WAF Auto-Block uses versioned Docker image tags to make upgrades and rollbacks predictable. The recommended promotion flow is to validate a versioned tag before switching toDocumentation Index
Fetch the complete documentation index at: https://mintlify.com/proteo5/waf-autoblock/llms.txt
Use this file to discover all available pages before exploring further.
latest. Rolling back is simply a redeploy to the previously validated tag — no special migration commands are required.
Upgrade (Compose)
Set the new tag
Change to the working directory and export the target version as
DOCKER_TAG so Compose uses it on the next pull and up:Pull the new image
Fetch the new image from Docker Hub before stopping the running container, so the pull does not extend downtime:
Apply the new image
Bring the service up with the new tag. Compose replaces the running container in place:
Upgrade (docker run)
For installations that usedocker run directly, stop and remove the existing container, then start a new one with the updated tag. The data volume is untouched by this operation.
docker rm to keep the gap between stop and start as short as possible.
Rollback
Rollback is a redeploy to the last known-good tag. No data changes are needed — the SQLite database on the host volume is shared across all container versions. Compose rollback:Validation Checklist
Run through this checklist after every upgrade or rollback before considering the deployment complete:docker psshows thewaf-autoblockcontainer in theUpstate with the expected image tag.curl http://localhost:8080/statusreturns a JSON response containing"running": true.- Log output (
docker compose -f docker-compose.hub.yml logs --tail 100) shows no startup exceptions and at least one completed polling cycle. - The SQLite database file is present and being updated under the mounted data volume (for example
/opt/waf-autoblock/data/state.db). - Cloudflare polling resumes correctly — the logs show polling cycle completions and no persistent API errors.
The SQLite database is mounted from the host and survives container replacements. No migration steps are needed between minor versions.