26 Commits

Include renames

Author	SHA1	Message	Date
mokhtar	0f01c2fbd7	storage: version querylog.db and migrate it in place, never reset a healthy file ... querylog.db carries a schema version; migrations run at startup as one transaction after a vacuumed 0600 backup, and every failure refuses startup (exit 2, no systemd restart loop) instead of starting empty. corruption is the only automatic recreate left. the cut gate now requires a fixture-proven migration or an explicit versioned break with restore instructions, and locks shipped migration files and fixtures byte-for-byte.	2026-08-28 17:56:19 +02:00
mokhtar	6a0630c288	overview: one endpoint, live projections and a response cache (m36)	2026-08-27 17:48:20 +02:00
mokhtar	ce143d1d87	db-mode config changes apply live in-process ... settings and upstream writes now follow a prepare, commit, publish, retire contract: candidates are built and validated before the database transaction, published as infallible pointer swaps, and old generations retire after their readers drain. per-query policy values snapshot once per query; upstream pool, cache, rate limiter, sessions, api limiter, log sink, blocklist scheduler and the query-log queue each gained one named live operation. restart_required shrinks from every scalar key to the bind keys and web.enabled; the admin ui drops its restart notices for everything else. file mode is unchanged.	2026-08-24 00:04:28 +02:00
mokhtar	7e0df5fd94	milestone 32: task-shaped configuration, file mode as a rendering, config status api	2026-08-22 22:42:50 +02:00
mokhtar	025edbb093	milestone 31: concurrent upstream exchanges, dot session reuse, queue metrics	2026-08-22 19:54:02 +02:00
mokhtar	648d9b4496	milestone 30: overview as a dashboard, explicit health contract, period aggregations	2026-08-22 16:45:15 +02:00
mokhtar	0fd6bbd312	milestone 28: query provenance — every logged query is exactly explainable ... query rows gain qclass, rcode, group, policy action and reason, the matched rule or list entry with its source, cname and safe-search targets, route kind, forward zone, and the resolver that actually answered — the pool and local markers die. servfails are logged and name the resolver that lost; post-parse protocol refusals become rows. a detail page at /queries/:id renders the ordered explanation, and coverage watermarks distinguish an empty history from a missing one. the schema fingerprint changes: existing query history is recreated with the old file kept aside and the reset filed as a resolved diagnostic. fixes an oversized udp reply being rebuilt as noerror, which handed clients a truncated nxdomain as success.	2026-08-22 09:16:40 +02:00
mokhtar	037f209179	milestone 27: diagnostics — operational failures land in one curated log, resolved history purgeable	2026-08-20 20:05:59 +02:00
mokhtar	e0a7cd8a6b	milestone 26: upstream health answers for the selected period	2026-08-17 18:21:56 +02:00
mokhtar	3c794b645b	milestone 25: client names learned over reverse dns	2026-08-15 11:18:44 +02:00
mokhtar	2ab7c1f1de	milestone 21: abp list exceptions and a regex rule kind	2026-08-13 19:14:47 +02:00
mokhtar	d76afc147a	milestone 20: declarative configuration for iac	2026-08-11 23:31:40 +02:00
mokhtar	cdacc560b7	milestone 14: build, package, sign and publish releases	2026-08-08 12:38:29 +02:00
mokhtar	6f67940995	milestone 18: collapse duplicated infrastructure into shared listener core, crud list helper, resource shells, transport race, name and line helpers, ui modules	2026-08-07 18:20:30 +02:00
mokhtar	9f8a5cd753	milestone 15: make a green run mean a real pass	2026-08-07 01:28:13 +02:00
mokhtar	8c3328562e	milestone 13 discrepancies: redact credentials from urls in logs, metrics and cli output	2026-08-07 00:45:17 +02:00
mokhtar	bdb6ffab7a	milestone 11: systemd and docker packaging, operator and architecture docs, config and api reference, docs drift guards	2026-08-02 15:24:10 +02:00
mokhtar	a589df7515	milestone 10: doh and dot listeners, cert store with hot reload and cert reload api	2026-08-02 14:39:18 +02:00
mokhtar	5253c47303	milestone 8: web server, rest api, sse, auth, metrics and static assets	2026-08-02 00:54:13 +02:00
mokhtar	a8092bb1b9	milestone 7: serving pipeline, client tracking, pause and lifecycle	2026-08-01 21:43:52 +02:00
mokhtar	8c50b6617f	milestone 6: dns cache, rate limiting, query logging, disk monitoring and retention	2026-08-01 17:48:12 +02:00
mokhtar	59d94df722	milestone 5: blocklist filtering, local records and conditional forwarding	2026-08-01 16:43:55 +02:00
mokhtar	70bff22d75	storage and config: sqlite wrapper, migrations, querylog policy, repositories, zon config with import/export/check cli	2026-08-01 14:21:44 +02:00
mokhtar	17d0401f8a	resolver transport: udp/tcp servers, doh/dot clients, pool failover with health	2026-08-01 12:36:50 +02:00
mokhtar	7429b96cde	dns core: wire-format parse/encode, iterators, response builder	2026-08-01 01:06:11 +02:00
mokhtar	1fa82668ec	build baseline: pinned sqlite + mbedtls, static musl cross targets, cli stub	2026-07-31 23:59:39 +02:00