Skip to content

v0.5.0

Choose a tag to compare

View all tags
@GeiserX GeiserX released this 23 May 11:37
v0.5.0
b92c1ff
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

What's New

Security: Drop privileged mode from all services

  • Set privileged: false across all 10 bandwidth service definitions
  • None of these images require privileged mode (verified against Docker Hub docs)
  • Mysterium correctly uses cap_add: [NET_ADMIN] + host networking (for VPN tunneling) without full privileged access
  • Previously, privileged: true was blocking UI-based deployments since the worker policy layer rejects privileged containers

EarnFM: Rewrite to token-based auth

  • Replaced Supabase email/password authentication with direct API key (EARNFM_TOKEN)
  • The upstream earnfm/earnfm-client image uses a UUID token, not email/password
  • Updated service YAML, collector code, UI hints, docs, and tests
  • Collector is now simpler and more reliable (no Supabase token refresh dance)

Fixes

  • Fixes #58 (EarnFM undeployable due to privileged: true)
  • Fixes #59 (wrong env vars for EarnFM container)
Assets 2
Loading