Repository navigation

feat: installer hardening flags and one source for pinned versions - #49

Merged

agentHits merged 33 commits into

AgentHits-Devfrom

feat/server-hardening-pinned-versions

Oct 8, 2026

Merged

feat: installer hardening flags and one source for pinned versions#49
agentHits merged 33 commits into
AgentHits-Devfrom
feat/server-hardening-pinned-versions

Commits on Oct 8, 2026
- feat: installer hardening flags and one source for pinned versions
  
  agentHits
  and
  claude
  committed
  f6eeccf
- docs: describe the panel machine generically in the hardening runbook
  agentHits
  committed
  8a78f36
- feat(db): default Railpack version for new applications to 0.40.1
  
  agentHits
  and
  claude
  committed
  0f75632
- docs: update the hardening runbook to the current Traefik pin
  
  agentHits
  and
  claude
  committed
  f274ba5
- test: give the subprocess settings tests a 30s timeout
  
  agentHits
  and
  claude
  committed
  5afd651
- fix(update): roll back a failed panel self-update
  
  agentHits
  and
  claude
  committed
  20216c0
- feat(update): pre-download components before the update changes anything
  
  agentHits
  and
  claude
  committed
  1974a46
- feat(update): read the panel update outcome from swarm
  
  agentHits
  and
  claude
  committed
  0a4a72a
- feat(update): update the panel host stack in dependency order
  
  agentHits
  and
  claude
  committed
  228da6c
- docs: describe the update order, rollback and backups
  
  agentHits
  and
  claude
  committed
  a364baa
- refactor(update): name the new operator settings after the panel
  
  agentHits
  and
  claude
  committed
  ca366f3
- fix(update): keep the Postgres backup readable by root only
  
  agentHits
  and
  claude
  committed
  1c67146
- fix(update): refuse a Postgres major version change before anything runs
  
  agentHits
  and
  claude
  committed
  5f99a67
- fix(update): set the backup directory mode with an explicit chmod
  
  agentHits
  and
  claude
  committed
  f0084e8
- fix(update): pin Docker in update.sh to the shared version
  
  agentHits
  and
  claude
  committed
  e442554
- feat(update): roll back the panel host Docker engine upgrade
  
  agentHits
  and
  claude
  committed
  b73097e
- feat(servers): install the pinned Docker from apt with rollback
  
  agentHits
  and
  claude
  committed
  97320df
- feat(servers): make the Docker Engine upgrade opt-in in the Components dialog
  
  agentHits
  and
  claude
  committed
  2b92166
- docs: document Docker engine upgrade and rollback
  
  agentHits
  and
  claude
  committed
  2d57262
- fix(update): set the Traefik restart policy before the swap stops the old container
  
  agentHits
  and
  claude
  committed
  422f343
- fix(servers): skip only the Docker step on Docker-specific pre-download failures
  
  agentHits
  and
  claude
  committed
  c0b76c9
- fix(update): pass the same settings through the WSL launcher as through macOS
  
  agentHits
  and
  claude
  committed
  2e8a971
- fix(servers): leave the host as it was when a later Docker step fails
  
  agentHits
  and
  claude
  committed
  009b6bd
- fix(update): remove the saved-packages directory when Docker is skipped or the update aborts
  
  agentHits
  and
  claude
  committed
  9f37d61
- fix(update): replace the Traefik swap that renamed the running container
  
  agentHits
  and
  claude
  committed
  d86d18b
- fix(servers): fail the Nixpacks and Railpack updates when their install script does not download
  
  agentHits
  and
  claude
  committed
  c517f61
- docs: describe the Traefik replacement without renaming
  
  agentHits
  and
  claude
  committed
  f7fa0c3
- fix(servers): fail the server setup when the Nixpacks or Railpack install script does not download
  
  agentHits
  and
  claude
  committed
  65da65a
- fix(update): fail the installer when the Nixpacks or Railpack install script does not download
  
  agentHits
  and
  claude
  committed
  e84c654
- test(servers): check that failed Buildpacks and RClone downloads fail the update
  
  agentHits
  and
  claude
  committed
  2ea6bf6
- fix(update): reset Traefik's restart policy before the Docker rollback starts it
  
  agentHits
  and
  claude
  committed
  6adc198
- fix(update): verify Docker within its own window, 30 s on remote servers and 120 s on the panel host
  
  agentHits
  and
  claude
  committed
  d08ed84
- fix(update): poll the new Traefik during the settle time and stop at the first failed check
  
  agentHits
  and
  claude
  committed
  9da23cc

Commits

Commits on Oct 8, 2026