Changelog

Changelog

What's happening at obacht — new templates, features, and platform updates.

2026-07-12

Installs show live progress

—Installing a template now streams real progress to the dashboard: image download, unpacking, service start.
—A new activity strip shows what the device is working on right now.
—Fresh installs pull images in parallel (capped), so a batch of templates comes online noticeably faster.

2026-07-10

Signed mutations on every device class

—Raspberry Pi and Linux devices now verify every install, domain change, and config edit against a signature created in your browser — the same model the Mac launched with. obacht servers relay commands but cannot forge them.
—Agent updates are now minisign-signed and verified on the device before they apply.

2026-07-05

Template audit: 28 templates fixed and re-signed

—A full review of the catalog: broken first-run flows repaired, dead config options removed, security-relevant version bumps for Gitea, n8n, Listmonk, Etherpad and others.
—New: Gokapi (file sharing) as a one-click install; Matrix gains OAuth2 login (MAS).

2026-07-01

Template catalog grows to 42

—New templates including Trilium Notes, Listmonk, ArchiveBox, and Matrix (Synapse + Element).
—All templates are signed and pinned to exact image digests before they reach your device.

2026-06-28

Simpler template configuration

—Config fields now use typed inputs — domain, email, and timezone pickers instead of free text.
—Technical fields are marked as advanced across the catalog and stay hidden in easy mode.
—Container templates can be installed on Macs straight from the gallery.

2026-06-22

Mac app 0.1: auto-updates and a local reverse proxy

—The Mac app now updates itself (with your consent) via a signed update feed.
—Bind a domain to a port on your Mac — put a local dev server on the internet without touching your router.
—The bundled VM re-syncs its clock after your Mac wakes from sleep.

2026-06-15

Apple Silicon Mac support (closed beta)

—A native menu-bar app turns an iMac or Mac mini into an obacht device — same templates, same dashboard as a Pi.
—Templates run isolated in a bundled Linux VM; your files and home network stay out of reach.
—Mac host services: run Ollama natively with Apple-Silicon acceleration, managed from the dashboard.

2026-05-30

Security architecture published

—TLS now terminates on your device — the obacht proxy only routes encrypted traffic by SNI.
—Every state change is signed with your key in the browser; the backend cannot mutate devices on its own.

Changelog — obacht