bunkerity/bunkerweb v1.5.8

on GitHub

Documentation : https://docs.bunkerweb.io/1.5.8/

Docker tags :

• BunkerWeb : bunkerity/bunkerweb:1.5.8 or ghcr.io/bunkerity/bunkerweb:1.5.8
• Scheduler : bunkerity/bunkerweb-scheduler:1.5.8 or ghcr.io/bunkerity/bunkerweb-scheduler:1.5.8
• Autoconf : bunkerity/bunkerweb-autoconf:1.5.8 or ghcr.io/bunkerity/bunkerweb-autoconf:1.5.8
• UI : bunkerity/bunkerweb-ui:1.5.8 or ghcr.io/bunkerity/bunkerweb-ui:1.5.8

Linux packages : https://packagecloud.io/app/bunkerity/bunkerweb/search?q=1.5.8&filter=all&dist=

Changelog :

• [LINUX] Support Fedora 40 and drop support of Fedora 39
• [BUGFIX] Fix potential errors when upgrading from a previous version
• [BUGFIX] Fix rare bug on the web UI when editing the SERVER_NAME setting of a service
• [BUGFIX] Fix potential race conditions between the autoconf and the scheduler waiting for each other indefinitely
• [BUGFIX] Fix Let's Encrypt certificate renewal when a certificate date changes by forcing the renewal
• [BUGFIX] Fix issues with k8s integration and the save_config.py script
• [FEATURE] Add nightly build of the OWASP coreruleset that are automatically downloaded and updated
• [FEATURE] Enhance security on error pages, default server page and loading page by adding a custom Content-Security-Policy header with nonces and removing the Server header
• [FEATURE] Add new DATABASE_URI_READONLY setting to allow setting up a fallback read-only database URI in case the main database URI is not available
• [FEATURE] Add automatic fallback to either read-only on the primary database or to the read-only database URI when the main database URI is not available and automatically switch back to the main database URI when it becomes available again
• [FEATURE] Add experimental support of HTTP/3 (QUIC)
• [FEATURE] Optimize the way the scheduler handles jobs and the way the jobs are executed
• [FEATURE] Optimize the way the cache files are being refreshed from the database
• [FEATURE] Add failover logic in case the NGINX configuration is not valid to fallback to the previous configuration and log the error to prevent the service from being stopped
• [UI] Force HTTPS on setup wizard
• [UI] Fallback to self-signed certificate when UI is installed with setup wizard and let's encrypt is not used
• [UI] Force HTTPS even if UI is installed in advanced mode
• [UI] Add OVERRIDE_ADMIN_CREDS environment variable to allow overriding the default admin credentials even if an admin user already exists
• [UI] Optimize the way the UI handles the requests and the responses
• [AUTOCONF] Refactor Autoconf config parsing and saving logic so that it doesn't override the scheduler or UI config every time
• [MISC] Update logger format and datefmt for better readability
• [DEPS] Updated NGINX version to v1.26.1
• [DEPS] Updated stream-lua-nginx-module version to the latest commit to incorporate the latest changes and fixes for NGINX v1.26
• [DEPS] Updated coreruleset-v4 version to v4.3.0
• [DEPS] Updated lua-resty-openssl version to v1.4.0