npm - yakmesh - Versions diffs - 2.8.2 → 3.0.0 - Mend

yakmesh 2.8.2 → 3.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (232) hide show

package/CHANGELOG.md +637 -0
package/CONTRIBUTING.md +42 -0
package/Caddyfile +77 -0
package/README.md +119 -29
package/adapters/adapter-mlv-bible/README.md +124 -0
package/adapters/adapter-mlv-bible/index.js +400 -0
package/adapters/chat-mod-adapter.js +532 -0
package/adapters/content-adapter.js +273 -0
package/content/api.js +50 -41
package/content/index.js +2 -2
package/content/store.js +355 -173
package/dashboard/index.html +19 -3
package/database/replication.js +117 -37
package/docs/CRYPTO-AGILITY.md +204 -0
package/docs/MTLS-RESEARCH.md +367 -0
package/docs/NAMCHE-SPEC.md +681 -0
package/docs/PEERQUANTA-YAKMESH-INTEGRATION.md +407 -0
package/docs/PRECISION-DISCLOSURE.md +96 -0
package/docs/README.md +76 -0
package/docs/ROADMAP-2.4.0.md +447 -0
package/docs/ROADMAP-2.5.0.md +244 -0
package/docs/SECURITY-AUDIT-REPORT.md +306 -0
package/docs/SST-INTEGRATION.md +712 -0
package/docs/STEADYWATCH-IMPLEMENTATION.md +303 -0
package/docs/TERNARY-AUDIT-REPORT.md +247 -0
package/docs/TME-FAQ.md +221 -0
package/docs/WHITEPAPER.md +623 -0
package/docs/adapters.html +1001 -0
package/docs/advanced-systems.html +1045 -0
package/docs/annex.html +1046 -0
package/docs/api.html +970 -0
package/docs/business/response-templates.md +160 -0
package/docs/c2c.html +1225 -0
package/docs/cli.html +1332 -0
package/docs/configuration.html +1248 -0
package/docs/darshan.html +1085 -0
package/docs/dharma.html +966 -0
package/docs/docs-bundle.html +1075 -0
package/docs/docs.css +3120 -0
package/docs/docs.js +556 -0
package/docs/doko.html +969 -0
package/docs/geo-proof.html +858 -0
package/docs/getting-started.html +840 -0
package/docs/gumba-tutorial.html +1144 -0
package/docs/gumba.html +1098 -0
package/docs/index.html +914 -0
package/docs/jhilke.html +1312 -0
package/docs/karma.html +1100 -0
package/docs/katha.html +1037 -0
package/docs/lama.html +978 -0
package/docs/mandala.html +1067 -0
package/docs/mani.html +964 -0
package/docs/mantra.html +967 -0
package/docs/mesh.html +1409 -0
package/docs/nakpak.html +869 -0
package/docs/namche.html +928 -0
package/docs/nav-order.json +53 -0
package/docs/prahari.html +1043 -0
package/docs/prism-bash.min.js +1 -0
package/docs/prism-javascript.min.js +1 -0
package/docs/prism-json.min.js +1 -0
package/docs/prism-tomorrow.min.css +1 -0
package/docs/prism.min.js +1 -0
package/docs/privacy.html +699 -0
package/docs/quick-reference.html +1181 -0
package/docs/sakshi.html +1402 -0
package/docs/sandboxing.md +386 -0
package/docs/seva.html +911 -0
package/docs/sherpa.html +871 -0
package/docs/studio.html +860 -0
package/docs/stupa.html +995 -0
package/docs/tailwind.min.css +2 -0
package/docs/tattva.html +1332 -0
package/docs/terms.html +686 -0
package/docs/time-server-deployment.md +166 -0
package/docs/time-sources.html +1392 -0
package/docs/tivra.html +1127 -0
package/docs/trademark-policy.html +686 -0
package/docs/tribhuj.html +1183 -0
package/docs/trust-security.html +1029 -0
package/docs/tutorials/backup-recovery.html +654 -0
package/docs/tutorials/dashboard.html +604 -0
package/docs/tutorials/domain-setup.html +605 -0
package/docs/tutorials/host-website.html +456 -0
package/docs/tutorials/mesh-network.html +505 -0
package/docs/tutorials/mobile-access.html +445 -0
package/docs/tutorials/privacy.html +467 -0
package/docs/tutorials/raspberry-pi.html +600 -0
package/docs/tutorials/security-basics.html +539 -0
package/docs/tutorials/share-files.html +431 -0
package/docs/tutorials/troubleshooting.html +637 -0
package/docs/tutorials/trust-karma.html +419 -0
package/docs/tutorials/yak-protocol.html +456 -0
package/docs/tutorials.html +1034 -0
package/docs/vani.html +1270 -0
package/docs/webserver.html +809 -0
package/docs/yak-protocol.html +940 -0
package/docs/yak-timeserver-design.md +475 -0
package/docs/yakapp.html +1015 -0
package/docs/ypc27.html +1069 -0
package/docs/yurt.html +1344 -0
package/embedded-docs/bundle.js +334 -74
package/gossip/protocol.js +247 -27
package/identity/key-resolver.js +262 -0
package/identity/machine-seed.js +632 -0
package/identity/node-key.js +669 -368
package/identity/tribhuj-ratchet.js +506 -0
package/knowledge-base.js +37 -8
package/launcher/yakmesh.bat +62 -0
package/launcher/yakmesh.sh +70 -0
package/mesh/annex.js +462 -108
package/mesh/beacon-broadcast.js +113 -1
package/mesh/darshan.js +1718 -0
package/mesh/gumba.js +1567 -0
package/mesh/jhilke.js +651 -0
package/mesh/katha.js +1012 -0
package/mesh/nakpak-routing.js +8 -5
package/mesh/network.js +724 -34
package/mesh/pulse-sync.js +4 -1
package/mesh/rate-limiter.js +127 -15
package/mesh/seva.js +526 -0
package/mesh/sherpa-discovery.js +89 -8
package/mesh/sybil-defense.js +19 -5
package/mesh/temporal-encoder.js +4 -3
package/mesh/vani.js +1364 -0
package/mesh/yurt.js +1340 -0
package/models/entropy-sentinel.onnx +0 -0
package/models/karma-trust.onnx +0 -0
package/models/manifest.json +43 -0
package/models/sakshi-anomaly.onnx +0 -0
package/oracle/code-proof-protocol.js +7 -6
package/oracle/codebase-lock.js +257 -28
package/oracle/index.js +74 -15
package/oracle/ma902-snmp.js +678 -0
package/oracle/module-sealer.js +5 -3
package/oracle/network-identity.js +16 -0
package/oracle/packet-checksum.js +201 -0
package/oracle/sst.js +579 -0
package/oracle/ternary-144t.js +714 -0
package/oracle/ternary-ml.js +481 -0
package/oracle/time-api.js +239 -0
package/oracle/time-source.js +137 -47
package/oracle/validation-oracle-hardened.js +1111 -1071
package/oracle/validation-oracle.js +4 -2
package/oracle/ypc27.js +211 -0
package/package.json +20 -3
package/protocol/yak-handler.js +35 -9
package/protocol/yak-protocol.js +28 -13
package/reference/cpp/yakmesh_mceliece_shard.cpp +168 -0
package/reference/cpp/yakmesh_ypc27.cpp +179 -0
package/sbom.json +87 -0
package/scripts/security-audit.mjs +264 -0
package/scripts/update-docs-nav.js +194 -0
package/scripts/update-docs-sidebar.cjs +164 -0
package/security/crypto-config.js +4 -3
package/security/dharma-moderation.js +517 -0
package/security/doko-identity.js +193 -143
package/security/domain-consensus.js +86 -85
package/security/fs-hardening.js +620 -0
package/security/hardware-attestation.js +5 -3
package/security/hybrid-trust.js +227 -87
package/security/karma-rate-limiter.js +692 -0
package/security/khata-protocol.js +22 -21
package/security/khata-trust-integration.js +277 -150
package/security/memory-safety.js +635 -0
package/security/mesh-auth.js +11 -10
package/security/mesh-revocation.js +373 -5
package/security/namche-gateway.js +298 -69
package/security/sakshi.js +460 -3
package/security/sangha.js +770 -0
package/security/secure-config.js +473 -0
package/security/silicon-parity.js +13 -10
package/security/steadywatch.js +1142 -0
package/security/strike-system.js +32 -3
package/security/temporal-signing.js +488 -0
package/security/trit-commitment.js +464 -0
package/server/crypto/annex.js +247 -0
package/server/darshan-api.js +343 -0
package/server/index.js +3259 -362
package/server/komm-api.js +668 -0
package/utils/accel.js +2273 -0
package/utils/ternary-id.js +79 -0
package/utils/verify-worker.js +57 -0
package/webserver/index.js +95 -5
package/assets/yakmesh-logo.png +0 -0
package/assets/yakmesh-logo.svg +0 -80
package/assets/yakmesh-logo2.png +0 -0
package/assets/yakmesh-logo2sm.png +0 -0
package/assets/ymsm.png +0 -0
package/website/assets/silhouettes/adapters.svg +0 -107
package/website/assets/silhouettes/api-endpoints.svg +0 -115
package/website/assets/silhouettes/atomic-clock.svg +0 -83
package/website/assets/silhouettes/base-camp.svg +0 -81
package/website/assets/silhouettes/bridge.svg +0 -69
package/website/assets/silhouettes/docs-bundle.svg +0 -113
package/website/assets/silhouettes/doko-basket.svg +0 -70
package/website/assets/silhouettes/fortress.svg +0 -93
package/website/assets/silhouettes/gateway.svg +0 -54
package/website/assets/silhouettes/gears.svg +0 -93
package/website/assets/silhouettes/globe-satellite.svg +0 -67
package/website/assets/silhouettes/karma-wheel.svg +0 -137
package/website/assets/silhouettes/lama-council.svg +0 -141
package/website/assets/silhouettes/mandala-network.svg +0 -169
package/website/assets/silhouettes/mani-stones.svg +0 -149
package/website/assets/silhouettes/mantra-wheel.svg +0 -116
package/website/assets/silhouettes/mesh-nodes.svg +0 -113
package/website/assets/silhouettes/nakpak.svg +0 -56
package/website/assets/silhouettes/peak-lightning.svg +0 -73
package/website/assets/silhouettes/sherpa.svg +0 -69
package/website/assets/silhouettes/stupa-tower.svg +0 -119
package/website/assets/silhouettes/tattva-eye.svg +0 -78
package/website/assets/silhouettes/terminal.svg +0 -74
package/website/assets/silhouettes/webserver.svg +0 -145
package/website/assets/silhouettes/yak.svg +0 -78
package/website/assets/yakmesh-logo.png +0 -0
package/website/assets/yakmesh-logo.webp +0 -0
package/website/assets/yakmesh-logo128x140.webp +0 -0
package/website/assets/yakmesh-logo2.png +0 -0
package/website/assets/yakmesh-logo2.svg +0 -51
package/website/assets/yakmesh-logo40x44.webp +0 -0
package/website/assets/yakmesh.gif +0 -0
package/website/assets/yakmesh.ico +0 -0
package/website/assets/yakmesh.jpg +0 -0
package/website/assets/yakmesh.pdf +0 -0
package/website/assets/yakmesh.png +0 -0
package/website/assets/yakmesh.svg +0 -70
package/website/assets/yakmesh128.webp +0 -0
package/website/assets/yakmesh32.png +0 -0
package/website/assets/yakmesh32.svg +0 -65
package/website/assets/yakmesh32o.ico +0 -2
package/website/assets/yakmesh32o.svg +0 -65
package/website/assets/yakmesh32o.svgz +0 -0

package/docs/tutorials/domain-setup.html ADDED Viewed

@@ -0,0 +1,605 @@
+<!DOCTYPE html>
+<html lang="en" data-theme="tutorials">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <link rel="icon" href="../favicon.ico" sizes="32x32">
+    <link rel="icon" href="../icon.svg" type="image/svg+xml">
+    <link rel="apple-touch-icon" href="../apple-touch-icon.png">
+    <title>Using with a Domain Name - YAKMESH Tutorials</title>
+    <meta name="description" content="Point your own domain name to your YAKMESH node with HTTPS. Complete guide to DNS, SSL, and reverse proxy setup.">
+    <link rel="stylesheet" href="../tailwind.min.css">
+    <link rel="stylesheet" href="../prism-tomorrow.min.css">
+    <link rel="stylesheet" href="../docs.css">
+    <style>
+        .theme-accent { color: #10b981; }
+        .theme-accent-hover:hover { color: #34d399; }
+        .theme-badge { background: rgba(16, 185, 129, 0.2); color: #34d399; }
+        .theme-border { border-color: #10b981; }
+        .theme-callout { background: rgba(16, 185, 129, 0.1); border-color: #059669; }
+        .active-link { background: rgba(16, 185, 129, 0.2) !important; color: #34d399 !important; }
+        .tutorial-card { background: rgba(30, 41, 59, 0.5); border: 1px solid #334155; border-radius: 0.75rem; padding: 1.5rem; margin-bottom: 1.5rem; }
+        .step-number { display: inline-flex; align-items: center; justify-content: center; width: 2rem; height: 2rem; background: #10b981; color: white; border-radius: 50%; font-weight: bold; margin-right: 0.75rem; flex-shrink: 0; }
+        .step-header { display: flex; align-items: center; margin-bottom: 1rem; }
+    </style>
+</head>
+<body class="bg-mountain-900 text-white min-h-screen">
+  <nav class="docs-sidebar" id="sidebar">
+    <a href="../index.html" class="sidebar-logo">
+      <span class="logo-icon">🏔️</span>
+      <span class="logo-text">Yakmesh</span>
+    </a>
+    <a href="/dashboard" class="sidebar-dashboard-link"><span>📊</span> <span>Dashboard</span></a>
+    <ul class="sidebar-nav">
+      <li><a href="../index.html"><span>🏠</span> <span>Overview</span></a></li>
+      <li><a href="../getting-started.html"><span>🚀</span> <span>Getting Started</span></a></li>
+      <li><a href="../tutorials.html"><span>📖</span> <span>Tutorials</span></a></li>
+      <li><a href="../yak-protocol.html"><span class="yak-icon"></span> <span>YAK://</span></a></li>
+      <li><a href="../annex.html"><span>🌉</span> <span>ANNEX</span></a></li>
+      <li><a href="../nakpak.html"><span>🎒</span> <span>NAKPAK</span></a></li>
+      <li><a href="../namche.html"><span>🚪</span> <span>NAMCHE</span></a></li>
+      <li><a href="../doko.html"><span>🧺</span> <span>DOKO</span></a></li>
+      <li><a href="../sherpa.html"><span>🧗</span> <span>SHERPA</span></a></li>
+      <li><a href="../mandala.html"><span>🌐</span> <span>MANDALA</span></a></li>
+      <li><a href="../mantra.html"><span>🕉️</span> <span>MANTRA</span></a></li>
+      <li><a href="../gumba.html"><span>🛕</span> <span>GUMBA</span></a></li>
+      <li><a href="../yurt.html"><span>🏕️</span> <span>YURT</span></a></li>
+      <li><a href="../katha.html"><span>💬</span> <span>KATHA</span></a></li>
+      <li><a href="../vani.html"><span>🎙️</span> <span>VANI</span></a></li>
+      <li><a href="../darshan.html"><span>👁️</span> <span>DARSHAN</span></a></li>
+      <li><a href="../stupa.html"><span>🛕</span> <span>STUPA</span></a></li>
+      <li><a href="../lama.html"><span>🔮</span> <span>LAMA</span></a></li>
+      <li><a href="../mani.html"><span>⏱️</span> <span>MANI</span></a></li>
+      <li><a href="../karma.html"><span>☯️</span> <span>KARMA</span></a></li>
+      <li><a href="../tattva.html"><span>🔯</span> <span>TATTVA</span></a></li>
+      <li><a href="../tribhuj.html"><span>🔺</span> <span>TRIBHUJ</span></a></li>
+      <li><a href="../ypc27.html"><span>🔐</span> <span>YPC-27</span></a></li>
+      <li><a href="../sakshi.html"><span>👁️</span> <span>SAKSHI</span></a></li>
+      <li><a href="../geo-proof.html"><span>🌍</span> <span>PRAMAAN</span></a></li>
+      <li><a href="../trust-security.html"><span>🔒</span> <span>SURAKSHA</span></a></li>
+      <li><a href="../docs-bundle.html"><span>📚</span> <span>GRANTH</span></a></li>
+      <li><a href="../api.html"><span>📡</span> <span>API</span></a></li>
+      <li><a href="../adapters.html"><span>🔌</span> <span>Adapters</span></a></li>
+      <li><a href="../studio.html"><span>🎨</span> <span>Studio</span></a></li>
+      <li><a href="../quick-reference.html"><span>📋</span> <span>Quick Ref</span></a></li>
+    </ul>
+  </nav>
+  <button class="sidebar-toggle" id="sidebarToggle" title="Toggle sidebar">
+    <svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke="currentColor">
+      <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M11 19l-7-7 7-7m8 14l-7-7 7-7" />
+    </svg>
+  </button>
+  <div class="sidebar-overlay" id="sidebarOverlay"></div>
+  <main class="docs-main" id="mainContent">
+    <div class="docs-content">
+      <!-- Breadcrumb -->
+      <nav class="mb-6">
+        <a href="../tutorials.html" class="text-mountain-400 hover:text-white transition">← Back to Tutorials</a>
+      </nav>
+      <!-- Page Header -->
+      <div class="mb-8">
+        <div class="flex items-center gap-3 mb-2">
+          <span class="text-4xl">🌍</span>
+          <h1 class="text-4xl font-bold">Using with a Domain Name</h1>
+          <span class="theme-badge text-xs px-2 py-1 rounded-full">15 min</span>
+        </div>
+        <p class="theme-accent text-lg">Point example.com to your YAKMESH node</p>
+        <p class="text-mountain-300 mt-2">
+          Make your node accessible via a custom domain with HTTPS. Professional setup for production deployments.
+        </p>
+      </div>
+      <!-- What You'll Learn -->
+      <div class="tutorial-card">
+        <h2 class="text-xl font-bold mb-4">📋 What You'll Learn</h2>
+        <ul class="space-y-2 text-mountain-300">
+          <li>• Configure DNS records (A, CNAME) for your domain</li>
+          <li>• Set up free HTTPS with Let's Encrypt</li>
+          <li>• Optional: Use Cloudflare for CDN and DDoS protection</li>
+          <li>• Optional: Configure nginx as a reverse proxy</li>
+          <li>• Update YAKMESH config for custom domain</li>
+        </ul>
+      </div>
+      <!-- Prerequisites -->
+      <div class="tutorial-card">
+        <h2 class="text-xl font-bold mb-4">⚡ Prerequisites</h2>
+        <ul class="space-y-2 text-mountain-300">
+          <li>• A running YAKMESH node (see <a href="../getting-started.html" class="theme-accent theme-accent-hover">Getting Started</a>)</li>
+          <li>• A domain name you control (e.g., from Namecheap, GoDaddy, Cloudflare)</li>
+          <li>• A public IP address (port forwarding configured on your router)</li>
+          <li>• Basic terminal access to your server</li>
+        </ul>
+      </div>
+      <!-- Step 1: Get Your Public IP -->
+      <div class="tutorial-card">
+        <div class="step-header">
+          <span class="step-number">1</span>
+          <h2 class="text-xl font-bold">Get Your Public IP Address</h2>
+        </div>
+        <p class="text-mountain-300 mb-4">
+          First, find your server's public IP address. This is what your domain will point to.
+        </p>
+        <pre class="language-bash mb-4"><code># On Linux/Mac
+curl ifconfig.me
+# On Windows PowerShell
+(Invoke-WebRequest -Uri "https://api.ipify.org").Content</code></pre>
+        <p class="text-mountain-300 mb-4">
+          You should get an IP address like <code class="bg-mountain-800 px-2 py-1 rounded">203.0.113.45</code>.
+        </p>
+        <div class="theme-callout rounded-lg p-4 border">
+          <p class="font-semibold theme-accent mb-1">💡 Dynamic IP?</p>
+          <p class="text-sm text-mountain-300">
+            If your ISP assigns a dynamic IP, consider using a dynamic DNS service like
+            <a href="https://www.duckdns.org" class="theme-accent theme-accent-hover" target="_blank">DuckDNS</a> or
+            <a href="https://www.noip.com" class="theme-accent theme-accent-hover" target="_blank">No-IP</a>.
+          </p>
+        </div>
+      </div>
+      <!-- Step 2: Configure DNS -->
+      <div class="tutorial-card">
+        <div class="step-header">
+          <span class="step-number">2</span>
+          <h2 class="text-xl font-bold">Configure DNS Records</h2>
+        </div>
+        <p class="text-mountain-300 mb-4">
+          Log in to your domain registrar's DNS management panel and add these records:
+        </p>
+        <h3 class="font-semibold text-lg mb-3">Option A: Root Domain (example.com)</h3>
+        <div class="overflow-x-auto mb-6">
+          <table class="w-full text-sm">
+            <thead>
+              <tr class="border-b border-mountain-700">
+                <th class="text-left py-2 px-3">Type</th>
+                <th class="text-left py-2 px-3">Name</th>
+                <th class="text-left py-2 px-3">Value</th>
+                <th class="text-left py-2 px-3">TTL</th>
+              </tr>
+            </thead>
+            <tbody class="text-mountain-300">
+              <tr class="border-b border-mountain-800">
+                <td class="py-2 px-3 font-mono theme-accent">A</td>
+                <td class="py-2 px-3">@</td>
+                <td class="py-2 px-3">203.0.113.45</td>
+                <td class="py-2 px-3">3600</td>
+              </tr>
+            </tbody>
+          </table>
+        </div>
+        <h3 class="font-semibold text-lg mb-3">Option B: Subdomain (mesh.example.com)</h3>
+        <div class="overflow-x-auto mb-6">
+          <table class="w-full text-sm">
+            <thead>
+              <tr class="border-b border-mountain-700">
+                <th class="text-left py-2 px-3">Type</th>
+                <th class="text-left py-2 px-3">Name</th>
+                <th class="text-left py-2 px-3">Value</th>
+                <th class="text-left py-2 px-3">TTL</th>
+              </tr>
+            </thead>
+            <tbody class="text-mountain-300">
+              <tr class="border-b border-mountain-800">
+                <td class="py-2 px-3 font-mono theme-accent">A</td>
+                <td class="py-2 px-3">mesh</td>
+                <td class="py-2 px-3">203.0.113.45</td>
+                <td class="py-2 px-3">3600</td>
+              </tr>
+              <tr class="border-b border-mountain-800">
+                <td class="py-2 px-3 font-mono theme-accent">CNAME</td>
+                <td class="py-2 px-3">www.mesh</td>
+                <td class="py-2 px-3">mesh.example.com</td>
+                <td class="py-2 px-3">3600</td>
+              </tr>
+            </tbody>
+          </table>
+        </div>
+        <p class="text-mountain-300">
+          DNS changes can take up to 48 hours to propagate, but usually complete within 15-30 minutes.
+        </p>
+        <pre class="language-bash mt-4"><code># Verify DNS propagation
+nslookup mesh.example.com
+# Or use dig
+dig mesh.example.com +short</code></pre>
+      </div>
+      <!-- Step 3: Port Forwarding -->
+      <div class="tutorial-card">
+        <div class="step-header">
+          <span class="step-number">3</span>
+          <h2 class="text-xl font-bold">Configure Port Forwarding</h2>
+        </div>
+        <p class="text-mountain-300 mb-4">
+          If your YAKMESH node is behind a router, forward these ports to your server:
+        </p>
+        <div class="overflow-x-auto mb-4">
+          <table class="w-full text-sm">
+            <thead>
+              <tr class="border-b border-mountain-700">
+                <th class="text-left py-2 px-3">Port</th>
+                <th class="text-left py-2 px-3">Protocol</th>
+                <th class="text-left py-2 px-3">Purpose</th>
+              </tr>
+            </thead>
+            <tbody class="text-mountain-300">
+              <tr class="border-b border-mountain-800">
+                <td class="py-2 px-3 font-mono theme-accent">80</td>
+                <td class="py-2 px-3">TCP</td>
+                <td class="py-2 px-3">HTTP (for Let's Encrypt verification)</td>
+              </tr>
+              <tr class="border-b border-mountain-800">
+                <td class="py-2 px-3 font-mono theme-accent">443</td>
+                <td class="py-2 px-3">TCP</td>
+                <td class="py-2 px-3">HTTPS (secure traffic)</td>
+              </tr>
+              <tr class="border-b border-mountain-800">
+                <td class="py-2 px-3 font-mono theme-accent">3000</td>
+                <td class="py-2 px-3">TCP</td>
+                <td class="py-2 px-3">YAKMESH Dashboard (if exposed directly)</td>
+              </tr>
+              <tr class="border-b border-mountain-800">
+                <td class="py-2 px-3 font-mono theme-accent">9001</td>
+                <td class="py-2 px-3">TCP</td>
+                <td class="py-2 px-3">WebSocket peer connections</td>
+              </tr>
+            </tbody>
+          </table>
+        </div>
+        <div class="theme-callout rounded-lg p-4 border">
+          <p class="font-semibold theme-accent mb-1">🔒 Security Note</p>
+          <p class="text-sm text-mountain-300">
+            Only forward the ports you actually need. If using nginx as a reverse proxy, you only need 80 and 443.
+          </p>
+        </div>
+      </div>
+      <!-- Step 4: HTTPS with Let's Encrypt -->
+      <div class="tutorial-card">
+        <div class="step-header">
+          <span class="step-number">4</span>
+          <h2 class="text-xl font-bold">Set Up HTTPS with Let's Encrypt</h2>
+        </div>
+        <p class="text-mountain-300 mb-4">
+          Let's Encrypt provides free SSL certificates. We'll use Certbot to automate the process.
+        </p>
+        <h3 class="font-semibold text-lg mb-3">Install Certbot</h3>
+        <pre class="language-bash mb-4"><code># Ubuntu/Debian
+sudo apt update
+sudo apt install certbot
+# CentOS/RHEL
+sudo yum install certbot
+# macOS with Homebrew
+brew install certbot</code></pre>
+        <h3 class="font-semibold text-lg mb-3">Obtain Certificate (Standalone Mode)</h3>
+        <p class="text-mountain-300 mb-3">
+          Stop any service using port 80, then run:
+        </p>
+        <pre class="language-bash mb-4"><code># Stop YAKMESH temporarily
+npx yakmesh stop
+# Get certificate
+sudo certbot certonly --standalone -d mesh.example.com
+# Certificate files will be saved to:
+# /etc/letsencrypt/live/mesh.example.com/fullchain.pem
+# /etc/letsencrypt/live/mesh.example.com/privkey.pem</code></pre>
+        <h3 class="font-semibold text-lg mb-3">Auto-Renewal</h3>
+        <p class="text-mountain-300 mb-3">
+          Set up automatic certificate renewal:
+        </p>
+        <pre class="language-bash mb-4"><code># Test renewal
+sudo certbot renew --dry-run
+# Certbot automatically adds a cron job for renewal</code></pre>
+      </div>
+      <!-- Step 5: Configure YAKMESH -->
+      <div class="tutorial-card">
+        <div class="step-header">
+          <span class="step-number">5</span>
+          <h2 class="text-xl font-bold">Configure YAKMESH for HTTPS</h2>
+        </div>
+        <p class="text-mountain-300 mb-4">
+          Update your <code class="bg-mountain-800 px-2 py-1 rounded">yakmesh.config.js</code> to use SSL:
+        </p>
+        <pre class="language-javascript mb-4"><code>// yakmesh.config.js
+export default {
+  node: {
+    name: 'my-mesh-node',
+    publicUrl: 'https://mesh.example.com',
+  },
+  server: {
+    port: 443,
+    ssl: {
+      enabled: true,
+      cert: '/etc/letsencrypt/live/mesh.example.com/fullchain.pem',
+      key: '/etc/letsencrypt/live/mesh.example.com/privkey.pem',
+    },
+  },
+  websocket: {
+    port: 9001,
+    ssl: {
+      enabled: true,
+      cert: '/etc/letsencrypt/live/mesh.example.com/fullchain.pem',
+      key: '/etc/letsencrypt/live/mesh.example.com/privkey.pem',
+    },
+  },
+};</code></pre>
+        <p class="text-mountain-300">
+          Restart YAKMESH to apply changes:
+        </p>
+        <pre class="language-bash mt-3"><code>npx yakmesh start</code></pre>
+      </div>
+      <!-- Step 6: Cloudflare (Optional) -->
+      <div class="tutorial-card">
+        <div class="step-header">
+          <span class="step-number">6</span>
+          <h2 class="text-xl font-bold">Cloudflare Integration (Optional)</h2>
+        </div>
+        <p class="text-mountain-300 mb-4">
+          Cloudflare provides free CDN, DDoS protection, and simplified SSL. Here's how to set it up:
+        </p>
+        <h3 class="font-semibold text-lg mb-3">Add Your Domain to Cloudflare</h3>
+        <ol class="list-decimal list-inside space-y-2 text-mountain-300 mb-4">
+          <li>Create a free account at <a href="https://cloudflare.com" class="theme-accent theme-accent-hover" target="_blank">cloudflare.com</a></li>
+          <li>Add your domain and scan existing DNS records</li>
+          <li>Update your domain's nameservers to Cloudflare's (provided during setup)</li>
+          <li>Wait for nameserver propagation (up to 24 hours)</li>
+        </ol>
+        <h3 class="font-semibold text-lg mb-3">Configure Proxy Settings</h3>
+        <div class="overflow-x-auto mb-4">
+          <table class="w-full text-sm">
+            <thead>
+              <tr class="border-b border-mountain-700">
+                <th class="text-left py-2 px-3">Record</th>
+                <th class="text-left py-2 px-3">Proxy Status</th>
+                <th class="text-left py-2 px-3">Notes</th>
+              </tr>
+            </thead>
+            <tbody class="text-mountain-300">
+              <tr class="border-b border-mountain-800">
+                <td class="py-2 px-3">A (mesh)</td>
+                <td class="py-2 px-3 text-orange-400">🟠 Proxied</td>
+                <td class="py-2 px-3">Dashboard traffic goes through Cloudflare</td>
+              </tr>
+              <tr class="border-b border-mountain-800">
+                <td class="py-2 px-3">A (ws.mesh)</td>
+                <td class="py-2 px-3 text-gray-400">⚪ DNS Only</td>
+                <td class="py-2 px-3">WebSocket traffic bypasses proxy</td>
+              </tr>
+            </tbody>
+          </table>
+        </div>
+        <h3 class="font-semibold text-lg mb-3">SSL/TLS Settings</h3>
+        <p class="text-mountain-300 mb-3">
+          In Cloudflare dashboard → SSL/TLS:
+        </p>
+        <ul class="space-y-1 text-mountain-300 mb-4">
+          <li>• Set encryption mode to <strong>Full (strict)</strong> if you have Let's Encrypt</li>
+          <li>• Or use <strong>Full</strong> with Cloudflare Origin Certificates</li>
+          <li>• Enable <strong>Always Use HTTPS</strong></li>
+        </ul>
+        <div class="theme-callout rounded-lg p-4 border">
+          <p class="font-semibold theme-accent mb-1">⚠️ WebSocket Consideration</p>
+          <p class="text-sm text-mountain-300">
+            Cloudflare's free tier supports WebSockets, but for best performance with YAKMESH peer connections,
+            use a separate subdomain (e.g., ws.mesh.example.com) with proxy disabled.
+          </p>
+        </div>
+      </div>
+      <!-- Step 7: Nginx Reverse Proxy (Optional) -->
+      <div class="tutorial-card">
+        <div class="step-header">
+          <span class="step-number">7</span>
+          <h2 class="text-xl font-bold">Nginx Reverse Proxy (Optional)</h2>
+        </div>
+        <p class="text-mountain-300 mb-4">
+          If you're running multiple services, nginx can route traffic to YAKMESH:
+        </p>
+        <h3 class="font-semibold text-lg mb-3">Install nginx</h3>
+        <pre class="language-bash mb-4"><code># Ubuntu/Debian
+sudo apt install nginx
+# Start nginx
+sudo systemctl start nginx
+sudo systemctl enable nginx</code></pre>
+        <h3 class="font-semibold text-lg mb-3">Configure Virtual Host</h3>
+        <p class="text-mountain-300 mb-3">
+          Create <code class="bg-mountain-800 px-2 py-1 rounded">/etc/nginx/sites-available/yakmesh</code>:
+        </p>
+        <pre class="language-bash mb-4"><code>server {
+    listen 80;
+    server_name mesh.example.com;
+    return 301 https://$server_name$request_uri;
+}
+server {
+    listen 443 ssl http2;
+    server_name mesh.example.com;
+    ssl_certificate /etc/letsencrypt/live/mesh.example.com/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/mesh.example.com/privkey.pem;
+    ssl_protocols TLSv1.2 TLSv1.3;
+    ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256;
+    ssl_prefer_server_ciphers off;
+    # Security headers
+    add_header X-Frame-Options DENY;
+    add_header X-Content-Type-Options nosniff;
+    add_header X-XSS-Protection "1; mode=block";
+    # Dashboard and API
+    location / {
+        proxy_pass http://127.0.0.1:3000;
+        proxy_http_version 1.1;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+    }
+    # WebSocket connections
+    location /ws {
+        proxy_pass http://127.0.0.1:9001;
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection "upgrade";
+        proxy_set_header Host $host;
+        proxy_read_timeout 86400;
+    }
+}</code></pre>
+        <h3 class="font-semibold text-lg mb-3">Enable and Test</h3>
+        <pre class="language-bash"><code># Enable the site
+sudo ln -s /etc/nginx/sites-available/yakmesh /etc/nginx/sites-enabled/
+# Test configuration
+sudo nginx -t
+# Reload nginx
+sudo systemctl reload nginx</code></pre>
+      </div>
+      <!-- Step 8: Update YAKMESH for Proxy -->
+      <div class="tutorial-card">
+        <div class="step-header">
+          <span class="step-number">8</span>
+          <h2 class="text-xl font-bold">Update Config for Reverse Proxy</h2>
+        </div>
+        <p class="text-mountain-300 mb-4">
+          When using nginx, YAKMESH runs on localhost without SSL (nginx handles it):
+        </p>
+        <pre class="language-javascript mb-4"><code>// yakmesh.config.js - behind reverse proxy
+export default {
+  node: {
+    name: 'my-mesh-node',
+    publicUrl: 'https://mesh.example.com',
+  },
+  server: {
+    host: '127.0.0.1',  // Only accept local connections
+    port: 3000,
+    ssl: { enabled: false },  // nginx handles SSL
+    trustProxy: true,  // Trust X-Forwarded headers
+  },
+  websocket: {
+    host: '127.0.0.1',
+    port: 9001,
+    publicUrl: 'wss://mesh.example.com/ws',
+  },
+};</code></pre>
+      </div>
+      <!-- Verification -->
+      <div class="tutorial-card">
+        <h2 class="text-xl font-bold mb-4">✅ Verify Your Setup</h2>
+        <p class="text-mountain-300 mb-4">
+          Test that everything works:
+        </p>
+        <pre class="language-bash mb-4"><code># Check HTTPS is working
+curl -I https://mesh.example.com
+# Check health endpoint
+curl https://mesh.example.com/health
+# Test WebSocket (requires wscat: npm install -g wscat)
+wscat -c wss://mesh.example.com/ws</code></pre>
+        <p class="text-mountain-300">
+          You should see your node responding with valid SSL certificates and health status.
+        </p>
+      </div>
+      <!-- Troubleshooting -->
+      <div class="tutorial-card">
+        <h2 class="text-xl font-bold mb-4">🔧 Troubleshooting</h2>
+        <div class="space-y-4">
+          <div>
+            <p class="font-semibold text-white mb-1">DNS not resolving?</p>
+            <p class="text-sm text-mountain-300">Wait longer for propagation, or try <code class="bg-mountain-800 px-1 rounded">nslookup</code> from different networks.</p>
+          </div>
+          <div>
+            <p class="font-semibold text-white mb-1">Certificate errors?</p>
+            <p class="text-sm text-mountain-300">Ensure certificates are readable by YAKMESH/nginx. Check permissions with <code class="bg-mountain-800 px-1 rounded">ls -la /etc/letsencrypt/live/</code>.</p>
+          </div>
+          <div>
+            <p class="font-semibold text-white mb-1">Connection refused?</p>
+            <p class="text-sm text-mountain-300">Check firewall rules with <code class="bg-mountain-800 px-1 rounded">sudo ufw status</code> and port forwarding on your router.</p>
+          </div>
+          <div>
+            <p class="font-semibold text-white mb-1">WebSocket failing?</p>
+            <p class="text-sm text-mountain-300">Ensure nginx config has proper WebSocket upgrade headers. Check logs with <code class="bg-mountain-800 px-1 rounded">sudo tail -f /var/log/nginx/error.log</code>.</p>
+          </div>
+        </div>
+      </div>
+      <!-- Success -->
+      <div class="bg-emerald-900/30 border border-emerald-600 rounded-xl p-6 mb-8">
+        <h2 class="text-xl font-bold mb-2 text-emerald-400">🎉 You Did It!</h2>
+        <p class="text-mountain-300">
+          Your YAKMESH node is now accessible via your custom domain with secure HTTPS.
+          Share your public URL <code class="bg-mountain-800 px-2 py-1 rounded">https://mesh.example.com</code>
+          with peers so they can connect to your node.
+        </p>
+      </div>
+      <!-- Navigation Footer -->
+      <div class="border-t border-mountain-700 mt-12 pt-8">
+        <div class="flex flex-col sm:flex-row gap-4">
+          <a href="security-basics.html" class="flex-1 block bg-mountain-800 border border-mountain-700 rounded-xl p-4 hover:border-emerald-500 transition group">
+            <div class="text-xs text-mountain-400 mb-1">← Previous</div>
+            <div class="flex items-center gap-2">
+              <span class="text-xl">🛡️</span>
+              <span class="font-semibold group-hover:text-emerald-400">Security Basics</span>
+            </div>
+          </a>
+          <a href="raspberry-pi.html" class="flex-1 block bg-mountain-800 border border-mountain-700 rounded-xl p-4 hover:border-emerald-500 transition group">
+            <div class="text-xs text-mountain-400 mb-1">Next →</div>
+            <div class="flex items-center gap-2">
+              <span class="text-xl">🍓</span>
+              <span class="font-semibold group-hover:text-emerald-400">Running on Raspberry Pi</span>
+            </div>
+          </a>
+        </div>
+      </div>
+    </div>
+  </main>
+  <footer class="docs-footer">
+    <p>© 2026 YAKMESH™</p>
+  </footer>
+  <script src="../prism.min.js"></script>
+  <script src="../prism-bash.min.js"></script>
+  <script src="../prism-javascript.min.js"></script>
+  <script src="../docs.js"></script>
+</body>
+</html>