-
v1.0.0 — first stable release
StableRelease / Build + push image (push) Successful in 2m16sreleased this
2026-05-09 12:58:56 +01:00 | 20 commits to main since this releaseFirst tagged release. Six development phases brought the project from empty repo to a self-hostable, multi-tenant restic backup orchestrator with a web UI, JSON API, and self-updating agent fleet.
What's in v1.0.0
Phase 1 — MVP: HTTP server, SQLite + AEAD-encrypted credentials, Argon2id passwords, sessions; agent ↔ server WebSocket; Linux installer; one-time enrolment tokens; on-demand backups; snapshot listing.
Phase 2 — Scheduling + repo ops: source groups (paths, excludes, pre/post hooks, bandwidth caps); cron schedules with retention;
restic forget/prune/check/unlock; per-host stagger; pending-runs queue with backpressure; auto-init repos with credential-failure surface; announce-and-approve enrolment; Windows agent +install.ps1.Phase 3 — Restore, alerts, audit: restore wizard with live progress; snapshot diff; alert engine with per-source-group dedup; audit log UI with filters and CSV export.
Phase 4 — RBAC, OIDC, tags: viewer/operator/admin roles; user management UI; generic OIDC SSO with JIT provisioning; per-host tags with chip-row filter.
Phase 5 — OSS readiness: mdBook docs site; CONTRIBUTING / SECURITY / LICENSE; Docker-only release pipeline; Playwright e2e harness.
Phase 6 — Update delivery + observability: signed agent self-update with channel pinning; fleet-wide update orchestration with stagger + admin pause; Prometheus
/metrics+ Grafana dashboard; per-host repo size trend (90-day rolling).Container images
Pulled from
gitea.dcglab.co.uk/steve/restic-manager::v1.0.0 :1.0 :1 :latestMulti-arch: linux/amd64, linux/arm64.
Threat model
Published at
docs/threat-model.md— assets, actors, attack surfaces, residual risks, explicit out-of-scope. Reviewed against this release surface.Full changelog
See
CHANGELOG.md.Downloads