Update for 1.7.1: hardened installation, signed updates, Podman/AppArmor
- Installation (Docker and Podman): random database password before the
first start, .env readable by root only, UPDATE_REQUIRE_SIGNED=true,
NO_NEW_PRIVILEGES on for Docker and off for Podman (AppArmor)
- Updates: signature check, private pre-update backups, health check and
automatic rollback, rebuilding the updater, manual update with
signature check, what the update messages mean
- Security: what to do yourself and what the shop protects by itself
- Troubleshooting: shop offline after an update, unhealthy database with
Podman, port 443 in use (COMPOSE_PROFILES=proxy), database password
- Restoring a Backup: restore runs only SQL; file owner after a manual restore
- Release Channels: signed release tags and changing the release key
MrJSA
committed
Nov 2, 2026
Podman: allow container DNS through the firewall, connectivity test, port and domain notes
MrJSA
committed
Oct 28, 2026
Reporting Issues, Release Channels, Installation with Podman (Caddy as reverse proxy)
MrJSA
committed
Oct 28, 2026
Add user guide: installation, first steps, backups, restore, updates, domains, reverse proxy, troubleshooting, security
MrJSA
committed
Oct 27, 2026