diff --git a/CHANGELOG.md b/CHANGELOG.md index 60a8d16..ceb040b 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -7,9 +7,8 @@ Release history focused on **features, settings, default behavior, compatibility - `--config /absolute/file.json` / `RUST_PROXY_CONFIG`: an existing JSON file becomes the authoritative configuration source. Panel edits and restored revisions are written atomically to that file, with revision history in SQLite. Manual edits are imported by an explicit reload. Fingerprints reject unexpected external changes. - `rust-proxy reload` and `rust-proxy config reload` run through the authenticated local admin control plane. The example systemd unit provides `ExecReload` for `systemctl reload rustproxy`; frontends requiring new binds/ALPN still require a service restart. - Separate administrative API Bearer credentials can be generated and revoked in Settings, with RO/RW permissions, source-IP/CIDR allowlists, hash-only persistence and one-time secret display. Only an explicit API method/path allowlist is accessible; existing browser and certificate-scoped authentication remain unchanged. -- Certificate inventory supports bulk Vhost assignment to a selected certificate. Overview editing no longer displays two competing save-and-lock actions. +- Certificate inventory supports bulk Vhost assignment to a selected certificate. - Settings supports generate/rotate/revoke for a standalone Prometheus scrape Bearer token. Only its hash is stored. An explicit revocation record overrides legacy environment credentials. -- Fixed an `E0753` Rust compilation error caused by inner documentation comments in the included admin API token source file. - Moved RO/RW API token management from **Settings → Administration** to **Settings → Security**; Administration now links directly to the token card. **Verification:** Development source only. Preflight/static validation is not a Rust build. Native compilation and runtime/security/integration tests are required prior to any production release. diff --git a/ROADMAP.md b/ROADMAP.md index 88023f5..38dafaf 100644 --- a/ROADMAP.md +++ b/ROADMAP.md @@ -7,7 +7,6 @@ This file records **work still requiring acceptance or planned future considerat - Build with the project's required Rust toolchain and run the full unit and integration test suite. - Verify `--config` concurrent edit rejection, file permissions, atomic writes, migration and restore, plus systemd reload on a running install. - Exercise RO/RW API token allowlists and IP/HTTPS enforcement, token revocation, Prometheus rotation/revocation (including legacy environment-token fallback), and unauthorized requests. -- Verify certificate bulk assignment, Dashboard layout save/lock behavior, and all existing HTTP/TLS proxy test cases. ## 0.34.0 — outstanding release verification @@ -15,7 +14,6 @@ This file records **work still requiring acceptance or planned future considerat - Exercise full HTTP/1.1, TLS, HTTP/2, HTTP/3, WebSocket, frontend/backend routing, retry, cache/privacy, certificate and administration scenarios. - Test selective HOT/COLD invalidation through configuration edits, restart and persistent cache recovery; verify related regression cases and migration behavior. - Verify optional Linux `sendfile=auto` with eligible static files and that all ineligible requests use safe normal delivery. -- Run controlled before/after performance and resource measurements. **No 0.34.0 throughput improvement is established yet.** - Perform backup/restore and managed install/update acceptance on supported systems, including the container deployment where applicable. ## Longer-term directions