TicketsCAD v4.0.4 — HTTPS setup guide + acknowledge-weekly, Raspberry-Pi Docker note
Point release over v4.0.3. No schema change — upgrade in place.
Added
- HTTPS setup guide (docs/HTTPS-SETUP.md) — step-by-step recipes for putting HTTPS in front of TicketsCAD in four situations: a public domain (Caddy + automatic Let's Encrypt), no open ports (Cloudflare Tunnel), a LAN with a domain (Caddy + DNS validation), and a LAN with no domain (mkcert). Once HTTPS is on, the "not encrypted" reminder disappears on its own.
- Acknowledge the HTTPS reminder — for installs that deliberately run on plain HTTP (e.g. a trusted private LAN), an administrator can now acknowledge the reminder. Acknowledging quiets it for 7 days, after which it returns on the next admin sign-in and must be re-acknowledged. Every acknowledgment is audit-logged — so the reminder can be quieted without an administrator ever permanently forgetting the system is unencrypted. Non-admins and the login page keep the gentle dismissible note.
- Diagnostics now shows a "Connection encrypted (HTTPS): yes/no" row.
Fixed
- Docker on small hosts (Raspberry Pi, low-RAM VMs): added troubleshooting for
container ticketscad_db is unhealthy— the database container exiting before it becomes healthy, usually from out-of-memory (the image build and the database competing for RAM), a 32-bit OS (MariaDB 11 is 64-bit only), or a half-initialized data volume. See docs/DOCKER.md. - The "skip to content" accessibility link no longer lands on a warning banner — it now targets the page's real content.
Full test suite: 3488 passing; schema + API-contract audits clean.
See CHANGELOG.md for full history.