Files

T

tben 8bf6bedec5 Serve plain HTTP only and drop the local certificate tooling

The app never terminates TLS: a reverse proxy or tunnel does, and
isSecureRequest still reads X-Forwarded-Proto so cookies stay Secure.
Removes the cert generator, TLS resolution and HTTP redirect, the
local CA download, and the TLS envs, and trims the installer, Dockerfile
health check and docs to match. Also softens the composer's loading row.

2026-10-21 15:35:27 +01:00

3.0 KiB

Raw Blame History

Releasing Cobble

Cobble ships as a multi-arch container image and a single install.sh. The repository starts private and is made public at the launch gate below.

One-time setup

GITEA_USERNAME and GITEA_TOKEN are set as GitHub Actions secrets. The token needs package write on the Gitea Moduletrace org.
The Gitea repository exists at git.tben.me/Moduletrace/cobble and main is pushed to both remotes.
The GHCR package is made public after the first image push (Settings > Packages > cobble > Change visibility).
The Gitea package needs nothing: package visibility follows the public Moduletrace org.

Every release

bun run typecheck and bun run test pass locally.
CI is green on main in GitHub Actions.
bash -n install.sh passes.
Test the installer on a clean machine, both amd64 and arm64 when possible: - fresh install, signup, one chat reply - rerun with no changes: reports up to date, no restart - update to a new tag: backup taken, data intact - --uninstall keeps data, --uninstall --purge removes it
Update the version if the release changes it.

Tag and publish a GitHub release:

git tag v0.1.0
git push origin main --tags
gh release create v0.1.0 --title v0.1.0 --generate-notes

The release workflow builds linux/amd64 and linux/arm64 and pushes to both registries: - ghcr.io/moduletrace/cobble - git.tben.me/moduletrace/cobble

Check the manifests:

docker buildx imagetools inspect ghcr.io/moduletrace/cobble:latest
docker buildx imagetools inspect git.tben.me/moduletrace/cobble:latest

Confirm the GHCR package is public and pull it anonymously.
Push the tag to Gitea as well:
```
git push gitea main --tags
```

Update every install with the one-liner:

curl -fsSL https://url.moduletrace.com/cobble | sudo bash

Launch gate

Before the first public release:

LICENSE, README.md and RELEASING.md are in place.
The installer has been tested on a clean amd64 and a clean arm64 host.
No secrets are tracked (git status, git ls-files, secret scanning).
The GitHub repository and the Gitea mirror are set to public.
The GHCR package is public.
The first release is installed on the real host and a signup, a chat reply, a computer and a routine have been exercised.
A plain curl | bash install answers on http://<host>:7227, and the same install behind a reverse proxy serves HTTPS, installs the app, gets a live chat socket and can turn on notifications.

Rollback

Images are tagged with the release version, so an older tag can be installed with --version vX.Y.Z.
The installer keeps the last five database backups in $COBBLE_HOME/backups.
Restore a backup from Settings > Backups in the app, or restore the files with the app stopped.