Everlock 0.6.0

The 0.6.0 release puts an AI assistant on equal footing with the admin console: every admin command is an MCP tool, authenticated with a new system-wide API key credential — and the whole admin surface now applies changes live, announces new .local hosts without a restart, and prints complete URLs everywhere. It also brings photo albums to battery-powered e-paper picture frames and TLS certificates to bare public IP addresses. Binaries are on the download page; container images are published under the 0.6 tag family (cr.everlock.sh/everlock:0.6-qwen3, cr.everlock.sh/everlock:0.6-smolvlm).

Highlights

Administration over MCP. The new backend-admin-mcp outlet serves every admin command (~100 tools) over streamable HTTP on a pinned vhost. Schemas document every parameter's values and defaults, tools carry read-only/destructive annotations so clients auto-approve browsing and confirm deletions, and authorization is the same per-resource ACL system as the console. A fresh instance prints an API key at first boot and is administrable by an assistant immediately. See Getting started with MCP and Admin over MCP.
API keys as a system credential. /users apikey create|list|revoke mint per-client keys (evapi_…, shown once, Argon2id at rest, optional expiry). Album share links mint them too: a share key is scoped to exactly one album, revocable at any time, and removed with the album.
E-paper photo frames. GET /album/{id}/photoframe serves an esp32-photoframe: each fetch returns a random album photo pre-rendered for the panel — measured palette, dithered, in the display's native format — so the frame just blits and sleeps. One URL and one scoped key is the whole setup. See e-paper photo frames.
TLS for public IP addresses. A vhost that is a publicly routable IP gets an ACME certificate under the CA's short-lived profile, served to the SNI-less clients that bare-IP connections are. Private and loopback addresses keep local plain-HTTP semantics.
No-restart administration, completed. /calendar, /contacts, and the new /vault family apply live like /site and /image; the mDNS frontend announces .local vhosts the moment they are created; and responses print full URLs — scheme, host, and port — for everything they reference.

Behavior changes

The admin dashboard answers only on its configured vhost — it is no longer reachable on every hosted domain.
MCP over plain HTTP is limited to genuinely local hosts (.local, localhost, private addresses). Public IPs are public hosts now: HTTPS with a certificate, like any domain.
Sharing an already-shared album mints a fresh key when share keys are everlock-managed — keys are shown once and hashed at rest, so re-sharing cannot re-display an old one. Existing share links keep working.

Upgrading

Self-updating servers pick 0.6.0 up on their daily check. For a manual upgrade, download the new binary (or pull the new image tag) and restart — stores, mail, and all versioned content carry over untouched. The full list of changes is in the changelog.