archipelago
03a4ee1b30
feat(container): manifest-declared generated secrets + companion/quadlet hardening
Generated-secrets system: apps declare `generated_secrets` in their manifest
(kinds hex16/hex32/bcrypt); `container::secrets::ensure_generated_secrets`
materialises them 0600/rootless in resolve_dynamic_env — idempotent and
self-healing (recovers wrongly root-owned secrets with no privilege). Replaces
per-app Rust (deletes ensure_fmcd_password). fedimint-clientd/gateway manifests
now declare fmcd-password / fedimint-gateway-hash.
companion.rs: rebuild the auto-built :latest image when its build context changes
(staleness check) so baked-in fixes (e.g. guardian-UI CSS) actually reach nodes.
quadlet.rs: skip PublishPort under Network=host (podman rejects the combo, exit
125) + regression tests.
UI: "Fedimint Guardian" rename, fedimint-clientd/nostr-rs-relay/meshtastic tagged
as Services (headless backends), gateway icon fallback.
Deployed + verified on .228 (generated-secrets fixed fedimint-gateway start;
grafana/strfry orphan crash-loop units removed).
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-21 05:11:07 -04:00
..
2026-06-17 19:21:42 -04:00
2026-01-24 22:59:20 +00:00
2026-06-19 16:43:30 -04:00
2026-06-19 09:52:26 -04:00
2026-06-11 00:24:40 -04:00
2026-06-17 04:48:00 -04:00
2026-06-20 18:58:52 -04:00
2026-03-11 17:18:37 +00:00
2026-06-20 08:01:14 -04:00
2026-06-11 00:24:40 -04:00
2026-06-17 19:21:42 -04:00
2026-06-21 05:11:07 -04:00
2026-06-16 09:53:21 -04:00
2026-03-14 05:41:33 +00:00
2026-06-20 18:58:52 -04:00
2026-06-19 13:57:51 -04:00