Update lnbits to 0.10.9 (#718)

Co-authored-by: nmfretz <nmfretz@gmail.com>
This commit is contained in:
chloehjung15 2023-08-08 07:14:47 +12:00 committed by GitHub
parent 4f51c3e20a
commit 4bd9b1c13b
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 19 additions and 37 deletions

View File

@ -8,7 +8,7 @@ services:
PROXY_AUTH_ADD: "false" PROXY_AUTH_ADD: "false"
web: web:
image: lnbitsdocker/lnbits-legend:0.10.6@sha256:a11aaa6d2b211db4c1ec2cafb7c35057ef45bcf4b98fb3bbf23c5635a0304aff image: lnbitsdocker/lnbits-legend:0.10.9@sha256:ec4d6055e1de1b340c66bb6b473635ade1e95b57a69e0cb6effe21af310385d6
init: true init: true
restart: on-failure restart: on-failure
stop_grace_period: 1m stop_grace_period: 1m

View File

@ -2,7 +2,7 @@ manifestVersion: 1
id: lnbits id: lnbits
category: bitcoin category: bitcoin
name: LNbits name: LNbits
version: "0.10.6" version: "0.10.9"
tagline: Multi-user wallet management system tagline: Multi-user wallet management system
description: >- description: >-
LNbits is a simple multi-user and account system for Lightning LNbits is a simple multi-user and account system for Lightning
@ -41,44 +41,26 @@ path: ""
defaultUsername: "" defaultUsername: ""
deterministicPassword: true deterministicPassword: true
releaseNotes: >- releaseNotes: >-
🚨 Critical Security Update: This update addresses a critical security vulnerability in LNbits. Please update as soon as possible. In this release, we introduce a whole suite of new security features to harden your LNbits instance. Our goal is to make these features
accessible and keep every instance as safe as possible to protect user funds from possible security breaches.
🔧 Extension Management Changes: You will find a new Security panel in your Manage Server AdminUI that you can access as the super user. All features are opt-in and are also accessible via the LNbits API.
New and existing users should follow these steps to install extensions: The Security panel has six components:
- Server logs 📝
1. Copy your unique LNbits password from the LNbits' app store page on your Umbrel: 'umbrel.local/app-store/lnbits'. - IP blocker 🚫
2. Access the Super Admin page of LNbits at 'umbrel.local:3007/uuidv4/<your-lnbits-password>'. Replace '<your-lnbits-password>' with the password you copied before. - Rate limiter 🐌
3. You can now install and uninstall extensions from this page. - Security notifications 🔔
- Killswitch 🪓
🔄 Extension Restoration for Existing Users: - Watchdog 🐕 (coming soon)
- If an extension was previously installed, it won't show up after the update.
- Reinstall the extension from the Super Admin page to restore its enabled state and data.
🔓 Extension Enabling/Disabling:
- Once installed, any user can enable/disable extensions from their user page.
- Existing LNbits users that are updating their app may need to hard refresh their browser on the extensions page in order to enable/disable extensions.
👥 Granting Admin Access:
- From the Super Admin page, you can make other users admins.
- Admins can install extensions without visiting the Super Admin page.
📄 Full Release Notes and detailed information is available at: https://github.com/lnbits/lnbits/releases 📄 Full Release Notes and detailed information is available at: https://github.com/lnbits/lnbits/releases