• v0.1.1 0e8faf1772

    Chronexus Server 0.1.1
    Some checks failed
    Server checks / check (push) Has been cancelled
    Server checks / audit (push) Has been cancelled
    Stable

    acelith released this 2026-10-27 12:44:58 +00:00 | 5 commits to main since this release

    Chronexus Server 0.1.1

    A maintenance release of the self-hosted companion of Chronexus, and the first one shipped as
    container images in the Forgejo registry for Linux amd64 and arm64.

    Install from the registry (no build needed):

    cp .env.example .env     # set CHRONEXUS_DOMAIN and CHRONEXUS_IMAGE=git.moix.me/acelith/chronexus-server:0.1.1
    docker compose pull
    docker compose --profile https up -d
    docker compose exec -T server chronexus-server invite
    

    Fixed

    • The bundled HTTPS profile never started: Docker could give the server the address reserved
      for the proxy. Dynamic addresses now come from 172.30.253.128/25
      (CHRONEXUS_NETWORK_DYNAMIC_RANGE).
    • backup and verify failed on macOS hosts (temporary directory behind a symbolic link).
    • Two verifications running at the same moment could lock each other's reference file.
    • The published OpenAPI document now carries the Apache-2.0 licence.

    Works with Chronexus 0.9.x and 0.10.0. Chronexus 0.10.0 adds member management (list,
    change role, remove, leave) on top of the same API; no API change in this release.

    Verified (27 October 2026): 75 integration tests on macOS arm64 (Rust 1.97), Clippy with
    warnings denied, rustfmt, contract drift check; the Compose stack with the bundled Caddy over
    HTTPS on Docker (linux/arm64); three real desktop apps (macOS and two Linux containers) passed a
    37-step sharing scenario against it, including role changes, leaving, removal and a proxy outage;
    an installed Linux release build signed in and downloaded a campaign over HTTPS. The images in
    the registry were pulled back by digest and started.

    Not verified: a public deployment with real DNS and certificates, a third-party
    penetration test, image and dependency vulnerability scans, load testing. Data is not
    end-to-end encrypted: the operator can read what users upload.

    Assets: container images git.moix.me/acelith/chronexus-server:0.1.1 (linux/amd64,
    linux/arm64), the chronexus-server binaries for both Linux architectures (glibc, Debian 12)
    extracted from those images, and SHA256SUMS.txt.

    Image digest: git.moix.me/acelith/chronexus-server@sha256:ce86254ece7a62e1e619184ce982ee73fe36a725028f0fe44e91d9dbe15bedb5

    Downloads