dash 3.1.5 → 3.2.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: f5065b1c8a366e822c1a5725f6695e7a3c331fcc463f46468fbe4fee20d78849
-  data.tar.gz: 771148010423f80ae9be75786e72ea16c04ed42aed1df9299d7bbf8964f5576a
+  metadata.gz: 5f607b635a7a5840d0bf9c4e6e4377d2ca86a17ed8a619510e08f487eb69da2e
+  data.tar.gz: cdc6b6d1ffd33421f54ff48d73c43f69926505f8686c82cf9c0f8734766bd35e
 SHA512:
-  metadata.gz: 9d2331591dddd15a2b4dfebe431140f1a8b514060478160c306af84474183792097abf2ac23f90f025ee13ab4e218fdeb552273ac22bfb59853ab21e1e9d83dd
-  data.tar.gz: 45f79aa83398b76497eedb2b39fc66bbc9c28ef3beb3934ed8701dda2236e746f288645a8355c0e3a7c3091eb3189eb4b236122d27b8c5ceb36a0bb31c756b4b
+  metadata.gz: 6958eebf303bac9ca6eb09a41a16c8db0b885f23b2e6b52c1f8f711c6e1e5406429d4c12a77f5ecf012f4b9c8a2c349f8721312df95ae733fc3960a08b5ea523
+  data.tar.gz: 1aab7f0ee631c4447e0ad396821e81bbb623777e8205b55544492d3b4ae13806733aaecbb5efdaae144a8df8217354369c133668b0cc82b0036c24e93e5194b7

data/README.md

@@ -1,13 +1,33 @@
-# Kamal: Deploy web apps anywhere
+# dash: Deploy web apps anywhere
 
-From bare metal to cloud VMs, deploy web apps anywhere with zero downtime. Kamal uses [kamal-proxy](https://github.com/basecamp/kamal-proxy) to seamlessly switch requests between containers. Works seamlessly across multiple servers, using SSHKit to execute commands. Originally built for Rails apps, Kamal will work with any type of web app that can be containerized with Docker.
+From bare metal to cloud VMs, deploy web apps anywhere with zero downtime. dash uses [dash-proxy](https://github.com/zoolutions/dash-proxy) to seamlessly switch requests between containers, load-balance across multiple hosts, batch SAN certificates, and issue wildcard certs via DNS-01. Works across multiple servers, using SSHKit to execute commands. Originally built for Rails apps, dash works with any type of web app that can be containerized with Docker.
 
-➡️ See [kamal-deploy.org](https://kamal-deploy.org) for documentation on [installation](https://kamal-deploy.org/docs/installation), [configuration](https://kamal-deploy.org/docs/configuration), and [commands](https://kamal-deploy.org/docs/commands).
+dash began as a fork of [basecamp/kamal](https://github.com/basecamp/kamal) and made a clean break in 2026 — it ships the features upstream wouldn't merge (proxy load balancing, readiness gates, response caching, traffic shaping, and more) and moves at its own pace. Existing kamal deployments upgrade in place: the on-server artifacts (`.kamal/` directory, `kamal-proxy` container, `KAMAL_*` secrets) are unchanged.
 
-## Contributing to the documentation
+## Installation
 
-Please help us improve Kamal's documentation on [the basecamp/kamal-site repository](https://github.com/basecamp/kamal-site).
+```bash
+gem install dash
+dash init
+```
+
+Or in a Gemfile-managed app:
+
+```bash
+bundle add dash
+bundle binstubs dash
+bin/dash init
+```
+
+Configure your deployment in `config/deploy.yml`, then:
+
+```bash
+dash setup     # first deploy: bootstraps Docker, boots the proxy, deploys
+dash deploy    # every deploy after that
+```
+
+`dash docs` prints the full, always-current configuration reference. Upstream kamal's docs at [kamal-deploy.org](https://kamal-deploy.org) still cover the shared basics.
 
 ## License
 
-Kamal is released under the [MIT License](https://opensource.org/licenses/MIT).
+dash is released under the [MIT License](https://opensource.org/licenses/MIT), preserving the license of the kamal codebase it descends from.

data/lib/kamal/cli/app.rb

@@ -194,7 +194,7 @@ class Kamal::Cli::App < Kamal::Cli::Base
             puts_by_host host, "Stopping stale container for role #{role} with version #{version}", quiet: quiet
             execute *app.stop(version: version), raise_on_non_zero_exit: false
           else
-            puts_by_host host,  "Detected stale container for role #{role} with version #{version} (use `kamal app stale_containers --stop` to stop)", quiet: quiet
+            puts_by_host host,  "Detected stale container for role #{role} with version #{version} (use `dash app stale_containers --stop` to stop)", quiet: quiet
           end
         end
       end

data/lib/kamal/cli/base.rb

@@ -317,7 +317,7 @@ module Kamal::Cli
             puts status
 
             unless status.include?(AUTOMATIC_DEPLOY_LOCK_MESSAGE)
-              raise LockError, "Deploy lock held manually, not waiting. Run 'kamal lock help' for more information"
+              raise LockError, "Deploy lock held manually, not waiting. Run 'dash lock help' for more information"
             end
 
             details_shown = true
@@ -346,7 +346,7 @@ module Kamal::Cli
       rescue LockHeldError
         say "Deploy lock already in place!", :red
         puts capture_lock_status
-        raise LockError, "Deploy lock found. Run 'kamal lock help' for more information"
+        raise LockError, "Deploy lock found. Run 'dash lock help' for more information"
       end
 
       def execute_lock_acquire(message, lock: KAMAL.lock, hosts: KAMAL.primary_host)

data/lib/kamal/cli/doctor/host_checks.rb

@@ -41,7 +41,7 @@ class Kamal::Cli::Doctor::HostChecks
       if execute(*KAMAL.docker.running?, raise_on_non_zero_exit: false)
         result :docker, :ok, "docker is installed and running"
       else
-        result :docker, :fail, "docker is not installed or not running (run `kamal server bootstrap`)"
+        result :docker, :fail, "docker is not installed or not running (run `dash server bootstrap`)"
       end
     rescue StandardError => e
       result :docker, :fail, "#{e.class}: #{e.message}"
@@ -96,7 +96,7 @@ class Kamal::Cli::Doctor::HostChecks
       elsif version.nil?
         result :proxy_version, :ok, "not running (will be started on deploy)"
       elsif Kamal::Utils.older_version?(version, minimum)
-        result :proxy_version, :fail, "#{version} is older than the minimum #{minimum}, run `kamal proxy reboot` to update"
+        result :proxy_version, :fail, "#{version} is older than the minimum #{minimum}, run `dash proxy reboot` to update"
       else
         result :proxy_version, :ok, "#{version} (minimum #{minimum})"
       end
@@ -127,14 +127,14 @@ class Kamal::Cli::Doctor::HostChecks
         if mounted.include?(expected)
           result :proxy_socket, :ok, "docker socket #{expected} is mounted"
         elsif sleep_configured?
-          result :proxy_socket, :fail, "the running kamal-proxy has no #{expected} mount, so sleeping services never wake - run `kamal proxy reboot`"
+          result :proxy_socket, :fail, "the running kamal-proxy has no #{expected} mount, so sleeping services never wake - run `dash proxy reboot`"
         else
           # Nothing sleeps yet, so nothing hangs - drift rather than breakage.
-          result :proxy_socket, :warn, "the running kamal-proxy has no #{expected} mount - run `kamal proxy reboot` to apply the current configuration"
+          result :proxy_socket, :warn, "the running kamal-proxy has no #{expected} mount - run `dash proxy reboot` to apply the current configuration"
         end
       elsif (stray = mounted.grep(DOCKER_SOCKET_PATTERN).first)
         result :proxy_socket, :warn, "the running kamal-proxy mounts #{stray} but the config no longer asks for it - " \
-          "the socket is root-equivalent host access; `kamal proxy reboot` removes it"
+          "the socket is root-equivalent host access; `dash proxy reboot` removes it"
       else
         result :proxy_socket, :ok, "no docker socket configured or mounted"
       end

data/lib/kamal/cli/main.rb

@@ -120,7 +120,7 @@ class Kamal::Cli::Main < Kamal::Cli::Base
             invoke "kamal:cli:app:boot", [], invoke_options.merge(version: version)
             rolled_back = true
           else
-            say "The app version '#{version}' is not available as a container (use 'kamal app containers' for available versions)", :red
+            say "The app version '#{version}' is not available as a container (use 'dash app containers' for available versions)", :red
           end
         end
       end
@@ -151,7 +151,7 @@ class Kamal::Cli::Main < Kamal::Cli::Base
     end
   end
 
-  desc "docs [SECTION]", "Show Kamal configuration documentation"
+  desc "docs [SECTION]", "Show dash configuration documentation"
   def docs(section = nil)
     case section
     when NilClass
@@ -181,7 +181,7 @@ class Kamal::Cli::Main < Kamal::Cli::Base
   end
 
   desc "init", "Create config stub in config/deploy.yml and secrets stub in .kamal"
-  option :bundle, type: :boolean, default: false, desc: "Add Kamal to the Gemfile and create a bin/kamal binstub"
+  option :bundle, type: :boolean, default: false, desc: "Add dash to the Gemfile and create a bin/dash binstub"
   def init
     require "fileutils"
 
@@ -208,15 +208,15 @@ class Kamal::Cli::Main < Kamal::Cli::Base
     end
 
     if options[:bundle]
-      if (binstub = Pathname.new(File.expand_path("bin/kamal"))).exist?
-        puts "Binstub already exists in bin/kamal (remove first to create a new one)"
+      if (binstub = Pathname.new(File.expand_path("bin/dash"))).exist?
+        puts "Binstub already exists in bin/dash (remove first to create a new one)"
       else
-        puts "Adding Kamal to Gemfile and bundle..."
+        puts "Adding dash to Gemfile and bundle..."
         run_locally do
-          execute :bundle, :add, :kamal
-          execute :bundle, :binstubs, :kamal
+          execute :bundle, :add, :dash
+          execute :bundle, :binstubs, :dash
         end
-        puts "Created binstub file in bin/kamal"
+        puts "Created binstub file in bin/dash"
       end
     end
   end
@@ -265,7 +265,7 @@ class Kamal::Cli::Main < Kamal::Cli::Base
     end
   end
 
-  desc "version", "Show Kamal version"
+  desc "version", "Show dash version"
   def version
     puts Kamal::VERSION
   end

data/lib/kamal/cli/proxy/drift.rb

@@ -13,7 +13,7 @@ class Kamal::Cli::Proxy::Drift
 
   # A proxy container has drifted when it was started with a different config
   # digest than the one the current configuration produces. Containers booted
-  # by older kamal versions carry no digest label and count as drifted, so
+  # by older dash versions carry no digest label and count as drifted, so
   # they converge on the first deploy after upgrading.
   def drifted?
     return @drifted if defined?(@drifted)

data/lib/kamal/cli/proxy/loadbalancer_claim.rb

@@ -1,4 +1,4 @@
-# Ownership bookkeeping for a load balancer host that more than one kamal app
+# Ownership bookkeeping for a load balancer host that more than one dash app
 # may be deploying to. Kamal only ever sees one deploy.yml at a time, so the
 # other apps are visible solely through the files they left on the host.
 class Kamal::Cli::Proxy::LoadbalancerClaim
@@ -29,7 +29,7 @@ class Kamal::Cli::Proxy::LoadbalancerClaim
   # Every app sharing a load balancer boots the same container, so their
   # proxy/run configurations have to agree. A mismatch owned by another app is
   # an error; a mismatch owned by this app is ordinary drift, reported the same
-  # way the per-host proxy reports it and fixed by `kamal proxy reboot`.
+  # way the per-host proxy reports it and fixed by `dash proxy reboot`.
   def claim_run_config(replace: false)
     record = capture_with_info(*commands.read_run_config_record, raise_on_non_zero_exit: false).strip
 
@@ -43,7 +43,7 @@ class Kamal::Cli::Proxy::LoadbalancerClaim
                 "Apps sharing a load balancer must agree on proxy/run - align the configurations or use a different load balancer host."
         elsif !replace
           warn "The load balancer on #{host} is running with a configuration that no longer matches the deploy config - " \
-               "run `kamal proxy reboot` to apply the new configuration."
+               "run `dash proxy reboot` to apply the new configuration."
           return
         end
       end

data/lib/kamal/cli/proxy/loadbalancer_reboot.rb

@@ -1,5 +1,5 @@
 # Replaces the loadbalancer container with one booted from the current
-# configuration. Shared by `kamal proxy reboot` and the drift-detected reboot
+# configuration. Shared by `dash proxy reboot` and the drift-detected reboot
 # on boot - the same sequence either way, so the two paths cannot diverge.
 #
 # Unlike the proxy hosts' port-holder handoff this is stop -> run: the

data/lib/kamal/cli/proxy.rb

@@ -33,7 +33,7 @@ class Kamal::Cli::Proxy < Kamal::Cli::Base
           version = capture_with_info(*proxy.version).strip.presence
 
           if version && Kamal::Utils.older_version?(version, Kamal::Configuration::Proxy::Run::MINIMUM_VERSION)
-            raise "kamal-proxy version #{version} is too old, run `kamal proxy reboot` in order to update to at least #{Kamal::Configuration::Proxy::Run::MINIMUM_VERSION}"
+            raise "kamal-proxy version #{version} is too old, run `dash proxy reboot` in order to update to at least #{Kamal::Configuration::Proxy::Run::MINIMUM_VERSION}"
           end
 
           if (run_config = proxy.proxy_run_config)&.secrets?
@@ -52,7 +52,7 @@ class Kamal::Cli::Proxy < Kamal::Cli::Base
 
       if stale_hosts.any?
         say "kamal-proxy on #{stale_hosts.sort.join(", ")} is running with a configuration that no longer matches the deploy config. " \
-            "Automatic reboot is disabled (proxy: reboot_on_deploy: false) - run `kamal proxy reboot` to apply the new configuration.", :yellow
+            "Automatic reboot is disabled (proxy: reboot_on_deploy: false) - run `dash proxy reboot` to apply the new configuration.", :yellow
       end
 
       drifted_hosts.sort.each do |host|
@@ -114,7 +114,7 @@ class Kamal::Cli::Proxy < Kamal::Cli::Base
 
         if lb_stale.any?
           say "The loadbalancer on #{lb_stale.sort.join(", ")} is running with a configuration that no longer matches the deploy config. " \
-              "Automatic reboot is disabled (proxy: reboot_on_deploy: false) - run `kamal proxy reboot` to apply the new configuration.", :yellow
+              "Automatic reboot is disabled (proxy: reboot_on_deploy: false) - run `dash proxy reboot` to apply the new configuration.", :yellow
         end
 
         lb_drifted.sort.each do |host|
@@ -316,7 +316,7 @@ class Kamal::Cli::Proxy < Kamal::Cli::Base
       end
 
       # `docker container prune` only collects stopped containers, so leaving the
-      # loadbalancer running would also leave `kamal proxy remove` unable to
+      # loadbalancer running would also leave `dash proxy remove` unable to
       # remove it.
       if KAMAL.config.proxy.load_balancing?
         on(KAMAL.config.proxy.effective_loadbalancer) do
@@ -539,7 +539,7 @@ class Kamal::Cli::Proxy < Kamal::Cli::Base
 
   desc "import_certs", "Import certificates into the TLS certificate store from a Traefik acme.json or an exported archive"
   option :traefik_acme, type: :string, default: nil, desc: "Local path of a Traefik acme.json to import from"
-  option :archive, type: :string, default: nil, desc: "Local path of an archive written by kamal proxy export_certs"
+  option :archive, type: :string, default: nil, desc: "Local path of an archive written by dash proxy export_certs"
   option :resolver, type: :string, default: nil, desc: "Import only this Traefik resolver's certificates (default: all, last writer wins per domain)"
   option :force, type: :boolean, default: false, desc: "Overwrite a non-empty certificate store when restoring an archive"
   option :verify, type: :boolean, default: false, desc: "Only verify the archive: report domains and expiries without touching the store"
@@ -560,7 +560,7 @@ class Kamal::Cli::Proxy < Kamal::Cli::Base
           if capture_with_info(*commands.container_id(only_running: true), raise_on_non_zero_exit: false).strip.present?
             raise "Cannot import certificates while the #{load_balancing ? "loadbalancer" : "proxy"} " \
               "is running on #{host} - stop it first " \
-              "(kamal proxy #{load_balancing ? "loadbalancer stop" : "stop"}), import, then start it again"
+              "(dash proxy #{load_balancing ? "loadbalancer stop" : "stop"}), import, then start it again"
           end
         end
 
@@ -682,7 +682,7 @@ class Kamal::Cli::Proxy < Kamal::Cli::Base
       if force
         say "Forcing, so removing the proxy, even though other apps are installed", :magenta
       else
-        say "Not removing the proxy, as other apps are installed, ignore this check with kamal proxy remove --force", :magenta
+        say "Not removing the proxy, as other apps are installed, ignore this check with dash proxy remove --force", :magenta
       end
 
       force

data/lib/kamal/cli/registry.rb

@@ -30,7 +30,7 @@ class Kamal::Cli::Registry < Kamal::Cli::Base
   option :skip_remote, aliases: "-R", type: :boolean, default: false, desc: "Skip remote login"
   def login
     if KAMAL.registry.local?
-      raise "Cannot use login command with a local registry. Use `kamal registry setup` instead."
+      raise "Cannot use login command with a local registry. Use `dash registry setup` instead."
     end
 
     setup
@@ -41,7 +41,7 @@ class Kamal::Cli::Registry < Kamal::Cli::Base
   option :skip_remote, aliases: "-R", type: :boolean, default: false, desc: "Skip remote login"
   def logout
     if KAMAL.registry.local?
-      raise "Cannot use logout command with a local registry. Use `kamal registry remove` instead."
+      raise "Cannot use logout command with a local registry. Use `dash registry remove` instead."
     end
 
     remove

data/lib/kamal/cli/server.rb

@@ -34,7 +34,7 @@ class Kamal::Cli::Server < Kamal::Cli::Base
     end
   end
 
-  desc "bootstrap", "Set up Docker to run Kamal apps"
+  desc "bootstrap", "Set up Docker to run dash apps"
   def bootstrap
     modify(lock: true) do
       missing = []

data/lib/kamal/cli/templates/deploy.yml

@@ -49,8 +49,8 @@ builder:
 #   secret:
 #     - RAILS_MASTER_KEY
 
-# Aliases are triggered with "bin/kamal <alias>". You can overwrite arguments on invocation:
-# "bin/kamal app logs -r job" will tail logs from the first server in the job section.
+# Aliases are triggered with "bin/dash <alias>". You can overwrite arguments on invocation:
+# "bin/dash app logs -r job" will tail logs from the first server in the job section.
 #
 # aliases:
 #   shell: app exec --interactive --reuse "bash"

data/lib/kamal/cli/templates/secrets

@@ -13,10 +13,10 @@
 # RAILS_MASTER_KEY=$(cat config/master.key)
 # KAMAL_REGISTRY_PASSWORD=$(rails credentials:fetch kamal.registry_password)
 
-# Option 3: Read secrets via kamal secrets helpers
+# Option 3: Read secrets via dash secrets helpers
 # These will handle logging in and fetching the secrets in as few calls as possible
 # There are adapters for 1Password, LastPass + Bitwarden
 #
-# SECRETS=$(kamal secrets fetch --adapter 1password --account my-account --from MyVault/MyItem KAMAL_REGISTRY_PASSWORD RAILS_MASTER_KEY)
-# KAMAL_REGISTRY_PASSWORD=$(kamal secrets extract KAMAL_REGISTRY_PASSWORD $SECRETS)
-# RAILS_MASTER_KEY=$(kamal secrets extract RAILS_MASTER_KEY $SECRETS)
+# SECRETS=$(dash secrets fetch --adapter 1password --account my-account --from MyVault/MyItem KAMAL_REGISTRY_PASSWORD RAILS_MASTER_KEY)
+# KAMAL_REGISTRY_PASSWORD=$(dash secrets extract KAMAL_REGISTRY_PASSWORD $SECRETS)
+# RAILS_MASTER_KEY=$(dash secrets extract RAILS_MASTER_KEY $SECRETS)

data/lib/kamal/commands/proxy/cert_transfer.rb

@@ -1,5 +1,5 @@
 # Certificate store transfer, shared by the proxy and loadbalancer command
-# builders (kamal proxy export_certs / import_certs).
+# builders (dash proxy export_certs / import_certs).
 #
 # Archives leave through the apps-config bind mount — the one container path
 # that is also a host path — and arrive through stdin into a one-off container:

data/lib/kamal/configuration/docs/accessory.yml

@@ -6,8 +6,8 @@
 # Accessories are managed separately from the main service — they are not updated
 # when you deploy, and they do not have zero-downtime deployments.
 #
-# Run `kamal accessory boot <accessory>` to boot an accessory.
-# See `kamal accessory --help` for more information.
+# Run `dash accessory boot <accessory>` to boot an accessory.
+# See `dash accessory --help` for more information.
 
 # Configuring accessories
 #
@@ -40,7 +40,7 @@ accessories:
     #   <<: *specific-registry
     # ```
     #
-    # See kamal docs registry for more information:
+    # See dash docs registry for more information:
     registry:
       ...
 
@@ -83,7 +83,7 @@ accessories:
 
     # Environment variables
     #
-    # See kamal docs env for more information:
+    # See dash docs env for more information:
     env:
       ...
 
@@ -157,10 +157,10 @@ accessories:
     #
     # You can run your accessory behind the Kamal proxy for hostname-based
     # routing and automatic SSL. The block accepts the same schema as the
-    # app-level `proxy:` (see `kamal docs proxy`), though root-only keys such as
+    # app-level `proxy:` (see `dash docs proxy`), though root-only keys such as
     # `loadbalancer` and `reboot_on_deploy` have no effect inside an accessory.
     # Declaring a proxy here makes the accessory's hosts proxy hosts:
-    # `kamal proxy boot` (and `kamal deploy`) will run kamal-proxy on them
+    # `dash proxy boot` (and `dash deploy`) will run kamal-proxy on them
     # automatically.
     #
     # Accessories are never load balanced. The loadbalancer fans the app's own

data/lib/kamal/configuration/docs/alias.yml

@@ -5,7 +5,7 @@
 # For example, for a Rails app, you might open a console with:
 #
 # ```shell
-# kamal app exec -i --reuse "bin/rails console"
+# dash app exec -i --reuse "bin/rails console"
 # ```
 #
 # By defining an alias, like this:
@@ -14,7 +14,7 @@ aliases:
 # You can now open the console with:
 #
 # ```shell
-# kamal console
+# dash console
 # ```
 
 # Configuring aliases

data/lib/kamal/configuration/docs/boot.yml

@@ -6,7 +6,7 @@
 #
 # This is a whole-deploy setting: `limit` slices the combined host list of every role, so it cannot
 # hold one role back while another keeps booting. To pace a single role's hosts, set `boot` on that
-# role instead (see kamal docs role).
+# role instead (see dash docs role).
 
 boot:
 

data/lib/kamal/configuration/docs/configuration.yml

@@ -5,7 +5,7 @@
 # Destinations
 #
 # When running commands, you can specify a destination with the `-d` flag,
-# e.g., `kamal deploy -d staging`.
+# e.g., `dash deploy -d staging`.
 #
 # In this case, the configuration will also be read from `config/deploy.staging.yml`
 # and merged with the base configuration.
@@ -44,19 +44,19 @@ volumes:
 
 # Registry
 #
-# The Docker registry configuration, see kamal docs registry:
+# The Docker registry configuration, see dash docs registry:
 registry:
   ...
 
 # Servers
 #
-# The servers to deploy to, optionally with custom roles, see kamal docs servers:
+# The servers to deploy to, optionally with custom roles, see dash docs servers:
 servers:
   ...
 
 # Environment variables
 #
-# See kamal docs env:
+# See dash docs env:
 env:
   ...
 
@@ -171,59 +171,59 @@ stop_timeout: 30
 
 # Run directory
 #
-# Directory to store kamal runtime files in on the host, default `.kamal`:
+# Directory to store dash runtime files in on the host, default `.kamal`:
 run_directory: /etc/kamal
 
 # SSH options
 #
-# See kamal docs ssh:
+# See dash docs ssh:
 ssh:
   ...
 
 # Builder options
 #
-# See kamal docs builder:
+# See dash docs builder:
 builder:
   ...
 
 # Accessories
 #
-# Additional services to run in Docker, see kamal docs accessory:
+# Additional services to run in Docker, see dash docs accessory:
 accessories:
   ...
 
 # Proxy
 #
-# Configuration for kamal-proxy, see kamal docs proxy:
+# Configuration for kamal-proxy, see dash docs proxy:
 proxy:
   ...
 
 # SSHKit
 #
-# See kamal docs sshkit:
+# See dash docs sshkit:
 sshkit:
   ...
 
 # Boot options
 #
-# See kamal docs boot:
+# See dash docs boot:
 boot:
   ...
 
 # Logging
 #
-# Docker logging configuration, see kamal docs logging:
+# Docker logging configuration, see dash docs logging:
 logging:
   ...
 
 # Output
 #
-# Configure output loggers (OTel, file), see kamal docs output:
+# Configure output loggers (OTel, file), see dash docs output:
 output:
   ...
 
 # Aliases
 #
-# Alias configuration, see kamal docs alias:
+# Alias configuration, see dash docs alias:
 aliases:
   ...

data/lib/kamal/configuration/docs/env.yml

@@ -34,10 +34,10 @@ env:
 # You can also use [secret helpers](../../commands/secrets) for some common password managers.
 #
 # ```shell
-# SECRETS=$(kamal secrets fetch ...)
+# SECRETS=$(dash secrets fetch ...)
 #
-# REGISTRY_PASSWORD=$(kamal secrets extract REGISTRY_PASSWORD $SECRETS)
-# DB_PASSWORD=$(kamal secrets extract DB_PASSWORD $SECRETS)
+# REGISTRY_PASSWORD=$(dash secrets extract REGISTRY_PASSWORD $SECRETS)
+# DB_PASSWORD=$(dash secrets extract DB_PASSWORD $SECRETS)
 # ```
 #
 # If you store secrets directly in `.kamal/secrets`, ensure that it is not checked into version control.
@@ -62,10 +62,10 @@ env:
 # on the context.
 #
 # ```shell
-# SECRETS=$(kamal secrets fetch ...)
+# SECRETS=$(dash secrets fetch ...)
 #
-# MAIN_DB_PASSWORD=$(kamal secrets extract MAIN_DB_PASSWORD $SECRETS)
-# SECONDARY_DB_PASSWORD=$(kamal secrets extract SECONDARY_DB_PASSWORD $SECRETS)
+# MAIN_DB_PASSWORD=$(dash secrets extract MAIN_DB_PASSWORD $SECRETS)
+# SECONDARY_DB_PASSWORD=$(dash secrets extract SECONDARY_DB_PASSWORD $SECRETS)
 # ```
 env:
   secret:
@@ -87,7 +87,7 @@ accessories:
 # Tags
 #
 # Tags are used to add extra env variables to specific hosts.
-# See kamal docs servers for how to tag hosts.
+# See dash docs servers for how to tag hosts.
 #
 # Tags are only allowed in the top-level env configuration (i.e., not under a role-specific env).
 #

data/lib/kamal/configuration/docs/proxy.yml

@@ -71,17 +71,17 @@ proxy:
   # for multi-host primary roles.
   loadbalancer: lb.example.com
 
-  # Sharing one loadbalancer between several kamal apps
+  # Sharing one loadbalancer between several dash apps
   #
-  # More than one kamal app may point `loadbalancer:` at the same host. Each app
+  # More than one dash app may point `loadbalancer:` at the same host. Each app
   # registers its own service on the shared kamal-proxy and keeps its own
   # deploy.yml; the load balancer multiplexes them by hostname.
   #
-  # The rules kamal enforces for that topology:
+  # The rules dash enforces for that topology:
   #
   # * Service state survives a reboot. kamal-proxy persists its services in the
   #   `kamal-loadbalancer-config` volume (or `kamal-proxy-config` when the
-  #   loadbalancer shares a proxy host), and `kamal proxy reboot` only replaces
+  #   loadbalancer shares a proxy host), and `dash proxy reboot` only replaces
   #   the container. Rebooting from app A does not drop app B's routes — the
   #   surviving service list is printed after the restart.
   #
@@ -96,21 +96,21 @@ proxy:
   #   same container, so the first app to boot records its run configuration in
   #   `.kamal/loadbalancer/run_config`. Another app booting with a different
   #   `proxy/run` fails; the same app changing its own gets the usual drift
-  #   warning and applies it on `kamal proxy reboot`.
+  #   warning and applies it on `dash proxy reboot`.
   #
-  # * `kamal proxy remove` refuses while other apps are installed on the
+  # * `dash proxy remove` refuses while other apps are installed on the
   #   loadbalancer host, exactly as it does for a proxy host. Use `--force` to
   #   override, which removes the shared loadbalancer for every app on it.
 
   # Automatic proxy reboot on deploy
   #
-  # When `kamal deploy` detects that the running kamal-proxy container was
+  # When `dash deploy` detects that the running kamal-proxy container was
   # started with a different image, version or run options than the current
   # configuration, it reboots the proxy automatically — one host at a time —
   # before booting the app.
   #
   # Set to false to opt out. Kamal will then print a warning when drift is
-  # detected and leave the proxy untouched until you run `kamal proxy reboot`.
+  # detected and leave the proxy untouched until you run `dash proxy reboot`.
   #
   # Root-level `proxy` setting only; ignored inside role-specific proxy blocks.
   #
@@ -155,7 +155,7 @@ proxy:
   # in an incoming handshake. A path is resolved against a healthy app target; an
   # absolute http(s) URL is called directly. Answer 2xx to approve. On-demand TLS
   # replaces the static hostname list, so it cannot be combined with
-  # `host`/`hosts`, with `certificate_pem`, or with `ssl_domains` — kamal rejects
+  # `host`/`hosts`, with `certificate_pem`, or with `ssl_domains` — dash rejects
   # those at config time, because kamal-proxy would reject the deploy and there
   # is no sensible winner to pick.
   #
@@ -258,7 +258,7 @@ proxy:
   # whitespace trimmed. A value may contain colons — a CSP naming a scheme or a
   # port survives intact.
   #
-  # Two things kamal rejects rather than letting them fail late: a value with a
+  # Two things dash rejects rather than letting them fail late: a value with a
   # newline or carriage return in it (that is response splitting, and shell
   # escaping would silently turn it into a literal backslash-n), and a *request*
   # rule naming `Host` — Go carries the host outside the header map, so the rule
@@ -450,7 +450,7 @@ proxy:
   # `header` names the header carrying the original client IP (`CF-Connecting-IP`
   # behind Cloudflare, `True-Client-IP` behind some others); kamal-proxy reads it
   # instead of `X-Forwarded-For`. It is only honoured when `trusted_proxies` is
-  # set, because otherwise it is just something the client wrote — kamal rejects
+  # set, because otherwise it is just something the client wrote — dash rejects
   # that combination rather than appearing to honour it.
   #
   # Addresses and ranges are plain IPv4/IPv6 or CIDR. Write IPv4 as IPv4, not as
@@ -501,7 +501,7 @@ proxy:
   #
   # Refuse requests whose full User-Agent matches one of these RE2 patterns,
   # checked after the IP rules. A missing User-Agent only matches an explicit
-  # '^$' pattern. Patterns are matched by kamal-proxy (Go RE2), so kamal checks
+  # '^$' pattern. Patterns are matched by kamal-proxy (Go RE2), so dash checks
   # only their shape, not their syntax.
   deny_user_agents:
     - 'BadBot/.*'
@@ -509,7 +509,7 @@ proxy:
   # ### Notes
   # - The health check path is served without an address check and without a rate
   #   limit, so it stays reachable during a deploy. That means it cannot be `/` —
-  #   kamal rejects `healthcheck: path: /` while either feature is on, because it
+  #   dash rejects `healthcheck: path: /` while either feature is on, because it
   #   would leave the whole service open. The default `/up` is fine.
   # - When a loadbalancer is configured, all of this moves to the loadbalancer:
   #   the per-host proxies see the loadbalancer as their peer, so an allow list
@@ -681,17 +681,17 @@ proxy:
   #
   # ### Administering it
   #
-  # `kamal proxy cache stats` reports what the cache is holding (add `--count`
+  # `dash proxy cache stats` reports what the cache is holding (add `--count`
   # to measure entries and bytes per service, `--json` for the raw report),
-  # and `kamal proxy cache purge` drops this app's cached responses
+  # and `dash proxy cache purge` drops this app's cached responses
   # (`--path-prefix /assets` to narrow it). Both run on the layer that owns
   # the cache - the loadbalancer when load balancing, else each proxy host.
   #
   # ### When it is not caching
   #
   # A cache that quietly stores nothing is the usual first surprise. Start with
-  # `kamal proxy cache stats`; kamal-proxy also explains every refusal — check
-  # `kamal proxy logs` for the reason, and the `cache_refusals_total` metric
+  # `dash proxy cache stats`; kamal-proxy also explains every refusal — check
+  # `dash proxy logs` for the reason, and the `cache_refusals_total` metric
   # (by `reason`) if you run with `metrics_port`.
   # The common reasons are a missing `Cache-Control: public, max-age=...` on the
   # app's response, a `Set-Cookie` header, a body over `max_body`, and
@@ -792,7 +792,7 @@ proxy:
   #
   # Stopping and starting containers means talking to the runtime, so the proxy
   # must have been booted with `run/docker_socket` set. That is a boot-time
-  # prerequisite for a deploy-time setting, so kamal checks it while reading this
+  # prerequisite for a deploy-time setting, so dash checks it while reading this
   # file rather than letting the first request hang.
   #
   # Setting `run/docker_socket` also mounts that socket into the proxy container
@@ -832,9 +832,9 @@ proxy:
                                    # `repository` to a host-less path (e.g.
                                    # myfork/kamal-proxy) - the default repository
                                    # below already embeds its ghcr.io host
-    repository: ghcr.io/zoolutions/kamal-proxy # Container repository for the
+    repository: ghcr.io/zoolutions/dash-proxy # Container repository for the
                                    # kamal-proxy image (this is the default)
-    version: v1.0.0.5              # Version tag of the kamal-proxy image to use.
+    version: v1.0.0.6              # Version tag of the kamal-proxy image to use.
                                    # Defaults to the minimum version this gem
                                    # requires - only pin it to roll forward early,
                                    # never below the default
@@ -890,7 +890,7 @@ proxy:
     # zone, and `docker run --env` would leave it in process listings and audit
     # logs. Adding or renaming one changes the proxy's config digest, so the next
     # deploy reboots the proxy to pick it up; rotating a value does not, so run
-    # `kamal proxy reboot` yourself after a rotation.
+    # `dash proxy reboot` yourself after a rotation.
     acme:
       email: admin@example.com
       dns_provider:
@@ -1035,12 +1035,12 @@ proxy:
     # `rediss://` URL that every proxy pointed at it shares, so one fetch warms
     # the whole fleet.
     #
-    # The URL never appears on the proxy's command line: kamal delivers it as
+    # The URL never appears on the proxy's command line: dash delivers it as
     # `CACHE_STORE` in a 0600 env file on the host (alongside any ACME
     # credentials), so a password in the URL stays out of process listings and
     # kamal's audit log. The trade-off, same as the ACME credentials: changing
     # only the URL's *value* does not move the drift digest — run
-    # `kamal proxy reboot` after rotating it.
+    # `dash proxy reboot` after rotating it.
     #
     # `store_timeout` only matters with a shared store, in seconds: how long
     # the store may take to answer before the request goes to the app instead —

data/lib/kamal/configuration/docs/registry.yml

@@ -60,5 +60,5 @@ registry:
 # You can validate the configuration by running:
 #
 # ```shell
-# kamal registry login
+# dash registry login
 # ```

data/lib/kamal/configuration/docs/role.yml

@@ -15,7 +15,7 @@ servers:
   #
   # This can be a list of hosts if you don't need custom configuration for the role.
   #
-  # You can set tags on the hosts for custom env variables (see kamal docs env):
+  # You can set tags on the hosts for custom env variables (see dash docs env):
   web:
     - 172.1.0.1
     - 172.1.0.2: experiment1

data/lib/kamal/configuration/docs/servers.yml

@@ -11,7 +11,7 @@ servers:
 
 # Tagging servers
 #
-# Servers can be tagged, with the tags used to add custom env variables (see kamal docs env).
+# Servers can be tagged, with the tags used to add custom env variables (see dash docs env).
 servers:
   - 172.0.0.1
   - 172.0.0.2: experiments
@@ -19,7 +19,7 @@ servers:
 
 # Roles
 #
-# For more complex deployments (e.g., if you are running job hosts), you can specify roles and configure each separately (see kamal docs role):
+# For more complex deployments (e.g., if you are running job hosts), you can specify roles and configure each separately (see dash docs role):
 servers:
   web:
     ...

data/lib/kamal/configuration/proxy/boot.rb

@@ -34,13 +34,15 @@ class Kamal::Configuration::Proxy::Boot
   end
 
   def image_name
-    "kamal-proxy"
+    "dash-proxy"
   end
 
   def image_default
     "#{repository_name}/#{image_name}"
   end
 
+  # Stays kamal-proxy until the server-artifact rename ships a migration
+  # bridge — every deployed host has a running container by this name.
   def container_name
     "kamal-proxy"
   end

data/lib/kamal/configuration/proxy/run.rb

@@ -1,5 +1,5 @@
 class Kamal::Configuration::Proxy::Run
-  MINIMUM_VERSION = "v1.0.0.5"
+  MINIMUM_VERSION = "v1.0.0.6"
   DEFAULT_HTTP_PORT = 80
   DEFAULT_HTTPS_PORT = 443
   DEFAULT_LOG_MAX_SIZE = "10m"
@@ -37,7 +37,7 @@ class Kamal::Configuration::Proxy::Run
   # running. The values deliberately stay out — the digest is published as a
   # docker label, and hashing secret material into a world-readable label buys
   # an offline guessing target for nothing. Rotating a credential's value or
-  # the store URL still needs an explicit `kamal proxy reboot`.
+  # the store URL still needs an explicit `dash proxy reboot`.
   def config_digest
     self.class.digest(image, run_command, *docker_options_args, *secret_names)
   end
@@ -95,7 +95,7 @@ class Kamal::Configuration::Proxy::Run
   end
 
   def repository
-    run_config.fetch("repository", "ghcr.io/zoolutions/kamal-proxy")
+    run_config.fetch("repository", "ghcr.io/zoolutions/dash-proxy")
   end
 
   def image
@@ -201,7 +201,7 @@ class Kamal::Configuration::Proxy::Run
   # Where the proxy's secrets land on the host - the ACME DNS credentials and
   # the cache store URL, which may embed one. Under the proxy's own directory
   # rather than the app's env directory, because the container is host-scoped
-  # and shared by every app on the host - and so `kamal proxy remove` takes
+  # and shared by every app on the host - and so `dash proxy remove` takes
   # the secrets with it.
   def secrets_path
     File.join host_directory, SECRETS_FILENAME

data/lib/kamal/configuration/proxy.rb

@@ -287,7 +287,7 @@ class Kamal::Configuration::Proxy
     client_ca_pem.present?
   end
 
-  # Resolved at upload time, not config time, so `kamal app logs` and friends
+  # Resolved at upload time, not config time, so `dash app logs` and friends
   # work on machines without the secret. A blank secret raises like
   # basic_auth.password_secret - silently deploying without the client CA
   # would turn mTLS off.

data/lib/kamal/configuration/role.rb

@@ -79,7 +79,7 @@ class Kamal::Configuration::Role
   end
 
   # Kept out of option_args on purpose: Commands::App::Execution splats those into
-  # one-shot `kamal app exec` containers, which must not inherit a service healthcheck.
+  # one-shot `dash app exec` containers, which must not inherit a service healthcheck.
   def healthcheck_args
     healthcheck&.args || []
   end

data/lib/kamal/configuration/ssh.rb

@@ -43,7 +43,7 @@ class Kamal::Configuration::Ssh
       if secrets.key?(k)
         secrets[k]
       else
-        warn "Inline key_data usage is deprecated and will be removed in Kamal 3. Please store your key_data in a secret."
+        warn "Inline key_data usage is deprecated and will be removed in a future dash release. Please store your key_data in a secret."
         k
       end
     end

data/lib/kamal/configuration.rb

@@ -451,7 +451,7 @@ class Kamal::Configuration
       return true if offenders.empty?
 
       warn "Non-proxied role(s) #{offenders.map(&:name).join(", ")} have no healthcheck. " \
-        "Without one, Kamal accepts the container as ready #{readiness_delay}s after it merely starts " \
+        "Without one, dash accepts the container as ready #{readiness_delay}s after it merely starts " \
         "and then stops the previous container — traffic can be dropped. Add a `healthcheck:` block, " \
         "or opt out explicitly with `healthcheck: false`. This warning will become an error in a future release."
 

data/lib/kamal/secrets/adapters/enpass.rb

@@ -4,10 +4,10 @@
 # Usage
 #
 # Fetch all password from FooBar item
-# `kamal secrets fetch --adapter enpass --from /Users/YOUR_USERNAME/Library/Containers/in.sinew.Enpass-Desktop/Data/Documents/Vaults/primary FooBar`
+# `dash secrets fetch --adapter enpass --from /Users/YOUR_USERNAME/Library/Containers/in.sinew.Enpass-Desktop/Data/Documents/Vaults/primary FooBar`
 #
 # Fetch only DB_PASSWORD from FooBar item
-# `kamal secrets fetch --adapter enpass --from /Users/YOUR_USERNAME/Library/Containers/in.sinew.Enpass-Desktop/Data/Documents/Vaults/primary FooBar/DB_PASSWORD`
+# `dash secrets fetch --adapter enpass --from /Users/YOUR_USERNAME/Library/Containers/in.sinew.Enpass-Desktop/Data/Documents/Vaults/primary FooBar/DB_PASSWORD`
 class Kamal::Secrets::Adapters::Enpass < Kamal::Secrets::Adapters::Base
   def requires_account?
     false

data/lib/kamal/secrets/dotenv/inline_command_substitution.rb

@@ -29,7 +29,9 @@ class Kamal::Secrets::Dotenv::InlineCommandSubstitution
           $LAST_MATCH_INFO[0][1..]
         else
           command = ::Dotenv::Substitutions::Variable.call(command, env)
-          if command =~ /\A\s*kamal\s*secrets\s+/
+          # Accept the legacy `kamal secrets` spelling too — secrets files
+          # written before the dash rename still use it.
+          if command =~ /\A\s*(dash|kamal)\s*secrets\s+/
             # Inline the command
             inline_secrets_command(command)
           else

data/lib/kamal/version.rb

@@ -1,3 +1,3 @@
 module Kamal
-  VERSION = "3.1.5"
+  VERSION = "3.2.0"
 end

data/lib/kamal.rb

@@ -12,7 +12,7 @@ require "uri"
 # so the first reference happens in several SSHKit threads at once. Digest defines
 # SHA256 lazily — `Digest.const_missing(:SHA256)` runs `require "digest/sha2"`, and
 # that path is not mutex-guarded — so the threads race it and one loses with
-# "Digest::Base cannot be directly inherited in Ruby", failing `kamal proxy boot`
+# "Digest::Base cannot be directly inherited in Ruby", failing `dash proxy boot`
 # on a random host.
 #
 # Requiring "digest" alone does NOT fix this: it defines the module but leaves

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dash
 version: !ruby/object:Gem::Version
-  version: 3.1.5
+  version: 3.2.0
 platform: ruby
 authors:
 - Mikael Henriksson
@@ -16,6 +16,9 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '7.0'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '10'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -23,6 +26,9 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '7.0'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '10'
 - !ruby/object:Gem::Dependency
   name: sshkit
   requirement: !ruby/object:Gem::Requirement
@@ -161,73 +167,15 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '0.2'
-- !ruby/object:Gem::Dependency
-  name: debug
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: '0'
-  type: :development
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: '0'
-- !ruby/object:Gem::Dependency
-  name: minitest
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - "<"
-      - !ruby/object:Gem::Version
-        version: '6'
-  type: :development
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - "<"
-      - !ruby/object:Gem::Version
-        version: '6'
-- !ruby/object:Gem::Dependency
-  name: mocha
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: '0'
-  type: :development
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: '0'
-- !ruby/object:Gem::Dependency
-  name: railties
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: '0'
-  type: :development
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: '0'
-email: mikael@mhenrixon.com
+email: mikael@zoolutions.llc
 executables:
 - dash
-- kamal
 extensions: []
 extra_rdoc_files: []
 files:
 - MIT-LICENSE
 - README.md
 - bin/dash
-- bin/kamal
 - lib/kamal.rb
 - lib/kamal/cli.rb
 - lib/kamal/cli/accessory.rb
@@ -381,10 +329,15 @@ files:
 - lib/kamal/utils.rb
 - lib/kamal/utils/sensitive.rb
 - lib/kamal/version.rb
-homepage: https://github.com/mhenrixon/kamal
+homepage: https://github.com/zoolutions/dash
 licenses:
 - MIT
-metadata: {}
+metadata:
+  homepage_uri: https://github.com/zoolutions/dash
+  source_code_uri: https://github.com/zoolutions/dash/tree/main
+  changelog_uri: https://github.com/zoolutions/dash/releases
+  bug_tracker_uri: https://github.com/zoolutions/dash/issues
+  rubygems_mfa_required: 'true'
 rdoc_options: []
 require_paths:
 - lib
@@ -399,7 +352,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 4.0.9
+rubygems_version: 3.6.9
 specification_version: 4
 summary: Deploy web apps in containers to servers running Docker with zero downtime.
 test_files: []

data/bin/kamal

@@ -1,18 +0,0 @@
-#!/usr/bin/env ruby
-
-# Prevent failures from being reported twice.
-Thread.report_on_exception = false
-
-require "kamal"
-
-begin
-  Kamal::Cli::Main.start(ARGV)
-rescue SSHKit::Runner::ExecuteError => e
-  puts "  \e[31mERROR (#{e.cause.class}): #{e.message}\e[0m"
-  puts e.cause.backtrace if ENV["VERBOSE"]
-  exit 1
-rescue => e
-  puts "  \e[31mERROR (#{e.class}): #{e.message}\e[0m"
-  puts e.backtrace if ENV["VERBOSE"]
-  exit 1
-end