57 Commits

Author SHA1 Message Date
anonpenguin23
fd87eec476 feat(security): add manifest signing, TLS TOFU, refresh token migration
- Invalidate plaintext refresh tokens (migration 019)
- Add `--sign` flag to `orama build` for rootwallet manifest signing
- Add `--ca-fingerprint` TOFU verification for production joins/invites
- Save cluster secrets from join (RQLite auth, Olric key, IPFS peers)
- Add RQLite auth config fields
2026-02-28 15:40:43 +02:00
anonpenguin23
f26676db2c feat: add sandbox command and vault guardian build
- integrate Zig-built vault-guardian into cross-compile process
- add `orama sandbox` for ephemeral Hetzner Cloud clusters
- update docs for `orama node` subcommands and new guides
2026-02-27 15:22:51 +02:00
anonpenguin23
3e9ef5ac6c feat: enhance WebRTC port allocation with existing allocation checks and increase upload timeout 2026-02-22 11:39:59 +02:00
anonpenguin23
8ee606bfb1 feat: implement SFU and TURN server functionality
- Add signaling package with message types and structures for SFU communication.
- Implement client and server message serialization/deserialization tests.
- Enhance systemd manager to handle SFU and TURN services, including start/stop logic.
- Create TURN server configuration and main server logic with HMAC-SHA1 authentication.
- Add tests for TURN server credential generation and validation.
- Define systemd service files for SFU and TURN services.
2026-02-21 11:17:13 +02:00
anonpenguin23
c499b2d76e Enhance health checker and deployment handling
- Added support for "degraded" deployment status in types.
- Updated health checker initialization to include process manager and node ID.
- Refactored health checker tests to accommodate new process manager functionality.
- Implemented logic to handle unhealthy deployments, including restart and failure marking.
- Enhanced deployment reconciliation to manage under-replicated scenarios.
- Updated gateway handlers and middleware to consider "degraded" status in deployment queries.
2026-02-20 09:44:07 +02:00
anonpenguin23
b58e1d80ee Implement WireGuard peer authentication and enhance internal request validation 2026-02-19 06:43:06 +02:00
anonpenguin23
2986e64162 Writing more tests and fixed bug on rqlite address 2026-02-13 16:18:22 +02:00
anonpenguin23
1ab63857d3 Security audit, code cleanup 2026-02-13 14:33:11 +02:00
anonpenguin23
85a556d0a0 Did a lot of cleanup and bug fixing 2026-02-13 12:47:02 +02:00
anonpenguin23
266507ef09 Auto node recovery and failover if node is dead, added wallet authentication with phantom and root wallet + cluster repair logic 2026-02-13 08:16:01 +02:00
anonpenguin23
5fed8a6c88 Fixed firewall problem with anyone rellay and added authentication with root wallet 2026-02-13 07:38:54 +02:00
anonpenguin23
5c73330be6 created patch and fixed authentication issue for ipfs bug and cross node communication 2026-02-12 07:40:43 +02:00
anonpenguin23
eddf0553b7 Did a small refactor, code clean, remove dead code, legacy etc 2026-02-11 07:43:33 +02:00
anonpenguin23
a78e09d2b9 Added failover for namespaces 2026-02-10 17:32:29 +02:00
anonpenguin23
359fb5ae04 Updated health check 2026-02-10 16:40:01 +02:00
anonpenguin23
7690b22c0a Improved performance on request journey with cache and some tricks 2026-02-06 08:30:11 +02:00
anonpenguin23
854523c3a9 Fixed bugs on pubsub and ipfs 2026-02-06 07:21:26 +02:00
anonpenguin23
f972358e78 Bored of fixing bugs 2026-02-04 16:14:49 +02:00
anonpenguin23
156de7eb19 Bug fixing 2026-02-03 13:59:03 +02:00
anonpenguin23
11d5c1b19a Bug fixing 2026-02-02 16:18:13 +02:00
anonpenguin23
859c30fcd9 Bug fixing 2026-02-02 14:55:29 +02:00
anonpenguin23
51371e199d Added self signed cert fallback, fixed dns bugs 2026-01-31 10:07:15 +02:00
anonpenguin23
4acea72467 Added wireguard and updated installation process and added more tests 2026-01-30 15:30:18 +02:00
anonpenguin23
7b12dde469 Fixed dns failover middleware 2026-01-29 13:07:05 +02:00
anonpenguin23
82963c960e Updated docs and added replication and load balancing for deployments 2026-01-29 11:44:50 +02:00
anonpenguin23
42c0c61d19 Round Robin DNS fix for deployments (update, rollback etc) 2026-01-29 09:53:11 +02:00
anonpenguin23
c3f87aede7 bug fixing on namespaces 2026-01-28 13:33:15 +02:00
anonpenguin23
edd9c1f3dc namespaces on gateway, load balancer and rqlite and olric namespaces 2026-01-28 11:24:21 +02:00
anonpenguin23
380b10add3 fixing bugs on tests and on codebase 2026-01-26 14:41:26 +02:00
anonpenguin23
ec664466c0 Extra tests and a lot of bug fixing 2026-01-26 07:53:35 +02:00
anonpenguin23
fb229af2a0 pushed more changes 2026-01-24 16:00:28 +02:00
anonpenguin23
fc0b958b1e fixed deployments 2026-01-24 12:55:17 +02:00
anonpenguin23
b1011c29b5 added support for different domain except orama.network 2026-01-24 09:26:31 +02:00
anonpenguin23
903bef14a3 fixed some more tests 2026-01-22 17:13:08 +02:00
anonpenguin23
c2071586f8 fixed more tests 2026-01-22 15:42:54 +02:00
anonpenguin23
1338b32a0e fixing tests 2026-01-22 15:21:46 +02:00
anonpenguin23
0dcde29f7c added some tests 2026-01-22 14:39:50 +02:00
anonpenguin23
9fc9bbb8e5 a lot of changes 2026-01-22 13:04:52 +02:00
anonpenguin23
b0bc0a232e Refactored the whole codebase to be much cleaner 2026-01-20 10:03:55 +02:00
anonpenguin23
4f893e08d1 feat: enhance serverless function management and logging
- Updated the serverless functions table schema to remove the version constraint for uniqueness, allowing for more flexible function definitions.
- Enhanced the serverless engine to support HTTP fetch functionality, enabling external API calls from serverless functions.
- Implemented logging capabilities for function invocations, capturing detailed logs for better debugging and monitoring.
- Improved the authentication middleware to handle public endpoints more effectively, ensuring seamless access to serverless functions.
- Added new configuration options for serverless functions, including memory limits, timeout settings, and retry parameters, to optimize performance and reliability.
2026-01-02 08:40:28 +02:00
anonpenguin23
b3b1905fb2 feat: refactor API gateway and CLI utilities for improved functionality
- Updated the API gateway documentation to reflect changes in architecture and functionality, emphasizing its role as a multi-functional entry point for decentralized services.
- Refactored CLI commands to utilize utility functions for better code organization and maintainability.
- Introduced new utility functions for handling peer normalization, service management, and port validation, enhancing the overall CLI experience.
- Added a new production installation script to streamline the setup process for users, including detailed dry-run summaries for better visibility.
- Enhanced validation mechanisms for configuration files and swarm keys, ensuring robust error handling and user feedback during setup.
2025-12-31 10:16:26 +02:00
anonpenguin23
2fb1d68fcb feat: enhance IPFS integration and swarm key management
- Introduced IPFS peer information handling for improved network discovery and configuration.
- Added validation for the 64-hex swarm key, ensuring proper input during installation.
- Updated the installer to collect and store IPFS peer details, enhancing the setup experience for private networks.
- Enhanced the production setup to configure IPFS peering for better node discovery in private environments.
- Improved documentation to reflect new IPFS-related configuration options and swarm key requirements.
2025-11-28 14:25:31 +02:00
anonpenguin23
6a86592cad
refactor: streamline development and production command structure
- Consolidated development commands into a new `dev` command group for better organization.
- Introduced a `prod` command group to manage production environment operations.
- Updated Makefile to simplify the development environment setup and improve logging.
- Enhanced README to clarify the development process and health check requirements.
- Removed deprecated configuration and service management commands to streamline the CLI interface.
2025-11-10 05:34:50 +02:00
anonpenguin23
5b21774e04 feat: add cache multi-get handler and improve API key extraction
- Implemented a new cacheMultiGetHandler to retrieve multiple keys from the Olric cache in a single request.
- Enhanced the extractAPIKey function to prioritize the X-API-Key header and improve handling of non-JWT Bearer tokens.
- Updated routes to include the new multi-get endpoint for cache operations.
2025-11-07 10:33:25 +02:00
anonpenguin23
fe16d503b5 feat: integrate Anyone Relay (Anon) into the development environment
- Added support for installing and configuring the Anyone Relay (Anon) for anonymous networking in the setup process.
- Updated the Makefile to include the Anon client in the development stack, allowing it to run alongside other services.
- Implemented a new HTTP proxy handler for the Anon service, enabling proxied requests through the Anyone network.
- Enhanced the installation script to manage Anon installation, configuration, and firewall settings.
- Introduced tests for the Anon proxy handler to ensure proper request validation and error handling.
- Updated documentation to reflect the new Anon service and its usage in the development environment.
2025-10-30 06:21:32 +02:00
ad088bd476 feat: enhance API key management and ownership recording in verifyHandler
- Implemented logic to ensure an API key is created or retrieved for each wallet during the verification process.
- Added best-effort recording of ownership for both API keys and wallets in the namespace ownership database.
- Improved error handling and logging for better traceability of ownership checks and API key operations.
- Cleaned up unnecessary comments and whitespace in the auth_handlers.go file for better code readability.
2025-10-29 06:53:51 +02:00
anonpenguin23
3694a2de93
Update CHANGELOG.md for version 0.51.2, enhance API key extraction to support query parameters, and implement internal auth context in status and storage handlers. 2025-10-22 08:41:15 +03:00
anonpenguin23
c0d8fcb895
- Created namespace_helpers on gateway
- Removed old pkg/gatway storage and migrated to new rqlite
- Updated readme
- Created new rqlite implementation
- Updated changelog
- Fixed migration error on migrations.go applySQL
2025-09-23 07:19:35 +03:00
anonpenguin23
ff3b15108d replaced git.debros.io with github.com 2025-09-18 15:27:53 +03:00
df681be07f Refine authorization to distinguish API keys
Add deduplication to pubsub websocket handler to drop recent duplicate
messages within 2 seconds
2025-08-23 15:39:22 +03:00