T-HUB

hacklab/T-HUB

Fork 0

Commit graph

Author	SHA1	Message	Date
glass beadian	fe5f2403d6	feat: in-app Chat (Matrix JWT SSO) + Drive (embedded oCIS) - api: matrix-sso module (tuwunel jwt -> login/get_token), POST /matrix/session, GET /matrix/identity, drive controller - web: /chat full-height Element view, /files Library+Drive tabs, embedded-app frame component - edge: /hub-sso.html handshake route (origin-pinned CSP), X-Frame-Options strip on files - oCIS: csp.yaml frame-ancestors app.occupymedia.cc - server config still required: tuwunel [global.jwt], MATRIX_SSO_JWT_SECRET, oCIS restart	2026-10-13 14:57:07 +00:00
glass beadian	6cdffa60b2	Track the files scaffold; sync deployed oCIS compose requirements infra/occupymedia/files/ was gitignored in phase one ('nothing deployed'); the oCIS deployment is now live, and the storage doc + DEPLOY.md link to its runbook. Track the secret-free scaffold (compose.yml, csp.yaml, README, tuwunel example, .env.example); keep only .env + secrets/ ignored. compose.yml carries the deployment-proven fixes: ocis runs as user 1000 with OCIS_CONFIG_DIR=/etc/ocis and HOME=/var/lib/ocis (source-built images do not inherit the official image's conventions), and 9200/9980 publish on the LAN for the CT150 tunnel connector.	2026-10-11 07:51:59 +00:00

Author

SHA1

Message

Date

glass beadian

fe5f2403d6

feat: in-app Chat (Matrix JWT SSO) + Drive (embedded oCIS)

- api: matrix-sso module (tuwunel jwt -> login/get_token), POST /matrix/session, GET /matrix/identity, drive controller
- web: /chat full-height Element view, /files Library+Drive tabs, embedded-app frame component
- edge: /hub-sso.html handshake route (origin-pinned CSP), X-Frame-Options strip on files
- oCIS: csp.yaml frame-ancestors app.occupymedia.cc
- server config still required: tuwunel [global.jwt], MATRIX_SSO_JWT_SECRET, oCIS restart

2026-10-13 14:57:07 +00:00

glass beadian

6cdffa60b2

Track the files scaffold; sync deployed oCIS compose requirements

infra/occupymedia/files/ was gitignored in phase one ('nothing deployed');
the oCIS deployment is now live, and the storage doc + DEPLOY.md link to its
runbook. Track the secret-free scaffold (compose.yml, csp.yaml, README,
tuwunel example, .env.example); keep only .env + secrets/ ignored.

compose.yml carries the deployment-proven fixes: ocis runs as user 1000 with
OCIS_CONFIG_DIR=/etc/ocis and HOME=/var/lib/ocis (source-built images do not
inherit the official image's conventions), and 9200/9980 publish on the LAN
for the CT150 tunnel connector.

2026-10-11 07:51:59 +00:00

2 commits