Dockora 2.0.63

Dockora 2.0.63

Security

• Role and password changes bump a session version so older JWTs stop working
• Auth-enabled cache cannot restore a stale “off” after a concurrent toggle
• Terminal WebSockets require an allowed Origin (especially with embed cookies)
• Container remove no longer deletes Compose project folders unless explicitly requested
• Viewer container labels are fully redacted; Compose env file names stay operator-only
• Notification mark-read is operator-only; proxy strips ?token= from upstream queries

Fixed

• Container log SSE writes an error event instead of hanging after hijack
• Compose YAML/env edits and pinned recreates share a per-project lock
• Image updates refuse a second apply while one is already in flight
• Nav and global search hide operator/admin destinations from viewers

Install

wget -qO- https://raw.githubusercontent.com/MarcelRuh/dockora/main/scripts/install.sh | bash

Images: ghcr.io/marcelruh/dockora-api:2.0.63 / ghcr.io/marcelruh/dockora-web:2.0.63

Dockora 2.0.62

Dockora 2.0.62

Performance

• Docker health_status events no longer flush list, compose, or dashboard caches
• Home relies on Docker live reload instead of a 30s full poll; URL discovery is cached and scanned in parallel
• Container list loads stats in one request; stats warmer and monitoring polls are slower
• Settings reads share a short TTL cache; backup lists are capped; dashboard SSE/overview TTL is gentler

Install

wget -qO- https://raw.githubusercontent.com/MarcelRuh/dockora/main/scripts/install.sh | bash

Images: ghcr.io/marcelruh/dockora-api:2.0.62 / ghcr.io/marcelruh/dockora-web:2.0.62

Dockora 2.0.61

Dockora 2.0.61

Fixed

• The module sidebar stays hidden on the home dashboard even when the path check alone is not enough

Install

wget -qO- https://raw.githubusercontent.com/MarcelRuh/dockora/main/scripts/install.sh | bash

Images: ghcr.io/marcelruh/dockora-api:2.0.61 / ghcr.io/marcelruh/dockora-web:2.0.61

Dockora 2.0.60

Dockora 2.0.60

Fixed

• A home-layout conflict reloads the remote layout instead of overwriting it
• Compose YAML and env saves refuse a stale base hash with HTTP 409
• Global search is a combobox with arrow-key navigation
• Settings desktop tabs and the engine dialog expose correct ARIA roles
• Network map zoom controls use localized labels
• Dependabot watches Dockerfiles under /docker

Install

wget -qO- https://raw.githubusercontent.com/MarcelRuh/dockora/main/scripts/install.sh | bash

Images: ghcr.io/marcelruh/dockora-api:2.0.60 / ghcr.io/marcelruh/dockora-web:2.0.60

Dockora 2.0.59

Dockora 2.0.59

Fixed

• Viewers can no longer read Compose env discovery, Docker socket paths, plugin dirs, or compose working-dir labels
• Operators cannot run backup or cleanup jobs; those stay admin-only
• The update-check interval in settings drives the scheduler cron
• Registry digest checks share one request per canonical image reference
• Operators see masked registry tokens instead of empty fields
• Home unhealthy alerts, monitoring alerts, progress bars, and menu targets are named for assistive tech

Install

wget -qO- https://raw.githubusercontent.com/MarcelRuh/dockora/main/scripts/install.sh | bash

Images: ghcr.io/marcelruh/dockora-api:2.0.59 / ghcr.io/marcelruh/dockora-web:2.0.59

Dockora 2.0.58

Dockora 2.0.58

Fixed

• A registry rate limit keeps the last known image digest instead of leaving a standing error
• GHCR and lscr.io checks wait once for Retry-After instead of repeating the same pull

Install

wget -qO- https://raw.githubusercontent.com/MarcelRuh/dockora/main/scripts/install.sh | bash

Images: ghcr.io/marcelruh/dockora-api:2.0.58 / ghcr.io/marcelruh/dockora-web:2.0.58

Dockora 2.0.57

Dockora 2.0.57

Changed

• Login lockout follows the account, so a new forwarded address does not reset it
• X-Forwarded-For is trusted only from loopback and private peers

Install

wget -qO- https://raw.githubusercontent.com/MarcelRuh/dockora/main/scripts/install.sh | bash

Images: ghcr.io/marcelruh/dockora-api:2.0.57 / ghcr.io/marcelruh/dockora-web:2.0.57

Dockora 2.0.56

Dockora 2.0.56

Changed

• Viewers no longer receive volume mount paths, Compose directories, or install paths
• Public URLs drop secret-looking path segments as well as credentials and query values
• Event streams ignore ?token= and use the session cookie or Authorization header
• Map controls are 44px and named; small buttons grow to 44px on coarse pointers
• Dependabot updates Prisma CLI and client in one pull request

Install

wget -qO- https://raw.githubusercontent.com/MarcelRuh/dockora/main/scripts/install.sh | bash

Images: ghcr.io/marcelruh/dockora-api:2.0.56 / ghcr.io/marcelruh/dockora-web:2.0.56

Dockora 2.0.55

Dockora 2.0.55

Changed

• Viewers no longer receive container commands, mount paths, label dumps, or backup file paths
• Saved home addresses drop credentials and query secrets for viewers
• A home layout reload ignores a response that started before the latest save
• Tabs name their panels, the home search moves with the keyboard, and checkbox columns have a name

Install

wget -qO- https://raw.githubusercontent.com/MarcelRuh/dockora/main/scripts/install.sh | bash

Images: ghcr.io/marcelruh/dockora-api:2.0.55 / ghcr.io/marcelruh/dockora-web:2.0.55

Dockora 2.0.54

Dockora 2.0.54

Changed

• Container env, logs, volume browse and public URL secrets stay with operators
• Home layout edits survive a reload while they are still saving
• Dialogs trap focus; errors and tabs announce their state

Install

wget -qO- https://raw.githubusercontent.com/MarcelRuh/dockora/main/scripts/install.sh | bash

Images: ghcr.io/marcelruh/dockora-api:2.0.54 / ghcr.io/marcelruh/dockora-web:2.0.54