junhost 0.1.0 → 0.1.2

package/README.md

@@ -31,7 +31,49 @@ jun help
 
 ## Where things live
 
-All state is in `~/.jun` (override with `JUN_HOME`): projects/workspaces, run history (JSONL), schedules, config. The daemon binds `127.0.0.1` only — for a remote VPS, tunnel: `ssh -L 8787:127.0.0.1:8787 user@host`.
+All state is in `~/.jun` (override with `JUN_HOME`): projects/workspaces, run history (JSONL), schedules, config. The daemon binds `127.0.0.1` by default (override `JUN_HOST`/`JUN_PORT`) — for quick remote access, tunnel: `ssh -L 8787:127.0.0.1:8787 user@host`.
+
+## Run on a VPS (Debian/Ubuntu)
+
+```bash
+# Bun + Codex CLI
+curl -fsSL https://bun.sh/install | bash && export PATH="$HOME/.bun/bin:$PATH"
+npm install -g @openai/codex
+
+# Chromium system libs — required, or the stealth browser engine can't launch
+# and sites behind edge WAFs will block the agent. (libasound2 on Ubuntu <24.04.)
+apt-get update && apt-get install -y \
+  libnss3 libatk1.0-0 libatk-bridge2.0-0 libcups2 libgbm1 libdrm2 \
+  libxkbcommon0 libxcomposite1 libxdamage1 libxfixes3 libxrandr2 \
+  libpango-1.0-0 libcairo2 libxshmfence1 libasound2t64
+
+bun install -g junhost && jun doctor
+```
+
+Run it as a systemd service — `/etc/systemd/system/jun.service`:
+
+```ini
+[Unit]
+Description=Jun
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+Environment=JUN_HOME=/var/lib/jun
+Environment=PATH=/root/.bun/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
+ExecStart=/root/.bun/bin/bun /root/.bun/bin/jun start
+Restart=always
+RestartSec=3
+
+[Install]
+WantedBy=multi-user.target
+```
+
+```bash
+systemctl daemon-reload && systemctl enable --now jun
+```
+
+To reach the dashboard, either SSH-tunnel, or put Caddy in front for HTTPS (`reverse_proxy 127.0.0.1:8787` — WebSockets work automatically; add `basic_auth`, since Jun has no built-in login yet). Sign in to Codex from Settings — the device-code flow works headless. If the box has a datacenter IP, set a residential browser proxy in Settings → Browser proxy (or `JUN_BROWSER_PROXY=http://user:pass@host:port`; in a systemd drop-in use raw `%`-free credentials — `%` is a systemd escape). Upgrade anytime: `jun upgrade && systemctl restart jun`.
 
 ## License
 

package/bin/jun.js

@@ -34,6 +34,7 @@ Usage: jun <command>
 Commands:
   start         Start the daemon + dashboard (default; http://127.0.0.1:8787)
   doctor        Check prerequisites (codex CLI, browser engine)
+  upgrade       Update junhost to the latest published version
   mcp-server    Run the self-management MCP server (spawned by Codex, stdio)
   version       Print the version
 
@@ -89,6 +90,22 @@ switch (command) {
   case "doctor":
     await doctor();
     break;
+  case "upgrade": {
+    console.log(`Current version: ${version()}`);
+    const proc = Bun.spawnSync([process.execPath, "install", "-g", "junhost@latest"], {
+      stdout: "inherit",
+      stderr: "inherit",
+    });
+    if (proc.exitCode !== 0) {
+      console.error(
+        "\nUpgrade failed. If you installed with npm instead of bun, run:\n" +
+          "  npm install -g junhost@latest",
+      );
+      process.exit(proc.exitCode ?? 1);
+    }
+    console.log("\nUpgrade complete. Restart the daemon (jun start) to run the new version.");
+    break;
+  }
   case "version":
   case "--version":
   case "-v":