Flixbox v0.2.0

Flixbox v0.2.0 — release notes

Status: Published — GitHub Release (v0.2.0).
Tag: v0.2.0
Baseline: builds on v0.1.1

Highlights

• CLI contract (ADR 0021): version, doctor, status --json, lifecycle backup / restore / update, recyclarr sync / sync-profiles, bash/zsh completions, exit taxonomy 2–6 on operator paths, global --no-color
• Doctor FS guards: hardlink probe on DATA_DIR; refuse NFS/SMB/9p on CONFIG_DIR; exFAT / WSL mount checks. Host port preflight stays on up / reload (not doctor)
• Notifications (ADR 0012): optional Compose profile notifications → Apprise API with loopback host UI; configure wires Radarr/Sonarr Connect (destinations stay manual) — 18 — Notifications
• VPN resilience (ADR 0013): Gluetun HEALTH_* knobs; optional profile vpn-heal (gluetun-monitor + dedicated POST/EXEC socket-proxy). Requires FLIXBOX_MODE=vpn. Never auto-switches to Direct — 07 — VPN
• configure: clears Jellyfin LocalNetworkAddresses when it is only :: (restart/wizard footgun) — Troubleshooting
• CLI --env-file / --project-dir remain out of scope (one stack per checkout). Digest pins stay advanced/optional (version tags are the default UX)

Upgrade from v0.1.1

git pull
./bin/flixbox update          # pull pinned tags + reconcile
# Optional:
./bin/flixbox up notifications
# VPN mode only:
./bin/flixbox up vpn-heal

Review .env.example for new HEALTH_* / VPN_HEAL_* comments and profile list.

Security notes

• Homepage continues to use a read-only Docker socket-proxy.
• vpn-heal adds a separate proxy with POST/EXEC (container restart/recreate/exec). Leave off unless you need stranded-qBit recovery after Gluetun recreate. Prefer FLIXBOX_MODE=vpn only.
• Apprise UI publishes on 127.0.0.1 only by default (no app auth). The CLI refuses non-loopback APPRISE_BIND_IP when enabling notifications (exit 4).
• Assisted configure may create a temporary opaque public ntfy seed (${CONFIG_DIR}/apprise/.flixbox-seed-url) so *arr Connect Test works — replace destinations before trusting events.

Docs

• English canonical user guide; Spanish mirror updated for notifications / VPN heal / CLI.
• Image pins: 14 — Image pins

Explicitly not in this release

• Global -q/-v, fish completions
• CLI --env-file / --project-dir
• Default digest (@sha256:) pins
• v0.3 media profiles (SABnzbd, Lidarr, …)

Flixbox v0.1.1

Flixbox v0.1.1 — release notes

Status: Published — first public GitHub Release (v0.1.1, 2026-09-12).
Tag: v0.1.1
Commit: 32170d6

The prepared v0.1.0 notes were used as the release body; the published tag is v0.1.1 after release-workflow Trivy policy commits. There is no separate v0.1.0 tag.

Highlights

• Modular Compose stack with FLIXBOX_MODE Direct/VPN dual-mode
• bin/flixbox — init, up, configure, reload, status, vpn-test, credentials, …
• API-assisted first-run (configure); indexers and Maintainerr rules stay manual
• LAN access profiles: trusted (default) / shared (Forms + localhost admin bind) — ADR 0015
• FLIXBOX_PUBLIC_HOST syncs Homepage LAN hrefs, HOMEPAGE_ALLOWED_HOSTS, and empty JELLYFIN_PUBLISHED_URL
• Jellyfin LocalNetworkAddresses :: footgun cleared by configure
• Full Spanish user guide mirror (docs/es/user/) + lawful-use disclaimer EN/ES
• Pinned image tags — 14 — Image pins

First install

git clone https://github.com/aleaz/flixbox.git
cd flixbox
cp .env.example .env
# Edit DATA_DIR, CONFIG_DIR, FLIXBOX_MODE, TZ; optional FLIXBOX_ACCESS_PROFILE=shared
# Optional LAN: FLIXBOX_PUBLIC_HOST=192.168.x.x
./bin/flixbox init --non-interactive
./bin/flixbox up
./bin/flixbox configure

Shared Wi‑Fi: ./bin/flixbox credentials set arr-ui --generate — Access profiles.

Operator verification

Linux smoke (recorded against live stack + ./scripts/smoke-test.sh run):

FLIXBOX_MODE: direct + vpn exercised
FLIXBOX_ACCESS_PROFILE: trusted + shared exercised
Phase A–C: pass
Phase Bʹ shared: pass
Phase D VPN: pass
Phase F E2E (Seerr → play): pass

Checklist: 06-development-guide.md · 11-smoke-test.md.

Known limitations

• Optional P2 UI story stills (docs/images/en/seerr-request.png, jellyfin-library.png) not required for tag
• Remote / WAN access not in scope (no env switch)
• No “Forms + LAN publish” profile yet (password on Wi‑Fi without localhost-only bind) — roadmap v0.4
• Servarr Forms users are not seeded by configure (use credentials set arr-ui under shared)
• Caddy proxy profile is LAN-oriented; do not publish to WAN without additional auth
• Release workflow runs Trivy CRITICAL as a report (non-blocking): upstream Decluttarr/Homepage/etc. images still ship OS/npm CRITICAL CVEs Flixbox cannot patch; .trivyignore tracks known Homepage tar CVE until the next pin

Related

• Prior draft notes: v0.1.0-notes.md (historical; superseded by this tag)
• Roadmap next: 08-roadmap.md (v0.2)