Further backup[ and restore improvements
Building off of the revamped backup and restore script introduced in 23.9.1, this release further improves the script in a couple of ways.
23.10.0 adds the --encrypt_with option on all sentry export ... methods, and the corresponding --decrypt_with option on all sentry import ... methods. Unsurprisingly, these methods can be used to encrypt and decrypt JSON backups. The --encrypt_with option takes a path to a file containing a public 2048-bit RSA key. An export encrypted in this manner generates a tarball instead of a JSON file, which can be decrypted when passed to a sentry import ... call with a path to the matching private key supplied to the --decrypt_with option.
In addition to the already supported User, Organization, and Global export scopes, a new scope has been added in this release: Config. This scope is used for exporting all data related to globally configuring and administering a Sentry instance, including global options, relay configurations, and administrator accounts, privileges, and roles.
Various fixes & improvements
- Switch geoipupdate image to ghcr.io (#2442) by @hkraal
- Add system.url-prefix to config for visibility (#2426) by @hubertdeng123
- Remove CSPMiddleware since it is enabled by default in the upstream sentry (#2434) by @oioki
- Update nginx.conf (#2455) by @mwarkentin
- Update Redis container image to 6.2.13 (#2432) by @mencarellic