v1.5.31: config file binding fixes, SABnzbd port restored, secrets leak detection
Posted by tomspark
SparkBox 1.5.31 is out. This release fixes three real issues we caught in v1.5.30's review cycle. First, the config directory skip-list now covers YAML, JSON, certs, and other files that shouldn't be created as directories during bind-mount setup—Prometheus was breaking because prometheus.yml got mkdir'd instead of used as a file. Second, SABnzbd became unreachable when gluetun stopped publishing its port; we've restored host:8186 → container:8080 and updated the metadata to match. Third, the release script now scans for private keys and secrets before tarball creation—it'll abort the build if it finds anything matching common key patterns or AWS/Stripe credentials. Highlights: - preparemoduleconfigdirs now skips .yml, .yaml, .json, .cert, .crt, .pfx, .p12, .htpasswd, Dockerfile, docker-compose.yml - SABnzbd reachable again on host port 8186 (fixes media module after v1.5.30) - Pre-release secret scanner prevents private keys in distribution tarballs - Dashboard Home shows 'Waiting for services...' instead of error red on fresh installs Head to the Updates tab in your dashboard to pull it down. Any issues, post here in d/sparkbox. --- Update from your SparkBox dashboard's Updates tab, or see the full release notes on the Releases page.