• v1.2.2 500602804d

    v1.2.2 — API and orphaned-job recovery
    Release / Build + push image (push) Successful in 1m53s
    Stable

    steve released this 2026-08-22 13:47:43 +01:00 | 1 commits to main since this release

    Added

    • Added audited single-job and bulk recovery controls for jobs that are no longer running on their agents but remain stuck server-side. Agents now acknowledge unknown cancellation targets so orphaned jobs become terminal, while host ownership checks prevent cross-host updates. (#56)

    Fixed

    • Source-group JSON create and update requests now accept encrypted pre- and post-hooks, preserve hooks when their fields are omitted, allow explicit clearing, and expose only boolean presence indicators. (#54)
    • Generic backup-job requests without paths are rejected before a broken job is created. Configured run-now backups use the source-group endpoint. (#55)

    Container: docker.dcglab.co.uk/public/restic-manager:v1.2.2

    Multi-arch: linux/amd64 and linux/arm64.

    Downloads
  • v1.2.1 3ccefc254a

    v1.2.1 — stable Agent updates controls
    Release / Build + push image (push) Successful in 2m3s
    Stable

    steve released this 2026-08-22 12:36:04 +01:00 | 7 commits to main since this release

    Fixed

    • Removed the redundant typed selected-host-count confirmation from Agent updates.
    • Corrected name, version, and eligibility filtering.
    • Stopped automatic refreshes from replacing filters, dropdowns, selections, or other idle controls.
    • Retained progress polling only while a rollout is actively running.

    Validated through unit, integration, and Playwright E2E workflows plus a manual local upgrade from v1.2.0.

    Container image

    docker.dcglab.co.uk/public/restic-manager:v1.2.1

    Also published as 1.2, 1, and latest.

    See CHANGELOG.md and issue #50 for details.

    Downloads
  • v1.2.0 9080826b06

    v1.2.0 — fleet updates and reliability
    Release / Build + push image (push) Successful in 2m10s
    Stable

    steve released this 2026-08-22 11:34:50 +01:00 | 13 commits to main since this release

    Highlights

    • Selectable fleet-wide agent updates with filtering, canary-first rollout, validation, retry, and resume controls (#43).
    • Detection, alerting, and Prometheus metrics for running jobs with no recent activity (#41).
    • Snapshot freshness tracking and explicit operator reconciliation (#40).
    • Reliable large WebSocket messages for snapshot reports and restic events (#44).
    • CI and release images now use the anonymously pullable public registry namespace.

    Container image

    docker.dcglab.co.uk/public/restic-manager:v1.2.0

    Also published as the rolling semantic aliases 1.2, 1, and latest.

    See CHANGELOG.md for full details.

    Downloads
  • v1.1.1 1131f4330c

    v1.1.1 — forget reliability fixes
    Release / Build + push image (push) Successful in 2m12s
    Stable

    steve released this 2026-08-22 10:12:59 +01:00 | 26 commits to main since this release

    Patch release focused on reliable retention operations.

    Fixed

    • Prevent agent panics when a WebSocket connection ends, which previously restarted agents and left forget jobs stuck in running (#37).
    • Populate per-source-group retention policies for manual forget jobs and propagate validated --dry-run execution through the server, agent, and restic (#36).
    • Reject manual forget before job creation when no retention policy is configured.
    • Correct admin-credentials guidance for forget and prune (#34).

    The published server image bundles updated Linux amd64/arm64 and Windows amd64 agent binaries. Both server and agents should be upgraded.

    Downloads
  • v1.0.0 7b035a8f09

    v1.0.0 — first stable release
    Release / Build + push image (push) Successful in 2m16s
    Stable

    steve released this 2026-05-09 12:58:56 +01:00 | 58 commits to main since this release

    First tagged release. Six development phases brought the project from empty repo to a self-hostable, multi-tenant restic backup orchestrator with a web UI, JSON API, and self-updating agent fleet.

    What's in v1.0.0

    Phase 1 — MVP: HTTP server, SQLite + AEAD-encrypted credentials, Argon2id passwords, sessions; agent ↔ server WebSocket; Linux installer; one-time enrolment tokens; on-demand backups; snapshot listing.

    Phase 2 — Scheduling + repo ops: source groups (paths, excludes, pre/post hooks, bandwidth caps); cron schedules with retention; restic forget/prune/check/unlock; per-host stagger; pending-runs queue with backpressure; auto-init repos with credential-failure surface; announce-and-approve enrolment; Windows agent + install.ps1.

    Phase 3 — Restore, alerts, audit: restore wizard with live progress; snapshot diff; alert engine with per-source-group dedup; audit log UI with filters and CSV export.

    Phase 4 — RBAC, OIDC, tags: viewer/operator/admin roles; user management UI; generic OIDC SSO with JIT provisioning; per-host tags with chip-row filter.

    Phase 5 — OSS readiness: mdBook docs site; CONTRIBUTING / SECURITY / LICENSE; Docker-only release pipeline; Playwright e2e harness.

    Phase 6 — Update delivery + observability: signed agent self-update with channel pinning; fleet-wide update orchestration with stagger + admin pause; Prometheus /metrics + Grafana dashboard; per-host repo size trend (90-day rolling).

    Container images

    Pulled from gitea.dcglab.co.uk/steve/restic-manager:

    :v1.0.0   :1.0   :1   :latest
    

    Multi-arch: linux/amd64, linux/arm64.

    Threat model

    Published at docs/threat-model.md — assets, actors, attack surfaces, residual risks, explicit out-of-scope. Reviewed against this release surface.

    Full changelog

    See CHANGELOG.md.

    Downloads