Release v2.28.40 · gnacho/netpulse

What's Changed

HTTPS with a private certificate authority (#937) - opt-in, defaults unchanged: HTTPS listener with on-demand certificate renewal from Settings, private CA, server key proof at agent pairing (CA pinning, multiple keys), separate HTTP/HTTPS cookies, HSTS on secure responses only, SSE write timeout, downloads through the service worker. Adapted from the borky community fork (17 commits, attributed).
All / Online / Offline status filter on Clients, persisted (#923) - the online-only switch becomes a three-way selector, saved with the page preferences.
English as the panel's default language (#938) - new browsers default to English; the switcher is unchanged. From the borky fork.
Show which AP or switch each client hangs off of (#938).
Proxmox series from the borky fork (#936) - connection test that reports what the token can see, containers named as Proxmox names them, host matched by the address the cluster knows, VM vs container badges ("VM" on the map), re-classification once a guest gets a name.
Routers/topology/devices series from the borky fork (#945) - unconfirmed ARP neighbours, client re-attribution when a router is deleted, client counts consistent with the overview, links name the box they come from with measured speeds, unknown-device alert says where it is and offers identification, agent matching by more than its slug, phantom DSA ports gone, uplink marked on the real port.

Reconnecting pill flashing on TLS setups (#925) - only shows after 5 s of sustained SSE outage now.
Port row overflowing on big switches (#929) - the chassis wraps beyond 16 ports.
FDB/LLDP clients missing depending on the port (#928, #943) - matching was done by port id instead of interface name; any boca whose id is not its interface showed nothing even with the neighbour learned. Fix from the borky fork, attributed.
SNMP FDB gave no diagnostics (#928) - the walk now reports its source (dot1d/dot1q), returns a real error when both fail, and the journal logs the entry count on change.
"Leave anonymous" toasted "Device identified" (#938) - the toast reflects the actual choice.
"Find this device" got its own label key (#938).

Agent 3.0.4: the FDB/LLDP matching and slug series touches the agent; no functional change for routers without those cases.
Adapted from community forks with attribution: borky (Proxmox, UI/i18n, HTTPS/CA, routers/topology). Open invitations: UniFi (#944), RouterOS (#939).

Thanks to @crowedavid for the reports and to the fork authors.

Full changelog: CHANGELOG.md

HTTPS con autoridad certificadora privada (#937) - opt-in, defaults intactos: listener HTTPS con renovación de certificado desde Ajustes, CA privada, prueba de clave al emparejar el agente (pinning, varias claves), cookies separadas, HSTS solo en seguro, timeout SSE y descargas vía service worker. Del fork borky, atribuido.
Filtro All / Online / Offline en Clients, persistente (#923).
Panel en inglés por defecto (#938) - el selector sigue igual.
A qué AP o switch cuelga cada cliente (#938).
Serie Proxmox del fork borky (#936) - test de conexión, CTs con su nombre real, host por dirección del cluster, badge "VM" en el mapa.
Serie routers/topología del fork borky (#945) - ARP no confirmados, enlaces con nombre y velocidad medida, alerta de desconocido localizable e identificable, match de agentes por 3 claves, bocas fantasma DSA fuera, uplink en la boca real.

Pill "Reconnecting" con TLS (#925) - solo tras 5 s de caída real.
Chasis de puertos desbordado (#929) - wrap con más de 16 bocas.
Clientes FDB/LLDP según la boca (#928, #943) - se emparejaba por id de boca, no por interfaz. Fix del fork borky.
SNMP FDB sin diagnóstico (#928) - fuente (dot1d/dot1q), error real y conteo en el journal.
Toast "Dejar anónimo" (#938) y clave "Find this device" (#938).

Agente 3.0.4 (la serie FDB/slug toca agente).
Adaptado de forks con atribución: borky (Proxmox, UI/i18n, HTTPS/CA, routers/topología). Invitaciones abiertas: UniFi (#944), RouterOS (#939).

Gracias a @crowedavid por los informes y a los autores de los forks.

Changelog completo: CHANGELOG.md