ingres-si/ingressi v2.8.1

Ingressi v2.8.1

on GitHub

Changes

• WebSockets work on hosts with sign-in. Every WebSocket on a host with the built-in sign-in, Authentik or another forward-auth server failed with 502, signed in or not, because the sign-in check inherited the client's upgrade headers. The check no longer does.

Images

docker pull ghcr.io/ingres-si/ingressi-web:2.8.1
docker pull ghcr.io/ingres-si/ingressi-caddy:2.8.1
docker pull ghcr.io/ingres-si/ingressi-l4-port-manager:2.8.1

For linux/amd64 and linux/arm64. Each image is signed with Sigstore cosign and carries an SBOM and a build provenance attestation. To verify, with cosign 3 or later:

cosign verify ghcr.io/ingres-si/ingressi-web:2.8.1 \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity-regexp '^https://github\.com/ingres-si/ingressi/\.github/workflows/docker-build-trusted\.yml@refs/(heads|tags)/'

The CycloneDX SBOM of the source tree is attached below.

Upgrading

Back up the data volumes, then run docker compose pull && docker compose up -d. No database migration. Read the upgrade notes.

Donations

Ingressi is free. If it saves you time or money, please consider supporting it: GitHub Sponsors or Ko-fi.