Repository navigation
Releases: spitzli/webdock
Release list
Webdock 0.1.0-alpha.2
Webdock 0.1.0-alpha.2 is a developer alpha for Linux AMD64 selfhosting.
This alpha adds operator source installation from GitHub repositories (including permitted private repositories), HTTPS Git URLs and ZIP archives. Source builds run in an operator-owned private GitHub Actions repository. An artifact-only publisher on the existing app node verifies and publishes the image, then deploys the reviewed plugin to a restricted Kubernetes namespace. No additional KVM build host or Docker socket on the application node is required. The operator approves the exact built manifest, image, capabilities and configuration before background deployment and activation.
Verified pilot acceptance covered ZIP and private GitHub imports through the real Console/API flow, explicit manifest approval, background activation, runtime TLS, an isolated UI frame and a signed read-action echo. These checks cover the demonstrated pilot flows; they do not certify every third-party plugin or provider integration.
Upgrade the database with the matching offline migrator, including migrations 0046_plugin_sources.sql and 0047_plugin_source_actions.sql, before rolling out the API and Console. The source installer is optional and disabled until configured; it is not started by the standard Core Compose or Helm installation. It requires a private build repository/GitHub App, registry, scoped Kubernetes access and mounted runtime configuration. UI plugins also require their own UI domain and trusted TLS configuration (including the existing Traefik HTTP-01 resolver option). Plugin jobs, tables, migrations, dependencies and replacement of an existing plugin ID remain outside this source-installer pilot.
Choose api-core + console-core + auth for an empty product-free runtime. Run migrate only for offline database initialization/upgrades. The separate api/console/worker images retain optional Mail, Hosting, Databases and Storage. CMS and Billing are removed from the active platform. External Managed Apps and Managed Analytics have their own independently published releases and require explicit project grants/runtime configuration.
Default authentication is local Better Auth, including initial password replacement and real MFA enrollment. Clerk is optional and requires deliberate identity mappings and provider-owned roles. This release does not switch existing production authentication.
Requirements: Linux AMD64, Docker/Compose, external dedicated PostgreSQL 18, verified database TLS, controlled HTTPS ingress and privately managed credentials. Read the linked selfhosting guide before starting the API: schema initialization, empty plugin-state initialization and initial operator setup are separate required steps.
Verification: native image execution; product-boundary checks; fresh PostgreSQL/TLS installation with the actual packaged images; operator password/MFA/PKCE integration; checksums signed with GitHub OIDC/Sigstore. Public HTTPS ingress and SMTP delivery remain operator acceptance work. ARM64 is not claimed. Migration retains historical schemas; a small runtime is not a product-free database schema.
License: original Webdock code is AGPL-3.0-only. Separate written commercial/special licenses may be available from Spitzli Development for rights it owns or may sublicense. Third-party licenses remain in force; see COMMERCIAL-LICENSING.md and CONTRIBUTING.md in the tagged source. Exact notices are included and checked in Webdock runtime images.
Documentation:
- Selfhosting: https://docs.webdock.dev/developers/self-hosting/
- Initial operator: https://docs.webdock.dev/developers/initial-setup/
- Core distribution: https://docs.webdock.dev/developers/core-distribution/
- Auth adapters: https://docs.webdock.dev/developers/auth-adapters/
Verify SHA256SUMS.sigstore.json with Cosign, expected certificate identity https://github.com/spitzli/webdock/.github/workflows/distribution.yml@refs/heads/main, and issuer https://token.actions.githubusercontent.com, then check SHA256SUMS. The manifest records executable image digests, exact source revision and native execution evidence. Archive oci.indexDigest is not a registry pull reference.
Webdock 0.1.0-alpha.1
NewtTheWolf
Dominik Spitzli
Webdock 0.1.0-alpha.1 is a developer alpha for Linux AMD64 selfhosting.
Choose api-core + console-core + auth for an empty product-free runtime. Run migrate only for offline database initialization/upgrades. The separate api/console/worker images retain optional Mail, Hosting, Databases and Storage. CMS and Billing are removed from the active platform. External Managed Apps and Managed Analytics have their own independently published releases and require explicit project grants/runtime configuration.
Default authentication is local Better Auth, including initial password replacement and real MFA enrollment. Clerk is optional and requires deliberate identity mappings and provider-owned roles. This release does not switch existing production authentication.
Requirements: Linux AMD64, Docker/Compose, external dedicated PostgreSQL 18, verified database TLS, controlled HTTPS ingress and privately managed credentials. Read the linked selfhosting guide before starting the API: schema initialization, empty plugin-state initialization and initial operator setup are separate required steps.
Verification: native image execution; product-boundary checks; fresh PostgreSQL/TLS installation with the actual packaged images; operator password/MFA/PKCE integration; checksums signed with GitHub OIDC/Sigstore. Public HTTPS ingress and SMTP delivery remain operator acceptance work. ARM64 is not claimed. Migration retains historical schemas; a small runtime is not a product-free database schema.
License: original Webdock code is AGPL-3.0-only. Separate written commercial/special licenses may be available from Spitzli Development for rights it owns or may sublicense. Third-party licenses remain in force; see COMMERCIAL-LICENSING.md and CONTRIBUTING.md in the tagged source. Exact notices are included and checked in Webdock runtime images.
Documentation:
- Selfhosting: https://docs.webdock.dev/developers/self-hosting/
- Initial operator: https://docs.webdock.dev/developers/initial-setup/
- Core distribution: https://docs.webdock.dev/developers/core-distribution/
- Auth adapters: https://docs.webdock.dev/developers/auth-adapters/
Verify SHA256SUMS.sigstore.json with Cosign, expected certificate identity https://github.com/spitzli/webdock/.github/workflows/distribution.yml@refs/heads/main, and issuer https://token.actions.githubusercontent.com, then check SHA256SUMS. The manifest records executable image digests, exact source revision and native execution evidence. Archive oci.indexDigest is not a registry pull reference.