- interfaces.exclude in steward.yaml (names or shell patterns) leaves
interfaces out of GET /interfaces, the web UI's picker and
'steward interface list'. Subnets on them are still served.
- With the ping check on, active leases are pinged every minute; a
client that answers gets a last-seen time (leases.last_seen,
migration 4). Not answering never takes a client offline.
- The activity log filters by subnet (--subnet, the Activity page,
GET /events?subnet=).
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
- stewardd init asks for the first administrator's name on a terminal.
- Tokens can be rotated (steward token rotate, POST /tokens/{id}/rotate,
Rotate in the web UI), with a grace period for the old secret, as in
Jarl. Schema migration 2 adds the token columns.
- Read-only users see the settings and a subnet's settings locked,
instead of editable fields without a Save button.
- The New token dialog only offers roles within what the user may do.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Subnets served per interface, pools, reservations, options at three
levels, leases in SQLite saved before the ACK, ping and decline conflict
checks, validated changes with history and undo, users and tokens, an
audit log, a Kea importer, a sandboxed systemd unit and Debian packages.
Tested with real udhcpc and dhcpcd clients in Docker (scripts/e2e.sh).
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
abrown38andClaude Opus 5.5