Skip to content

v1.1.0 — accuracy pass and hardened MCP linter

Latest
Latest

Choose a tag to compare

View all tags
@UniversalSyntropy UniversalSyntropy released this 12 Jun 19:47
· 2 commits to main since this release
v1.1.0
465a6a4

Full-repo review and fix pass. Highlights:

Fixed

  • Pi-hole recipe: v5 env vars on a v6 image (WEBPASSWORD_FILE semantics, FTLCONF_dns_upstreams)
  • Traefik recipe: healthcheck could never pass (--ping=true was missing)
  • Image pins with known CVEs or EOL: redis 7.4.9, traefik v3.6.2, nextcloud 32, mariadb 11.8 LTS, pihole 2026.05
  • Env-var precedence, volume-prune semantics (Engine 23+), CIS control numbers, dead links
  • MCP linter: password regex no longer flags compliant secrets blocks; untagged images now flagged; hardened path validation

Added

  • Best practices: privilege-dropping entrypoint gotcha (§3.2), hardening verification checklist (§3.10), VPN-sidecar pattern (§7.6), deploy.resources syntax, shm_size guidance
  • CI smoke test for the MCP server; healthcheck start_interval; review report under docs/reviews/
  • README: dual human/agent purpose and a currency note

See CHANGELOG.md for the full list.

Assets 2
Loading