HTTPS by Default, Certificate Management & Per-Adapter Health Notifications
⚠️ Breaking: Volume mounts have changed. Replace
./db:/app/dband./storage:/app/storagewith a single./data:/datamount. Then move the current data to the new structure after first startup. UpdateBETTER_AUTH_URLtohttps://- HTTPS is now the default protocol. SetDISABLE_HTTPS=trueif you use a TLS-terminating reverse proxy but its not recommended in terms of security.
✨ Features
- notifications: Per-adapter health check notification opt-out - sources and destinations can individually disable offline/recovery alerts via a toggle in the Configuration tab while health checks continue running
- security: Built-in HTTPS support - DBackup now defaults to HTTPS with an auto-generated self-signed certificate on first start, protecting all traffic including database passwords, encryption keys, and session cookies
- security: Certificate management UI - new "Certificate" tab in System Settings to view certificate details (issuer, expiry, fingerprint), upload custom PEM certificates, or regenerate self-signed certs
- security: HSTS header - when accessed via HTTPS, DBackup now sends
Strict-Transport-Securityto enforce future HTTPS connections in the browser - security: Auto-renewal for self-signed certificates - expired self-signed certs are automatically regenerated on container start; custom certificates are never replaced, only a warning is logged
🔄 Changed
- server: Default protocol changed from HTTP to HTTPS - set
DISABLE_HTTPS=trueto use plain HTTP (e.g. behind a TLS-terminating reverse proxy) - docker: Consolidated volume mounts into single
/datadirectory - replaces separate/app/db,/app/storagemounts with one./data:/datamount containingdb/,storage/, andcerts/subdirectories./backupsremains a separate optional mount for local backups
🎨 Improvements
- ui: Edit Configuration dialog now uses Shadcn ScrollArea instead of native browser overflow for consistent scrollbar styling
🧪 Tests
- security: Added 21 unit tests for
certificate-servicecovering certificate info parsing, upload validation (PEM format, cert-key matching, temp file cleanup), self-signed regeneration, and HTTPS toggle
🐳 Docker
- Image:
skyfay/dbackup:v1.2.0 - Also tagged as:
latest,v1 - Platforms: linux/amd64, linux/arm64