Proxion v0.11.1

Security

• Notification webhooks never follow redirects, and "Send test notification" now reports a failed
  channel only as request failed (HTTP <status>), (timeout) or (network) (email: also
  authentication failed) instead of the upstream's error text, so the button cannot be used to
  probe hosts or ports reachable from the server. New optional PROXION_NOTIFY_ALLOWED_HOSTS
  restricts the webhook and SMTP hosts that settings (saved in the app or set in the environment)
  may use; unset keeps today's behaviour, and an unparseable value fails closed (nothing is sent
  or saved until it is fixed). The channel status shown in Preferences now reflects what was
  actually built, not just what is stored. Email sender and recipient addresses are validated as
  bare addresses, and a kept webhook token is only reused while the scheme, host and port are
  unchanged.

Added

• Notification settings in the app: the Preferences page can now switch notifications on or off,
  snooze them (1 h, 8 h, 24 h, 7 days), mute individual alert kinds (backups, failed tasks, storage
  usage), and edit the delivery options and the webhook / email channel details, with no command
  line. Needs a signed-in session and Sys.Modify on /. The PROXION_NOTIFY_* variables stay the
  defaults; saving writes notify-settings.json (mode 0600) into the data directory, which then
  takes over and is applied immediately, without a restart. Secrets are never sent back to the
  browser. New routes: GET/PUT /api/notify/settings and POST /api/notify/mute.