wangwanjie/gately v0.6.6.6 on GitHub

中文

搜索：访客页搜索框可选搜索引擎（最多 12 个，内置常用预设，地址中用 {q} 表示关键词），回车在新标签页搜索，输入时仍筛选页面上的链接；可设置默认搜索范围。
仅登录可见：链接可设为登录后可见，未登录访客的页面中不会下发其名称与地址；需要站点启用网页认证并勾选「仅对下方标记为必须认证的路径启用认证」，分享链接访客不算登录。
背景图：图片地址或上传图片（1 MB 以内），可调模糊与遮罩；访客可在页面设置里换成自己的背景。
卡片与分组：大小两种卡片尺寸，可选显示标题与描述；分组可折叠，可开启「常用」分组。
页面信息：自定义标签页标题、图标、页面描述与页脚；访客可切换语言，登录后显示用户菜单。

新增 DNS 服务商：腾讯云 EdgeOne（含证书 DNS 验证与删除记录）、阿里云 ESA、百度智能云、火山引擎、DNS.LA、雨云、HiPM DNSMgr、时代互联 / Eranet / Tnet.hk、Vercel、NameSilo、Dynadot（仅更新已有记录）、Spaceship、Name.com、Gcore、ClouDNS、deSEC。
TTL：TTL 填 0 时，新建记录使用服务商默认值，更新时按服务商沿用原有 TTL 或使用默认值。
Cloudflare：「代理状态」填 true / false 时同步已有记录的代理状态，留空不管理；同名同类型多条记录保留一条改为目标值，其余旧值记录删除。
其他：多级公共后缀（如 com.ar、org.br）按公共后缀列表拆分；自定义回调支持 {timestamp}；dynv6 经 zone 更新根域地址；阿里云未指定线路时只操作默认线路。

模块登记的可信来源不触发诱饵端口与端口扫描检测（nftables / iptables 均支持），日志规则、手动封禁与访问控制照常生效。
frps：用正确令牌登录的 frpc 来源成为可信来源，同一宽带出口下其他设备做 TCP 打洞时不再连带封掉 frpc；登录后 10 分钟内或保持连接期间有效，断开后需重新登录。

跨父域后台登录免认证改为管理员在站点上打开 /__gately_auth/admin-start（可带 ?next=）发起握手，普通访客不再被跳转到后台入口。
响应缓存：只带 Gately 自身登录 Cookie 的请求重新可以缓存（此前开启单点登录域或网页认证后缓存一直为空）；其他 Cookie、其他实例签发的会话 Cookie 仍跳过缓存。

Search: the visitor page search box offers a choice of search engines (up to 12, with common presets; {q} marks the keywords in the URL). Enter searches in a new tab while typing still filters the links; a default search scope can be set.
Sign-in-only links: links can be shown only to signed-in visitors; their name and address are not sent to anyone else. The site needs web authentication with "Require authentication only for paths marked Required below"; share-link visitors do not count as signed in.
Background image: an image URL or an uploaded image (up to 1 MB) with blur and overlay; visitors can pick their own background in the page settings.
Cards and groups: large and small link cards with optional title and description, folding groups and a frequent-links group.
Page details: custom tab title, favicon, page description and footer; visitors can switch the language, and signed-in visitors get a user menu.

New DNS providers: Tencent Cloud EdgeOne (also certificate DNS validation and record deletion), Alibaba Cloud ESA, Baidu AI Cloud, Volcano Engine, DNS.LA, Rainyun, HiPM DNSMgr, Now.cn / Eranet / Tnet.hk, Vercel, NameSilo, Dynadot (updates existing records only), Spaceship, Name.com, Gcore, ClouDNS and deSEC.
TTL: with TTL 0, new records get the provider default, and updates keep the existing TTL or use the default depending on the provider.
Cloudflare: "Proxy status" set to true / false syncs the proxy status of existing records, left empty it is not managed; when several records share a name and type, one is set to the target value and the other stale ones are deleted.
Also: hostnames under multi-level public suffixes such as com.ar and org.br are split by the public suffix list; custom callbacks support {timestamp}; dynv6 updates the zone root through the zone; Alibaba Cloud only touches the default line when no line is set.

Trusted sources registered by modules skip decoy ports and scan detection (nftables and iptables); log rules, manual bans and access control are unaffected.
frps: an frpc that signs in with the correct token becomes a trusted source, so TCP hole punching by other devices behind the same home connection no longer gets the frpc banned along with them. It stays trusted for 10 minutes after sign-in or while connected, and must sign in again after disconnecting.

Admin sign-in bypass across parent domains now starts when an administrator opens /__gately_auth/admin-start (optional ?next=) on the site; ordinary visitors are never redirected to the admin entry.
Response cache: requests that only carry Gately's own sign-in cookies are cacheable again (previously nothing was cached once a single sign-on domain or web authentication was in use); other cookies and session cookies issued by other instances still skip the cache.

Administrators using the cross-parent-domain admin sign-in bypass open /__gately_auth/admin-start on the site once after upgrading.
In Cloudflare tasks, several stale same-name, same-type records are merged into one at the next sync.