v0.5.9

Features / 新功能

• File Browser hosted as a managed program: runs FileBrowser Quantum (the maintained fork; the original filebrowser was archived) with a listen address and port, base path, shared directories (each can be read-only), password / reverse-proxy header / no sign-in, language and session lifetime; the admin password is passed by environment variable and never written to a file. (#23) / 托管 File Browser：运行仍在维护的 FileBrowser Quantum（原版已归档），可设置监听地址与端口、访问路径、共享目录（可只读）、账号密码 / 反向代理用户名头 / 不登录、界面语言与登录有效期；管理员密码经环境变量传递，不写入文件。（#23）
• IP address and short-lived certificates: ACME certificates get a certificate profile (CA default, Let's Encrypt shortlived or any profile name); public IPv4/IPv6 addresses can be entered next to domains, validated with HTTP-01; TLS connections without SNI get the matching IP certificate; short-lived certificates renew hours before expiry and retry hourly. (#24) / IP 地址证书与短期证书：ACME 证书新增证书配置（CA 默认、Let's Encrypt 短期证书或其他配置名）；域名列表可填公网 IPv4/IPv6，经 HTTP-01 验证签发；无 SNI 的 TLS 连接使用匹配的 IP 证书；短期证书按小时提前续签，失败每小时重试。（#24）
• Online install, update, rollback and uninstall for frp, cloudflared, Tailscale (Linux only) and File Browser: latest or a given version, SHA-256 verified and test-run before replacing, per-program download proxy, the last 3 replaced versions kept in bin/.versions/ for rollback, and Restore defaults in the page header. Programs are now looked up in the set path, then bin/, then PATH. / frp、cloudflared、Tailscale（仅 Linux）、File Browser 支持在线安装、更新、回滚与卸载：最新版或指定版本，校验 SHA-256 并试运行后才替换，每个程序可单独设置下载代理，替换下的最近 3 个版本保存在 bin/.versions/ 可回滚，页头可恢复默认配置。程序查找顺序改为：填写的路径 → bin/ → PATH。
• File service shared users move to their own File shared users page and the new GET/PUT /api/fileusers with fileusers:read / fileusers:write token permissions; the old /api/<service>/shared-users endpoints keep working. / 文件服务共享用户改到独立的「文件共享用户」页面，新增接口 GET/PUT /api/fileusers 与令牌权限 fileusers:read / fileusers:write，旧接口继续可用。

Fixes from review / 发布前审查修复

• On Windows, uninstalling or reinstalling the same version of a running program no longer fails; install, rollback and uninstall are mutually exclusive; staging files left by an interrupted install are cleaned up. / Windows 上程序运行时卸载或重装同一版本不再失败；安装、回滚、卸载互斥；中断安装残留的临时文件会被清理。
• IPv6 addresses with a zone and malformed IP addresses are rejected instead of being saved as domains; the short-lived renewal lead time is capped at 80 hours; requests without a Host are not redirected to an invalid HTTPS address. / 带区域标识的 IPv6 与格式错误的 IP 地址会被拒绝，不再当作域名保存；短期证书续签提前量上限 80 小时；不带 Host 的请求不再被跳转到无效的 HTTPS 地址。
• File services turned off under Feature modules no longer block saving the shared users; a new File Browser instance cannot use the masked password placeholder. / 已关闭的文件服务不再阻止保存共享用户；新建 File Browser 实例不能把脱敏占位符当作密码。

Upgrading / 升级

• The config format is backward compatible and existing certificates are not reissued. A program of the same name in bin/ under the config directory now takes precedence over PATH. / 配置向后兼容，已有证书不会重新签发。配置目录 bin/ 下的同名程序现在优先于 PATH 中的程序。
• Docker: pull the new image and recreate the container. OpenWrt: install the new .apk / .ipk over the old one. Other installs can upgrade online in Settings. / Docker 拉取新镜像后重建容器；OpenWrt 覆盖安装新的 .apk / .ipk；其他部署方式可在「系统设置」中在线升级。

Release notes: https://gately.cn/en/news/v0.5.9 · 更新说明：https://gately.cn/news/v0.5.9