4 Commits

Include renames

Author	SHA1	Message	Date
iamdoubz	692dd59552	contacts: Contrack as the robust contacts (C3), picked in Settings or the setup wizard ... Spec 11 §4: contacts.provider and contacts.contrack (local address only, company token write-only), each person's own token (users.contrack_token_enc, migration 0010) in My settings, books read from Contrack with a 5-minute cache, Add to contacts and accepted shares created in Contrack, the company account on desk phones. Setup wizard step 8 Contacts. deploy/contrack (2.0.2, pinned), Caddy/nginx blocks, decision 0003, admin guide Contacts. Tested against a fake and a real Contrack 2.0.2 (contrack-live.test.ts).	2026-10-23 15:23:49 -05:00
iamdoubz	54e1e201a1	update: the api backs up before migrating; scripts/update.sh for compose installs ... Docker only, never bare metal (owner, 2026-10-21). A new version with pending migrations backs up first (database, voicemail, sounds, MOH) and stops if it can't (SKIP_BACKUP_BEFORE_MIGRATE to override). update.sh: checks, changelog, backup (node dist/backup-cli.js), log compaction, build while the old version runs, restart, self-check, and rollback with restore. Container logs capped in compose. Admin guide: Updating, for compose and Portainer.	2026-10-21 11:15:40 -05:00
iamdoubz	803859a1d2	sip: TLS transport with a checked certificate, TLS + SRTP trunks ... The certificate lives in data/tls (fullchain.pem + privkey.pem), mounted read-only into asterisk and the api. Asterisk quietly drops transport-tls when the files are missing, so the api won't turn TLS on unless they load and match, shows the certificate on Settings -> Security, and warns on the dashboard when it expires within 14 days. scripts/tls-cert.sh copies it from the bundled Caddy (or given paths) and reloads res_pjsip: Asterisk 24 re-reads a changed certificate on reload, calls stay up. transport-tls checks the provider's certificate (verify_server). Asterisk 24 checks a qualify's certificate against the IP instead of the name, which fails on voip.ms, so TLS trunks don't qualify; REGISTER and INVITE verify the name fine. Task: M11-T2	2026-10-19 16:33:11 -05:00
iamdoubz	d0de0c9039	deploy: docker compose stack, api image, install script, proxy configs ... Postgres and AMI secrets are hex (the password goes into DATABASE_URL). Task: M0-T6	2026-10-17 14:32:57 -05:00