 Jarek Krochmalski
|
585d923e3c
|
post api stacks honors the target environment in the body
|
2026-09-02 15:52:45 +02:00 |
|
|
Jarek Krochmalski
|
52d99fa295
|
escape dollar signs in env values when generating a compose file from a container
|
2026-09-02 15:52:45 +02:00 |
|
|
Jarek Krochmalski
|
d03554c69d
|
populate environment variables again finds the repo env file
|
2026-09-02 15:52:44 +02:00 |
|
|
Jarek Krochmalski
|
34ceb74dc1
|
clearer git permission errors that match the credential type
|
2026-09-02 15:52:44 +02:00 |
|
|
Jarek Krochmalski
|
ae754b3140
|
large image scans no longer fail when the scanner log rotates
|
2026-09-02 15:52:44 +02:00 |
|
|
Jarek Krochmalski
|
9a3c52374c
|
compose validate no longer flags a valid env_file
|
2026-09-02 15:52:44 +02:00 |
|
|
Jarek Krochmalski
|
2d12085ae4
|
disable build cache no longer errors on deploy
|
2026-09-02 15:52:44 +02:00 |
|
|
Jarek Krochmalski
|
4d09c9c76f
|
local-path backup destinations validate the configured path
|
2026-09-02 15:52:44 +02:00 |
|
|
Jarek Krochmalski
|
46a137316f
|
faster incremental backups when multiple stacks share one repository
|
2026-09-02 15:52:44 +02:00 |
|
|
Jarek Krochmalski
|
002f53ce78
|
optional stacks_dir flat layout for local stacks
|
2026-09-02 15:52:44 +02:00 |
|
|
Jarek Krochmalski
|
3fa75c9702
|
drop the unused hawser stacks-dir column and layout
|
2026-09-02 15:52:44 +02:00 |
|
|
Jarek Krochmalski
|
5af4e69eb2
|
tighten permission checks and input validation across the api
|
2026-09-02 15:52:44 +02:00 |
|
|
Jarek Krochmalski
|
53161a6718
|
pin esm-env as a direct dependency for reproducible installs
|
2026-08-27 19:48:35 +02:00 |
|
|
Jarek Krochmalski
|
ee4632a7b7
|
stacks page: env-var counts from sources, icon batching, and an in-order restart
|
2026-08-27 19:48:35 +02:00 |
|
|
Jarek Krochmalski
|
a9b1998aad
|
allow secret-less webhook triggers behind an env flag
|
2026-08-27 16:32:06 +02:00 |
|
|
Jarek Krochmalski
|
9a1f11c9b7
|
require the git permission for repository deploy/sync/test
|
2026-08-27 16:32:06 +02:00 |
|
|
Jarek Krochmalski
|
5359720a76
|
bump docker-compose to 5.5.0-r2 in the wolfi image
|
2026-08-27 16:32:05 +02:00 |
|
|
Jarek Krochmalski
|
cc48b1e14b
|
bump svelte to 5.56.10
|
2026-08-27 16:32:05 +02:00 |
|
|
Jarek Krochmalski
|
0816672222
|
harden authentication and authorization on the user API
|
2026-08-27 11:31:35 +02:00 |
|
|
Jarek Krochmalski
|
5adb374c0d
|
keepass secret provider fails closed when a group cannot be listed
|
2026-08-27 08:10:03 +02:00 |
|
|
Jarek Krochmalski
|
e7ee9b41c7
|
add the emergency relocate/reset-mfa scripts the tests exercise
|
2026-08-27 07:41:02 +02:00 |
|
|
Jarek Krochmalski
|
d34a7733f7
|
validate and canonicalize outbound request hosts
|
2026-08-27 07:34:38 +02:00 |
|
|
Jarek Krochmalski
|
0d516be4dd
|
sort by Disk I/O and Net I/O - the header cycles read/write and down/up
|
2026-08-27 07:34:38 +02:00 |
|
|
Jarek Krochmalski
|
b1e7518096
|
release housekeeping
|
2026-08-27 07:34:38 +02:00 |
|
|
Jarek Krochmalski
|
c7eb8542a1
|
pausing or resuming a backup schedule no longer clears the retention policy
|
2026-08-27 07:34:37 +02:00 |
|
|
Jarek Krochmalski
|
e82b1aea89
|
optional Webhook column on the stacks list with a git stack's webhook id and copy-URL button
|
2026-08-27 07:34:37 +02:00 |
|
|
Jarek Krochmalski
|
b04bc504f9
|
option to disable the session timeout
|
2026-08-27 07:34:37 +02:00 |
|
|
Jarek Krochmalski
|
ef390e94ec
|
internal cleanups and build config
|
2026-08-27 07:34:37 +02:00 |
|
|
Jarek Krochmalski
|
fdca208795
|
git stacks can now set a custom icon
|
2026-08-27 07:34:37 +02:00 |
|
|
Jarek Krochmalski
|
58f712d432
|
environment API uses a write-only model for the tls key and hawser token
|
2026-08-27 07:34:37 +02:00 |
|
|
Jarek Krochmalski
|
bf518f98aa
|
emergency script to relocate stack paths after moving DATA_DIR
|
2026-08-27 07:34:37 +02:00 |
|
|
Jarek Krochmalski
|
9264a53a44
|
compose validate flags a service with no healthcheck and a defined-but-unused named volume
|
2026-08-27 07:34:37 +02:00 |
|
|
Jarek Krochmalski
|
909e9934d3
|
compose generated from a container now captures network config and resource limits
|
2026-08-27 07:34:37 +02:00 |
|
|
Jarek Krochmalski
|
bd42cfaa1b
|
coalesce concurrent secret-provider probes
|
2026-08-27 07:34:37 +02:00 |
|
|
Jarek Krochmalski
|
fa1987add6
|
KeePassXC as a secret provider - pull secrets from a .kdbx via keepassxc-cli, bulk or inline refs
|
2026-08-27 07:34:37 +02:00 |
|
|
Jarek Krochmalski
|
674d80b178
|
release 1.0.44
|
2026-08-25 12:58:22 +02:00 |
|
|
Jarek Krochmalski
|
a4e2637ea5
|
release housekeeping
|
2026-08-25 05:42:29 +02:00 |
|
|
Jarek Krochmalski
|
d5d979aa5d
|
hide tls certificate fields for backends that never use tls
|
2026-08-25 05:42:29 +02:00 |
|
|
Jarek Krochmalski
|
730ad8ff82
|
fix the container backups tab crashing when a container has a mount
|
2026-08-23 19:00:40 +02:00 |
|
|
Jarek Krochmalski
|
8ae0b4367e
|
release housekeeping
|
2026-08-23 12:08:30 +02:00 |
|
|
Jarek Krochmalski
|
49d71c01b6
|
generate a compose file from any container - save as new or append to existing stack
|
2026-08-23 12:08:30 +02:00 |
|
|
Jarek Krochmalski
|
c71d066835
|
release housekeeping
|
2026-08-23 11:00:36 +02:00 |
|
|
Jarek Krochmalski
|
9a7ef9c12c
|
MQTT notification channel - publish events to a broker
|
2026-08-23 11:00:36 +02:00 |
|
|
Jarek Krochmalski
|
bc73e7ba84
|
ci: pin node to 24.18.1 in the openapi check so npm install builds better-sqlite3
|
2026-08-23 10:26:44 +02:00 |
|
|
Jarek Krochmalski
|
40524e0d8d
|
release housekeeping
|
2026-08-23 10:21:00 +02:00 |
|
|
Jarek Krochmalski
|
4af255ebc9
|
clarify stack env-var api docs (git vs internal storage, secret masking)
|
2026-08-23 10:21:00 +02:00 |
|
|
Jarek Krochmalski
|
4ba349113d
|
branch selector on git stack, with per-stack branch override
|
2026-08-23 10:21:00 +02:00 |
|
|
Jarek Krochmalski
|
534ecf4564
|
fix switching an Infisical provider back to a static token
|
2026-08-23 10:21:00 +02:00 |
|
|
Jarek Krochmalski
|
114f21385a
|
sort IPv6 subnets and addresses numerically instead of randomly
|
2026-08-23 10:21:00 +02:00 |
|
|
Jarek Krochmalski
|
2791e8c36d
|
keep specific images from being pruned with a dockhand.prune=false label
|
2026-08-23 10:21:00 +02:00 |
|
|
Jarek Krochmalski
|
70491423dc
|
Pushover notifications can target specific devices
|
2026-08-23 10:20:59 +02:00 |
|
|
Jarek Krochmalski
|
7692758467
|
TLS backup repositories with a private CA and optional mutual TLS
|
2026-08-23 10:20:59 +02:00 |
|
|
Jarek Krochmalski
|
f6ffadbacb
|
stack and container icons - pick an icon per stack or per container (survives recreation), plus automatic app logos on containers
|
2026-08-23 10:20:59 +02:00 |
|
|
Jarek Krochmalski
|
30fb770a9f
|
compose validate: recognize socket proxies and add exposure/volume/deploy rules
|
2026-08-22 17:11:57 +02:00 |
|
|
Jarek Krochmalski
|
b165e4608a
|
branch selector on git stack, with per-stack branch override
|
2026-08-22 17:11:57 +02:00 |
|
|
Jarek Krochmalski
|
3795cecf50
|
git-branch-lookup: docblock says two guards, matching the code
|
2026-08-22 16:24:04 +02:00 |
|
|
Jarek Krochmalski
|
40f6076b8d
|
Proton Pass inline references accept vault and item names, not just ids (pass://vault/item/field)
|
2026-08-22 16:22:18 +02:00 |
|
|
Jarek Krochmalski
|
f1e4af3267
|
Infisical secret references now resolve to their value instead of the raw reference
|
2026-08-22 16:22:18 +02:00 |
|
|
Jarek Krochmalski
|
68821f4d92
|
branch selector on git stack, with per-stack branch override
|
2026-08-22 16:22:18 +02:00 |
|
|
Jarek Krochmalski
|
94f8f52f52
|
release housekeeping for 1.0.44
|
2026-08-22 16:22:18 +02:00 |
|
|
Jarek Krochmalski
|
0885e8245f
|
bump checkout action to v5 for node 24 runners
|
2026-08-22 09:27:23 +02:00 |
|
|
Jarek Krochmalski
|
9700412a8f
|
updated generate-changelog-page.ts
|
2026-08-22 09:25:42 +02:00 |
|
|
Jarek Krochmalski
|
aff8f25d2a
|
internal cleanups and build config
|
2026-08-22 09:10:20 +02:00 |
|
|
Jarek Krochmalski
|
5f9e6bde3c
|
add missing unit test suite
|
2026-08-22 09:09:50 +02:00 |
|
|
Jarek Krochmalski
|
7227b334f9
|
release housekeeping for 1.0.44
|
2026-08-22 09:09:42 +02:00 |
|
|
Jarek Krochmalski
|
e23936b4df
|
azure key vault as a secret provider (bulk pull or inline azurekv:// references)
|
2026-08-22 09:09:41 +02:00 |
|
|
Jarek Krochmalski
|
a760680b8d
|
detect newer version tags for pinned images and show them as a badge with release notes
|
2026-08-22 09:09:41 +02:00 |
|
|
Jarek Krochmalski
|
9977476b15
|
a compose stack with a restarting container shows a stop action instead of start
|
2026-08-22 09:09:30 +02:00 |
|
|
Jarek Krochmalski
|
e68fd2fc0e
|
1password deploys reuse the sdk client to cut api calls
|
2026-08-22 09:09:30 +02:00 |
|
|
Jarek Krochmalski
|
7d45fddad3
|
proton pass secrets resolve on headless hosts with no system keyring
|
2026-08-22 09:09:30 +02:00 |
|
|
Jarek Krochmalski
|
0b294973d8
|
switching an infisical provider back to a static token works again
|
2026-08-22 09:09:30 +02:00 |
|
|
Jarek Krochmalski
|
6f087a3c2a
|
direct-remote staging pulls the alpine helper image when it's missing
|
2026-08-22 09:09:30 +02:00 |
|
|
jarek
|
a485c8580b
|
detect newer version tags for pinned images and show them as a badge with release notes
|
2026-08-20 08:28:26 +02:00 |
|
|
jarek
|
8b67fc0662
|
editing a secret provider no longer wipes its stored token
|
2026-08-20 08:28:26 +02:00 |
|
|
jarek
|
b56e1ef7f9
|
Compose validate - a preflight linter & validator for compose files
|
2026-08-20 08:28:26 +02:00 |
|
|
jarek
|
f8bfd756ef
|
apply the containers:exec permission check to the websocket terminal path
|
2026-08-20 08:28:26 +02:00 |
|
|
jarek
|
f50c3e52f3
|
registry auth survives an http to https token realm redirect behind a TLS proxy
|
2026-08-20 08:28:26 +02:00 |
|
|
jarek
|
3d208e6f22
|
release housekeeping
|
2026-08-20 08:28:25 +02:00 |
|
|
jarek
|
99b1672be5
|
detect newer version tags for pinned images and show them as a badge with release notes
|
2026-08-19 14:26:45 +02:00 |
|
|
jarek
|
29795c074c
|
Bitwarden Secrets Manager as a secret provider via an operator-installed bws client
|
2026-08-19 14:26:45 +02:00 |
|
|
jarek
|
2584e52852
|
Compose validate - a preflight linter & validator for compose files
|
2026-08-19 14:26:45 +02:00 |
|
|
jarek
|
bc91e71075
|
registry auth no longer fails when the token realm redirects http to https behind a TLS-terminating proxy
|
2026-08-19 14:26:45 +02:00 |
|
|
jarek
|
7e2f813438
|
security: update Go to 1.25.13 (8 HIGH stdlib CVEs) and update docker-compose to 5.5.0
|
2026-08-19 14:26:45 +02:00 |
|
|
jarek
|
5f401602bb
|
release housekeeping
|
2026-08-19 14:26:45 +02:00 |
|
|
jarek
|
adabaffb23
|
API: validating a stack's env vars no longer drops the environment id
|
2026-08-18 10:05:37 +02:00 |
|
|
jarek
|
e9b6bf48a7
|
hint that op:// and pass:// references only resolve in the stack env panel
|
2026-08-18 10:05:37 +02:00 |
|
|
jarek
|
e73c7b3d68
|
backup helper wait uses an unbounded deadline
|
2026-08-18 10:05:37 +02:00 |
|
|
jarek
|
f7ca18fa0c
|
container update notifications now fire properly
|
2026-08-18 10:05:37 +02:00 |
|
|
jarek
|
6fe735ad97
|
git stacks accept a compose/env path with a leading slash
|
2026-08-18 10:05:36 +02:00 |
|
|
jarek
|
9b6b6a9d3e
|
Infisical: the project ID is optional when using a service token - it's taken from the token
|
2026-08-18 10:05:36 +02:00 |
|
|
jarek
|
ba1a9588b9
|
detect newer version tags for pinned images and show them as a badge with release notes
|
2026-08-18 10:05:36 +02:00 |
|
|
jarek
|
088c7dc343
|
OpenAPI spec at /api/docs with a Scalar viewer, opt-in via FEAT_API_DOCS
|
2026-08-18 10:05:36 +02:00 |
|
|
jarek
|
1ad16a7c2a
|
Compose validate - a preflight linter & validator for compose files
|
2026-08-18 10:05:36 +02:00 |
|
|
jarek
|
6fab8ec70a
|
release housekeeping
|
2026-08-18 10:05:36 +02:00 |
|
|
Jarek Krochmalski
|
5c0fa6aa91
|
add the missing OpenAPI generator (scripts/generate-openapi.ts + scripts/openapi) so a clean checkout builds
|
2026-08-18 05:12:37 +02:00 |
|
|
jarek
|
0547ca1970
|
adopting a stack over the API rejects a compose path not on Dockhand's filesystem
|
2026-08-17 09:50:35 +02:00 |
|
|
jarek
|
88fa9bcab5
|
backup notifications show a real title and message instead of "undefined"
|
2026-08-17 09:50:35 +02:00 |
|
|
jarek
|
d7c0c88794
|
concurrent git syncs sharing an SSH credential no longer fail on a missing temp key
|
2026-08-17 09:50:35 +02:00 |
|
|
jarek
|
da26f7f764
|
OpenAPI spec at /api/docs with a Scalar viewer, opt-in via FEAT_API_DOCS
|
2026-08-17 09:50:34 +02:00 |
|
|
jarek
|
ba8670af66
|
detect newer version tags for pinned images and show them as a badge with release notes
|
2026-08-17 09:50:34 +02:00 |
|