran_Systems and GitHub
09e20b28ef
Merge pull request #117 from naturallaw777/copilot/remove-security-warning-modal
...
[WIP] Remove legacy password warning modal and add inline message
2026-04-07 11:17:56 -05:00
8e67e2b8bf
Replace security warning modal with inline banner in Preferences section
...
Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/e7946288-08c7-4081-85dd-6780f1eba17a
Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com >
2026-04-07 16:17:23 +00:00
copilot-swe-agent[bot] and GitHub
475f1d27e8
Initial plan
2026-04-07 16:14:42 +00:00
Sovran_Systems and GitHub
c0f8081f60
Merge pull request #115 from naturallaw777/copilot/add-password-warning-screen
...
[WIP] Add old password warning screen for legacy machines
2026-04-07 10:50:11 -05:00
Sovran_Systems and GitHub
5fb00bec41
Merge pull request #116 from naturallaw777/copilot/fix-installer-password-error
...
Fix installer password step: replace bare chroot with nixos-enter
2026-04-07 10:49:31 -05:00
52b1d059b8
feat: add legacy security warning API and UI modal for pre-factory-seal machines
...
Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/f7c8f11b-873b-403f-ac55-8b5b7cd9f1fb
Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com >
2026-04-07 15:49:25 +00:00
500bb44e96
Fix chpasswd not found by using nixos-enter instead of bare chroot
...
Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/1bb103de-c4a5-4701-b1b8-6aad670b97c3
Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com >
2026-04-07 15:45:30 +00:00
copilot-swe-agent[bot] and GitHub
a5940dc020
Initial plan
2026-04-07 15:44:31 +00:00
copilot-swe-agent[bot] and GitHub
1d35818d7c
Initial plan
2026-04-07 15:43:22 +00:00
naturallaw777
d43687c3ad
update flake
2026-04-07 10:13:24 -05:00
Sovran_Systems and GitHub
b45b7c9355
Merge pull request #113 from naturallaw777/copilot/remove-pdf-references
...
Rename credentials-pdf.nix → credentials.nix and remove all pdf references
2026-04-07 10:06:28 -05:00
naturallaw777
e2c1493eb2
removed erroniousfile
2026-04-07 10:05:37 -05:00
41b326ecf3
Remove all PDF references: rename credentials-pdf.nix and update references
...
Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/150954c9-65a0-4d5b-b8e2-08f301f07511
Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com >
2026-04-07 15:04:33 +00:00
copilot-swe-agent[bot] and GitHub
0f648cc995
Initial plan
2026-04-07 15:02:58 +00:00
Sovran_Systems and GitHub
0b04ae66c4
Merge pull request #112 from naturallaw777/copilot/add-zeus-connect-setup-service
...
[WIP] Add zeus-connect-setup service to wallet autoconnect module
2026-04-07 09:54:16 -05:00
9d12952113
Add zeus-connect-setup service and timer to wallet-autoconnect.nix
...
Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/6b3d9c59-40e1-45c1-93f9-a5ba6547567b
Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com >
2026-04-07 14:52:40 +00:00
copilot-swe-agent[bot] and GitHub
b3622fe099
Initial plan
2026-04-07 14:51:00 +00:00