michael/URBM
0
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add safe repository password rotation

Browse Source
This commit is contained in:
Mikei386
2026-06-15 20:13:10 +02:00
parent 3579756cc9
commit 9249fad65a
12 changed files with 262 additions and 30 deletions
Download Patch File Download Diff File Expand all files Collapse all files
plugin/urbm.plg
+8 -1
View File
@@ -2,13 +2,20 @@
<!DOCTYPE PLUGIN [
<!ENTITY name "urbm">
<!ENTITY author "Michael Roll">
<!ENTITY version "2026.06.15.r019">
<!ENTITY version "2026.06.15.r020">
<!ENTITY pluginURL "https://git.casaderoll.de/michael/URBM/raw/branch/main/dist/urbm.plg">
<!ENTITY packageURL "https://git.casaderoll.de/michael/URBM/raw/branch/main/dist/urbm-&version;-x86_64-1.txz">
<!ENTITY packageSHA256 "REPLACE_DURING_RELEASE">
]>
<PLUGIN name="&name;" author="&author;" version="&version;" pluginURL="&pluginURL;" min="7.0.0" support="https://git.casaderoll.de/michael/URBM/issues" icon="urbm.png">
<CHANGES>
### 2026.06.15.r020
- Add a guided Restic repository password change that creates and verifies a new key before removing the old key.
- Update the encrypted URBM secret only after Restic accepts the new password, with automatic repository rollback on secret-storage failure.
- Add a verified local-password adoption action for additional URBM servers that share a repository whose password was changed elsewhere.
- Block password changes while tasks are queued, running, or paused and replace misleading password fields in normal repository editing.
- Write encrypted secret records atomically to protect the previous password during filesystem failures.
### 2026.06.15.r019
- Add a clearly labeled manual-only schedule mode for every backup and Rsync job.
- Keep manual-only jobs enabled for one-click starts while excluding them from scheduled and catch-up runs.