Sovran_Systems/Sovran_SystemsOS
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 2 Wiki Activity
2,030 Commits 3 Branches 6 Tags
f37654f3ce03e2c7d73eccc0f22e9dad1f382496
Commit Graph
2030 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
copilot-swe-agent[bot]andGitHub 9dd4568449 chore: harden ssh bootstrap script 2026-06-24 22:15:24 +00:00
copilot-swe-agent[bot]andGitHub ece53d313d chore: log legacy ssh key regeneration 2026-06-24 22:14:42 +00:00
copilot-swe-agent[bot]andGitHub 42a373e50e Initial plan 2026-06-24 22:14:35 +00:00
copilot-swe-agent[bot]andGitHub d1bca416cf fix: repair legacy factory ssh key passphrases 2026-06-24 22:14:06 +00:00
copilot-swe-agent[bot]andGitHub 4f7b752b3a Initial plan 2026-06-24 22:12:39 +00:00
Sovran SystemsandGitHub d6d3f219b2 Merge pull request #315 from naturallaw777/copilot/update-sovran-systemsos-port-forwarding-ui 
Align port-forwarding UX to local-readiness semantics across service detail, Step 4 checklist, and onboarding
 2026-06-24 16:55:07 -05:00
copilot-swe-agent[bot]andGitHub 8452ea8fcf Align router setup wording and local port statuses 2026-06-24 19:06:12 +00:00
copilot-swe-agent[bot]andGitHub 053c417c90 Initial plan 2026-06-24 19:03:36 +00:00
naturallaw777 bf9c6dd627 added onlyoffice 2026-06-24 13:19:41 -05:00
Sovran SystemsandGitHub 163a196203 Merge pull request #314 from naturallaw777/copilot/fix-livekit-service-permissions 
fix: deliver LiveKit config via LoadCredential to resolve DynamicUser permission denied
 2026-06-23 21:04:51 -05:00
copilot-swe-agent[bot]andGitHub 8fd076191d fix: deliver livekit config via LoadCredential to fix DynamicUser permission denied 2026-06-24 01:21:05 +00:00
copilot-swe-agent[bot]andGitHub 9172339fbf Initial plan 2026-06-24 01:19:37 +00:00
Sovran SystemsandGitHub b21934f61e Merge pull request #313 from naturallaw777/fix/livekit-embedded-turn 
fix(element-calling): enable LiveKit embedded TURN with runtime matri…
 2026-06-23 20:04:38 -05:00
Sovran Systems bbf3ce436c fix(element-calling): enable LiveKit embedded TURN with runtime matrix domain + cert 
LiveKit was exiting cleanly with "TURN domain required" because turn.enabled
was set in the build-time config but turn.domain was never provided to the
process (the old livekit-runtime-config.service wrote a YAML that nothing
read). A clean exit (status 0) meant Restart=on-failure never restarted it,
so the Hub reported the service as Inactive.

This replaces the dead runtime-config oneshot with livekit-turn-setup.service,
which at runtime:
  - reads the matrix domain from /var/lib/domains/matrix (no hardcoding)
  - copies Caddy's already-issued matrix cert/key into /var/lib/livekit
  - generates a complete LiveKit config (incl. turn.domain + TLS cert/key)
    at /run/livekit/livekit.yaml

The livekit.service ExecStart is overridden to load that runtime config
(mirroring the existing Caddy ExecStart override pattern in
modules/core/caddy.nix), since turn.domain is only known at runtime. The cert
is delivered via LoadCredential so it is readable under DynamicUser=true
without weakening the sandbox.

Also aligns the RTC media port range (rtc.port_range_start/end = 30000-40000)
so it matches the forwarded ports, and drops the now-redundant manual
30000-40000 firewall ranges (covered by services.livekit settings/openFirewall).
 2026-06-23 20:03:26 -05:00
Sovran SystemsandGitHub 53fe416ac9 Merge pull request #312 from naturallaw777/copilot/rewrite-njalla-domain-setup 
Rewrite Njal.la domain-setup instructions: remove IP box, clarify Name-field host-only rule, support subdomain-or-separate-domain
 2026-06-22 19:46:10 -05:00
copilot-swe-agent[bot]andGitHub e2db7f95d8 Rewrite Njal.la domain-setup instructions (no IP box, Name-field clarification, subdomain-or-domain) 2026-06-23 00:44:39 +00:00
copilot-swe-agent[bot]andGitHub e2ddf78c23 Initial plan 2026-06-23 00:40:49 +00:00
naturallaw777 1a8b18f5bc removed uneeded livekit-cli 2026-06-18 16:51:15 -05:00
naturallaw777 4329dde0a1 nixpkgs update 2026-06-18 16:05:02 -05:00
Sovran Systems d49ff5002a Fix Element Calling 30000-40000 port note: single rule with both TCP and UDP 
The previous change incorrectly split the 30000-40000 TURN relay range into two
rows and told users to create two separate forwarding rules. On most routers
this range is a single port-forwarding rule with a protocol selector set to
"Both" (or TCP/UDP). Revert to a single row (protocol "TCP & UDP"), update the
note to say it's one rule with both protocols enabled, and restore the totals to
3 required + 5 optional = 8.
 2026-06-13 11:59:18 -05:00
Sovran Systems 33688f3015 Clarify Element Calling 30000-40000 range needs separate TCP and UDP forwards 
The onboarding Step 4 port table listed the 30000-40000 TURN relay range as a
single "TCP/UDP" row, which is ambiguous on most routers where TCP and UDP
forwards are separate entries. Split it into two explicit rows (TCP and UDP),
add a clarifying note, and update the totals so users create both forwarding
rules.
 2026-06-13 11:50:43 -05:00
Sovran SystemsandGitHub c2a834923a Merge pull request #311 from naturallaw777/copilot/migrate-federation-to-well-known 
Migrate Matrix federation from port 8448 to .well-known/matrix/server delegation on 443
 2026-06-13 10:04:42 -05:00
copilot-swe-agent[bot]andGitHub da03832c0e feat: migrate Matrix federation from port 8448 to .well-known/matrix/server on 443 
- modules/core/caddy.nix: replace $MATRIX:8448 site with .well-known/matrix/server handler inside $MATRIX vhost
- modules/element-calling.nix: add .well-known/matrix/server respond directive, remove $MATRIX:8448 block
- modules/synapse.nix: remove 8448 TCP/UDP firewall openings
- app/sovran_systemsos_web/server.py: remove _PORTS_MATRIX_FEDERATION constant, set matrix-synapse.service to [], simplify api_service_detail to only check LiveKit extra ports
- app/sovran_systemsos_web/static/onboarding.js: remove 8448 row from Step 4, update totals to 3/8 (3 required + 5 optional)
 2026-06-13 14:52:26 +00:00
copilot-swe-agent[bot]andGitHub 5194549060 Initial plan 2026-06-13 14:49:39 +00:00
Sovran SystemsandGitHub f0b9726a75 Merge pull request #310 from naturallaw777/copilot/fix-iso-installer-imports 
iso: remove orphaned branding.nix import from common.nix
 2026-06-10 13:42:55 -05:00
copilot-swe-agent[bot]andGitHub 2c5917e8d4 Remove orphaned ./branding.nix import from iso/common.nix 2026-06-10 18:41:49 +00:00
copilot-swe-agent[bot]andGitHub 57b6d70894 Initial plan 2026-06-10 18:40:41 +00:00
naturallaw777 b93e8202d1 nixpkgs update 2026-06-09 11:03:40 -05:00
Sovran SystemsandGitHub e18c4714e1 Add files via upload 2026-06-05 15:15:19 -05:00
Sovran SystemsandGitHub 2e4bd9fa0f Add files via upload 2026-06-05 13:27:04 -05:00
Sovran SystemsandGitHub df645aaa56 Merge pull request #309 from naturallaw777/copilot/add-desktop-screenshot 
Add desktop screenshot to README
 2026-06-05 13:20:41 -05:00
copilot-swe-agent[bot]andGitHub 12a81708d4 Improve screenshot alt text for accessibility 2026-06-05 18:14:13 +00:00
copilot-swe-agent[bot]andGitHub bc01e1e24e Add desktop screenshot placeholder and README embed 2026-06-05 18:13:46 +00:00
copilot-swe-agent[bot]andGitHub dae409e106 Plan README changes with placeholder screenshot 2026-06-05 18:13:16 +00:00
copilot-swe-agent[bot]andGitHub 7a3a390275 Initial plan 2026-06-05 17:56:09 +00:00
naturallaw777 6c48a9e239 sync and removed element-desktop and bitwarden desktop 2026-06-05 10:29:20 -05:00
naturallaw777 2903a61944 updated nix packages 2026-06-05 10:27:51 -05:00
naturallaw777 d9811d2375 updated stable branch 2026-06-05 10:04:13 -05:00
naturallaw777 7f185b0355 moved to new bitcoin-knots with bip110 2026-06-04 16:06:58 -05:00
Sovran SystemsandGitHub 58d34182b8 Merge pull request #308 from naturallaw777/copilot/fix-bip110-detection 
Detect Knots `reduced_data` (RDTS) as BIP-110 in live status and add regression coverage
 2026-06-04 15:18:10 -05:00
copilot-swe-agent[bot]andGitHub 00b5bf5166 Refine BIP110 matching and add regression coverage 2026-06-04 20:15:35 +00:00
copilot-swe-agent[bot]andGitHub 732a7cd260 Fix BIP110 detection for reduced_data deployments 2026-06-04 20:11:58 +00:00
copilot-swe-agent[bot]andGitHub 370786d1dc Initial plan 2026-06-04 20:07:44 +00:00
Sovran SystemsandGitHub f45141956a Merge pull request #307 from naturallaw777/copilot/update-bip110-status-surface 
Surface live BIP-110 deployment status on Bitcoin Knots tile
 2026-06-04 14:51:22 -05:00
copilot-swe-agent[bot]andGitHub 44737f5571 Fix docstring accuracy, extract _firstElementFromHtml helper, address all code review feedback 2026-06-04 19:49:01 +00:00
copilot-swe-agent[bot]andGitHub bf56dfdb68 Address code review: tighten bip110 key matching, fix redundant condition, extract shared badge config, add CSS classes 2026-06-04 19:46:40 +00:00
copilot-swe-agent[bot]andGitHub afb6a2f515 Add live BIP-110 deployment status: new helpers, endpoint, badge UI 2026-06-04 19:42:23 +00:00
copilot-swe-agent[bot]andGitHub 9d212675bc Initial plan 2026-06-04 19:36:51 +00:00
Sovran SystemsandGitHub d2d5ced4ac Merge pull request #306 from naturallaw777/copilot/remove-bip110-feature-toggle 
bip110 deprecation shim: tolerate stale custom.nix and auto-clean on Hub startup
 2026-06-04 14:26:06 -05:00
copilot-swe-agent[bot]andGitHub a652fd69d6 Address code review: fix whitespace and log migration exceptions 2026-06-04 19:18:28 +00:00