admin
db83db383c
fix: deep bug hunt II — concurrency, security & optimization (25 files)
...
Critical: watchdog mutex panic safety, SetGeoAppOverride nil guard,
SSD-only app DB restore fallback.
High: double deploy race (atomic Deploying flag), delete/remove during
deploy guard, ScanStacks overwrite protection, FileBrowser mount mutex,
PushEvent history, PushOnce error handling, DB dump sync+close before
rename, restic retry fresh context, encrypt failure logging, cross-backup
path traversal validation, deepCopyStack completeness.
Security: constant-time API key comparison, login rate limiting (5/min),
git credential masking in logs, storage path prefix traversal fix.
Concurrency: MigrateEncryption lock ordering, SubdomainInUse I/O outside
lock, scheduler late-registered jobs, SQLite WAL verification, metrics
shutdown context, telemetry scan error logging, asset sync lock scope.
Optimization: streaming file copy for DB dumps, restic stats dedup,
atomic infra config copy.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com >
2026-02-25 14:21:09 +01:00
admin
be7803c0ac
v0.24.0 — Pre-testing observability: debug logging, diagnostic dump, startup self-test
...
- Add [DEBUG] logging across all modules (backup, storage, sync, selfupdate,
monitor, notify, report, assets, setup) gated behind logging.level: "debug"
- Add /api/debug/dump endpoint returning full controller state JSON (debug only)
- Add startup self-test validating 9 subsystems (Docker, dirs, storage, hub,
restic repos, metrics DB) with pass/warn/fail summary
- New packages: internal/selftest, internal/util
- Constructor/signature changes: debug bool params, logger params on
RunHealthCheck and BuildReport, smart watchdog probe logging
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com >
2026-02-21 18:32:26 +01:00
admin