Dokploy v0.30.0

v0.30.0
Added 15
  • Docker networks now have a full management UI with create, inspect, and delete operations for bridge or overlay networks per server, including MTU, internal/attachable flags, IPv4/IPv6, and custom IPAM configuration
  • Applications and compose services can now attach or detach specific Docker networks per service, with changes applied on the next deploy
  • DNS provider integration for Cloudflare and AWS Route53 to manage DNS records directly from Dokploy
  • Vault providers for environment secrets to resolve variables at deploy time from HashiCorp Vault, OpenBao, Infisical, AWS Secrets Manager, Doppler, and Scaleway Secret Manager
  • Concurrent builds with dedicated build queues per server instead of a single global queue
  • Unified Docker Dashboard consolidating Containers, Volumes, Networks, Events, Images, Disk Usage, Health, and Swarm under one set of tabs
Deprecated 1
  • Isolated Deployment is deprecated in favor of attaching or detaching networks per service
Features
Network Management

Docker networks now have a full management UI instead of only being reachable through the CLI. From the Networks tab in the Docker dashboard you can create, inspect, and delete bridge or overlay networks per server, with MTU, internal/attachable flags, IPv4/IPv6, and custom IPAM (subnet/gateway/IP range) exposed in the creation form.

Networks also attach per-service now. Every application and compose service joins the shared dokploy-network by default — you can detach it and attach only the networks that service actually needs, applied on the next deploy. This is also why Isolated Deployment is deprecated: it's still available in Compose's advanced settings, but attaching/detaching networks per service covers the same use case declaratively, without breaking on restarts.

DNS Provider Integration

You can now connect Cloudflare or AWS Route53 and let Dokploy manage DNS records for your domains directly. When you add a domain, Dokploy creates the record for you instead of making you switch tabs and wait for propagation to find out whether you typed it correctly. Apex domains are handled too — @ resolves to the zone's apex automatically.

Vault Providers for Environment Secrets

Environment variables can now be resolved at deploy time from an external secret manager, using a unified reference syntax: DATABASE_PASSWORD=${{vault.production.db_password}}. The value is never stored in Dokploy — it's fetched from your provider when the deployment runs, so rotating a secret in the vault takes effect on the next deploy with no changes on the Dokploy side. Supported providers: HashiCorp Vault/OpenBao, Infisical, AWS Secrets Manager, Doppler, and Scaleway Secret Manager.

Concurrent Builds

For the first two years, Dokploy used a single global build queue across every server. Each server now has its own dedicated queue.

Unified Docker Dashboard

Docker management used to be spread across separate pages. /dashboard/docker is now a single hub: Containers, Volumes, Networks, Events, Images, Disk Usage, Health, and Swarm, all under one set of tabs.

Volumes now has a built-in file explorer, so you can browse volume contents without SSH-ing into the server.

Images shows every image on the host with size and age, so you can spot the ones worth pruning before reaching for docker system prune.

Events streams what the Docker daemon reports in real time — container starts/stops, image pulls, network connects — filterable and paginated.

Disk Usage breaks down images, containers, volumes, and build cache with reclaimable space called out for each.

Health runs a read-only diagnostic over SSH — inotify limits, disk, memory/CPU reservations, per-network IP usage — the same checks we used to walk people through manually when a deploy mysteriously stalled.

Overview Dashboard

Projects now open to an overview page that summarizes Services, Backups, and Domains at a glance, with Deployments moved into its own tab.

SCIM 2.0 Provisioning (Enterprise)

Users and groups now sync automatically from your identity provider, so deprovisioning in Okta or Entra deprovisions in Dokploy. SCIM-provisioned users also link correctly through SSO now, and sign-in errors surface instead of failing silently.

Session Management

A new page lists your active sessions and lets you revoke them individually — useful if you've logged in from a machine you no longer control.

Passkey Support

You can now sign in without a password using your device's biometrics, security key, or password manager. Add a passkey from Settings → Profile, and it shows up right on the login screen as a "Sign in with Passkey" option alongside email/password and SSO.

Default Organization Role

Admins can set a default role that's applied automatically to new members joining an organization, instead of remembering to downgrade every invite after the fact.

Domain Enable/Disable Toggle

Domains can now be disabled without deleting them. The route comes out of Traefik but the configuration stays intact, so you can pull a domain temporarily and bring it back without re-entering certificates, paths, and middleware.

Bug Fixes

A few fixes worth calling out on their own:

  • Command injection via compose domain serviceName — a crafted service name could escape into the host shell.
  • SSRF via Route53 endpoint override — the endpoint override has been removed.
  • Traefik updated from v3.6.7 to v3.6.25, pulling in upstream security patches.
  • Postgres 100-argument limit was breaking rollback, schedule, port, and volume backup lookups on instances with enough rows — fixed.
  • Backups ran the database dump twice per backup and could leave partial uploads behind on failure — now runs once and cleans up after itself.
  • MySQL/MariaDB restores could target the wrong database because USE/CREATE DATABASE statements in the dump overrode the selected one — now stripped.
  • Docker cleanup could hang silently on a false-positive busy-wait match.

This is in addition to the security batch shipped in v0.29.13 (~16 command-injection and cross-org IDOR fixes) and v0.29.14 (20 backported fixes) — if you're upgrading straight from v0.29.0 or skipped those patch releases, v0.30.0 covers all of it.

What's Changed
New Contributors

Full Changelog: https://github.com/Dokploy/dokploy/compare/v0.29.13...v0.30.0

View original

Upgraded? How did it go?

Discussion