This release adds 6 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+10 more
Summary
AI summaryAdded Vultr and Linode cloud providers with full API integration and several new Quicklify CLI commands.
Full changelog
Added
- Vultr provider (
src/providers/vultr.ts) - Full Vultr API v2 integration- Base64-encoded user_data for cloud-init
- SSH key upload with HTTP 409 conflict handling
- OS: Ubuntu 24.04 (os_id: 2284)
- Power status normalization (running/stopped)
- Linode (Akamai) provider (
src/providers/linode.ts) - Full Linode API v4 integration- Auto-generated root_pass via
crypto.randomBytes() - SSH key upload via
/profile/sshkeys - Metadata user_data for cloud-init (base64)
- Disk size conversion (MB → GB)
- Auto-generated root_pass via
quicklify addcommand - Register existing Coolify servers to Quicklify management- Interactive flow: provider → token → IP → verify Coolify → save
- Non-interactive:
--provider,--ip,--name,--skip-verifyflags - Coolify verification via SSH (health check or
docker ps) - Duplicate detection by IP address
quicklify maintain [query]command - Full maintenance cycle- 6-step flow: snapshot warning → status check → Coolify update → health check → reboot → final check
--skip-rebootto skip the reboot step--allto maintain all servers sequentially--dry-runto preview maintenance steps
quicklify remove [query]command - Remove a server from local config without destroying the cloud server- Accepts server name or IP address
- Confirmation prompt before removal
--allflag onstatus,update,backupcommandsstatus --all: parallel status check with table output (Promise.all)update --all: sequential update with single confirmation promptbackup --all: sequential backup across all servers
status --autostartflag - Restarts Coolify via SSH if server is running but Coolify is down- Uses
docker compose restart coolifycommand - Waits 5 seconds and verifies Coolify came back up
- Uses
collectProviderTokens()utility - Deduplicates token prompts per unique provider across serversVULTR_TOKENandLINODE_TOKENenvironment variable support- Vultr and Linode defaults in all 3 templates (starter, production, dev)
"vultr"and"linode"in YAML config validation- 195 new tests across 6 new test files + enhanced existing test files
Changed
- Provider selection now shows 4 choices: Hetzner Cloud, DigitalOcean, Vultr, Linode (Akamai)
- Provider factory supports
"vultr"and"linode"cases - Total commands: 19 → 23 (add, maintain, remove + maintain --all)
- Test count: 742 → 937
- Test suites: 40 → 44
- Coverage: 98%+ statements, 91%+ branches, 98%+ functions
- Zero new npm dependencies added
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About kastelldev/kastell
Server security auditing and hardening toolkit. 413 security checks across 29 categories (SSH, Firewall, Docker, TLS, HTTP Headers), CIS/PCI-DSS/HIPAA compliance mapping, 19-step production hardening, fleet management, and forensic evidence collection. Supports Hetzner, DigitalOcean, Vultr, and Linode. 13 MCP tools.
Related context
Related tools
Beta — feedback welcome: [email protected]