v0.27.0-hotfix

README.md

@@ -15,7 +15,7 @@ Named HTTP/HTTPS listener bind addresses use the same chip-style editor as vhost
 
 - Enable downstream compression by default with `zstd`, Brotli and gzip codecs; deflate remains opt-in. Honor client `q` values first and use deterministic `zstd -> br -> gzip -> deflate` server preference when quality is equal. Existing `Content-Encoding` is never recompressed.
 - Stop treating authentication/cookie/cache-privacy headers as blanket compression blockers. `Cookie`, `Authorization`, `Set-Cookie`, `private` and `no-store` may be compressed; `no-transform`, ranges, SSE, upgrades and already encoded responses remain excluded.
-- Add dynamic compression inheritance/overrides to ordinary vhosts, generated Docker vhosts and Web Server services, including per-scope codec filters. Global Response settings remain the hard codec ceiling and own the minimum size. When a scope explicitly disables compression, its codec selectors are hidden/disabled without erasing the saved overrides.
+- Add dynamic compression inheritance/overrides to ordinary vhosts and Web Server services, including per-scope codec filters. Docker vhosts intentionally expose only one Compression checkbox; their codec set and priority come from global Response settings. Global Response settings remain the hard codec ceiling and own the minimum size.
 - Keep an explicitly published Docker vhost routed until the administrator unpublishes it. A missing container/service now keeps the hostname and returns `503 Service Unavailable`; an agent transport failure reuses the last successful inventory when available, and service return is reconciled automatically.
 - Make `/cache` occupancy meters render their filled portion consistently in Chromium/WebKit and Firefox instead of relying only on native `accent-color`.
 - Keep SQLite schema 8. New saved compression fields are additive/defaulted, so older 0.26.x documents continue to load. Fresh installations default the `Server` response header to exactly `RustProxy`.
@@ -327,8 +327,9 @@ and gzip default ON while deflate defaults OFF, and equal client quality uses
 in `Content-Encoding` with `Vary: Accept-Encoding`. Existing `Content-Encoding`, ranges,
 SSE, upgrades and `no-transform` are passed through without recompression. Cookie,
 Authorization, Set-Cookie, private and no-store headers do not by themselves disable
-dynamic compression. Ordinary vhosts, Docker publications and Web Server services may
-inherit/enable/disable compression and individual codecs; explicitly disabling a scope
+dynamic compression. Ordinary vhosts and Web Server services may inherit/enable/disable
+compression and individual codecs. Docker publications expose a single Compression on/off switch
+and always use the globally enabled codec set; explicitly disabling a configurable scope
 hides/disables its codec selectors in the dashboard while preserving their saved values.
 Strong ETags are weakened after transformation, and obsolete content digests are removed.
 Server policy is applied after generic response rules. Protected framing/identity headers