Sovran_SystemsOS

Sovran_Systems/Sovran_SystemsOS

0 Fork 0

RSS Feed

v1.2.1 1d59a995e8

Compare
Sovran_SystemsOS v1.2.1 Stable

naturallaw777 released this 2026-10-18 16:14:59 -05:00 | 5 commits to stable since this release
Sovran_SystemsOS v1.2.1

Sovran_SystemsOS v1.2.1 — Stable Release

Highlights
- Sovran_Bitcoin 1.1.1 Integration: Replaces the third-party Alby Hub daemon with the zero-fetch, Nix-native Sovran NWC daemon (sovran-nwc 2.0.0) and updates Ride The Lightning (RTL) to 0.15.13.
- Mullvad VPN on Desktop Role: Ships the stock NixOS Mullvad VPN daemon and GUI application on the Desktop Only role (modules/mullvad.nix), keeping Server + Desktop and Bitcoin Node Only network routing untouched.
- Password & Keyring Cleanup: Unified single-password model (modules/password-model.nix) eliminating redundant desktop keyring prompts.
- Updated Flake Inputs & Services: Updates nixpkgs (nixos-unstable), nixpkgs-stable (nixos-26.05), nixvim, and btc-clients (Bisq2 2.1.14).
Added
- Mullvad VPN (Desktop Role Only): Install the Mullvad VPN app and daemon on the Desktop Role only (modules/mullvad.nix).
- Password & Keyring Cleanup: Unified password model (modules/password-model.nix) — one password, one truth, no prompts.
Changed
- Flake Lock & Ecosystem Updates (flake.lock):
  - Sovran_Bitcoin 1.1.1 (5c13bf5): Nix-native sovran-nwc 2.0.0, Ride The Lightning 0.15.13, electrs 0.12.0 (bindex / bitcoind rest=1), and expanded btcpayserver RPC whitelist for NBXplorer 2.6.17
  - btc-clients (990d29e): Bisq 1.10.9, Bisq2 2.1.14, Sparrow 2.5.5
  - nixpkgs (nixos-unstable) (fe13242):
    
    Bitcoin Core 31.1
    
    LND 0.21.4-beta
    
    Electrs 0.12.0
    
    BTCPay Server 2.4.5
    
    Mempool 3.3.1
    
    Matrix Synapse 1.162.0
    
    LiveKit 1.13.8
    
    Vaultwarden 1.37.4
    
    Haven Relay 1.2.2
    
    Caddy 2.11.7
    
    Tor 0.4.9.14
    
    GNOME Remote Desktop 50.2
  - nixpkgs-stable (nixos-26.05) (26f4107) & nixvim (453dc9c)
- Documentation (README.md, SECURITY.md): Clarified Hub local-network operation, SSH Remote Access, Mullvad VPN behavior on Desktop Only, and service exposure.
Fixed
- password-model.nix: Fixed Nix string escaping in the password generator fallback.
- flake.nix: Replaced deprecated pkgs.system with pkgs.stdenv.hostPlatform.system for btc-clients packages.
- modules/sovran-bitcoin-integration.nix:
  - Guarded config.networking.domain against null/empty values when both haven and nwc-wallets features are enabled.
  - Updated electrs.service and bitcoind.service for electrs 0.12.0 (bindex / rest=1, dropped --daemon-p2p-addr, automatic pre-0.12.0 RocksDB cleanup) and expanded the btcpayserver RPC whitelist for NBXplorer 2.6.17.
Full changelog: CHANGELOG.md
Downloads
- Source Code (ZIP)
- Source Code (TAR.GZ)
v1.2.0 3a87302645

Compare
v1.2.0 — Stable Release Stable

naturallaw777 released this 2026-10-02 02:40:46 -05:00 | 19 commits to stable since this release
Sovran_SystemsOS v1.2.0

Sovran_SystemsOS v1.2.0 — Stable Release

Added
- Ssh: don't open port 22 for the loopback-only sshd
- Bitcoin: drop the stray UDP 3051 firewall rule
- Installer: raise generated password entropy from ~23 to ~33 bits
- Caddy: stop filtering the RTL and Mempool sites by client address
- Hub: serve the Hub on its own port instead of through Caddy
- Hub: answer the local network only, whichever way a client arrives
- Hub: make the login lockout that LOGIN_FAIL_MAX described
- Caddy: serve the Hub, RTL and Mempool sites to local clients only
- Docs, hub, installer: say Server + Desktop makes the home IP public
- Ddns: take the public IP from Njal.la only and give it to LiveKit
Changed
- Updated nixpkgs and Sovran_Bitcoin update and the new Bisq 1.10.9
  Full changelog: CHANGELOG.md
Downloads
- Source Code (ZIP)
- Source Code (TAR.GZ)
v1.1.7 70ccf1eba1

Compare
v1.1.7 — Stable Release Stable

naturallaw777 released this 2026-09-21 18:09:17 -05:00 | 31 commits to stable since this release
Sovran_SystemsOS v1.1.7

Sovran_SystemsOS v1.1.7 — Stable Release

Added
- Postgresql: drop per-database autovacuum ALTERs (rejected by Postgres)
- Synapse: performance tuning for 32 GB Server+Desktop hosts
- Nextcloud, postgresql: fix Nextcloud 35 DB warnings on 32 GB hosts
- Clean up flake.nix by removing comments and LiveKit override
Changed
- Updated nixpkgs
- Updated to php85 and fixes
- Updated to proper syntax to prevent build errors.
- Updated flake lock which contains Bisq 1.10.8 and Bisq2 2.1.13
  Full changelog: CHANGELOG.md
Downloads
- Source Code (ZIP)
- Source Code (TAR.GZ)
v1.1.6 74405b2ffc

Compare
v1.1.6 — Stable Release Stable

naturallaw777 released this 2026-09-15 15:17:20 -05:00 | 40 commits to stable since this release
Sovran_SystemsOS v1.1.6

Sovran_SystemsOS v1.1.6 — Stable Release

Added
- Rename 'The Sovran Hub' to 'The Hub' in README
- Rename 'Sovran Hub' to 'The Hub' in README
Changed
- Updated nix packages includes the new mempool version
Documentation
- Update Sovran Hub screenshot to the v1.1.5 redesign
  Full changelog: CHANGELOG.md
Downloads
- Source Code (ZIP)
- Source Code (TAR.GZ)
v1.1.5 499676569e

Compare
v1.1.5 — Stable Release Stable

naturallaw777 released this 2026-09-09 08:41:10 -05:00 | 45 commits to stable since this release
Sovran_SystemsOS v1.1.5

Sovran_SystemsOS v1.1.5 — Stable Release

Added
- Hub: don't claim the OS "keeps itself current" on the dashboard
- Hub: point RTL credentials at /rtl/ and bump dev version to 0.15.12
- Make dashboard cards uniform and symmetric; stop clipping update text
- Add boot splash; separate Systems Operational and Security icons
- Extend welcome dashboard background to the panel edges
- Add welcome dashboard as default view
- Monochrome updater glyph; fix oversized dialog header icon
- Merge Bitcoin categories into one; rename Self-Hosted Apps to Personal Apps
- Neutral graphite theme; branded updater icon
- Simplify Systems Operational, reword Domain Status, blue restart buttons
- Polish pass: sysops wording, QR size, NWC toolbar, logo, diagnostics placement
- Rework Update System dialog to the approved design; match rebuild dialog
- Redesign The Hub web UI: softer dark theme, sidebar nav, status widgets
- Nixpkgs update
- Switch LibreOffice from fresh to stable version
- Ui: simplify element-calling port modal — trim verbose steps and remove extra verification task
Changed
- Updated nixpkgs
- Updated Sovran-Bitcoin
- Updated flake to build through the new sovran-bitcoin input
Fixed
- Fix role fit-and-finish: Desktop-only router note, narrow-viewport layout
- Self-heal truncated/corrupt Nix downloads and keep failed updates retryable
  Full changelog: CHANGELOG.md
Downloads
- Source Code (ZIP)
- Source Code (TAR.GZ)
v1.1.4 93492e88fb

Compare
v1.1.4 — Stable Release Stable

naturallaw777 released this 2026-09-02 15:14:04 -05:00 | 67 commits to stable since this release
Sovran_SystemsOS v1.1.4

Sovran_SystemsOS v1.1.4 — Stable Release

Added
- Element-calling: fix Nix string interpolation of LAN_CIDR echo
- Docs/hub: update Element Calling port guidance to the new port set
- Element-calling: fix Wi-Fi calls and tighten media/TURN ports
- Flake: pin LiveKit to 1.13.6 for rtc.advertise_internal_ip support
Changed
- Updated nixpkgs
- Updated sovran-bitcon
- Dedupe NWC tooling — use Sovran_Bitcoin's sovran-nwc
- Update sovran-bitcoin flake input
- Extract bitcoin stack into Sovran_Bitcoin flake input
Fixed
- Set lnurl domainFile for Hub-managed Lightning Address domain
- Correct disablewallet casing
- Fixed typo
  Full changelog: CHANGELOG.md
Downloads
- Source Code (ZIP)
- Source Code (TAR.GZ)
v1.1.3 043981a34b

Compare
v1.1.3 — Stable Release Stable

naturallaw777 released this 2026-08-27 09:24:39 -05:00 | 81 commits to stable since this release
Sovran_SystemsOS v1.1.3

Sovran_SystemsOS v1.1.3 — Stable Release

Added
- Sparrow update
- Nixpkgs update with bisq and bisq2
- Albyhub: re-harvest hashes for fixed sovran tag
- Albyhub default.nix hash update
- Albyhub default.nix fix
- Albyhub: build from sovran fork tag (LND-only, no frontend)
- Vendor v1.24.0 LND-only, no-frontend build
- Ux: simplify domain and router setup guidance
Fixed
- Evaluate local vendored package versions directly
- Use proxyVendor to preserve secp256k1-zkp cgo headers
  Full changelog: CHANGELOG.md
Downloads
- Source Code (ZIP)
- Source Code (TAR.GZ)
v1.1.2 d31887cae6

Compare
v1.1.2 — Stable Release Stable

naturallaw777 released this 2026-08-21 09:47:50 -05:00 | 96 commits to stable since this release
Sovran_SystemsOS v1.1.2

Sovran_SystemsOS v1.1.2 — Stable Release

Added
- Nixpkgs update with Bisq update
- Unify public-IP detection into one privacy-first script
- Fix Element X discovery and harden federated calling
- Nixpkgs update
- Add tor-browser to the package list
Changed
- Use pkgs.lndinit, drop local packages/lndinit
- Update RTL to 0.15.10
Fixed
- Move system.activationScripts under the config attribute
- Reuse Hub external IP for LiveKit, drop egress service calls
- Derive Restart required from boot default vs running system
- Reconcile completed updates after polling stalls
- Migrate i2pd SAM settings for nixpkgs 26.11
- Order turn-setup after network-online to fix boot-time red dot
- Restore a Zeus-scannable LND REST connect QR
Security
- Prevent LND admin macaroon exposure in curl argv
Documentation
- Update desktop and Sovran Hub screenshots
  Full changelog: CHANGELOG.md
Downloads
- Source Code (ZIP)
- Source Code (TAR.GZ)
v1.1.1 1cf611d44c

Compare
v1.1.1 — Stable Release Stable

naturallaw777 released this 2026-08-15 17:50:01 -05:00 | 114 commits to stable since this release
Sovran_SystemsOS v1.1.1

Sovran_SystemsOS v1.1.1 — Stable Release

Added
- Update release-stable.sh
- Enhance release script with preflight checks and metadata
- Migrate dock/folder/mime entries from brave to brave-origin on upgrade
- Skip Brave Origin startup dialog in Hub launcher
- Switch default browser to Brave Origin (brave-origin)
- Add Bitcoin Core Tor IBD gossip control
- Replace Bitcoin Knots with Bitcoin Core
Fixed
- Persistent browser profile so logout survives window reopen
- Recover from expired sessions and preserve logout
- Prevent Bitcoin Core switch from hanging the Hub UI
Documentation
- Update README ISO download links to v1.1.0
  Full changelog: CHANGELOG.md
Downloads
- Source Code (ZIP)
- Source Code (TAR.GZ)
v1.1.0 9ce169c4f0

Compare
v1.1.0 — Stable Release Stable

naturallaw777 released this 2026-08-11 13:51:37 -05:00 | 134 commits to stable since this release
Sovran_SystemsOS v1.1.0

Sovran_SystemsOS v1.1.0 — Stable Release

Added
- Speed up Hub service status loading
- Update Documentation
- Njalla.nix: fail on ImportError; fix redundant except clause
- Correctly escape DDNS placeholder in Nix string
- Security hardening: fix all 8 blocking findings for PR #419
- Security hardening: fix DDNS injection, Nix injection, reboot auth, support key, sudo rules
- Harden btcpay and nbxplorer config handling
- Add provenance headers and fix flake checks for PR409
- Restore upstream nix-bitcoin fetchNodeModules for mempool and RTL packages
- Refactor Nix build configuration for mempool
- Update npm dependencies and patch handling in default.nix
- Update npmDepsHash for backend and frontend packages
- Mempool: use postPatch to copy lock file for npmDeps fetcher
- Mempool: use preBuild cd instead of postUnpack so npmDeps fetcher finds lock files
- Mempool: fix npmDeps fetcher — postUnpack instead of sourceRoot, postPatch instead of patches
- Mempool: switch backend and frontend to buildNpmPackage with placeholder npmDepsHash
- Update npmDepsHash with correct hash value
- RTL: switch to buildNpmPackage with placeholder npmDepsHash
- Add bitcoind.rpc.users.btcpayserver for NBXplorer
- Restore original flake.nix with nixosModules.Sovran_SystemsOS export
- Add vendored RTL package and fix rtl.nix to use it
- Vendor mempool packages and wire mempool module to vendored pkgs
- Refactor onion service configuration for LND
- Add missing bitcoind-rpc-public-whitelist.nix
- Remove joinmarket-ob-watcher from onion-services defaults
- Tailor: make bitcoin modules truly Sovran-only (lnd-only) and delete stubs.nix
- Vendor: replace nix-bitcoin flake input with minimal vendored modules (nixpkgs-only)
- Remove duplicate 1.0.6 release notes from CHANGELOG
Changed
- Clean mempool module comment typo
- Move vendor/nix-bitcoin to modules/bitcoin, remove overlays
- Nix flake update - drop nix-bitcoin
Fixed
- Correct RTL and Mempool Hub versions
- Fix DDNS URL validation: replace ${IP} temporarily for validator, keep placeholder for storage
- Fix all 8 security hardening blockers for PR #423
- Fix Nix interpolation in DDNS runner
- Fix IP validation in DDNS and document journalctl sudo rule
- Report configured BTCPay Server version
- Fix Matrix SIGPIPE and RTL v0.15.8 config schema regressions
- Add NBXplorer cookie auth and WorkingDirectory for BTCPay service
- Fix BTCPay startup regression: add home dirs to service users
- Address btcpay hardening review feedback
- Register bitcoin-HMAC-btcpayserver as managed secret owned by bitcoind user
- Fix RTL: use fetchNodeModules instead of npm ci in buildPhase
- Fix PostgreSQL ensureUsers: use ensureDBOwnership instead of ensureClauses
- Fix lnd macaroons: replace invalid 'enable' with 'user'
- Fix postgresql ensurePermissions -> ensureClauses for nixpkgs unstable
- Fix btcpayserver.nix to use pkgs.stable overlay
- Fix btcpayserver syntax error and pin to nixpkgs-stable (2.4.2)
- Fix mempool package: remove fetchNodeModules dependency
- Fix typo in onion-addresses service check
- Fix formatting of extraGroups in btcpayserver.nix
- Add missing semicolon after extraGroups in btcpayserver.nix
- Remove services.clightning.enable assignment that fails on f13ff45
- Remove clightning and clightning-rest from stubs to avoid duplicate on f13ff45
- Add stubs for nixpkgs-unstable 2026-08 where services.clightning removed
- Keep ISO artifacts out of the repo and auto-update README on release
  Full changelog: CHANGELOG.md
Downloads
- Source Code (ZIP)
- Source Code (TAR.GZ)

1 2

13 Releases 17 Tags

Sovran_SystemsOS v1.2.1 Stable

Sovran_SystemsOS v1.2.1

Highlights

Added

Changed

Fixed

v1.2.0 — Stable Release Stable

Sovran_SystemsOS v1.2.0

Added

Changed

v1.1.7 — Stable Release Stable

Sovran_SystemsOS v1.1.7

Added

Changed

v1.1.6 — Stable Release Stable

Sovran_SystemsOS v1.1.6

Added

Changed

Documentation

v1.1.5 — Stable Release Stable

Sovran_SystemsOS v1.1.5

Added

Changed

Fixed

v1.1.4 — Stable Release Stable

Sovran_SystemsOS v1.1.4

Added

Changed

Fixed

v1.1.3 — Stable Release Stable

Sovran_SystemsOS v1.1.3

Added

Fixed

v1.1.2 — Stable Release Stable

Sovran_SystemsOS v1.1.2

Added

Changed

Fixed

Security

Documentation

v1.1.1 — Stable Release Stable

Sovran_SystemsOS v1.1.1

Added

Fixed

Documentation

v1.1.0 — Stable Release Stable

Sovran_SystemsOS v1.1.0

Added

Changed

Fixed