~/blog/hoster-0-1-2

hoster 0.1.2

· 1 min read · LHelge

Admin UI actions are no longer refused

hoster 0.1.0 and 0.1.1 sent Referrer-Policy: no-referrer. Under that policy, browsers send Origin: null on a same-origin POST, so the admin UI’s CSRF check refused every action button (for example Check for updates) with “cross-origin request refused”. hoster now sends Referrer-Policy: same-origin. Other sites still get no referrer, and the admin UI’s own requests keep their origin.

Hosting a static site

Hosting a static site is a new guide for deploying a site built by a static site generator. CI packs it into a small nginx image, and hoster deploys it like any other service, with deploys by digest, certificates and zero downtime. A complete example lives in examples/static-site/.

Updating

hoster update

Updates and rollback has the details. Because of the bug above, the Update button on the System page only works from 0.1.2 on.