ingres-si/ingressi v2.6.0

Ingressi v2.6.0

on GitHub

Changes

• Choose a DNS provider for a single certificate in the dashboard. Certificates → New managed certificate (and Edit on a managed certificate) takes the domains and a DNS provider: the default, or any provider set up under Certificate settings. A proxy host's Certificate section says how its certificate is obtained and Use a different DNS provider makes a certificate for the host with the provider you pick. The default provider and the other hosts are unchanged. (#337)
• A host whose certificate was never issued is flagged. When Caddy has no certificate for a host's name 15 minutes after the host was saved, the Proxy hosts list, the host's page and the overview show No certificate issued instead of No issues, and the Certificates page shows Not issued and when Caddy was last asked. Not read yet now only means the dashboard could not ask Caddy. (#338)
• API: PUT /api/v1/certificates/{id} with "providerOptions": null clears the DNS provider override. The rows of GET /api/v1/certificates/overview have checkedAt and the renewal states pending and missing.

Images

docker pull ghcr.io/ingres-si/ingressi-web:2.6.0
docker pull ghcr.io/ingres-si/ingressi-caddy:2.6.0
docker pull ghcr.io/ingres-si/ingressi-l4-port-manager:2.6.0

For linux/amd64 and linux/arm64. Each image is signed with Sigstore cosign and carries an SBOM and a build provenance attestation. To verify, with cosign 3 or later:

cosign verify ghcr.io/ingres-si/ingressi-web:2.6.0 \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity-regexp '^https://github\.com/ingres-si/ingressi/\.github/workflows/docker-build-trusted\.yml@refs/(heads|tags)/'

The CycloneDX SBOM of the source tree is attached below.

Upgrading

Back up the data volumes, then run docker compose pull && docker compose up -d. No database migration. Read the upgrade notes.

Donations

Ingressi is free. If it saves you time or money, please consider supporting it: GitHub Sponsors or Ko-fi.