Skip to content

Webdock 0.1.0-alpha.1

Pre-release
Pre-release

Choose a tag to compare

View all tags
@NewtTheWolf NewtTheWolf released this 18 Oct 14:36
· 9 commits to main since this release
v0.1.0-alpha.1
This tag was signed with the committer’s verified signature.
NewtTheWolf Dominik Spitzli
SSH Key Fingerprint: CwQmWNIewJdih7OvnfCDkYiJb0n/fz1nByLSvwLMK/o
Verified
Learn about vigilant mode.
a4d99e4
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Webdock 0.1.0-alpha.1 is a developer alpha for Linux AMD64 selfhosting.

Choose api-core + console-core + auth for an empty product-free runtime. Run migrate only for offline database initialization/upgrades. The separate api/console/worker images retain optional Mail, Hosting, Databases and Storage. CMS and Billing are removed from the active platform. External Managed Apps and Managed Analytics have their own independently published releases and require explicit project grants/runtime configuration.

Default authentication is local Better Auth, including initial password replacement and real MFA enrollment. Clerk is optional and requires deliberate identity mappings and provider-owned roles. This release does not switch existing production authentication.

Requirements: Linux AMD64, Docker/Compose, external dedicated PostgreSQL 18, verified database TLS, controlled HTTPS ingress and privately managed credentials. Read the linked selfhosting guide before starting the API: schema initialization, empty plugin-state initialization and initial operator setup are separate required steps.

Verification: native image execution; product-boundary checks; fresh PostgreSQL/TLS installation with the actual packaged images; operator password/MFA/PKCE integration; checksums signed with GitHub OIDC/Sigstore. Public HTTPS ingress and SMTP delivery remain operator acceptance work. ARM64 is not claimed. Migration retains historical schemas; a small runtime is not a product-free database schema.

License: original Webdock code is AGPL-3.0-only. Separate written commercial/special licenses may be available from Spitzli Development for rights it owns or may sublicense. Third-party licenses remain in force; see COMMERCIAL-LICENSING.md and CONTRIBUTING.md in the tagged source. Exact notices are included and checked in Webdock runtime images.

Documentation:

Verify SHA256SUMS.sigstore.json with Cosign, expected certificate identity https://github.com/spitzli/webdock/.github/workflows/distribution.yml@refs/heads/main, and issuer https://token.actions.githubusercontent.com, then check SHA256SUMS. The manifest records executable image digests, exact source revision and native execution evidence. Archive oci.indexDigest is not a registry pull reference.

Assets 17
Loading