← Changelog
v1.3.6
2026-09-12
Ships work that had merged to main but sat unreleased, including a doctor false-positive and three server/compose gap-closure features.
Fixed
nself doctor --deep’s SEC-HARDENING-06 check fired a false CRITICAL against nginx configs that do rate-limit their auth/API routes. It only ever grepped for the literal strings/auth/loginand/api/, so nSelf’s default one- server-block-per-service layout always failed the check. It now also matches by service identity (a server block’sserver_nameagainst known auth/API route names) and falls back to the original literal-path match for hand- written gateway configs.
Added
nself server provision/list/resize/destroy: manage a Hetzner server’s lifecycle directly from the CLI.- Custom services gain
CS_N_IMAGE,CS_N_ENV_FILE, andCS_N_VOLUMES, extending theCS_N_*slots beyond image name to full env-file and volume- mount configuration. nself build/nself startdetect orphaned containers (with a--remove-orphansflag to clean them up) and flag a compose healthcheck that references a command the image doesn’t have, instead of failing silently at runtime.