From 36a610102626be0dfa73bd972d2d45027a667b37 Mon Sep 17 00:00:00 2001 From: Dorian Date: Wed, 22 Apr 2026 13:02:24 -0400 Subject: [PATCH] release(v1.7.38-alpha): onboarding auto-heal + silent returning logins + app-store trim MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit - auth.rs now infers onboarding-complete from setup_complete + password_hash so nodes stop bouncing users through the intro wizard after browser clear / update / reboot; the flag self-heals to disk on next check - frontend: "backend uncertain" no longer defaults to /onboarding/intro — useOnboarding returns null + callers poll / retry instead of flashing the wizard - login sounds (synthwave, welcome voice, pop, whoosh, oomph) gated by isFirstInstallPhase(); typing sounds unaffected - removed FIPS app, Nostr Relay, Nostr VPN, Routstr, Penpot from catalog, frontend config, Rust AppMetadata + install dispatch + install_penpot_stack; docker/fips-ui + docker/nostr-vpn-ui + apps/penpot dirs and 5 icons deleted; 15 image versions deleted from tx1138, .168, gitea-local registries (.160 Gitea was 502 at release time — follow-up) - AIUI baked into frontend release tarball via demo/aiui/; deploy-to-target falls back to demo/aiui/ when the AIUI sibling checkout is missing - prebuild hook syncs app-catalog/catalog.json → public/catalog.json so the two copies can no longer drift (was the source of the "apps still visible" bug — public/ had stale data) Co-Authored-By: Claude Opus 4.7 (1M context) --- app-catalog/catalog.json | 40 -- apps/penpot/Dockerfile | 5 - apps/penpot/manifest.yml | 51 -- .../src/api/rpc/package/install.rs | 54 +- .../archipelago/src/api/rpc/package/stacks.rs | 228 --------- core/archipelago/src/auth.rs | 32 +- .../src/container/docker_packages.rs | 19 - docker/fips-ui/Dockerfile | 10 - docker/fips-ui/index.html | 236 --------- docker/fips-ui/nginx.conf | 11 - docker/nostr-vpn-ui/Dockerfile | 10 - docker/nostr-vpn-ui/index.html | 232 --------- docker/nostr-vpn-ui/nginx.conf | 11 - neode-ui/package-lock.json | 4 +- neode-ui/package.json | 3 +- neode-ui/public/assets/img/app-icons/fips.svg | 4 - .../assets/img/app-icons/nostr-rs-relay.svg | 11 - .../public/assets/img/app-icons/nostr-vpn.svg | 4 - .../public/assets/img/app-icons/penpot.webp | Bin 6896 -> 0 bytes .../public/assets/img/app-icons/routstr.svg | 4 - neode-ui/public/catalog.json | 467 +++++------------- neode-ui/src/App.vue | 27 +- neode-ui/src/components/EasyHome.vue | 1 - neode-ui/src/composables/useLoginSounds.ts | 27 + neode-ui/src/composables/useOnboarding.ts | 54 +- neode-ui/src/router/index.ts | 29 +- neode-ui/src/stores/appLauncher.ts | 2 - neode-ui/src/utils/dummyApps.ts | 36 -- neode-ui/src/views/GoalDetail.vue | 1 - neode-ui/src/views/Kiosk.vue | 2 - neode-ui/src/views/RootRedirect.vue | 11 +- .../src/views/appDetails/appDetailsData.ts | 2 - .../src/views/appSession/appSessionConfig.ts | 14 +- .../src/views/appSession/useAppIdentity.ts | 2 +- neode-ui/src/views/apps/appsConfig.ts | 7 +- neode-ui/src/views/discover/curatedApps.ts | 8 - .../src/views/marketplace/marketplaceData.ts | 62 --- .../src/views/settings/AccountInfoSection.vue | 12 + scripts/create-release-manifest.sh | 24 +- scripts/deploy-to-target.sh | 7 + 40 files changed, 317 insertions(+), 1447 deletions(-) delete mode 100644 apps/penpot/Dockerfile delete mode 100644 apps/penpot/manifest.yml delete mode 100644 docker/fips-ui/Dockerfile delete mode 100644 docker/fips-ui/index.html delete mode 100644 docker/fips-ui/nginx.conf delete mode 100644 docker/nostr-vpn-ui/Dockerfile delete mode 100644 docker/nostr-vpn-ui/index.html delete mode 100644 docker/nostr-vpn-ui/nginx.conf delete mode 100644 neode-ui/public/assets/img/app-icons/fips.svg delete mode 100644 neode-ui/public/assets/img/app-icons/nostr-rs-relay.svg delete mode 100644 neode-ui/public/assets/img/app-icons/nostr-vpn.svg delete mode 100644 neode-ui/public/assets/img/app-icons/penpot.webp delete mode 100644 neode-ui/public/assets/img/app-icons/routstr.svg diff --git a/app-catalog/catalog.json b/app-catalog/catalog.json index 542e45c7..288bd466 100644 --- a/app-catalog/catalog.json +++ b/app-catalog/catalog.json @@ -110,14 +110,6 @@ "dockerImage": "git.tx1138.com/lfg2025/searxng:latest", "repoUrl": "https://github.com/searxng/searxng" }, - { - "id": "nostr-rs-relay", "title": "Nostr Relay", "version": "0.9.0", - "description": "Your own Nostr relay. Store events locally, relay for friends.", - "icon": "/assets/img/app-icons/nostr-rs-relay.svg", - "author": "scsiblade", "category": "nostr", - "dockerImage": "git.tx1138.com/lfg2025/nostr-rs-relay:0.9.0", - "repoUrl": "https://sr.ht/~gheartsfield/nostr-rs-relay/" - }, { "id": "fedimint", "title": "Fedimint", "version": "0.10.0", "description": "Federated Bitcoin mint with privacy through federated guardians.", @@ -190,30 +182,6 @@ "dockerImage": "git.tx1138.com/lfg2025/uptime-kuma:1", "repoUrl": "https://github.com/louislam/uptime-kuma" }, - { - "id": "nostr-vpn", "title": "Nostr VPN", "version": "0.3.7", - "description": "Tailscale-style mesh VPN with Nostr control plane.", - "icon": "/assets/img/app-icons/nostr-vpn.svg", - "author": "Martti Malmi", "category": "networking", - "dockerImage": "git.tx1138.com/lfg2025/nostr-vpn:v0.3.7", - "repoUrl": "https://github.com/mmalmi/nostr-vpn" - }, - { - "id": "fips", "title": "FIPS", "version": "0.1.0", - "description": "Free Internetworking Peering System. Encrypted mesh network.", - "icon": "/assets/img/app-icons/fips.svg", - "author": "Jim Corgan", "category": "networking", - "dockerImage": "git.tx1138.com/lfg2025/fips:v0.1.0", - "repoUrl": "https://github.com/jmcorgan/fips" - }, - { - "id": "routstr", "title": "Routstr", "version": "0.4.3", - "description": "Decentralized AI inference proxy with Cashu ecash.", - "icon": "/assets/img/app-icons/routstr.svg", - "author": "Routstr", "category": "community", - "dockerImage": "git.tx1138.com/lfg2025/routstr:v0.4.3", - "repoUrl": "https://github.com/routstr/routstr-core" - }, { "id": "dwn", "title": "Decentralized Web Node", "version": "0.4.0", "description": "Own your data with DID-based access control.", @@ -230,14 +198,6 @@ "dockerImage": "git.tx1138.com/lfg2025/endurain:0.8.0", "repoUrl": "https://github.com/joaovitoriasilva/endurain" }, - { - "id": "penpot", "title": "Penpot", "version": "2.4", - "description": "Open-source design platform. Self-hosted Figma alternative.", - "icon": "/assets/img/app-icons/penpot.webp", - "author": "Penpot", "category": "data", - "dockerImage": "git.tx1138.com/lfg2025/penpot-frontend:2.4", - "repoUrl": "https://github.com/penpot/penpot" - }, { "id": "photoprism", "title": "PhotoPrism", "version": "240915", "description": "AI-powered photo management with facial recognition.", diff --git a/apps/penpot/Dockerfile b/apps/penpot/Dockerfile deleted file mode 100644 index 692155bd..00000000 --- a/apps/penpot/Dockerfile +++ /dev/null @@ -1,5 +0,0 @@ -# Penpot - uses official image -FROM penpot/penpot:latest - -# Default configuration is in the image -# No additional setup needed diff --git a/apps/penpot/manifest.yml b/apps/penpot/manifest.yml deleted file mode 100644 index 3259183a..00000000 --- a/apps/penpot/manifest.yml +++ /dev/null @@ -1,51 +0,0 @@ -app: - id: penpot - name: Penpot - version: 2.0.0 - description: Open-source design and prototyping platform. Design tools for teams. - - container: - image: penpotapp/frontend:2.13.3 - image_signature: cosign://... - pull_policy: if-not-present - - dependencies: - - storage: 10Gi - - resources: - cpu_limit: 4 - memory_limit: 4Gi - disk_limit: 10Gi - - security: - capabilities: [] - readonly_root: true - no_new_privileges: true - user: 1000 - seccomp_profile: default - network_policy: isolated - apparmor_profile: penpot - - ports: - - host: 8089 - container: 80 - protocol: tcp # Web UI - - volumes: - - type: bind - source: /var/lib/archipelago/penpot - target: /app/data - options: [rw] - - environment: - - PENPOT_PUBLIC_URI=http://localhost:8089 - - PENPOT_DATABASE_URI=postgresql://penpot:penpot@penpot-db:5432/penpot - - PENPOT_REDIS_URI=redis://penpot-redis:6379 - - health_check: - type: http - endpoint: http://localhost:8089 - path: /api/health - interval: 30s - timeout: 5s - retries: 3 diff --git a/core/archipelago/src/api/rpc/package/install.rs b/core/archipelago/src/api/rpc/package/install.rs index 3b3c3d9b..38950385 100644 --- a/core/archipelago/src/api/rpc/package/install.rs +++ b/core/archipelago/src/api/rpc/package/install.rs @@ -86,9 +86,6 @@ impl RpcHandler { if package_id == "immich" { return self.install_immich_stack().await; } - if package_id == "penpot" || package_id == "penpot-frontend" { - return self.install_penpot_stack().await; - } if matches!(package_id, "btcpay-server" | "btcpayserver" | "btcpay") { return self.install_btcpay_stack().await; } @@ -312,11 +309,6 @@ impl RpcHandler { } } - // TUN device for mesh networking apps - if matches!(package_id, "nostr-vpn" | "fips") { - run_args.push("--device=/dev/net/tun"); - } - // Create data directories (mkdir only — chown happens AFTER config files are written) for volume in &volumes { if let Some(host_path) = volume.split(':').next() { @@ -358,36 +350,6 @@ impl RpcHandler { } } - // Pre-install: write Nostr identity key files for headless Nostr-aware apps - if matches!(package_id, "nostr-vpn" | "fips") { - let nostr_secret = - std::fs::read_to_string("/var/lib/archipelago/identity/nostr_secret") - .map(|s| s.trim().to_string()) - .unwrap_or_default(); - if !nostr_secret.is_empty() { - let key_dir = match package_id { - "nostr-vpn" => "/var/lib/archipelago/nostr-vpn", - "fips" => "/var/lib/archipelago/fips/config", - _ => unreachable!(), - }; - let key_path = match package_id { - "nostr-vpn" => format!("{}/nostr_secret", key_dir), - "fips" => format!("{}/fips.key", key_dir), - _ => unreachable!(), - }; - tokio::fs::create_dir_all(key_dir).await.ok(); - tokio::fs::write(&key_path, &nostr_secret).await.ok(); - // Restrict permissions on key file - #[cfg(unix)] - { - use std::os::unix::fs::PermissionsExt; - let perms = std::fs::Permissions::from_mode(0o600); - std::fs::set_permissions(&key_path, perms).ok(); - } - info!("Wrote Nostr identity key for {}", package_id); - } - } - // NOW chown data directories to container UID (after all config files are written) self.create_data_dirs(package_id, &volumes).await; @@ -816,7 +778,7 @@ impl RpcHandler { "grafana" => 472, "lnd" => 1000, "mariadb" | "mysql" | "mysql-mempool" | "archy-mempool-db" => 999, - "postgres" | "btcpay-postgres" | "immich-postgres" | "penpot-postgres" + "postgres" | "btcpay-postgres" | "immich-postgres" | "archy-btcpay-db" | "nextcloud-db" => 70, "electrumx" | "electrs" => 1000, _ => 0, // Most containers run as root (UID 0) @@ -1379,20 +1341,6 @@ server { "electrs-ui", )] } - "nostr-vpn" => { - vec![( - "archy-nostr-vpn-ui", - "/opt/archipelago/docker/nostr-vpn-ui", - "nostr-vpn-ui", - )] - } - "fips" => { - vec![( - "archy-fips-ui", - "/opt/archipelago/docker/fips-ui", - "fips-ui", - )] - } _ => vec![], }; diff --git a/core/archipelago/src/api/rpc/package/stacks.rs b/core/archipelago/src/api/rpc/package/stacks.rs index 47c9f3d8..c2e6d6c3 100644 --- a/core/archipelago/src/api/rpc/package/stacks.rs +++ b/core/archipelago/src/api/rpc/package/stacks.rs @@ -273,234 +273,6 @@ impl RpcHandler { })) } - /// Install Penpot stack (postgres + valkey + backend + exporter + frontend). - pub(super) async fn install_penpot_stack(&self) -> Result { - if let Some(adopted) = adopt_stack_if_exists( - "penpot-frontend", - "penpot", - &[ - "penpot-postgres", - "penpot-valkey", - "penpot-backend", - "penpot-exporter", - "penpot-frontend", - ], - ) - .await? - { - return Ok(adopted); - } - - let images = [ - "git.tx1138.com/lfg2025/postgres:15", - "git.tx1138.com/lfg2025/valkey:8.1", - "git.tx1138.com/lfg2025/penpot-backend:2.4", - "git.tx1138.com/lfg2025/penpot-exporter:2.4", - "git.tx1138.com/lfg2025/penpot-frontend:2.4", - ]; - for img in &images { - pull_image_with_retry(img).await?; - } - - let _ = tokio::process::Command::new("sudo") - .args(["mkdir", "-p", "/var/lib/archipelago/penpot-assets"]) - .output() - .await; - let _ = tokio::process::Command::new("podman") - .args(["network", "create", "penpot-net"]) - .output() - .await; - - // Generate a stable secret key derived from the data directory - let secret = { - use sha2::{Digest, Sha256}; - let mut hasher = Sha256::new(); - hasher.update(b"penpot-secret-"); - hasher.update(self.config.data_dir.to_string_lossy().as_bytes()); - hex::encode(hasher.finalize()) - }; - let host_ip = &self.config.host_ip; - - let _ = tokio::process::Command::new("podman") - .args([ - "run", - "-d", - "--name", - "penpot-postgres", - "--restart", - "unless-stopped", - "--network", - "penpot-net", - "--network-alias", - "penpot-postgres", - "--cap-drop=ALL", - "--cap-add=CHOWN", - "--cap-add=DAC_OVERRIDE", - "--cap-add=FOWNER", - "--cap-add=SETGID", - "--cap-add=SETUID", - "--security-opt=no-new-privileges:true", - "--memory=512m", - "--pids-limit=4096", - "--health-cmd=pg_isready -U penpot || exit 1", - "--health-interval=30s", - "--health-retries=3", - "-v", - "/var/lib/archipelago/penpot-postgres:/var/lib/postgresql/data", - "-e", - "POSTGRES_DB=penpot", - "-e", - "POSTGRES_USER=penpot", - "-e", - "POSTGRES_PASSWORD=penpot", - "git.tx1138.com/lfg2025/postgres:15", - ]) - .output() - .await; - tokio::time::sleep(std::time::Duration::from_secs(5)).await; - - let _ = tokio::process::Command::new("podman") - .args([ - "run", - "-d", - "--name", - "penpot-valkey", - "--restart", - "unless-stopped", - "--network", - "penpot-net", - "--network-alias", - "penpot-valkey", - "--cap-drop=ALL", - "--security-opt=no-new-privileges:true", - "--memory=192m", - "--pids-limit=2048", - "--health-cmd=valkey-cli ping || exit 1", - "--health-interval=30s", - "--health-retries=3", - "-e", - "VALKEY_EXTRA_FLAGS=--maxmemory 128mb --maxmemory-policy volatile-lfu", - "git.tx1138.com/lfg2025/valkey:8.1", - ]) - .output() - .await; - tokio::time::sleep(std::time::Duration::from_secs(3)).await; - - let _ = tokio::process::Command::new("podman") - .args([ - "run", - "-d", - "--name", - "penpot-backend", - "--restart", - "unless-stopped", - "--network", - "penpot-net", - "--network-alias", - "penpot-backend", - "--cap-drop=ALL", - "--security-opt=no-new-privileges:true", - "--memory=1g", - "--pids-limit=4096", - "-v", - "/var/lib/archipelago/penpot-assets:/opt/data/assets", - "-e", - &format!("PENPOT_PUBLIC_URI=http://{}:9001", host_ip), - "-e", - &format!("PENPOT_SECRET_KEY={}", secret), - "-e", - "PENPOT_DATABASE_URI=postgresql://penpot-postgres/penpot", - "-e", - "PENPOT_DATABASE_USERNAME=penpot", - "-e", - "PENPOT_DATABASE_PASSWORD=penpot", - "-e", - "PENPOT_REDIS_URI=redis://penpot-valkey/0", - "-e", - "PENPOT_OBJECTS_STORAGE_BACKEND=fs", - "-e", - "PENPOT_OBJECTS_STORAGE_FS_DIRECTORY=/opt/data/assets", - "-e", - "PENPOT_FLAGS=disable-email-verification enable-smtp enable-prepl-server disable-secure-session-cookies", - "git.tx1138.com/lfg2025/penpot-backend:2.4", - ]) - .output() - .await; - tokio::time::sleep(std::time::Duration::from_secs(5)).await; - - let _ = tokio::process::Command::new("podman") - .args([ - "run", - "-d", - "--name", - "penpot-exporter", - "--restart", - "unless-stopped", - "--network", - "penpot-net", - "--network-alias", - "penpot-exporter", - "--cap-drop=ALL", - "--security-opt=no-new-privileges:true", - "--memory=512m", - "--pids-limit=2048", - "-e", - &format!("PENPOT_SECRET_KEY={}", secret), - "-e", - "PENPOT_PUBLIC_URI=http://penpot-frontend:8080", - "-e", - "PENPOT_REDIS_URI=redis://penpot-valkey/0", - "git.tx1138.com/lfg2025/penpot-exporter:2.4", - ]) - .output() - .await; - tokio::time::sleep(std::time::Duration::from_secs(2)).await; - - let run = tokio::process::Command::new("podman") - .args([ - "run", - "-d", - "--name", - "penpot-frontend", - "--restart", - "unless-stopped", - "--network", - "penpot-net", - "--network-alias", - "penpot-frontend", - "--cap-drop=ALL", - "--security-opt=no-new-privileges:true", - "--memory=512m", - "--pids-limit=2048", - "-p", - "9001:8080", - "-v", - "/var/lib/archipelago/penpot-assets:/opt/data/assets", - "-e", - &format!("PENPOT_PUBLIC_URI=http://{}:9001", host_ip), - "-e", - "PENPOT_FLAGS=disable-email-verification enable-smtp enable-prepl-server disable-secure-session-cookies", - "git.tx1138.com/lfg2025/penpot-frontend:2.4", - ]) - .output() - .await - .context("Failed to start penpot-frontend")?; - - if !run.status.success() { - let stderr = String::from_utf8_lossy(&run.stderr); - return Err(anyhow::anyhow!( - "Failed to start Penpot frontend: {}", - stderr - )); - } - - info!("Penpot stack installed and started"); - Ok(serde_json::json!({ - "success": true, - "package_id": "penpot", - "message": "Penpot stack installed and started" - })) - } /// Install BTCPay stack (postgres + nbxplorer + btcpay-server). pub(super) async fn install_btcpay_stack(&self) -> Result { diff --git a/core/archipelago/src/auth.rs b/core/archipelago/src/auth.rs index b4f62e71..f3d91201 100644 --- a/core/archipelago/src/auth.rs +++ b/core/archipelago/src/auth.rs @@ -185,12 +185,32 @@ impl AuthManager { } } } - // Fallback: user.json - Ok(self - .get_user() - .await? - .map(|u| u.onboarding_complete) - .unwrap_or(false)) + // Fallback: user.json. A node that has a password set AND + // setup_complete=true has been through onboarding by + // definition — you can't reach the password-set step any + // other way. The separate `onboarding_complete` flag can drift + // out of sync (e.g. the completion RPC never reached disk, or + // the node was seeded from a backup pre-dating the flag), so + // auto-heal by inferring from setup_complete + password_hash. + // Without this, a fully-onboarded node whose `onboarding_complete` + // is stuck false will force its user back through the intro + // wizard on every cleared browser cache. + if let Some(u) = self.get_user().await? { + if u.onboarding_complete { + return Ok(true); + } + if u.setup_complete && !u.password_hash.is_empty() { + // Persist the healed state so subsequent calls skip this + // inference. Ignore write errors — returning true is + // still correct even if we can't persist. + let healed = OnboardingState { complete: true }; + if let Ok(json) = serde_json::to_string_pretty(&healed) { + let _ = fs::write(&onboarding_file, json).await; + } + return Ok(true); + } + } + Ok(false) } /// Check if 2FA is enabled for the user. diff --git a/core/archipelago/src/container/docker_packages.rs b/core/archipelago/src/container/docker_packages.rs index 8a97f5eb..7415049d 100644 --- a/core/archipelago/src/container/docker_packages.rs +++ b/core/archipelago/src/container/docker_packages.rs @@ -44,11 +44,6 @@ impl DockerPackageScanner { "nbxplorer", "mempool-db", "mempool-api", - "penpot-postgres", - "penpot-backend", - "penpot-exporter", - "penpot-valkey", - "penpot-mailcatch", "immich_postgres", "immich_redis", "endurain-db", @@ -416,13 +411,6 @@ fn get_app_metadata(app_id: &str) -> AppMetadata { repo: "https://github.com/cryptpad/cryptpad".to_string(), tier: "", }, - "penpot" | "penpot-frontend" => AppMetadata { - title: "Penpot".to_string(), - description: "Open-source design and prototyping".to_string(), - icon: "/assets/img/app-icons/penpot.webp".to_string(), - repo: "https://github.com/penpot/penpot".to_string(), - tier: "", - }, "nextcloud" => AppMetadata { title: "Nextcloud".to_string(), description: "Self-hosted cloud storage and file management".to_string(), @@ -500,13 +488,6 @@ fn get_app_metadata(app_id: &str) -> AppMetadata { repo: "https://github.com/indeedhub/indeedhub".to_string(), tier: "", }, - "nostr-rs-relay" => AppMetadata { - title: "Nostr Relay".to_string(), - description: "Run your own Nostr relay for sovereign event storage".to_string(), - icon: "/assets/img/app-icons/nostr-rs-relay.svg".to_string(), - repo: "https://sr.ht/~gheartsfield/nostr-rs-relay/".to_string(), - tier: "", - }, "dwn" => AppMetadata { title: "Decentralized Web Node".to_string(), description: "Store and sync personal data with DID-based access control".to_string(), diff --git a/docker/fips-ui/Dockerfile b/docker/fips-ui/Dockerfile deleted file mode 100644 index 18de606a..00000000 --- a/docker/fips-ui/Dockerfile +++ /dev/null @@ -1,10 +0,0 @@ -FROM git.tx1138.com/lfg2025/nginx:1.27.4-alpine -COPY index.html /usr/share/nginx/html/ -COPY nginx.conf /etc/nginx/conf.d/default.conf -RUN sed -i 's/^user nginx;/user root;/' /etc/nginx/nginx.conf && \ - mkdir -p /var/cache/nginx/client_temp /var/cache/nginx/proxy_temp \ - /var/cache/nginx/fastcgi_temp /var/cache/nginx/uwsgi_temp \ - /var/cache/nginx/scgi_temp -EXPOSE 8202 -ENTRYPOINT [] -CMD ["nginx", "-g", "daemon off;"] diff --git a/docker/fips-ui/index.html b/docker/fips-ui/index.html deleted file mode 100644 index 52f9b7e5..00000000 --- a/docker/fips-ui/index.html +++ /dev/null @@ -1,236 +0,0 @@ - - - - - - - FIPS - Archipelago - - - -
-
- -
- -
-
-
- - - -
-
-
-

FIPS

- v0.1.0 -
-

Free Internetworking Peering System

-
-
-
-
-

Status

-

Checking...

-
-
-
-
- - -
-

What is FIPS?

-

- FIPS is a self-organizing encrypted mesh network. Each node gets a - secp256k1 keypair (same as Nostr/Bitcoin) that serves as its identity. - Nodes discover each other, negotiate encryption using the Noise protocol, - and route traffic without any central authority. A virtual network interface (fips0) - lets unmodified applications — SSH, web browsers, anything — communicate transparently over the mesh. - Think of it as a new internet layer, built on cryptographic identity. -

-
-
-
- -
-
-

Zero Config

-

Self-organizing mesh

-
-
-
-
- -
-
-

End-to-End Encrypted

-

Noise IK + XK protocols

-
-
-
-
- -
-
-

Multi-Transport

-

UDP, TCP, Tor, BLE

-
-
-
-
- - -
-

Node Identity

-

Your node's Nostr public key doubles as its FIPS mesh address. Share with peers to connect.

-
-
-
Nostr Public Key (npub)
-
- Loading... - -
-
-
-
Mesh Ports
-
- UDP 2121 / TCP 8443 - -
-
-
-
- - -
-

How to Use

-
-
-
1
-
-

Install FIPS on your other devices

-

Download fips from GitHub. Build with cargo build --release (requires Rust 1.85+).

-
-
-
-
2
-
-

Configure peers in fips.yaml

-

Edit /etc/fips/fips.yaml on each device. Add your Archipelago node's IP and port as a peer. The node's npub above is its identity on the mesh.

-
-
-
-
3
-
-

Start the daemon and connect

-

Run fips --config /etc/fips/fips.yaml. A fips0 virtual interface appears. Use fipsctl show peers to see connected nodes. You can now SSH, browse, or run any IP app over the encrypted mesh using .fips DNS names.

-
-
-
-
- - -
-

Container Logs

-
- Fetching logs... -
-
-
- - - - diff --git a/docker/fips-ui/nginx.conf b/docker/fips-ui/nginx.conf deleted file mode 100644 index 7990b509..00000000 --- a/docker/fips-ui/nginx.conf +++ /dev/null @@ -1,11 +0,0 @@ -server { - listen 8202; - server_name _; - - root /usr/share/nginx/html; - index index.html; - - location / { - try_files $uri $uri/ /index.html; - } -} diff --git a/docker/nostr-vpn-ui/Dockerfile b/docker/nostr-vpn-ui/Dockerfile deleted file mode 100644 index 3101f7b9..00000000 --- a/docker/nostr-vpn-ui/Dockerfile +++ /dev/null @@ -1,10 +0,0 @@ -FROM git.tx1138.com/lfg2025/nginx:1.27.4-alpine -COPY index.html /usr/share/nginx/html/ -COPY nginx.conf /etc/nginx/conf.d/default.conf -RUN sed -i 's/^user nginx;/user root;/' /etc/nginx/nginx.conf && \ - mkdir -p /var/cache/nginx/client_temp /var/cache/nginx/proxy_temp \ - /var/cache/nginx/fastcgi_temp /var/cache/nginx/uwsgi_temp \ - /var/cache/nginx/scgi_temp -EXPOSE 8201 -ENTRYPOINT [] -CMD ["nginx", "-g", "daemon off;"] diff --git a/docker/nostr-vpn-ui/index.html b/docker/nostr-vpn-ui/index.html deleted file mode 100644 index 18c64dac..00000000 --- a/docker/nostr-vpn-ui/index.html +++ /dev/null @@ -1,232 +0,0 @@ - - - - - - - Nostr VPN - Archipelago - - - -
-
- -
- -
-
-
- - - -
-
-
-

Nostr VPN

- v0.3.4 -
-

Decentralized mesh VPN with Nostr signaling

-
-
-
-
-

Status

-

Checking...

-
-
-
-
- - -
-

What is Nostr VPN?

-

- Nostr VPN creates a private mesh network between your devices using WireGuard tunnels. - Unlike traditional VPNs, there is no central server. Peers discover each other and exchange encryption keys over - Nostr relays, making the network censorship-resistant and self-sovereign. - Think of it as Tailscale, but decentralized — your node's Nostr identity is your network identity. -

-
-
-
- -
-
-

No Central Server

-

Fully peer-to-peer mesh

-
-
-
-
- -
-
-

WireGuard Tunnels

-

Fast, modern encryption

-
-
-
-
- -
-
-

NAT Traversal

-

Works behind firewalls

-
-
-
-
- - -
-

Node Identity

-

Your node's Nostr public key is used as its network identity. Share it with peers to connect.

-
-
Nostr Public Key (npub)
-
- Loading... - -
-
-
-
VPN Listen Port
-
- 51820/udp - -
-
-
- - -
-

How to Use

-
-
-
1
-
-

Install the Nostr VPN client on your device

-

Download nvpn from GitHub Releases on your laptop, phone, or other devices you want to connect.

-
-
-
-
2
-
-

Create or join a network

-

Run nvpn network create on this node to create a new network, or join an existing one with an invite code. Each network gets a unique ID shared between members.

-
-
-
-
3
-
-

Connect your devices

-

Run nvpn start --daemon --connect on each device. Peers discover each other automatically over Nostr relays and establish direct WireGuard tunnels. Your devices are now privately connected.

-
-
-
-
- - -
-

Container Logs

-
- Fetching logs... -
-
-
- - - - diff --git a/docker/nostr-vpn-ui/nginx.conf b/docker/nostr-vpn-ui/nginx.conf deleted file mode 100644 index 67d8cb19..00000000 --- a/docker/nostr-vpn-ui/nginx.conf +++ /dev/null @@ -1,11 +0,0 @@ -server { - listen 8201; - server_name _; - - root /usr/share/nginx/html; - index index.html; - - location / { - try_files $uri $uri/ /index.html; - } -} diff --git a/neode-ui/package-lock.json b/neode-ui/package-lock.json index b9c142d2..39286e4b 100644 --- a/neode-ui/package-lock.json +++ b/neode-ui/package-lock.json @@ -1,12 +1,12 @@ { "name": "neode-ui", - "version": "1.7.37-alpha", + "version": "1.7.38-alpha", "lockfileVersion": 3, "requires": true, "packages": { "": { "name": "neode-ui", - "version": "1.7.37-alpha", + "version": "1.7.38-alpha", "dependencies": { "@types/dompurify": "^3.0.5", "@vue-leaflet/vue-leaflet": "^0.10.1", diff --git a/neode-ui/package.json b/neode-ui/package.json index 2340b592..c411e476 100644 --- a/neode-ui/package.json +++ b/neode-ui/package.json @@ -1,7 +1,7 @@ { "name": "neode-ui", "private": true, - "version": "1.7.37-alpha", + "version": "1.7.38-alpha", "type": "module", "scripts": { "start": "./start-dev.sh", @@ -14,6 +14,7 @@ "dev:real": "echo 'Start backend: cd ../core && cargo run --release' && vite", "backend:mock": "node mock-backend.js", "backend:real": "cd ../core && cargo run --release", + "prebuild": "cp ../app-catalog/catalog.json public/catalog.json", "build": "vue-tsc -b && vite build", "build:docker": "vite build", "build:production": "NODE_ENV=production vue-tsc -b && vite build --mode production", diff --git a/neode-ui/public/assets/img/app-icons/fips.svg b/neode-ui/public/assets/img/app-icons/fips.svg deleted file mode 100644 index 49e3df27..00000000 --- a/neode-ui/public/assets/img/app-icons/fips.svg +++ /dev/null @@ -1,4 +0,0 @@ - - - FIPS - diff --git a/neode-ui/public/assets/img/app-icons/nostr-rs-relay.svg b/neode-ui/public/assets/img/app-icons/nostr-rs-relay.svg deleted file mode 100644 index ec2cabdb..00000000 --- a/neode-ui/public/assets/img/app-icons/nostr-rs-relay.svg +++ /dev/null @@ -1,11 +0,0 @@ - - - - - - - - - - - diff --git a/neode-ui/public/assets/img/app-icons/nostr-vpn.svg b/neode-ui/public/assets/img/app-icons/nostr-vpn.svg deleted file mode 100644 index 52778219..00000000 --- a/neode-ui/public/assets/img/app-icons/nostr-vpn.svg +++ /dev/null @@ -1,4 +0,0 @@ - - - NV - diff --git a/neode-ui/public/assets/img/app-icons/penpot.webp b/neode-ui/public/assets/img/app-icons/penpot.webp deleted file mode 100644 index 196a54f9229ca9851ee22fe96cf7f1e1aa5eba1d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 6896 zcmds6g;!P0*S>U@bV^D$(%qMq5D96JknV0oxZb>_^TJu}bD+54G2XPwaoDk^SM008<5vRcozgkN9+008udWQ6qVe$ddOKh!1> zBIF^k86z1ZNqUOr0ZU66is;;x+mdkK+BuyT(2#F=V6sUQ9+^?Yun-d6NxLjz46X1B z)0*W~iL%{Kd)^~2w_(BU!3$E~eKR54fTO;i{NOitMX;*l-Rn#QfAv*4L24q{JJ3xc7(q}(x|76&c-$9AxeB(7rXr_lDmN=dd_3c$ zOrZajK@{&l4kOkZWer&v)1cD0%&Tln%nh>j({!QMhfDF7zDg|AQh20WgPD&$ANYs~I7QHNKj2=cq zIUgA=4Wt!2O24vz(_(XkZ4$TmoD<%C_46B})PdiI5VyQ3pU)retHNj$@hy(3P!G)@ zY*5yrl0u(#b}pR%10cql4nt@)75T%I924bbLA$nRQPQ=NHT*CCV?#nx`;-7GgwKwDl?#|0`bzg(rLH*|p$hA{}Z_d#G;3!Lj=5c@a zxMmV$&kNl13wT#D85$gdsN?!Cry1AKTm9Us&{ZMK&tnW<56OP`5CLP&bB;Uk2*r5x zs`Xaj6Ix~B;68x>o6bE-Ra`Q%S|?H=#OSX8Fqr3m%@|j-T8RBbpJgP;*2)g^dErF8 z&oIII!P=QcOGQcW;6MEKB50ZDk4nj~yigt?lH~N2fr6E23*!2*mjMC)=x9uK)xauDL8@F&n0*f9v z&A8!fhu)khW$W8)lEP^@-6oW={QwB+xVfEnO5t7A(4FwZ*=VmY1u!c8s`-PV@1pU# zE~G4{8@=m*?=u==Ad%nnt^f4w!vF~?3?htiK3@hFTPJpmDSe&t_xxgM()<484YLUh z_<+K5`NvctMrAusAI<(9N}r!|Q9f9W9q4-XKr-U;@{H^IzpS(-kkIooo&gT`-mD%l zZFn$+8e2Aj1C5{Sbi3q+bX#7f!8_RBgCwePA!gPef#-7grVE#eIKWs8f2=;zzMeM!PcB`m4#Ag{ebh_WxQk+|wZjziPv~(Od zp%S`Chf&dfJrOYn{}nC&V#T;|OIX33>Bbv8LrMKj&J?Q4t98FknhlV5l7bYh#uNT6 z6mslEQ*?tq+7>2RJ%;5TY~o9>0?v`?ALww-J&&GrRwIF9@{ zydk#lJBrk;aZ2-l`g*y6KI7wj{$ULEc(zOd?h!EcK#c{e(i5t?u`DRYmF)@ zBEHu2T@^2Hm=LJqb+W@h9{p!S_TY*g^zeg(+q2+LD{9d7Dt)+spw!9cz%B49ikE^U++2<}VIXA$>OM`u}OdFUA5GdflVw~WEI!)Z^FqabWuMj z1d?BA?H*0AC>Rf$b~E5&z$`&<_v!*t=gwI#T#SiK?GwrtBqk5G>pp__r%rg$xsds;jqff?#} z7mQqp&s7W3ZPvNSGapN_JDE2DG$YGi8njF=v6ia_BpLG%6HHOy@)XWTRn+eIV@7wj zH3m-GxVqi36CY7*PjOMe5URTO;tz>hX?^h$bB6Az51xIi6s}Zw%A&@Y5ILx`8_yfZ zgewd{kBi?e$m1!CLZ>BcAVD4jp1X|R8f1MKpJNVhU#9im?or4`WSOT-cOqVs)e7)O zYfeMA%FM!+V4Arc{mR}AxHOzzlFQQ&4yJWKG|pR8bfA(1EnbgX-a_kheUC=+B`n4L za2rq3K@c0fH8_^)jz5)JMQ8{;ldy)1EKC`#r|o;ckpB8@9f3=LwPv8u00ZJyxuMu7 z)5hAabx0ZiS93;0?x7b-kv&Qdr!&JRO3AmoWA? zzTFF;E9wY(jHMpbmbx_j49bF3jDp6VcqeKeoYze-A|ChB9jlmrD|#PZ zwx|C}_=EGe8B`34=*+P364y{xf&{b`jGIvZ%0tm6zTJ=s#QD{ii8F_RBZLN9uJ;;! zLMYhCkz*1APm;j7Ls#$72q(D88bJ2#SUhokO{tlEL`}DIUwBHEAzI?%7YhPy0Ul0}KSdAcxUY|W zYTX$+s=j6I+A4PHTn!v~<$V(1@QU=)Df5BpZW}Wh7ps>a=zD^UtVa5dwEL@rs>Z5X z5$thgdA74)NdQ7C95Y^B=I%$0wfQT`&h;tp*4u_Ho9C|SDXYyj(FWTpY66nUlbwEL9YVnu)0 zZBo?HrxX3LgDo6e+McC~LSd(@NU5XX-k*M?bBTewAxi zov)9770Gb}g;lp@L%+Ml;A{o^6m^fBujrtbSZTabdUMApmazAdLBzn&?PJq=FM!T( zbV58NO3qayyXx-f^XfARcwjX-@=Cr?^NBkRhS#20FG4(Jv}?9td-2L= zlTS@l2JGdn9ATzOlB!KYh6#i}DBnKmDHf_BW7@~zqPE@np+B-5UiXyyeJ2Q8*AR8#g!kzjLE|i6zgx1;wBL7I3CiB_(;%*JGxL;W@vTl4 z4Xu;2kp|X>V2IJ{o5;T|De{OsuZ}#rtoFfqhlNMp=%a`)K+x}dbxum%>!ZXT>=sOB z6z~((DW5{rjPmjwS<#b`lTfvLnip*K>J;v8im~3^Rr6I~4^sE)4i{RRr_skWGRBsmmxktvXI*#=FwlWVylO@x}s;Lo5=X0Y5f2YjhtiW|sAgYunj{PG`X5CpB;G zxGtPC@KTVQ9>2HdzR@_Np*e+uC6f9dpVg*)UXt!+LwKw0RH+*IV}DQJYurK$8>at- zDdqNiL}6b^m8K15&mk*seCeuah>Vdy*|p8 zQ>-H!v^LnY@aX$nd6BCe%uqZ0RI~*#T^3{?Ch6fY?qwbGFGRBXo~=v<jpz6Fq<`DD5f}@U4ieDYu^@#>X+-^c1!UB_Tc^v6`#ge0szS{_>@MM+JHCtLCUD^wEj8i4~ z#++d+2r4-rigjo;2@u=2$+`+W^T4S5RCHqroe4^sq78hjy%WA_H@L9ut2Mb>>`dTw zxv*7TG2#KdR&5mMCZF4ObmN-v=#CnnXb^dR+KVmAwhyincCn5i?B|Ak=>wp=mt{nc z5rga(o?g$LmWO zaXmY?TR#=i&8Yu6=x5zCGBt&QJnC}s{a7kQEB=l_;gs2_=GGtysqUxY3WMi;Cd-ra z!?M9YoAhm8llO8J(8QQ*?Ld6>zIPNb1PXa?>M_6Ls*Qz!-i{D#F5X+@N31LExkISa z69y9ujCd%C*=hSE9V;+3un1N@h&U*+-Z~W}ez1Yq>WVvtKV?JNl|eXzrMhpT*q_B5 zpE5qJg6r7nzP9779`C5Hj&DLL2$3I+JlxPr>r*m{C$5l@;+t`VaG=16@f{3tDc)t4 z_&_+)8i4_Xj^8{5F=APJNjBaS*UxBOSCN-7^hlOxB+@@A3_}27yngpHRcMOV#-|5i z>5U8n2@^jMdCXSl7O_vB$=k@yBr`0T=Z55L#nC(F?GpkI?9M3(>$#RX5GaEnbh~_T zG3bY!rc57go}Ff4)=NG)Fx+$T8=v7j>0mSl6ZPl;WC0PO4f!?1GySoEKFD+!*8&MA z4cSR#)Kk)yXr;wX9afDhu1yAyME7JWH<7y_`U_cgCtJU(pKb?9P8s$~8?5gdmFQCn zH|3_~j>PPXF0YddDRhV2i%Z>1s9x!V1;V6q=Y|jXY|(8cdIcMIN%yRV7L_uy@BBnW zU$R5AH+8eIsN8WZR{TEo^7n6^+1z9~cF%nGX{psc-cySan3f#1r;W*{bJCnFX&u|f z9uJFFIc!-kM)4xVY+%|7ddx^Jmmp!+vAGf_uE4heMJQGyL-(~%3oV-}AiF||W(<@@ za{?eHSwIqG#4cGH&0=%|(Xnp}54sR%Pa>;J%pVow1CUqnp$qc43i$Xey%xRHF>g+N3)znwSA!}rZ5G0KebXMW*&4rONC5Z;6ki@}!*rUiCfmeNnp}4w` zc=TOZ*mT<~8cgGYsuz}w4Wpj(VTRVETO{h-K6XNZl~40I9Hc-Rm@IMxZ~<)5Gy3+y zmZ)~u`V5#P6nB8KS0H|m&!v=h5W5aq#lI?*3@^-l@mi8=_TVHls(f;2Q{0Nbo}QH* zRqOk4Cu05L?9$Q_V*d0uoll6gCBgE%iG=32!m3qpwM7>CX#Toqh31Ca$*Vzc!L_9U zSq;U_tTqD87(eQm^e$fVUUy%51?ydc^uVYM<@w zBF)pDG0?IX7pe_8PUndAd$#4FETCJRxj9vWfG40{hRsQFX{>DPAt+jerqcS-pzGui z1B>Q|pX>pch030|xxRovFf031w6^?yvz9X{F;BMIEQ5bu)i&tO97hG4$+>U?CZ4(C z#x%7;CJoc_g(-e+=_pxkEQ_$?fi01QWFCH-<~ws=x=~hvslcBAVzygVqK>}$h=icY z1ePcJ%()hFP)+C;kRxX1&Ce+l@`11ghLoN8q%F0tleaqGbS=B}V&Exblf>EeejobV zJ)2a}GaXOsuOx+R$l^3)nKif4v4UD#a+u+DJ91akxKdN-x6>DBYtWktbj^^$F{ zwt8MYRIIDvx;I`h@&)8=#kghXmimfg(3cvZK5(|z0naD&i~sfLTFiGl!7iZ4cpdV6AOG}5G2K(o|CZY!UG3XapSS<^Axs4~s7Alba^3nvPx zWr!uPkRv;8B$1GiAhiAlec>#E*WlMmgqRp`<pCiadnI*-FxP58}UjFR9E>tKwk48)GtrwEedr6WoIsoG$Cm; zHT--Q*t|?yqPvssE#MdqXk4|qRYQ4J4DDlnVLR$)_|LmRvZ^QfJ;fhUJQ6$j`RMe9 zt6Pb}@w~XgO*wRg#|9M%%g1X{;=kyTR#E^gtmSy7KCmG+_ON#c?TH+CY^%O|@rwWP zFe=nd*=&1e8DW=MOUFU$V)A%<@+o#0QxW@!$4#Z;=0J{{Z;MrTp;xh4Xig z`f&V&20(t$@bK~SASC}OBRn7g3jfmc^6(%O{)q^O0|1DHe - - R - diff --git a/neode-ui/public/catalog.json b/neode-ui/public/catalog.json index 16d2ff19..288bd466 100644 --- a/neode-ui/public/catalog.json +++ b/neode-ui/public/catalog.json @@ -1,427 +1,210 @@ { - "version": 1, - "updated": "2026-04-11T00:00:00Z", - "registry": "23.182.128.160:3000/lfg2025", + "version": 2, + "updated": "2026-04-22T00:00:00Z", + "registry": "git.tx1138.com/lfg2025", "featured": { "id": "indeedhub", "banner": "/assets/img/featured/indeedhub-banner.jpg", "headline": "Stream Sovereignty", - "description": "Bitcoin documentaries with Nostr identity. God Bless Bitcoin, The Bitcoin Psyop, and more \u2014 streaming from your own node.", + "description": "Bitcoin documentaries with Nostr identity.", "tag": "NOSTR IDENTITY // YOUR NODE" }, "apps": [ { - "id": "bitcoin-knots", - "title": "Bitcoin Knots", - "version": "28.1.0", - "description": "Run a full Bitcoin node. Validate and relay blocks and transactions on the Bitcoin network.", + "id": "bitcoin-knots", "title": "Bitcoin Knots", "version": "28.1.0", + "description": "Run a full Bitcoin node. Validate and relay blocks and transactions.", "icon": "/assets/img/app-icons/bitcoin-knots.webp", - "author": "Bitcoin Knots", - "dockerImage": "bitcoin-knots:latest", - "repoUrl": "https://github.com/bitcoinknots/bitcoin", - "category": "money", - "tier": "core" + "author": "Bitcoin Knots", "category": "money", "tier": "core", + "dockerImage": "git.tx1138.com/lfg2025/bitcoin-knots:latest", + "repoUrl": "https://github.com/bitcoinknots/bitcoin" }, { - "id": "bitcoin-core", - "title": "Bitcoin Core", - "version": "28.4", - "description": "Reference implementation of the Bitcoin protocol. Run a full node validating and relaying blocks on the Bitcoin network.", + "id": "bitcoin-core", "title": "Bitcoin Core", "version": "28.4", + "description": "Reference implementation of the Bitcoin protocol. Run a full node validating and relaying blocks.", "icon": "/assets/img/app-icons/bitcoin-core.svg", - "author": "Bitcoin Core contributors", + "author": "Bitcoin Core contributors", "category": "money", "tier": "optional", "dockerImage": "docker.io/bitcoin/bitcoin:28.4", - "repoUrl": "https://github.com/bitcoin/bitcoin", - "category": "money", - "tier": "optional" + "repoUrl": "https://github.com/bitcoin/bitcoin" }, { - "id": "lnd", - "title": "LND", - "version": "0.18.4", - "description": "Lightning Network Daemon. Fast and cheap Bitcoin payments through the Lightning Network.", + "id": "lnd", "title": "LND", "version": "0.18.4", + "description": "Lightning Network Daemon. Fast Bitcoin payments through Lightning.", "icon": "/assets/img/app-icons/lnd.svg", - "author": "Lightning Labs", - "dockerImage": "lnd:v0.18.4-beta", + "author": "Lightning Labs", "category": "money", "tier": "core", + "dockerImage": "git.tx1138.com/lfg2025/lnd:v0.18.4-beta", "repoUrl": "https://github.com/lightningnetwork/lnd", - "category": "money", - "tier": "core" + "requires": ["bitcoin-knots"] }, { - "id": "btcpay-server", - "title": "BTCPay Server", - "version": "1.13.7", - "description": "Self-hosted Bitcoin payment processor. Accept Bitcoin payments without intermediaries or fees.", + "id": "btcpay-server", "title": "BTCPay Server", "version": "1.13.7", + "description": "Self-hosted Bitcoin payment processor.", "icon": "/assets/img/app-icons/btcpay-server.png", - "author": "BTCPay Server Foundation", - "dockerImage": "btcpayserver:1.13.7", + "author": "BTCPay Server Foundation", "category": "commerce", "tier": "core", + "dockerImage": "git.tx1138.com/lfg2025/btcpayserver:1.13.7", "repoUrl": "https://github.com/btcpayserver/btcpayserver", - "category": "commerce", - "tier": "core" + "requires": ["bitcoin-knots"] }, { - "id": "mempool", - "title": "Mempool Explorer", - "version": "3.0.0", - "description": "Self-hosted Bitcoin blockchain and mempool visualizer. Monitor transactions without revealing your addresses.", + "id": "mempool", "title": "Mempool Explorer", "version": "3.0.0", + "description": "Self-hosted Bitcoin blockchain and mempool visualizer.", "icon": "/assets/img/app-icons/mempool.webp", - "author": "Mempool", - "dockerImage": "mempool-frontend:v3.0.0", + "author": "Mempool", "category": "money", "tier": "core", + "dockerImage": "git.tx1138.com/lfg2025/mempool-frontend:v3.0.0", "repoUrl": "https://github.com/mempool/mempool", - "category": "money", - "tier": "core" + "requires": ["bitcoin-knots", "electrumx"] }, { - "id": "electrumx", - "title": "ElectrumX", - "version": "1.18.0", - "description": "Electrum protocol server. Index the blockchain for fast wallet lookups, privately.", + "id": "electrumx", "title": "ElectrumX", "version": "1.18.0", + "description": "Electrum protocol server. Index the blockchain for fast wallet lookups.", "icon": "/assets/img/app-icons/electrumx.webp", - "author": "Luke Childs", - "dockerImage": "electrumx:v1.18.0", + "author": "Luke Childs", "category": "money", "tier": "core", + "dockerImage": "git.tx1138.com/lfg2025/electrumx:v1.18.0", "repoUrl": "https://github.com/spesmilo/electrumx", - "category": "money", - "tier": "core" + "requires": ["bitcoin-knots"] }, { - "id": "indeedhub", - "title": "IndeeHub", - "version": "1.0.0", - "description": "Bitcoin documentary streaming with Nostr identity. Stream sovereignty content from your node.", + "id": "indeedhub", "title": "IndeeHub", "version": "1.0.0", + "description": "Bitcoin documentary streaming with Nostr identity.", "icon": "/assets/img/app-icons/indeedhub.png", - "author": "IndeeHub Team", - "dockerImage": "indeedhub:1.0.0", - "repoUrl": "https://github.com/indeedhub/indeedhub", - "category": "community" + "author": "IndeeHub", "category": "community", + "dockerImage": "git.tx1138.com/lfg2025/indeedhub:1.0.0", + "repoUrl": "https://github.com/indeedhub/indeedhub" }, { - "id": "botfights", - "title": "BotFights", - "version": "1.0.0", - "description": "Bot arena + 2-player arcade fighter with controller support.", + "id": "botfights", "title": "BotFights", "version": "1.1.0", + "description": "Bot arena + 2-player arcade fighter with controller support and Adventure Mode.", "icon": "/assets/img/app-icons/botfights.svg", - "author": "BotFights", - "dockerImage": "botfights:1.1.0", - "repoUrl": "https://botfights.net", - "category": "community" + "author": "BotFights", "category": "community", + "dockerImage": "git.tx1138.com/lfg2025/botfights:1.1.0", + "repoUrl": "https://botfights.net" }, { - "id": "gitea", - "title": "Gitea", - "version": "1.23", - "description": "Self-hosted Git service with container registry, CI/CD, issue tracking, and package hosting.", + "id": "gitea", "title": "Gitea", "version": "1.23", + "description": "Self-hosted Git service with container registry, CI/CD, issue tracking.", "icon": "/assets/img/app-icons/gitea.svg", - "author": "Gitea", + "author": "Gitea", "category": "development", "dockerImage": "docker.io/gitea/gitea:1.23", - "repoUrl": "https://gitea.com", - "category": "development" + "repoUrl": "https://gitea.com" }, { - "id": "filebrowser", - "title": "File Browser", - "version": "2.27.0", - "description": "Web-based file manager. Browse, upload, and manage files on your server.", + "id": "filebrowser", "title": "File Browser", "version": "2.27.0", + "description": "Web-based file manager.", "icon": "/assets/img/app-icons/file-browser.webp", - "author": "File Browser", - "dockerImage": "filebrowser:v2.27.0", - "repoUrl": "https://github.com/filebrowser/filebrowser", - "category": "data", - "tier": "core" + "author": "File Browser", "category": "data", "tier": "core", + "dockerImage": "git.tx1138.com/lfg2025/filebrowser:v2.27.0", + "repoUrl": "https://github.com/filebrowser/filebrowser" }, { - "id": "vaultwarden", - "title": "Vaultwarden", - "version": "1.30.0", - "description": "Self-hosted password vault. Bitwarden-compatible with zero-knowledge encryption.", + "id": "vaultwarden", "title": "Vaultwarden", "version": "1.30.0", + "description": "Self-hosted password vault with zero-knowledge encryption.", "icon": "/assets/img/app-icons/vaultwarden.webp", - "author": "Vaultwarden", - "dockerImage": "vaultwarden:1.30.0-alpine", - "repoUrl": "https://github.com/dani-garcia/vaultwarden", - "category": "data", - "tier": "recommended" + "author": "Vaultwarden", "category": "data", "tier": "recommended", + "dockerImage": "git.tx1138.com/lfg2025/vaultwarden:1.30.0-alpine", + "repoUrl": "https://github.com/dani-garcia/vaultwarden" }, { - "id": "searxng", - "title": "SearXNG", - "version": "2024.1.0", - "description": "Privacy-respecting metasearch engine. Search the internet without being tracked.", + "id": "searxng", "title": "SearXNG", "version": "2024.1.0", + "description": "Privacy-respecting metasearch engine.", "icon": "/assets/img/app-icons/searxng.png", - "author": "SearXNG", - "dockerImage": "searxng:latest", - "repoUrl": "https://github.com/searxng/searxng", - "category": "data", - "tier": "recommended" + "author": "SearXNG", "category": "data", "tier": "recommended", + "dockerImage": "git.tx1138.com/lfg2025/searxng:latest", + "repoUrl": "https://github.com/searxng/searxng" }, { - "id": "nostr-rs-relay", - "title": "Nostr Relay", - "version": "0.9.0", - "description": "Your own Nostr relay. Store events locally, relay for friends, publish over Tor.", - "icon": "/assets/img/app-icons/nostr-rs-relay.svg", - "author": "scsiblade", - "dockerImage": "nostr-rs-relay:0.9.0", - "repoUrl": "https://sr.ht/~gheartsfield/nostr-rs-relay/", - "category": "nostr" - }, - { - "id": "fedimint", - "title": "Fedimint", - "version": "0.10.0", - "description": "Federated Bitcoin mint. Private, scalable Bitcoin through federated guardians.", + "id": "fedimint", "title": "Fedimint", "version": "0.10.0", + "description": "Federated Bitcoin mint with privacy through federated guardians.", "icon": "/assets/img/app-icons/fedimint.png", - "author": "Fedimint", - "dockerImage": "fedimintd:v0.10.0", - "repoUrl": "https://github.com/fedimint/fedimint", - "category": "money" + "author": "Fedimint", "category": "money", + "dockerImage": "git.tx1138.com/lfg2025/fedimintd:v0.10.0", + "repoUrl": "https://github.com/fedimint/fedimint" }, { - "id": "ollama", - "title": "Ollama", - "version": "0.5.4", - "description": "Run AI models locally. Llama, Mistral, and more \u2014 on your hardware, completely private.", + "id": "ollama", "title": "Ollama", "version": "0.5.4", + "description": "Run AI models locally. Private and on your hardware.", "icon": "/assets/img/app-icons/ollama.png", - "author": "Ollama", - "dockerImage": "ollama:latest", - "repoUrl": "https://github.com/ollama/ollama", - "category": "data" + "author": "Ollama", "category": "data", + "dockerImage": "git.tx1138.com/lfg2025/ollama:latest", + "repoUrl": "https://github.com/ollama/ollama" }, { - "id": "nextcloud", - "title": "Nextcloud", - "version": "28", - "description": "Your own private cloud. File sync, calendars, contacts \u2014 all on your hardware.", + "id": "nextcloud", "title": "Nextcloud", "version": "28", + "description": "Your own private cloud. File sync, calendars, contacts.", "icon": "/assets/img/app-icons/nextcloud.webp", - "author": "Nextcloud", - "dockerImage": "nextcloud:28", - "repoUrl": "https://github.com/nextcloud/server", - "category": "data" + "author": "Nextcloud", "category": "data", + "dockerImage": "git.tx1138.com/lfg2025/nextcloud:28", + "repoUrl": "https://github.com/nextcloud/server" }, { - "id": "jellyfin", - "title": "Jellyfin", - "version": "10.8.13", - "description": "Free media server. Stream your movies, music, and photos to any device.", + "id": "jellyfin", "title": "Jellyfin", "version": "10.8.13", + "description": "Free media server. Stream movies, music, and photos.", "icon": "/assets/img/app-icons/jellyfin.webp", - "author": "Jellyfin", - "dockerImage": "jellyfin:10.8.13", - "repoUrl": "https://github.com/jellyfin/jellyfin", - "category": "data" + "author": "Jellyfin", "category": "data", + "dockerImage": "git.tx1138.com/lfg2025/jellyfin:10.8.13", + "repoUrl": "https://github.com/jellyfin/jellyfin" }, { - "id": "immich", - "title": "Immich", - "version": "1.90.0", - "description": "High-performance photo and video backup. Mobile-first with ML features.", + "id": "immich", "title": "Immich", "version": "1.90.0", + "description": "High-performance photo and video backup with ML.", "icon": "/assets/img/app-icons/immich.png", - "author": "Immich", - "dockerImage": "immich-server:release", - "repoUrl": "https://github.com/immich-app/immich", - "category": "data" + "author": "Immich", "category": "data", + "dockerImage": "git.tx1138.com/lfg2025/immich-server:release", + "repoUrl": "https://github.com/immich-app/immich" }, { - "id": "homeassistant", - "title": "Home Assistant", - "version": "2024.1", - "description": "Open-source home automation. Control smart home devices privately.", + "id": "homeassistant", "title": "Home Assistant", "version": "2024.1", + "description": "Open-source home automation.", "icon": "/assets/img/app-icons/homeassistant.png", - "author": "Home Assistant", - "dockerImage": "home-assistant:2024.1", - "repoUrl": "https://github.com/home-assistant/core", - "category": "home" + "author": "Home Assistant", "category": "home", + "dockerImage": "git.tx1138.com/lfg2025/home-assistant:2024.1", + "repoUrl": "https://github.com/home-assistant/core" }, { - "id": "grafana", - "title": "Grafana", - "version": "10.2.0", - "description": "Analytics and monitoring platform. Dashboards for your node metrics.", + "id": "grafana", "title": "Grafana", "version": "10.2.0", + "description": "Analytics and monitoring dashboards.", "icon": "/assets/img/app-icons/grafana.png", - "author": "Grafana Labs", - "dockerImage": "grafana:10.2.0", - "repoUrl": "https://github.com/grafana/grafana", - "category": "data", - "tier": "recommended" + "author": "Grafana Labs", "category": "data", "tier": "recommended", + "dockerImage": "git.tx1138.com/lfg2025/grafana:10.2.0", + "repoUrl": "https://github.com/grafana/grafana" }, { - "id": "tailscale", - "title": "Tailscale", - "version": "1.78.0", - "description": "Zero-config VPN. Secure remote access with WireGuard mesh networking.", + "id": "tailscale", "title": "Tailscale", "version": "1.78.0", + "description": "Zero-config VPN with WireGuard mesh networking.", "icon": "/assets/img/app-icons/tailscale.webp", - "author": "Tailscale", - "dockerImage": "tailscale:stable", - "repoUrl": "https://github.com/tailscale/tailscale", - "category": "networking", - "tier": "recommended" + "author": "Tailscale", "category": "networking", "tier": "recommended", + "dockerImage": "git.tx1138.com/lfg2025/tailscale:stable", + "repoUrl": "https://github.com/tailscale/tailscale" }, { - "id": "penpot", - "title": "Penpot", - "version": "2.4", - "description": "Open-source design platform. Self-hosted alternative to Figma.", - "icon": "/assets/img/app-icons/penpot.webp", - "author": "Penpot", - "dockerImage": "penpot-frontend:2.4", - "repoUrl": "https://github.com/penpot/penpot", - "category": "data" - }, - { - "id": "photoprism", - "title": "PhotoPrism", - "version": "240915", - "description": "AI-powered photo management with facial recognition, privately.", - "icon": "/assets/img/app-icons/photoprism.svg", - "author": "PhotoPrism", - "dockerImage": "photoprism:240915", - "repoUrl": "https://github.com/photoprism/photoprism", - "category": "data" - }, - { - "id": "uptime-kuma", - "title": "Uptime Kuma", - "version": "1.23.0", - "description": "Self-hosted uptime monitoring. Track HTTP, TCP, DNS, and more.", + "id": "uptime-kuma", "title": "Uptime Kuma", "version": "1.23.0", + "description": "Self-hosted uptime monitoring.", "icon": "/assets/img/app-icons/uptime-kuma.webp", - "author": "Uptime Kuma", - "dockerImage": "uptime-kuma:1", - "repoUrl": "https://github.com/louislam/uptime-kuma", - "category": "data", - "tier": "recommended" + "author": "Uptime Kuma", "category": "data", "tier": "recommended", + "dockerImage": "git.tx1138.com/lfg2025/uptime-kuma:1", + "repoUrl": "https://github.com/louislam/uptime-kuma" }, { - "id": "nostr-vpn", - "title": "Nostr VPN", - "version": "0.3.7", - "description": "Tailscale-style mesh VPN with Nostr control plane.", - "icon": "/assets/img/app-icons/nostr-vpn.svg", - "author": "Martti Malmi", - "dockerImage": "nostr-vpn:v0.3.7", - "repoUrl": "https://github.com/mmalmi/nostr-vpn", - "category": "networking" - }, - { - "id": "fips", - "title": "FIPS", - "version": "0.1.0", - "description": "Free Internetworking Peering System. Self-organizing encrypted mesh.", - "icon": "/assets/img/app-icons/fips.svg", - "author": "Jim Corgan", - "dockerImage": "fips:v0.1.0", - "repoUrl": "https://github.com/jmcorgan/fips", - "category": "networking" - }, - { - "id": "routstr", - "title": "Routstr", - "version": "0.4.3", - "description": "Decentralized AI inference proxy. Pay-per-request with Cashu ecash.", - "icon": "/assets/img/app-icons/routstr.svg", - "author": "Routstr", - "dockerImage": "routstr:v0.4.3", - "repoUrl": "https://github.com/routstr/routstr-core", - "category": "community" - }, - { - "id": "dwn", - "title": "Decentralized Web Node", - "version": "0.4.0", - "description": "Own your data with DID-based access control. Sync across devices.", + "id": "dwn", "title": "Decentralized Web Node", "version": "0.4.0", + "description": "Own your data with DID-based access control.", "icon": "/assets/img/app-icons/dwn.svg", - "author": "TBD", - "dockerImage": "dwn-server:main", - "repoUrl": "https://github.com/TBD54566975/dwn-server", - "category": "data" + "author": "TBD", "category": "data", + "dockerImage": "git.tx1138.com/lfg2025/dwn-server:main", + "repoUrl": "https://github.com/TBD54566975/dwn-server" }, { - "id": "cryptpad", - "title": "CryptPad", - "version": "2024.12.0", - "description": "End-to-end encrypted documents and collaboration. Zero-knowledge.", - "icon": "/assets/img/app-icons/cryptpad.webp", - "author": "XWiki SAS", - "dockerImage": "cryptpad:2024.12.0", - "repoUrl": "https://github.com/cryptpad/cryptpad", - "category": "data" + "id": "endurain", "title": "Endurain", "version": "0.8.0", + "description": "Self-hosted fitness tracking. Strava alternative.", + "icon": "/assets/img/app-icons/endurain.png", + "author": "Endurain", "category": "data", + "dockerImage": "git.tx1138.com/lfg2025/endurain:0.8.0", + "repoUrl": "https://github.com/joaovitoriasilva/endurain" }, { - "id": "nostrudel", - "title": "noStrudel", - "version": "0.40.0", - "description": "Feature-rich Nostr web client.", - "icon": "/assets/img/app-icons/nostrudel.svg", - "author": "hzrd149", - "dockerImage": "", - "repoUrl": "https://github.com/hzrd149/nostrudel", - "webUrl": "https://nostrudel.ninja", - "category": "nostr" - }, - { - "id": "nwnn", - "title": "Next Web News Network", - "version": "1.0.0", - "description": "Decentralized news aggregator.", - "icon": "/assets/img/app-icons/nwnn.png", - "author": "L484", - "dockerImage": "", - "webUrl": "https://nwnn.l484.com", - "category": "l484" - }, - { - "id": "484-kitchen", - "title": "484 Kitchen", - "version": "1.0.0", - "description": "K484 application platform.", - "icon": "/assets/img/app-icons/484-kitchen.png", - "author": "L484", - "dockerImage": "", - "webUrl": "https://484.kitchen", - "category": "l484" - }, - { - "id": "call-the-operator", - "title": "Call the Operator", - "version": "1.0.0", - "description": "Escape the Matrix.", - "icon": "/assets/img/app-icons/call-the-operator.png", - "author": "TX1138", - "dockerImage": "", - "webUrl": "https://cta.tx1138.com", - "category": "l484" - }, - { - "id": "arch-presentation", - "title": "Arch Presentation", - "version": "1.0.0", - "description": "The Future of Decentralized Infrastructure.", - "icon": "/assets/img/app-icons/arch-presentation.png", - "author": "L484", - "dockerImage": "", - "webUrl": "https://present.l484.com", - "category": "l484" - }, - { - "id": "syntropy-institute", - "title": "Syntropy Institute", - "version": "1.0.0", - "description": "Medicine Reimagined.", - "icon": "/assets/img/app-icons/syntropy-institute.png", - "author": "Syntropy Institute", - "dockerImage": "", - "webUrl": "https://syntropy.institute", - "category": "l484" - }, - { - "id": "t-zero", - "title": "T-0", - "version": "1.0.0", - "description": "Documentary series exploring decentralization.", - "icon": "/assets/img/app-icons/t-zero.png", - "author": "T-0", - "dockerImage": "", - "webUrl": "https://teeminuszero.net", - "category": "l484" + "id": "photoprism", "title": "PhotoPrism", "version": "240915", + "description": "AI-powered photo management with facial recognition.", + "icon": "/assets/img/app-icons/photoprism.svg", + "author": "PhotoPrism", "category": "data", + "dockerImage": "git.tx1138.com/lfg2025/photoprism:240915", + "repoUrl": "https://github.com/photoprism/photoprism" } - ], - "registries": [ - "23.182.128.160:3000/lfg2025", - "git.tx1138.com/lfg2025" ] -} \ No newline at end of file +} diff --git a/neode-ui/src/App.vue b/neode-ui/src/App.vue index 685189a2..bc653c1d 100644 --- a/neode-ui/src/App.vue +++ b/neode-ui/src/App.vue @@ -284,12 +284,29 @@ async function handleSplashComplete() { } try { - const { isOnboardingComplete } = await import('@/composables/useOnboarding') - const seenOnboarding = await isOnboardingComplete() - const destination = seenOnboarding ? '/login' : '/onboarding/intro' - router.push(destination).catch(() => {}) + const { checkOnboardingStatus } = await import('@/composables/useOnboarding') + const seenOnboarding = await checkOnboardingStatus() + if (seenOnboarding === true) { + router.push('/login').catch(() => {}) + return + } + if (seenOnboarding === false) { + router.push('/onboarding/intro').catch(() => {}) + return + } + // Backend unreachable after retries. Prefer the localStorage + // cache on THIS browser (if a prior successful check set it) — + // otherwise defer to RootRedirect which polls + retries rather + // than forcing an already-onboarded user through the wizard. + if (localStorage.getItem('neode_onboarding_complete') === '1') { + router.push('/login').catch(() => {}) + } else { + router.push('/').catch(() => {}) + } } catch { - router.push('/onboarding/intro').catch(() => {}) + // Do NOT default to /onboarding/intro here. RootRedirect has retry + // + polling + boot-screen handling; let it decide. + router.push('/').catch(() => {}) } } diff --git a/neode-ui/src/components/EasyHome.vue b/neode-ui/src/components/EasyHome.vue index 5e26cf7c..ad088e4c 100644 --- a/neode-ui/src/components/EasyHome.vue +++ b/neode-ui/src/components/EasyHome.vue @@ -73,7 +73,6 @@ const APP_ICON_MAP: Record = { fedimint: '/assets/img/app-icons/fedimint.png', mempool: '/assets/img/app-icons/mempool.webp', electrs: '/assets/img/app-icons/electrs.svg', - 'nostr-rs-relay': '/assets/img/app-icons/nostr-rs-relay.svg', } function goalAppIcons(goal: GoalDefinition): { appId: string; url: string }[] { diff --git a/neode-ui/src/composables/useLoginSounds.ts b/neode-ui/src/composables/useLoginSounds.ts index 8638e32e..906b1469 100644 --- a/neode-ui/src/composables/useLoginSounds.ts +++ b/neode-ui/src/composables/useLoginSounds.ts @@ -1,7 +1,28 @@ /** * Login screen audio: intro loop (MP3) + transition sounds. + * + * First-install vs returning-user gate: the synthwave loop, welcome + * voice, pop/whoosh/oomph transitions exist for the first-boot cinematic + * moment. After the user has completed onboarding we silence all of + * them — every subsequent login should be quiet. Typing sounds are + * exempt and continue to play regardless. */ +/** True when the node has not yet completed onboarding — i.e. we're + * still in the first-install cinematic. Reads the localStorage cache + * set by useOnboarding (which is re-seeded from the backend on each + * successful check), so this stays correct after a browser clear + * once the onboarding-complete probe runs. Sound calls that fire + * before that probe completes will fall through silent on an already- + * onboarded node — which is exactly what we want. */ +function isFirstInstallPhase(): boolean { + try { + return localStorage.getItem('neode_onboarding_complete') !== '1' + } catch { + return true + } +} + let audioContext: AudioContext | null = null let introAudio: HTMLAudioElement | null = null let introGain: GainNode | null = null @@ -30,6 +51,7 @@ const LOOP_START_URL = '/assets/audio/loop-start.mp3' /** Play loop-start when transitioning from typing intro to Welcome Noderunner, as the intro music comes in. * Uses Web Audio API so it plays after context is resumed (user gesture). */ export function playLoopStart() { + if (!isFirstInstallPhase()) return const ctx = getContext() if (!ctx) return try { @@ -62,6 +84,7 @@ export function resumeAudioContext() { /** Start intro loop - Cosmic Updrift. Only works after resumeAudioContext() (user gesture). */ export function startSynthwave() { + if (!isFirstInstallPhase()) return const ctxOrNull = getContext() if (!ctxOrNull) return @@ -123,6 +146,7 @@ export function stopAllAudio() { /** Pop sound - plays when intro initiator (tap to start) is pressed */ export function playPop() { + if (!isFirstInstallPhase()) return const audio = new Audio('/assets/audio/pop.mp3') audio.volume = 0.6 audio.play().catch(() => {}) @@ -130,6 +154,7 @@ export function playPop() { /** Whoosh transition on successful login */ export function playLoginSuccessWhoosh() { + if (!isFirstInstallPhase()) return const woosh = new Audio('/assets/audio/woosh.mp3') woosh.volume = 0.5 woosh.play().catch(() => {}) @@ -169,6 +194,7 @@ const WELCOME_SPEECH_URL = '/assets/audio/welcome-noderunner.mp3' * ELEVENLABS_API_KEY=your_key node neode-ui/scripts/generate-welcome-speech.js * Browse sci-fi voices at elevenlabs.io/voice-library and set ELEVENLABS_VOICE_ID for custom voice. */ export function playWelcomeNoderunnerSpeech() { + if (!isFirstInstallPhase()) return const audio = new Audio(WELCOME_SPEECH_URL) audio.volume = 0.9 audio.play().catch(() => {}) @@ -226,6 +252,7 @@ export function playKeyboardTypingSound() { /** Gaming-style boot thud - soft impact when dashboard loads */ export function playDashboardLoadOomph() { + if (!isFirstInstallPhase()) return const ctx = getContext() if (!ctx) return diff --git a/neode-ui/src/composables/useOnboarding.ts b/neode-ui/src/composables/useOnboarding.ts index c9573979..2f17d3ff 100644 --- a/neode-ui/src/composables/useOnboarding.ts +++ b/neode-ui/src/composables/useOnboarding.ts @@ -1,41 +1,63 @@ /** - * Onboarding state - prefers backend, falls back to localStorage for mock/offline. - * Hardened: retries on 502/503, never blocks completion. + * Onboarding state - backend is authoritative. + * "Unknown" (backend unreachable) must NEVER default to false — + * that would falsely send an already-onboarded user back through + * the intro after a browser clear / update / reboot. */ import { rpcClient } from '@/api/rpc-client' -async function callWithRetry(fn: () => Promise, maxRetries = 3): Promise { +async function callWithRetry(fn: () => Promise, maxRetries = 5): Promise { for (let i = 0; i < maxRetries; i++) { try { return await fn() } catch (e) { const msg = e instanceof Error ? e.message : '' - const isRetryable = /502|503|timeout|fetch|network/i.test(msg) + const isRetryable = /502|503|504|timeout|fetch|network|abort/i.test(msg) if (!isRetryable || i === maxRetries - 1) return null - await new Promise((r) => setTimeout(r, 800 * (i + 1))) + // Exponential-ish backoff: 500, 1000, 2000, 4000, 8000 (capped) + const delay = Math.min(500 * Math.pow(2, i), 8000) + await new Promise((r) => setTimeout(r, delay)) } } return null } -export async function isOnboardingComplete(): Promise { - // Prefer the backend — localStorage gets stale across nodes (a - // browser that onboarded node A would otherwise treat fresh node B - // as already-onboarded and skip the wizard entirely). Only fall - // back to localStorage if the backend is unreachable. - const result = await callWithRetry(() => rpcClient.isOnboardingComplete(), 2) +/** + * Returns true/false if the backend gave a definitive answer, null if + * the backend is unreachable. Callers MUST handle null explicitly — + * do not coerce to boolean without thinking about the consequences. + */ +export async function checkOnboardingStatus(): Promise { + const result = await callWithRetry(() => rpcClient.isOnboardingComplete(), 5) if (result !== null) { - // Re-seed the localStorage cache so non-async consumers - // (OnboardingWrapper's useVideoBackground computed, etc.) see the - // right answer after the user clears site data on an already- - // onboarded node. if (result) { try { localStorage.setItem('neode_onboarding_complete', '1') } catch {} } else { try { localStorage.removeItem('neode_onboarding_complete') } catch {} } - return result } + return result +} + +/** + * Boolean-only variant for places that genuinely cannot wait. + * Backend answer wins; on backend-unreachable, trusts a prior + * localStorage cache (set by a past successful check on THIS node). + * Returns false only when both the backend and the cache agree — + * or when the cache is empty on a genuinely fresh install. + * + * Prefer checkOnboardingStatus() where possible so the caller can + * distinguish "confirmed fresh install" from "can't reach backend". + */ +export async function isOnboardingComplete(): Promise { + const result = await checkOnboardingStatus() + if (result !== null) return result + // Backend unreachable — trust the local cache. If the cache says + // we're onboarded, we almost certainly are (this browser saw a + // prior backend 'true' and re-seeded the flag). If the cache is + // empty, we genuinely don't know; returning false here is the + // last-resort fallback, and the calling views should additionally + // keep polling the backend instead of treating this as gospel. return localStorage.getItem('neode_onboarding_complete') === '1' } diff --git a/neode-ui/src/router/index.ts b/neode-ui/src/router/index.ts index 57483315..59d2379c 100644 --- a/neode-ui/src/router/index.ts +++ b/neode-ui/src/router/index.ts @@ -311,18 +311,35 @@ router.beforeEach(async (to, _from, next) => { next() return } - // Check if this is a fresh install that needs onboarding + // Check if this is a fresh install that needs onboarding. + // Prefer checkOnboardingStatus() (tri-state) so we can distinguish + // "confirmed fresh install" from "backend unreachable". On the + // latter, send the user to RootRedirect (/) rather than the intro + // wizard — RootRedirect polls the backend and will route to + // /login once it answers, instead of forcing a re-onboarding. try { - const { isOnboardingComplete, getSavedOnboardingStep } = await import('@/composables/useOnboarding') - const setupDone = await isOnboardingComplete() - if (!setupDone) { + const { checkOnboardingStatus, getSavedOnboardingStep } = await import('@/composables/useOnboarding') + const setupDone = await checkOnboardingStatus() + if (setupDone === false) { const step = getSavedOnboardingStep() next(`/onboarding/${step}`) return } + if (setupDone === null) { + // Backend unreachable after retries — bounce through RootRedirect + // so it can keep polling and land the user on /login once the + // backend answers, instead of flashing the onboarding wizard. + const cached = localStorage.getItem('neode_onboarding_complete') === '1' + if (!cached) { + next('/') + return + } + // Cached as onboarded — continue to the /login path below. + } } catch { - // If we can't check, assume fresh install and show onboarding - next('/onboarding/intro') + // Unexpected error — do NOT default to onboarding. Hand off to + // RootRedirect which has retry + polling + boot-screen handling. + next('/') return } next({ path: '/login', query: { redirect: to.fullPath } }) diff --git a/neode-ui/src/stores/appLauncher.ts b/neode-ui/src/stores/appLauncher.ts index 5fa44fea..3225057c 100644 --- a/neode-ui/src/stores/appLauncher.ts +++ b/neode-ui/src/stores/appLauncher.ts @@ -41,7 +41,6 @@ const PORT_TO_APP_ID: Record = { '8334': 'bitcoin-knots', '8888': 'searxng', '9000': 'portainer', - '9001': 'penpot', '9980': 'onlyoffice', '11434': 'ollama', '2283': 'immich', @@ -51,7 +50,6 @@ const PORT_TO_APP_ID: Record = { '8175': 'fedimint', '8176': 'fedimint-gateway', '3100': 'dwn', - '18081': 'nostr-rs-relay', '7777': 'indeedhub', '50002': 'electrumx', '3010': 'thunderhub', diff --git a/neode-ui/src/utils/dummyApps.ts b/neode-ui/src/utils/dummyApps.ts index 5494a79e..5420287e 100644 --- a/neode-ui/src/utils/dummyApps.ts +++ b/neode-ui/src/utils/dummyApps.ts @@ -474,42 +474,6 @@ export const dummyApps: Record = { status: ServiceStatus.Running } }, - 'penpot': { - state: PackageState.Running, - 'static-files': { - license: 'MPL-2.0', - instructions: 'Design and prototyping platform', - icon: '/assets/img/penpot.webp' - }, - manifest: { - id: 'penpot', - title: 'Penpot', - version: '2.0.0', - description: { - short: 'Open-source design and prototyping platform', - long: 'Penpot is an open-source design and prototyping platform for teams. Create designs, prototypes, and collaborate in real-time. Self-hosted alternative to Figma.' - }, - 'release-notes': 'Initial release', - license: 'MPL-2.0', - 'wrapper-repo': 'https://github.com/penpot/penpot', - 'upstream-repo': 'https://github.com/penpot/penpot', - 'support-site': 'https://github.com/penpot/penpot/issues', - 'marketing-site': 'https://penpot.app', - 'donation-url': null - }, - installed: { - 'current-dependents': {}, - 'current-dependencies': {}, - 'last-backup': null, - 'interface-addresses': { - main: { - 'tor-address': 'penpot.onion', - 'lan-address': 'http://localhost:9001' - } - }, - status: ServiceStatus.Running - } - }, 'indeedhub': { state: PackageState.Running, 'static-files': { diff --git a/neode-ui/src/views/GoalDetail.vue b/neode-ui/src/views/GoalDetail.vue index 03a1e83a..62ef527b 100644 --- a/neode-ui/src/views/GoalDetail.vue +++ b/neode-ui/src/views/GoalDetail.vue @@ -178,7 +178,6 @@ const APP_ICON_MAP: Record = { fedimint: '/assets/img/app-icons/fedimint.png', mempool: '/assets/img/app-icons/mempool.webp', electrs: '/assets/img/app-icons/electrs.svg', - 'nostr-rs-relay': '/assets/img/app-icons/nostr-rs-relay.svg', } function stepIconUrl(step: GoalStep): string | undefined { diff --git a/neode-ui/src/views/Kiosk.vue b/neode-ui/src/views/Kiosk.vue index 08472cd1..0cff1e0d 100644 --- a/neode-ui/src/views/Kiosk.vue +++ b/neode-ui/src/views/Kiosk.vue @@ -99,7 +99,6 @@ const launchableApps = computed(() => { 'filebrowser': '/app/filebrowser/', 'searxng': '/app/searxng/', 'ollama': '/app/ollama/', - 'penpot': '/app/penpot/', 'onlyoffice': '/app/onlyoffice/', 'portainer': '/app/portainer/', 'uptime-kuma': '/app/uptime-kuma/', @@ -108,7 +107,6 @@ const launchableApps = computed(() => { 'fedimint': '/app/fedimint/', 'fedimint-gateway': '/app/fedimint-gateway/', 'dwn': '/app/dwn/', - 'nostr-rs-relay': '/app/nostr-rs-relay/', 'indeedhub': 'http://localhost:8190', 'botfights': 'http://localhost:9100', 'nwnn': 'https://nwnn.l484.com', diff --git a/neode-ui/src/views/RootRedirect.vue b/neode-ui/src/views/RootRedirect.vue index caac6831..92e673fd 100644 --- a/neode-ui/src/views/RootRedirect.vue +++ b/neode-ui/src/views/RootRedirect.vue @@ -50,11 +50,14 @@ async function quickHealthCheck(): Promise { } async function checkOnboarded(): Promise { + // No hard timeout here. isOnboardingComplete() already retries with + // backoff (see useOnboarding.ts). A 3s Promise.race that resolves to + // `false` on timeout was previously the main cause of the intro + // flashing on already-onboarded nodes after browser-clear / reboot / + // update: if the backend was slow to warm up, we'd force a 'false' + // and route the user back through the setup wizard. try { - const result = await Promise.race([ - isOnboardingComplete(), - new Promise((resolve) => setTimeout(() => resolve(false), 3000)), - ]) + const result = await isOnboardingComplete() log('checkOnboarded', { result }) return result } catch (e) { diff --git a/neode-ui/src/views/appDetails/appDetailsData.ts b/neode-ui/src/views/appDetails/appDetailsData.ts index 775f5980..d5ff8a44 100644 --- a/neode-ui/src/views/appDetails/appDetailsData.ts +++ b/neode-ui/src/views/appDetails/appDetailsData.ts @@ -34,7 +34,6 @@ export const ROUTE_TO_PACKAGE_KEY: Record = { searxng: 'searxng', ollama: 'ollama', onlyoffice: 'onlyoffice', - penpot: 'penpot', nextcloud: 'nextcloud', vaultwarden: 'vaultwarden', jellyfin: 'jellyfin', @@ -79,7 +78,6 @@ export const APP_URLS: Record = { 'ollama': { dev: 'http://localhost:11434', prod: 'http://localhost:11434' }, 'searxng': { dev: 'http://localhost:8888', prod: 'http://localhost:8888' }, 'onlyoffice': { dev: 'http://localhost:9980', prod: 'http://localhost:9980' }, - 'penpot': { dev: 'http://localhost:9001', prod: 'http://localhost:9001' }, 'nextcloud': { dev: 'http://localhost:8085', prod: 'http://localhost:8085' }, 'vaultwarden': { dev: 'http://localhost:8082', prod: 'http://localhost:8082' }, 'jellyfin': { dev: 'http://localhost:8096', prod: 'http://localhost:8096' }, diff --git a/neode-ui/src/views/appSession/appSessionConfig.ts b/neode-ui/src/views/appSession/appSessionConfig.ts index 942ff9bb..14598dcd 100644 --- a/neode-ui/src/views/appSession/appSessionConfig.ts +++ b/neode-ui/src/views/appSession/appSessionConfig.ts @@ -24,7 +24,6 @@ export const APP_PORTS: Record = { 'searxng': 8888, 'ollama': 11434, 'onlyoffice': 8044, - 'penpot': 9001, 'nextcloud': 8085, 'vaultwarden': 8082, 'jellyfin': 8096, @@ -38,10 +37,6 @@ export const APP_PORTS: Record = { 'fedimint': 8175, 'fedimintd': 8175, 'fedimint-gateway': 8176, - 'nostr-rs-relay': 18081, - 'nostr-vpn': 8201, - 'fips': 8202, - 'routstr': 8200, 'indeedhub': 7778, 'botfights': 9100, 'gitea': 3000, @@ -87,14 +82,10 @@ export const HTTPS_PROXY_PATHS: Record = { 'dwn': '/app/dwn/', 'btcpay-server': '/app/btcpay/', 'nextcloud': '/app/nextcloud/', - 'penpot': '/app/penpot/', 'grafana': '/app/grafana/', 'indeedhub': '/app/indeedhub/', 'botfights': '/app/botfights/', 'gitea': '/app/gitea/', - 'routstr': '/app/routstr/', - 'nostr-vpn': '/app/nostr-vpn/', - 'fips': '/app/fips/', } /** External HTTPS apps -- always loaded directly */ @@ -112,9 +103,8 @@ export const APP_TITLES: Record = { 'bitcoin-knots': 'Bitcoin Knots', 'bitcoin-core': 'Bitcoin Core', 'btcpay-server': 'BTCPay Server', 'indeedhub': 'Indeehub', 'botfights': 'BotFights', 'gitea': 'Gitea', '484-kitchen': '484 Kitchen', 'arch-presentation': 'Presentation', - 'nostr-vpn': 'Nostr VPN', 'fips': 'FIPS', 'routstr': 'Routstr', 'homeassistant': 'Home Assistant', 'uptime-kuma': 'Uptime Kuma', - 'nginx-proxy-manager': 'Nginx Proxy Manager', 'nostr-rs-relay': 'Nostr Relay', + 'nginx-proxy-manager': 'Nginx Proxy Manager', 'call-the-operator': 'Call The Operator', 'syntropy-institute': 'Syntropy Institute', 't-zero': 'T-Zero', 'nostrudel': 'noStrudel', } @@ -128,12 +118,10 @@ export const NEW_TAB_APPS = new Set([ 'vaultwarden', 'nextcloud', 'uptime-kuma', - 'penpot', 'portainer', 'onlyoffice', 'nginx-proxy-manager', 'tailscale', - 'routstr', ]) /** Sites known to block iframes -- skip the timeout and go straight to fallback */ diff --git a/neode-ui/src/views/appSession/useAppIdentity.ts b/neode-ui/src/views/appSession/useAppIdentity.ts index a60f72be..ef10be85 100644 --- a/neode-ui/src/views/appSession/useAppIdentity.ts +++ b/neode-ui/src/views/appSession/useAppIdentity.ts @@ -15,7 +15,7 @@ export interface SelectedIdentity { } function isIdentityAwareApp(id: string): boolean { - return id === 'indeedhub' || id === 'nostrudel' || id === 'routstr' + return id === 'indeedhub' || id === 'nostrudel' } export function useAppIdentity( diff --git a/neode-ui/src/views/apps/appsConfig.ts b/neode-ui/src/views/apps/appsConfig.ts index 01164d97..1969a7e2 100644 --- a/neode-ui/src/views/apps/appsConfig.ts +++ b/neode-ui/src/views/apps/appsConfig.ts @@ -8,11 +8,9 @@ import { PackageState, type PackageDataEntry } from '@/types/api' export const SERVICE_NAMES = new Set([ 'dwn', 'archy-mempool-db', 'archy-btcpay-db', 'archy-nbxplorer', 'archy-tor', 'immich_postgres', 'immich_redis', - 'penpot-postgres', 'penpot-valkey', 'penpot-backend', 'penpot-exporter', 'mysql-mempool', 'mempool-api', 'archy-mempool-web', 'archy-bitcoin-ui', 'archy-lnd-ui', 'archy-electrs-ui', 'indeedhub-postgres', 'indeedhub-redis', 'indeedhub-minio', - 'archy-nostr-vpn-ui', 'archy-fips-ui', 'indeedhub-api', 'indeedhub-ffmpeg', 'indeedhub-relay', 'indeedhub-build_api_1', 'indeedhub-build_ffmpeg-worker_1', 'indeedhub-build_postgres_1', 'indeedhub-build_redis_1', 'indeedhub-build_minio_1', @@ -39,8 +37,7 @@ export const APP_CATEGORY_MAP: Record = { 'nextcloud': 'data', 'vaultwarden': 'data', 'filebrowser': 'data', 'cryptpad': 'data', 'homeassistant': 'home', 'lorabell': 'home', 'endurain': 'home', 'searxng': 'community', 'ollama': 'community', 'grafana': 'data', - 'nostr-rs-relay': 'nostr', 'nostrudel': 'nostr', - 'nostr-vpn': 'networking', 'fips': 'networking', 'routstr': 'community', + 'nostrudel': 'nostr', 'tailscale': 'networking', 'nginx-proxy-manager': 'networking', 'portainer': 'networking', 'uptime-kuma': 'networking', 'dwn': 'data', 'botfights': 'community', 'nwnn': 'l484', '484-kitchen': 'l484', @@ -99,7 +96,7 @@ export const WEB_ONLY_APPS: Record = { export const TAB_LAUNCH_APPS = new Set([ 'btcpay-server', 'grafana', 'photoprism', 'homeassistant', 'vaultwarden', 'nextcloud', 'uptime-kuma', 'portainer', - 'cryptpad', 'nginx-proxy-manager', 'tailscale', 'routstr', + 'cryptpad', 'nginx-proxy-manager', 'tailscale', ]) export function opensInTab(id: string): boolean { diff --git a/neode-ui/src/views/discover/curatedApps.ts b/neode-ui/src/views/discover/curatedApps.ts index 389db133..93f11e8c 100644 --- a/neode-ui/src/views/discover/curatedApps.ts +++ b/neode-ui/src/views/discover/curatedApps.ts @@ -86,7 +86,6 @@ export function getCuratedAppList(): MarketplaceApp[] { { id: 'searxng', title: 'SearXNG', version: '2024.1.0', description: 'Privacy-respecting metasearch engine. Search the internet without being tracked or profiled.', icon: '/assets/img/app-icons/searxng.png', author: 'SearXNG', dockerImage: `${R}/searxng:latest`, repoUrl: 'https://github.com/searxng/searxng' }, { id: 'ollama', title: 'Ollama', version: '0.5.4', description: 'Run AI models locally. Llama, Mistral, and more — on your hardware, completely private.', icon: '/assets/img/app-icons/ollama.png', author: 'Ollama', dockerImage: `${R}/ollama:latest`, repoUrl: 'https://github.com/ollama/ollama' }, { id: 'cryptpad', title: 'CryptPad', version: '2024.12.0', description: 'End-to-end encrypted documents, spreadsheets, and presentations. Zero-knowledge collaboration.', icon: '/assets/img/app-icons/cryptpad.webp', author: 'XWiki SAS', dockerImage: `${R}/cryptpad:2024.12.0`, repoUrl: 'https://github.com/cryptpad/cryptpad' }, - { id: 'penpot', title: 'Penpot', version: '2.4', description: 'Open-source design platform. Self-hosted alternative to Figma for design and prototyping.', icon: '/assets/img/app-icons/penpot.webp', author: 'Penpot', dockerImage: `${R}/penpot-frontend:2.4`, repoUrl: 'https://github.com/penpot/penpot' }, { id: 'nextcloud', title: 'Nextcloud', version: '28', description: 'Your own private cloud. File sync, calendars, contacts — all on your hardware.', icon: '/assets/img/app-icons/nextcloud.webp', author: 'Nextcloud', dockerImage: `${R}/nextcloud:28`, repoUrl: 'https://github.com/nextcloud/server' }, { id: 'vaultwarden', title: 'Vaultwarden', version: '1.30.0', description: 'Self-hosted password vault. Bitwarden-compatible with zero-knowledge encryption.', icon: '/assets/img/app-icons/vaultwarden.webp', author: 'Vaultwarden', dockerImage: `${R}/vaultwarden:1.30.0-alpine`, repoUrl: 'https://github.com/dani-garcia/vaultwarden' }, { id: 'jellyfin', title: 'Jellyfin', version: '10.8.13', description: 'Free media server. Stream your movies, music, and photos to any device.', icon: '/assets/img/app-icons/jellyfin.webp', author: 'Jellyfin', dockerImage: `${R}/jellyfin:10.8.13`, repoUrl: 'https://github.com/jellyfin/jellyfin' }, @@ -99,12 +98,8 @@ export function getCuratedAppList(): MarketplaceApp[] { { id: 'tailscale', title: 'Tailscale', version: '1.78.0', description: 'Zero-config VPN. Secure remote access with WireGuard mesh networking.', icon: '/assets/img/app-icons/tailscale.webp', author: 'Tailscale', dockerImage: `${R}/tailscale:stable`, repoUrl: 'https://github.com/tailscale/tailscale' }, { id: 'electrumx', title: 'ElectrumX', version: '1.18.0', description: 'Electrum protocol server. Index the blockchain for fast wallet lookups, privately.', icon: '/assets/img/app-icons/electrumx.webp', author: 'Luke Childs', dockerImage: `${R}/electrumx:v1.18.0`, repoUrl: 'https://github.com/spesmilo/electrumx' }, { id: 'fedimint', title: 'Fedimint', version: '0.10.0', description: 'Federated Bitcoin mint. Private, scalable Bitcoin through federated guardians.', icon: '/assets/img/app-icons/fedimint.png', author: 'Fedimint', dockerImage: `${R}/fedimintd:v0.10.0`, repoUrl: 'https://github.com/fedimint/fedimint' }, - { id: 'nostr-rs-relay', title: 'Nostr Relay', version: '0.9.0', category: 'nostr', description: 'Your own Nostr relay. Store events locally, relay for friends, publish over Tor.', icon: '/assets/img/app-icons/nostr-rs-relay.svg', author: 'scsiblade', dockerImage: `${R}/nostr-rs-relay:0.9.0`, repoUrl: 'https://sr.ht/~gheartsfield/nostr-rs-relay/' }, { id: 'indeedhub', title: 'Indeehub', version: '1.0.0', description: 'Bitcoin documentary streaming with Nostr identity. Stream sovereignty content.', icon: '/assets/img/app-icons/indeedhub.png', author: 'Indeehub Team', dockerImage: `${R}/indeedhub:1.0.0`, repoUrl: 'https://github.com/indeedhub/indeedhub' }, { id: 'dwn', title: 'Decentralized Web Node', version: '0.4.0', description: 'Own your data with DID-based access control. Sync across devices, sovereign.', icon: '/assets/img/app-icons/dwn.svg', author: 'TBD', dockerImage: `${R}/dwn-server:main`, repoUrl: 'https://github.com/TBD54566975/dwn-server' }, - { id: 'nostr-vpn', title: 'Nostr VPN', version: '0.3.7', category: 'networking', description: 'Tailscale-style mesh VPN with Nostr control plane. Peer discovery and key exchange over relays, WireGuard tunnels.', icon: '/assets/img/app-icons/nostr-vpn.svg', author: 'Martti Malmi', dockerImage: `${R}/nostr-vpn:v0.3.7`, repoUrl: 'https://github.com/mmalmi/nostr-vpn' }, - { id: 'fips', title: 'FIPS', version: '0.1.0', category: 'networking', description: 'Free Internetworking Peering System. Self-organizing encrypted mesh network with Nostr identity.', icon: '/assets/img/app-icons/fips.svg', author: 'Jim Corgan', dockerImage: `${R}/fips:v0.1.0`, repoUrl: 'https://github.com/jmcorgan/fips' }, - { id: 'routstr', title: 'Routstr', version: '0.4.3', category: 'community', description: 'Decentralized AI inference proxy. Pay-per-request with Cashu ecash, provider discovery via Nostr.', icon: '/assets/img/app-icons/routstr.svg', author: 'Routstr', dockerImage: `${R}/routstr:v0.4.3`, repoUrl: 'https://github.com/routstr/routstr-core' }, { id: 'nostrudel', title: 'noStrudel', version: '0.40.0', category: 'nostr', description: 'Feature-rich Nostr web client. Browse feeds, post notes, manage relays with NIP-07.', icon: '/assets/img/app-icons/nostrudel.svg', author: 'hzrd149', dockerImage: '', repoUrl: 'https://github.com/hzrd149/nostrudel', webUrl: 'https://nostrudel.ninja' }, { id: 'botfights', title: 'BotFights', version: '1.0.0', category: 'community', description: 'Bot arena + 2-player arcade fighter with controller support. AI bots battle in trivia, humans duke it out with controllers.', icon: '/assets/img/app-icons/botfights.svg', author: 'BotFights', dockerImage: `${R}/botfights:1.1.0`, repoUrl: 'https://botfights.net' }, { id: 'gitea', title: 'Gitea', version: '1.23', category: 'development', description: 'Self-hosted Git service with container registry, CI/CD, issue tracking, and package hosting.', icon: '/assets/img/app-icons/gitea.svg', author: 'Gitea', dockerImage: 'docker.io/gitea/gitea:1.23', repoUrl: 'https://gitea.com' }, @@ -139,9 +134,6 @@ export const INSTALLED_ALIASES: Record = { tailscale: ['tailscale'], ollama: ['ollama'], indeedhub: ['indeedhub'], - 'nostr-vpn': ['nostr-vpn'], - fips: ['fips'], - routstr: ['routstr'], botfights: ['botfights'], } diff --git a/neode-ui/src/views/marketplace/marketplaceData.ts b/neode-ui/src/views/marketplace/marketplaceData.ts index f5cc1cdb..8dcbb434 100644 --- a/neode-ui/src/views/marketplace/marketplaceData.ts +++ b/neode-ui/src/views/marketplace/marketplaceData.ts @@ -54,9 +54,6 @@ export const INSTALLED_ALIASES: Record = { filebrowser: ['filebrowser'], tailscale: ['tailscale'], ollama: ['ollama'], - 'nostr-vpn': ['nostr-vpn'], - fips: ['fips'], - routstr: ['routstr'], } /** Get app tier classification (matches backend get_app_tier) */ @@ -240,17 +237,6 @@ export function getCuratedAppList(): MarketplaceApp[] { manifestUrl: undefined, repoUrl: 'https://github.com/cryptpad/cryptpad' }, - { - id: 'penpot', - title: 'Penpot', - version: '2.4', - description: 'Open-source design and prototyping platform. Self-hosted alternative to Figma.', - icon: '/assets/img/app-icons/penpot.webp', - author: 'Penpot', - dockerImage: 'docker.io/penpotapp/frontend:2.4', - manifestUrl: undefined, - repoUrl: 'https://github.com/penpot/penpot' - }, { id: 'nextcloud', title: 'Nextcloud', @@ -405,42 +391,6 @@ export function getCuratedAppList(): MarketplaceApp[] { manifestUrl: undefined, repoUrl: 'https://github.com/TBD54566975/dwn-server' }, - { - id: 'nostr-vpn', - title: 'Nostr VPN', - version: '0.3.7', - category: 'networking', - description: 'Tailscale-style mesh VPN with Nostr control plane. Peer discovery and key exchange over relays, WireGuard tunnels.', - icon: '/assets/img/app-icons/nostr-vpn.svg', - author: 'Martti Malmi', - dockerImage: `${REGISTRY}/nostr-vpn:v0.3.7`, - manifestUrl: undefined, - repoUrl: 'https://github.com/mmalmi/nostr-vpn' - }, - { - id: 'fips', - title: 'FIPS', - version: '0.1.0', - category: 'networking', - description: 'Free Internetworking Peering System. Self-organizing encrypted mesh network with Nostr identity.', - icon: '/assets/img/app-icons/fips.svg', - author: 'Jim Corgan', - dockerImage: `${REGISTRY}/fips:v0.1.0`, - manifestUrl: undefined, - repoUrl: 'https://github.com/jmcorgan/fips' - }, - { - id: 'routstr', - title: 'Routstr', - version: '0.4.3', - category: 'community', - description: 'Decentralized AI inference proxy. Pay-per-request with Cashu ecash, provider discovery via Nostr.', - icon: '/assets/img/app-icons/routstr.svg', - author: 'Routstr', - dockerImage: `${REGISTRY}/routstr:v0.4.3`, - manifestUrl: undefined, - repoUrl: 'https://github.com/routstr/routstr-core' - }, { id: 'nostrudel', title: 'noStrudel', @@ -454,18 +404,6 @@ export function getCuratedAppList(): MarketplaceApp[] { repoUrl: 'https://github.com/hzrd149/nostrudel', webUrl: 'https://nostrudel.ninja' }, - { - id: 'nostr-rs-relay', - title: 'Nostr Relay', - version: '0.9.0', - category: 'nostr', - description: 'Run your own Nostr relay. Store your events locally, relay for friends, and publish over Tor. A sovereign relay for your sovereign node.', - icon: '/assets/img/app-icons/nostr-rs-relay.svg', - author: 'scsiblade', - dockerImage: 'docker.io/scsibug/nostr-rs-relay:0.9.0', - manifestUrl: undefined, - repoUrl: 'https://sr.ht/~gheartsfield/nostr-rs-relay/' - }, { id: 'botfights', title: 'BotFights', diff --git a/neode-ui/src/views/settings/AccountInfoSection.vue b/neode-ui/src/views/settings/AccountInfoSection.vue index 5655aa9d..be56ae57 100644 --- a/neode-ui/src/views/settings/AccountInfoSection.vue +++ b/neode-ui/src/views/settings/AccountInfoSection.vue @@ -180,6 +180,18 @@ init()
+ +
+
+ v1.7.38-alpha + Apr 22, 2026 +
+
+

Signing in is quiet now. The intro music, welcome voice, and transition sounds belong to the first-boot cinematic and only play before you've finished onboarding — every login after that is silent. Typing sounds in the search bar and on the dashboard are unaffected.

+

Fixed a bug where clearing your browser cache, updating the node, or rebooting could bounce you back through the onboarding wizard even though your node was already fully set up. The node now self-heals: if your password is set, it knows you've been through onboarding and takes you straight to the login screen. No more starting over.

+

Trimmed the App Store. FIPS, Nostr Relay, Nostr VPN, Routstr, and Penpot have been removed from the catalog and their container images deleted from our registries. Your node's native FIPS transport is untouched — this is just the app-store entries going away.

+
+
diff --git a/scripts/create-release-manifest.sh b/scripts/create-release-manifest.sh index d3459189..5281261d 100755 --- a/scripts/create-release-manifest.sh +++ b/scripts/create-release-manifest.sh @@ -65,13 +65,31 @@ if [ -z "$BACKEND_BINARY" ]; then BACKEND_BINARY="$PROJECT_ROOT/core/target/release/archipelago" fi -# Auto-detect frontend archive +# Auto-detect frontend archive. +# Layout: flat tarball (`./index.html`, `./assets/…`, `./aiui/…`) so the +# Rust updater can unpack it directly into /opt/archipelago/web-ui/. +# Using `-C web/dist neode-ui` would produce a `neode-ui/` prefix which +# breaks the installer and returns 403 on every fleet UI — see +# feedback_release_tarball_layout.md. if [ -z "$FRONTEND_ARCHIVE" ]; then FRONTEND_DIST="$PROJECT_ROOT/web/dist/neode-ui" if [ -d "$FRONTEND_DIST" ]; then FRONTEND_ARCHIVE="/tmp/archipelago-frontend-${VERSION}.tar.gz" - echo "Creating frontend archive from $FRONTEND_DIST..." - tar -czf "$FRONTEND_ARCHIVE" -C "$PROJECT_ROOT/web/dist" neode-ui + STAGING_DIR=$(mktemp -d -t archipelago-frontend.XXXXXX) + echo "Staging frontend archive in $STAGING_DIR..." + cp -r "$FRONTEND_DIST/." "$STAGING_DIR/" + # Bake AIUI in so fresh installs pick it up. OTA already + # carries-forward the existing aiui/ if the tarball lacks one + # (update.rs:922), but including it here makes the tarball + # the single source of truth instead of relying on a side- + # effect of the in-place swap. + if [ -d "$PROJECT_ROOT/demo/aiui" ] && [ -f "$PROJECT_ROOT/demo/aiui/index.html" ]; then + echo " Including AIUI from demo/aiui/" + cp -r "$PROJECT_ROOT/demo/aiui" "$STAGING_DIR/aiui" + fi + echo "Creating frontend archive $FRONTEND_ARCHIVE..." + tar -czf "$FRONTEND_ARCHIVE" -C "$STAGING_DIR" . + rm -rf "$STAGING_DIR" fi fi diff --git a/scripts/deploy-to-target.sh b/scripts/deploy-to-target.sh index 6cc5c90a..238cae15 100755 --- a/scripts/deploy-to-target.sh +++ b/scripts/deploy-to-target.sh @@ -600,6 +600,13 @@ if [ "$LIVE" = true ]; then echo "$(timestamp) Building AIUI (source newer than dist or dist missing)..." (cd "$AIUI_DIR" && VITE_BASE_PATH=/aiui/ pnpm build 2>&1 | tail -5) || echo "$(timestamp) ⚠️ AIUI build failed" fi + # Fallback: if the AIUI sibling checkout is missing, use the pre-built + # dist shipped in this repo at demo/aiui/. That path is what we ship in + # the release tarball too, so local-and-fleet-update stay consistent. + if [ ! -f "$AIUI_DIST/index.html" ] && [ -f "$PROJECT_DIR/demo/aiui/index.html" ]; then + echo "$(timestamp) AIUI sibling dist missing — using demo/aiui/ from repo" + AIUI_DIST="$PROJECT_DIR/demo/aiui" + fi if [ -d "$AIUI_DIST" ] && [ -f "$AIUI_DIST/index.html" ]; then echo "$(timestamp) Deploying AIUI..." if true; then