CHANGELOG.md

Rama main · réplica de lectura del repositorio original.

# Changelog

All notable changes to bind9-webui will be documented in this file.

The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).

## [0.6.2] - 2026-09-05

### Added

- **Interactive installer** (`./install.sh`) — asks which of three deployments to run:
  1. *Full Docker stack* — BIND9 + web UI containers; prompts for the UI password and runs `docker compose -f docker-compose-w-bind9.yml up -d`.
  2. *Host BIND + Docker* — detects OS / BIND config dir (`/etc/bind` vs `/etc/named`), checks/installs BIND, generates the rndc key, adds the restricted TCP 953 `controls` block and a file logging channel to named, writes `.env`, then runs the web-UI-only compose file.
  3. *Manual* — all on the host: detects OS, installs BIND9 + Python deps if missing, sets up a venv, writes the UI password/secret to `/etc/bind9-webui.env`, and installs the systemd service.
  - `./install.sh --check` prints detected distro / bind dir / log dir / rndc key / dependency status without making changes.
- **One-liner bootstrapping** — `curl -fsSL <raw>/main/install.sh | bash` now works: if the script detects no repo checkout (streamed), it clones the project into `~/bind9-webui` (or a chosen path) and re-runs itself from there, so `git clone` is no longer required.
- **Docker preflight** — before either Docker mode starts, the installer verifies the `docker` binary, the compose plugin, AND that the daemon is reachable (`docker info`), starting the service on the way if needed; a hard error aborts if the daemon can't be started.
- `docker-compose.yml` mount is now parameterized (`BIND_HOST_DIR`, `HOST_BIND_LOG_DIR`) so non-Debian distros work with the installer.
- `bind9-webui.service` is a template (`__DIR__` placeholder) installed with the real path; reads credentials via `EnvironmentFile`.

## [0.6.1] - 2026-09-05

### Changed (Zones UI rework)

- **Full-width layout** — removed the 1100px cap on `<main>` so every view fills the window.

- **Master/detail layout** — the Zones tab is now a searchable, filterable list on the left (source/type badges, active highlight, sticky panel) with a records detail panel on the right. No more two crammed columns + a full-width table.
- **Add Zone wizard** — "+ New Zone" opens a modal with two modes:
  - *Simple*: zone name, type, TTL, and checkbox presets for common records (NS + ns1, www, mail + MX, SPF TXT, ns2), with a **live zone-file preview** generated server-side.
  - *Advanced*: paste a full raw zone file; it is validated with `named-checkzone` before anything is written (rollback-free, nothing is created on error).
  - Enter submits, Esc closes, live preview refreshes as you type.
- **Host Mapper merged into the Zones tab** with a *Zone Records* / *Host Mapper* segmented switch in the detail panel — it gets the full right-side width instead of a cramped half-column, and the nav bar stays clean.
- Zone name validation on create (letters/digits/dots/hyphens, must be a FQDN) — bad names are rejected before touching BIND.

### Added

- `POST /api/zone/preview` (returns the generated zone file for the Simple wizard).
- Zone creation now accepts `records`, `ttl`, and `body` (raw zone file) server-side.

## [0.6.0] - 2026-09-05

### Added

- **DNS Lookup (Dig tab)** — query the managed BIND from the UI (`POST /api/dig`).
- **Backup / Restore** — `GET /api/backup` downloads a gzipped tarball of all config files, zone files, and the rndc key; `POST /api/restore` restores it with validation (`named-checkconf` is a hard gate + rollback; `named-checkzone` failures are reported as warnings). UI in the Configuration view.
- **Brute-force lockout** — 5 failed logins per IP within a 15-minute window locks login for 15 minutes (`429`).
- **Docker healthchecks** — both compose files now health-check the web UI container via `curl /api/session`.
- **Tests** — pytest suite covering zone parsing, record building, host→zone resolution, host mapper, backup/restore mapping + rollback, and the full auth/lockout flow (`tests/`, `requirements-dev.txt`).
- **CI** — GitHub Actions workflow (`.github/workflows/ci.yml`) runs the suite on Python 3.11/3.12.

### Security

- **Restricted rndc `controls`** on the host — `allow` narrowed from `any` to `{ 127.0.0.1; ::1; 172.16.0.0/12; }` (loopback + Docker private bridge range). Docs/examples updated from `allow { any; }`.

### Fixed

- **Backup restore did not restore config files** — tarball members are stored under `bind-config/` but were matched by bare filename, so only zone files were applied. Restore now matches by basename; verified end-to-end (marker test).
- **Leftover invalid `example.com` zone** on the host (missing `ns1` A glue record, pre-dating the `add_zone` glue fix) now loads: a record was added through the UI and `named-checkzone` passes.

## [0.5.0] - 2026-09-04

### Added

- **Password protection** — set `WEBUI_PASSWORD` to require a shared password to use the whole UI. All `/api/*` endpoints return `401` when unauthenticated. Empty password disables auth entirely. (`SECRET_KEY` signs the session cookie.)
- **Login page** — shows a short message explaining 30-minute auto-logout behavior.
- **Remember me (30 min)** — a *Remember me* checkbox persists the login for 30 minutes then auto-logs-out; unchecked uses a browser-session cookie that ends on browser close.
- **Log out button** in the nav bar.

### Changed

- **Zones page layout** — Zones / Host Mapper / Zone View boxes given more breathing room; zone list scrolls independently so the mapper and detail views stay tidy.
- **Lighter dark mode** — replaced the near-black `#0f1117` with a Google-style `#202124` background.

## [0.4.1] - 2026-09-04

### Fixed (Docker / web-UI container)

- **Dashboard not showing data** — `rndc status` errors were swallowed (returned an empty string), leaving the dashboard blank. `get_status()` now propagates the real rndc error, and the UI shows it on a readable error banner.
- **Container could not reach host BIND** — `127.0.0.1` inside the container refers to the container, not the host. Added `extra_hosts: host.docker.internal → host-gateway` to `docker-compose.yml`, so `RNDC_HOST=host.docker.internal` resolves to the Docker host gateway. (Also documented that host `named` must listen on TCP 953 via a `controls` block.)
- **Logs not showing** — a bug where `LOG_FILE` was executed as a command instead of `tail`-ed, and no log source existed. Fixed `get_logs()` to build a proper `tail` command, fall back through multiple sources, and return a clear message. Host BIND now writes `/var/log/bind/named.log` which is mounted and tailed.
- **`named-checkconf` failing in container** — the image lacked `/var/cache/bind` (referenced by the host config's `directory`). Now created in the `Dockerfile`.

## [0.4.0] - 2026-09-04

### Added

- **Docker support** — the web UI can now run in a container and manage BIND via `rndc` over TCP, in addition to the existing bare-metal mode
  - `Dockerfile` — container image for the web UI (runs as root, ships `rndc`/`dig`/`named-check*`)
  - `docker-compose-w-bind9.yml` — full stack: official `ubuntu/bind9` container + web-UI container, sharing config and writable zone/log volumes
  - `docker-compose.yml` — web-UI only, mounting the host's `/etc/bind` to manage an existing host/remote BIND over TCP rndc (config via `.env`, see `.env.example`)
  - `docker/bind/` — named config + `rndc.key` for the BIND container

### Changed

- `bind_manager.py` is now transport- and privilege-aware via environment variables:
  - `RNDC_HOST` / `RNDC_PORT` / `RNDC_KEY` — drive `rndc` over TCP when set, otherwise use the local control socket
  - `BIND_CONF_DIR` / `ZONE_DIR` / `ZONE_OWNER` — relocate config and zone files and chown new zones (e.g. `bind:bind` in Docker)
  - `LOG_FILE` — tail a BIND log file in containers instead of `journalctl`
  - `sudo` is only prepended when not running as root (containers run as root)

## [0.3.0] - 2026-09-04

### Added

- **Host Mapper** on the Zones tab — paste or upload lines of `IP host1 host2 ...` (or a `.txt`/`.hosts` file) and it bulk-creates A records in the matching existing zone for each host
  - Automatically resolves each host's zone (apex, subdomain, nested)
  - Skips duplicates, reports missing zones, and flags malformed lines
  - Host Mapper sits in a side-by-side panel next to the Zones table (stacks to one column on narrow screens)
- New API endpoint: `POST /api/map-hosts`

### Fixed

- **Zones could never actually load in BIND** — `add_zone` created an NS record (`ns1.<zone>`) without a matching A glue record, so `named-checkzone` failed with "NS has no address records" and the zone was "not loaded". New zones now include an `ns1` A record.

## [0.2.2] - 2026-09-04

### Added

- "Move to default-zones" / "Move back to local" buttons on zone detail — one-click relocation of a zone block between `named.conf.local` and `named.conf.default-zones` with automatic BIND reload
- Source indicator on zone detail showing which config file a zone lives in
- `protected` flag for built-in system zones (`localhost`, `127.in-addr.arpa`, `0.in-addr.arpa`, `255.in-addr.arpa`, `.`) that prevents accidental deletion
- New API endpoint: `POST /api/zone/<name>/source` to move zones between config files

### Changed

- Zone detail action buttons now use proper spacing via `.btn-row` layout
- Delete now works for user-created zones in default-zones (only built-in systems zones are protected)

## [0.2.1] - 2026-09-04

### Added

- Editable raw zone file in zone detail view (edit the full DNS zone file directly, then save + auto-reload BIND)
- Filesystem path display for each zone (e.g. `/etc/bind/db.example.com`)
- New API endpoint: `PUT /api/zone/<name>/file` to update raw zone file content

### Fixed

- Zone detail "Show Raw" now shows an editable textarea with Save and Revert actions

## [0.2.0] - 2026-09-04

### Added

- Dark/light mode toggle (persisted in localStorage)
- Logs tab with journalctl/syslog viewer, line count control, and text filtering
- Syntax highlighting for log entries (errors in red, warnings in yellow)
- Configuration tab with tabs for all conf files: `named.conf`, `named.conf.options`, `named.conf.local`, `named.conf.default-zones`
- Structured server status on dashboard (stat boxes for status, version, zones, workers, boot time, query log)
- Raw output toggle for server status
- New API endpoints: `/api/status/structured`, `/api/config/files`, `/api/config/file/<name>`, `/api/logs`

### Changed

- Config tab renamed to "Configuration"
- named.conf.options now shows full content including comments (no longer stripped)
- Dashboard redesigned with stat grid layout

## [0.1.0] - 2026-09-04

### Added

- Dashboard with BIND9 server status display
- rndc controls: reload config, flush cache, stats, querylog toggle
- Zone management: list, create, delete zones
- Record management: add/remove A, AAAA, MX, CNAME, NS, TXT, SRV, PTR records
- Zone file viewer (raw view toggle)
- Zone validation via `named-checkzone`
- Config validation via `named-checkconf`
- named.conf.options editor with save
- Dark minimal UI with monospace terminal aesthetic
- `install.sh` setup script for one-shot installation
- Systemd service file for auto-start on boot
- Full REST API for all operations

### Known Limitations

- Requires `sudo` access for rndc and BIND config file operations
- No authentication — do not expose to untrusted networks
- Flask development server used (suitable for LAN/lab, not public internet)