initial retooling #1
Assignees
naturallaw777
Clear assignees
naturallaw777
No Assignees
Notifications
Due Date
No due date set.
Dependencies
No dependencies set.
Reference: Sovran_Systems/Sovran_SystemsOS#1
Reference in new issue
Block a user
Fully tested and retooling. Ready for stable branch.
7c047a1: restore LAN access to Hub, RTL, and Mempool 6584b63c36- server.py: add _is_free_password_default() helper that reads /etc/shadow and hashes known defaults ("free", "gosovransystems") via crypt module; update api_password_is_default to use it instead of reading the secrets file - factory-seal.nix: replace file-based free-password check with shadow-based cryptographic check using python3 + crypt module; add pkgs.python3 to path; pass values via env vars to avoid shell expansion of hash $ characters Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/31e6fc93-8b4b-47af-9c47-568da0905301 Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com>- Add security-reset-overlay HTML element to index.html that shows immediately when the user confirms "Erase & Reset", before the synchronous API call runs - Add .security-reset-overlay CSS to security.css (reuses reboot-card styles, adds fade-in animation, z-index 1000 to sit above all other content) - Fix reboot overlay class bug: classList.add("open") → classList.add("visible") so the overlay actually renders per the .reboot-overlay.visible CSS rule - Show overlay step text "Erasing data and resetting credentials…" during wipe, update to "Reset complete. Rebooting now…" when API returns - Call waitForServerReboot() (globally defined in update.js) after reset so the page auto-reloads when the system comes back online - Hide the security-reset-overlay and re-enable the button on error Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/185d0b41-d54d-4ea2-93d6-bfb7c15b8aed Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com>- Create modules/core/sovran-provisioner.nix with Flask provisioner API, Headscale 0.28.0 config, Caddy reverse proxy, auto-bootstrap service, and firewall rules. Python script uses get_user_id() + -u <id> syntax. - Fix docs/remote-deploy-headscale.md: - nodes register now uses -u <id> instead of --user <name> - preauthkeys create one-liner uses -u <id> -e 2h -o json - preauthkeys list/expire updated to 0.28.0 syntax (no --user on list) - tailscale up in Part 2 now includes --accept-dns=false - Add Troubleshooting section: VPN conflicts, RATELIMIT logs, connection refused, user ID lookup Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/25b789a6-8b2c-4e42-afd4-f8e8e5c61f2c Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com>- RTL: rename 'Tor Access' → 'Tor Address — Access from anywhere via Tor Browser' rename 'Local Network' → 'Local Network — Access on your home network only' add 'How to Access' explanation credential - Mempool: same label improvements + 'How to Access' credential - Bitcoin Knots, Bitcoin Core, Electrs: update 'Tor Address' label to include 'Access from anywhere via Tor Browser' for consistency Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/63c3edb0-9fbf-4dd8-91e5-404ff6e4097d Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com>