ingres-si/ingressi v2.5.0

Ingressi v2.5.0

on GitHub

Changes

• Exclusion dialogs let you change what an exclusion covers. Exclude N rules… and the single-rule dialog on a security event edit the host, the path (starts with or exactly, with the request's path and the path above an ID as choices) and, per rule, the variable, and say in one sentence what will be excluded. An exclusion with neither a path nor a variable warns first.
• The Proxy Hosts list sorts by Name and groups by tag. A section per tag, each with its own row and select-all checkbox. Profile → Interface → Proxy hosts grouping makes grouping the default for your account (proxyHostsGroup in /api/v1/preferences).
• A certificate's own DNS provider is used. The provider chosen for a single certificate was ignored and the global default used instead.
• Bunny is a DNS-01 provider.
• Analytics settings says why ClickHouse does not answer. The GeoIP update container is named ingressi-geoipupdate, so docker compose no longer warns that HOSTNAME is not set.
• Internals: the end-to-end suite now runs in CI on SQLite, PostgreSQL and two replicas; dependency updates (maplibre-gl 6.13 among them).

Images

docker pull ghcr.io/ingres-si/ingressi-web:2.5.0
docker pull ghcr.io/ingres-si/ingressi-caddy:2.5.0
docker pull ghcr.io/ingres-si/ingressi-l4-port-manager:2.5.0

For linux/amd64 and linux/arm64. Each image is signed with Sigstore cosign and carries an SBOM and a build provenance attestation. To verify, with cosign 3 or later:

cosign verify ghcr.io/ingres-si/ingressi-web:2.5.0 \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity-regexp '^https://github\.com/ingres-si/ingressi/\.github/workflows/docker-build-trusted\.yml@refs/(heads|tags)/'

The CycloneDX SBOM of the source tree is attached below.

Upgrading

Back up the data volumes, then run docker compose pull && docker compose up -d. One database migration runs on start. Read the upgrade notes.

Donations

Ingressi is free. If it saves you time or money, please consider supporting it: GitHub Sponsors or Ko-fi.