POST /api/system/update
Triggers a self-update: downloads the latest release archive, backs up the current installation, extracts the update in place, and schedules a server restart. The response is returned before the restart occurs.
Rate limit: 1 request per minute per IP.
Authentication
Admin authentication key matching the
ADMIN_KEY environment variable.Response
The response body is the result object fromperform_update(). Shape depends on outcome:
"ok" if the update completed and a restart is pending. "error" if the update failed.Human-readable description of what happened.
The version that was installed, if available.
Absolute path to the backup ZIP file created from the current
backend/ and frontend/ directories before the update was applied. Stored in a temporary directory.Number of files copied from the update archive.
On failure the endpoint returns
HTTP 500 and does not schedule a restart. The existing installation is unmodified.