4 Commits

Include renames

Author	SHA1	Message	Date
archipelago	daac47cac4	fix: harden node upgrades and prepare 1.9.0-alpha	2026-10-05 12:43:49 -04:00
archipelago	c82c1eee98	fix: prevent NPM tunnel collisions and false app health restarts	2026-09-30 16:30:40 -04:00
archipelago	e382e679ae	fix(apps): NPM needs /etc/letsencrypt mounted and NET_BIND_SERVICE ... Converting Nginx Proxy Manager to a platform manifest (fc68c5b6) dropped two things its image hard-requires, and the result was an endless start/die loop — shorty-s watched it restart 3,176 times: 1. /etc/letsencrypt mount: NPM's s6 'prepare' service refuses to boot without it ('ERROR: /etc/letsencrypt is not mounted!'). Mounted from the same persistent app directory as before (/var/lib/archipelago/nginx-proxy-manager/letsencrypt), so existing certificates are preserved — no data moves, no migration. 2. NET_BIND_SERVICE: NPM's internal nginx listens on 80, 443 AND 81, and the orchestrator runs --cap-drop=ALL. The legacy podman-run path defaulted to the full capability set (and the legacy repair path in package/config.rs always listed it), which is why this only broke once the manifest became the source of truth. The signed catalog embeds manifests with origin-wins semantics, so the catalog carries the fix for every catalog-covered node — regenerate it here (plus the generated store/launcher-port artifacts, which also pick up drift from bf6ef964's retired apps). Catalog re-signing follows the usual ceremony.	2026-09-01 10:29:05 -04:00
archipelago	fc68c5b680	feat(apps): complete the manifest platform — convert the last five stragglers ... Nginx Proxy Manager, Tailscale, Ollama, CryptPad, and AdGuard Home now carry full manifests: the app gate fronts their web ports (TLS on the same port, node login where appropriate), installs run through the orchestrator, and pins live in the signed catalog. Tailscale mirrors its legacy shape exactly (userspace networking, web console on 8240, plain HTTP for the gate to front). Ollama stays loopback-only — the assistant's local model backend, not a web app. Retires the four already-removed apps for good (FIPS, Nostr VPN, Routstr, Penpot pins dropped from image-versions.sh, the generator map, and image_versions.rs), fixes Cuprate's duplicated metadata block that strict YAML parsers reject, and updates the port-inventory review gates for the new open (3 own-login consoles) and exempt (2 DNS) ports.	2026-08-31 18:40:39 -04:00