{{ t('settings.serverName') }}
{{ serverName }}
{{ t('common.version') }}
{{ version }}
33 security findings from a comprehensive penetration test — all fixed. Backend now only accessible through nginx. Path traversal, SSRF, and XSS vulnerabilities eliminated. Federation requires cryptographic signatures. Session tokens rotate after 2FA. Destructive operations now require password confirmation.
Memory limits on every container prevent one app from crashing the whole system. Crashed apps now show a red "crashed" badge with a restart button instead of disappearing. Smart health status shows "starting up", "healthy", or "unhealthy" in real time. Apps you stop stay stopped — no more auto-restart fighting.
The Home dashboard now shows your Bitcoin wallet with on-chain, Lightning, and ecash balances. Send, receive, and view transaction history right from the home screen. New Transactions modal shows your full history with confirmations.
Connect Your Wallet (Zeus, Zap, BlueWallet) now works over both local network and Tor. QR codes generate correctly with REST API access.
Mesh view redesigned. New glass button styles throughout. Restart button on running apps. Improved app status badges. Cleaner navigation on the Apps page.
All 12 pentest findings fixed. CSRF tokens now survive restarts. Password hashing upgraded to Argon2id. Bitcoin RPC gets a unique random password on every install. Federation messages require ed25519 signatures.
Random logouts fixed (P0). Uninstall dialog is now a proper full-screen modal with an "Uninstalling..." overlay. App cards no longer flicker between Start/Launch during container scans. ElectrumX index estimate corrected.
Homepage System card now shows Bitcoin Core sync progress, block height, and green/orange status indicator when Bitcoin is running.
Fixed 9 of 12 security findings: session auth on LND connect info, DEV_MODE removed from production, ed25519 signature verification on node messages, path traversal protection, NIP-07 origin validation, AIUI session checks, strict onion validation.
Fedimint renamed to "Fedimint Guardian". Tab-launch icons. Marketplace sorts installed apps to end. Mesh mobile layout fixed. On-Chain first in receive modals. Federation shows names instead of DIDs. Cleaner iframe error screens.
29 containers running rootless. Marketplace app aliases working. Credential injection for inter-container authentication.
Migrated all containers from root to rootless Podman. UID namespace mapping, volume ownership fixes, sysctl tuning. Bitcoin RPC verified, all web services confirmed healthy. 29 containers up and running.
Full systemd security sandbox restored now that containers run rootless. NoNewPrivileges, restricted namespaces, and system call filtering re-enabled. Session persistence and boot sequence fixes.
LoRa mesh radio auto-detects USB port changes with a new Connect button. Fixed container crash loops — all apps start cleanly and stay stable. Apps starting up show progress instead of re-appearing in the store. Tor routing enabled by default for Bitcoin and Lightning.
Receive Bitcoin block headers over mesh radio. Dead man's switch broadcasts location to trusted contacts if you go silent. GPS sharing is opt-in only.
{{ t('settings.sessionStatus') }}
{{ t('settings.loggedIn') }}
{{ t('settings.yourDid') }}
{{ userDid }}
{{ t('settings.didHelper') }}
{{ t('settings.onionAddress') }}
{{ serverTorAddress }}
{{ t('settings.onionHelper') }}
{{ t('settings.changePasswordDesc') }}
{{ t('settings.twoFactorAuth') }}
{{ t('settings.twoFaProtect') }}
{{ t('settings.setup2faPasswordPrompt') }}
{{ t('settings.scanQrInstruction') }}
Manual entry key (keep secret!):
{{ totpSecretBase32 }}
{{ t('settings.backupCodesInstruction') }}
{{ t('settings.disable2faDesc') }}
{{ t('settings.interfaceModeDesc') }}
Choose your preferred language
{{ t('settings.claudeAuthDesc') }}
{{ t('settings.connectionStatus') }}
{{ claudeConnected ? t('common.connected') : t('settings.notConnected') }}
{{ t('settings.aiDataAccessDesc') }}
{{ group.label }}
{{ t('settings.systemUpdatesDesc') }}
{{ t('settings.webhookNotificationsDesc') }}
Help improve Archipelago by sharing anonymous system health data. No wallet data, no keys, no personal info.
Reporting: version, uptime, container states, CPU/RAM, error alerts.
Not reporting: wallet balances, private keys, DIDs, IP addresses.
{{ t('settings.backupRestoreDesc') }}
{{ t('settings.restoreWarning') }}
{{ t('settings.networkDesc') }}
Wipe all user data, identities, and credentials. Container images are preserved. The node will restart and show the onboarding screen.
This will delete all identities, credentials, and settings. This cannot be undone.