bunkerity/bunkerweb v1.6.14-rc1

on GitHub

Documentation : https://docs.bunkerweb.io/1.6.14~rc1/

Docker tags :

• All-in-one : bunkerity/bunkerweb-all-in-one:1.6.14-rc1 or ghcr.io/bunkerity/bunkerweb-all-in-one:1.6.14-rc1
• BunkerWeb : bunkerity/bunkerweb:1.6.14-rc1 or ghcr.io/bunkerity/bunkerweb:1.6.14-rc1
• Scheduler : bunkerity/bunkerweb-scheduler:1.6.14-rc1 or ghcr.io/bunkerity/bunkerweb-scheduler:1.6.14-rc1
• Autoconf : bunkerity/bunkerweb-autoconf:1.6.14-rc1 or ghcr.io/bunkerity/bunkerweb-autoconf:1.6.14-rc1
• UI : bunkerity/bunkerweb-ui:1.6.14-rc1 or ghcr.io/bunkerity/bunkerweb-ui:1.6.14-rc1
• API : bunkerity/bunkerweb-api:1.6.14-rc1 or ghcr.io/bunkerity/bunkerweb-api:1.6.14-rc1

Linux packages : https://packagecloud.io/app/bunkerity/bunkerweb/search?q=1.6.14~rc1&filter=all&dist=

Changelog :

• [BUGFIX] mtls: the Scheduler now validates the client CA bundle and CRL, caches them, and distributes them to every instance instead of shipping the raw configured path straight into the NGINX configuration, so a Scheduler-only mount works as documented instead of causing "cannot load certificate" errors on instances that cannot read that path. Adds MTLS_CA_CERTIFICATE_DATA and MTLS_CRL_DATA to supply either file inline as base64 or plaintext PEM.
• [BUGFIX] backup: support MySQL 9 and MariaDB 12 backup/restore with current authentication, TLS, and privilege defaults while preserving compatibility with older servers; refresh the documented database compatibility matrix, including PostgreSQL 18.
• [BUGFIX] ui: fix plugin hook loading and chaining, and purge unavailable PRO plugin pages after license loss.
• [BUGFIX] letsencrypt: quarantine broken renewal lineages and persist the cleaned cache before Certbot runs. (Fixes #3733)
• [FEATURE] metrics: buffer reports during Redis OOM events, make list and facet updates atomic, and add the METRICS_REDIS_TTL setting.
• [FEATURE] headers: deny Chrome built-in AI APIs in the default PERMISSIONS_POLICY.
• [FEATURE] misc: allow the QUERY HTTP method by default in ALLOWED_METHODS and bundled service templates.
• [LINUX] Updated the NGINX version to v1.30.4 for Fedora 43 and 44 now that it is available in their repositories.
• [UI] Reports and Bans pages: show unknown countries as not applicable, and make exports and bulk actions honor active filters. (Fixes #3683, #3685)