Safe upgrade flow:
- Read TP-Link release notes.
- Confirm device firmware compatibility.
- Export an Omada UI backup.
- Run
make backup. - Update
OMADA_VERSION,OMADA_URL, andOMADA_SHA256in.env. - Run
make build. - Run
make up. - Verify login, sites, devices, adoption status, and logs.
- Keep the previous image tag and backups until the site has run cleanly for at least 24 hours.
Do not auto-upgrade controller major versions. Watchtower is represented only as a disabled monitor-only example.
Pin OMADA_VERSION and use an explicit TP-Link download URL. Avoid latest-style workflows for the controller because Omada upgrades can change database state and device compatibility.
Verify:
- Controller login works.
- Sites and device inventory are present.
- Devices remain adopted.
- Logs do not show MongoDB authentication or migration errors.
- Automatic backups are still configured in the Omada UI.