🐳 Docker image improvements
This release refines the Docker image introduced in v3.1.3. (Please, if you use Docker, read this changelog)
What changed:
- Faster startup : the container no longer chowns the entire application tree on every start. Startup is now
near-instant regardless of how many repositories you have. - Hardened image : application files are now owned by root inside the container (world-readable, not writable
by the app process). This follows the same principle as official Docker images (nginx, postgres) and reduces
the attack surface. - Fixed: account lock a regression in v3.1.3 caused the borgwarehouse system user to be created in a locked
state, preventing SSH authentication. This is now fixed.
No action required - existing volumes, .env files and docker-compose.yml are fully compatible. Just pull the
new image and recreate the container.