What's new

0.13.3

2026-10-28

Migrations 0408 to 0418.

After upgrading:

• Seal your backups: under Settings › Backups, make a recovery code (shown once; keep it away from the server) and choose where a sealed copy also goes: Leyla's cloud (included with a plan), a folder of yours (a NAS share or a USB disk mounted on the server), or both. Without a code, backups are made as before, unsealed.
• The learned recommender is gone (0414 drops its tables). Likes and dislikes you gave stay, as each person's opinion on a title (0412).
• TVs and speakers on the home network (DLNA) browse the libraries chosen for them under each library's settings; by default, the libraries every account may open. The old "browse as this account" setting is removed.
• Radarr and Sonarr webhooks are connected by Leyla itself, with the token as a password rather than in the address. Nothing to press.
• If the admin page shows MEDIA_READERS_UNCONFINED, this kernel cannot jail ffmpeg and the other media readers fully: see the finding for what is missing.

Backups (plan 071, ADR-035)

• Every backup can be sealed with a recovery code before it is written anywhere: the server's own disk, a folder of yours, or Leyla's cloud. Nobody without the code can read it, us included.
• Backups are small and incremental: derived data is left out, and each set is cut into chunks by its own bytes, so a night's backup writes and sends only what changed.
• What people did (watched, lists, ratings, playlists, requests, settings) is logged as it happens. With Leyla's cloud or a folder, it is copied every hour, and each signed-in app keeps a sealed copy of the latest changes too, so a restored server loses an hour at most.
• A new server restores from Leyla's cloud, a folder or a downloaded copy at its first run with the recovery code alone, and is ready at once: no metadata fetched again, no queue of jobs.
• Go back to a moment: take back what everyone did since a chosen minute, on the running server, with Undo. Accounts, settings and libraries stay.
• After a restore, changes the apps kept from after the backup go back on their own (a lost server) or wait for your choice (a restore you chose).
• Get back what's missing: titles whose files are gone stay in the library as missing; one button asks Sonarr and Radarr for them, most watched first, the same release first, so everything Leyla had worked out for the file comes back with it.
• The format is documented in docs/reference/backup-format.md.

Recommendations and Home (ADR-033, ADR-034)

• Drift replaces "More like this": a title's threads (its collection, director, writer, lead actor, themes) on Home and on every title page.
• A taste wall after the welcome screen: a person picks what they like, and Home's top and Requests' suggestions start from it.
• Nothing is learned from watching any more.

Server

• The database stays smaller: tables that are mostly empty space are rewritten in the quiet window, the catalog's automatic versions fold into one a day, consumed events and old merge records are pruned, and the Radarr and Sonarr mirror rewrites only what changed.
• ffmpeg, ffprobe, tesseract and the model runner run jailed: they can read media but not Leyla's own data, and open no network.
• A request through a proxy Leyla was not told about is never treated as coming from home; the web app sends a script policy.
• A first OIDC sign-in never becomes an administrator by name, and an unverified address links to nobody.
• An unchanged answer is an empty 304; idle background loops (integrity, the external database probe, plugin index refreshes, licence renewal) wake far less often.
• A long job's lease is renewed; a stuck ffmpeg is stopped in minutes; the image runs tini as PID 1.

Web and apps

• Title pages are a third shorter: one row of faces, seasons in one pill, episode names that open their page.
• The player: a paused screen after ten seconds, smart resume, subtitle appearance as its own page, and no "Paused for a while" screen.
• Requests has a search field; manual requests by free text are gone.
• The calendar shows your shows first; notifications show posters and say Today or Yesterday; playlists can be renamed; the year shows posters.
• Account is an overview of cards; old signed-in devices sign out together.
• Television: rows and search results are entered at their first card, one focus ring, no grab handles on sheets.

Tools and packaging

• backups.leyla.media, the add-only relay for sealed backups, and the account page's Backups section (Download, Delete now) with reminders after a plan ends.
• leyla.media: "If you lose your server" and the privacy page for sealed backups.