4 Commits

Author	SHA1	Message	Date
archipelago	c07f38a903	fix(apps): repoint image refs from retired git.tx1138.com to vps2 ... Six manifests still pulled through git.tx1138.com/lfg2025, which is dead — every boot reconcile of archy-btcpay-db/archy-nbxplorer failed at the pull step (live-testing report 2026-07-10; the orchestrator now also falls back to local storage, 3a5c5db1). All six tags verified present on 146.59.87.168:3000/lfg2025 via the registry API. Ships fleet-wide at the next catalog ceremony (catalog manifests override disk ones). Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-10 09:51:38 -04:00
archipelago	03a4ee1b30	feat(container): manifest-declared generated secrets + companion/quadlet hardening ... Generated-secrets system: apps declare `generated_secrets` in their manifest (kinds hex16/hex32/bcrypt); `container::secrets::ensure_generated_secrets` materialises them 0600/rootless in resolve_dynamic_env — idempotent and self-healing (recovers wrongly root-owned secrets with no privilege). Replaces per-app Rust (deletes ensure_fmcd_password). fedimint-clientd/gateway manifests now declare fmcd-password / fedimint-gateway-hash. companion.rs: rebuild the auto-built :latest image when its build context changes (staleness check) so baked-in fixes (e.g. guardian-UI CSS) actually reach nodes. quadlet.rs: skip PublishPort under Network=host (podman rejects the combo, exit 125) + regression tests. UI: "Fedimint Guardian" rename, fedimint-clientd/nostr-rs-relay/meshtastic tagged as Services (headless backends), gateway icon fallback. Deployed + verified on .228 (generated-secrets fixed fedimint-gateway start; grafana/strfry orphan crash-loop units removed). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-21 05:11:07 -04:00
archipelago	745cb1c626	chore(release): stage v1.7.52-alpha	2026-05-05 11:29:18 -04:00
archipelago	8f83b37d51	feat(orchestrator): complete container migration and release hardening	2026-04-28 15:00:58 -04:00