5 Commits

Author	SHA1	Message	Date
anonpenguin23	78d876e71b	feat(monitor): add sandbox environment support ... - load nodes from active sandbox state for env=sandbox - extract fanoutArchive for efficient server-to-server distribution	2026-03-09 10:19:40 +02:00
anonpenguin23	e2b6f7d721	docs: add security hardening and OramaOS deployment docs ... - Document WireGuard IPv6 disable, service auth, token security, process isolation - Introduce OramaOS architecture, enrollment flow, and management via Gateway API - Add troubleshooting for RQLite/Olric auth, OramaOS LUKS/enrollment issues	2026-02-28 15:41:04 +02:00
anonpenguin23	fd87eec476	feat(security): add manifest signing, TLS TOFU, refresh token migration ... - Invalidate plaintext refresh tokens (migration 019) - Add `--sign` flag to `orama build` for rootwallet manifest signing - Add `--ca-fingerprint` TOFU verification for production joins/invites - Save cluster secrets from join (RQLite auth, Olric key, IPFS peers) - Add RQLite auth config fields	2026-02-28 15:40:43 +02:00
anonpenguin23	f26676db2c	feat: add sandbox command and vault guardian build ... - integrate Zig-built vault-guardian into cross-compile process - add `orama sandbox` for ephemeral Hetzner Cloud clusters - update docs for `orama node` subcommands and new guides	2026-02-27 15:22:51 +02:00
anonpenguin23	c6998b6ac2	Remove legacy deployment and upgrade scripts ... - Deleted redeploy.sh, which handled redeployment to nodes in devnet/testnet environments. - Removed upgrade-nodes.sh, responsible for rolling upgrades of nodes. - Eliminated upload-source-fanout.sh, which uploaded source archives to nodes in parallel. - Removed upload-source.sh, used for uploading and extracting source archives to VPS nodes.	2026-02-24 14:24:25 +02:00