anonpenguin23
fd87eec476
feat(security): add manifest signing, TLS TOFU, refresh token migration
...
- Invalidate plaintext refresh tokens (migration 019)
- Add `--sign` flag to `orama build` for rootwallet manifest signing
- Add `--ca-fingerprint` TOFU verification for production joins/invites
- Save cluster secrets from join (RQLite auth, Olric key, IPFS peers)
- Add RQLite auth config fields
2026-02-28 15:40:43 +02:00
anonpenguin23
c6998b6ac2
Remove legacy deployment and upgrade scripts
...
- Deleted redeploy.sh, which handled redeployment to nodes in devnet/testnet environments.
- Removed upgrade-nodes.sh, responsible for rolling upgrades of nodes.
- Eliminated upload-source-fanout.sh, which uploaded source archives to nodes in parallel.
- Removed upload-source.sh, used for uploading and extracting source archives to VPS nodes.
2026-02-24 14:24:25 +02:00
anonpenguin23
19463b8621
feat: disable HTTP/3 in Caddy to free UDP 443 for TURN server and add patch script
2026-02-21 18:30:28 +02:00
anonpenguin23
4ebf558719
feat: implement suspect node handling with callbacks for DNS record management
2026-02-20 09:27:35 +02:00
anonpenguin23
4f1709e136
Bug fixing
2026-02-18 11:20:16 +02:00
anonpenguin23
7163aad850
Refactor installation scripts and improve security measures
...
- Updated `clean-testnet.sh` to stop and disable legacy services.
- Added `upload-source.sh` for streamlined source archive uploads.
- Enhanced password input handling in `ssh.go` for better security.
- Adjusted directory permissions in `validator.go` for improved security.
- Simplified node configuration logic in `config.go`.
- Removed unnecessary commands from `gateway.go` to streamline installation.
2026-02-16 10:01:35 +02:00
anonpenguin23
bc9cbb3627
Moved everything to root user and to /opt/orama from home/orama/.orama
2026-02-14 14:33:38 +02:00
anonpenguin23
29d255676f
Renamed debros to orama
2026-02-14 14:14:04 +02:00
anonpenguin23
ba4e2688e4
Updated installation process simplified it
2026-02-14 14:06:14 +02:00
anonpenguin23
1ab63857d3
Security audit, code cleanup
2026-02-13 14:33:11 +02:00
anonpenguin23
b5dfcab1d6
Collector updates and bug fixes + patches scripts created
2026-02-11 15:08:20 +02:00
anonpenguin23
21e82abb65
Fixed WG port issues and production firewall fixes
2026-02-10 09:39:26 +02:00
anonpenguin23
a297a14b44
Updated docs and bug fixes and updated redeploy script
2026-02-09 15:23:02 +02:00
anonpenguin23
e3dd359e55
Bug fixing
2026-02-02 08:39:42 +02:00
anonpenguin23
c7036cb931
Fixed ipfs blocking WG
2026-02-01 17:09:58 +02:00
anonpenguin23
af5f5f9893
WG Fix for IPFS
2026-02-01 16:17:36 +02:00
anonpenguin23
9282fe64ee
Deployement updates
2026-02-01 12:01:31 +02:00
anonpenguin23
51371e199d
Added self signed cert fallback, fixed dns bugs
2026-01-31 10:07:15 +02:00
anonpenguin23
810094771d
Updated docs and fixed WG bugs and ip's bugs
2026-01-31 07:09:09 +02:00
anonpenguin23
d6106bcbb8
Added nyx auto install with anyone relay
2026-01-29 10:23:40 +02:00
anonpenguin23
81414722cd
core dns https issue
2026-01-29 07:45:40 +02:00
anonpenguin23
c3d6500785
fixed cert issue
2026-01-29 07:45:15 +02:00
anonpenguin23
5ec292a4f2
fixed bugs on dns for deployment
2026-01-29 07:22:32 +02:00
anonpenguin23
468ca06398
added support for anyone relay with rewards
2026-01-28 08:36:57 +02:00
anonpenguin23
380b10add3
fixing bugs on tests and on codebase
2026-01-26 14:41:26 +02:00
anonpenguin23
e94da3a639
Fixed problem on ipfs
2026-01-26 08:52:52 +02:00
anonpenguin23
ec664466c0
Extra tests and a lot of bug fixing
2026-01-26 07:53:35 +02:00
anonpenguin23
6101455f4a
bug fixing
2026-01-24 17:37:52 +02:00
anonpenguin23
3d3b0d2ee6
update install and upgrade
2026-01-24 16:42:58 +02:00
anonpenguin23
fb229af2a0
pushed more changes
2026-01-24 16:00:28 +02:00
anonpenguin23
b0bc0a232e
Refactored the whole codebase to be much cleaner
2026-01-20 10:03:55 +02:00
