ingres-si/ingressi v2.7.0

Ingressi v2.7.0

on GitHub

Changes

• The certificate pages say why Caddy has no certificate. Caddy's last error for the name (for example presenting for challenge: adding temporary record for zone "example.com.": expected 1 zone, got 0 for example.com.) is shown on the Certificates page, on the host's page and under Needs attention, and issuanceError (at, message) is in the rows of GET /api/v1/certificates/overview. Caddy writes the error lines of its certificate loggers to a new file, tls-issuance.log, in its log volume; its own output is unchanged. The text is sanitized before it is shown: stored DNS credentials, URLs (reduced to the host), e-mail and IP addresses and long tokens are removed.

Images

docker pull ghcr.io/ingres-si/ingressi-web:2.7.0
docker pull ghcr.io/ingres-si/ingressi-caddy:2.7.0
docker pull ghcr.io/ingres-si/ingressi-l4-port-manager:2.7.0

For linux/amd64 and linux/arm64. Each image is signed with Sigstore cosign and carries an SBOM and a build provenance attestation. To verify, with cosign 3 or later:

cosign verify ghcr.io/ingres-si/ingressi-web:2.7.0 \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity-regexp '^https://github\.com/ingres-si/ingressi/\.github/workflows/docker-build-trusted\.yml@refs/(heads|tags)/'

The CycloneDX SBOM of the source tree is attached below.

Upgrading

Back up the data volumes, then run docker compose pull && docker compose up -d. No database migration. Read the upgrade notes.

Donations

Ingressi is free. If it saves you time or money, please consider supporting it: GitHub Sponsors or Ko-fi.