11 Commits

Include renames

Author	SHA1	Message	Date
jaredandClaude Opus 5.5	2d2ebf64a5	minecraft: show players online as the bridge bot's status ... A small service on CT 154 pings the Lotus Minecraft server and sets the result as the Matrix status of @lotus-mc-bridge, re-sent every 20 s because the mod syncs with set_presence=offline and Synapse would otherwise drop it to offline. Uses the mod's own token, so no new account or secret. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01PPmy3tPq869XDW4njjVaKA	2026-11-04 22:37:55 -05:00
jaredandClaude Opus 5.5	f8f0ca4549	discord-bridge: Discord presence into Matrix ghosts ... mautrix-discord doesn't bridge presence. lotus_presence.py watches the Discord server (a second gateway session on the bridge's own bot, Guilds + Presence intents only) and sets presence and a status message on each @discord_* ghost: online / idle / DND / offline -> online / unavailable / msc3026 busy / offline; custom status and the first activity become the status message. Its own appservice registration is non-exclusive on the ghost namespace, so it can update ghosts but not create them. Synapse drops an unrefreshed user to offline after about a minute, so live states are re-sent every 20 s; if the service dies, ghosts go offline rather than stale. The installer generates the credentials on the server and doesn't restart Synapse. Statuses and activities are never logged. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01PPmy3tPq869XDW4njjVaKA	2026-11-04 19:36:38 -05:00
Lotus CIandClaude Opus 5.5	b2877323c3	feat(synapse): nightly state compression on CT 109 ... The Synapse database grew from 2.2 GB (after the July cleanup) to 6.2 GB, almost all of it state_groups_state from large federated rooms with one or two local members. synapse_auto_compressor (matrix-org/rust-synapse-compress-state, built from main) now runs nightly at 04:30, after the 03:00 vzdump backup. It verifies compressed state against the original, writes each state group in its own transaction, skips chunks that would not shrink, and resumes from stored progress. The initial backlog took ~8 minutes with no Synapse errors: state_groups_state 11.0 M -> 4.25 M rows (-61%). Also documents the new "Synapse Database Growing Fast" Grafana alert (> 500 MB in 7 days). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_017PCb59uY3UKqDqt7B6hzd5	2026-11-03 19:08:01 -05:00
Lotus CIandClaude Opus 5.5	46d0e98424	voice-bridge: Discord voice <-> Lotus voice room (patched nether-voicebridge) ... Production setup for the Discord voice bridge on LXC 151: config and appservice-registration templates (secrets rendered on the server), an idempotent install script (one Synapse restart on first install, creates the bot account so it can be invited), and a hardened systemd unit. voice-limit-guard: VOICE_LIMIT_EXEMPT_USERS lets the bridge's own bot listen in a call without taking a slot; relayed Discord speakers still count. Unit tests added (61 pass); verified live on the dev stack. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_017PCb59uY3UKqDqt7B6hzd5	2026-10-29 12:51:56 -04:00
Lotus CIandClaude Opus 5.5	3e6f210f46	Add mautrix-discord bridge config and installer ... Bot-login Discord bridge on LXC 151: config template (DB password is filled in on the server), systemd unit, and a one-time install script run from the Proxmox node that sets up the PostgreSQL role/database, installs the checksum-verified v0.7.7 binary, generates the appservice registration, adds it to Synapse and restarts Synapse once. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_017PCb59uY3UKqDqt7B6hzd5	2026-10-28 21:08:45 -04:00
jaredandClaude Opus 5	70db0648f1	fix: read LiveKit credentials from env file instead of hardcoding ... LIVEKIT_KEY/LIVEKIT_SECRET were committed in the unit since 68a6acf (2026-06-12). That secret signs re-issued SFU join tokens, so it controlled who could publish. Rotated and moved to /etc/matrix-deploy.env (0600); livekit-server, lk-jwt-service and voice-limit-guard all updated and verified against the new value. Environment= overrides EnvironmentFile= regardless of order, so the hardcoded lines had to be removed rather than shadowed. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>	2026-08-17 01:25:05 -04:00
jaredandClaude Fable 5	68a6acfa24	feat: hard cross-client voice channel limits via voice-limit-guard ... Add a fail-open Python sidecar (livekit/voice-limit-guard.py) that fronts lk-jwt-service to enforce per-room voice participant caps for ALL Matrix clients, not just Lotus Chat: - lk-jwt-service moved to :8071 (systemd drop-in), guard owns :8070 so NPM's existing /sfu/get + /get_token proxy targets are unchanged - guard reads io.lotus.voice_limit.max_users (Synapse admin API, cached), forwards to lk-jwt-service, and on an issued token decodes the LiveKit alias + requester, counts distinct Matrix users via LiveKit ListParticipants, and returns 403 when the room is full (rejoins/extra devices allowed) - any error fails open (returns upstream response) so calls never break - systemd/voice-limit-guard.service; README documents ports, setup, revert Also update landing page: voice limit is now server-enforced for all clients. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-06-12 23:45:41 -04:00
jaredandClaude Sonnet 4.6	7f7ddd3e3c	Switch Lotus Cinny from nightly dev to stable-release fork workflow ... - Replace nightly build script with daily upstream release checker (cinny/upstream-check.sh) — posts to Matrix as LotusBot when a new cinnyapp/cinny stable release is published - Add cinny/lotus-build.sh — merges latest release tag into the lotus branch, builds, deploys; triggered via !cinny-update webhook - Fork lives at code.lotusguild.org/LotusGuild/cinny (lotus branch, v4.11.1) - deploy/hooks-lxc106.json — adds cinny-build webhook endpoint (port 9000) - Update landing page: "dev branch / nightly" → "Lotus fork / stable releases" - Set LotusBot avatar on @hookshot_tinker-tickets Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-13 16:57:35 -04:00
jaredandClaude Sonnet 4.6	735c1eb30e	ci: add lint workflow, shellcheck fixes, and CI failure hookshot alert ... - .gitea/workflows/lint.yml: new workflow running shellcheck on .sh files and eslint on hookshot/ JS transform scripts - hookshot/.eslintrc.json: declare data/result as hookshot globals - hookshot/ci-alert.js: new Matrix hookshot transform for CI failure alerts - hookshot/deploy.sh: fix SC2155 (split local/assign), SC2034 (remove unused var) - systemd/livekit-clear-port.sh: fix SC2148 (invalid shebang escape) - cinny/dev-update.sh: fix SC2115 (use ${WEB_ROOT:?} to guard rm -rf) - deploy/lxc151-hookshot.sh: add shellcheck source=/dev/null for sourced file - .gitignore: ignore node_modules/ - package.json + package-lock.json: eslint@8 dev dependency Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-04-14 16:25:39 -04:00
jaredandClaude Sonnet 4.6	5e936b2ca1	Add auto-deployment infrastructure for all 4 LXCs ... - Per-LXC deploy scripts (lxc151-hookshot, lxc106-cinny, lxc139-landing, lxc110-draupnir) - Per-LXC webhook hook configs with unique HMAC-SHA256 secrets - Livekit graceful restart script + systemd timer (waits for zero active calls) - Fix hookshot/deploy.sh capitalization bug (Uptime-Kuma, Tinker-Tickets, etc.) Each LXC independently clones repo and runs its own deploy.sh via adnanh/webhook on port 9000. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-03-18 11:41:32 -04:00
jaredandClaude Sonnet 4.6	0e275d725e	refactor: replace old bot code with Matrix infra configs and scripts ... - Remove obsolete Python bot (Wordle, commands, callbacks, welcome) - Add hookshot/ — all 11 webhook transformation functions + deploy.sh - Add cinny/ — config.json and dev-update.sh (nightly dev branch build) - Add landing/ — matrix.lotusguild.org landing page HTML - Add systemd/ — livekit-server, draupnir, cinny cron unit files - Add draupnir/ — production config (access token redacted) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-03-18 10:36:51 -04:00