archy/apps/nostr-rs-relay/manifest.yml

app:
  id: nostr-rs-relay
  name: Nostr Relay (Rust)
  version: 0.8.0
  description: High-performance Nostr relay written in Rust. Host your own decentralized social media relay and earn networking profits.
  
  container:
    image: scsibug/nostr-rs-relay:0.8.9
    image_signature: cosign://...
    pull_policy: verify-signature
    data_uid: "1000:1000"
    
  dependencies:
    - storage: 10Gi  # For event storage
    
  resources:
    cpu_limit: 2
    memory_limit: 1Gi
    disk_limit: 10Gi
    
  security:
    capabilities: []
    readonly_root: true
    no_new_privileges: true
    user: 1000
    seccomp_profile: default
    network_policy: isolated
    apparmor_profile: nostr-relay
    
  ports:
    - host: 18081
      container: 8080
      protocol: tcp  # HTTP/WebSocket
    
  volumes:
    - type: bind
      source: /var/lib/archipelago/nostr-relay
      target: /usr/src/app/db
      options: [rw]
      
  environment:
    - RELAY_NAME=Archipelago Nostr Relay
    - RELAY_DESCRIPTION=Self-hosted Nostr relay on Archipelago
    - MAX_EVENTS=1000000
    - MAX_SUBSCRIPTIONS=100
    
  health_check:
    type: http
    endpoint: http://localhost:8080
    path: /
    interval: 30s
    timeout: 30s
    retries: 5
    
  nostr_integration:
    relay_type: public
    monetization_enabled: true  # Earn networking profits
    event_storage: sqlite
Initial commit 2026-01-24 22:01:51 +00:00			`app:`
			`id: nostr-rs-relay`
			`name: Nostr Relay (Rust)`
			`version: 0.8.0`
			`description: High-performance Nostr relay written in Rust. Host your own decentralized social media relay and earn networking profits.`

			`container:`
feat: complete Phase 1 foundation hardening + three-mode UI design doc Phase 1a — Gradient Removal: - Replaced all gradient-button/gradient-card with glass-button/path-option-card - Removed banned gradient CSS classes Phase 1b — Security Hardening: - SecretsManager: AES-256-GCM encryption (core/security) - electrs_status: credentials from env vars instead of hardcoded - port_manager: RwLock proper error handling (no unwrap) - Pinned all 11 :latest manifest images to specific versions - parmanode converter: pinned inferred image versions Phase 1c — Code Quality: - Split rpc.rs (1795 lines) into 6 handler modules (auth, node, container, package, peers) - Removed sideload code (UI, store, RPC client, 3 doc files) - Fixed body background flash on logout/refresh - Replaced 30 TypeScript `any` types with proper types - Deleted HelloWorld.vue, removed TODO comments - Added set -euo pipefail to all shell scripts - Made deploy script verbose with timestamps and elapsed time Also adds: - CLAUDE.md project guide - docs/three-mode-ui-design.md — design spec for Easy/Pro/Chat UI modes - OnlineStatusPill component Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> 2026-03-04 05:23:42 +00:00			`image: scsibug/nostr-rs-relay:0.8.9`
Initial commit 2026-01-24 22:01:51 +00:00			`image_signature: cosign://...`
			`pull_policy: verify-signature`
chore(release): stage v1.7.52-alpha 2026-05-05 11:29:18 -04:00			`data_uid: "1000:1000"`
Initial commit 2026-01-24 22:01:51 +00:00
			`dependencies:`
			`- storage: 10Gi # For event storage`

			`resources:`
			`cpu_limit: 2`
			`memory_limit: 1Gi`
			`disk_limit: 10Gi`

			`security:`
			`capabilities: []`
			`readonly_root: true`
fix: harden all 23 app manifests with no_new_privileges, user, seccomp (MAINT-04) Added no_new_privileges: true, user: 1000, and seccomp_profile: default to all app manifests. Created community app review checklist. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> 2026-03-11 18:13:28 +00:00			`no_new_privileges: true`
			`user: 1000`
			`seccomp_profile: default`
Initial commit 2026-01-24 22:01:51 +00:00			`network_policy: isolated`
			`apparmor_profile: nostr-relay`

			`ports:`
app-platform: generate catalog from app manifests 2026-06-11 00:24:20 -04:00			`- host: 18081`
mid code commit 2026-01-24 23:18:24 +00:00			`container: 8080`
			`protocol: tcp # HTTP/WebSocket`
Initial commit 2026-01-24 22:01:51 +00:00
			`volumes:`
			`- type: bind`
			`source: /var/lib/archipelago/nostr-relay`
chore(release): stage v1.7.52-alpha 2026-05-05 11:29:18 -04:00			`target: /usr/src/app/db`
Initial commit 2026-01-24 22:01:51 +00:00			`options: [rw]`

			`environment:`
			`- RELAY_NAME=Archipelago Nostr Relay`
			`- RELAY_DESCRIPTION=Self-hosted Nostr relay on Archipelago`
			`- MAX_EVENTS=1000000`
			`- MAX_SUBSCRIPTIONS=100`

			`health_check:`
			`type: http`
chore(release): stage v1.7.55-alpha 2026-05-13 15:09:22 -04:00			`endpoint: http://localhost:8080`
			`path: /`
Initial commit 2026-01-24 22:01:51 +00:00			`interval: 30s`
app-platform: generate catalog from app manifests 2026-06-11 00:24:20 -04:00			`timeout: 30s`
			`retries: 5`
Initial commit 2026-01-24 22:01:51 +00:00
			`nostr_integration:`
			`relay_type: public`
			`monetization_enabled: true # Earn networking profits`
			`event_storage: sqlite`