What's New
Dashboard Overhaul
- Replaced hand-rolled bar charts with Recharts area charts — smooth, interactive, with tooltips
- New Traffic by Action stacked area chart showing allow/block/redirect over time
- Adaptive time bucketing — charts scale from hourly to daily to weekly based on selected range
- Combined Top Countries panel showing blocked + allowed side-by-side
- Colored log type labels in the stat card breakdown
- Unified panel grid layout
WAN & Gateway IP Intelligence
- Dual-stack WAN detection — IPv4 and IPv6 WAN IPs detected and excluded from stats
- Gateway IP detection — auto-discovers gateway internal IPs from
_LOCALfirewall rules - Gateway IPs excluded from "Top Active Internal IPs" to show real client traffic
- WAN IPs excluded from allowed destination stats; multicast/loopback IPv6 ranges filtered
Enrichment Fixes
- WAN IP enrichment fix — one-time migration re-enriches historical logs incorrectly enriched on your own WAN IP
- Backfill daemon skips WAN and IANA reserved IPs when patching threat scores from cache
- API detail endpoint excludes WAN and IANA reserved IPs from
ip_threatsjoins - Direction-aware manual enrich button picks the correct remote IP
UI Polish
- New logo
- Unified dark backgrounds (
bg-gray-950) across all modals, dropdowns, and menus - Network path column shows "External" label for missing inbound interface
Infrastructure
- Dynamic version management via
VERSIONfile — CI writes git tag, no more hardcoded strings