Update for 1.8.0: encrypted backups, login limits per visitor IP
- Backups: create the age key on your own computer (Windows, macOS,
Linux), enter the public key in the admin, test it, keep the private key
in two places; encrypted-only uploads; changing the key; several keys;
coming from a version before 1.8.0
- Restoring a Backup: private key in the admin, decrypting with age
before a command-line restore, error messages
- Security, Troubleshooting, Own Reverse Proxy: limits per visitor IP,
softer account pause, X-Forwarded-For and TRUST_PROXY
- First Steps, Home: encrypted backups
MrJSA
committed
Nov 2, 2026
Update for 1.7.1: hardened installation, signed updates, Podman/AppArmor
- Installation (Docker and Podman): random database password before the
first start, .env readable by root only, UPDATE_REQUIRE_SIGNED=true,
NO_NEW_PRIVILEGES on for Docker and off for Podman (AppArmor)
- Updates: signature check, private pre-update backups, health check and
automatic rollback, rebuilding the updater, manual update with
signature check, what the update messages mean
- Security: what to do yourself and what the shop protects by itself
- Troubleshooting: shop offline after an update, unhealthy database with
Podman, port 443 in use (COMPOSE_PROFILES=proxy), database password
- Restoring a Backup: restore runs only SQL; file owner after a manual restore
- Release Channels: signed release tags and changing the release key
MrJSA
committed
Nov 2, 2026
Add user guide: installation, first steps, backups, restore, updates, domains, reverse proxy, troubleshooting, security
MrJSA
committed
Oct 27, 2026