The Reserve dialog fills in the lease's address but lets it be changed;
POST /leases/{ip}/reserve takes an optional ip, steward lease reserve
takes --ip. The address must be in the lease's subnet.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
For Guard's steward preset and fail2ban: msg="login failed" ip=... user=...
and msg="token refused" ip=..., beside the audit records.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
0.2.0's first release candidate: allow and deny lists per subnet, and
every option of a DHCP message in words in the activity log. make test
and make e2e (144 checks with udhcpc and dhcpcd) pass.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
- A subnet is a deny-list subnet (the default: everyone not denied) or
an allow-list subnet (only clients allowed or with a reservation);
the deny list counts in both. Entries are MAC addresses, prefixes
(aa:bb:cc:*) or client IDs. A refused client gets no answer (DENIED
in the activity log, with an Allow button) or a NAK on renewal.
steward access, the subnet's Access tab. Schema migration 7.
- The activity log keeps each message's header fields and options,
decoded into words (dhcp4.Describe): the parameter request list by
name, client IDs, lease times. ▸ on an Activity row, steward
activity show N / --details, GET /events/{id}.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Steward's first release: a DHCPv4 server with subnets per interface,
reservations (by MAC address, client ID or either, with their own lease
time), a web UI, REST API and CLI, Kea import, the web UI's certificate
through Jarl, clients' last-seen times, the activity log by subnet,
hidden interfaces and the address order per subnet and pool. make test
and make e2e (124 checks with udhcpc and dhcpcd) pass.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
- A reservation can have its own lease time (--lease-time, the
reservation dialog), over the subnet's. Schema migration 6.
- A reservation with a MAC address and a client ID matches either one
(a dual-boot machine sends two client IDs from one MAC); before, it
was found by MAC and then refused. A lease of the reserved address by
the client's other identity counts as its own.
- The Leases page shows a client's client ID; reserving a lease uses
both, or one with --by / the dialog's choice.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Steward 0.1.0's first release candidate: a DHCPv4 server with subnets per
interface, reservations, a web UI, REST API and CLI, Kea import, the web
UI's certificate through Jarl, clients' last-seen times, the activity log
by subnet, hidden interfaces, and the address order per subnet and pool.
make test and make e2e (121 checks with udhcpc and dhcpcd) pass.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
- Which never-used pool address a new client gets: sequential (the
lowest, as before), reverse or random, in the settings, a subnet or
a single pool (FIRST-LAST:ORDER). When no never-used address is left,
the one free the longest, whatever the order; returning clients keep
theirs.
- A subnet's pools are used in the order listed, or one at random
weighted by its never-used addresses. Pools now keep the order they
are given in (no more sorting by address).
- CLI --address-order and --pool-order; --add-pool of an existing range
changes its order in place. Web UI: per-pool order and a move-up
button, pool and address order on the subnet and settings pages.
- Kea's allocator: random is imported. Schema migration 5.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Online and last-seen times stay current. A newer draw (typing, a change)
wins over a slower older one; no refresh while the tab is hidden.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
- interfaces.exclude in steward.yaml (names or shell patterns) leaves
interfaces out of GET /interfaces, the web UI's picker and
'steward interface list'. Subnets on them are still served.
- With the ping check on, active leases are pinged every minute; a
client that answers gets a last-seen time (leases.last_seen,
migration 4). Not answering never takes a client offline.
- The activity log filters by subnet (--subnet, the Activity page,
GET /events?subnet=).
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
- A disabled reservation is kept but ignored: the client gets a pool
address like any other (steward reservation disable|enable, buttons and
a checkbox in the web UI). Schema migration 3.
- Subnets get Disable/Enable buttons on their page and in the list.
- A rule left without its selector in style.css broke the page heading's
layout, so the New ... buttons sat cramped under the description.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
tls.acme names the certificate and jarl: the Jarl server and a token that
may only write the challenge record. Steward gets the certificate with
DNS-01 (lego), writing the record through Jarl's API into every view that
has the zone, renews it with a third of its lifetime left and swaps it
in without a restart. A check runs before every order: Jarl, the zone,
the token's permission, a test record, the zone's name servers, public
resolvers, clean-up; each step says what to fix. Staging by default.
With a certificate, each listener serves HTTPS and plain HTTP on one port
(redirecting plain HTTP, except from the server itself).
steward cert / cert check / cert renew, Server -> Certificate in the web
UI, GET /certificate, POST /certificate/check|renew. docs/certificates.md
and docs/jarl.md (the Jarl user and the token's grant).
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
- Activity: a client's MAC address opens its leases; "Only this" filters
the list to that client.
- Reservations: Online is a green online / grey offline badge.
- A subnet's leases: "Include ended leases" is a checkbox.
- Dashboard: "All activity" is a button beside the heading.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
- stewardd init asks for the first administrator's name on a terminal.
- Tokens can be rotated (steward token rotate, POST /tokens/{id}/rotate,
Rotate in the web UI), with a grace period for the old secret, as in
Jarl. Schema migration 2 adds the token columns.
- Read-only users see the settings and a subnet's settings locked,
instead of editable fields without a Save button.
- The New token dialog only offers roles within what the user may do.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
The rule's circle reached below the wordmark's box, cutting it off in the
README banner and on the login page.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
scripts/banner.py builds artwork/banner.svg from the web UI's logo and
wordmark, as Jarl's does; scripts/logo.py runs it.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Subnets served per interface, pools, reservations, options at three
levels, leases in SQLite saved before the ACK, ping and decline conflict
checks, validated changes with history and undo, users and tokens, an
audit log, a Kea importer, a sandboxed systemd unit and Debian packages.
Tested with real udhcpc and dhcpcd clients in Docker (scripts/e2e.sh).
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
