Dorian b36b867d01 fix: add required capabilities to UI container specs for nginx startup ...

Nginx needs CHOWN, SETUID, SETGID to chown cache directories and drop
privileges on startup. LND UI additionally needs NET_BIND_SERVICE to
bind port 80 inside the container. Without these, cap-drop ALL causes
nginx to crash with "Operation not permitted" on chown or bind.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-03-30 23:03:27 +01:00

..

archy-dev

feat: add archy-dev CLI scaffold for app developers

2026-03-14 05:47:29 +00:00

lib

bug fixing and deploy and build diagnostics

2026-03-22 03:30:21 +00:00

tor

…

archipelago-tailscale.service

…

audit-secrets.sh

refactor: update dependencies and remove unused code

2026-03-12 00:19:30 +00:00

configure-tailscale-nginx.sh

…

container-doctor.sh

fix: run rootless podman commands as archipelago user in doctor

2026-03-30 22:49:36 +01:00

container-specs.sh

fix: add required capabilities to UI container specs for nginx startup

2026-03-30 23:03:27 +01:00

create-release-manifest.sh

refactor: update dependencies and remove unused code

2026-03-12 00:19:30 +00:00

create-release.sh

feat: add release automation script (RELEASE-01)

2026-03-11 17:49:23 +00:00

debug-frontend.sh

…

deploy-bitcoin-knots.sh

feat: migrate all container images to Archipelago app registry

2026-03-26 14:06:21 +00:00

deploy-config-defaults.sh

fix: deploy error visibility, trap cleanup, variable quoting, frontend resilience

2026-03-21 02:06:08 +00:00

deploy-config.example

…

deploy-tailscale.sh

fix: correct health check endpoints for fedimint, nextcloud, filebrowser

2026-03-23 00:47:49 +00:00

deploy-to-target.sh

feat: migrate all container images to Archipelago app registry

2026-03-26 14:06:21 +00:00

dev-container-test.sh

feat: TASK-49 container reliability — tests, orchestration, MASTER_PLAN

2026-03-29 17:15:56 +01:00

dev-start.sh

feat: onboarding polish, splash screen, controller nav, dev script

2026-03-28 13:41:52 +00:00

first-boot-containers.sh

fix: container install flow, filebrowser auth, AppCard enrichment

2026-03-27 13:32:54 +00:00

fix-indeedhub-containers.sh

feat: migrate all container images to Archipelago app registry

2026-03-26 14:06:21 +00:00

image-versions.sh

fix: align image-versions.sh with registry, PATH for reboot

2026-03-29 14:25:13 +01:00

install-tui-demo.sh

feat: TUI updates — ASCII block logo, install demo script

2026-03-29 16:08:41 +01:00

nginx-app-iframe-patch.conf

…

nginx-archipelago-patch.conf

…

nginx-https-app-proxies.conf

feat: add missing nginx app proxies to HTTP block for full app wiring

2026-03-05 07:53:04 +00:00

nginx-penpot-iframe-patch.conf

…

nginx-pwa-snippet.conf

…

optimize-debian.sh

feat: rootless podman, session hardening, boot stability, sidebar fix

2026-03-18 13:53:27 +00:00

reconcile-containers.sh

fix: move mobile nav outside main for fixed positioning, add container scripts

2026-03-25 18:13:22 +00:00

run-e2e-tests.sh

fix: zero-amount invoices, identity.verify DID extraction, tor service permissions

2026-03-09 09:53:36 +00:00

run-post-install-tests.sh

fix: filebrowser port bind, CSRF in tests, console-setup, auto-test scope

2026-03-27 17:17:18 +00:00

run-tests.sh

test: add CI-compatible test runner script

2026-03-10 23:56:10 +00:00

self-update.sh

feat: architecture review fixes, self-update system, CI pipeline, supply chain hardening

2026-03-25 15:52:26 +00:00

setup-aiui-server.sh

fix: WebSocket race conditions, Vue error handler, remove sudo podman, add container health checks

2026-03-21 01:11:05 +00:00

setup-https-dev.sh

security+feat: v1.3.0 — pentest remediation, container reliability, UI overhaul

2026-03-19 12:44:31 +00:00

setup-target-dev.sh

…

smoke-test.sh

feat: add E2E smoke test script and CI/CD pipeline plan

2026-03-21 03:08:00 +00:00

tor-helper.sh

fix: systemd resource limits, Tor rotation transition, unwrap elimination, RPC timeouts

2026-03-21 01:46:40 +00:00

trust-archipelago-cert.sh

fix: deploy locking, safe eval replacement, first-boot error handling, script hardening

2026-03-21 01:39:22 +00:00

uptime-monitor.sh

fix: WebSocket race conditions, Vue error handler, remove sudo podman, add container health checks

2026-03-21 01:11:05 +00:00

validate-app-manifest.sh

feat: migrate all container images to Archipelago app registry

2026-03-26 14:06:21 +00:00