Release Collabhost v1.9.0 · MrBildo/collabhost

Collabhost v1.9.0

Windows install hardening and parity, a read-only control-plane key tier, and stricter startup validation.

Windows system service now runs under a dedicated, least-privilege virtual account instead of LocalSystem — a tighter security posture for system-scope installs, on par with the Linux service story.
New -RegisterUserService install option for Windows user-scope, service-managed installs — a native PowerShell service-registration path, no third-party tooling required.
Read-only / scoped control-plane key tier — a new key that can observe the platform (system status, the app list, and app detail) without start/stop/kill, registration, or settings authority — and without the secret-bearing reads (logs, settings, activity events). For monitoring and lower-trust integrations. Read-only keys are minted through the REST API and MCP today.
Stricter app registration — unknown capability sections are now rejected at registration time, rather than being silently ignored.
Admin-key validation at startup — a misconfigured admin key now fails loudly and early instead of silently.

Alternate-ports deployments no longer have the automatic HTTPS :80 redirect forced on them, so custom-port setups behave correctly.

The environment variable that overrides the bundled proxy binary path has been renamed COLLABHOST_CADDY_PATH → COLLABHOST_PROXY_BINARY_PATH (part of decoupling the platform from a specific proxy vendor). The old name is no longer read. If you set COLLABHOST_CADDY_PATH anywhere — an environment file, a systemd unit Environment=, or a startup wrapper — rename it before upgrading, or the override goes silently inert and the proxy falls back to its default binary path.

Ships Caddy 2.11.4, unchanged from v1.8.0. This is the latest upstream Caddy release; the pre-release advisory review found no security bump required this cycle.

Each release archive ships a platform-specific INSTALL.md with the full steps.