-
v1.2.2 — API and orphaned-job recovery
StableRelease / Build + push image (push) Successful in 1m53sreleased this
2026-08-22 13:47:43 +01:00 | 1 commits to main since this releaseAdded
- Added audited single-job and bulk recovery controls for jobs that are no longer running on their agents but remain stuck server-side. Agents now acknowledge unknown cancellation targets so orphaned jobs become terminal, while host ownership checks prevent cross-host updates. (#56)
Fixed
- Source-group JSON create and update requests now accept encrypted pre- and post-hooks, preserve hooks when their fields are omitted, allow explicit clearing, and expose only boolean presence indicators. (#54)
- Generic backup-job requests without paths are rejected before a broken job is created. Configured run-now backups use the source-group endpoint. (#55)
Container:
docker.dcglab.co.uk/public/restic-manager:v1.2.2Multi-arch: linux/amd64 and linux/arm64.
Downloads
-
v1.2.1 — stable Agent updates controls
StableRelease / Build + push image (push) Successful in 2m3sreleased this
2026-08-22 12:36:04 +01:00 | 7 commits to main since this releaseFixed
- Removed the redundant typed selected-host-count confirmation from Agent updates.
- Corrected name, version, and eligibility filtering.
- Stopped automatic refreshes from replacing filters, dropdowns, selections, or other idle controls.
- Retained progress polling only while a rollout is actively running.
Validated through unit, integration, and Playwright E2E workflows plus a manual local upgrade from
v1.2.0.Container image
docker.dcglab.co.uk/public/restic-manager:v1.2.1Also published as
1.2,1, andlatest.See CHANGELOG.md and issue #50 for details.
Downloads
-
v1.2.0 — fleet updates and reliability
StableRelease / Build + push image (push) Successful in 2m10sreleased this
2026-08-22 11:34:50 +01:00 | 13 commits to main since this releaseHighlights
- Selectable fleet-wide agent updates with filtering, canary-first rollout, validation, retry, and resume controls (#43).
- Detection, alerting, and Prometheus metrics for running jobs with no recent activity (#41).
- Snapshot freshness tracking and explicit operator reconciliation (#40).
- Reliable large WebSocket messages for snapshot reports and restic events (#44).
- CI and release images now use the anonymously pullable public registry namespace.
Container image
docker.dcglab.co.uk/public/restic-manager:v1.2.0Also published as the rolling semantic aliases
1.2,1, andlatest.See CHANGELOG.md for full details.
Downloads
-
v1.1.1 — forget reliability fixes
StableRelease / Build + push image (push) Successful in 2m12sreleased this
2026-08-22 10:12:59 +01:00 | 26 commits to main since this releasePatch release focused on reliable retention operations.
Fixed
- Prevent agent panics when a WebSocket connection ends, which previously restarted agents and left forget jobs stuck in
running(#37). - Populate per-source-group retention policies for manual forget jobs and propagate validated
--dry-runexecution through the server, agent, and restic (#36). - Reject manual forget before job creation when no retention policy is configured.
- Correct admin-credentials guidance for forget and prune (#34).
The published server image bundles updated Linux amd64/arm64 and Windows amd64 agent binaries. Both server and agents should be upgraded.
Downloads
- Prevent agent panics when a WebSocket connection ends, which previously restarted agents and left forget jobs stuck in
-
v1.0.0 — first stable release
StableRelease / Build + push image (push) Successful in 2m16sreleased this
2026-05-09 12:58:56 +01:00 | 58 commits to main since this releaseFirst tagged release. Six development phases brought the project from empty repo to a self-hostable, multi-tenant restic backup orchestrator with a web UI, JSON API, and self-updating agent fleet.
What's in v1.0.0
Phase 1 — MVP: HTTP server, SQLite + AEAD-encrypted credentials, Argon2id passwords, sessions; agent ↔ server WebSocket; Linux installer; one-time enrolment tokens; on-demand backups; snapshot listing.
Phase 2 — Scheduling + repo ops: source groups (paths, excludes, pre/post hooks, bandwidth caps); cron schedules with retention;
restic forget/prune/check/unlock; per-host stagger; pending-runs queue with backpressure; auto-init repos with credential-failure surface; announce-and-approve enrolment; Windows agent +install.ps1.Phase 3 — Restore, alerts, audit: restore wizard with live progress; snapshot diff; alert engine with per-source-group dedup; audit log UI with filters and CSV export.
Phase 4 — RBAC, OIDC, tags: viewer/operator/admin roles; user management UI; generic OIDC SSO with JIT provisioning; per-host tags with chip-row filter.
Phase 5 — OSS readiness: mdBook docs site; CONTRIBUTING / SECURITY / LICENSE; Docker-only release pipeline; Playwright e2e harness.
Phase 6 — Update delivery + observability: signed agent self-update with channel pinning; fleet-wide update orchestration with stagger + admin pause; Prometheus
/metrics+ Grafana dashboard; per-host repo size trend (90-day rolling).Container images
Pulled from
gitea.dcglab.co.uk/steve/restic-manager::v1.0.0 :1.0 :1 :latestMulti-arch: linux/amd64, linux/arm64.
Threat model
Published at
docs/threat-model.md— assets, actors, attack surfaces, residual risks, explicit out-of-scope. Reviewed against this release surface.Full changelog
See
CHANGELOG.md.Downloads