chore: remove auto-updater

Drops the in-process self-update mechanism entirely:
  * delete updater/ package
  * remove -autoupdate CLI flag
  * remove AutoUpdate / UpdateURL / ChecksumURL config fields and
    their default-value initialisers (existing JSON keys are silently
    ignored on load — no migration needed)
  * remove auto_update from /api/settings GET + PUT
  * remove the AUTO UPDATE toggle from the admin Settings page
  * drop the updater bullet from README's What's new and the
    -autoupdate row from the CLI flag table
  * drop updater/ from the ARCHITECTURE source tree

Distros and Homebrew take ownership of the binary; an in-process
self-update conflicts with package-manager-managed installs and
brings little value for the source-build / release-binary path
either. Manual install of a new release replaces the binary with
the same effort as before, minus the moving pieces.

Author: DatanoiseTV

ARCHITECTURE.md

@@ -82,7 +82,6 @@ tinyice/
 │   ├── tasks.go            # Background tasks (reporting, stats recording).
 │   ├── socket_*.go         # OS-specific socket syscalls (SO_REUSEPORT).
 │   └── templates/          # HTML/CSS/JS assets.
-└── updater/                # Self-update mechanism (GitHub Releases).
 ```
 
 ## 4. Key Data Flows

README.md

@@ -149,7 +149,6 @@ See [Webhooks](#webhooks) for the full reference.
 - Sessions have absolute 7-day and sliding 24-hour expiry with a periodic reaper. Login rotates the cookie (no fixation). Deleted users have their live sessions purged immediately.
 - Login is constant-time — bcrypt always runs, even for unknown usernames.
 - `TrustedProxies` config + `X-Forwarded-For` handling so scan-detection and bans work behind nginx / Caddy / Traefik without auto-whitelisting loopback.
-- Auto-updater verifies SHA-256 from `checksums.txt` before overwriting the running binary.
 - RTMP shutdown closes live publisher connections so `Ctrl+C` quits within seconds, even mid-stream.
 - CSRF on every mutating admin form. Super-admin gates on transcoder/webhook CRUD. Webhook/relay URLs reject loopback and RFC1918 addresses (SSRF).
 - `SaveConfig` is serialised across goroutines so concurrent admin writes can't shred the JSON.
@@ -516,7 +515,6 @@ curl -s "https://air.radiotime.com/Playing.ashx?partnerId=$P&partnerKey=$K&id=$I
 | `-json-logs` | `false` | Structured JSON logging |
 | `-daemon` | `false` | Run in background |
 | `-pid-file` | | PID file path |
-| `-autoupdate` | `false` | Check + apply signed updates every hour |
 
 Subcommands: `./tinyice dump-config`, `./tinyice set <key> <value>`, `./tinyice get <key>`, `./tinyice reload`.
 

config/config.go

@@ -256,11 +256,6 @@ type Config struct {
 	DirectoryListing bool   `json:"directory_listing"`
 	DirectoryServer  string `json:"directory_server"`
 
-	// Auto Update
-	AutoUpdate  bool   `json:"auto_update"`
-	UpdateURL   string `json:"update_url"`
-	ChecksumURL string `json:"checksum_url"`
-
 	// Internal Streamer (AutoDJ)
 	AutoDJs []*AutoDJConfig `json:"autodjs"`
 
@@ -401,12 +396,6 @@ func (config *Config) setBasicDefaults() {
 	if config.DirectoryServer == "" {
 		config.DirectoryServer = "http://dir.xiph.org/cgi-bin/yp-cgi"
 	}
-	if config.UpdateURL == "" {
-		config.UpdateURL = "https://github.com/DatanoiseTV/tinyice/releases/latest/download/tinyice-{{os}}-{{arch}}"
-	}
-	if config.ChecksumURL == "" {
-		config.ChecksumURL = "https://github.com/DatanoiseTV/tinyice/releases/latest/download/checksums.txt"
-	}
 	// Existing configs are already set up
 	if config.AdminPassword != "" && !config.SetupComplete {
 		config.SetupComplete = true

main.go

@@ -18,7 +18,6 @@ import (
 	"github.com/DatanoiseTV/tinyice/config"
 	"github.com/DatanoiseTV/tinyice/logger"
 	"github.com/DatanoiseTV/tinyice/server"
-	"github.com/DatanoiseTV/tinyice/updater"
 	"go.uber.org/zap"
 )
 
@@ -39,7 +38,6 @@ var (
 	daemon      = flag.Bool("daemon", false, "Run in background (daemon mode)")
 	pidFile     = flag.String("pid-file", "", "Path to PID file")
 	authLogFile = flag.String("auth-log-file", "", "Path to separate authentication audit log")
-	autoupdate  = flag.Bool("autoupdate", false, "Enable automatic updates and zero-downtime hot swapping")
 	forceSetup  = flag.Bool("force-setup", false, "Force setup wizard even if config already has an admin password")
 )
 
@@ -141,18 +139,8 @@ func main() {
 	if *domains != "" {
 		cfg.Domains = strings.Split(*domains, ",")
 	}
-	if *autoupdate {
-		cfg.AutoUpdate = true
-	}
-
 	srv := server.NewServer(cfg, authLogger, Version, Commit, setupToken)
 
-	// Start Updater if enabled
-	if cfg.AutoUpdate {
-		upd := updater.NewUpdater(cfg, srv)
-		go upd.Start(context.Background())
-	}
-
 	// Signal handling
 	sigs := make(chan os.Signal, 1)
 	signal.Notify(sigs, syscall.SIGINT, syscall.SIGTERM, syscall.SIGHUP)

…r/frontend/dist/assets/admin-xUGzoVVk.js …r/frontend/dist/assets/admin-C3NtC-J8.jsserver/frontend/dist/assets/admin-xUGzoVVk.js renamed to server/frontend/dist/assets/admin-C3NtC-J8.js server/frontend/dist/assets/admin-xUGzoVVk.js renamed to server/frontend/dist/assets/admin-C3NtC-J8.js

@@ -4,7 +4,7 @@
   <meta charset="UTF-8">
   <meta name="viewport" content="width=device-width,initial-scale=1">
   <title>TinyIce</title>
-  <script type="module" crossorigin src="/assets/admin-xUGzoVVk.js"></script>
+  <script type="module" crossorigin src="/assets/admin-C3NtC-J8.js"></script>
   <link rel="modulepreload" crossorigin href="/assets/hooks.module-bNCB_ZdL.js">
   <link rel="modulepreload" crossorigin href="/assets/signals.module-Tnv-RP0P.js">
   <link rel="modulepreload" crossorigin href="/assets/sse-BzDsymyq.js">

server/frontend/dist/src/entries/admin.html

@@ -14,7 +14,6 @@ interface ServerSettings {
   admin_email: string
   low_latency_mode: boolean
   directory_listing: boolean
-  auto_update: boolean
   audit_enabled: boolean
 }
 
@@ -41,7 +40,6 @@ const server = signal<ServerSettings>({
   admin_email: '',
   low_latency_mode: false,
   directory_listing: false,
-  auto_update: false,
   audit_enabled: false,
 })
 
@@ -89,7 +87,6 @@ async function saveServer() {
       max_listeners: server.value.max_listeners,
       low_latency_mode: server.value.low_latency_mode,
       directory_listing: server.value.directory_listing,
-      auto_update: server.value.auto_update,
       audit_enabled: server.value.audit_enabled,
     })
   } catch { /* empty */ }
@@ -186,10 +183,6 @@ export function Settings() {
               <label class="font-mono text-[10px] tracking-[2px] text-text-tertiary">DIRECTORY LISTING</label>
               <Toggle checked={server.value.directory_listing} onChange={(v) => updateServer('directory_listing', v)} label="Directory listing" />
             </div>
-            <div class="flex items-center justify-between">
-              <label class="font-mono text-[10px] tracking-[2px] text-text-tertiary">AUTO UPDATE</label>
-              <Toggle checked={server.value.auto_update} onChange={(v) => updateServer('auto_update', v)} label="Auto update" />
-            </div>
             <div class="flex items-center justify-between">
               <div>
                 <label class="font-mono text-[10px] tracking-[2px] text-text-tertiary">AUDIT LOGGING</label>

server/frontend/src/pages/admin/Settings.tsx

@@ -2401,7 +2401,6 @@ func (s *Server) apiGetSettings(w http.ResponseWriter, r *http.Request) {
 		"domains":           s.Config.Domains,
 		"directory_listing": s.Config.DirectoryListing,
 		"directory_server":  s.Config.DirectoryServer,
-		"auto_update":       s.Config.AutoUpdate,
 		"audit_enabled":     s.Config.AuditEnabled,
 	})
 }
@@ -2455,11 +2454,6 @@ func (s *Server) apiUpdateSettings(w http.ResponseWriter, r *http.Request) {
 			s.Config.DirectoryListing = b
 		}
 	}
-	if v, ok := body["auto_update"]; ok {
-		if b, ok := v.(bool); ok {
-			s.Config.AutoUpdate = b
-		}
-	}
 	if v, ok := body["audit_enabled"]; ok {
 		if b, ok := v.(bool); ok {
 			s.Config.AuditEnabled = b