57 Commits

Author SHA1 Message Date
anonpenguin23
986212d4d4 feat(security): add manifest signing, TLS TOFU, refresh token migration
- Invalidate plaintext refresh tokens (migration 019)
- Add `--sign` flag to `orama build` for rootwallet manifest signing
- Add `--ca-fingerprint` TOFU verification for production joins/invites
- Save cluster secrets from join (RQLite auth, Olric key, IPFS peers)
- Add RQLite auth config fields
2026-02-28 15:40:43 +02:00
anonpenguin23
f71593af4a feat: add sandbox command and vault guardian build
- integrate Zig-built vault-guardian into cross-compile process
- add `orama sandbox` for ephemeral Hetzner Cloud clusters
- update docs for `orama node` subcommands and new guides
2026-02-27 15:22:51 +02:00
anonpenguin23
99b4a319f8 feat: enhance WebRTC port allocation with existing allocation checks and increase upload timeout 2026-02-22 11:39:59 +02:00
anonpenguin23
6cb7661183 feat: implement SFU and TURN server functionality
- Add signaling package with message types and structures for SFU communication.
- Implement client and server message serialization/deserialization tests.
- Enhance systemd manager to handle SFU and TURN services, including start/stop logic.
- Create TURN server configuration and main server logic with HMAC-SHA1 authentication.
- Add tests for TURN server credential generation and validation.
- Define systemd service files for SFU and TURN services.
2026-02-21 11:17:13 +02:00
anonpenguin23
124816f662 Enhance health checker and deployment handling
- Added support for "degraded" deployment status in types.
- Updated health checker initialization to include process manager and node ID.
- Refactored health checker tests to accommodate new process manager functionality.
- Implemented logic to handle unhealthy deployments, including restart and failure marking.
- Enhanced deployment reconciliation to manage under-replicated scenarios.
- Updated gateway handlers and middleware to consider "degraded" status in deployment queries.
2026-02-20 09:44:07 +02:00
anonpenguin23
ebb0e33da8 Implement WireGuard peer authentication and enhance internal request validation 2026-02-19 06:43:06 +02:00
anonpenguin23
a40e140a3a Writing more tests and fixed bug on rqlite address 2026-02-13 16:18:22 +02:00
anonpenguin23
35572d2aca Security audit, code cleanup 2026-02-13 14:33:11 +02:00
anonpenguin23
9d13b085ac Did a lot of cleanup and bug fixing 2026-02-13 12:47:02 +02:00
anonpenguin23
392eeb6cdc Auto node recovery and failover if node is dead, added wallet authentication with phantom and root wallet + cluster repair logic 2026-02-13 08:16:01 +02:00
anonpenguin23
9d83d2e8a7 Fixed firewall problem with anyone rellay and added authentication with root wallet 2026-02-13 07:38:54 +02:00
anonpenguin23
989be553d2 created patch and fixed authentication issue for ipfs bug and cross node communication 2026-02-12 07:40:43 +02:00
anonpenguin23
3f10ebdbd3 Did a small refactor, code clean, remove dead code, legacy etc 2026-02-11 07:43:33 +02:00
anonpenguin23
7b89e1b179 Added failover for namespaces 2026-02-10 17:32:29 +02:00
anonpenguin23
b55b5098f8 Updated health check 2026-02-10 16:40:01 +02:00
anonpenguin23
f0f680090d Improved performance on request journey with cache and some tricks 2026-02-06 08:30:11 +02:00
anonpenguin23
03203defcb Fixed bugs on pubsub and ipfs 2026-02-06 07:21:26 +02:00
anonpenguin23
4d6c525383 Bored of fixing bugs 2026-02-04 16:14:49 +02:00
anonpenguin23
22e60652a5 Bug fixing 2026-02-03 13:59:03 +02:00
anonpenguin23
cf065f79d8 Bug fixing 2026-02-02 16:18:13 +02:00
anonpenguin23
11cb92098e Bug fixing 2026-02-02 14:55:29 +02:00
anonpenguin23
0f6b3d0abb Added self signed cert fallback, fixed dns bugs 2026-01-31 10:07:15 +02:00
anonpenguin23
7845d36b32 Added wireguard and updated installation process and added more tests 2026-01-30 15:30:18 +02:00
anonpenguin23
bf0dda4b76 Fixed dns failover middleware 2026-01-29 13:07:05 +02:00
anonpenguin23
6d4d072cdc Updated docs and added replication and load balancing for deployments 2026-01-29 11:44:50 +02:00
anonpenguin23
5a8c37b00c Round Robin DNS fix for deployments (update, rollback etc) 2026-01-29 09:53:11 +02:00
anonpenguin23
3339549549 bug fixing on namespaces 2026-01-28 13:33:15 +02:00
anonpenguin23
5cbf1ac166 namespaces on gateway, load balancer and rqlite and olric namespaces 2026-01-28 11:24:21 +02:00
anonpenguin23
71ff95ae5f fixing bugs on tests and on codebase 2026-01-26 14:41:26 +02:00
anonpenguin23
6efece9e95 Extra tests and a lot of bug fixing 2026-01-26 07:53:35 +02:00
anonpenguin23
9c766a4c3b pushed more changes 2026-01-24 16:00:28 +02:00
anonpenguin23
ea21a10d98 fixed deployments 2026-01-24 12:55:17 +02:00
anonpenguin23
a382c25eeb added support for different domain except orama.network 2026-01-24 09:26:31 +02:00
anonpenguin23
3428ee6c0e fixed some more tests 2026-01-22 17:13:08 +02:00
anonpenguin23
3e4a3711f9 fixed more tests 2026-01-22 15:42:54 +02:00
anonpenguin23
335dc269de fixing tests 2026-01-22 15:21:46 +02:00
anonpenguin23
203d4ab0ff added some tests 2026-01-22 14:39:50 +02:00
anonpenguin23
43f3fb52cf a lot of changes 2026-01-22 13:04:52 +02:00
anonpenguin23
f1dd9e1048 Refactored the whole codebase to be much cleaner 2026-01-20 10:03:55 +02:00
anonpenguin23
7f57b24cc2 feat: enhance serverless function management and logging
- Updated the serverless functions table schema to remove the version constraint for uniqueness, allowing for more flexible function definitions.
- Enhanced the serverless engine to support HTTP fetch functionality, enabling external API calls from serverless functions.
- Implemented logging capabilities for function invocations, capturing detailed logs for better debugging and monitoring.
- Improved the authentication middleware to handle public endpoints more effectively, ensuring seamless access to serverless functions.
- Added new configuration options for serverless functions, including memory limits, timeout settings, and retry parameters, to optimize performance and reliability.
2026-01-02 08:40:28 +02:00
anonpenguin23
6bb98c1d91 feat: refactor API gateway and CLI utilities for improved functionality
- Updated the API gateway documentation to reflect changes in architecture and functionality, emphasizing its role as a multi-functional entry point for decentralized services.
- Refactored CLI commands to utilize utility functions for better code organization and maintainability.
- Introduced new utility functions for handling peer normalization, service management, and port validation, enhancing the overall CLI experience.
- Added a new production installation script to streamline the setup process for users, including detailed dry-run summaries for better visibility.
- Enhanced validation mechanisms for configuration files and swarm keys, ensuring robust error handling and user feedback during setup.
2025-12-31 10:16:26 +02:00
anonpenguin23
b317407e16 feat: enhance IPFS integration and swarm key management
- Introduced IPFS peer information handling for improved network discovery and configuration.
- Added validation for the 64-hex swarm key, ensuring proper input during installation.
- Updated the installer to collect and store IPFS peer details, enhancing the setup experience for private networks.
- Enhanced the production setup to configure IPFS peering for better node discovery in private environments.
- Improved documentation to reflect new IPFS-related configuration options and swarm key requirements.
2025-11-28 14:25:31 +02:00
anonpenguin23
f66b4b5e97 refactor: streamline development and production command structure
- Consolidated development commands into a new `dev` command group for better organization.
- Introduced a `prod` command group to manage production environment operations.
- Updated Makefile to simplify the development environment setup and improve logging.
- Enhanced README to clarify the development process and health check requirements.
- Removed deprecated configuration and service management commands to streamline the CLI interface.
2025-11-10 05:34:50 +02:00
anonpenguin23
aae78ce2e0 feat: add cache multi-get handler and improve API key extraction
- Implemented a new cacheMultiGetHandler to retrieve multiple keys from the Olric cache in a single request.
- Enhanced the extractAPIKey function to prioritize the X-API-Key header and improve handling of non-JWT Bearer tokens.
- Updated routes to include the new multi-get endpoint for cache operations.
2025-11-07 10:33:25 +02:00
anonpenguin23
09fa2c9ea1 feat: integrate Anyone Relay (Anon) into the development environment
- Added support for installing and configuring the Anyone Relay (Anon) for anonymous networking in the setup process.
- Updated the Makefile to include the Anon client in the development stack, allowing it to run alongside other services.
- Implemented a new HTTP proxy handler for the Anon service, enabling proxied requests through the Anyone network.
- Enhanced the installation script to manage Anon installation, configuration, and firewall settings.
- Introduced tests for the Anon proxy handler to ensure proper request validation and error handling.
- Updated documentation to reflect the new Anon service and its usage in the development environment.
2025-10-30 06:21:32 +02:00
277c532a78 feat: enhance API key management and ownership recording in verifyHandler
- Implemented logic to ensure an API key is created or retrieved for each wallet during the verification process.
- Added best-effort recording of ownership for both API keys and wallets in the namespace ownership database.
- Improved error handling and logging for better traceability of ownership checks and API key operations.
- Cleaned up unnecessary comments and whitespace in the auth_handlers.go file for better code readability.
2025-10-29 06:53:51 +02:00
anonpenguin23
1b198a1a88 Update CHANGELOG.md for version 0.51.2, enhance API key extraction to support query parameters, and implement internal auth context in status and storage handlers. 2025-10-22 08:41:15 +03:00
anonpenguin23
11c47067e9 - Created namespace_helpers on gateway
- Removed old pkg/gatway storage and migrated to new rqlite
- Updated readme
- Created new rqlite implementation
- Updated changelog
- Fixed migration error on migrations.go applySQL
2025-09-23 07:19:35 +03:00
anonpenguin23
ff3b15108d replaced git.debros.io with github.com 2025-09-18 15:27:53 +03:00
df681be07f Refine authorization to distinguish API keys
Add deduplication to pubsub websocket handler to drop recent duplicate
messages within 2 seconds
2025-08-23 15:39:22 +03:00