🔥 Tremora del Terra: ultimate hmac-file-server fix – final push before the drop 💾🔐

UNIVERSAL_LARGE_UPLOAD_FIX.md

@@ -1,108 +0,0 @@
-# Universal Large File Upload Solution
-
-## ✅ **COMPREHENSIVE FIX IMPLEMENTED**
-
-This global solution addresses "Bad Gateway" errors for **ALL XMPP clients** (Gajim, Dino, Conversations) without client-specific workarounds.
-
-## 🔧 **Multi-Layer Solution Applied**
-
-### 1. **nginx Stream Proxy** (Port 443 → 4443)
-```bash
-proxy_timeout 4800s          # 80 minutes
-proxy_connect_timeout 4800s  # 80 minutes (was 300s)
-```
-
-### 2. **nginx HTTP Proxy** (Port 4443 → 8080)
-```bash
-client_max_body_size 10G           # Maximum file size (was 1G)
-client_body_timeout 4800s          # 80 minutes
-proxy_connect_timeout 4800s        # 80 minutes  
-proxy_send_timeout 4800s           # 80 minutes
-proxy_read_timeout 4800s           # 80 minutes
-proxy_socket_keepalive on          # Connection persistence
-proxy_max_temp_file_size 0         # No temp file limits
-```
-
-### 3. **HMAC File Server** (Port 8080)
-```bash
-readtimeout = "4800s"              # 80 minutes
-writetimeout = "4800s"             # 80 minutes
-max_upload_size = "10GB"           # Maximum file size
-```
-
-### 4. **Enhanced Signature Validation**
-- **Base Grace Period**: 1 hour for all uploads
-- **XMPP Client Detection**: 2 hours for Gajim/Dino/Conversations
-- **Large File Scaling**: +2 minutes per 100MB for files >100MB
-- **Maximum Grace**: 4 hours total (prevents abuse)
-
-## 📊 **Grace Period Examples**
-
-| File Size | Client Type | Grace Period | Total Validity |
-|-----------|-------------|--------------|----------------|
-| 100MB     | Standard    | 1 hour       | ~65 minutes    |
-| 100MB     | XMPP        | 2 hours      | ~125 minutes   |
-| 970MB     | XMPP        | 2h 20m       | ~145 minutes   |
-| 2GB       | XMPP        | 2h 40m       | ~165 minutes   |
-
-## 🎯 **Why This Fixes "Bad Gateway"**
-
-1. **Timeout Chain Aligned**: All layers now use 4800s (80 minutes)
-2. **Body Size Limits**: Increased from 1GB to 10GB across the stack
-3. **Client Detection**: XMPP clients get extended grace periods automatically
-4. **Connection Persistence**: Keeps connections alive during long uploads
-5. **Error Resilience**: Automatic retry on timeout/gateway errors
-
-## 🔍 **Monitoring Commands**
-
-### Real-time Upload Monitoring
-```bash
-# Watch XMPP client uploads with grace period info
-sudo journalctl -u hmac-file-server -f | grep -E "grace|XMPP|Gajim|Dino|Conversations"
-
-# Monitor nginx proxy errors
-sudo tail -f /var/log/nginx/upload_errors.log
-
-# Check current upload connections
-sudo netstat -tuln | grep -E ":8080|:4443"
-```
-
-### Test Large Upload
-```bash
-# Test 970MB upload to verify fix
-curl -X PUT "https://share.uuxo.net/path/to/large/file.mp4?v3=signature&expires=timestamp" \
-     -H "Content-Type: video/mp4" \
-     -H "User-Agent: Gajim 2.3.3" \
-     --data-binary @largefile.mp4
-```
-
-## ✅ **Deployment Status**
-
-- **✅ nginx Stream**: Updated with 4800s timeouts
-- **✅ nginx HTTP**: Enhanced with 10G limits and connection persistence
-- **✅ HMAC Server**: XMPP client detection and dynamic grace periods
-- **✅ Services**: Both nginx and hmac-file-server restarted and running
-- **✅ Testing**: Ready for 970MB+ uploads via XMPP clients
-
-## 🚀 **Expected Results**
-
-1. **Gajim**: No more "Bad Gateway" errors on large uploads
-2. **Dino**: Improved timeout handling for large files
-3. **Conversations**: Better upload reliability on mobile networks
-4. **All Clients**: Universal support up to 10GB files
-
-## 📈 **Performance Improvements**
-
-- **Upload Reliability**: 95%+ success rate for files up to 2GB
-- **Timeout Buffer**: 4x safety margin (vs previous 5-minute limit)
-- **Client Compatibility**: Universal solution for all XMPP clients
-- **Network Resilience**: Handles slow connections and network interruptions
-
-## 🔄 **Next Steps**
-
-1. **Test with Gajim**: Upload your 970MB file again
-2. **Monitor Logs**: Check for grace period messages and client detection
-3. **Verify Success**: Upload should complete without "Bad Gateway"
-4. **Scale Test**: Try progressively larger files (1GB, 2GB) if needed
-
-The fix is **universally applicable** and doesn't require any client-specific configurations or modifications.