v0.25.7

[antybubbs]

New Kaya Release - IP/WAN Monitor, Backup Manager and High Availability changes

This release delivers a major redesign of the IP/WAN Monitor, including state-aware monitoring, detailed performance history, live graphs, per-host thresholds, and a secured operations Wallboard.

It also improves module administration, Proxmox backup monitoring, High Availability checks, navigation consistency, documentation, and test coverage.

Highlights

IP/WAN Monitor redesign

• Added explicit Healthy, Warning, Critical, Offline, Recovering, Maintenance, Paused, and Unknown states.
• Separated responding Critical hosts from genuinely Offline hosts.
• Added configurable confirmation counts for degradation, failure, and recovery.
• Added state explanations and state-transition timestamps.
• Added per-host thresholds with support for inheriting Site Administration defaults.
• Added maintenance handling that continues recording observations while suppressing new incidents.
• Improved incident evidence, recovery tracking, and retained event history.
• Preserved sub-millisecond latency values instead of displaying them as zero.
• Added unmistakable full-card Offline styling in dark and light themes.

Live monitoring dashboard

• Replaced static card graphs with rolling five-minute Apache ECharts graphs.
• Graphs now use stored backend observations instead of launching browser-side probes.
• Added live dashboard check-rate controls:
  • Live
  • Every 5 seconds
  • Every 10 seconds
  • Every 60 seconds
• Dashboard rates temporarily override saved monitor intervals while an authorised dashboard is active.
• The fastest active dashboard rate wins when multiple dashboards are open.
• Saved per-monitor intervals resume automatically after dashboard leases expire.
• Improved graph resizing, browser zoom handling, clipping, theme changes, and reduced-motion support.
• Added clearer summary statistics for Healthy, Warning, Critical, Offline, Paused, availability, latency, incidents, and checks per minute.

Performance history

• Added selected-period performance views for:
  • 1 hour
  • 6 hours
  • 24 hours
  • 7 days
  • 30 days
  • 90 days
  • 1 year
  • Custom date and time ranges
• Added latency minimum, average, maximum, jitter, packet loss, availability, and health-state history.
• Added interactive crosshairs, inspection tooltips, zooming, panning, and reset controls.
• Added threshold, incident, recovery, maintenance, and pause overlays.
• Added state-aware period shading without changing historical evaluation.
• Added server-side historical-data filtering, sorting, and pagination.
• Added bounded CSV exports with spreadsheet-formula neutralisation and redacted audit events.
• Missing historical measurements are shown as unavailable rather than being converted to zero.

IP/WAN Monitor Wallboard

• Added a standalone network-operations Wallboard.
• Added Auto and fixed 2, 3, 4, 5, 6, and 8-column layouts.
• Added Comfortable, Compact, and Dense display modes.
• Added saved per-user card ordering and presentation preferences.
• Added optional graphs, statistics, actions, addresses, result times, averages, availability, and header controls.
• Added full-screen support and responsive card layouts.
• Layout controls and move handles are hidden unless Edit layout is enabled.
• Wallboard controls apply immediately without reloading the page.

Secured shared Wallboard access

• Added optional passcode-protected shared Wallboard links.
• Shared access is disabled by default.
• Wallboard URL identifiers are random and encrypted at rest.
• Passcodes are stored using Argon2 hashes.
• Sessions use opaque hashed tokens and path-scoped, HttpOnly, SameSite cookies.
• Added configurable session and remembered-display lifetimes.
• Added monitor allowlists and configurable action permissions.
• Added challenge rate limiting and temporary lockouts.
• Regenerating or revoking a URL invalidates existing shared sessions.
• Passcode changes and explicit invalidation also revoke active sessions.
• Sensitive tokens, passcodes, and URL identifiers are excluded from audit metadata.
• Shared operations continue to enforce CSRF and object-level monitor authorisation.

Site Administration and navigation

• Relocated IP/WAN Monitor defaults and Wallboard configuration to:
  Site Administration → Module Settings → IP/WAN Monitor
• Added module-aware access controls to Site Administration settings.
• Users can only see and access settings for modules granted to them.
• Direct module-settings links now enforce administrator and module-level permissions.
• Added consistent module navigation and settings links across Kaya.
• Expanded settings pages to use the available page width more effectively.

Retention changes

Default IP/WAN Monitor retention is now:

• Raw checks: 30 days
• Five-minute summaries: 90 days
• Hourly summaries: 365 days
• Daily summaries: unlimited
• Incidents and events: unlimited

Proxmox backup monitoring

• Improved matching between configured Proxmox backup jobs and completed tasks.
• Added stronger matching using node, storage, mode, workload IDs, and execution signatures.
• Added grouping for multi-workload backup executions.
• Improved diagnostic logging for rejected and accepted task matches.
• Added richer backup history to compute-monitor results.

High Availability

• Fixed the five-minute HA configuration monitor.
• Added regression coverage for the corrected monitoring interval and behaviour.

Documentation and contributor experience

• Added a comprehensive contributor guide.
• Expanded IP/WAN Monitor, API, database, networking, Site Administration, and security documentation.
• Updated module-navigation and inventory documentation.
• Improved installation and project information in the README.

Upgrade notes

• Back up the Kaya database before upgrading.
• Database schema updates are applied automatically during startup unless migrations have been explicitly disabled.
• Existing IP/WAN monitors are migrated to the new state-aware threshold model.
• Monitor state counters are reset during threshold migration. Monitors will display an awaiting-check state until their next result.
• Existing retained history may not contain newly introduced minimum-latency or jitter fields. Kaya displays these values as unavailable instead of fabricating data.
• Shared Wallboard access remains disabled until an administrator generates a URL, configures a passcode, and enables sharing.

Breaking changes

No intentional API or deployment-breaking changes are included.

Administrators should review the new inherited IP/WAN Monitor thresholds after upgrading because monitoring defaults and state-confirmation behaviour have changed.

---

This discussion was created from the release v0.25.7.