Highlights
- Home Assistant Ingress and subpath proxies now work end to end. DOCSight can be mounted below paths such as
/docsight/or a Home Assistant Ingress URL without assets, navigation, redirects, the manifest, or the service worker escaping to the domain root. The proxy contract is documented for self-hosted wrappers. - Reports now describe the period you actually selected. Historical status and diagnostic notes are derived from stored snapshots inside the requested window instead of current live modem data, so reports remain factual even when conditions later change or the modem is offline.
- The Evidence Journey now carries its exact problem window into the report. Complaint preview and PDF generation use the same fixed
from/tobounds, show the server-provided evidence readiness, detect mismatched responses, and offer a direct way back to adjust the selected window. - Safer self-hosted operation and exports. Module static files are confined to their registered roots, PDF generation uses the security-hardened
fpdf22.8.8 release, and Web Push plus browser-path CI dependencies have been refreshed.
Special thanks
- @lennard0711 for reporting the subpath and Home Assistant Ingress problem and validating the corrected implementation on a real Home Assistant OS installation through both direct and externally proxied access.
Added
- Supported
BASE_PATHand trusted forwarded-prefix handling for reverse proxies and platform wrappers. - Exact UTC
from/towindows for report and complaint APIs, while keeping existing rolling-day requests compatible. - Fixed-period and evidence-readiness presentation in the report builder across all supported report languages.
Changed
- Report status and diagnostic notes now come from snapshots stored within the requested period.
- Evidence Journey report generation preserves one canonical problem window through complaint preview and PDF download.
- Reverse-proxy-aware URLs now cover server-rendered pages, browser navigation, modules, manifests, service workers, redirects, and offline shell behavior.
- Updated
fpdf2to 2.8.8,pywebpushto 2.4.0, anddorny/paths-filterto 4.0.3.
Fixed
- Module static routes now reject traversal, symlink escapes, missing files, and paths outside the registered module root.
- Fixed-scope report generation now stops with a visible error if the server returns a different period instead of silently continuing.
Docker image
ghcr.io/itsdnns/docsight:v2026-08-13.1ghcr.io/itsdnns/docsight:latest
Full diff: v2026-08-07.1...v2026-08-13.1