✨ Highlights
Patch release for the stable 4.2.x line. Focus is real client IP handling behind reverse proxies, group-owned zone visibility, and small UI fixes.
🐛 Fixes
- Real client IP behind reverse proxies (#1134) - new
TRUSTED_PROXIESenv var,X-Real-IPsupport, correct handling of proxy headers, and consistent use across auth and logging. Several IP parsing bugs fixed along the way. - Zones owned only via a group are listed correctly in the API (#1153) and counted without duplication in dashboard stats (refs #1112).
- API Keys submenu is now shown to users with the
api_manage_keyspermission (#1154). .zaWHOIS server entry added for South African domains (#1138).- Suppressed misleading "User unknown" log noise on unauthenticated requests.
📦 Upgrading
Drop-in replacement for v4.2.1. PHP 8.2+ required (unchanged).
Full changelog: v4.2.1...v4.2.2