Features
- Enable HTTPS for a site from a single card in the site wizard and editor, with the backend orchestrating certificate issuance and the HTTPS config by @0xJacky (51556433, 017fc3fa).
- Verify HTTP-01 challenge routes with an active loopback probe and explain ACME failures with actionable hints by @0xJacky (9e2503fb, b71c2c54).
- Support listening on a Unix domain socket by @emecii and @0xJacky (12d4b2e2, e7051e05).
- Choose the ACME challenge method per certificate, allowing HTTP-01 issuance without a DNS credential, with challenge reminders and more detailed issuance and renewal errors by @EFX1SZH (1ae407a7, 27b4b12e).
- Download certificates as certificate only, certificate with CA chain, or a password-protected PFX/PKCS#12 bundle by @EFX1SZH (216184c4, d8a65536).
- Show subject alternative names and richer certificate metadata, copyable certificate details, clearer issuance logs, and a certificate name field in the certificate editor by @EFX1SZH (27bed2b7, 8ef17c90, 86e7b4c5, 834fbd1e).
- Mask the email password and Teams client secret in the External Notify editor by @EFX1SZH (7a5b27c3).
- Use a consistent tag style for valid certificate status in the certificate list by @EFX1SZH (a6040dbf).
Bug Fixes
- Scope short tokens to WebSocket login sessions by @0xJacky (1b022804).
- Keep ACME challenges reachable behind the quick-setup HTTPS redirect and register the default ACME account after install by @0xJacky (ec9a07f3, f7d63bd3).
- Pause certificate renewal while a site or stream is disabled by @0xJacky (93f99177).
- Run delete refusal checks before any side effect when deleting sites and streams by @0xJacky (a921b2ec, bad5ea64).
- Stop site list sync from resetting site monitoring settings, with a smooth migration and soft-delete fallback for abnormal records by @EFX1SZH (7dbaf271, 5b4e79ce).
- Preserve JSON domain serialization when importing certificates and repair corrupted rows by @Mr-Robot-ops and @0xJacky (97b22fa6, 926a736d).
- Accept uppercase nginx size suffixes in performance settings by @Dev-next-gen and @0xJacky (38b4ae43, 2b0e5730).
- Show translated titles and messages for site health check failure and recovery notifications by @EFX1SZH and @0xJacky (b059c044, 84ab8f77, 1cea7491).
- Restore styling lost in the antdv-next migration by @0xJacky (804103af).
- Complete plural forms across translation catalogs and correct German translation typos by @0xJacky (29360d52, 7cc52451).
- Complete Simplified and Traditional Chinese translations for the certificate DNS help text by @EFX1SZH (7496e8ee, b51e8206).
- Harden CI workflows by pinning third-party actions, declaring explicit token scopes, and not persisting unused checkout credentials by @SaboniAmine (6c979832, bf37e582, 1e75c49b).
Contributors
@0xJacky
@EFX1SZH
@emecii
@Mr-Robot-ops
@Dev-next-gen
@SaboniAmine