I swear we know what we're doing
Pre-release
Pre-release
This week seems to be following the trend of a beta release a day!
Full summary of the changes in this release can be found in the changelog - but here's a shortened version:
- Added new Mysql extension that will automatically create a mysql user specific to your Ghost database (that way you don't have to use root which has potential security concerns)
- Added new Linux extension that can automatically create a
ghost
linux system user. Systemd will take advantage of this and run the Ghost process as this system user, making it a decent amount more secure (as the ghost user doesn't have sudo/password access) - The underlying library which generated ssl certificates using LetsEncrypt has been dropped in favor of acme.sh.
- New installations will not be affected.
- However, if you have an existing installation that has an SSL renewal cron script in place, you will need to nuke your nginx config and reconfigure it.
- Quick command to do that (run from inside your ghost install directory):
rm -f ./system/files/*.conf ./system/files/dhparam.pem && ghost setup nginx ssl ssl-renew
We're almost RC-ready - there are only a few things left in the milestone! 🎉