docs: add Roadmap page with MS Intune SCEP (#130)
614d7dd
docs: v2.173 (stable-id SSO, backups page) + v2.174 (exactly-once webhooks, security) release notes
ddd739c
docs: v2.172 — SSO account linking (#136), configurable key-recovery dual control (#137)
bd98e32
docs: add Key Recovery (escrow) guide + ToC link
8782732
docs: add Code Signing guide (Authenticode/JAR/macOS) + ToC link
4b9ca4b
docs: bump version badge + download URLs to v2.170, add 2.170 features to Home
32596b5
docs: 2.170 — linting, ACME ARI, Prometheus metrics, webhook delivery history, scheduler, scheduled backups
e805cca
Document RFC 8738 IP address certificates in ACME Support
32f4ca2
docs: remove emojis from release notes and templates documentation
6a2087e
docs: add v2.159 release notes and template pinning documentation
4c86c68
docs: update wiki - add refactor overview, migration 036, migration 037 details
ec41957
Release v2.152 wiki update
0d9e8f9
docs: v2.144 release notes + Home bump
Add Release-Notes-v2.144 page (hardening + refactor highlights, upgrade
notes, no-breaking-change confirmation) and bump version badge, banner,
install snippets, What's New section and Releases timeline.
db59f41
docs: add Developer-Patterns page
Centralise the canonical backend helpers (utils.key_codec,
utils.db_transaction, security.encryption, utils.trusted_proxy,
utils.ssrf_protection, utils.response) with rationale tied to past
incidents (#103/#104/#105 + latent KeyEncryption misuse + bare commit
sites). Each helper section explains what it prevents, when to use it,
when NOT to use it, and links to its regression test.
5b10fe2
docs: add v2.143 release notes and refresh Home
928720f
docs: refresh wiki for v2.142 (versions, hardening pages, release notes v2.141-v2.142)
f3245d6
docs: refresh wiki for v2.140 (versions, Home, ACME EAB/DNS/private-IPs, consolidated release notes)
- Bump version refs 2.127 → 2.140 across install/badge/Quick Start/API docs
- Home.md: rewrite What's New with v2.128–v2.140 entries (EAB, custom DNS resolvers, ACME on private IPs, Kubernetes/cert-manager, HSM-backed CAs, SMTP OAuth2, SSO sync_role_on_login, etc.); refresh Quick Links; restore SSH CA section's original (v2.127) introduction tag
- New: Release-Notes-v2.128-to-v2.140.md — consolidated changelog for the 2.128 → 2.140 stable releases
- ACME-Support.md: add server-side EAB credentials manager (v2.139), custom DNS resolvers for DNS-01, acme.allow_private_ips toggle
801b503
Add Kubernetes & cert-manager integration page
7ebeeff
Add Notifications page (Email & Webhooks)
ae71a4a
docs(sso): add SSO-Authentication page, document auth_source + role preservation (#81)
d0e31cc
CA-Management + HSM-Support: document HSM-backed CAs (issue #77.3)
2790d6d
HSM-Support: add sys/mounts read capability to OpenBao policy
Issue #77 (HumongousFungus): the connection test calls /sys/mounts to
verify the transit engine is enabled, so the UCM token policy must allow
'read' on sys/mounts or 'Test' fails with 403.
f719f0c
docs(v2.127): native PostgreSQL backend, version bump
- Bump all version refs 2.112 -> 2.127
- Update Home.md What's New section with v2.127, v2.126, v2.125 highlights
- New Database-Backend.md page covering SQLite/PostgreSQL choice,
Settings UI, migration, safety checks, troubleshooting
- Add Database Backend to Administration nav
de07320
docs: add HSM Support page, ACME proxy mode section
e6670e3
docs: fix dead internal links
- Authentication → Security
- Security-Settings → Security
- Policies → Approval-Workflows
- SSO-Configuration → Configuration
- System-Configuration → Configuration / CRL-CDP
- Screenshots Gallery → wiki home
- Fix trailing backticks in download URLs
7f3de32
docs: point screenshot URLs to dev branch for latest images
e6977ad
docs: update all version references to 2.112
- Update install commands (DEB, RPM, Docker) to 2.112
- Update Version headers across all pages
- Update API docs version strings
- Update version badge and Latest Stable table
- Historical (vX.Y) feature refs left as-is
287226e
docs: retake all screenshots with ucm.tools mock data
- All images updated with clean ucm.tools branding
- New: ssh-cas, ssh-certificates, tsa, est pages
- Zero pew.pet references
c6f3ded
docs: add SSH Certificate Authority page, update for v2.112
1e15925