jarek
|
8b67fc0662
|
editing a secret provider no longer wipes its stored token
|
2026-08-20 08:28:26 +02:00 |
|
jarek
|
b56e1ef7f9
|
Compose validate - a preflight linter & validator for compose files
|
2026-08-20 08:28:26 +02:00 |
|
jarek
|
f8bfd756ef
|
apply the containers:exec permission check to the websocket terminal path
|
2026-08-20 08:28:26 +02:00 |
|
jarek
|
f50c3e52f3
|
registry auth survives an http to https token realm redirect behind a TLS proxy
|
2026-08-20 08:28:26 +02:00 |
|
jarek
|
3d208e6f22
|
release housekeeping
|
2026-08-20 08:28:25 +02:00 |
|
jarek
|
99b1672be5
|
detect newer version tags for pinned images and show them as a badge with release notes
|
2026-08-19 14:26:45 +02:00 |
|
jarek
|
29795c074c
|
Bitwarden Secrets Manager as a secret provider via an operator-installed bws client
|
2026-08-19 14:26:45 +02:00 |
|
jarek
|
2584e52852
|
Compose validate - a preflight linter & validator for compose files
|
2026-08-19 14:26:45 +02:00 |
|
jarek
|
bc91e71075
|
registry auth no longer fails when the token realm redirects http to https behind a TLS-terminating proxy
|
2026-08-19 14:26:45 +02:00 |
|
jarek
|
7e2f813438
|
security: update Go to 1.25.13 (8 HIGH stdlib CVEs) and update docker-compose to 5.5.0
|
2026-08-19 14:26:45 +02:00 |
|
jarek
|
5f401602bb
|
release housekeeping
|
2026-08-19 14:26:45 +02:00 |
|
Björn Strausmann
|
64aeee6c3e
|
ci: add OpenAPI drift-gate workflow (follow-up to #1342) (#1429)
|
2026-08-19 10:43:23 +02:00 |
|
jarek
|
adabaffb23
|
API: validating a stack's env vars no longer drops the environment id
|
2026-08-18 10:05:37 +02:00 |
|
jarek
|
e9b6bf48a7
|
hint that op:// and pass:// references only resolve in the stack env panel
|
2026-08-18 10:05:37 +02:00 |
|
jarek
|
e73c7b3d68
|
backup helper wait uses an unbounded deadline
|
2026-08-18 10:05:37 +02:00 |
|
jarek
|
f7ca18fa0c
|
container update notifications now fire properly
|
2026-08-18 10:05:37 +02:00 |
|
jarek
|
6fe735ad97
|
git stacks accept a compose/env path with a leading slash
|
2026-08-18 10:05:36 +02:00 |
|
jarek
|
9b6b6a9d3e
|
Infisical: the project ID is optional when using a service token - it's taken from the token
|
2026-08-18 10:05:36 +02:00 |
|
jarek
|
ba1a9588b9
|
detect newer version tags for pinned images and show them as a badge with release notes
|
2026-08-18 10:05:36 +02:00 |
|
jarek
|
088c7dc343
|
OpenAPI spec at /api/docs with a Scalar viewer, opt-in via FEAT_API_DOCS
|
2026-08-18 10:05:36 +02:00 |
|
jarek
|
1ad16a7c2a
|
Compose validate - a preflight linter & validator for compose files
|
2026-08-18 10:05:36 +02:00 |
|
jarek
|
6fab8ec70a
|
release housekeeping
|
2026-08-18 10:05:36 +02:00 |
|
Jarek Krochmalski
|
5c0fa6aa91
|
add the missing OpenAPI generator (scripts/generate-openapi.ts + scripts/openapi) so a clean checkout builds
|
2026-08-18 05:12:37 +02:00 |
|
Sergei Nesterkov
|
7a007bd623
|
feat(notifications): add Zabbix history.push provider (#1419)
* feat(notifications): add Zabbix history.push provider
* test(notifications): add Zabbix provider tests
|
2026-08-17 15:24:47 +02:00 |
|
Jarek Krochmalski
|
8f29216701
|
Update README.md
|
2026-08-17 13:26:30 +02:00 |
|
jarek
|
0547ca1970
|
adopting a stack over the API rejects a compose path not on Dockhand's filesystem
|
2026-08-17 09:50:35 +02:00 |
|
jarek
|
88fa9bcab5
|
backup notifications show a real title and message instead of "undefined"
|
2026-08-17 09:50:35 +02:00 |
|
jarek
|
d7c0c88794
|
concurrent git syncs sharing an SSH credential no longer fail on a missing temp key
|
2026-08-17 09:50:35 +02:00 |
|
jarek
|
da26f7f764
|
OpenAPI spec at /api/docs with a Scalar viewer, opt-in via FEAT_API_DOCS
|
2026-08-17 09:50:34 +02:00 |
|
jarek
|
ba8670af66
|
detect newer version tags for pinned images and show them as a badge with release notes
|
2026-08-17 09:50:34 +02:00 |
|
jarek
|
1740fdccfa
|
Infisical: Universal Auth (Machine Identity) as well as a static token
|
2026-08-17 09:50:34 +02:00 |
|
jarek
|
ef6c22a6ea
|
Proton Pass as a secret provider via an operator-installed pass-cli client
|
2026-08-17 09:50:34 +02:00 |
|
jarek
|
95fd26656b
|
Bitwarden Secrets Manager as a secret provider via an operator-installed bws client
|
2026-08-17 09:50:34 +02:00 |
|
jarek
|
ff006965ce
|
release housekeeping
|
2026-08-17 09:50:34 +02:00 |
|
StefanSa
|
593659f652
|
Add Bitwarden Secrets Manager provider via external bws (#1416)
* add external bws Bitwarden secrets provider
* add self-hosted Bitwarden server support
|
2026-08-17 08:15:36 +02:00 |
|
jarek
|
3b43946a38
|
container update no longer fails on Podman for containers using userns_mode: keep-id
|
2026-08-16 08:15:30 +02:00 |
|
jarek
|
0a08c94287
|
optional indentation guides in the compose/YAML editor
|
2026-08-16 08:15:30 +02:00 |
|
jarek
|
cda446a232
|
release housekeeping
|
2026-08-16 08:15:30 +02:00 |
|
jarek
|
19548772df
|
reject duplicate secret provider name with a 400
|
2026-08-14 15:59:50 +02:00 |
|
jarek
|
5fef45e003
|
validate secret provider config before save
|
2026-08-14 14:01:36 +02:00 |
|
jarek
|
344ad4aadc
|
external vault providers - live probing secrets when editing stack
|
2026-08-14 10:40:02 +02:00 |
|
jarek
|
9a416e165f
|
point the compose timeout error at COMPOSE_TIMEOUT
|
2026-08-14 09:35:37 +02:00 |
|
jarek
|
a38e973155
|
grouped container logs now show one merged timeline sorted by time
|
2026-08-14 09:35:37 +02:00 |
|
jarek
|
a89a6e3bd4
|
multi-arch images no longer show false "update available"
|
2026-08-14 09:35:36 +02:00 |
|
jarek
|
32a86129d0
|
stack secrets from external providers (1Password, HashiCorp Vault, Infisical and Doppler)
|
2026-08-14 09:35:36 +02:00 |
|
jarek
|
78d67d2dc1
|
release housekeeping
|
2026-08-14 09:35:36 +02:00 |
|
jarek
|
cd5d2651b3
|
backfill missing 0009/0010 drizzle snapshots for both dialects
|
2026-08-13 13:53:12 +02:00 |
|
jarek
|
959a426507
|
internal cleanups and build config
|
2026-08-13 10:20:30 +02:00 |
|
jarek
|
3c75bd4919
|
backup engine internals - restic timeout and stack-dir capture
|
2026-08-13 10:20:30 +02:00 |
|
jarek
|
610e46dc19
|
read-side backup snapshot endpoints use job polling
|
2026-08-13 10:20:30 +02:00 |
|