Changelog

A summary of the development from the user’s perspective. The complete technical history is kept in the planning repo (PLAN.md).

July 2026

Inventory & search (/inventory): bird’s-eye view across all providers — domains grouped, key figures, search across every entry by name, FQDN, or value with filters for type, provider, and project.
Guided provider migration: domain from provider A to B — instant copy of all managed entries, validation record, automatic detection of the nameserver switchover via public DNS, completion without deletion.
Per-zone permissions: Editor/Visitor grants can be restricted to individual zones of a project; other zones remain invisible.
Two-factor login (TOTP) for every user account, self-managed in the profile; disabling requires the password.
Provider round 3: GoDaddy, DigitalOcean DNS, and deSEC.
Profiles: SPF, DMARC, DKIM, MTA-STS, TLS-RPT, and BIMI as guided inputs instead of hand-written TXT values; “Email base setup” bundle with collision checking.
Expiry reminders: email 14 days before certificates or API keys expire.
OpenAPI: the running instance describes itself at /api/v1/openapi.json.
Cluster operation: sessions optionally in a shared Valkey (DNSE_VALKEY_ADDR) — one login is valid on all nodes.
Database: YugabyteDB support (DNSE_DB_YB=on).

Shared record set editor in zone, Sync Group, and Template: typed fields per record type, MX/SRV structured with priorities, TXT/CAA as a text field, AAAA twin alongside the A record, short explanation per type.
Sources (Source Hosts) and DynDNS as a source: entries bind to named endpoints instead of raw IPs; value fields suggest sources as you type, MX/SRV targets insert hostnames.
DynDNS: creation with zone/subdomain selection, token dialog with ready-made update URL, DynDNS2-compatible endpoint for routers.
In-app docs at /docs: fundamentals and all tier-1 record types with examples, DynDNS guides for curl, FRITZ!Box, and ddclient.
Login form with password manager support (native fields, autocomplete).
User management: invitation by email, password reset, CSV import; teams with member search; portal messages with Markdown.

Multi-provider core with RRset model and desired state per zone.
Provider rounds 1 and 2: PowerDNS, Hetzner, IONOS, hosting.de, netcup, Cloudflare, Route 53, Google Cloud DNS, Azure DNS.
Drift detection with enforce/adopt/ignore.
Sync Groups and Templates with the $domain placeholder.
ACME certificates via DNS-01 (lego), automatic renewal.
Users, teams, projects with Owner/Manager/Editor/Visitor roles.
Embedded Lit/Shoelace interface, light/dark, German/English.