Skip to content

TicketsCAD v4.0.4 — HTTPS setup guide + acknowledge-weekly, Raspberry-Pi Docker note

Choose a tag to compare

@ejosterberg ejosterberg released this 24 Jul 20:15

Point release over v4.0.3. No schema change — upgrade in place.

Added

  • HTTPS setup guide (docs/HTTPS-SETUP.md) — step-by-step recipes for putting HTTPS in front of TicketsCAD in four situations: a public domain (Caddy + automatic Let's Encrypt), no open ports (Cloudflare Tunnel), a LAN with a domain (Caddy + DNS validation), and a LAN with no domain (mkcert). Once HTTPS is on, the "not encrypted" reminder disappears on its own.
  • Acknowledge the HTTPS reminder — for installs that deliberately run on plain HTTP (e.g. a trusted private LAN), an administrator can now acknowledge the reminder. Acknowledging quiets it for 7 days, after which it returns on the next admin sign-in and must be re-acknowledged. Every acknowledgment is audit-logged — so the reminder can be quieted without an administrator ever permanently forgetting the system is unencrypted. Non-admins and the login page keep the gentle dismissible note.
  • Diagnostics now shows a "Connection encrypted (HTTPS): yes/no" row.

Fixed

  • Docker on small hosts (Raspberry Pi, low-RAM VMs): added troubleshooting for container ticketscad_db is unhealthy — the database container exiting before it becomes healthy, usually from out-of-memory (the image build and the database competing for RAM), a 32-bit OS (MariaDB 11 is 64-bit only), or a half-initialized data volume. See docs/DOCKER.md.
  • The "skip to content" accessibility link no longer lands on a warning banner — it now targets the page's real content.

Full test suite: 3488 passing; schema + API-contract audits clean.

See CHANGELOG.md for full history.