archy/apps/indeedhub/README.md

# Indeehub — Bitcoin Documentary Streaming

Bitcoin documentary streaming platform featuring God Bless Bitcoin and other educational content about Bitcoin, sovereignty, and decentralized technology.

Self-hosted Next.js app with Nostr identity sign-in via Archipelago's NIP-07 provider.

## Building the Image

The app image is built from the **indeehub-frontend** project at `~/Projects/indeehub-frontend`.

### Option 1: Use the build script

```bash
# From archy repo root
./apps/indeedhub/build-from-prototype.sh
```

### Option 2: Build from source directory

```bash
cd ~/Projects/indeehub-frontend
podman build -t localhost/indeedhub:latest -f ~/Projects/archy/apps/indeedhub/Dockerfile .
```

## Installing from App Store

1. **Build the image** using one of the options above (must exist before install)
2. Go to **Dashboard -> App Store** (Marketplace)
3. Find **Indeehub** and click **Install**
4. On first launch, pick a Nostr identity to sign in with
5. The app appears in **My Apps** once the container is running

## Port

- Web UI: 8190 (maps to container port 3000)

## Container

- Image: `localhost/indeedhub:latest` (built locally, not pulled from a registry)
- Runtime: Node.js 20 (Next.js standalone)
- Port: 8190 -> 3000
- Read-only root filesystem with tmpfs for /tmp and .next/cache

## Nostr Identity

On first launch, Archipelago shows a cypherpunk identity picker modal. Select which of your identities to use for NIP-07 signing. The NIP-07 provider is injected automatically via nginx proxy.

## Services

The app connects to the following external services (configured at build time):
- Indeehub API (content, auth, streaming)
- AWS S3 (media storage via CloudFront CDN)
- Nostr relays (via NIP-07 provider from Archipelago)
release(v1.7.41-alpha): post-OTA auto-rollback so a bad release cannot strand the fleet Closes failure mode FM5 from docs/bulletproof-containers.md: the v1.7.38 + v1.7.39 rollouts left every affected node on an unreachable UI (nginx 500) with no recovery path short of SSH. This release adds a self-check guardrail to the update flow. What changed: - apply_update() writes a pending-verify marker with old+new version and a 150s deadline immediately before scheduling the service restart. - verify_pending_update() runs from main.rs startup. If the marker is present and within its freshness window, the new binary waits 15s for nginx + backend to settle, then probes https://127.0.0.1/ every 5s for up to 90s (self-signed certs accepted). - On any probe success within the window, the marker is cleared and nothing else happens. - On window-exhaust, the new binary: 1. Moves the broken /opt/archipelago/web-ui to web-ui.failed.<ts> (quarantined, not deleted, so we can post-mortem). 2. Restores web-ui.bak on top of web-ui. 3. Calls rollback_update() to restore the previous binary. 4. Updates state.current_version to reflect the rollback. 5. systemctl --no-block restart archipelago so the OLD binary boots. - Markers older than 10 minutes are treated as stale and cleared without probing, so a crashed-during-startup marker from weeks ago cannot spontaneously roll back a healthy node on a later reboot. - rollback_update() binary copy now goes through host_sudo instead of tokio::fs::copy, so it escapes the service's ProtectSystem=strict mount namespace. Without this, the rollback silently failed with EROFS on /usr/local/bin and orphaned the rollback - the exact opposite of what auto-rollback is for. Tests: 4 new unit tests in update::tests covering marker round-trip, absent-marker noop, no-panic on verify_pending_update with nothing to verify, and an invariant assert that the 90s probe window stays below the 600s stale threshold. All passing. Side fix: scripts/create-release-manifest.sh was dying with exit 141 (SIGPIPE from tar tvzf pipe head pipe awk) under set -euo pipefail. Replaced with a single awk NR==1 that doesn't short-circuit the upstream pipe, so the release-build flow is idempotent again. 2026-04-22 16:14:35 -04:00			`# Indeehub — Bitcoin Documentary Streaming`

			`Bitcoin documentary streaming platform featuring God Bless Bitcoin and other educational content about Bitcoin, sovereignty, and decentralized technology.`

			`Self-hosted Next.js app with Nostr identity sign-in via Archipelago's NIP-07 provider.`

			`## Building the Image`

			The app image is built from the indeehub-frontend project at `~/Projects/indeehub-frontend`.

			`### Option 1: Use the build script`

			```bash
			`# From archy repo root`
			`./apps/indeedhub/build-from-prototype.sh`
			```

			`### Option 2: Build from source directory`

			```bash
			`cd ~/Projects/indeehub-frontend`
			`podman build -t localhost/indeedhub:latest -f ~/Projects/archy/apps/indeedhub/Dockerfile .`
			```

			`## Installing from App Store`

			`1. Build the image using one of the options above (must exist before install)`
			`2. Go to Dashboard -> App Store (Marketplace)`
			`3. Find Indeehub and click Install`
			`4. On first launch, pick a Nostr identity to sign in with`
			`5. The app appears in My Apps once the container is running`

			`## Port`

			`- Web UI: 8190 (maps to container port 3000)`

			`## Container`

			- Image: `localhost/indeedhub:latest` (built locally, not pulled from a registry)
			`- Runtime: Node.js 20 (Next.js standalone)`
			`- Port: 8190 -> 3000`
			`- Read-only root filesystem with tmpfs for /tmp and .next/cache`

			`## Nostr Identity`

			`On first launch, Archipelago shows a cypherpunk identity picker modal. Select which of your identities to use for NIP-07 signing. The NIP-07 provider is injected automatically via nginx proxy.`

			`## Services`

			`The app connects to the following external services (configured at build time):`
			`- Indeehub API (content, auth, streaming)`
			`- AWS S3 (media storage via CloudFront CDN)`
			`- Nostr relays (via NIP-07 provider from Archipelago)`