2 releases 2 tags

RSS feed

• 0.1.0 084d661200

  Compare

  0.1.0 Stable

  eva released this 2026-09-14 13:41:00 +00:00 | 14 commits to master since this release

  Release 0.1.0

  First tagged release. Tip of master (084d661) after access-list basic-auth hashing.

  Token / JWT_SECRET contract

  • JWT_SECRET env is optional.
  • If unset, the process generates a random admin API signing secret and persists it at data/.jwt_secret (compose mounts ./data).
  • Set JWT_SECRET explicitly when you need a stable secret across fresh data volumes or multi-replica boots.
  • Admin auth itself still uses ADMIN_PASSWORD on first boot (production rejects the well-known default password).

  Compose already notes the random data/.jwt_secret fallback; this release makes that contract explicit.

  Changes

  • 084d661 access-list: Hash basic-auth passwords and redact API reads (#18)
  • 3087968 format: gofmt api.go and engine.go
  • 61c7b55 access-list: Hash basic-auth passwords and redact API reads
  • a1433be docker: Promote compose port align to master
  • ac98b8e README: Fix default ports and ADMIN_PASSWORD boot rules
  • 097906f Lock bootstrap admin token until password is changed (#6)
  • a43217b Persist per-install JWT signing secret (#3)

  Artifacts

  • helix-proxy-0.1.0-linux-amd64.tar.gz
  • helix-proxy-0.1.0-linux-arm64.tar.gz
  • Release CI also builds/pushes the container image when registry secrets are present.

  Lab compose smoke

  Tracked on #19 — blocked pending Jerry lab host access for docker compose (pike has no docker on jumpbox and no SSH to dockge.lab.rrd / proxy.lab.rrd).

  Downloads

  • helix-proxy-0.1.0-linux-amd64.tar.gz
    1 download · 2026-10-07 03:18:52 +00:00 · 4.1 MiB
  • helix-proxy-0.1.0-linux-arm64.tar.gz
    1 download · 2026-10-07 03:18:52 +00:00 · 3.7 MiB