v1.7.2

Features

• IP geolocation for Logs and CrowdSec - enable it in Settings → Interface → Geolocation to see country flags on every IP plus a shaded world map of where your traffic and bans are coming from, on both the Logs and CrowdSec tabs. Click a country on the map (or in the Top Countries list) to filter the entries to it. Lookups run entirely on the server against a local database - no IP addresses ever leave your machine, no external geo-API, no rate limits. It uses the free DB-IP Lite country database (CC-BY 4.0), downloaded and refreshed monthly with one click; point GEOIP_DB_PATH at your own MaxMind/DB-IP .mmdb to use a different source. Works for the Host and remote agents (enrichment happens on the Host). Off by default.
• Default theme setting (closes discussion #97) - the theme is now a server-side setting (default_theme in manager.yml), so it applies to the login page and every browser out of the box. The theme toggle in the nav bar saves your choice as the default, and it can also be set in Settings → Interface → Appearance (Dark / Light / System - system follows the OS preference).
• No more browser autofill on config fields (#101, thanks @fbnlrz) - browsers and password managers no longer autofill or offer to save credentials on fields that are not the login form (route/service names, API user, git backup token, CrowdSec key, the auth generators). The sign-in form is untouched so your password manager still works there, and the password-change and TOTP fields keep their correct semantics.

Fixes

• Empty route modal, Dashboard, and Route Map on first open (#100, thanks @fbnlrz) - entry point and middleware chips, the Dashboard, and the Route Map sometimes came up empty and only a hard reload fixed them. Three causes are addressed: /api/traefik/entrypoints and /api/traefik/middlewares (Host and agents) now return 502 when Traefik is unreachable instead of an empty 200, so the UI can tell "Traefik is down" from "nothing configured"; failed loads are no longer cached (a single failed fetch no longer pins an empty list for the whole session, and concurrent callers share one request); and API/app-shell responses now send Cache-Control: no-store so browsers stop serving stale config. The route modal also waits for its data before showing, and the Dashboard and Route Map refresh on open (30-second cache) so changes made elsewhere appear without a reload.