6 Commits

Include renames

Author	SHA1	Message	Date
3 people	947c04834d	Fix all 8 security hardening blockers for PR #423 ... Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com>	2026-08-11 15:38:08 +00:00
naturallaw777	894707a87c	Correctly escape DDNS placeholder in Nix string	2026-08-11 10:11:44 -05:00
naturallaw777	43fc01d350	Fix Nix interpolation in DDNS runner	2026-08-11 10:06:32 -05:00
3 people	a111de1ece	Security hardening: fix all 8 blocking findings for PR #419 ... Fix 1: Update support.js to collect SSH public key and POST JSON Fix 2: Legacy njalla.sh migration - parse safely, archive non-executable, replace cron with systemd timer Fix 3: DDNS SSRF prevention - allowlist only njal.la, reject other hosts, disable curl redirects Fix 4: Legacy root support-key removal migration (_remove_legacy_root_support_key) Fix 5: Automatic support-key expiration (expires_at + _expire_support_if_stale) Fix 6: Move security helpers to security_helpers.py, tests import production code Fix 7: Real NIP-19/Bech32 npub validation (_bech32_decode + _validate_npub) Fix 8: Replace journalctl sudo wildcard with restricted sovran-journal-helper.py Also: Make _write_hub_overrides() atomic with tempfile+os.replace 94 tests passing Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com>	2026-08-11 12:07:18 +00:00
3 people	f58f6a4c41	Remove redundant terminal domain setup script and update stale references ... Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/ed7fee4d-b50e-4387-8eb6-46840b9d930f Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com>	2026-04-06 23:27:52 +00:00
naturallaw777	61eb338990	file name change	2026-03-27 19:22:41 -05:00