lfg2025/archy
1
0
Fork 0
Code Issues 16 Pull Requests Actions Packages Projects Releases 44 Wiki Activity
archy/apps
History
Dorian 4b0e44fc6c chore: purge retired git.tx1138.com registry host from the codebase 
The tx1138 Gitea was retired as a release server 2026-06-13 and its registry
frontend is fully dead (500 on every /v2 manifest read, observed 2026-07-10).
Nothing may reference it anymore:

- registry.rs: no longer a default registry, no longer force-enabled on
  load; saved configs are stripped of it on load (same one-time migration
  treatment as the decommissioned Hetzner mirror), with a regression test.
- image_policy.rs: removed from TRUSTED_REGISTRIES — refs through the dead
  host are now refused at the pull site (rejection test added).
- api/handler: dropped the legacy catalog-proxy fallback URL.
- .gitmodules: indeedhub submodule repointed to the OVH Gitea.
- scripts, image-recipe, app-catalog data, neode-ui strings, docs, and all
  test fixtures repointed to 146.59.87.168:3000 (or neutral example hosts).
- image-versions.sh: ARCHY_REGISTRY_FALLBACK emptied (guarded consumers
  skip it); reconcile-containers.sh candidate guard hardened.

The only remaining occurrences of the host string are the strip/reject
enforcement paths and their regression tests — the code that guarantees it
is never used again.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-07-10 18:55:32 +01:00
..
aiui
fix: harden all 23 app manifests with no_new_privileges, user, seccomp (MAINT-04)
2026-03-11 18:13:28 +00:00
archy-btcpay-db
fix(apps): repoint image refs from retired git.tx1138.com to vps2
2026-07-10 09:51:38 -04:00
archy-mempool-db
fix(apps): repoint image refs from retired git.tx1138.com to vps2
2026-07-10 09:51:38 -04:00
archy-mempool-web
fix(mempool): health-check 127.0.0.1 not localhost (stops false-unhealthy loop)
2026-06-28 15:09:34 -04:00
archy-nbxplorer
fix(apps): repoint image refs from retired git.tx1138.com to vps2
2026-07-10 09:51:38 -04:00
bitcoin-core
fix(security): drop unbindable publish binds instead of crash-looping the app
2026-07-08 23:41:39 -04:00
bitcoin-knots
fix(security): drop unbindable publish binds instead of crash-looping the app
2026-07-08 23:41:39 -04:00
bitcoin-ui
feat(container): bitcoin-ui pre-start hook renders nginx.conf from embedded template
2026-04-23 02:19:52 -04:00
botfights
app-platform: generate catalog from app manifests
2026-06-11 00:24:20 -04:00
btcpay-server
fix(apps): persist btcpay plugins and wire the internal LND node
2026-07-10 17:48:27 +01:00
core-lightning
fix: harden all 23 app manifests with no_new_privileges, user, seccomp (MAINT-04)
2026-03-11 18:13:28 +00:00
did-wallet
fix(apps): resolve latent host-port collisions + detect at load time
2026-07-10 12:25:42 -04:00
electrs-ui
feat(container): bitcoin-ui pre-start hook renders nginx.conf from embedded template
2026-04-23 02:19:52 -04:00
electrumx
fix(orchestrator): generalize launch-port fallback + archival-bitcoin dependency gating
2026-07-01 03:59:00 -04:00
fedimint
feat(container): manifest-declared generated secrets + companion/quadlet hardening
2026-06-21 05:11:07 -04:00
fedimint-clientd
integration: preserve deployed 1.8.0 OTA work
2026-06-30 05:08:17 -04:00
fedimint-gateway
fix(apps): repoint image refs from retired git.tx1138.com to vps2
2026-07-10 09:51:38 -04:00
filebrowser
fix(apps): repoint image refs from retired git.tx1138.com to vps2
2026-07-10 09:51:38 -04:00
fips-ui
feat(fips): connect to public mesh anchor over TCP + wire daemon updates
2026-06-15 06:41:48 -04:00
gitea
app-platform: generate catalog from app manifests
2026-06-11 00:24:20 -04:00
grafana
app-platform: generate catalog from app manifests
2026-06-11 00:24:20 -04:00
home-assistant
app-platform: type manifest launch interfaces
2026-06-11 00:52:16 -04:00
immich
fix(immich): declare the caps its root process needs over the subuid-owned data tree
2026-07-05 16:33:30 -04:00
immich-postgres
fix(immich): name containers underscore to match runtime lifecycle code
2026-06-21 09:20:38 -04:00
immich-redis
fix(immich): name containers underscore to match runtime lifecycle code
2026-06-21 09:20:38 -04:00
indeedhub
chore: purge retired git.tx1138.com registry host from the codebase
2026-07-10 18:55:32 +01:00
indeedhub-api
feat(indeedhub): manifest-driven 7-member stack, orchestrator-first (#20 phase 3)
2026-06-21 15:46:26 -04:00
indeedhub-ffmpeg
feat(indeedhub): manifest-driven 7-member stack, orchestrator-first (#20 phase 3)
2026-06-21 15:46:26 -04:00
indeedhub-minio
feat(indeedhub): manifest-driven 7-member stack, orchestrator-first (#20 phase 3)
2026-06-21 15:46:26 -04:00
indeedhub-postgres
feat(indeedhub): manifest-driven 7-member stack, orchestrator-first (#20 phase 3)
2026-06-21 15:46:26 -04:00
indeedhub-redis
feat(indeedhub): manifest-driven 7-member stack, orchestrator-first (#20 phase 3)
2026-06-21 15:46:26 -04:00
indeedhub-relay
feat(indeedhub): manifest-driven 7-member stack, orchestrator-first (#20 phase 3)
2026-06-21 15:46:26 -04:00
jellyfin
app-platform: type manifest launch interfaces
2026-06-11 00:52:16 -04:00
lightning-stack
fix(apps): resolve latent host-port collisions + detect at load time
2026-07-10 12:25:42 -04:00
lnd
fix: fresh-ISO feedback bug-bash — onboarding, status truthfulness, recovery, kiosk, logs
2026-07-02 08:00:39 -04:00
lnd-ui
chore(release): stage v1.7.52-alpha
2026-05-05 11:29:18 -04:00
mempool
fix(orchestrator): generalize launch-port fallback + archival-bitcoin dependency gating
2026-07-01 03:59:00 -04:00
mempool-api
fix(apps): repoint image refs from retired git.tx1138.com to vps2
2026-07-10 09:51:38 -04:00
morphos-server
fix(apps): resolve latent host-port collisions + detect at load time
2026-07-10 12:25:42 -04:00
netbird
feat(netbird): manifest-driven migration via reusable orchestrator primitives
2026-06-23 13:39:53 -04:00
netbird-dashboard
feat(netbird): manifest-driven migration via reusable orchestrator primitives
2026-06-23 13:39:53 -04:00
netbird-server
feat(netbird): manifest-driven migration via reusable orchestrator primitives
2026-06-23 13:39:53 -04:00
nextcloud
app-platform: type manifest launch interfaces
2026-06-11 00:52:16 -04:00
nostr-rs-relay
app-platform: generate catalog from app manifests
2026-06-11 00:24:20 -04:00
photoprism
app-platform: type manifest launch interfaces
2026-06-11 00:52:16 -04:00
portainer
chore: snapshot release workspace
2026-06-12 03:00:15 -04:00
router
fix: harden all 23 app manifests with no_new_privileges, user, seccomp (MAINT-04)
2026-03-11 18:13:28 +00:00
searxng
app-platform: generate catalog from app manifests
2026-06-11 00:24:20 -04:00
strfry
fix(apps): strfry healthcheck probes 127.0.0.1:7777, not localhost:8090
2026-07-09 19:42:06 -04:00
uptime-kuma
app-platform: generate catalog from app manifests
2026-06-11 00:24:20 -04:00
vaultwarden
app-platform: type manifest launch interfaces
2026-06-11 00:52:16 -04:00
build.sh
mid code commit
2026-01-24 23:18:24 +00:00
DEVELOPMENT.md
chore: snapshot release workspace
2026-06-12 03:00:15 -04:00
PORTS.md
chore: snapshot release workspace
2026-06-12 03:00:15 -04:00
QUICKSTART.md
chore: snapshot release workspace
2026-06-12 03:00:15 -04:00
README.md
chore: snapshot release workspace
2026-06-12 03:00:15 -04:00

README.md

Archipelago App Manifests

Containerized applications for the Archipelago Bitcoin Node OS. All apps run in rootless Podman with security hardening (cap-drop ALL, readonly root, non-root user, memory limits).

App Categories

Bitcoin & Lightning

  • bitcoin-knots — Full Bitcoin node (v28.1)
  • lnd — Lightning Network Daemon (v0.17.4-beta)
  • btcpay-server — Payment processor (v1.13.5)
  • mempool — Block explorer and fee estimator (v2.5.0)
  • electrumx — Electrum server
  • fedimint — Federated Bitcoin minting (v0.10.0)

Nostr

  • nostr-rs-relay — High-performance Rust relay (v0.9.0)
  • nostrudel — Nostr web client (v0.40.0)

Web5 & Identity

  • did-wallet — Web5 DID Wallet

Self-Hosted Services

  • nextcloud (v28), jellyfin (v10.8.13), immich (release), photoprism (v240915)
  • vaultwarden (v1.30.0-alpine), penpot (v2.4)
  • homeassistant (v2024.1), filebrowser (v2.27.0), searxng (2024.11.17)
  • ollama (v0.5.4), grafana (v10.2.0), portainer (v2.19.4)

Networking

  • tailscale (stable), nginx-proxy-manager (v2.12.1)

Custom & External

  • indeedhub — Bitcoin documentary streaming (custom build)
  • router — Mesh routing and network management
  • botfights, nwnn, 484-kitchen, call-the-operator, arch-presentation, syntropy-institute, t-zero — External web apps

Manifest Format

Each app has a manifest.yml defining container image, resources, dependencies, security policies, health checks, and network config. See docs/app-manifest-spec.md for the spec.

Quick Reference