v0.1.14

Features

• Add a guided Host action to restart Traefik traffic and wait for health.

Improvements

• Show each configured database root with mount, filesystem, capacity, and assigned roles.
• Show allocated disk usage and live data size in database details.
• Show progress while status and guided checks read repository and runtime state.

Bugfixes

• Keep database details available when live status checks fail.

v0.1.13

Features

• Add semantic terminal styling for interactive CLI output.

Improvements

• Show one asterisk per typed character during interactive secret entry.

Bugfixes

• Support PostgreSQL TLS clients that advertise postgresql ALPN.
• Show and reset PgBouncer pool settings correctly in database configuration.

Breaking changes

• Require current DNS provider variable names in config and --dns-file, including CF_DNS_API_TOKEN and CF_ZONE_API_TOKEN for Cloudflare.

v0.1.12

Bugfixes

• Allow custom data roots under operator-owned parent directories that are not group/world-writable.

v0.1.11

Features

• Add support for multiple host data roots and store each database role under its selected root.
• Add data root selection to evdb database add and guided database creation on multi-root hosts.

Improvements

• Reject overlapping or unlisted data roots in host and database configuration.
• Prevent changing a database's data root after creation.

Breaking changes

• Replace host.data_root with host.data_roots, and add data_root to every postgres and kv role before upgrading.

v0.1.10

Features

• Add host.data_root and evdb init --data-root to place database files on dedicated storage.

Improvements

• Validate custom data roots and prevent existing databases from switching to a new empty path.

Bugfixes

• Disable ACME CNAME support for database certificates to keep DNS validation working.

Breaking changes

• Require host.data_root in config.yml, set to your current database root before upgrading, usually /var/lib/evdb/databases.

v0.1.9

Features

• Add a guided evdb init flow with DNS provider search, repository selection, and final review.
• Add local filesystem Restic repositories alongside rclone remotes.
• Add creation-time Postgres username and database overrides that stay consistent in connections and backups.

Improvements

• Verify DNS credentials during evdb init by obtaining the wildcard certificate before finishing setup.
• Use the repository owner account for Restic access to local and rclone backups.

Bugfixes

• Report ACME readiness only after the expected wildcard certificate is actually stored.

Breaking changes

• Require every Postgres role to set username and database in config.yml.
• Require DNS providers to use the bundled canonical provider name and supported variables.
• Require remote repositories to use rclone:REMOTE:PATH; local repositories must omit rclone_config.

v0.1.8

Improvements

• Use the configured operator account for all Restic and rclone repository work.
• Keep completed local backups read-only under the rclone owner after validation.
• Keep the Restic password out of process arguments, environment, and persistent files.

Breaking changes

• Require host.backup.rclone_config to be a non-root-owned 0600 file in a safe user-writable directory, and move existing root-owned configs into the operator account before upgrading.
• Require Restic and rclone at /usr/bin/restic and /usr/bin/rclone.

v0.1.7

Improvements

• Use the host's native rclone config file in place.
• Install releases from one verified standalone evdb executable.
• Run scheduled backups as root so rclone OAuth refreshes keep working.

Bugfixes

• Keep PgBouncer unprivileged while letting it read private generated credentials.

Breaking changes

• Require root for installed evdb commands and backup timers. The evdb service account is no longer used.
• Require host.backup.rclone_config in config.yml. Managed /etc/evdb/rclone.conf is no longer used.
• Remove host.data_root and store runtime data under /var/lib/evdb. Move existing generated files and database data before upgrading.
• Replace /opt/evdb archive installs with a standalone /usr/local/bin/evdb executable. Update any installer or asset-download automation.

v0.1.6

Features

• Add evdb init for guided first-time setup and rerunnable host refreshes.
• Add backup create --all and one daily evdb-backup.timer for durable databases.
• Add private-file and guided-prompt support for initial Postgres passwords.

Improvements

• Add compact terminal status and guided screens for host and database operations.
• Simplify host setup around config.yml, secrets.yml, rclone.conf, and one Restic repository.

Bugfixes

• Fix Postgres creation when PgBouncer uses private files.
• Show guided connection details without collecting database information.

Breaking changes

• Migrate host source to /etc/evdb/config.yml, /etc/evdb/secrets.yml, and /etc/evdb/rclone.conf; pre-v1 /etc/evdb/host.yml is not converted automatically.
• Use evdb init instead of evdb host setup and evdb host update.
• Use backup list, Restic, and engine tools for recovery and cleanup; restore, backup test, backup retention, backup prune, and backup repository-check are removed.

v0.1.5

Features

• Add evdb host uninstall, preserving local managed data by default.
• Add --purge to delete local managed data without deleting remote Restic repositories.

Improvements

• Support rollback-safe installer upgrades before host configuration exists.
• Exit cleanly with status 130 when a CLI operation is interrupted.

Bugfixes

• Restore compatibility with v1 machine state from releases before v0.1.4.
• Wait for native infrastructure health before completing host setup.

Breaking changes

• Use sudo for all operator commands against /etc/evdb/host.yml.