v1.0.5
Added
- WordPress hover widget via REST API
- Setting to hide services without LAN URL in LAN mode
- 27 external API widgets (Open-Meteo, Cloudflare, Tailscale, GitHub, Gotify, ntfy, UniFi, TrueNAS, and more)
- Public REST API v1 for read-only export (API key auth)
- Homelab Dashboard widget to consume another instance's API v1
Security
- Public API key no longer exposed in settings API responses
- Rate limiting on failed API key attempts
- Internal read APIs accept session or Public API key when dashboard sign-in is enabled
- SECURITY.md web exposure threat model
Changed
- Services admin: category enable switch and click-to-open category settings
Docker: ghcr.io/maxdeavy/dashboard:1.0.5