Proxion v0.12.0

Added

• Datacenter > Firewall: the cluster-wide firewall in five inner tabs -- the datacenter's rules
  (add, edit, delete, enable or disable, reorder, reusing the guest firewall's rule dialog), the
  options (a master Enable switch that asks you to type ENABLE first because an inbound DROP
  policy can lock you out of every node, input and output policy, ebtables, the log rate limit),
  security groups and the rules inside them, aliases, and IP sets with their entries (including the
  nomatch exclusion flag). Needs a signed-in session and Sys.Modify on /; changes forward
  PVE's digest where it accepts one. New routes under /api/actions/datacenter/firewall/*.
• Datacenter -> Backup Jobs: the Datacenter page's Backup Jobs tab manages the cluster's scheduled
  vzdump jobs like PVE's Datacenter -> Backup panel. The table shows each job's schedule, next run,
  storage, mode, which guests it covers, compression, retention and comment, with an inline
  Enabled switch; add and edit a job (schedule presets or a custom calendar event, all guests with
  an exclude list, a pool or chosen guests, keep-* retention, email notification, advanced
  options), "Run now", a "Show included guests" sheet with each guest's volumes (a drive with
  backup=0 is marked), and delete behind a typed-job-id confirmation. Needs a signed-in session
  and Sys.Modify on / (Run now: VM.Backup on each guest and Datastore.AllocateSpace on the
  storage).
• Datacenter -> Users & Permissions (T68): manage users, groups, ACL entries and API tokens, view roles, and change passwords from
  the Datacenter page. Writes go through new /api/actions/datacenter/access/* routes (session sign-in only, one privilege checked per
  call, PVE's own refusals relayed); a password is never logged or echoed and a new API token's secret is shown once, never stored.
• Datacenter -> Storage and Datacenter -> Pools. The Storage tab lists every storage definition with
  its usage and adds, edits and removes them (Directory, NFS, SMB/CIFS, LVM, LVM-Thin, ZFS and
  Proxmox Backup Server, with scan helpers, node selection and keep-* retention); removing one drops
  the definition only, never the data, and local cannot be removed. The Pools tab creates, comments
  and deletes pools and adds or removes guests and storages. New routes under
  /api/actions/datacenter/storage and /api/actions/datacenter/pools need a session sign-in and
  Datastore.Allocate / Pool.Allocate; CIFS and PBS passwords are sent to PVE once and are never
  logged, echoed or stored.
• Node → Network: the node's Network tab now lists every interface and lets you create a Linux
  bridge, bond or VLAN, edit an interface (a physical one only its addressing, autostart, MTU and
  comment) and delete a bridge, bond or VLAN. Proxmox only stages these changes, so a pending
  banner shows the diff with Apply configuration (typed APPLY confirmation; applying can
  disconnect the node from the network if the configuration is wrong) and Revert. Needs a
  signed-in session and Sys.Modify on the node; deleting the interface that carries the address
  Proxion reaches Proxmox at is refused.