Fixed
- Logs from a device added by a DDNS name were not attributed to it. If you add a router by its IP/Cloud address or any other dynamic-DNS name — the normal thing to do for a router whose address changes — its syslog arrived but was filed as coming from an unknown source, showing as a bare IP on the Logs page, missing from the device's own Logs tab, and invisible to anyone with a site scope. The manager was comparing the sender's address against a name, which can never match, and a router behind NAT sends from an address that appears on none of its own interfaces either. The name is now resolved and the address it points to is matched, so nothing needs pinning on the router. A changed DDNS address is picked up within two minutes. If two devices resolve to the same address — several routers behind one NAT — their lines are left unattributed rather than assigned to a guess, because a log line labelled with the wrong router is worse than one labelled with none. Reported on GitHub (#65).
- Operators and viewers could not set up two-factor authentication or a passkey. The Settings page holds two things that belong to you rather than to the installation — your second factor and your passkeys — but the way in was open to administrators only, on the sidebar and on a phone alike. Everyone can now open Settings and set up their own. Nothing else changed hands: the OpenCelliD key and the system configuration stay administrator-only and are simply not shown to anyone who cannot change them. Reported on GitHub (#66).