Skip to content

FLINCH 0.1.0

Choose a tag to compare

View all tags
@tobhoster tobhoster released this 25 Sep 02:09
· 32 commits to main since this release
v0.1.0
24fddb7

The first public release of FLINCH: it keeps a Plex library under its disk ceiling, frees what nobody will miss first, and leaves the deleting to Maintainerr.

Install

docker pull ghcr.io/tobhoster/flinch:0.1.0   # amd64 and arm64

deploy/kustomization.yaml pins this release. The install guide walks through the Secret, the Maintainerr collections and turning on enforcement. Try it first with the demo:

docker run --rm -p 127.0.0.1:7911:7911 -e FLINCH_STATE_DIR=/tmp/demo -e FLINCH_WEB_TOKEN=demo \
  ghcr.io/tobhoster/flinch:0.1.0 sh -c 'flinch-demo && flinch-web'

Security

  • The UI and its API need a token (FLINCH_WEB_TOKEN). Without one, the API refuses every request.
  • The Ingress is opt-in (deploy/ingress) and HTTPS only.
  • The pods run as a non-root user with a read-only root filesystem, no capabilities and the runtime's seccomp profile.
  • The image comes with a build provenance attestation and an SBOM.

Report vulnerabilities privately; see SECURITY.md.

Assets 2
Loading