v1.73.0

Changelog 1.73.0

New

• Docker: each release is also an image, ghcr.io/jackpison/homebase-hub, for PCs, servers and Raspberry Pi. It holds PHP and Apache, so the site is protected exactly as on a web host. compose.yaml starts it on port 8080; compose.caddy.yaml adds HTTPS from Caddy for your domain.
• Updates in Docker work as on any host: the first start copies the site into a volume, Settings › Updates and Go Back work, and a newer image never replaces a site that is already there.
• A VPS: ready settings for Apache and for nginx in deploy/, and every step on the website's Install page. nginx ignores the .htaccess files, so its file closes site-data and sends the same security headers itself.

Security

• Behind your own proxy: a new setting, HUB_TRUSTED_PROXY, names your proxy's address. Only then does the site believe it about each visitor's address (login limits, Devices) and HTTPS. A visitor who writes these headers themselves is ignored, as before.

Fixes

• Updates: when the site cannot reach its own address from the server (Docker with another port, or a proxy in front), the check after an update asks the web server directly, instead of undoing a good update.