Summary

Container deployment, reliable background operations, and redesigned logs

Roxy-WI 9.1 introduces container deployment options, moves long-running work into dedicated background processes, and improves backup, certificate, and log management.

• Container deployment. Added Docker Compose configurations for SQLite and MariaDB, a Helm chart, and a local HTTPS quick start. Web, Scheduler, Service Events, and Operations run as separate processes with health checks, persistent storage, and graceful shutdown. Added Helm OCI publication to ghcr.io/roxy-wi/roxy-wi-charts.
• Background operations. Moved backup jobs, certificate operations, and Change Center execution into the Operations queue. Improved retry handling, recovery after process restarts, and visibility into task status and failures. Strengthened RabbitMQ event processing and notification delivery.
• Configuration backups. Added Scheduler-managed filesystem and S3 backups using SFTP and Boto3. Backup mode preserves remote versions; synchronization removes versions deleted locally. Added schedule status, execution history, retries, automatic history cleanup, and migration of existing cron jobs.
• Let's Encrypt. Added certificate drafts, staging preflight checks, reusable encrypted DNS profiles, and detailed challenge and deployment results. Renewals now support scheduled execution, bounded retries, rate-limit handling, and expiry notifications. Improved HAProxy certificate deployment with configuration validation, reload verification, rollback, and recovery after partial failures.
• Redesigned log viewer. Added live following for internal and service logs, relative and absolute time ranges, search highlighting, exclusion filters, and auto-scroll. Structured JSON entries are displayed as readable records alongside legacy text logs. Updated Overview to use the new viewer and enabled JSON logging by default for newly installed HAProxy and NGINX services.
• Security and interface fixes. Strengthened authorization, group isolation, file-path validation, and command handling. Fixed reported security issues and CodeQL findings. Protected servers and SSH credentials from deletion while still referenced, fixed action menus, and removed the Ansible requirement from filesystem and S3 backup management.
• Release and regression coverage. Added automated native package publication and expanded GitHub Actions coverage with API workflows, Chromium browser tests, container shutdown and recovery checks, and SQLite/MariaDB restore scenarios. Fixed MariaDB initialization and database readiness behavior during outages. When upgrading, preserve the database, application data, and existing encryption keys. Apply database migrations and migrate existing backup and Let's Encrypt cron schedules to Scheduler.