• Release v1.13.0

New features

• [api] Add optional “ova_files” parameter to “POST /builds”
• [api] Add rate limiting on the “/setup” API endpoint
• [backend] Display initial Setup Token in console UI on first-run
• [frontend] First-Run process asks for a Setup Token before creating a new password

Bug fixes

• [api] Only accept the TLSv1.2 SSL protocol
• [backend] Fix LVM bug to prevent wiping disk1 on update
• [backend] Add “sshd” user and ensure sshd starts without UsePrivilegeSeparation
• [extensions] Ensure haveged starts with the correct parameters
• [extensions] Update the OS and extensions to TinyCore 10.x
• [frontend] Remove the “Token Setup” button