Commit Graph

Select branches

Hide Pull Requests

chore/record-box-hardening

feat/funding-manifest-urls

fix/funding-manifests-in-repo-compose

fix/funding-wellknown-file

fix/security-audit-2026-10-15

main

#100

#101

#102

#103

#104

#105

#106

#107

#108

#109

#110

#111

#112

#113

#114

#115

#116

#117

#118

#119

#120

#121

#122

#123

#124

#125

#126

#127

#128

#129

#130

#131

#132

#133

#134

#135

#136

#137

#138

#139

#140

#141

#142

#143

#144

#145

#146

#147

#148

#149

#150

#151

#152

#153

#154

#155

#156

#157

#158

#159

#160

#161

#162

#163

#164

#165

#166

#167

#168

#169

#170

#171

#172

#173

#174

#175

#176

#177

#178

#179

#180

#181

#182

#183

#184

#185

#186

#187

#188

#189

#190

#191

#192

#193

#194

#195

#196

#197

#198

#199

#200

#201

#202

#203

#204

#205

#206

#207

#208

#209

#210

#211

#212

#213

#214

#215

#216

#217

#218

#219

#220

#221

#222

#223

#224

#225

#226

#227

#228

#229

#230

#231

#232

#233

#234

#235

#236

#237

#238

#239

#240

#241

#242

#243

#244

#245

#246

#247

#248

#249

#251

#252

#253

#254

#255

#256

#257

#258

#259

#260

#261

#262

#64

#65

#66

#67

#68

#69

#70

#71

#72

#73

#74

#75

#76

#77

#78

#79

#80

#81

#82

#83

#84

#85

#86

#87

#88

#89

#90

#91

#92

#93

#94

#95

#96

#97

#98

#99

Mono Color

• 0886c4a415 Merge pull request 'Prod compose: record the hardening running on the box since 2026-10-15' (#262) from chore/record-box-hardening into main main extant2000git 2026-10-16 10:48:19 +00:00
• af56f810a8 Prod compose: record the hardening running on the box since 2026-10-15 chore/record-box-hardening Paul HittandClaude Opus 5.5 2026-10-16 06:38:04 -04:00
• 91af917aa4 Put FN_FUNDING_MANIFESTS in the compose the repository ships (#261) extant2000git 2026-10-15 23:08:20 +00:00
• 1dc4d1b713 Put FN_FUNDING_MANIFESTS in the compose the repository ships fix/funding-manifests-in-repo-compose Paul HittandClaude Opus 5 2026-10-15 18:58:07 -04:00
• 36d873ff6d Prove this repository belongs to the funding manifest (#260) extant2000git 2026-10-15 22:51:44 +00:00
• f61389474c Prove this repository belongs to the funding manifest fix/funding-wellknown-file Paul HittandClaude Opus 5 2026-10-15 18:41:23 -04:00
• 9fbe8045d4 Vouch for a funding.json manifest, when this relay is configured to (#259) extant2000git 2026-10-15 20:28:02 +00:00
• a07e0a86ce Regenerate configuration.leaf, which is the page people actually read feat/funding-manifest-urls Paul HittandClaude Opus 5 2026-10-15 16:16:42 -04:00
• 3ab3e8af03 Document FN_FUNDING_MANIFESTS, which CONFIGURATION.md promises to list Paul HittandClaude Opus 5 2026-10-15 16:14:43 -04:00
• 0d06092a28 Ignore agent worktrees, which git add -A turned into gitlinks Paul HittandClaude Opus 5 2026-10-15 16:04:31 -04:00
• a3675e49c6 Vouch for a funding.json manifest, when this relay is configured to Paul HittandClaude Opus 5 2026-10-15 16:04:04 -04:00
• 41580da291 Merge pull request 'Security audit 2026-10-15: relay fixes' (#258) from fix/security-audit-2026-10-15 into main extant2000git 2026-10-15 13:35:03 +00:00
• 842f11e952 Security audit 2026-10-15: relay fixes fix/security-audit-2026-10-15 Paul HittandClaude Opus 5.5 2026-10-15 09:21:34 -04:00
• ec9c542cf5 Merge pull request 'Messenger pages: sign-up open in 12 countries (adds Canada, Australia, New Zealand)' (#257) from extant2000git/copy/countries-12 into main extant2000git 2026-10-15 12:56:49 +00:00
• d159e126cd Messenger pages: sign-up is open in 12 countries, adding Canada, Australia and New Zealand Paul HittandClaude Opus 5.5 2026-10-15 08:44:51 -04:00
• 9d2bbbf0e9 Merge pull request 'Relay 0.32: merge the release branch into main, with the badge column carried onto the new write path' (#256) from merge/relay-0-32-unify into main extant2000git 2026-10-14 17:01:59 +00:00
• dca5333e9b BadgeCountTests follows the deposit path wave 2 left behind Paul HittandClaude Opus 5 2026-10-14 12:47:33 -04:00
• ba68984eab TodayFile.Key holds the raw bytes, because CryptoKit's PublicKey is not Sendable on Linux Paul HittandClaude Opus 5 2026-10-14 12:41:10 -04:00
• b005993b95 Merge release/0-32 into main: /today.json, the /hi page, and the badge that counts messages Paul HittandClaude Opus 5 2026-10-14 12:34:32 -04:00
• a13e396023 Merge pull request 'ci: the staging gate waits for Postgres over TCP, from another container, twice' (#255) from ci/gate-waits-for-postgres-over-tcp into main extant2000git 2026-10-14 16:33:57 +00:00
• c4d50f45f7 ci: the staging gate waits for Postgres over TCP, from another container, twice Paul HittandClaude Opus 5 2026-10-14 12:24:06 -04:00
• 6d1013dc89 Merge pull request 'Relay review wave 2: in-process wake, signin and tokens, scale, streaming attachments' (#254) from release/relay-review-wave2-2026-10-14 into main extant2000git 2026-10-14 16:21:52 +00:00
• 404468d983 Merge remote-tracking branch 'gitea/main' into HEAD Paul Hitt 2026-10-14 11:13:26 -04:00
• ebdfc87eb9 Merge pull request 'ci: run the image job on mac2, and make the staging gate say what failed' (#253) from ci/image-on-mac2 into main extant2000git 2026-10-14 15:13:17 +00:00
• 15737e05b4 ci: run the image job on mac2, and make the staging gate say what failed Paul HittandClaude Opus 5 2026-10-14 10:59:31 -04:00
• be5acc5b64 ci: re-run; the staging gate's postgres never became ready on the runner (run 440) Paul HittandClaude Opus 5.5 2026-10-14 09:52:34 -04:00
• a83e7a57a8 Document the sign-in and account-token settings; rebuild doc pages Paul HittandClaude Opus 5.5 2026-10-14 09:41:06 -04:00
• 38f2af7276 Attachments refuse only listed deleted accounts Paul HittandClaude Opus 5.5 2026-10-14 09:12:46 -04:00
• 2ea4cbe153 Merge feat/attachment-streaming Paul Hitt 2026-10-14 09:07:41 -04:00
• 6ea4f001e0 Stop test fixtures starving the cooperative pool Paul HittandClaude Opus 5.5 2026-10-14 09:07:15 -04:00
• ea1b2f228e Stream attachment uploads and downloads through storage Paul HittandClaude Opus 5.5 2026-10-14 08:39:46 -04:00
• eef3b65003 Count Redis wake-up failures in /metrics Paul HittandClaude Opus 5.5 2026-10-14 08:40:53 -04:00
• f95cd947e5 Merge feat/fed-reports-metrics Paul Hitt 2026-10-14 08:40:35 -04:00
• 7064c5c3f4 Merge feat/scans-and-scale Paul Hitt 2026-10-14 08:40:27 -04:00
• f1c19902b7 Merge feat/signin-and-tokens Paul Hitt 2026-10-14 08:40:12 -04:00
• d5b319b233 Merge feat/inprocess-wake Paul Hitt 2026-10-14 08:40:12 -04:00
• b82c6dfc8e Keep held-poll tests off the shared capacity gauge Paul HittandClaude Opus 5.5 2026-10-14 08:39:42 -04:00
• ec6755b15a Relay review 2026-10-14: bounded presence, cached log head, set-based retention Paul HittandClaude Opus 5.5 2026-10-14 08:31:29 -04:00
• 966c747881 Docs: Postgres for self-hosting, key pinning and rotation, report digest, metrics Paul HittandClaude Opus 5.5 2026-10-14 08:29:28 -04:00
• 9473d304b4 Pin federation peer keys, digest reports hourly, serve /metrics on its own port Paul HittandClaude Opus 5.5 2026-10-14 08:29:28 -04:00
• 5a0331e37a Source page and site layout link to git.extant2000.com Paul HittandClaude Opus 5.5 2026-10-14 08:25:49 -04:00
• 44b3ddc01b Throttle sign-in per address, move bcrypt off the event loop, check account tokens Paul HittandClaude Opus 5.5 2026-10-14 08:24:12 -04:00
• 42be0d9116 Document in-process wake-ups and the Redis pool defaults Paul HittandClaude Opus 5.5 2026-10-14 08:21:36 -04:00
• 2e5f0e3d39 Wake held polls in process and read poll sizes before payloads Paul HittandClaude Opus 5.5 2026-10-14 08:21:36 -04:00
• 774b59bd10 Refuse only deleted accounts, not every subject without a row Paul HittandClaude Opus 5.5 2026-10-14 08:20:33 -04:00
• cf1ce36602 Merge ops/pitr-monthly-drill Paul Hitt 2026-10-14 07:58:01 -04:00
• daa00051c1 Merge fix/delivery-ordering Paul Hitt 2026-10-14 07:58:01 -04:00
• 4df5244911 Merge fix/keys-and-account-delete Paul Hitt 2026-10-14 07:58:00 -04:00
• 1802676a9c Retry Postgres deadlock and serialization failures in retryingTransaction Paul HittandClaude Opus 5.5 2026-10-14 07:57:45 -04:00
• 1748ee999a Document the delivery write path, the device lock and the push worker Paul HittandClaude Opus 5.5 2026-10-14 07:52:57 -04:00
• b54fea38de Serialize envelope writes per device and route all writes through Delivery.write Paul HittandClaude Opus 5.5 2026-10-14 07:52:08 -04:00
• 201437e963 Retire devices on account delete; refuse deleted and unreadable accounts Paul HittandClaude Opus 5.5 2026-10-14 07:49:26 -04:00
• 1d6c0664ca Serialize prekey pops and key log appends on Postgres Paul HittandClaude Opus 5.5 2026-10-14 07:49:20 -04:00
• c06ce814a5 Test that concurrent sends to one device become visible in id order Paul HittandClaude Opus 5.5 2026-10-14 07:43:28 -04:00
• 5150a1b45e Monthly PITR restore drill for the messenger database Paul HittandClaude Opus 5.5 2026-10-14 07:35:39 -04:00
• 8485339b5c Merge pull request 'GlitchTip error reporting (FN_RELEASE) + Gitea Actions cutover' (#249) from ci/gitea-cutover into main extant2000git 2026-10-14 10:30:10 +00:00
• da7df5fed1 fix(ci): pass gate pages to the curl container as arguments Paul HittandClaude Opus 5.5 2026-10-13 15:32:55 -04:00
• e1c341f302 ci: install docker buildx so the image build can use RUN --mount Paul HittandClaude Opus 5.5 2026-10-13 15:12:53 -04:00
• 93d0986a2b CI: move to Gitea Actions; build and gate off the box, deploy over SSH Paul HittandClaude Opus 5.5 2026-10-13 11:29:19 -04:00
• 836d21dfb3 Mark the scrubber test's fake JWT as a sweep fixture Paul HittandClaude Opus 5.5 2026-10-13 11:29:19 -04:00
• 1f8cf1ef82 Skip 503s in error reports, stamp a build-time release, list every outbound connection Paul HittandClaude Opus 5.5 2026-10-13 11:24:38 -04:00
• 98dcc210ad Report relay errors to an operator-run GlitchTip, off unless FN_SENTRY_DSN is set Paul HittandClaude Opus 5.5 2026-10-13 11:04:19 -04:00
• f11e32d0a9 Merge branch 'bridge/inventory' into 'main' Paul Hitt 2026-10-09 21:22:11 +00:00
• ef814ae175 Believe X-Forwarded-For only from FN_TRUSTED_PROXY_ADDRS Paul HittandClaude Opus 5.5 2026-10-09 15:28:15 -04:00
• aa7722195d Test: X-Forwarded-For is believed only from a trusted peer Paul HittandClaude Opus 5.5 2026-10-09 15:23:10 -04:00
• 0cb2d5dd2e Bridge inventory: obfs4_bridges table, flamenet-relay bridges, Scripts/bridges.sh Paul HittandClaude Opus 5.5 2026-10-09 14:59:04 -04:00
• b2709a0b47 Docs: FN_TRUSTED_PROXIES defaults to 1, and a directly exposed relay must set 0 Paul HittandClaude Opus 5.5 2026-10-09 14:58:44 -04:00
• f1516a8726 Test: the configuration doc states FN_TRUSTED_PROXIES's real default Paul HittandClaude Opus 5.5 2026-10-09 14:57:35 -04:00
• 3620ac2ae4 Merge branch 'feat/descriptor-0-32-switches' into 'main' Paul Hitt 2026-10-09 19:30:38 +00:00
• b394ee22d1 Pin flamenet-e2e 50fcc99: the 0.32 spec, vectors and §7 with the PQ keys Paul HittandClaude Opus 5.5 2026-10-09 14:58:13 -04:00
• 30a987d5e1 Contact links open the app: /add, apple-app-site-association, assetlinks.json Paul HittandClaude Opus 5.5 2026-10-09 14:58:13 -04:00
• 8ebf83f62c Descriptor: say the wave 0b routes are served Paul HittandClaude Opus 5.5 2026-10-09 09:45:47 -04:00
• da05d6d87f Merge branch 'privacy/wave0-relay' into 'main' Paul Hitt 2026-10-07 19:46:59 +00:00
• f1d79d4b3b Hold the two pairs 2-A clean-ups behind FN_PAIRS_CLEANUP Paul HittandClaude Opus 5.5 2026-10-07 14:49:01 -04:00
• 025ac20f14 Pin flamenet-e2e e5c9cb8: the star test accepts kept_on_device Paul HittandClaude Opus 5.5 2026-10-07 14:37:48 -04:00
• 5ac0041784 Keep the limiter fallback key as Data so the relay builds on Linux Paul HittandClaude Opus 5.5 2026-10-07 13:02:07 -04:00
• dd0d4e6674 Comparison: add SimpleX, drop the uniqueness claims it ended, fix column widths Paul HittandClaude Opus 5.5 2026-10-07 10:36:55 -04:00
• a55af454fc Say how long the edge access log really lives, and fix README defaults Paul HittandClaude Opus 5.5 2026-10-07 12:19:22 -04:00
• 78b0a576d5 One token per introduction, and a small proof of work by handle Paul HittandClaude Opus 5.5 2026-10-07 12:19:22 -04:00
• b4bf14587b Match SPEC 8.11 and 14.5 where the brief left the wire open Paul HittandClaude Opus 5.5 2026-10-07 11:20:40 -04:00
• 114fadbcbf Document wave 0b: introductions, Unlisted, contact links, anonymous reads Paul HittandClaude Opus 5.5 2026-10-07 11:08:50 -04:00
• 4095ca60ec Wave 0b: introductions, Unlisted, contact links, anonymous reads Paul HittandClaude Opus 5.5 2026-10-07 11:03:50 -04:00
• 378de4f6d7 Pick a provably wrong nonce in the proof-of-work refusal test Paul HittandClaude Opus 5.5 2026-10-07 10:57:26 -04:00
• aca12ca7f3 Keep delivery-key and roster-tag digests per device (DA4a) Paul HittandClaude Opus 5.5 2026-10-07 10:12:14 -04:00
• ea3e33484b Padding stage 1.1: poll budget, count-only ladder metrics, switches Paul HittandClaude Opus 5.5 2026-10-07 10:00:27 -04:00
• ebbb3ed818 Pairs stage 2-A: forget invite pairs, stars and old notifications Paul HittandClaude Opus 5.5 2026-10-07 09:53:49 -04:00
• fa06c9a3e9 Merge branch 'bridge/tls-upstream' into 'main' Paul Hitt 2026-10-07 18:32:53 +00:00
• fe4a042334 Sign-up countries: add Costa Rica and Panama to the site copy Paul HittandClaude Opus 5.5 2026-10-07 13:41:47 -04:00
• 93985d1f71 obfs4 bridge: forward to the TLS front door and pass each client's address Paul HittandClaude Opus 5.5 2026-10-07 13:39:13 -04:00
• d2820f878c Merge branch 'privacy/sweep-2026-10' into 'main' Paul Hitt 2026-10-07 14:56:48 +00:00
• f9f7eb4018 Regenerate the spec and self-hosting pages; pin merged e2e main Paul HittandClaude Opus 5.5 2026-10-07 10:23:24 -04:00
• acdffd6c36 Pin the e2e harness that expects opaque TURN usernames Paul HittandClaude Opus 5.5 2026-10-07 09:35:53 -04:00
• 1438b3f78a Test the delete-on-ack wording on all four pages Paul HittandClaude Opus 5.5 2026-10-07 09:26:05 -04:00
• c49ac41d97 deploy/retention: expire the PITR archive, the attachment copy and coturn logs Paul HittandClaude Opus 5.5 2026-10-07 09:22:37 -04:00
• 38dbc5436d coturn: one log stream with a size cap, no dated files in the container Paul HittandClaude Opus 5.5 2026-10-07 09:17:24 -04:00
• e4378bce51 Delete a collected envelope when the app confirms it, by default Paul HittandClaude Opus 5.5 2026-10-07 09:17:06 -04:00
• 209ac94883 TURN usernames no longer carry the account id Paul HittandClaude Opus 5.5 2026-10-07 09:16:42 -04:00
• 1ff23af40d Pin flamenet-e2e at the 0.32 spec and regenerate its pages Paul HittandClaude Opus 5.5 2026-10-04 20:02:14 -04:00
• e332ce83a1 /hi: lower the host by ASCII rules only, and refuse spaces Paul HittandClaude Opus 5.5 2026-10-04 11:10:43 -04:00
• 3230d4c748 Cite the Today file as §8.12 Paul HittandClaude Opus 5.5 2026-10-04 10:22:55 -04:00