v0.32.4

README.md

@@ -1,4 +1,4 @@
-# RustProxy 0.32.3
+# RustProxy 0.32.4
 
 **0.31.0 panel/cache additions:** browser-negotiated Zstd/Brotli/gzip for HTML, JS and CSS (Settings → Administration); optional HTTP BAN/PURGE restricted to explicit IP/CIDR allowlist (Settings → Cache, disabled by default); System information Refresh button beside the API badge. See [Settings](docs/SETTINGS.md) and [Cache](docs/CACHE.md).
 
@@ -7,7 +7,43 @@ streaming HTTP/TLS/WebSocket forwarding, raw TCP/UDP stream hosts, IP-bound vhos
 
 **0.31.9 Certificate API management: inspect and edit credential settings without exposing/rotating the current token, or regenerate one existing token with one-time display. Rust/Cargo and live testing required.**
 
-## What changed in 0.32.3
+## What changed in 0.32.4
+
+- **Follow-up build correction:** a retry request now passes a cloned URI to
+  the HTTP request builder, retaining the original for backend-specific
+  HTTP/2 `:authority` selection. This resolves Rust `E0382` (borrow after
+  move) in `src/proxy/types.rs`. Neither retry policy nor backend dialing
+  changes. Rust compilation is still required on a host with Cargo.
+- **Tighter, consistent Overview gutters:** the aligned Dashboard uses 4px
+  gaps at normal UI density, 3px at dense and 12px at comfortable, in both
+  axes. This applies between small tiles *and* between tiles and large panels.
+  The more-specific dashboard-density CSS rules no longer override the grid
+  gutter. Widget sizes, responsive rows and saved layouts are unchanged.
+
+- **Preserve Host for every upstream protocol.** `http1`, `auto`, compatible
+  `http2` and strict `h2` accept `preserve_host: true` without forced UI
+  downgrades. For HTTP/2, the outgoing HTTP authority follows the chosen Host;
+  network address validation/DNS/TCP continue to use the configured backend URL.
+  HTTP/2 ALPN and H2C retain their previous protocol/retry semantics, and
+  legacy WebSocket Upgrade stays isolated.
+- **Separated HTTP authority from transport identity.** The existing TLS
+  server-name setting still controls SNI and certificate identity independently
+  of the visitor Host. No extra DNS queries, forced HTTP/1.1 fallback, protocol
+  probing or request replay are introduced. For a verified certificate issued
+  to a DNS name, specify `tls_server_name` and private CA as appropriate.
+- **Less restrictive HTTPS-by-IP warning.** The H1 diagnostic preset remains an
+  explicit *optional* troubleshooting action, not a validation requirement for
+  Auto/H2, pools or Preserve Host. Warn only when verifying HTTPS-by-IP without
+  an explicit certificate DNS name (IP-SAN certificates are also possible).
+- **Overview spacing:** remove the leftover outer margin of the shared grid so
+  the transition from metric tiles to large charts uses the same density-aware
+  gutter as every other row, without altering saved layouts or card sizes.
+- No database/configuration migration or new privileges. **Rust compilation,
+  runtime protocol acceptance against real Angie and benchmarks are still
+  required before production rollout.**
+
+## Previously in 0.32.3
+
 
 - **Consistently sized Overview rows:** the dashboard now uses ordinary CSS Grid for both default and customized layouts. Six numeric tiles, three standard live charts, two optional wide charts and three diagnostic panels form separate, equal-height rows with the original density-controlled gaps. Blocks cannot float into unfinished rows of another size or acquire arbitrary heights. Ordering and Hide/Show remain editable **inside each size group**; existing saved widget IDs, visibility, preference API, chart data and reset/default behavior stay compatible. CSS Grid automatically resizes whole rows when live content grows, without pixel offsets, layout timers or extra polling.