v1.7.0

Docker Commander 1.7.0 is about safe changes: see what a deploy will do, check it against your rules, keep a history, and go back when something breaks.

Safe changes

• Deploy Preview. Before a deploy, see per service what changes (image and digest, env, ports, volumes, networks, restart policy, resources, healthcheck) and whether the container will be recreated.
• Drift detection. Compare the compose files with what actually runs. Ignore a reviewed change, or Reconcile now.
• Deployment revisions and rollback. Every successful deploy is a revision: files, profiles and the image digests that ran. Restore checks the revision on the side first, then swaps it in; a failure puts everything back.
• Policy checks before deploy. Seven rules (privileged, host network, host PID, Docker socket, :latest, no limits, no healthcheck), each Off, Warn or Block.
• Project secrets. Encrypted at rest, write-only, and masked wherever a deploy shows its output.
• Controlled image updates, phase 1. A periodic check spots a newer image behind a running tag and raises an alert.

Operations

• Domain mappings and an embedded reverse proxy with automatic Let's Encrypt certificates, per project.
• Volume backup jobs. Run your own backup command (restic, borg, …) on a schedule, with status and history.
• Portable recovery bundle. Move projects, hosts, registries and alert rules to another instance, with a compatibility check.
• Maintenance windows. Silence alert delivery during planned work; every deploy silences its own project for a moment.
• Automatic HTTPS via ACME for Docker Commander itself.
• Self-update auto-apply, opt-in, with a cap you choose: patch, minor, or every release.

Observability and alerts

• Resources page. CPU, memory and network per container and stack, plus a disk breakdown of images, volumes and build cache.
• Network alert rules and Top talkers.
• Alert delivery retry, and a cleaner alert feed with repeats folded.
• Troubleshooting checks the Docker networks, ports, log rotation, MTU and the host's disk.
• Data retention for alerts, audit log and revisions.

Security and access

• Change your own password, and passkey-only accounts work end to end.
• Per-session MCP revocation, and every MCP write is audited and rate limited.
• Read-only accounts can't download raw content (exports, files, image saves).
• Builds and deploys use the credentials stored under Registries, and a build sends the daemon only the registries its Dockerfile uses.
• Many fixes from a full review: localhost 2FA exemption behind a proxy, fail-closed policy rules, recovery-import validation, one operation at a time per project, and more.

Before you upgrade

• Data retention is on by default. The first purge after upgrading deletes alert events and deliveries older than 90 days, audit entries older than 365 days, and all but the newest 50 revisions per project. Change or disable it in Settings → Data retention right after upgrading if you need more.
• The user manual in docs/ was rewritten with common tasks for every page.

Everything else (over 80 entries): CHANGELOG.md