naturallaw777andarena-agent 2e2a9b2d44 security: harden Lightning Wallet Connections (NWC) ...

- Add rate limiting to public LNURL endpoints (30 req/min per IP)
- Add audit logging for wallet lifecycle events (create, drain, delete, rotate)
- Add Unix socket support for Python ↔ Alby Hub communication
- Add LND macaroon permission documentation/warning
- Add pairing secret rotation API endpoint + CLI command
- Make Nostr relay configurable; auto-use Haven relay when enabled
- Strengthen domain validation (FQDN only, reject localhost/IP)
- Add structured audit log at /var/log/sovran-nwc-audit.log

Co-authored-by: arena-agent <297053741+arena-agent@users.noreply.github.com>

2026-07-29 02:52:45 +00:00

..

core

Rename NWC feature to Lightning Wallet Connections and split modal into tabs

2026-07-29 01:59:28 +00:00

bitcoin-core.nix

initial retooling

2026-03-27 14:23:08 -05:00

bitcoinecosystem.nix

moved to new bitcoin-knots with bip110

2026-06-04 16:06:58 -05:00

credentials.nix

refactor: use systemd.tmpfiles for GNOME Keyring, simplify reset scripts

2026-04-30 13:52:27 +00:00

element-calling.nix

feat(element-calling): universal LiveKit interface detection, JWT/Caddy fixes

2026-07-13 18:24:43 +00:00

haven.nix

added script for domains

2026-03-27 17:46:52 -05:00

mempool.nix

Add RTL and Mempool LAN reverse proxies, open firewall ports

2026-04-03 15:21:01 +00:00

modules.nix

feat: add hub-managed Wallet Connections scaffolding

2026-07-27 02:10:11 +00:00

nextcloud.nix

refactor php-fpm pool wiring to shared phpPackage option

2026-04-17 13:07:25 +00:00

nwc-wallets.nix

security: harden Lightning Wallet Connections (NWC)

2026-07-29 02:52:45 +00:00

php.nix

refactor php-fpm pool wiring to shared phpPackage option

2026-04-17 13:07:25 +00:00

rdp.nix

fix(rdp): prepend /run/wrappers/bin to PATH and add pkexec preflight check

2026-07-14 15:54:40 +00:00

sshd.nix

fixed ssh at first boot

2026-04-06 18:40:17 -05:00

synapse.nix

feat: migrate Matrix federation from port 8448 to .well-known/matrix/server on 443

2026-06-13 14:52:26 +00:00

vaultwarden.nix

updated vaultwarden to make key

2026-03-30 19:57:44 -05:00

wallet-autoconnect.nix

fix: add mode ONLINE to Sparrow config so Electrum backend is active on first launch

2026-05-03 22:37:14 +00:00

wordpress.nix

Fix WordPress ownership and tighten permissions to match php-fpm pool

2026-04-17 15:41:13 +00:00