9 Commits

Include renames

Author	SHA1	Message	Date
mrleo1nidandClaude Opus 5.5	66f5749fc1	fix(deploy): take the Gitea address for Android updates from git remote ... The server kept the git.example.lan placeholder from .env.example, so the /android page and in-app updates had no release. install.sh and update.sh now fill GITEA_URL and GITEA_REPO from the clone's origin (https, ssh and scp forms, credentials stripped) when they are empty or still the placeholder, and the API treats the placeholder as not configured. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-21 00:23:28 +03:00
mrleo1nidandClaude Opus 5.5	8b76aa3964	feat: album covers with palettes and signed links (M2) ... - covers are taken from the embedded picture of the first track or a cover/folder/front image in the album folder, converted by ffmpeg to WebP 64/300/1200 and named by content hash, so albums sharing a cover share the files; a full scan looks again for albums without one - a 3-colour palette (dominant, second, most saturated accent) from a deterministic k-means feeds placeholders, page tints and the wave - /covers/{id} is public but HMAC-signed and immutable; nginx serves the file via X-Accel-Redirect, X_ACCEL=false serves it from api - the web client picks the size by display size and pixel density - install.sh and update.sh generate STREAM_SIGNING_KEY Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-20 07:06:15 +03:00
mrleo1nidandClaude Opus 5.5	ed4a492dba	feat(api): sign-in, refresh rotation and bootstrap admin (M1) ... - users, refresh_tokens and audit_log schema (migration 00002) - argon2id passwords with rehash on login, password policy, lockout with exponential back-off and a per-IP rate limit in Redis - Ed25519 JWT access tokens with kid-based key rotation; rotating refresh tokens with reuse detection (cookie for web, body for Android) - bootstrap admin on first start; must_change_credentials and must_change_password gate every other endpoint - /auth/login, /auth/refresh, /auth/logout(-all), /me, /me/password, /me/bootstrap-credentials, /me/sessions; server-info reports bootstrap_required - role policy from docs/auth-and-roles.md with table tests - problem+json errors with field errors; ru/en translations of the codes - install.sh and update.sh generate JWT_PRIVATE_KEY Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-20 06:12:25 +03:00
mrleo1nidandClaude Opus 5.5	0acdc3fbb3	fix(deploy): make install.sh and update.sh executable ... Scripts were committed without the executable bit, so ./install.sh failed with "command not found" on a fresh clone. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-20 05:42:11 +03:00
mrleo1nidandClaude Opus 5.5	38edcd3e0e	docs(install): music on a local disk at /mnt/music, repo in /opt/pipu-music ... Add an install step for mounting the music disk via fstab and wire it into the stack: LIBRARY_HOST in .env points at the host folder, compose mounts it as /library-host (read-only for api, nginx and analyzer; writable only for storage-agent), nginx serves it through X-Accel, and install.sh validates the path and records it in .env. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-20 01:51:26 +03:00
mrleo1nidandClaude Opus 5.5	4fa1add80d	fix: address project review findings ... Security and robustness: - storage-agent rejects an empty INTERNAL_TOKEN (config notEmpty + middleware) - api takes the client IP only from X-Real-IP (chi RealIP trusted True-Client-IP) - /readyz reports ok/fail and logs the cause; checks run in parallel with a timeout - storage-agent shuts down gracefully; shared httpx.NewServer/Serve with IdleTimeout - goose migrations take a Postgres advisory lock - recommender readyz: per-check timeout, redis socket timeouts Clients: - Android release allows cleartext HTTP for LAN servers (expo-build-properties) - checkServer times out after 10s; connect button is disabled while checking Deploy and CI: - install.sh hands cache/uploads/updates/models to the non-root service users - update.sh refuses downgrades unless PIPU_ALLOW_DOWNGRADE=1 - recommender/analyzer get only the env they need; required secrets fail fast - nginx security headers and CSP; strip True-Client-IP - dev compose binds ports to 127.0.0.1; postgres/redis images pinned - version.mjs fails on a malformed explicit tag instead of releasing 0.0.0-dev - contract check catches untracked generated files - final releases fail without a release keystore; changelog skips rc tags Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-20 00:46:46 +03:00
mrleo1nidandClaude Opus 5.5	01319c58d7	build(deploy): build images on the server instead of publishing to a registry ... - deploy/compose.yaml: every app service has `build:` (repo root context), local tags pipu-music-<service>:<version> - deploy/update.sh: git fetch → checkout tag (latest release by default, or vX.Y.Z / main) → docker compose build --pull → up -d → prune → /readyz; re-executes from a temp copy because checkout may replace the script - install.sh / .env.example: no REGISTRY, PIPU_VERSION set by update.sh, .env owned by the invoking user - release.yml: drop image publishing; release ships APK + sha256 only - ci.yml: new `docker` job builds all images without push - docs: install guide uses git clone, deployment/ci-cd updated, ADR-013 Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-20 00:16:05 +03:00
mrleo1nidandClaude Opus 5.5	1633b28c1a	docs(deploy): add install guide for a domain with HTTPS ... - docs/install-guide.md: step-by-step server setup (DNS, Docker, install.sh, .env, launch, checks), web and Android client setup, own reverse proxy variant, updates, backups and troubleshooting - deploy/compose.tls.yaml + Caddyfile: optional Caddy with automatic Let's Encrypt in front of nginx (enabled via COMPOSE_FILE in .env) - nginx: honour X-Forwarded-Proto/For from private networks - .env.example: DOMAIN, ACME_EMAIL, COMPOSE_FILE, bootstrap admin vars - install.sh: create caddy data dirs; release.yml: ship TLS files as assets - deployment.md, docs index and README link to the guide Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-20 00:03:26 +03:00
mrleo1nidandClaude Opus 5.5	ebf296542c	feat: M0 monorepo skeleton with services, clients, deploy and CI ... - api/openapi.yaml: contract with /healthz, /readyz, /api/v1/server-info - services/api (Go): api with oapi-codegen strict server, goose migrations, readiness checks for Postgres/Redis; storage-agent stub with internal token - services/recommender (Python, uv): FastAPI health/readiness/internal status, `pipu-rec serve` and `pipu-rec analyze` entrypoints - packages: generated api-client, core (server URL + server check), i18n (ru/en + dictionary check), design-tokens (CSS vars + TS from tokens.json) - apps/web: Vite + React shell showing server status, language switch - apps/mobile: Expo (SDK 53) Android app with server connect screen - deploy: Dockerfiles, compose (prod + dev), nginx template, install/update scripts - .gitea/workflows: ci.yml and tag-based release.yml (images, signed APK, release) - scripts/version.mjs: version and Android versionCode from git tag - tests/fixtures/music/generate.sh: synthetic test library via ffmpeg - docs: versionCode formula, OpenAPI 3.0.3, dev instructions in README Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-19 23:55:11 +03:00