5 minute read
Version 0.12.0 Release
Highlights
- You can now change the settings of your services — this includes changing subdomains!
- Monitor your server’s CPU, Network and RAM usage with the stats from your server itself.
- You can now see the memory consumption of your services.
- Recovery process now allows you to skip the provider token during recovery.
- View system logs from the app, without SSH.
- Jobs statuses (such as server rebuilds) are now updated in real time.
Changelog
Features
-
Enabled the following languages:
- Japanese (#528)
-
Monitoring: You can now view CPU, Network and RAM stats from the server (#532)
-
Recovery: You can now skip the server provider token during recovery (#532, a step towards resolving #450)
-
Recovery: Allow setting the provider token after the recovery (#532)
-
Providers: You can now view the provider tokens status (#532)
-
UI: Add a notification if the app doesn’t support the server API version (#531)
-
Services: Allow viewing service logs from the service screen (#532)
-
Services: Service settings (#531)
-
Update DNS records after actions that potentially require DNS changes (#531, resolves #523)
-
Use Websockets to update server jobs status (#529, resolves #522)
-
UI: Allow selecting text from Markdown articles (#524, resolves #470)
-
Console: Obscure auth headers from console logs (#482)
-
Jobs: Implement NixOS garbage collection job (#506)
-
UI: List Tiles now have a circular border. (#482, resolves #463)
-
Settings: Added language picker to the settings (#482, resolves #489)
-
UI: Show the error screen when secret storage fails to load (#504)
-
Console: Added an empty view when there are no logs in console yet. (#482, resolves #492)
-
Backups: Show how much space a service uses on backup (#500, resolves #434)
-
Installation: Add country names to installation process (#501, resolves #494)
-
Console: Reworked app console. (#482)
-
UI: Infobox draws itself in a single row if there is enough space. (#482)
-
Services: You can now copy a link on the service page (#461, resolves #452)
-
Services: You can now open the service screen by tapping the service disk usage card (#446)
-
Installation: Remove the “I already have a server” button after starting the installation (#497, resolves #414)
Bug Fixes
- UI: Remove black bars on top of some pages (#531)
- UI: Fix missing server settings page title (#482, resolves #510)
- Docs: Update the manual on how to get token from the SSH (#509, resolves #471)
- Packaging: Flatpak builds didn’t work (#504)
- Devices: The new device key can now be selected and copied. (#482)
- UI: Fixed scrollbars on desktop builds. (#482)
- Backups: Filter disabled services from create backups screen (#499, resolves #433)
- UI: Add a subtitle for the “Jobs list” button (#462)
- Docs: Digital Ocean DNS used wrong manual
Translation contributions
-
Polish
- Thary (3)
-
Ukrainian
- TabithiS (39)
-
Estonian
- Dmitri B. (35)
-
Japanese
- shirahara (566)
-
Kazakh
- TabithiS (509)
-
Russian
- Thary (2)
- NaiJi ✨ (10)
- Inex Code (82)
-
Belarusian
- Thary (33)
- misterfourtytwo (28)
Patch 0.12.1
Features
- Accessibility: Add screen reader descriptions for graphs (#554)
- Jobs: When Jobs websocket subscription disconnects, fall back to usual queries for two minutes (#550, resolves #542)
- Metrics: Implement disk usage metrics (#538)
- Developer settings: Add server info to developer settings (#560)
Bug fixes
- UI: Disk chart had too many horizontal grid lines (#560)
- UI: Progress bar used the same shade of gray regardless of user preferences (#560)
- UI: Onboarding views were getting out of safe area (#560)
- App console: When app logs are paused, on incoming queue overflow, the main buffer was cleaned up instead (#560)
- Installation wizard: Implement better error messaging for providers token check (#558, resolves #508)
- Server logs: Show server logs timestamps in a local timezone (#552, resolves #540)
- Backups: Backups encryption key couldn’t load (#551, resolves #543)
- Services: Make text gray for disabled service options (#549, resolves #544)
- Services: Do not show the service link for disabled services (#548, resolves #547)
- Jobs: Open the jobs screen when starting the system garbage collection (#560, resolves #541)
Translation contributions
-
Russian
- NaiJi ✨ (1)
- Inex Code (70)
-
Estonian
- Dmitri B. (65)
Patch 0.12.2
Vulnerability disclosure
This release contains a fix for a security vulnerability. We recommend updating as soon as possible.
UnblvR discovered that the application used an insecure random number generator. This could allow an attacker to predict the random numbers generated by the application, which could lead to a variety of security issues.
While we believe the risk of exploitation is low, we recommend that you update the token on your original device:
- Update the app to the latest version.
- Go to the Devices screen at the “More” section.
- Make sure that your device is named “Initial device”. If it’s not, do the steps on that initial device instead. If you don’t have access to that device anymore, revoke the access for that device by tapping it in the list below.
- Tap on the “Initial device”. The app will ask you if you want to refresh the token. Tap “Confirm”.
Only the token of the initial device might be vulnerable. Tokens of other devices and backups encryption key are generated by your server with a secure random number generator.
Servers created with this version and newer will not be vulnerable to this.
We would like to thank UnblvR for the responsible disclosure of the vulnerability.
Features
Bug fixes
- i18l: Resolve word puzzles (#566)
- Use the cryptographically secure random number generator (#565)
- Remove hardcode for recovery support articles (#563, resolves #251)
- Volume resize function didn’t work due to logical error
Translation contributions
-
Estonian
- Dmitri B. (9)
-
German
- Philipp Weiermann (23)
-
Russian
- Inex Code (24)