LotusGuild/matrix
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
284 Commits 23 Branches 0 Tags
2d2ebf64a52bc47b7f9d7e9be7815749b02d32d0
Commit Graph
3 Commits
Author SHA1 Message Date
Lotus CIandClaude Opus 5.5 46d0e98424 voice-bridge: Discord voice <-> Lotus voice room (patched nether-voicebridge)
Lint / Shell (shellcheck) (push) Successful in 2m0s
Details
Lint / JS (eslint) (push) Successful in 2m1s
Details
Lint / No secrets in webhook configs (push) Successful in 18s
Details
Lint / Landing page is rendered (matrix (push) Successful in 18s
Details
Lint / Python (ruff) (push) Successful in 25s
Details
Lint / Secret scan (gitleaks) (push) Successful in 14s
Details
Lint / Shell (shellcheck) (pull_request) Successful in 9s
Details
Lint / JS (eslint) (pull_request) Successful in 9s
Details
Lint / No secrets in webhook configs (pull_request) Successful in 7s
Details
Lint / Python deps (pip-audit) (push) Successful in 1m7s
Details
Lint / Landing page is rendered (matrix (pull_request) Successful in 4s
Details
Lint / Python (ruff) (pull_request) Successful in 6s
Details
Lint / Secret scan (gitleaks) (pull_request) Successful in 6s
Details
Lint / Python deps (pip-audit) (pull_request) Successful in 30s
Details 
Production setup for the Discord voice bridge on LXC 151: config and
appservice-registration templates (secrets rendered on the server), an
idempotent install script (one Synapse restart on first install, creates
the bot account so it can be invited), and a hardened systemd unit.

voice-limit-guard: VOICE_LIMIT_EXEMPT_USERS lets the bridge's own bot
listen in a call without taking a slot; relayed Discord speakers still
count. Unit tests added (61 pass); verified live on the dev stack.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_017PCb59uY3UKqDqt7B6hzd5
 2026-10-29 12:51:56 -04:00
jaredandClaude Opus 5 70db0648f1 fix: read LiveKit credentials from env file instead of hardcoding
Lint / Shell (shellcheck) (push) Successful in 25s
Details
Lint / JS (eslint) (push) Successful in 14s
Details
Lint / Python (ruff) (push) Successful in 9s
Details
Lint / Python deps (pip-audit) (push) Successful in 1m39s
Details
Lint / Secret scan (gitleaks) (push) Successful in 18s
Details 
LIVEKIT_KEY/LIVEKIT_SECRET were committed in the unit since 68a6acf
(2026-06-12). That secret signs re-issued SFU join tokens, so it
controlled who could publish. Rotated and moved to /etc/matrix-deploy.env
(0600); livekit-server, lk-jwt-service and voice-limit-guard all updated
and verified against the new value.

Environment= overrides EnvironmentFile= regardless of order, so the
hardcoded lines had to be removed rather than shadowed.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
 2026-08-17 01:25:05 -04:00
jaredandClaude Fable 5 68a6acfa24 feat: hard cross-client voice channel limits via voice-limit-guard
Lint / Shell (shellcheck) (push) Successful in 7s
Details
Lint / JS (eslint) (push) Successful in 5s
Details
Lint / Python (ruff) (push) Successful in 4s
Details
Lint / Python deps (pip-audit) (push) Successful in 1m1s
Details
Lint / Secret scan (gitleaks) (push) Successful in 4s
Details 
Add a fail-open Python sidecar (livekit/voice-limit-guard.py) that fronts
lk-jwt-service to enforce per-room voice participant caps for ALL Matrix
clients, not just Lotus Chat:
- lk-jwt-service moved to :8071 (systemd drop-in), guard owns :8070 so NPM's
  existing /sfu/get + /get_token proxy targets are unchanged
- guard reads io.lotus.voice_limit.max_users (Synapse admin API, cached),
  forwards to lk-jwt-service, and on an issued token decodes the LiveKit alias
  + requester, counts distinct Matrix users via LiveKit ListParticipants, and
  returns 403 when the room is full (rejoins/extra devices allowed)
- any error fails open (returns upstream response) so calls never break
- systemd/voice-limit-guard.service; README documents ports, setup, revert

Also update landing page: voice limit is now server-enforced for all clients.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
 2026-06-12 23:45:41 -04:00