Skip to content

nodePass 0.1.1

Choose a tag to compare

View all tags
@github-actions github-actions released this 27 Oct 16:15
Immutable release. Only release title and notes can be modified.
nodepass-v0.1.1
203508a
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Changed

  • Trusted reverse proxies can be configured by DNS name as well as IP address or CIDR. Names are resolved for incoming forwarded requests, allowing first deployment and proxy IP changes without manually discovering container addresses. Missing DNS denies forwarded requests without preventing application startup; HTTP and signed SSO retain the immediate-peer check.
  • Coolify deployments default to the named coolify-proxy ingress and use Coolify's persistent generators for the 32-byte Base64 deployment key, setup token and independent application/root database passwords.
  • Dokploy deployments default to dokploy-traefik. A cryptographic secret-generation template and digest-pinned Base64 import are included in deployment bundles; source checkouts can generate an import with npm run deploy:dokploy.
  • Installation and operating instructions explain platform networking, generated-secret persistence and safe upgrades of existing installations.

Compatibility and upgrade notes

  • Preserve all existing secrets and volumes. Before adopting the new Coolify template, copy the existing deployment key, setup token and database passwords into their corresponding SERVICE_* variables as described in Installation. Do not replace them with newly generated values.
  • Dokploy's template import is for new installations only: reimporting generates new secrets. For updates, retain the saved environment and volumes and change the verified image reference.
  • No database schema change is introduced by these deployment improvements. Use one application process, the release's verified image digest and the existing backup/restore procedures.
  • This release records no publicly disclosed security corrections in release-security.json; this is not a security certification or independent audit.

Verified artifacts

  • Source commit: 203508aed76c76665adaf015170d7518fdc34c33
  • Container: ghcr.io/sapientorius/nodepass@sha256:7c46890b22fca008816e307b4f3b0d5c76cd2ba5e4921ef98e156b42a9bf94a1
  • Platform: Linux amd64
  • Complete verification run

Verify SHA256SUMS and the release attestations before installation. The deployment bundle contains Compose files pinned to this image digest.

Assets 7
Loading