Build [v1.9.16] (Open Gateway: Verified SSL Permission check)

config/Caddyfile

@@ -1,18 +1,30 @@
 # TFM aInventory - Caddy Patched IP Configuration
-# Version 1.9.13 - Bare Metal Proxy (No on_demand)
+# Version 1.9.16 - The Open Gateway (Valid Permission check)
 {
     admin off
     debug
-    local_certs
+    
+    # Global TLS options for self-signed certificates
+    local_certs
     skip_install_trust
+    
+    # Configure on-demand TLS for private network IPs
+    on_demand_tls {
+        # Pointing to the backend root which returns 200 OK
+        # This allows Caddy to generate internal certs for any IP/domain.
+        ask http://backend:8000/
+    }
+}
 
 # Dynamic SSL Proxy (Matches ANY IP or hostname)
-:443 {
+https:// {
-    tls internal
+    tls internal {
-    reverse_proxy frontend:3000
+        on_demand
+    }
+    
+    reverse_proxy frontend:3000
     
     header {
-    header {
         Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
         X-XSS-Protection "1; mode=block"
         X-Content-Type-Options "nosniff"
@@ -22,8 +34,10 @@
 }
 
 # Specific port listener for backend (8918 -> 444)
-:444 {
+https://:444 {
-    tls internal
+    tls internal {
-    reverse_proxy backend:8000
+        on_demand
+    }
+    reverse_proxy backend:8000
 }
 }

frontend/VERSION.json

@@ -1 +1 @@
-{"version": "1.9.12", "last_build": "2026-04-13-2225", "codename": "SecureSeal", "commit": "ee7e7b7b"}
+{"version": "1.9.15", "last_build": "2026-04-13-2243", "codename": "DynamicShield", "commit": "826b264a"}