lucasdillmann/nginx-ignition 2.48.0-snapshot

2.48.0

on GitHub

• The JWT secret used to sign the authentication tokens is now stored in the database and read from there on every boot, improving both the user sessions and the API tokens, as they are signed with the same secret. Users are no longer logged out when the app restarts or when they hit a different instance, and the API tokens are no longer invalidated by a reboot when no custom JWT secret was in use.
  • Upgrading is transparent: if NGINX_IGNITION_SECURITY_JWT_SECRET was set before, keep it. Its value is stored in the database on the first boot after the upgrade and your current secret keeps working, so there's no need to change anything on your side.
  • The environment variable is now optional and only used on the first boot, to provide your own custom secret. When omitted, a secure random secret is generated and stored. Once the database holds a secret, the stored one is always used and the environment variable is ignored, with a warning logged when it differs from the stored value.
• The embedded SQLite database now waits for a lock held by another connection instead of immediately failing with a database is locked error, fixing intermittent write failures under concurrent access. The wait is 5 seconds by default and can be changed through the NGINX_IGNITION_DATABASE_SQLITE_BUSY_TIMEOUT_MS environment variable. PostgreSQL is unaffected.
• Added support for 4 new DNS providers for Let's Encrypt certificates: DNSMint, FENO, Myra and Webglobe
• Updated Go to 1.27.2 and other internal dependencies

Docker image: dillmann/nginx-ignition:2.48.0-snapshot