v0.1.0

Features

• Cargo crate skeleton, CI and lint setup (1141152)
• Load and validate hoster.toml with HOSTER_* env overrides (8c2467a)
• Stack file model, TOML parsing and validation (1d94457)
• ACME account management with instant-acme (4bb1c52)
• Hoster doctor preflight checks (278ea9f)
• SQLite state store via sqlx with migrations and typed Store API (92824dc)
• Supervisor with startup phases, signal handling and sd_notify (ab03c6e)
• Route normalization and cross-stack collision check (088b3ba)
• Upstream port allocator with round-robin policy and quarantine (4bff3c4)
• ContainerRuntime trait, PodmanRuntime connect and FakeRuntime (c5004e3)
• Systemd user unit, sysctl drop-in, install guide and hardening (e426754)
• Hoster backup db snapshot command and backup docs (01b3d96)
• Axum admin web app skeleton with askama layout, vendored htmx 4 and strict CSP (2fa79e8)
• Run Pingora server on a dedicated thread with channel-driven shutdown (638cd7c)
• RouteTable with longest-segment-prefix lookup built from desired state (b907cc0)
• Image pull by digest with optional per-registry credentials (8877978)
• Podman network and container operations with hoster labels and loopback ports (b9fcea2)
• On-disk certificate store, CertMap and SNI CertResolver (4752f37)
• GitHub OAuth admin login, SQLite sessions and CSRF protection (4c7d252)
• OCI registry client with token discovery and tag-to-digest resolution (bd411c4)
• Routing ProxyHttp with forwarded headers, strip_prefix, per-route timeouts and streaming (dd3e2f2)
• Drain helper for per-upstream in-flight requests (2e6b975)
• Orchestrator and deploy engine v1 with the full deploy state machine (fedf4d6)
• Stream container logs into the web UI over SSE (3deadb2)
• :443 rustls listener and :80 challenge/redirect service (1a1b797)
• Structured JSON logging, proxy access log and deploy event log (a985f6a)
• Env, encrypted secrets and named volumes in deployed containers (d4422f3)
• Health checker with HTTP and TCP probes (30ff3f3)
• Stack removal that aborts deploys, keeps history and confirms volume deletion (62ffb4a)
• HTTP-01 certificate issuance flow (1dd5195)
• Startup and periodic reconciliation of managed containers (0a5e961)
• Web UI stack pages: list, apply with validation and diff, manual deploy, remove (9eb68e5)
• Continuous health monitoring of live services (c9662b9)
• Publish RouteTable from the orchestrator on deploy, remove and reconcile (3a03a8e)
• Route the reserved admin host from Pingora to the Axum app (5d94507)
• Zero-downtime deploys with real health probes, inflight drain and crash recovery (19bd800)
• Web UI for stack secrets, registry credentials and re-resolving tags (4c30cb7)
• ACME background task with renewal, persisted backoff and DNS check (42b76bd)
• Deploy webhook authenticated with GitHub Actions OIDC tokens (5bc36d3)
• Per-stack deploy queue with cancellation and a global pull limit (adabed0)
• In-process statistics for the web UI dashboard (77d42d0)
• Certificates page with DNS check and rate-limit-safe retry (b87a2d6)
• Image garbage collection with per-service rollback retention (f2fc666)
• Edge-triggered digest poller (e2f8131)
• Deployment history with live progress, cancel and rollback in the web UI (a7ac15e)
• Live dashboard overview with warning badges (3c22b51)
• store: Make every migration reversible and report schema versions (d394cfe)
• Versioned binary layout under ~/.local/lib/hoster and hoster version --json (75b7896)
• update: Updater module with release lookup, verified download, switch and rollback (c3073c9)
• install: Curlable install.sh, shellcheck in CI and an install guide built around it (a98a27e)
• update: hoster update and hoster rollback CLI subcommands (bb0a539)
• web: System page with version, update check, release notes and Update (e6487ed)

Documentation

• Initial specification, architecture, stack format and ADRs 0001–0051 (2d92bca)
• Spike systemd socket activation for :80/:443 across restarts (61a9b2a)
• CI integration guide and example release workflow (6c0a54e)
• ADR-0052 release, install and self-update; plan M9 in Bears (a8d804b)
• Branch per epic, commit per task, rebase-merged PRs (7d5e2e2)
• Cut releases through a PR now that main is protected (d30a8ef)

Other

• Ignore per-slot target dirs (b4a0fce)
• Static musl release build and tag-triggered release workflow (a4dfa30)
• Ignore agent worktrees, release interrupted Bears tasks (90c1aac)
• End-to-end zero-downtime deploy under load on real podman (d52b8e4)
• Cover the stop-first Replacing step, its 503 gap and the abort path (4e2c748)
• Make gated podman tests runnable alongside the rest of the suite (93d6b90)
• Run on push only for main; branches are checked through their PR (723bea5)
• Aarch64 release binaries, git-cliff notes and a PR-based release.sh (0f0eb8a)