H-Script 1.0.3: Safe Updates, Verified Backups, and Stronger Protection

H-Script 1.0.3 is out, making system maintenance safer and more transparent. It adds verified SQL backups with SHA-256, managed migrations with rollback support, protection for local customizations, a new security section, and trusted CIDR access controls.

H-Script 1.0.3 introduces a complete overhaul of system maintenance and updates, making everyday operation safer and easier to understand.

The Configurator can now create verified database backups in a single SQL format. Every backup receives a SHA-256 checksum and is validated after creation. Backups can be downloaded, verified, or deleted, while restoration is performed through the CLI into a separate database—the browser never overwrites the live database.

CMS and database updates are now handled as one controlled workflow. H-Script checks version compatibility, creates a verified backup before schema migrations, applies migrations in order, and validates the installation after the update. Interrupted updates can be resumed, and the previous application code can be restored safely when necessary.

Local customizations are no longer overwritten silently. Before an update, H-Script compares local files with the official release and reports conflicts that require an administrator’s decision. Modified Twig templates are treated as valid customizations and reported separately.

The Configurator now includes a dedicated Security section with production readiness checks, file integrity monitoring, modification timestamps, persistent alerts, and a local audit log. The release also adds trusted CIDR restrictions and ready-to-use examples for protecting selected routes through an external Nginx and Authelia gateway over Tailscale.

Forced reinstallation has been removed. APP_AUTO_INSTALL is now reserved exclusively for the initial startup with a new empty database and must not be used as an update mechanism.

H-Script 1.0.3 significantly reduces the risk of data loss and broken third-party customizations while keeping the update process clear and manageable.