Skip to content

v1.2.0

Choose a tag to compare

@nopoz nopoz released this 30 May 01:15
· 10 commits to main since this release
dd12f7b

What's new

Secure backup file permissions

Exports now default to a 077 umask, so backup files (.env, stack metadata, compose) are written owner-only (600) instead of world-readable 644. Override with PORTAINER_BACKUP_UMASK (for example 027 for group read).

Container file ownership (PUID/PGID)

Set PUID and PGID to own the exported files as a specific user. The container reconciles the existing backup tree (ownership and modes) and drops privileges via su-exec before running, so a legacy root-owned tree is normalized on the first run. Left unset, it runs as root as before, so existing deployments are unaffected.

Timestamped logs

Console output and entrypoint messages now carry timestamps, so docker logs shows when each line, and the last scheduled cron run, executed. Timestamps honor the container TZ.

Other

  • README badges now link to their targets (#8).

Full changelog: v1.1.1...v1.2.0