Release v1.1.0

Igloo Server v1.1.0

TL;DR: This release brings official Umbrel app packaging with one-click installs, improved onboarding UX, and hardened proxy/CORS handling for LAN/Tor access. No breaking changes from v1.0.1.

What's new

Umbrel App Support

• Official Umbrel bundle: Docker Compose, manifest, and entrypoint scripts for seamless Umbrel deployment.
• GHCR workflow: Automated umbrel-dev image builds for beta installs via GitHub Container Registry.
• FROSTR-branded assets: Favicon and Umbrel-specific icons/manifest. (GitHub)

Onboarding Improvements

• "Before you start" screen: New guidance page with links to Igloo Desktop/CLI and other FROSTR ecosystem apps.
• SKIP_ADMIN_SECRET_VALIDATION flag: Bypass admin-secret setup on managed installs (e.g., Umbrel); UI auto-skips when the flag is present.
• Reveal admin secret: Configure screen can now display the configured admin secret for signed-in admins via /api/env/admin-secret. (GitHub)

Proxy & CORS Fixes

• Proxy-aware origin handling: WebSocket/CORS now trusts x-forwarded-host headers and @self tokens, fixing 403 errors on LAN/Tor Umbrel access.
• Cache-busting headers: Static JS/CSS served with no-cache, no-store to prevent stale bundles behind Umbrel/browser caches. (GitHub)

Fixes & Hardening

• Hardened data directory permissions for Umbrel volumes during startup.
• Strengthened skip-admin onboarding flows, rate limits, and admin secret handling to prevent accidental leaks or empty secrets.
• OpenAPI docs relocated to docs/openapi/ with updated validation scripts.
• Minor documentation corrections and Bun version bump. (GitHub)

Upgrade notes

• No schema changes; standard update is sufficient.
• Umbrel users: Install directly from the Umbrel app store (when available) or use the umbrel-dev image tag for beta testing.
• Docker: Pull the latest image or rebuild from source.

Install

Docker (Recommended)

docker pull ghcr.io/frostr-org/igloo-server:1.1.0

From Source

curl -L https://github.com/FROSTR-ORG/igloo-server/archive/v1.1.0.tar.gz | tar -xz
cd igloo-server-1.1.0
bun install
bun run build
bun run start

Thanks

This release includes merged work from PR #32 (dev → master) delivering Umbrel packaging, onboarding enhancements, and proxy/CORS fixes.

---

Release v1.0.1

Igloo Server v1.0.1

TL;DR: Minor feature & maintenance release that completes the echo request/response + broadcast flows, strengthens relay validation/normalization, and fixes a few type/test issues. No breaking changes. ([GitHub]1)

What’s new

• Echo flows

  • Respond to incoming echo requests.
  • Broadcast /echo/req via a temporary node (create → publish → cleanup).
  • Trigger self/broadcast on credential or relay updates and during headless startup. ([GitHub]1)

• Relay handling

  • Add validateRelayUrls(), normalizeRelayListForEcho(), and smarter fallback behavior; strip localhost entries; better resolution for broadcast/self-echo. ([GitHub]1)

Fixes & maintenance

• Fire broadcast echo consistently after credential updates. ([GitHub]2)
• Fix minor type regressions in broadcast echo and WS handler. ([GitHub]2)
• Update bun.lock / packages; tidy tests and edge cases. ([GitHub]2)

Upgrade notes

• No schema changes; standard update is sufficient.

• Pull latest image or rebuild from source to pick up dependency bumps.

  • Docker: docker pull ghcr.io/frostr-org/igloo-server:1.0.1 (adjust tag once published)
  • From source: bun install && bun run build && bun run start (on the 1.0.1 tag)
    (Base steps are unchanged from v1.0.0 release instructions.) ([GitHub]3)

Thanks

• Includes the merged work from PR #29 (dev → master) that delivered the echo features and relay improvements. ([GitHub]1)

---

Sources

• v1.0.0 and recent releases overview (for continuity and install notes). ([GitHub]3)
• PR #29: echo request/response + broadcast, relay validation/normalization, headless echo on startup, deps. ([GitHub]1)
• Commit history since v1.0.0: version bump to 1.0.1, broadcast-echo fix on credential updates, type/test fixes. ([GitHub]2)

v1.0.0

Igloo Server v1.0.0

TL;DR: First stable release with security-hardened API/WS, Admin API keys (DB mode), consolidated routes + broad tests, updated OpenAPI/docs, and a leaner Docker image. Headless env endpoints are now auth-gated. ([GitHub]1)

What’s new

• Security hardening

  • WebSocket: echo subprotocol, token-bucket rate caps with reservation/rollback, NaN-safe env; CSP updated to allow wss:.
  • Env/Auth: headless /api/env* requires auth; sanitize rate-bucket envs; preserve exact onboarding password (no trim).
  • Tests added for origin handling, body-limit, rate-buckets, and 401s. ([GitHub]1)

• Admin API keys (DB mode)

  • Key issuance & management; session/auth robustness (real TTL; refresh lastAccess; async cleanup).
  • Includes DB migrations for api_keys and sessions. ([GitHub]1)

• Developer experience

  • Consolidated routes; clearer env/onboarding/auth errors; updated OpenAPI & docs.
  • New API scripts for CORS/GET sweeps/permissions/NIP-44-04/WS/sign. ([GitHub]1)

• Docker

  • Slim production image; .dockerignore; copy only postinstall where needed. ([GitHub]1)

Fixes & reliability

• Nostr-connect (NIP-46) agent restarts on socket close; keep-alive refactor.
• Frontend cleanups (timeouts, callbacks) and OpenAPI updates. ([GitHub]1)

Breaking change

• Headless: /api/env* is now behind auth. If you had unauthenticated scripts hitting env endpoints in headless mode, add auth headers. ([GitHub]1)

Upgrade notes

1. Run migrations (DB mode):

   • src/db/migrations/20251008_0009_create_api_keys.sql
   • src/db/migrations/20251009_0005_add_sessions_table.sql ([GitHub]1)

2. Headless users: update any tooling to auth against /api/env*. ([GitHub]1)

3. Docker: rebuild with the updated Dockerfile to benefit from the slimmer image. ([GitHub]1)

Install

Docker (recommended)

docker pull ghcr.io/frostr-org/igloo-server:1.0.0

From Source

curl -L https://github.com/FROSTR-ORG/igloo-server/archive/refs/tags/v1.0.0.tar.gz | tar -xz
cd igloo-server-1.0.0
bun install
bun run build
bun run start

Background

v0.1.9 introduced DB-backed multi-user mode (admin onboarding, sessions), NIP-46 stack, NIP-44/04 endpoints, major UI/docs & release tooling. v1.0.0 completes the hardening pass with keys, auth/TTL fixes, route consolidation, tests, and Docker slimming. ([GitHub]2)

Release v0.1.9

Changes in v0.1.9

• Database-backed multi-user mode with admin onboarding,
  session auth, and persistent node credentials (headless
  users can opt-in with HEADLESS=true).
• Full NIP‑46 remote signing stack: pairing, per-session
  permissions, live relay monitoring, and request auditing.
• New encryption endpoints for NIP‑44/NIP‑04 plus hardened
  key handling, vault persistence, and improved relay/policy
  management.
• Frontend refresh for onboarding, signer, and NIP‑46
  dashboards, alongside major docs/OpenAPI updates and
  streamlined release & Docker tooling.

See CHANGELOG.md for full details.

Installation

Docker (Recommended):

docker pull ghcr.io/frostr-org/igloo-server:0.1.9

From Source:

curl -L https://github.com/FROSTR-ORG/igloo-server/archive/v0.1.9.tar.gz | tar -xz
cd igloo-server-0.1.9
bun install
bun run build
bun run start

Release v0.1.8

Changes in v0.1.8

See CHANGELOG.md for full details.

Installation

Docker (Recommended):

docker pull ghcr.io/frostr-org/igloo-server:0.1.8

From Source:

curl -L https://github.com/FROSTR-ORG/igloo-server/archive/v0.1.8.tar.gz | tar -xz
cd igloo-server-0.1.8
bun install
bun run build
bun run start

Release v0.1.7

Changes in v0.1.7

See CHANGELOG.md for full details.

Installation

Docker (Recommended):

docker pull ghcr.io/frostr-org/igloo-server:0.1.7

From Source:

curl -L https://github.com/FROSTR-ORG/igloo-server/archive/v0.1.7.tar.gz | tar -xz
cd igloo-server-0.1.7
bun install
bun run build
bun run start

Release v0.1.6

Changes in v0.1.6

See CHANGELOG.md for full details.

Installation

Docker (Recommended):

docker pull ghcr.io/frostr-org/igloo-server:0.1.6

From Source:

curl -L https://github.com/FROSTR-ORG/igloo-server/archive/v0.1.6.tar.gz | tar -xz
cd igloo-server-0.1.6
bun install
bun run build
bun run start

Release v0.1.5

Changes in v0.1.5

See CHANGELOG.md for full details.

Installation

Docker (Recommended):

docker pull ghcr.io/frostr-org/igloo-server:0.1.5

From Source:

curl -L https://github.com/FROSTR-ORG/igloo-server/archive/v0.1.5.tar.gz | tar -xz
cd igloo-server-0.1.5
bun install
bun run build
bun run start

Release v0.1.4

Changes in v0.1.4

See CHANGELOG.md for full details.

Installation

Docker (Recommended):

docker pull ghcr.io/frostr-org/igloo-server:0.1.4

From Source:

curl -L https://github.com/FROSTR-ORG/igloo-server/archive/v0.1.4.tar.gz | tar -xz
cd igloo-server-0.1.4
bun install
bun run build
bun run start