v1.6.0

New Features

#86 - Local backup retention - set a keep-count so only the last N .bak files per config file are kept; older ones are pruned automatically. Configure it in Settings - Backups (host) or via the BACKUP_KEEP_COUNT environment variable (agents). 0 keeps all backups.
#86 - Manual commit message - the Git Backup tab now has a commit-message field used for that push only. Turn auto-push off to bundle changes and push them with a meaningful message instead of a commit per save. Works for both the host and remote agents.
App icons on the Routes tab - a new Settings - Interface - Routes - Show app icons toggle displays an app icon next to each route name in grid and list view. Off by default. It reuses the Dashboard's selfh.st icon source and per-route custom overrides, so any icon you set on a Dashboard card also shows on the Routes tab. Applies to the Host and remote agents.
#89 - Smarter domain chips in the route form - the domain chip list now combines your configured Domains with domains auto-detected from existing routes, and a new + chip lets you type any other domain directly in the form - no more maintaining the Settings list first. Works for the Host and remote agents (agent routes are scanned too). The Domains setting is now clearly labeled as a form convenience that never affects your Traefik configuration.

#88 - Traefik API behind a private CA - the app now trusts the system CA bundle (/etc/ssl/certs/ca-certificates.crt) for outbound HTTPS instead of only Python's bundled certificates, so a Traefik API served over an internal CA (e.g. step-ca) is trusted once that CA is mounted - the same way curl already worked. A new TRAEFIK_INSECURE_SKIP_VERIFY env var skips verification for self-signed certs on the Host (it already existed for agents).
#88 - Connection test now reports why it failed - Test Connection returned a generic "Connection failed" with no detail. It now distinguishes TLS verification failures, timeouts, connection errors, and HTTP 401/403 (wrong API credentials).
#88 - Static config API toggles no longer wipe sibling keys - toggling Dashboard, Insecure, or Debug under Settings - Static Config - API merged into the existing api: block instead of replacing it, so other keys (and your explicit dashboard: true / insecure: false) are preserved.
#89 - Custom certificate resolvers are auto-detected - resolvers defined in your static config's certificatesResolvers now appear in the route TLS dropdown automatically; you no longer have to re-type them in Settings. A route that already uses a resolver not in the list now displays it instead of showing a blank field. Works for the Host and for remote agents (the agent's static config is read for its resolvers).