bwrap off
- read-only demo server at https://a.ocv.me/pub/demo/
- docker image β± similar software β± client testbed
there is a discord server with an @everyone in case of future important updates, such as vulnerabilities (most recently 2026-07-06)
recent important news
- v1.20.17 (2026-07-06) fixed a vuln when a volume has both filekeys and dirkeys enabled
- v1.20.17 (2026-07-06) introduced csp nonces, possibly breaking some javascript-based plugins
π§ͺ new features
- shadowing: filesystem-path
//NULLwill fully unmap a volume from the server's filesystem (no more/var/lib/empties/4jank) 8884606
π©Ή bugfixes
- fix a false-positive warning on startup 12878e6
π§ other changes
- #1552 #1551 default-disabled the bwrap ffmpeg sandbox; 85a8cc9
- sandboxing can fail in too many creative ways (funky linux distros with funky filesystem layouts and policies) so autoconfiguring bwrap is not feasible
- to enable it, set
use-bwrap: yafter adjusting th-bwrap to match your OS/env- see the default
th-bwrapvalue in--helpon your server for a best-effort guess
- see the default
- always rotate (never overwrite)
-lologfiles on startup unless--rlo no29e145f - thumbnails: save a tiny bit of I/O by not refreshing expiration-times if
th-clean(expiration) is disabled anyways e15f292
π fun facts
- no
β οΈ not the latest version!