Skip to content

Changelog

Summary from the user’s perspective; changes to the shared core are in the CE changelog.

  • SSO via OpenID Connect: Authorization Code with PKCE, matching by email, optional auto-provisioning (DNSE_SSO_AUTOPROVISION). Configured through four environment variables; incomplete = feature off. With SSO active, the login form additionally shows “Sign in with SSO”.

2026-07-13 — Security scan and zone restore

Section titled “2026-07-13 — Security scan and zone restore”
  • Records security scan (GET /zones/{id}/security-scan): checks SPF (missing/multiple/lax), DMARC (missing/p=none), CAA, wildcards and single nameservers; findings with level and justification.
  • Time-travel restore (POST /zones/{id}/restore): rolls a zone back as compensating events — the history remains complete, and the restore itself is reversible.
  • License check: Ed25519-signed license file, verifiable offline; cmd/licensegen for signing; startup refused without a valid license.
  • Audit history (GET /zones/{id}/history) from the event-based core.