fix: disable SSO auth header injection for main permission

Technitium manages its own authentication and does not integrate with
YunoHost SSO. When auth_header is enabled (the default), SSOwat injects
an 'Authorization: Basic' header containing the YunoHost user's
credentials into every proxied request. Technitium receives this header,
attempts to authenticate the YunoHost user against its own user database,
fails silently, and redirects back to its login page — creating a login
loop that affects users who are logged into YunoHost SSO.

Setting auth_header = false prevents SSOwat from injecting credentials,
allowing Technitium to handle authentication with its own login form.

The app already correctly declares sso = false and ldap = false, making
auth_header = false the consistent and expected setting.

conf/logsymlink.cron

@@ -1 +1 @@
-0,15,30,45 0 * * * ln -sf $(ls -t /var/log/__APP__/dns/*.log | head -n 1) /var/log/__APP__/__APP__.log
+5 0 * * * ln -sf $(ls -t /var/log/__APP__/dns/*.log | head -n 1) /var/log/__APP__/__APP__.log

conf/nginx.conf

@@ -2,14 +2,7 @@
 location __PATH__/ {
 
   proxy_pass        http://127.0.0.1:__PORT__;
-  proxy_redirect    off;
-  proxy_set_header  Host $host;
-  proxy_set_header  X-Real-IP $remote_addr;
-  proxy_set_header  X-Forwarded-Proto $scheme;
-  proxy_set_header  X-Forwarded-For $proxy_add_x_forwarded_for;
-  proxy_set_header  X-Forwarded-Host $server_name;
 
-  proxy_http_version 1.1;
-  proxy_set_header Upgrade $http_upgrade;
-  proxy_set_header Connection "upgrade";
+  include proxy_params_no_auth;
+  proxy_redirect    off;
 }

doc/POST_UPGRADE.d/15.2.0~ynh1.md

@@ -0,0 +1,9 @@
+After upgrading, in `Settings` > `General` you must set `DNS Server Local End Points` to your ynh server's IP address(es) and then scroll to the bottom and `Save Settings` to restart the DNS server.
+
+eg: 
+```
+192.168.0.88:53
+[2981:2cb2:8e86:91f6:4dab:cc4b:2fba:463b]:53
+```
+
+If your server does not have an IPv6 address, you only need to enter the IPv4 address.

doc/PRE_UPGRADE.d/15.2.0~ynh1.md

@@ -1 +0,0 @@
-After upgrading, you must add your ynh server's local IP address(es) to `DNS Server Local End Points`: https://__DOMAIN__/#settingsTabPaneGeneral and then restart __APP__.

manifest.toml

@@ -21,7 +21,7 @@ cpe = "cpe:2.3:a:technitium:dnsserver"
 fund = "https://patreon.com/technitium"
 
 [integration]
-yunohost = ">= 12.1.18"
+yunohost = ">= 12.1.38"
 helpers_version = "2.1"
 architectures = ["amd64", "arm64", "armhf"]
 multi_instance = false
@@ -77,6 +77,7 @@ ram.runtime = "50M"
 
     [resources.permissions]
     main.url = "/"
+    main.auth_header = false
 
     [resources.ports]
     main.default = 5380

scripts/install

@@ -70,7 +70,8 @@ else
 fi
 
 mytoken1=$(curl -s "http://127.0.0.1:5380/api/user/createToken?user=admin&pass=admin&tokenName=mytoken1" | jq -r '.token')
-curl -s "http://localhost:5380/api/settings/set?dnsServerLocalEndPoints=$endpoints&Token=$mytoken1"
+curl -s "http://localhost:5380/api/settings/set?dnsServerLocalEndPoints=$endpoints&token=$mytoken1"
+curl -s "http://localhost:5380/api/settings/set?dnsServerDomain=$domain&token=$mytoken1"
 
 #=================================================
 # RESTART SYSTEMD SERVICE