This is a major release that no longer drops superuser privileges. Please review the instructions in README for the new recommended setup.
BREAKING CHANGES
-
The updater will no longer drop superuser privileges and
PUID
andPGID
will be ignored. Please use Docker’s built-in mechanism to drop privileges. The old, hacky Docker Compose template will grant the new updater unneeded privileges, which is less secure and not recommended. Please review the new template in README that is simpler and more secure when combined with the new updater. In a nutshell, adduser:
asuser: "1000:1000" # Run the updater with a specific user ID and group ID (in that order). # You should change the two numbers based on your setup.
and remove
cap_add
completely. -
In case you are using the
*-nocapdrop
Docker tags, they will no longer be maintained. The updater will no longer drop superuser privileges, and thus thenocapdrop
builds are identical to the regular ones. Just use the regular Docker tags such aslatest
. -
The older versions used to add the comment “Created by cloudflare-ddns” to all newly created DNS records. Since this version, the comment has become configurable, but by default it is empty. To restore the old behavior, add the configuration
RECORD_COMMENT=Created by cloudflare-ddns
(or any comment you want to use).
Features
- api: make record comment of new DNS records configurable using
RECORD_COMMENT
(#783) (b10c9a3) - api: recheck tokens if the network is temporarily down (#790) (15d1a5a)
- api: smarter sanity checking (#796) (80dc7f4)
- cron: show dates when needed (#795) (d1850b1)
- config: recheck 1.1.1.1 and 1.0.0.1 some time later when probing fails (possibly because the network is temporarily down) (#788) (0983b06)
- updater: bail out faster when it times out (#784) (3b42131)