Skip to content

SigardaPanel v1.1.0

Choose a tag to compare

@bayurstarcool bayurstarcool released this 09 Oct 18:24
· 132 commits to main since this release

First release published from the clean installer repository. Every asset is covered by SHA256SUMS, which is signed with the minisign key listed in the README; the installer verifies it before installing anything.

Install: see the README. Update an existing install: sudo bash install.sh update (backs up, health-checks, rolls back automatically).

Highlights since v0.5.x

  • Security: non-admin -> root paths closed (docker mounts, app units, nginx/DB injection, git hooks, backup restore); tenant isolation; account lockout; CSP and security headers
  • Web login now supports 2FA and recovery codes; working web terminal; real SMTP email alerts
  • Hardened systemd units; HTTPS-only nginx; no default credentials; member database optional

Older v0.5.x releases were removed because they contain known vulnerabilities.