84a56c80de
Security (33 pentest findings addressed): - CRITICAL: backend binds 127.0.0.1, path traversal in tor.rs/dwn fixed - HIGH: federation requires signatures, XSS login redirect, RBAC viewer restricted - HIGH: tar slip prevention, S3 SSRF validation, backup ID validation - MEDIUM: remember-me random secret, TOTP session rotation, password re-auth - LOW: CSP unsafe-inline removed, CORS dev-only, onion/webhook validation Container reliability: - Memory limits on all 37 containers (OOM prevention) - Exited vs stopped state distinction with health-aware status badges - Crash recovery coordination (no more restart cascade) - User-stopped tracking survives reboots - Tiered boot recovery (databases → core → services → apps) UI: - Wallet TransactionsModal, health-aware app status badges - Restart button on containers, exited/crashed red state - Mesh view overhaul, glass button updates, BaseModal/ToggleSwitch - Apps sticky header removed, dev faucet, mutable mock wallet Infrastructure: - LND REST port 8080 exposed over Tor (LND Connect fix) - Nginx cookie_session fix, deploy script Tor config updated - Dev environment: podman auto-start, boot mode simulation Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2.2 KiB
2.2 KiB
Archipelago Project Memory Index
Setup & Architecture
- claude-proxy-setup.md — Claude proxy OAuth setup details
- deploy-automation.md — Deploy script automation TODOs (API key, AIUI nginx, swap)
Servers & Deploy
- project_environments.md — Four environments: dev mode, dev server/prod, demo
- tailscale_servers.md — Tailscale server details (archipelago-2, archipelago-3)
- reference_tailscale_nodes.md — All node IPs and SSH commands
- second-server.md — Second dev server (archipelago-2 via Tailscale)
- third-server.md — Third dev server (archipelago-3 via Tailscale)
Features & Plans
- pending-features.md — Feature requests: kiosk mode, sideloading, Nostr login, etc.
- project-plan.md — Overall project plan status
- web-only-apps.md — Web-only apps (L484 category) and iframe compatibility
User Feedback
- feedback_app_display_modes.md — App browser: 3 display modes with persistent setting
- feedback_fullscreen_modals.md — Fullscreen modal preferences
- feedback_local_dev.md — Local dev: use
cd neode-ui && ./start-dev.sh - feedback_apps_always_direct_port.md — Apps MUST open at direct port, NEVER proxy paths
- feedback_indeedhub_nginx_ips.md — IndeedHub nginx must use hardcoded container IPs
- feedback_searxng_no_cap_drop.md — SearXNG: no cap-drop ALL
ISO Build
- iso-build-session-2026-03-10.md — ISO build session notes
- unbundled-iso.md — Unbundled ISO approach notes
Completed Work
- project_mesh_198_issue.md — Mesh .198: 3 bugs fixed and deployed
- project_indeedhub_arch3_fix.md — IndeedHub Arch 3: corrupted combined tarball fixed
- project_demo_deploy.md — Demo prod deployment via Portainer