Skip to content

Flixbox v0.1.1

Choose a tag to compare

View all tags
@aleaz aleaz released this 12 Sep 15:42
· 33 commits to main since this release
v0.1.1
32170d6

Flixbox v0.1.1 — release notes

Status: Published — first public GitHub Release (v0.1.1, 2026-09-12).
Tag: v0.1.1
Commit: 32170d6

The prepared v0.1.0 notes were used as the release body; the published tag is v0.1.1 after release-workflow Trivy policy commits. There is no separate v0.1.0 tag.

Highlights

  • Modular Compose stack with FLIXBOX_MODE Direct/VPN dual-mode
  • bin/flixbox — init, up, configure, reload, status, vpn-test, credentials, …
  • API-assisted first-run (configure); indexers and Maintainerr rules stay manual
  • LAN access profiles: trusted (default) / shared (Forms + localhost admin bind) — ADR 0015
  • FLIXBOX_PUBLIC_HOST syncs Homepage LAN hrefs, HOMEPAGE_ALLOWED_HOSTS, and empty JELLYFIN_PUBLISHED_URL
  • Jellyfin LocalNetworkAddresses :: footgun cleared by configure
  • Full Spanish user guide mirror (docs/es/user/) + lawful-use disclaimer EN/ES
  • Pinned image tags — 14 — Image pins

First install

git clone https://github.com/aleaz/flixbox.git
cd flixbox
cp .env.example .env
# Edit DATA_DIR, CONFIG_DIR, FLIXBOX_MODE, TZ; optional FLIXBOX_ACCESS_PROFILE=shared
# Optional LAN: FLIXBOX_PUBLIC_HOST=192.168.x.x
./bin/flixbox init --non-interactive
./bin/flixbox up
./bin/flixbox configure

Shared Wi‑Fi: ./bin/flixbox credentials set arr-ui --generate — Access profiles.

Operator verification

Linux smoke (recorded against live stack + ./scripts/smoke-test.sh run):

FLIXBOX_MODE: direct + vpn exercised
FLIXBOX_ACCESS_PROFILE: trusted + shared exercised
Phase A–C: pass
Phase Bʹ shared: pass
Phase D VPN: pass
Phase F E2E (Seerr → play): pass

Checklist: 06-development-guide.md · 11-smoke-test.md.

Known limitations

  • Optional P2 UI story stills (docs/images/en/seerr-request.png, jellyfin-library.png) not required for tag
  • Remote / WAN access not in scope (no env switch)
  • No “Forms + LAN publish” profile yet (password on Wi‑Fi without localhost-only bind) — roadmap v0.4
  • Servarr Forms users are not seeded by configure (use credentials set arr-ui under shared)
  • Caddy proxy profile is LAN-oriented; do not publish to WAN without additional auth
  • Release workflow runs Trivy CRITICAL as a report (non-blocking): upstream Decluttarr/Homepage/etc. images still ship OS/npm CRITICAL CVEs Flixbox cannot patch; .trivyignore tracks known Homepage tar CVE until the next pin

Related

Assets 2
Loading