` so every view fills the window. - **Master/detail layout** — the Zones tab is now a searchable, filterable list on the left (source/type badges, active highlight, sticky panel) with a records detail panel on the right. No more two crammed columns + a full-width table. - **Add Zone wizard** — "+ New Zone" opens a modal with two modes: - *Simple*: zone name, type, TTL, and checkbox presets for common records (NS + ns1, www, mail + MX, SPF TXT, ns2), with a **live zone-file preview** generated server-side. - *Advanced*: paste a full raw zone file; it is validated with `named-checkzone` before anything is written (rollback-free, nothing is created on error). - Enter submits, Esc closes, live preview refreshes as you type. - **Host Mapper merged into the Zones tab** with a *Zone Records* / *Host Mapper* segmented switch in the detail panel — it gets the full right-side width instead of a cramped half-column, and the nav bar stays clean. - Zone name validation on create (letters/digits/dots/hyphens, must be a FQDN) — bad names are rejected before touching BIND. ### Added - `POST /api/zone/preview` (returns the generated zone file for the Simple wizard). - Zone creation now accepts `records`, `ttl`, and `body` (raw zone file) server-side. ## [0.6.0] - 2026-09-05 ### Added - **DNS Lookup (Dig tab)** — query the managed BIND from the UI (`POST /api/dig`). - **Backup / Restore** — `GET /api/backup` downloads a gzipped tarball of all config files, zone files, and the rndc key; `POST /api/restore` restores it with validation (`named-checkconf` is a hard gate + rollback; `named-checkzone` failures are reported as warnings). UI in the Configuration view. - **Brute-force lockout** — 5 failed logins per IP within a 15-minute window locks login for 15 minutes (`429`). - **Docker healthchecks** — both compose files now health-check the web UI container via `curl /api/session`. - **Tests** — pytest suite covering zone parsing, record building, host→zone resolution, host mapper, backup/restore mapping + rollback, and the full auth/lockout flow (`tests/`, `requirements-dev.txt`). - **CI** — GitHub Actions workflow (`.github/workflows/ci.yml`) runs the suite on Python 3.11/3.12. ### Security - **Restricted rndc `controls`** on the host — `allow` narrowed from `any` to `{ 127.0.0.1; ::1; 172.16.0.0/12; }` (loopback + Docker private bridge range). Docs/examples updated from `allow { any; }`. ### Fixed - **Backup restore did not restore config files** — tarball members are stored under `bind-config/` but were matched by bare filename, so only zone files were applied. Restore now matches by basename; verified end-to-end (marker test). - **Leftover invalid `example.com` zone** on the host (missing `ns1` A glue record, pre-dating the `add_zone` glue fix) now loads: a record was added through the UI and `named-checkzone` passes. ## [0.5.0] - 2026-09-04 ### Added - **Password protection** — set `WEBUI_PASSWORD` to require a shared password to use the whole UI. All `/api/*` endpoints return `401` when unauthenticated. Empty password disables auth entirely. (`SECRET_KEY` signs the session cookie.) - **Login page** — shows a short message explaining 30-minute auto-logout behavior. - **Remember me (30 min)** — a *Remember me* checkbox persists the login for 30 minutes then auto-logs-out; unchecked uses a browser-session cookie that ends on browser close. - **Log out button** in the nav bar. ### Changed - **Zones page layout** — Zones / Host Mapper / Zone View boxes given more breathing room; zone list scrolls independently so the mapper and detail views stay tidy. - **Lighter dark mode** — replaced the near-black `#0f1117` with a Google-style `#202124` background. ## [0.4.1] - 2026-09-04 ### Fixed (Docker / web-UI container) - **Dashboard not showing data** — `rndc status` errors were swallowed (returned an empty string), leaving the dashboard blank. `get_status()` now propagates the real rndc error, and the UI shows it on a readable error banner. - **Container could not reach host BIND** — `127.0.0.1` inside the container refers to the container, not the host. Added `extra_hosts: host.docker.internal → host-gateway` to `docker-compose.yml`, so `RNDC_HOST=host.docker.internal` resolves to the Docker host gateway. (Also documented that host `named` must listen on TCP 953 via a `controls` block.) - **Logs not showing** — a bug where `LOG_FILE` was executed as a command instead of `tail`-ed, and no log source existed. Fixed `get_logs()` to build a proper `tail` command, fall back through multiple sources, and return a clear message. Host BIND now writes `/var/log/bind/named.log` which is mounted and tailed. - **`named-checkconf` failing in container** — the image lacked `/var/cache/bind` (referenced by the host config's `directory`). Now created in the `Dockerfile`. ## [0.4.0] - 2026-09-04 ### Added - **Docker support** — the web UI can now run in a container and manage BIND via `rndc` over TCP, in addition to the existing bare-metal mode - `Dockerfile` — container image for the web UI (runs as root, ships `rndc`/`dig`/`named-check*`) - `docker-compose-w-bind9.yml` — full stack: official `ubuntu/bind9` container + web-UI container, sharing config and writable zone/log volumes - `docker-compose.yml` — web-UI only, mounting the host's `/etc/bind` to manage an existing host/remote BIND over TCP rndc (config via `.env`, see `.env.example`) - `docker/bind/` — named config + `rndc.key` for the BIND container ### Changed - `bind_manager.py` is now transport- and privilege-aware via environment variables: - `RNDC_HOST` / `RNDC_PORT` / `RNDC_KEY` — drive `rndc` over TCP when set, otherwise use the local control socket - `BIND_CONF_DIR` / `ZONE_DIR` / `ZONE_OWNER` — relocate config and zone files and chown new zones (e.g. `bind:bind` in Docker) - `LOG_FILE` — tail a BIND log file in containers instead of `journalctl` - `sudo` is only prepended when not running as root (containers run as root) ## [0.3.0] - 2026-09-04 ### Added - **Host Mapper** on the Zones tab — paste or upload lines of `IP host1 host2 ...` (or a `.txt`/`.hosts` file) and it bulk-creates A records in the matching existing zone for each host - Automatically resolves each host's zone (apex, subdomain, nested) - Skips duplicates, reports missing zones, and flags malformed lines - Host Mapper sits in a side-by-side panel next to the Zones table (stacks to one column on narrow screens) - New API endpoint: `POST /api/map-hosts` ### Fixed - **Zones could never actually load in BIND** — `add_zone` created an NS record (`ns1.`) without a matching A glue record, so `named-checkzone` failed with "NS has no address records" and the zone was "not loaded". New zones now include an `ns1` A record. ## [0.2.2] - 2026-09-04 ### Added - "Move to default-zones" / "Move back to local" buttons on zone detail — one-click relocation of a zone block between `named.conf.local` and `named.conf.default-zones` with automatic BIND reload - Source indicator on zone detail showing which config file a zone lives in - `protected` flag for built-in system zones (`localhost`, `127.in-addr.arpa`, `0.in-addr.arpa`, `255.in-addr.arpa`, `.`) that prevents accidental deletion - New API endpoint: `POST /api/zone//source` to move zones between config files ### Changed - Zone detail action buttons now use proper spacing via `.btn-row` layout - Delete now works for user-created zones in default-zones (only built-in systems zones are protected) ## [0.2.1] - 2026-09-04 ### Added - Editable raw zone file in zone detail view (edit the full DNS zone file directly, then save + auto-reload BIND) - Filesystem path display for each zone (e.g. `/etc/bind/db.example.com`) - New API endpoint: `PUT /api/zone//file` to update raw zone file content ### Fixed - Zone detail "Show Raw" now shows an editable textarea with Save and Revert actions ## [0.2.0] - 2026-09-04 ### Added - Dark/light mode toggle (persisted in localStorage) - Logs tab with journalctl/syslog viewer, line count control, and text filtering - Syntax highlighting for log entries (errors in red, warnings in yellow) - Configuration tab with tabs for all conf files: `named.conf`, `named.conf.options`, `named.conf.local`, `named.conf.default-zones` - Structured server status on dashboard (stat boxes for status, version, zones, workers, boot time, query log) - Raw output toggle for server status - New API endpoints: `/api/status/structured`, `/api/config/files`, `/api/config/file/`, `/api/logs` ### Changed - Config tab renamed to "Configuration" - named.conf.options now shows full content including comments (no longer stripped) - Dashboard redesigned with stat grid layout ## [0.1.0] - 2026-09-04 ### Added - Dashboard with BIND9 server status display - rndc controls: reload config, flush cache, stats, querylog toggle - Zone management: list, create, delete zones - Record management: add/remove A, AAAA, MX, CNAME, NS, TXT, SRV, PTR records - Zone file viewer (raw view toggle) - Zone validation via `named-checkzone` - Config validation via `named-checkconf` - named.conf.options editor with save - Dark minimal UI with monospace terminal aesthetic - `install.sh` setup script for one-shot installation - Systemd service file for auto-start on boot - Full REST API for all operations ### Known Limitations - Requires `sudo` access for rndc and BIND config file operations - No authentication — do not expose to untrusted networks - Flask development server used (suitable for LAN/lab, not public internet)