v0.25.5

src/admin/openapi.json

@@ -2,7 +2,7 @@
   "openapi": "3.0.3",
   "info": {
     "title": "RustProxy Administration API",
-    "version": "0.25.4",
+    "version": "0.25.5",
     "description": "Administration API for the active panel origin. Sign in through the panel; the same-origin HttpOnly cookie authenticates all private operations. Mutations also require the exact Origin, X-RustProxy-Request: 1 and a session-bound X-CSRF-Token. Loopback HTTP is the default; Settings can enable HTTPS before using a non-loopback administration bind. This document contains no live configuration or credentials. Object schemas marked extensible are summaries: full configuration validation is authoritative in Rust."
   },
   "servers": [
@@ -489,7 +489,7 @@
           "cloudflare_client_ip": {
             "type": "boolean",
             "default": false,
-            "description": "Use a verified Cloudflare connecting-IP header only when the immediate peer is in the configured trusted Cloudflare ranges."
+            "description": "Use verified Cloudflare client-IP and country headers only when the immediate peer is in the built-in Cloudflare edge ranges; country falls back to local GeoIP when unavailable or invalid."
           },
           "timing_headers": {
             "type": "boolean",
@@ -2305,6 +2305,11 @@
             "type": "boolean",
             "default": true
           },
+          "include_traffic": {
+            "type": "boolean",
+            "default": true,
+            "description": "Export bounded Traffic analytics aggregates. Raw client IPs, request paths and full User-Agent strings are intentionally excluded."
+          },
           "include_backends": {
             "type": "boolean",
             "default": true
@@ -4584,6 +4589,13 @@
               "$ref": "#/components/schemas/TrafficTopEntry"
             }
           },
+          "user_agent_families": {
+            "type": "array",
+            "description": "Fixed-cardinality User-Agent families used by Prometheus; raw User-Agent top values remain available only in the authenticated Traffic API/UI.",
+            "items": {
+              "$ref": "#/components/schemas/TrafficTopEntry"
+            }
+          },
           "client_ips": {
             "type": "array",
             "items": {
@@ -4596,6 +4608,20 @@
               "$ref": "#/components/schemas/TrafficTopEntry"
             }
           },
+          "method_families": {
+            "type": "array",
+            "description": "Fixed-cardinality common HTTP method families with all extension methods folded into OTHER.",
+            "items": {
+              "$ref": "#/components/schemas/TrafficTopEntry"
+            }
+          },
+          "sources": {
+            "type": "array",
+            "description": "Fixed serving-source families: reverse_proxy, web_server, local_response or unresolved.",
+            "items": {
+              "$ref": "#/components/schemas/TrafficTopEntry"
+            }
+          },
           "statuses": {
             "type": "array",
             "items": {
@@ -9350,4 +9376,4 @@
       }
     }
   }
-}
+}