naturallaw777
a1fa40cacf
fix(hub): derive Restart required from boot default vs running system
...
NixOS already knows whether a reboot is pending: /nix/var/nix/profiles/
system vs /run/current-system. Marker files only the Hub's own updater
wrote desynced for terminal-updated machines (and markers from older
updaters could never clear), pinning the badge on forever. Reconcile
REBOOT_REQUIRED against live state on every read; the stale marker
self-heals to IDLE. The .generation marker write is now informational.
2026-08-19 11:31:29 -05:00
naturallaw777
b6e6adbe31
chore(deps): update RTL to 0.15.10
...
Refresh the RTL source and Node dependency hashes, and align Hub version metadata with the vendored package.
2026-08-18 11:19:23 -05:00
naturallaw777
1ccce429a5
fix(bitcoin): migrate i2pd SAM settings for nixpkgs 26.11
...
nixpkgs commit c8f9654 refactored the services.i2pd module to use
an RFC42-style settings attribute set and removed services.i2pd.proto.
After updating the root nixpkgs input from f13ff45 to ec2d622, the
vendored bitcoind module failed evaluation on the obsolete
services.i2pd.proto.sam.enable definition.
The error occurred even with services.bitcoind.i2p at its false default:
bitcoind was enabled, so NixOS still validated the obsolete option path
inside the conditional i2pd integration.
Read the SAM endpoint from services.i2pd.settings.sam and configure its
new upstream-style fields explicitly. Keep 127.0.0.1:7656, matching the
old typed option defaults that bitcoind uses to generate its i2psam
setting.
This preserves optional I2P support without activating it by default.
i2pd remains disabled until services.bitcoind.i2p is set to true or
"only-outgoing".
Nixpkgs migration: https://github.com/NixOS/nixpkgs/commit/c8f965411e812060a9377fa4c2d7d0f84e8b10e0
2026-08-18 09:19:15 -05:00
naturallaw777
f832efb0d1
nixpkgs update
2026-08-18 08:59:35 -05:00
naturallaw777
db5b9f6b60
fix(livekit): order turn-setup after network-online to fix boot-time red dot
...
livekit-turn-setup.service detects the primary interface from the IPv4
default route, but had no ordering against network-online.target. With
NetworkManager+DHCP the default route is applied late at boot, so the
oneshot could run before it existed, exit 1, and — being a hard
dependency of livekit.service — take livekit down with it. The Hub then
showed a 'failed' red dot until livekit was restarted manually.
Order both livekit.service and livekit-turn-setup.service after
network-online.target. Also add a bounded retry when copying Caddy's ACME
cert so we never write an empty turn.crt/turn.key on a fresh boot.
2026-08-17 19:07:54 -05:00
naturallaw777
a9ff168fd6
security: prevent LND admin macaroon exposure in curl argv
2026-08-15 23:00:59 -05:00
naturallaw777
b436dbed95
docs: update desktop and Sovran Hub screenshots
2026-08-15 18:53:15 -05:00
naturallaw777
1cf611d44c
chore(release): prepare v1.1.1
2026-08-15 17:49:55 -05:00
naturallaw777
2a1d73af25
Migrate dock/folder/mime entries from brave to brave-origin on upgrade
2026-08-15 17:31:25 -05:00
naturallaw777
587c19c2a5
fix(hub): persistent browser profile so logout survives window reopen
...
The Hub launcher used an ephemeral /tmp profile deleted on exit, which
wiped the hub_manual_logout marker cookie. On reopen, /auto-login minted a
new session and logged the user straight back in without a password.
Use a persistent per-user profile under XDG_STATE_HOME and drop the
deletion trap so the logout marker survives close/reopen. Keep
--skip-origin-startup-dialog. Adds regression tests.
2026-08-15 17:22:58 -05:00
naturallaw777
c862ed5806
Skip Brave Origin startup dialog in Hub launcher
2026-08-15 17:15:12 -05:00
naturallaw777
5edf594eac
Switch default browser to Brave Origin (brave-origin)
2026-08-15 16:58:33 -05:00
naturallaw777
de32699539
fix(hub): recover from expired sessions and preserve logout
2026-08-15 16:43:37 -05:00
naturallaw777
30b753ec40
feat: add Bitcoin Core Tor IBD gossip control
2026-08-15 14:44:13 -05:00
naturallaw777
3541f6baa1
Replace Bitcoin Knots with Bitcoin Core
2026-08-13 13:43:17 -05:00
naturallaw777
8f89a4350a
fix: prevent Bitcoin Core switch from hanging the Hub UI
2026-08-11 18:47:40 -05:00
naturallaw777
cb2b49174e
docs: update CHANGELOG.md for v1.1.0
2026-08-11 13:51:41 -05:00
naturallaw777
6563acef0a
docs: update README ISO download links to v1.1.0
2026-08-11 13:51:41 -05:00
naturallaw777
a053ee77fb
chore: bump VERSION to v1.1.0 for ISO naming
2026-08-11 13:51:41 -05:00
naturallaw777
61287dfece
perf: speed up Hub service status loading
2026-08-11 13:35:59 -05:00
naturallaw777
4193c56397
fix: correct RTL and Mempool Hub versions
2026-08-11 13:07:28 -05:00
naturallaw777
f85f1a2c9f
Update Documentation
2026-08-11 12:18:21 -05:00
naturallaw777
894707a87c
Correctly escape DDNS placeholder in Nix string
2026-08-11 10:11:44 -05:00
naturallaw777
43fc01d350
Fix Nix interpolation in DDNS runner
2026-08-11 10:06:32 -05:00
naturallaw777
1f0a1ab865
Import consolidated security hardening from PRs #419 and #420
2026-08-11 09:57:06 -05:00
naturallaw777
a10ef95b5c
chore: nix flake update - drop nix-bitcoin
2026-08-09 20:19:35 -05:00
naturallaw777
b64061135a
fix(scripts): keep ISO artifacts out of the repo and auto-update README on release
2026-08-07 18:31:20 -05:00
naturallaw777
8b169a04e3
chore: release v1.0.6
2026-08-07 16:11:59 -05:00
naturallaw777
d0c2ea933c
docs: update CHANGELOG.md for v1.0.6
2026-08-07 16:03:21 -05:00
naturallaw777
b66c50c195
fix(scripts): resolve tag range detection and improve release diagnostics
2026-08-07 16:02:09 -05:00
naturallaw777
1737e6c7d8
fix(scripts): add token scope diagnostics and un-silence gh release errors
2026-08-07 15:59:22 -05:00
naturallaw777
782b279e0a
docs: update CHANGELOG.md for v1.0.6
2026-08-07 15:55:26 -05:00
naturallaw777
564e9835ea
chore: bump VERSION to v1.0.6 for ISO naming
2026-08-07 15:55:26 -05:00
naturallaw777
9df52256d4
fix: harden error handling and sanitize exception details across security endpoints (CWE-209)
2026-08-07 15:36:44 -05:00
naturallaw777
9051aed737
fix: sanitize exception handling in verify-integrity and security-reset (CWE-209)
2026-08-07 14:58:24 -05:00
naturallaw777
899f570ded
fix: sanitize api_security_reset errors to prevent exception information exposure (CWE-209)
2026-08-07 14:31:38 -05:00
naturallaw777
56db634900
fix: use canonical prefix containment check for CodeQL path-injection
2026-08-07 14:22:44 -05:00
naturallaw777
3522270373
fix: pass sanitized abs_path to os.chown to resolve CodeQL path injection at 4338
2026-08-07 14:17:34 -05:00
naturallaw777
4555764d87
fix: add CodeQL-recognized path sanitization for domain_name
2026-08-07 13:44:26 -05:00
naturallaw777
5130076400
fix: add CodeQL-recognized path sanitization for domain_name
2026-08-07 13:33:55 -05:00
naturallaw777
f0a640519d
fix: remove domain substring check for CodeQL incomplete-url
2026-08-07 13:26:41 -05:00
naturallaw777
a14ef03d40
fix: use sentinel for njalla header check (CodeQL incomplete-url-substring)
2026-08-07 13:07:06 -05:00
naturallaw777
1ecf245a07
fix: prevent reflected XSS in lnurl-qr print endpoint
2026-08-07 12:59:08 -05:00
naturallaw777
bd0d2cd812
removed temp patch file
2026-08-07 12:16:11 -05:00
naturallaw777
592f2bd12f
fix: separate web auth hash from system password file
...
- Add FREE_PASSWORD_FILE_WEB for scrypt hashes
- Legacy fallback + auto-migrate in _check_password
- chpasswd sync in api_change_password and security reset endpoint
2026-08-07 12:04:07 -05:00
naturallaw777
501c5abe64
docs: add SECURITY.md detailing security policy and best practices
2026-08-06 14:09:35 -05:00
naturallaw777
4d1c3565c9
docs: update CHANGELOG.md for v1.0.5
2026-08-04 09:33:09 -05:00
naturallaw777
3678aedc88
chore: bump VERSION to v1.0.5 for ISO naming
2026-08-04 09:33:09 -05:00
naturallaw777
991c790816
Nixpkgs Update
2026-08-04 09:07:09 -05:00
naturallaw777
a343afffaa
Nixpkgs Upddate
2026-08-03 18:06:18 -05:00
naturallaw777
4a6ba3eacc
docs: update CHANGELOG.md for v1.0.4
2026-07-29 10:19:00 -05:00
naturallaw777
537d4781f2
chore: bump VERSION to v1.0.4 for ISO naming
2026-07-29 10:19:00 -05:00
naturallaw777
1a6e456d06
Updated Contributing
2026-07-27 18:22:40 -05:00
naturallaw777
ccda5e3246
Updated Readme
2026-07-27 18:04:17 -05:00
naturallaw777
aef7582083
Added contributing and updated readme
2026-07-27 17:56:38 -05:00
naturallaw777
0f8c15e6a1
removed .tests, not needed
2026-07-27 10:35:54 -05:00
naturallaw777
586625f110
removed .github, not needed
2026-07-27 10:34:33 -05:00
naturallaw777
c78370647a
removed nix directory, not needed
2026-07-27 10:33:32 -05:00
naturallaw777
e30610ddac
removed docs/ai added not necessary
2026-07-27 10:29:34 -05:00
naturallaw777
1503060f7c
fixed duplicate systemd lnd strings
2026-07-27 09:40:32 -05:00
naturallaw777
72f4a7b39e
updated nixpkgs and btc clients
2026-07-25 09:37:18 -05:00
naturallaw777
e0656b6cc0
nixpkgs update
2026-07-19 16:59:19 -05:00
naturallaw777
d99d7213ec
updated readme
2026-07-15 15:25:14 -05:00
naturallaw777
08f9bf9850
nixpkgs update and btc client update
2026-07-13 13:02:42 -05:00
naturallaw777
0988a3fb6d
Merge remote-tracking branch 'github/main' into staging-dev
2026-07-13 12:46:51 -05:00
naturallaw777
f9044466a1
Update nixpkgs
2026-07-04 11:25:52 -05:00
naturallaw777
4aaf10f3a0
Update nixpkgs
2026-06-30 12:14:53 -05:00
naturallaw777
83c9acb511
updated nixpkgs and btc clients
2026-06-25 16:26:43 -05:00
naturallaw777
bf9c6dd627
added onlyoffice
2026-06-24 13:19:41 -05:00
naturallaw777
1a8b18f5bc
removed uneeded livekit-cli
2026-06-18 16:51:15 -05:00
naturallaw777
4329dde0a1
nixpkgs update
2026-06-18 16:05:02 -05:00
naturallaw777
b93e8202d1
nixpkgs update
2026-06-09 11:03:40 -05:00
naturallaw777
6c48a9e239
sync and removed element-desktop and bitwarden desktop
2026-06-05 10:29:20 -05:00
naturallaw777
2903a61944
updated nix packages
2026-06-05 10:27:51 -05:00
naturallaw777
d9811d2375
updated stable branch
2026-06-05 10:04:13 -05:00
naturallaw777
7f185b0355
moved to new bitcoin-knots with bip110
2026-06-04 16:06:58 -05:00
naturallaw777
2e9a2644d9
updated config for gnome 50 support
2026-05-27 11:15:09 -05:00
naturallaw777
85d1f5a0c2
overall nixpkgs update
2026-05-27 09:35:36 -05:00
naturallaw777
9e3a9fcdc3
update readme
2026-05-23 11:28:02 -05:00
naturallaw777
c0eb237e6a
overall nixpkgs update
2026-05-21 17:02:38 -05:00
naturallaw777
690b5d5a8d
nixpkgs update
2026-05-14 10:17:11 -05:00
naturallaw777
eff48cafa2
blocked rxrpc kernal moduel
2026-05-08 15:20:18 -05:00
naturallaw777
c616cbed9b
updated nixpkgs
2026-05-08 08:04:35 -05:00
naturallaw777
970b9a6741
fix for gnome keyring
2026-04-30 11:42:35 -05:00
naturallaw777
64371c5572
fix for gnome keyring
2026-04-30 10:46:58 -05:00
naturallaw777
1aeab706b6
nix package update
2026-04-29 16:10:09 -05:00
naturallaw777
daacc83afc
updated bitcoind for better launch
2026-04-29 16:00:27 -05:00
naturallaw777
18476d208f
bitcon knots fix
2026-04-18 10:08:20 -05:00
naturallaw777
c275a9caa3
nixpkgs update
2026-04-18 09:45:57 -05:00
naturallaw777
4d55a98ca1
updated rpc bitcoinnd port
2026-04-17 18:05:24 -05:00
naturallaw777
c3c0a9035c
updated hub to proper bitcoinnd port
2026-04-16 11:30:02 -05:00
naturallaw777
c3b6fc5e3f
updated electrs and bitciond
2026-04-16 11:17:33 -05:00
naturallaw777
b4b62f18a8
updated electrs for localhost
2026-04-15 19:18:17 -05:00
naturallaw777
b7df44eb09
updated bitcoind and eletrs for localhost
2026-04-15 19:13:33 -05:00
naturallaw777
b10c9d4ff6
updated elementcalling firewall typo
2026-04-14 13:30:27 -05:00
naturallaw777
5ee1c06106
updated elementcalling firewall
2026-04-14 13:28:35 -05:00
naturallaw777
717cb43214
nixpkgs update
2026-04-14 08:50:54 -05:00
naturallaw777
19fa297b24
cleaned up code
2026-04-14 08:49:26 -05:00
naturallaw777
b89ce496d3
update readme
2026-04-13 19:59:42 -05:00
naturallaw777
a656c35776
update readme
2026-04-13 19:05:47 -05:00
naturallaw777