Ship Log
A running log of what the ProxyBox team has shipped across firmware, hardware, the iOS app, the website, and the security stack. Newest first.
Pi now reads /opt/proxybox/etc/tenant.json and reports tenant on every heartbeat. Enables white-label SKUs without separate firmware builds. Both live Pis OTA'd in about 20 seconds.
Shipped by Wes
New full-screen AVFoundation camera scanner. Scan the QR on your box sticker and the 6-char claim code auto-fills. Build 57 ready for next TestFlight.
Shipped by Wes
Full sibling product site with pricing, docs, contact, terms, and privacy. Newsreader and Instrument Sans typography. Hosted from the same server via vhost routing.
Shipped by Wes
New tenants table, per-tenant feature flags, and branding. Admin panel can filter by tenant. Foundation for shipping InfoProxy as a separate product while sharing hardware and relay fleet.
Shipped by Wes
Every device now rotates the default admin password to a random 32-char value on first run, encrypted at rest on the server. Shared defaults are no longer a thing. OTA itself is now self-sustaining.
Shipped by Wes
frps.toml locked to 16100 to 16999 and 20000 to 29999 ranges only. A compromised Pi can no longer expose arbitrary ports on the relay public interface.
Shipped by Wes
New hero, 6-cell metrics grid, three-card problem and solution layout, and a trust row under the CTA. Light mode removed (dark only until a proper light palette ships).
Shipped by Wes
Production tooling for flashing customer cards: build-golden.sh, prep-clone.sh, verify-card.sh. Each fresh flash personalizes on first boot.
Shipped by Wes
Device-config-update push over HTTPS. Atomic tarball apply with rollback. Firmware updates are now routine instead of a hand-rolled event.
Shipped by Wes
Encrypted provisioning via X25519 plus AES-GCM. The iOS app scans, pairs, pushes Wi-Fi credentials, and the device self-registers. No USB dongle required.
Shipped by Wes
That's everything we've published so far. Follow along at the blog or check system status.