github.com/tis24dev/proxsave

Release Notes

• New Features
  • Configure backups to run daily, weekly, or monthly in the installation wizard and configuration.
  • View backup schedule status and synchronization in daemon and dashboard status.
  • Adopt supported existing cron schedules during installation or upgrades.
  • Preserve daemon state during clean reinstalls and store it in a dedicated location.
  • See clearer notification and healthcheck status when relay responses are unavailable or schedules are pending.
  • Track release-note acknowledgements using the configured log location.
• Security
  • Check PBS token-file permissions and warn about insecure settings.
• Documentation
  • Updated installation, scheduling, daemon, healthcheck, and notification guides.

Changelog

• a7eae9e Release v0.41.0 (#330)

Release Notes

• New Features

  • Choose a notification threshold during setup: every run, warnings and failures, or failures only. Healthchecks setup shows the effective setting; filtered channels are recorded without sending a ping.
  • Restore workflows can merge backed-up kernel parameters into supported boot configurations and rebuild boot components when needed.
  • Cluster recovery checks quorum and coordinates service shutdown and restart. Restore backups and logs are stored in a protected, persistent location.
  • Backups can collect Proxmox data from prefixed system roots and report when storage is not visible.
  • New-install resets preserve guards/ and restore/.

• Bug Fixes

  • Restore is refused when dry-run is enabled, and low staging space is reported as a collection error.
  • Restore safeguards protect host-specific boot and ZFS settings and export categories for products not installed on the target.

• Documentation

  • Updated setup, notification, backup, and restore guidance.

Changelog

• 1ed285c Release v0.40.0 (#329)

Release Notes

• New Features

  • Improved Proxmox VE/PBS detection distinguishes active installations from leftover files and reports residual files without misclassifying hosts.
  • Backups can continue when one side of a dual-role system fails, preserving successful data and recording incomplete targets.
  • Archive metadata now identifies partially collected roles.

• Bug Fixes

  • Restore compatibility correctly recognizes partial dual-role archives.
  • Version detection more reliably falls back to package information when commands fail or omit versions.
  • Package status reporting now distinguishes unavailable status data from packages that are not installed.

• Documentation

  • Updated collector and restore documentation to describe partial collection and revised detection behavior.

Changelog

• e30e1d1 Release v0.39.0 (#322)

Release Notes

• New Features

  • Added a dashboard-first workflow for backups, restores, configuration, upgrades, daemon management, and diagnostics.
  • PBS ACME account backups and restores now support per-account files in acme/accounts/.
  • Added clearer detection diagnostics and warnings for likely misspelled configuration variables.
  • Configured personal scripts now report when they are refused before starting.
  • Configuration upgrades place restored variables within their documented sections.

• Bug Fixes

  • The permission-check bypass setting now takes effect as configured.
  • Invalid staged ACME account entries are refused without modifying live accounts.

• Documentation

  • Expanded guides covering dashboard workflows, scheduling, upgrades, recovery, monitoring, configuration, and troubleshooting.

Changelog

• 676b705 Release v0.38.0 (#319)

Release Notes

• New Features

  • Added configuration integrity checks for duplicate, missing, unknown, and legacy variables, with actionable findings and verdicts.
  • Improved personal-script diagnostics with clearer configuration explanations and hard-link advisories.
  • Restore operations now report refused or indeterminate storage settings, overridden guest locks, and interrupted guest registrations more clearly.

• Bug Fixes

  • Personal-script launches now return when paths are blocked.
  • Dashboard relaunches preserve the relaunched process’s exit status.
  • Release notes are marked seen when closed by keyboard actions.

• Documentation

  • Updated configuration, daemon-status, installation, and troubleshooting guidance.
  • Clarified email notification terminology by referring to delivery “modes.”

Changelog

• 4bc7c82 Release v0.37.0 (#312)

Release Notes

• New Features
  • Added safer post-upgrade finalization using the newly installed version.
  • Added clearer daemon-status reporting for unreadable configuration files, including UNKNOWN states and reasons.
  • Added personal-script hardlink protection advisories.
• Bug Fixes
  • Prevented stderr warnings from corrupting PVE, PBS, rclone, and email-recipient data parsing.
  • Improved guest and storage configuration fallback handling.
  • Cancellations now stop staged configuration changes safely.
  • Automatic upgrades no longer pause for the What's New screen.
  • Rejected --dry-run when used with upgrade operations.
• Documentation
  • Updated CLI, daemon-status, security, and What's New documentation.

Changelog

• 52ad360 Release v0.36.0 (#308)

Release Notes

• New Features
  • Daemon status compares running and current personal-script configurations, including synchronization, drift, warnings, and refusal reasons.
  • Runtime details include configuration path, startup time, and availability status.
  • Personal scripts under trusted user-owned parent directories can run with a READY WITH WARNING advisory.
  • PVE cluster database snapshots can now use SQLite successfully.
• Bug Fixes
  • Daemon runtime state is cleaned up reliably during shutdown.
  • Personal scripts remain bound to validated files during execution.
• Documentation
  • Updated guidance for script trust, runtime diagnostics, and daemon status.

Changelog

• f882c8f Release v0.35.0 (#307)

Release Notes

• New Features
  • Prevented multiple backup daemon instances from running simultaneously.
  • Improved Proxmox VE cluster restore handling for guests, storage, datacenter settings, and scheduled jobs.
  • Added more reliable Proxmox configuration database snapshots.
  • Dashboard upgrades now relaunch the updated application automatically.
  • Daemon status now reports personal script readiness and diagnostic details without executing scripts.
  • Notification failures now produce a warning exit status for monitoring.
• Bug Fixes
  • Corrected temporary-file detection, cloud log deletion, mount resolution, and storage completion reporting.
  • Protected binary and non-plain-text files during text cleanup.
  • Improved backup failure and skipped-operation logging.
  • Added safer validation for cluster restore writes.
  • Console log-level filtering now preserves warnings and errors in logs and counters.
• Documentation
  • Updated CLI logging, notification, restore, daemon, and troubleshooting documentation.

Changelog

• 1da33cb Release v0.34.0 (#304)

Release Notes

• New Features

  • Added optional daemon-only pre-run and post-run scripts for supervised backups.
  • Added trusted script-path validation with warnings for rejected paths.

• Bug Fixes

  • Improved storage and cancellation error messages with clearer causes and context.
  • Secondary-storage listings now report unreadable archives and missing locations more accurately.
  • Prevented failures when handling invalid storage errors.

• Improvements

  • Standardized log severity formatting across the application.
  • Log categories now sort case-insensitively.
  • Expanded configuration, security, daemon, and troubleshooting documentation.

Changelog

• b6765c7 Release v0.33.0 (#303)

Release Notes

• New Features
  • Upgrades preserve the recorded scheduler mode and install the daemon only when no scheduler has been configured.
  • Added reliable external upgrade support through install.sh --upgrade.
  • Daemon and cron transitions now preserve schedules and report removed, retained, or duplicate entries.
• Bug Fixes
  • Improved detection of wrapped and environment-prefixed cron commands.
  • Healthcheck warnings now explain unsupported cron configurations.
  • Cron scanning no longer hangs on unresponsive files or named pipes.
• Documentation
  • Updated upgrade, daemon, cron, healthcheck, and installation guidance.
  • Removed the deprecated daemon opt-out setting.

Changelog

• f1838cb Release v0.32.0 (#301)

Release Notes

• Bug Fixes

  • Improved backup retention across hostname changes while protecting archives belonging to other hosts.
  • Added safer handling for legacy and unattributable archives.
  • Restore operations now validate archive ownership using the run’s resolved hostname.
  • Strengthened restore path checks to block unsafe archive entries.
  • Prevented command and diagnostic operations from hanging indefinitely.
  • Corrected backup counts and retention reporting to reflect host-owned archives accurately.

• Documentation

  • Expanded cloud retention, troubleshooting, and release guidance.
  • Release-note checks now apply consistently to prereleases.

Changelog

• 5e71f93 Release v0.31.0 (#296)

Release Notes

First stable of the 0.30 line. Includes everything from v0.30.0-beta1 to v0.30.0-beta11.

• New Features

  • Rebuilt graphical interface: running proxsave opens an interactive dashboard, and backup, install, upgrade and support stream inside a contained scrollable panel. The legacy wizard is gone.
  • Resident daemon with its own scheduler and hang watchdog, replacing cron (reversible), plus --daemon-status, binary-alignment checks and stuck-backup recovery.
  • Backup monitoring via per-channel Healthchecks sensors, centralized or self mode, with credential provisioning and recovery and a one-time portal sign-in link.
  • In-app update screen and --upgrade --localfile, upgrade-beta.sh for prereleases, and a What's New screen (--show-whatsnew) shown once after an interactive upgrade.
  • HOST_BACKUP_MODE to back up a Proxmox host from an HA-LXC appliance over a read-only mount.
  • Richer backup recap and summaries: warnings, missing items, log path, Telegram Server ID, Healthchecks link, PVE collection summary.
  • Full restore adds safety checks, confirmation and a safety backup; retention protects backups belonging to other hosts.

• Bug Fixes

  • Around 200 fixes across restore, the graphical UI, install, the daemon, the dashboard, backup, storage, decrypt and security.
  • Notification failures are scoped to a dedicated notify-error severity, with real Healthchecks transmission status and less duplicate logging.
  • Telegram relay credentials are re-provisioned when rejected or parked, with bounded backoff.
  • PBS notification restore reporting distinguishes empty, failed, partially applied and incomplete configurations.

• Security

  • Trojan-source build guard, operator-file reads confined through the OS root-directory API, and restore-safety fixes for symlinks, hardlinks, dedup scoping and atomic writes.
  • Support backups use a secret maintainer address, shared consent prompts and stricter archive permissions.
  • Refreshed security tooling, workflow pins, minimum Go runtime, and the release credential is no longer persisted in .git/config.

• Documentation

  • New healthchecks and monitoring guide, plus expanded scheduling, storage, recovery, encryption, install, notification, restore and exit-code references.

• Upgrade Notes

  • Scheduling migrates from cron to the daemon automatically; it is reversible from the dashboard.
  • PBS datastore file scanning is now off by default. Set PXAR_SCAN_ENABLE=true in backup.env to keep it.
  • Open Healthchecks in the dashboard for the monitoring portal address and sign-in details.

Changelog

• 048c3b8 Release v0.30.0 (#290)

Release Notes

• Documentation

  • Added dedicated healthchecks/monitoring documentation (model, check families, modes, setup, and troubleshooting).
  • Reworked daemon/dashboard/install/notifications references to point to the new healthchecks guide.
  • Expanded dashboard diagnostics and the healthcheck setup wizard content.

• Bug Fixes

  • Improved command output handling to prevent stderr from contaminating saved JSON/artifacts.
  • Diagnostics still include stderr details on failures, while successful outputs remain clean.

Changelog

• 97c2ace Release v0.30.0-beta9 (#276)

Release Notes

• Bug Fixes

  • The “What’s New” screen now determines whether content should be shown before starting the interactive session.
  • Skipped screens no longer open an unnecessary dashboard session.
  • Seen-status recovery is handled more safely when stored state is invalid.
  • The seen status is updated only after the “What’s New” flow completes successfully.

• Tests

  • Added coverage for skipped and displayed “What’s New” scenarios.
  • Updated validation for screen timeout behavior.

Changelog

• bdba162 Release v0.30.0-beta8 (#275)

Release Notes

• New Features
  • Added --show-whats-new mode to display release highlights and exit.
  • After successful interactive upgrades, the app now automatically shows the “What’s New” screen once.
• Bug Fixes
  • Relay credentials are now cleared and re-provisioned when the server rejects secrets as invalid or reports the host as parked.
  • Relay-secret provisioning retries now honor server backoff/rate limits with deterministic, bounded scheduling.
• UI Improvements
  • Streamed backup now reliably replays earlier run output so the panel starts from the beginning.
  • Improved post-install “disabled components” formatting and updated streamed UI help text.
• Notifications & Logging
  • Reduced duplicate/noisy notification logging while keeping a single clear failure line visible.

Changelog

• 30ae4f7 Release v0.30.0-beta7 (#274)

Release Notes

• New Features
  • Added a “What’s new” screen to the interactive dashboard with release highlights and actions.
  • Added non-interactive “what’s new” warning reminders for unseen notes.
• Bug Fixes
  • Improved reliability of “seen” tracking, including automatic recovery from corrupted acknowledgment data.
  • Ensure reminders respect timeouts/aborts and avoid marking notes as seen unless completed.
• Chores
  • Added release-note validation and a guard workflow to enforce well-formed “what’s new” entries when applicable.

Changelog

• af512a8 Release v0.30.0-beta6 (#273)

Release Notes

• New Features
  • Added HOST_BACKUP_MODE for HA-LXC host-backed, read-only Proxmox mounts, including improved environment detection and conditional data collection.
  • Added clearer Telegram setup outcomes for relay-only vs linked cases to guide next steps.
• Bug Fixes
  • Improved prefixed/proxied host handling to fail safely when expected host markers/mounts aren’t present.
  • Added safeguards and warnings for missing host /etc/pve bind-mount shape and stricter host-path/symlink confinement.
• Documentation
  • Updated configuration docs, examples, and installer messaging to describe HA-LXC host-backup mode and required settings.

Changelog

• 95ba41f Release v0.30.0-beta5 (#272)

Release Notes

• New Features

  • Healthcheck setup can now automatically provision missing monitoring credentials.
  • Daemon startup can recover missing or invalid monitoring credentials while preserving valid updates.
  • Setup screens provide clearer status messages for Telegram and backup monitoring configuration.
  • Healthcheck setup now displays progress while checking monitoring configuration.

• Bug Fixes

  • Invalid monitoring credentials are safely cleared without overwriting newer credentials.
  • Short or unsafe credentials are rejected and sensitive response data is better protected.

• Tests

  • Expanded coverage for provisioning, credential recovery, concurrency, and setup diagnostics.

Changelog

• e05a4ce Release v0.30.0-beta4 (#271)

Release Notes

• Bug Fixes

  • Updated beta upgrade instructions so the latest beta can be installed without requiring jq.
  • Improved “auto-detect newest release” behavior with a reliable fallback when release data can’t be parsed via jq.

• Documentation

  • Standardized user-facing messaging to consistently reference bash upgrade-beta.sh ... instead of sh upgrade-beta.sh ....

Changelog

• b88b61d Release v0.30.0-beta3 (#270)

Release Notes

• Bug Fixes

  • Improved SSH recipient parsing to accept mixed-case key-type tokens while preserving key data and comments.

• Security & Reliability

  • Updated security scanning and CI tooling to newer verified versions.
  • Refreshed Go security-related dependencies with newer patch releases.

• Tests

  • Added coverage for mixed-case SSH key types and varied key formatting.

Changelog

• af8406a Release v0.30.0-beta2 (#267)

Release Notes

• New Features

  • Improved backup summaries with compact and detailed views, clearer warnings, and artifact paths.
  • Added recovery handling for stuck backup processes, including degraded health reporting and automatic daemon restart.
  • Added shared consent prompts for support requests.
  • Improved installation flows, validation, and setup feedback.
  • Added safer restore behavior that excludes protected cluster database files.

• Bug Fixes

  • Cleanup guard operations now accurately report when protections remain.
  • Backup scanning is disabled by default.
  • Improved status-message sanitization and sensitive archive permissions.

• Documentation

  • Expanded encryption, daemon recovery, healthcheck, restore, upgrade, and exit-code guidance.

Changelog

• 3774dea Release v0.30.0-beta11 (#280)

Release Notes

• New Features

  • Healthchecks now displays a secure one-time sign-in link or sanitized portal address and login details.
  • Installation and upgrades can adopt an existing daily schedule when no time is configured.
  • Full restore includes safety checks, confirmation, and a safety backup.
  • Retention protects backups belonging to other hosts.

• Bug Fixes

  • Improved portal validation, scheduler handling, restore safety, and retention accuracy.

• Documentation

  • Expanded guidance for scheduling, monitoring, storage, recovery, encryption, installation, security, notifications, and exit codes.

Changelog

• d333d61 Release v0.30.0-beta10 (#279)