anonpenguin23 fd87eec476 feat(security): add manifest signing, TLS TOFU, refresh token migration
- Invalidate plaintext refresh tokens (migration 019)
- Add `--sign` flag to `orama build` for rootwallet manifest signing
- Add `--ca-fingerprint` TOFU verification for production joins/invites
- Save cluster secrets from join (RQLite auth, Olric key, IPFS peers)
- Add RQLite auth config fields
2026-02-28 15:40:43 +02:00

22 lines
846 B
Go

package production
// Central path constants for the Orama Network production environment.
// All services run as root with /opt/orama as the base directory.
const (
OramaBase = "/opt/orama"
OramaBinDir = "/opt/orama/bin"
OramaSrcDir = "/opt/orama/src"
OramaDir = "/opt/orama/.orama"
OramaConfigs = "/opt/orama/.orama/configs"
OramaSecrets = "/opt/orama/.orama/secrets"
OramaData = "/opt/orama/.orama/data"
OramaLogs = "/opt/orama/.orama/logs"
// Pre-built binary archive paths (created by `orama build`)
OramaManifest = "/opt/orama/manifest.json"
OramaManifestSig = "/opt/orama/manifest.sig"
OramaArchiveBin = "/opt/orama/bin" // Pre-built binaries
OramaSystemdDir = "/opt/orama/systemd" // Namespace service templates
OramaPackagesDir = "/opt/orama/packages" // .deb packages (e.g., anon.deb)
)