chore: clarify information for proxyConfigMode of ISOLATED

.env.docker

@@ -5,7 +5,7 @@
 /* -------------------------------- Runtime -------------------------------- */
 NEXT_PUBLIC_PANEL_NAME=DOKTAINER
 NEXT_PUBLIC_VERSION=v0.1.0
-NEXT_PUBLIC_BATCH=Batch-20260515
+NEXT_PUBLIC_BATCH=Batch-20260601
 NEXT_PUBLIC_API_PORT=4000
 
 # Leave NEXT_PUBLIC_API_URL empty/unset in monolith Docker deployment so the

.env.example

@@ -6,7 +6,7 @@
 # Frontend runtime
 NEXT_PUBLIC_PANEL_NAME=DOKTAINER
 NEXT_PUBLIC_VERSION=v0.1.0
-NEXT_PUBLIC_BATCH=Batch-20260515
+NEXT_PUBLIC_BATCH=Batch-20260601
 
 # For Docker deployment, leave NEXT_PUBLIC_API_URL unset so the
 # browser uses same-origin /api/v1 and Next proxies it to the backend.

.github/workflows/doktainer-image.yml

@@ -117,7 +117,7 @@ jobs:
             NEXT_PUBLIC_API_PORT=${{ vars.NEXT_PUBLIC_API_PORT || '4000' }}
             NEXT_PUBLIC_PANEL_NAME=${{ vars.NEXT_PUBLIC_PANEL_NAME || 'DOKTAINER' }}
             NEXT_PUBLIC_VERSION=${{ github.ref_type == 'tag' && github.ref_name || github.sha }}
-            NEXT_PUBLIC_BATCH=${{ vars.NEXT_PUBLIC_BATCH || 'Batch-20260515' }}
+            NEXT_PUBLIC_BATCH=${{ vars.NEXT_PUBLIC_BATCH || 'Batch-20260601' }}
 
       - name: Post-push summary
         if: github.event_name != 'pull_request'

Dockerfile

@@ -18,7 +18,7 @@ ARG NEXT_PUBLIC_WS_URL=
 ARG NEXT_PUBLIC_API_PORT=4000
 ARG NEXT_PUBLIC_PANEL_NAME=DOKTAINER
 ARG NEXT_PUBLIC_VERSION=v0.1.0
-ARG NEXT_PUBLIC_BATCH=Batch-20260515
+ARG NEXT_PUBLIC_BATCH=Batch-20260601
 
 ENV NEXT_PUBLIC_API_URL=$NEXT_PUBLIC_API_URL
 ENV NEXT_PUBLIC_WS_URL=$NEXT_PUBLIC_WS_URL

README.id-ID.md

@@ -245,7 +245,7 @@ ENCRYPTION_KEY=replace-this-with-a-secure-32-char-key
 
 NEXT_PUBLIC_PANEL_NAME=DOKTAINER
 NEXT_PUBLIC_VERSION=v0.1.0
-NEXT_PUBLIC_BATCH=Batch-20260515
+NEXT_PUBLIC_BATCH=Batch-20260601
 NEXT_PUBLIC_API_PORT=4000
 ```
 

README.md

@@ -245,7 +245,7 @@ ENCRYPTION_KEY=replace-this-with-a-secure-32-char-key
 
 NEXT_PUBLIC_PANEL_NAME=DOKTAINER
 NEXT_PUBLIC_VERSION=v0.1.0
-NEXT_PUBLIC_BATCH=Batch-20260515
+NEXT_PUBLIC_BATCH=Batch-20260601
 NEXT_PUBLIC_API_PORT=4000
 ```
 

SECURITY.md

@@ -0,0 +1,74 @@
+# Security Policy
+
+Thank you for helping keep Doktainer and its users secure.
+
+## Supported Versions
+
+The following versions currently receive security updates:
+
+| Version                    | Supported |
+| -------------------------- | --------- |
+| Latest Milestone Release   | ✅        |
+| Previous Milestone Release | ✅        |
+| Older Releases             | ❌        |
+
+As Doktainer is currently in the pre-1.0 phase, users are encouraged to always upgrade to the latest available release.
+
+## Reporting a Vulnerability
+
+If you discover a security vulnerability, please do **not** create a public GitHub Issue.
+
+Instead, report the vulnerability privately through:
+
+- GitHub Security Advisories (preferred)
+- GitHub Private Vulnerability Reporting
+
+Please include:
+
+- A description of the vulnerability
+- Steps to reproduce
+- Potential impact
+- Suggested mitigation (if available)
+
+## Response Process
+
+After receiving a report, the Doktainer maintainers will:
+
+1. Acknowledge receipt of the report.
+2. Investigate and validate the issue.
+3. Develop and test a fix.
+4. Release a security update if necessary.
+5. Publicly disclose the vulnerability after a fix is available.
+
+## Scope
+
+Examples of security vulnerabilities include:
+
+- Authentication bypass
+- Privilege escalation
+- Remote code execution
+- Command injection
+- Server-side request forgery (SSRF)
+- Sensitive information disclosure
+- Container escape vulnerabilities
+- Insecure secret handling
+
+## Disclosure Policy
+
+Please allow maintainers a reasonable amount of time to investigate and address reported vulnerabilities before publicly disclosing them.
+
+Responsible disclosure helps protect Doktainer users and infrastructure operators.
+
+## Security Updates
+
+Security fixes may be released as maintenance releases:
+
+- v0.x.1
+- v0.x.2
+- v0.x.3
+
+or, when necessary, included in the next milestone release.
+
+## Acknowledgements
+
+We appreciate responsible security researchers and community members who help improve the security of Doktainer.