v0.4.3

Beacon v0.4.3

Recommended patch (not a beta experiment). Tighten login, sockets, files, and
worker env so a session or viewer cannot reach more than they should.

• Login and recovery are rate-limited per IP and username (delay, then lockout).
• X-Forwarded-For is only trusted from loopback or SYSTEMDASH_TRUSTED_PROXIES.
• WebSockets re-check the session; logout, demotion, or user delete drops the socket.
• Viewers cannot read Beacon data dirs or .ssh.
• Worker and compose processes inherit a small host env, not the full service env.
• Admins can reset a user’s password from Users.

Workers without an image now pick a Dockerfile or a language image from the
project folder.

Upgrade from v0.4.2-beta

In the app: Updates → Beacon → install v0.4.3.

Or on the server:

export SYSTEMDASH_HOME=/opt/systemdash
bash /opt/systemdash/current/scripts/install-release.sh VikPraet/systemDash v0.4.3
sudo systemctl restart systemdash

Full Changelog: v0.1.9...v0.4.3