Fixed — update reliability (no more bricked boxes)
- A failed update can no longer leave you locked out behind a Cloudflare 502.
update.shnow snapshots the working version before updating, health-probes livinityd after restart, and automatically rolls back to the last working version if the new build can't boot — so the UI always stays reachable. - Added systemd self-healing (
StartLimitIntervalSec=0+reset-failed) so a crash-loop keeps retrying and recovers instead of latching into a permanent failed state. - Added a single-flight lock so double-clicking "Update" can't launch two racing deploys.
Full Changelog: v44.17...v44.18
Full Changelog: v44.17...v44.18