148 Commits

Author SHA1 Message Date
anonpenguin23
78d876e71b feat(monitor): add sandbox environment support
- load nodes from active sandbox state for env=sandbox
- extract fanoutArchive for efficient server-to-server distribution
2026-03-09 10:19:40 +02:00
anonpenguin23
e2b6f7d721 docs: add security hardening and OramaOS deployment docs
- Document WireGuard IPv6 disable, service auth, token security, process isolation
- Introduce OramaOS architecture, enrollment flow, and management via Gateway API
- Add troubleshooting for RQLite/Olric auth, OramaOS LUKS/enrollment issues
2026-02-28 15:41:04 +02:00
anonpenguin23
fd87eec476 feat(security): add manifest signing, TLS TOFU, refresh token migration
- Invalidate plaintext refresh tokens (migration 019)
- Add `--sign` flag to `orama build` for rootwallet manifest signing
- Add `--ca-fingerprint` TOFU verification for production joins/invites
- Save cluster secrets from join (RQLite auth, Olric key, IPFS peers)
- Add RQLite auth config fields
2026-02-28 15:40:43 +02:00
anonpenguin23
f26676db2c feat: add sandbox command and vault guardian build
- integrate Zig-built vault-guardian into cross-compile process
- add `orama sandbox` for ephemeral Hetzner Cloud clusters
- update docs for `orama node` subcommands and new guides
2026-02-27 15:22:51 +02:00
anonpenguin23
72fb5f1a5a feat: add secrets and triggers management to function commands
- Introduced `secrets` command for managing function secrets, including set, list, and delete operations.
- Added `triggers` command for managing PubSub triggers associated with functions, allowing addition, listing, and deletion of triggers.
- Implemented API handlers for secrets management, including setting, listing, and deleting secrets.
- Updated serverless handlers to support new secrets and triggers functionalities.
- Enhanced tests for the new features, ensuring proper functionality and error handling.
2026-02-23 19:18:39 +02:00
anonpenguin23
85eb98ed34 feat: add TURN domain configuration and certificate provisioning via Caddy 2026-02-23 16:57:29 +02:00
anonpenguin23
714a986a78 Bump version to 0.112.2 and update TURN server configuration
- Updated version in Makefile to 0.112.2.
- Enhanced SFU server error handling to ignore http.ErrServerClosed.
- Added TURNS (TURN over TLS) configuration options in TURN server and related components.
- Updated firewall rules to include TURNS ports and modified related tests.
- Implemented self-signed certificate generation for TURNS.
- Adjusted TURN server to support both UDP and TCP listeners.
- Updated WebRTC and SFU components to accommodate new TURNS configurations.
2026-02-23 16:32:32 +02:00
anonpenguin23
bcfdabb32d feat: update WebRTC handlers to support dynamic SFU host configuration and add monitoring script 2026-02-23 06:30:57 +02:00
anonpenguin23
3597c61cfc feat: add WebRTC configuration support for gateway instances 2026-02-22 13:11:16 +02:00
anonpenguin23
3e9ef5ac6c feat: enhance WebRTC port allocation with existing allocation checks and increase upload timeout 2026-02-22 11:39:59 +02:00
anonpenguin23
a79ae41dd5 feat: implement PubSub trigger management with API endpoints for adding, listing, and removing triggers 2026-02-21 16:26:36 +02:00
anonpenguin23
e4d51676cc feat: add WebRTC feature management commands and public API endpoints for enabling, disabling, and checking status 2026-02-21 13:14:46 +02:00
anonpenguin23
8ee606bfb1 feat: implement SFU and TURN server functionality
- Add signaling package with message types and structures for SFU communication.
- Implement client and server message serialization/deserialization tests.
- Enhance systemd manager to handle SFU and TURN services, including start/stop logic.
- Create TURN server configuration and main server logic with HMAC-SHA1 authentication.
- Add tests for TURN server credential generation and validation.
- Define systemd service files for SFU and TURN services.
2026-02-21 11:17:13 +02:00
anonpenguin23
d256a83fb7 feat: enhance namespace management with cluster state deletion and improved deprovisioning process 2026-02-21 06:41:19 +02:00
anonpenguin23
c499b2d76e Enhance health checker and deployment handling
- Added support for "degraded" deployment status in types.
- Updated health checker initialization to include process manager and node ID.
- Refactored health checker tests to accommodate new process manager functionality.
- Implemented logic to handle unhealthy deployments, including restart and failure marking.
- Enhanced deployment reconciliation to manage under-replicated scenarios.
- Updated gateway handlers and middleware to consider "degraded" status in deployment queries.
2026-02-20 09:44:07 +02:00
anonpenguin23
4ebf558719 feat: implement suspect node handling with callbacks for DNS record management 2026-02-20 09:27:35 +02:00
anonpenguin23
a71b979036 feat: add RQLite export/import functionality and related handlers + Deployments DNS Fixes 2026-02-20 07:29:18 +02:00
anonpenguin23
b58e1d80ee Implement WireGuard peer authentication and enhance internal request validation 2026-02-19 06:43:06 +02:00
anonpenguin23
4f1709e136 Bug fixing 2026-02-18 11:20:16 +02:00
anonpenguin23
83804422c4 Namespace bug fix and fixing bugs on serverless and deployments 2026-02-17 15:57:32 +02:00
anonpenguin23
0b5b6e68e3 A ton of updates on the monitoring mostly bug fixes 2026-02-16 16:35:29 +02:00
anonpenguin23
bc9cbb3627 Moved everything to root user and to /opt/orama from home/orama/.orama 2026-02-14 14:33:38 +02:00
anonpenguin23
29d255676f Renamed debros to orama 2026-02-14 14:14:04 +02:00
anonpenguin23
749d5ed5e7 Bro i did so many things to fix the problematic discovery and redeployment and i dont even remember what i did 2026-02-14 10:56:26 +02:00
anonpenguin23
2986e64162 Writing more tests and fixed bug on rqlite address 2026-02-13 16:18:22 +02:00
anonpenguin23
1ab63857d3 Security audit, code cleanup 2026-02-13 14:33:11 +02:00
anonpenguin23
61ccad952a Improved health check , plus bug fixing 2026-02-13 13:40:33 +02:00
anonpenguin23
85a556d0a0 Did a lot of cleanup and bug fixing 2026-02-13 12:47:02 +02:00
anonpenguin23
266507ef09 Auto node recovery and failover if node is dead, added wallet authentication with phantom and root wallet + cluster repair logic 2026-02-13 08:16:01 +02:00
anonpenguin23
5fed8a6c88 Fixed firewall problem with anyone rellay and added authentication with root wallet 2026-02-13 07:38:54 +02:00
anonpenguin23
1d186706f6 Improved collector added anyone on health check 2026-02-12 09:36:07 +02:00
anonpenguin23
5c73330be6 created patch and fixed authentication issue for ipfs bug and cross node communication 2026-02-12 07:40:43 +02:00
anonpenguin23
eddf0553b7 Did a small refactor, code clean, remove dead code, legacy etc 2026-02-11 07:43:33 +02:00
anonpenguin23
888df0385e Removed dead code 2026-02-11 07:24:27 +02:00
anonpenguin23
91ac56c50a Fixed bug on spawn handler and cluster manager 2026-02-11 06:44:07 +02:00
anonpenguin23
a78e09d2b9 Added failover for namespaces 2026-02-10 17:32:29 +02:00
anonpenguin23
359fb5ae04 Updated health check 2026-02-10 16:40:01 +02:00
anonpenguin23
e2b38c409a Fixed bug on limiting to 10 nodes on cluster because of WG 2026-02-09 09:12:08 +02:00
anonpenguin23
b382350f76 Rate limit fixes 2026-02-06 11:09:34 +02:00
anonpenguin23
7690b22c0a Improved performance on request journey with cache and some tricks 2026-02-06 08:30:11 +02:00
anonpenguin23
854523c3a9 Fixed bugs on pubsub and ipfs 2026-02-06 07:21:26 +02:00
anonpenguin23
02b5c095d0 More bug fixing 2026-02-05 16:12:52 +02:00
anonpenguin23
c855b790f8 Updated the way we spawn services on namespace added systemd 2026-02-04 17:17:01 +02:00
anonpenguin23
f972358e78 Bored of fixing bugs 2026-02-04 16:14:49 +02:00
anonpenguin23
d85ed032f8 Bug fixing 2026-02-03 17:27:36 +02:00
anonpenguin23
156de7eb19 Bug fixing 2026-02-03 13:59:03 +02:00
anonpenguin23
65ffd28151 DNS Bug Fixing Filtering out private WG ip's 2026-02-03 07:01:54 +02:00
anonpenguin23
11d5c1b19a Bug fixing 2026-02-02 16:18:13 +02:00
anonpenguin23
859c30fcd9 Bug fixing 2026-02-02 14:55:29 +02:00
anonpenguin23
e3dd359e55 Bug fixing 2026-02-02 08:39:42 +02:00