3 Commits

Include renames

Author	SHA1	Message	Date
iamdoubz	54e1e201a1	update: the api backs up before migrating; scripts/update.sh for compose installs ... Docker only, never bare metal (owner, 2026-10-21). A new version with pending migrations backs up first (database, voicemail, sounds, MOH) and stops if it can't (SKIP_BACKUP_BEFORE_MIGRATE to override). update.sh: checks, changelog, backup (node dist/backup-cli.js), log compaction, build while the old version runs, restart, self-check, and rollback with restore. Container logs capped in compose. Admin guide: Updating, for compose and Portainer.	2026-10-21 11:15:40 -05:00
iamdoubz	803859a1d2	sip: TLS transport with a checked certificate, TLS + SRTP trunks ... The certificate lives in data/tls (fullchain.pem + privkey.pem), mounted read-only into asterisk and the api. Asterisk quietly drops transport-tls when the files are missing, so the api won't turn TLS on unless they load and match, shows the certificate on Settings -> Security, and warns on the dashboard when it expires within 14 days. scripts/tls-cert.sh copies it from the bundled Caddy (or given paths) and reloads res_pjsip: Asterisk 24 re-reads a changed certificate on reload, calls stay up. transport-tls checks the provider's certificate (verify_server). Asterisk 24 checks a qualify's certificate against the IP instead of the name, which fails on voip.ms, so TLS trunks don't qualify; REGISTER and INVITE verify the name fine. Task: M11-T2	2026-10-19 16:33:11 -05:00
iamdoubz	d0de0c9039	deploy: docker compose stack, api image, install script, proxy configs ... Postgres and AMI secrets are hex (the password goes into DATABASE_URL). Task: M0-T6	2026-10-17 14:32:57 -05:00