Commit Graph
8 Commits
Author SHA1 Message Date
ancsemi ed286d13ec Homepage: a favicon at a real address, so search results can show it 2026-10-13 17:03:30 -04:00
ancsemi fb0d6fb18d Replace em dashes in the docs and web pages 2026-10-10 16:08:55 -04:00
ancsemi 563e32d20c Website: use haven-app.com for canonical, preview and support links 2026-09-28 20:10:18 -04:00
ancsemi 3830888d4e Point support contact email to ancsemi@haven-app.com 2026-09-28 18:06:12 -04:00
Amnibro 4a4435afe0 Every install path uses Haven's own certificate generator (#5586)
4.5.0 taught the server to make its certificate itself, but Start Haven.bat, Install Haven.ps1 and the web installer still went looking for openssl.exe first and reported a skipped certificate as done. They now call the same generator through scripts/gen-cert.js, the certificate carries the CA and server-auth flags phones expect when you import it, and the guide and support page stop telling people to install OpenSSL. Reported by MutantRabbit767.
2026-09-08 17:23:38 -04:00
ancsemi 80439e0e44 Rewrite the README and refresh the site with current facts
The README had grown into a second copy of GUIDE.md, and the duplicated half
had gone stale while the guide stayed correct. It is now a front page: what
Haven is, how to start it, what you get, and a link to the guide for the rest.
Everything cut has been moved into GUIDE.md rather than dropped, including the
Tailscale walkthrough, slash commands, keyboard shortcuts, admin and moderation,
backups, GIF setup, translations, the full configuration table, and running
more than one server.

Corrections along the way:

- The Android app is Haven, not Amni-Haven. It was renamed to stop the confusion.
- Haven Desktop is no longer labelled beta, and the site's download card said
  1.4.15 while the buttons above it already linked 1.4.28.
- The licence badge claimed MIT-NC. Haven is AGPL-3.0, which the comparison
  table and the licence section both already said.
- The port forwarding section claimed Haven has no rate limiting. It has had
  it for a long time, 20 attempts per 15 minutes per address, so the warning
  was arguing people out of a protection they already have.
- The GIPHY signup walkthrough led nowhere, since GIPHY stopped issuing keys
  to new servers. Tenor is the default and the steps now say so.
- File uploads are 25 MB by default and admin-configurable, not a flat 25 MB
  and not the 1.5 GB the site claimed.
- No macOS build of the desktop app exists, so the FAQ no longer offers one.

The pages also missed a lot that has shipped: Ferry, single sign-on, the
in-app updater, backups, threads, bots and webhooks, push notifications,
stickers, personas, polls, guests, invite links, plugins, automod, the audit
log, and the fact that Haven Desktop can host a server by itself.

Discord import and the Ferry bridge are now presented together, since the
people who want one usually want the other.
2026-08-27 21:35:17 -04:00
ancsemi 25e2fe06c7 fix: replace haven-app.com with ancsemi.github.io/Haven, remove bad CNAME, fix desktop promo links
- Replace all haven-app.com references with https://ancsemi.github.io/Haven/
- Delete website/CNAME (domain not owned)
- Fix desktop promo popup and banner links to point to website download section
- Sync docs/ from website/
- Include package-lock.json version bump to 2.3.0
2026-02-24 19:20:25 -05:00
ancsemi a3f75d3720 v2.2.5 Remove desktop app, security fixes, bug fixes
- Remove desktop/ directory and all desktop-grafted code from server
- Fix missing express-rate-limit import (server crash on startup)
- Validate webhook avatar_url protocol (block data: URI tracking)
- FORCE_HTTP support for reverse proxies (#48)
- Auto-assign default roles (#14)
- SSRF bypass prevention in link previews
- JWT admin claim verification from DB (13 endpoints)
- Path traversal fix in avatar uploads
- mark-read membership check
- transfer-admin race condition mutex
- Server-side sanitizeText() defense-in-depth
- broadcastChannelLists debounce (DoS fix)
- reorder-channels capped at 500
- Role color XSS prevention (server + client)
- Screen share quality controls, black screen fixes
- SSL setup script, cross-platform gameplan doc
- Website & docs updated to v2.2.5
2026-02-23 21:52:38 -05:00