silentmode/argus
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

drop(gateway): subdomain suffix *.bch.navigate.st retired for *.bns

Browse source 
"bch.navigate.st" lied on every non-.bch name — sirius.x served as
sirius-x.bch.navigate.st reads like a BCH-TLD name. "bns" (Bitcoin
Cash Name Service, the actual protocol name) is accurate for every
TLD and the same length.

Hard swap, no deprecation window:
  BNS_SUB_BASE defaults to "bns.navigate.st"
  BNS_SUB_BASE_LEGACY defaults to "" (empty) — .bch is NOT accepted
  on inbound anymore; the matcher 404s *.bch.navigate.st hostnames.

Operators who want a temporary grace period can still set
BNS_SUB_BASE_LEGACY=bch.navigate.st in systemd env until bookmarks
have had time to migrate. nginx vhost bch-subdomain must be disabled
in parallel for the drop to be real at the TLS layer.
This commit is contained in:
Local Dev 2026-10-07 19:18:11 +02:00
parent 8979ec11cc
commit 384d3dd3c7
1 changed files with 12 additions and 12 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

24
src/gateway/public-gateway.mjs
View file

@ -257,20 +257,20 @@ async function activeListings() {
return keep;
}
const S3_ENDPOINT = process.env.BNS_S3 || "http://127.0.0.1:8500";
// Primary subdomain suffix — new URLs (banner "Isolated view" link, OG
// hints, etc.) are built against this. Flip to "bns.navigate.st" once the
// wildcard cert is issued; "bch.navigate.st" remains the current default
// so no cutover is required.
const SUB_BASE = (process.env.BNS_SUB_BASE || "bch.navigate.st").toLowerCase();
// Every suffix the inbound-matching accepts. "bch.navigate.st" was the
// original and stays live for the ~6-month deprecation window; "bns.
// navigate.st" is the renamed form (BNS = Bitcoin Cash Name Service, the
// actual protocol name, instead of the misleading .bch segment on
// non-.bch names like sirius-x.bch.navigate.st). Both decode through the
// same subdomainLabelToName.
// Subdomain suffix for the relay. "bns.navigate.st" because "bns"
// (Bitcoin Cash Name Service — the protocol) is accurate on every BCDN
// TLD; the old "bch.navigate.st" lied about non-.bch names (sirius.x
// was served as sirius-x.bch.navigate.st, reading like a .bch name).
// The .bch form has been dropped — URL bookmarks or links that hit
// *.bch.navigate.st 404 at the nginx layer. Fallback env var keeps
// one knob available if an operator deploys with the old suffix.
const SUB_BASE = (process.env.BNS_SUB_BASE || "bns.navigate.st").toLowerCase();
// Operator-side override: comma-separated extra suffixes to accept on
// inbound. Empty by default (dropping .bch means dropping it). Set
// BNS_SUB_BASE_LEGACY=bch.navigate.st for a temporary grace period.
const SUB_BASE_ALL = Array.from(new Set([
SUB_BASE,
...(process.env.BNS_SUB_BASE_LEGACY || "bch.navigate.st,bns.navigate.st")
...(process.env.BNS_SUB_BASE_LEGACY || "")
.toLowerCase().split(",").map((s) => s.trim()).filter(Boolean),
]));