v1.11.1

Upgrading

Nothing to do for existing stacks. Run the one-liner again, or tm status in the stack
directory, and the install is adopted by the new tm CLI

The installer is now the tm CLI - the one-liner is unchanged and installs tm, which keeps the same wizard and adds status, update, logs, reconfigure, doctor, uninstall and self-update. Installs made by the old setup.sh are adopted automatically, and secrets move out of docker-compose.yml into .env on the first tm reconfigure

Agent installs with Traefik offered the socket proxy and poison pill restart methods but generated neither the proxy service nor the healthcheck, so restarting Traefik from the UI silently did nothing
Notifications were being lost. Each Gunicorn worker kept its own copy of the log and overwrote the file with it, so whichever worker saved last erased anything the other had recorded, and the bell count changed depending on which worker answered. Writes now merge under a lock. Adds an empty notifications.yml.lock to the config directory
A hand written serversTransport was overwritten or deleted when its route was saved. Traefik Manager names the transport it manages <service>-transport, so a transport you named the same way was treated as its own: unticking Skip TLS verification stripped insecureSkipVerify, and saving with the streaming preset off removed the whole forwardingTimeouts block. It now only touches transports it created (#152)
Disabling built-in authentication warned that anyone could reach the interface even when OIDC was enabled and still protecting it (#153)
The GeoIP database was only checked for staleness once at startup, so an instance left running never refreshed it. It is now re-checked daily