v0.25.0

docs/INSTALL.md

@@ -1,4 +1,4 @@
-# Installing and updating RustProxy 0.24.10
+# Installing and updating RustProxy 0.25.0
 
 The scripts prepare a Linux/systemd installation. This source archive is **not a
 verified production build**: Rust/Cargo, real CA operations, live systemd startup
@@ -20,10 +20,11 @@ clones `https://git.linuxiarz.pl/gru/RustProxy` and builds with `cargo build --r
 Its default `auto` mode calls `install.sh` only when no managed installation exists. When
 `/opt/rustproxy/install.json` exists it calls `update.sh`, which uses the saved installation record,
 backs up private state, switches the release, verifies health/version and rolls code/data/unit back
-on failure. First install intentionally starts the admin listener on `0.0.0.0:9090` over plain HTTP
-using `--allow-remote-admin`; updates preserve the saved admin/listener
-settings. Firewall/private-network restriction is therefore required. The normal `install.sh`
-default remains loopback-only.
+on failure. First install keeps administration on `127.0.0.1:9090` over HTTP, matching the normal
+`install.sh` loopback-safe default. Updates preserve the saved admin/listener settings. For initial
+remote access use an SSH tunnel, then enable Administration HTTPS before persisting a non-loopback bind.
+Plain remote HTTP requires both an explicit non-loopback `RUSTPROXY_ADMIN_LISTEN` and
+`RUSTPROXY_ALLOW_REMOTE_ADMIN=1`, and should be limited to a trusted private network.
 
 Equivalent prerequisite commands are: