 Matthew Meszaros
|
a962683511
|
feat: ship AWS's RDS truststore in the backend and consumer images and point the docs at it, because Amazon RDS chains to a root that is in no public trust store so the sslmode=verify-full those docs recommended failed every connection with x509 certificate signed by unknown authority, while deliberately not setting PGSSLROOTCERT by default since an RDS-only store would break a Postgres fronted by a public CA
|
2026-09-11 05:23:23 +02:00 |
|
|
Matthew Meszaros
|
512451c8d6
|
feat: give every BuildKit cache mount an explicit id so the Dockerfiles build on hosted builders that reject an unnamed one, which is what stopped the backend, consumer, worker, forms, cli, updater and tracking images from building on Railway with 'flag --mount=type=cache is missing an id argument'
|
2026-09-10 19:05:01 +02:00 |
|
|
Matthew Meszaros
|
b2ea1f1961
|
feat: add self-hosted update awareness and one-click updates: every binary is stamped with its version and commit, the backend polls GitHub Releases and a new host-side updater (cmd/updater, compose profile or systemd unit) reports the checkout's commit distance, the admin panel's top bar shows a version pill that turns into an update indicator and opens a dialog with confirmation, live step progress and log, restart tracking and result, the dashboard header shows the same pill to every member of a self-hosted instance with the full update flow for platform admins, Setup and health gains update_available and updater_unreachable checks, warmblyctl status prints the version, make upgrade and scripts/upgrade-bare-metal.sh cover the by-hand paths, and docs gain an Updates page plus configuration, health, deployment and API reference updates
|
2026-09-03 05:04:30 -07:00 |
|
|
Matthew Meszaros
|
ee61c19faf
|
feat: create /data/blobs in the backend, consumer and worker images owned by the non-root user they run as, because Docker seeds a fresh named volume from the image and the path did not exist there, so it created the mount point root:root while every service runs as uid 1000 and the very first attempt to store an outbound body failed with 'mkdir /data/blobs/emails: permission denied' and the task went to the dead-letter queue, which is invisible until a real send is attempted since the stack is otherwise healthy, and documenting the one-time chown that existing installs still need because Docker only applies image ownership when it first creates the volume (#124)
|
2026-08-16 07:46:22 +02:00 |
|
|
Matthew Meszaros
|
bebc09289d
|
build: cross compile the go images and fix realtime and the healthchecks
|
2026-07-21 17:34:59 +02:00 |
|
|
Matthew Meszaros
|
a419bde824
|
build: make the docker images cgo-free and cache-mounted so builds are fast
|
2026-07-20 09:56:47 +02:00 |
|
|
Matthew Meszaros
|
d9dba1fd49
|
refactor: drop buildkit cache-mount optimization, dockerfiles work on legacy builds
|
2026-05-25 04:14:46 +00:00 |
|
|
Matthew Meszaros
|
becb8f2d10
|
build: share go build cache across worktrees, parallelize restart-go
|
2026-05-25 02:55:36 +00:00 |
|
|
Matthew Meszaros
|
141bc54974
|
Add sample auth UI theme
|
2026-02-10 19:30:47 +01:00 |
|
|
Máté Mészáros (Laptop)
|
06545bb799
|
Fix: Docker build issues
|
2026-01-30 04:52:40 +01:00 |
|
|
Máté Mészáros (Laptop)
|
7ed5719c15
|
Config & Deploy
|
2026-01-29 08:50:38 +01:00 |
|