dash 3.1.2 → 3.1.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: f055523340c3a10172a6a7b0d701bfa8d7591727005e6bb42b86a1e20feb5cc2
-  data.tar.gz: 4b07129c7bb287b216d426137eab83fc438a1ec0bfc2a010ac7333bdae94a75e
+  metadata.gz: f4a83d0c755177ff76a6adbe519a705cff0c2fa32ea8a5dc4c71fbd2b10a74b3
+  data.tar.gz: c80e2fedd3a5fb8b7e6949f384698e461b1073172ed9d99c8ccd1d7f0391d4a3
 SHA512:
-  metadata.gz: ec9eecf2779edb62d27c5bb3cb19b2e9f8febbcacb6f6e65a68d9f83e6f88d71763265c2d32e4612c437242a8a4e5ecd052d21fbd23f91b909bca7e7c2d5fc80
-  data.tar.gz: 19a72b9aa01b82a945dcea77a66a9ebeb1145d02e2434a06d43d65b8006b5a7082400f5052c48616ac6b2704399d878a21c036e9e6d618b2052545307e3356a7
+  metadata.gz: e6ea280741d6c78b1b0ed7e6762f536dd4968fb2d9575dd347d07376cfc1128f4bbed91a2c3dc2d09a1620b8a24202385854c1ded2f74d7a6093fa8955ac7b21
+  data.tar.gz: f3e9e2f1946fd99356a349a4d6148c4aa457ae4227ce08171f69f9811c27b8572bf8f4524f63631c533c4b01ba26ef5e4033be738fc1bd7f282a3e961d7eb4db

data/lib/kamal/configuration/docs/proxy.yml

@@ -834,7 +834,7 @@ proxy:
                                    # below already embeds its ghcr.io host
     repository: ghcr.io/zoolutions/kamal-proxy # Container repository for the
                                    # kamal-proxy image (this is the default)
-    version: v1.0.0.4              # Version tag of the kamal-proxy image to use.
+    version: v1.0.0.5              # Version tag of the kamal-proxy image to use.
                                    # Defaults to the minimum version this gem
                                    # requires - only pin it to roll forward early,
                                    # never below the default
@@ -851,10 +851,14 @@ proxy:
     # These are proxy-wide, not per-app: every service on this proxy shares the
     # ACME account and the DNS provider.
     #
-    # `dns_provider` names the provider that answers DNS-01 challenges. Leave it
-    # at `auto` to let the proxy pick from the credentials it can see. An
-    # unsupported name is rejected here, at config time - kamal-proxy would only
-    # log a warning and then never issue a certificate.
+    # `dns_provider` names the provider that answers DNS-01 challenges. DNS-01
+    # activates only when this is set (proxy v1.0.0.5+): unset means HTTP-01
+    # only, so credentials visible in the proxy's environment can never arm
+    # DNS-01 on their own. `auto` is an explicit opt-in that picks the provider
+    # from the credentials it can see and logs at boot which one it armed;
+    # `none` says "no DNS-01" explicitly. An unsupported name is rejected here,
+    # at config time - kamal-proxy would only log a warning and then never
+    # issue a certificate.
     #
     # A plain string (`dns_provider: cloudflare`) uses one provider for every
     # zone. The hash form pins zones to the DNS host that actually serves them,
@@ -878,7 +882,7 @@ proxy:
     #
     # `credentials` names entries in `.kamal/secrets` to pass to the proxy
     # container as environment variables - the API credentials your DNS provider
-    # needs (`CF_API_TOKEN`, `LOOPIA_API_USER`, ...). Name them exactly as the
+    # needs (`CF_DNS_API_TOKEN`, `LOOPIA_API_USER`, ...). Name them exactly as the
     # provider expects them, since the name is what reaches the container.
     #
     # They are written to a 0600 env file on the proxy host and passed with
@@ -897,7 +901,7 @@ proxy:
       http_fallback: false
       directory: https://acme-staging-v02.api.letsencrypt.org/directory
       credentials:
-        - CF_API_TOKEN
+        - CF_DNS_API_TOKEN
     # Logging and tracing
     #
     # `log_format` is the shape of every line the proxy writes, the access log

data/lib/kamal/configuration/proxy/acme.rb

@@ -13,7 +13,7 @@ class Kamal::Configuration::Proxy::Acme
   # step with the proxy by test/proxy_flag_coverage_test.rb, which compares this
   # list against the manifest bin/sync-proxy-flags generates from the image.
   DNS_PROVIDERS = %w[
-    auto cloudflare digitalocean gcloud godaddy hetzner namecheap route53 vultr
+    auto cloudflare digitalocean gcloud godaddy hetzner namecheap none route53 vultr
   ].freeze
 
   # Short forms kamal-proxy's ParseProviderName accepts but does not advertise,

data/lib/kamal/configuration/proxy/run.rb

@@ -1,5 +1,5 @@
 class Kamal::Configuration::Proxy::Run
-  MINIMUM_VERSION = "v1.0.0.4"
+  MINIMUM_VERSION = "v1.0.0.5"
   DEFAULT_HTTP_PORT = 80
   DEFAULT_HTTPS_PORT = 443
   DEFAULT_LOG_MAX_SIZE = "10m"

data/lib/kamal/version.rb

@@ -1,3 +1,3 @@
 module Kamal
-  VERSION = "3.1.2"
+  VERSION = "3.1.3"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dash
 version: !ruby/object:Gem::Version
-  version: 3.1.2
+  version: 3.1.3
 platform: ruby
 authors:
 - Mikael Henriksson