Site changelog

2026-05-14 (late, after v1.0.0)

Added

• Meridian v1.0.1 released — bug-fix release covering two install.sh upgrade-path issues found during the apt-upgrade-of-prod test on 2026-05-14. install_os_packages now skips when running under dpkg postinst (the .deb's Depends already cover everything); setup_postgresql skips schema.sql when the public schema already has tables. No app or DB changes — safe apt upgrade from 1.0.0. Release page · apt repo Packages ships 1.0.1 as the latest.

2026-05-14

Added

• Features page — full catalogue grouped by portal section (DNS tools, network tools, threat intel, monitors, certs, devices, runbooks, directory, admin, security, safety caps, observability).
• Examples page — dedicated 31-tile screenshot gallery with click-to-zoom (viewport-width fit), drag-to-pan, keyboard navigation, and a caption strip.
• SEO hygiene: favicon (SVG + PNG fallback + apple-touch-icon), Open Graph + Twitter card meta on every page, robots.txt, sitemap.xml.
• This changelog page.
• ™ marker next to the MeridianNIP wordmark in every page header (common-law trademark notice — see license page).

Changed

• Renamed /samples/ → /docs/ throughout the site so the URL bar matches the link label.
• Replaced the static wordmark in every header with the animated brand mark + inline "MeridianNIP" text. The orbital ellipses, central pulse, and twinkling stars are all live CSS animations baked into the SVG.
• Lightbox JS moved out of the inline page script and into /static/site.js so it's cached and reusable.

Fixed

• /features.html no longer 404s — the link in the nav had no corresponding page.
• /404.html now carries the full topnav, so visiting a missing page no longer appears to delete the menu.
• "Docs" link in docs/index.html header now includes the Features entry like every other page.
• Screenshot zoom previously went to native pixel size (often wider than the viewport) with no pan affordance. Zoom now scales the image to viewport width and lets you click-and-drag vertically to pan.
• Changelog link promoted from footer-only to the main top navigation — it was almost invisible before.
• Hero CTA "See the portal →" now points to /examples.html (the screenshot gallery), not /docs/. The button name describes the gallery; the wrong target was a copy-paste leftover from before the Examples page existed.
• Install page now links the v1.0.0 release ISO instead of asking every operator to rebuild it from source. Build-it-yourself stays documented as a secondary path.
• Docs → Installation overview rewritten to match what v1.0.0 actually ships — replaced the aspirational "three-tier signed-tarball + bundled-wheels" section with the real dependency story (apt for OS packages, PyPI hash-pinned for Python deps, no license server, no phone-home). Now also points at the GitHub release for the ISO + tagged source download.
• Comprehensive doc sweep across every portal page — removed leftover references to the deleted license subsystem (license-cli subcommands, license-expiry-notify cron job, license-expired lockout recovery, license SNMP OID), to the aspirational signed-tarball release pipeline (replaced with "build-release.sh stages wheels for airgap, online installs use PyPI"), and to the old /samples/ URL. Distribution roadmap rewritten to mark Tier 0 + 1 as shipped and Tier 2-4 as planned.
• Install page Path 1 + Path 2 rewritten for accuracy: every step is now tagged with the shell it runs in (WSL vs admin PowerShell), the missing cp answers.example.env answers.local.env step is included, naming is consistent (answers.local.env across all three paths), and the false "BIOS El Torito + UEFI" claim is corrected — the v1.0.0 ISO is UEFI-only, which works in every modern hypervisor.
• Install page restructured into two OS-native paths: a Windows path that uses Git for Windows + PowerShell + native OpenSSH scp (no WSL required), and a Linux/macOS path that uses native git + rsync. Plus a third bare-Debian path for direct installs. Each path is linear top-to-bottom in its own toolchain — no more shell-context tags or "do this in WSL, then PowerShell, then back to WSL" hopping. Windows users get a Hyper-V-or-VMware/VirtualBox callout under step 3; Linux/macOS users use any cross-platform hypervisor.
• Apt repo live at meridiannip.com/apt — Debian 12/13 hosts can now sudo apt install meridian-nip after adding the signing key + repo source. Adds a 4th install path at the top of the install page (above the Windows / Linux/macOS / bare-Debian sections), since it's the simplest of the four. sudo apt upgrade meridian-nip will deliver future releases. Signing-key fingerprint: 5072 F226 10C9 2331 A8E2 428C EE4D C4BD 960D 8B36; public key at meridiannip.com/meridiannip.gpg.
• VM appliance images attached to the v1.0.0 release — three formats covering every modern hypervisor: .vhdx.zst (Hyper-V, 1.1 GB), .ova (VMware Workstation / Fusion / ESXi / VirtualBox, 1.4 GB), .qcow2 (KVM / libvirt / Proxmox, 1.4 GB). Plus SHA256SUMS-appliance. The install page gains a new "−1 · VM appliance" section at the very top of the path list — it's the fastest of all five paths (~5 min wall-clock: download → import → boot → sign in). Built from a scrubbed appliance VM with per-image secrets (master + row-HMAC + SSH host keys regenerated, audit/sessions cleared, DHCP networking).

2026-05-13

Added

• Initial site scaffold: home, install, license, docs index, custom 404.
• Real portal screenshots (30+ pages, both user and admin tools).
• Hero section with the live portal sign-in screenshot.
• Screenshot lightbox with prev / next navigation and a caption strip.
• Apache 2.0 license explainer page including the trademark carve-out.

Changed

• Replaced placeholder branding with the real Meridian mark + wordmark.
• Site refresh: full color palette, dark-first theme, accent radial gradients on the hero.

Fixed

• Wrangler was uploading the entire .git/ directory as public static assets — anyone could have read commit history at /.git/HEAD. .assetsignore now excludes it (and the wrangler config + README + lockfiles).

Infra

• meridiannip.com and www.meridiannip.com wired to the Cloudflare Worker via custom_domain routes; cert auto-provisioned by Cloudflare.
• GitHub repo MeridianNIP/meridiannip.com connected to Cloudflare Pages — push to main deploys within ~30 seconds.