dash 3.2.1 → 4.0.0

data/lib/dash/configuration/proxy/run.rb

@@ -1,5 +1,5 @@
 class Dash::Configuration::Proxy::Run
-  MINIMUM_VERSION = "v1.0.0.7"
+  MINIMUM_VERSION = "v1.1.0.0"
   DEFAULT_HTTP_PORT = 80
   DEFAULT_HTTPS_PORT = 443
   DEFAULT_LOG_MAX_SIZE = "10m"
@@ -103,7 +103,7 @@ class Dash::Configuration::Proxy::Run
   end
 
   def container_name
-    "kamal-proxy"
+    "dash-proxy"
   end
 
   # Zero-downtime reboots: a minimal long-lived holder container owns the
@@ -114,14 +114,14 @@ class Dash::Configuration::Proxy::Run
   end
 
   def holder_container_name
-    "kamal-proxy-net"
+    "dash-proxy-net"
   end
 
   def network_args
     if port_holder?
       [ "--network", "container:#{holder_container_name}" ]
     else
-      [ "--network", "kamal" ]
+      [ "--network", "dash" ]
     end
   end
 
@@ -136,7 +136,7 @@ class Dash::Configuration::Proxy::Run
   end
 
   def run_command
-    [ "kamal-proxy", "run", *optionize(run_command_options), *acme.run_command_args ].join(" ")
+    [ "dash-proxy", "run", *optionize(run_command_options), *acme.run_command_args ].join(" ")
   end
 
   def metrics_port
@@ -158,7 +158,7 @@ class Dash::Configuration::Proxy::Run
       .compact.merge(cache_options).merge(server_options)
   end
 
-  # Anything kamal-proxy accepts that has no key of its own yet. Values are
+  # Anything dash-proxy accepts that has no key of its own yet. Values are
   # optionized as written - `true` is a bare flag, anything else takes a value -
   # because the point of an escape hatch is that the gem holds no opinion about
   # the flag it is forwarding.
@@ -189,7 +189,7 @@ class Dash::Configuration::Proxy::Run
     ].compact
   end
 
-  # The flag only tells kamal-proxy where to look inside its own container, so
+  # The flag only tells dash-proxy where to look inside its own container, so
   # without this mount the socket is not there and a sleeping service never
   # wakes - which the operator sees as one hung request, not as a misconfiguration.
   def docker_socket_args
@@ -224,7 +224,7 @@ class Dash::Configuration::Proxy::Run
   end
 
   def apps_container_directory
-    "/home/kamal-proxy/.apps-config"
+    "/home/dash-proxy/.apps-config"
   end
 
   def apps_volume
@@ -288,7 +288,7 @@ class Dash::Configuration::Proxy::Run
     end
 
     # A passthrough flag that a named key already emits would be optionized
-    # twice, and kamal-proxy would silently take the last one. Refuse instead.
+    # twice, and dash-proxy would silently take the last one. Refuse instead.
     # Only Proxy::Run knows which flags the named keys produce, so the check
     # cannot live in the validator with the rest.
     def ensure_no_conflicting_flags
@@ -303,7 +303,7 @@ class Dash::Configuration::Proxy::Run
     # than of any one service - the policy that fills the cache is per service,
     # in proxy/cache. The store itself is deliberately absent: a store URL may
     # embed credentials, so it travels as CACHE_STORE in the secrets env file
-    # (kamal-proxy reads it as the --cache-store default) rather than on a
+    # (dash-proxy reads it as the --cache-store default) rather than on a
     # command line that lands in process listings and the audit log.
     def cache_options
       cache = run_config["cache"] || {}

data/lib/dash/configuration/proxy.rb

@@ -2,11 +2,33 @@ class Dash::Configuration::Proxy
   include Dash::Configuration::Validation
 
   DEFAULT_LOG_REQUEST_HEADERS = [ "Cache-Control", "Last-Modified", "User-Agent" ]
-  CONTAINER_NAME = "kamal-proxy"
-  LOADBALANCER_CONTAINER_NAME = "kamal-loadbalancer"
+  CONTAINER_NAME = "dash-proxy"
+  LOADBALANCER_CONTAINER_NAME = "dash-loadbalancer"
   CLIENT_CA_FILENAME = "client-ca.pem"
 
-  # What `compress: true` offers. kamal-proxy has no "on" state without an
+  # The image label the prune filters key on, set by dash-proxy's publish
+  # workflow.
+  IMAGE_TITLE = "dash-proxy"
+  LOADBALANCER_IMAGE_TITLE = "dash-loadbalancer"
+
+  NETWORK = "dash"
+  CONFIG_VOLUME = "dash-proxy-config"
+  LOADBALANCER_CONFIG_VOLUME = "dash-loadbalancer-config"
+
+  # Pre-rename names, kept only so the stage-3c migration can find what a host
+  # already has: the container to replace, the volume to copy, the network to
+  # bridge, and the image label to keep pruning by. Nothing constructs a
+  # resource with these — stage 3d deletes them.
+  LEGACY_CONTAINER_NAME = "kamal-proxy"
+  LEGACY_LOADBALANCER_CONTAINER_NAME = "kamal-loadbalancer"
+  LEGACY_HOLDER_CONTAINER_NAME = "kamal-proxy-net"
+  LEGACY_NETWORK = "kamal"
+  LEGACY_CONFIG_VOLUME = "kamal-proxy-config"
+  LEGACY_LOADBALANCER_CONFIG_VOLUME = "kamal-loadbalancer-config"
+  LEGACY_IMAGE_TITLE = "kamal-proxy"
+  LEGACY_LOADBALANCER_IMAGE_TITLE = "kamal-loadbalancer"
+
+  # What `compress: true` offers. dash-proxy has no "on" state without an
   # explicit list - --compress *is* the list - so the shorthand has to pick.
   # Best ratio first, matching the proxy's own default ordering; the client's
   # Accept-Encoding q-values still outrank this preference.
@@ -14,7 +36,7 @@ class Dash::Configuration::Proxy
 
   SUPPORTED_COMPRESSION_ENCODINGS = %w[ gzip br zstd ].freeze
 
-  # kamal-proxy maps `brotli` onto the `br` token that travels in Content-Encoding.
+  # dash-proxy maps `brotli` onto the `br` token that travels in Content-Encoding.
   COMPRESSION_ENCODING_ALIASES = { "brotli" => "br" }.freeze
 
   # The layering contract. When the fork's load balancer fronts the per-host
@@ -32,7 +54,7 @@ class Dash::Configuration::Proxy
   # Without load balancing the single proxy is every layer at once and the
   # whole surface applies to it.
   DEPLOY_OPTION_DISPOSITIONS = {
-    # --- Edge: TLS terminates where the handshake happens, and kamal-proxy
+    # --- Edge: TLS terminates where the handshake happens, and dash-proxy
     # gates TLSRedirect on TLSEnabled, so the whole family travels together.
     host: :edge,
     tls: :edge,
@@ -59,7 +81,7 @@ class Dash::Configuration::Proxy
     "rate-limit-burst": :edge,
     "rate-limit-exempt": :edge,
 
-    # --- Edge: kamal-proxy deletes the Authorization header once a service
+    # --- Edge: dash-proxy deletes the Authorization header once a service
     # enforces basic auth, so an inner proxy would 401 the credential-less
     # request the load balancer forwards. Credentials belong at the edge only.
     "basic-auth": :edge,
@@ -311,7 +333,7 @@ class Dash::Configuration::Proxy
     proxy_config["path_prefixes"] || proxy_config["path_prefix"]&.split(",") || []
   end
 
-  # Nil when unset: the default lives in kamal-proxy, not here.
+  # Nil when unset: the default lives in dash-proxy, not here.
   def healthcheck_path
     proxy_config.dig("healthcheck", "path")
   end
@@ -370,7 +392,7 @@ class Dash::Configuration::Proxy
     optionize ({ target: "#{target}:#{app_port}" }).merge(deploy_options), with: "="
   end
 
-  # kamal-proxy rollout deploy only accepts the target and the timeouts - the service already
+  # dash-proxy rollout deploy only accepts the target and the timeouts - the service already
   # exists, so it keeps the host, TLS, buffering and logging options of the live deploy.
   def rollout_deploy_options
     {
@@ -426,7 +448,7 @@ class Dash::Configuration::Proxy
       primary_role.present? && primary_role.running_proxy? && Array(primary_role.hosts).size > 1
     end
 
-    # Flags for kamal-proxy's dynamic domain source (runtime TLS hostnames).
+    # Flags for dash-proxy's dynamic domain source (runtime TLS hostnames).
     # TLS terminates wherever these flags land — :edge in the layering contract.
     def ssl_domains_options
       {
@@ -449,7 +471,7 @@ class Dash::Configuration::Proxy
     # The connection pool between the proxy and this app's containers, and how
     # hard the proxy tries to place a request on a healthy one.
     #
-    # Every value is passed through exactly as written. kamal-proxy resolves its
+    # Every value is passed through exactly as written. dash-proxy resolves its
     # own defaults from a zero (target_pool.go), and it has to do that server
     # side because restored state and older RPC clients never see the CLI — so
     # substituting a default here would be both redundant and wrong.
@@ -517,7 +539,7 @@ class Dash::Configuration::Proxy
       proxy_config["headers"] || {}
     end
 
-    # kamal-proxy cuts a rule at the first colon, so a value carrying colons of
+    # dash-proxy cuts a rule at the first colon, so a value carrying colons of
     # its own arrives intact.
     def header_rules(direction, verb)
       (headers_config.dig(direction, verb) || {}).map { |name, value| "#{name}: #{value}" }.presence
@@ -574,7 +596,7 @@ class Dash::Configuration::Proxy
 
     # The cache policy, which is per service - the store it writes into is
     # proxy-wide and lives in proxy/run/cache. Only --cache is derived from a
-    # truthy key; every other default stays in kamal-proxy, so an unset key emits
+    # truthy key; every other default stays in dash-proxy, so an unset key emits
     # nothing rather than restating a default the gem would then have to track.
     def cache_options
       cache = proxy_config["cache"] || {}
@@ -600,7 +622,7 @@ class Dash::Configuration::Proxy
       File.join([ directory, role_name, filename ].compact)
     end
 
-    # kamal-proxy takes the credential as <username>:<password> and cuts at the
+    # dash-proxy takes the credential as <username>:<password> and cuts at the
     # first colon, so a password may contain colons but a username may not (the
     # validator enforces that). The password is read from .dash/secrets when
     # password_secret names it, so it need not live in deploy.yml.
@@ -628,7 +650,7 @@ class Dash::Configuration::Proxy
       Dash::Utils.sensitive("#{basic_auth["username"]}:#{password}")
     end
 
-    # Serves both --path-timeout and --path-request-timeout, which kamal-proxy
+    # Serves both --path-timeout and --path-request-timeout, which dash-proxy
     # reads with one parser. A duration may be a Go string ("5m") or plain
     # seconds; 0 is a value, meaning no limit for that prefix.
     def path_timeout_args(key)

data/lib/dash/configuration/role.rb

@@ -148,7 +148,7 @@ class Dash::Configuration::Role
   def readiness_description
     case readiness_source
     when :proxy
-      [ "kamal-proxy health check", proxy.healthcheck_path ].compact.join(" ")
+      [ "dash-proxy health check", proxy.healthcheck_path ].compact.join(" ")
     when :healthcheck
       healthcheck.port ? "healthcheck #{healthcheck.path}:#{healthcheck.port}" : "healthcheck (custom cmd)"
     when :healthcheck_exec
@@ -168,7 +168,7 @@ class Dash::Configuration::Role
   end
 
   def stop_args
-    # When deploying with the proxy, kamal-proxy will drain request before returning so we don't need to wait.
+    # When deploying with the proxy, dash-proxy will drain request before returning so we don't need to wait.
     timeout = stop_timeout || (running_proxy? ? nil : config.drain_timeout)
 
     [ *argumentize("-t", timeout) ]

data/lib/dash/configuration/validator/proxy.rb

@@ -8,7 +8,7 @@ class Dash::Configuration::Validator::Proxy < Dash::Configuration::Validator
       # provides the hostnames at runtime.
       # On-demand TLS joins loadbalancer and ssl_domains as a source of hostnames
       # that only exist at handshake time - demanding a static host here would
-      # reject the one shape kamal-proxy requires for it.
+      # reject the one shape dash-proxy requires for it.
       if config["host"].blank? && config["hosts"].blank? && config["ssl"] && config["loadbalancer"].blank? &&
          config.dig("ssl_domains", "source").blank? && ssl_config["on_demand_url"].blank?
         error "Must set a host to enable automatic SSL"
@@ -113,7 +113,7 @@ class Dash::Configuration::Validator::Proxy < Dash::Configuration::Validator
       end
     end
 
-    # Same source shape as ssl_domains. The interval minimum is kamal-proxy's
+    # Same source shape as ssl_domains. The interval minimum is dash-proxy's
     # own (MinRedirectsInterval, 10s) - it rejects a smaller one after the SSH
     # round trip, so catch it here at config time.
     def validate_redirects_source!(redirects_source)
@@ -132,7 +132,7 @@ class Dash::Configuration::Validator::Proxy < Dash::Configuration::Validator
       end
     end
 
-    # kamal-proxy only logs a warning for a DNS provider it does not recognise
+    # dash-proxy only logs a warning for a DNS provider it does not recognise
     # and then carries on with no provider at all, so the symptom is a
     # certificate that never issues rather than a failed boot. Catch it here,
     # before any host is contacted.
@@ -185,7 +185,7 @@ class Dash::Configuration::Validator::Proxy < Dash::Configuration::Validator
     end
 
     # The whole TLS surface lives in the one `ssl` hash: certificate material,
-    # on-demand issuance and the mTLS client CA. kamal-proxy rejects the
+    # on-demand issuance and the mTLS client CA. dash-proxy rejects the
     # on-demand combinations outright rather than picking a winner
     # (ServiceOptions.Validate), so there is no precedence to document - only
     # a deploy that would fail after the SSH round-trip. Fail here.
@@ -231,13 +231,13 @@ class Dash::Configuration::Validator::Proxy < Dash::Configuration::Validator
 
     # An RFC 9110 token, which is both a valid header field name and a valid
     # cookie name. For a header, a space or a colon would also break the
-    # '<name>: <value>' encoding kamal-proxy cuts at the first colon.
+    # '<name>: <value>' encoding dash-proxy cuts at the first colon.
     TOKEN = /\A[!#$%&'*+\-.^_`|~0-9A-Za-z]+\z/
 
     POOL_KEYS = %w[ max_conns max_idle_conns idle_conn_timeout dial_timeout try_duration try_interval ].freeze
 
     # A zero is meaningful for most of these, so only negatives are refused.
-    # kamal-proxy clamps them rather than failing when it reads saved state, and
+    # dash-proxy clamps them rather than failing when it reads saved state, and
     # rejects them from a client — this is the client.
     def validate_tuning!
       target = config["target"] || {}
@@ -258,13 +258,13 @@ class Dash::Configuration::Validator::Proxy < Dash::Configuration::Validator
         with_context("request_timeout") { error "cannot be negative" }
       end
 
-      # Sibling consistency: kamal-proxy clamps a negative --target-timeout as
+      # Sibling consistency: dash-proxy clamps a negative --target-timeout as
       # silently as a negative --request-timeout.
       if config["response_timeout"].to_f.negative?
         with_context("response_timeout") { error "cannot be negative" }
       end
 
-      # Both maps reach kamal-proxy's one parsePathTimeouts, which refuses a
+      # Both maps reach dash-proxy's one parsePathTimeouts, which refuses a
       # negative duration.
       %w[ path_response_timeouts path_request_timeouts ].each do |key|
         with_context(key) do
@@ -312,7 +312,7 @@ class Dash::Configuration::Validator::Proxy < Dash::Configuration::Validator
       end
     end
 
-    # kamal-proxy rejects canonical_host + on-demand TLS after the SSH round
+    # dash-proxy rejects canonical_host + on-demand TLS after the SSH round
     # trip (canonical redirection needs a fixed host, on-demand TLS has none),
     # and a canonical host outside the host list redirects every request to a
     # hostname this service does not serve.
@@ -393,7 +393,7 @@ class Dash::Configuration::Validator::Proxy < Dash::Configuration::Validator
       end
 
       # Go carries the request host in Request.Host rather than the header map,
-      # so kamal-proxy refuses the rule instead of silently doing nothing.
+      # so dash-proxy refuses the rule instead of silently doing nothing.
       if direction == "request" && name.to_s.downcase == "host"
         return error "cannot rewrite the Host header"
       end
@@ -408,7 +408,7 @@ class Dash::Configuration::Validator::Proxy < Dash::Configuration::Validator
 
     # The pattern is deliberately not compiled: Go's RE2 and Ruby's Onigmo differ
     # at the edges (Ruby rejects Go's `(?P<name>...)`), and refusing a pattern
-    # kamal-proxy would have accepted is worse than finding out at deploy time.
+    # dash-proxy would have accepted is worse than finding out at deploy time.
     def validate_path_rules!(key, redirect:)
       Array(config[key]).each_with_index do |rule, index|
         with_context(key) do
@@ -419,7 +419,7 @@ class Dash::Configuration::Validator::Proxy < Dash::Configuration::Validator
               next error "needs both from and to"
             end
 
-            # The wire format is '<from>=<to>' and kamal-proxy cuts at the
+            # The wire format is '<from>=<to>' and dash-proxy cuts at the
             # FIRST '=', so an '=' inside the pattern silently builds a rule
             # for a different path.
             if rule["from"].to_s.include?("=")
@@ -443,7 +443,7 @@ class Dash::Configuration::Validator::Proxy < Dash::Configuration::Validator
       end
     end
 
-    # kamal-proxy's --rate-limit is a Float64, so half a request per second is a
+    # dash-proxy's --rate-limit is a Float64, so half a request per second is a
     # legal rate. The docs example can only demonstrate one numeric type, and an
     # Integer there would reject 0.5 — so the shape is checked by hand instead.
     def validate_key_override!(key, value)
@@ -488,7 +488,7 @@ class Dash::Configuration::Validator::Proxy < Dash::Configuration::Validator
     end
 
     # Rate limiting and the IP allow list are only as correct as the address they
-    # key on, so kamal-proxy ties the three settings together with rules that
+    # key on, so dash-proxy ties the three settings together with rules that
     # otherwise surface only once the deploy has reached a host.
     def validate_access_control!
       allow_ips = Array(config["allow_ips"])
@@ -531,7 +531,7 @@ class Dash::Configuration::Validator::Proxy < Dash::Configuration::Validator
           error "trusted_proxies has no effect without allow_ips, deny_ips or rate_limit"
         end
 
-        # Unconditional: even without allow_ips/rate_limit, kamal-proxy rewrites
+        # Unconditional: even without allow_ips/rate_limit, dash-proxy rewrites
         # the client address (and X-Forwarded-For) from this header, so honoring
         # it from untrusted peers is a client-spoofable identity.
         if client_ip["header"].present? && trusted_proxies.empty?
@@ -549,7 +549,7 @@ class Dash::Configuration::Validator::Proxy < Dash::Configuration::Validator
         end
       end
 
-      # kamal-proxy serves the health check path without an address check and
+      # dash-proxy serves the health check path without an address check and
       # without a rate limit so deploys keep working, which makes '/' a hole
       # straight through all three features.
       if (allow_ips.any? || deny_ips.any? || rate_limited) && config.dig("healthcheck", "path") == "/"
@@ -618,7 +618,7 @@ class Dash::Configuration::Validator::Proxy < Dash::Configuration::Validator
 
         Array(compress["content_types"]).each do |content_type|
           # A main-type wildcard would match everything the proxy cannot see
-          # inside, so kamal-proxy allows a wildcard only in the subtype.
+          # inside, so dash-proxy allows a wildcard only in the subtype.
           unless content_type.to_s.match?(%r{\A[^/*\s]+/[^/\s]+\z})
             error "content_types entry '#{content_type}' must be a media type such as text/html or text/*"
           end
@@ -632,7 +632,7 @@ class Dash::Configuration::Validator::Proxy < Dash::Configuration::Validator
     REFUSED_TLS_VERSIONS = %w[ 1.0 1.1 ].freeze
     RUN_TIMEOUTS = %w[ read_header_timeout read_timeout write_timeout idle_timeout shutdown_timeout ].freeze
 
-    # kamal-proxy validates these three in preRun, so a typo does not fail the
+    # dash-proxy validates these three in preRun, so a typo does not fail the
     # deploy - it stops the proxy container from booting at all.
     def validate_run_server_options!(run_config)
       with_context("run") do
@@ -656,7 +656,7 @@ class Dash::Configuration::Validator::Proxy < Dash::Configuration::Validator
       end
     end
 
-    # Accepts the spellings kamal-proxy's normalizeTLSVersion reduces - a `tls`
+    # Accepts the spellings dash-proxy's normalizeTLSVersion reduces - a `tls`
     # or `tlsv` prefix, and `_` for `.` - so a config written for upstream is not
     # rejected here and accepted there.
     def validate_min_tls!(value)
@@ -673,7 +673,7 @@ class Dash::Configuration::Validator::Proxy < Dash::Configuration::Validator
       end
     end
 
-    # kamal-proxy reads the cache policy only when --cache is set and ignores it
+    # dash-proxy reads the cache policy only when --cache is set and ignores it
     # otherwise, so a tuned block with no `enabled` is a cache that silently
     # never caches - this issue's own predicted first support question.
     def validate_cache!(cache)
@@ -682,12 +682,12 @@ class Dash::Configuration::Validator::Proxy < Dash::Configuration::Validator
       with_context("cache") do
         if (orphaned = cache.keys - [ "enabled" ]).any?
           error "#{orphaned.first} has no effect without enabled: true - " \
-            "kamal-proxy ignores the cache policy entirely when --cache is absent"
+            "dash-proxy ignores the cache policy entirely when --cache is absent"
         end
       end
     end
 
-    # An unsupported store is rejected in kamal-proxy's preRun, which means the
+    # An unsupported store is rejected in dash-proxy's preRun, which means the
     # proxy container exits at boot rather than a deploy failing. Catch it before
     # the fleet loses its proxy.
     def validate_cache_store!(cache)
@@ -708,7 +708,7 @@ class Dash::Configuration::Validator::Proxy < Dash::Configuration::Validator
         if basic_auth["username"].blank?
           error "Missing username setting (required when basic_auth is set)"
         elsif basic_auth["username"].to_s.include?(":")
-          # kamal-proxy cuts <username>:<password> at the first colon, so a
+          # dash-proxy cuts <username>:<password> at the first colon, so a
           # colon in the username would silently truncate it.
           error "Invalid username: cannot contain a colon"
         end

data/lib/dash/configuration.rb

@@ -478,7 +478,7 @@ class Dash::Configuration
       return true if offenders.empty?
 
       warn "Host(s) #{offenders.sort.join(", ")}: proxy_protocol is enabled without proxy_protocol_allow_ips, " \
-        "so kamal-proxy honours a PROXY header from any peer that can reach the port. That header sets the client " \
+        "so dash-proxy honours a PROXY header from any peer that can reach the port. That header sets the client " \
         "address `allow_ips`, `rate_limit` and the access log all use. Name the load balancers you actually run."
 
       true
@@ -503,11 +503,11 @@ class Dash::Configuration
       return true if offenders.empty?
 
       raise Dash::ConfigurationError, "Role(s) #{offenders.map(&:name).join(", ")}: " \
-        "proxy/sleep requires proxy/run/docker_socket - kamal-proxy can only stop and start containers " \
+        "proxy/sleep requires proxy/run/docker_socket - dash-proxy can only stop and start containers " \
         "through the container runtime socket, and it is not mounted into the proxy without it"
     end
 
-    # kamal-proxy resolves a zero max_idle_conns to its default of 100
+    # dash-proxy resolves a zero max_idle_conns to its default of 100
     # (target_pool.go resolves defaults from zeros), so the one value an
     # operator writes to mean "keep none" is the one value that cannot mean it.
     # Legal, so warn rather than raise.
@@ -518,14 +518,14 @@ class Dash::Configuration
       return true if offenders.empty?
 
       warn "Role(s) #{offenders.map(&:name).join(", ")}: target/max_idle_conns: 0 means the proxy default of 100, " \
-        "not \"keep none\" - kamal-proxy resolves its defaults from zeros. Leave it unset for the default, " \
+        "not \"keep none\" - dash-proxy resolves its defaults from zeros. Leave it unset for the default, " \
         "or set 1 for the practical minimum."
 
       true
     end
 
     # `intercept_errors` discards the app's error body and renders the proxy's own
-    # page instead. With no pages to render, kamal-proxy falls back to a bare
+    # page instead. With no pages to render, dash-proxy falls back to a bare
     # plaintext status line — so the app's error page is thrown away and replaced
     # by the words "Bad Gateway". Legal, and almost never the intent.
     def ensure_intercepted_errors_have_pages
@@ -535,7 +535,7 @@ class Dash::Configuration
       return true if offenders.empty?
 
       warn "Role(s) #{offenders.map(&:name).join(", ")}: intercept_errors is set but no error_pages_path is " \
-        "configured, so kamal-proxy replaces the app's error page with a bare plaintext status line. " \
+        "configured, so dash-proxy replaces the app's error page with a bare plaintext status line. " \
         "Set `error_pages_path:` to serve your own pages, or remove `intercept_errors` to let the app's through."
 
       true
@@ -543,7 +543,7 @@ class Dash::Configuration
 
     # Rate limiting and IP deny rules are only as correct as the address they key
     # on. `forward_headers: true` says something sits in front of the proxy, and
-    # without `trusted_proxies` kamal-proxy keys on that something's address
+    # without `trusted_proxies` dash-proxy keys on that something's address
     # rather than the client's — so the limiter throttles the whole world as one
     # client (or nobody), and a deny list denies nobody it was written for. Warn
     # rather than raise: the config is legal, just almost certainly not what was
@@ -568,7 +568,7 @@ class Dash::Configuration
 
       offenders.each do |role_name, features|
         warn "Role #{role_name}: #{features.join(" and ")} is set with forward_headers, " \
-          "but no proxy/client_ip/trusted_proxies. kamal-proxy will key on the address of " \
+          "but no proxy/client_ip/trusted_proxies. dash-proxy will key on the address of " \
           "whatever sits in front of it, not on the client's — so the rules apply to every " \
           "visitor as one client, or to none of them. Declare the proxies in front with " \
           "`client_ip: trusted_proxies:`."

data/lib/dash/utils.rb

@@ -45,7 +45,7 @@ module Dash::Utils
     options.flatten.compact
   end
 
-  # kamal-proxy takes durations as Go duration strings; deploy.yml takes plain
+  # dash-proxy takes durations as Go duration strings; deploy.yml takes plain
   # seconds. Zero is a real value (it disables the timeout), so only nil drops out.
   #
   # A value that already carries a unit is passed through untouched. Appending

data/lib/dash/version.rb

@@ -1,3 +1,3 @@
 module Dash
-  VERSION = "3.2.1"
+  VERSION = "4.0.0"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dash
 version: !ruby/object:Gem::Version
-  version: 3.2.1
+  version: 4.0.0
 platform: ruby
 authors:
 - Mikael Henriksson
@@ -203,6 +203,7 @@ files:
 - lib/dash/cli/main/migrate.rb
 - lib/dash/cli/proxy.rb
 - lib/dash/cli/proxy/drift.rb
+- lib/dash/cli/proxy/legacy_rename.rb
 - lib/dash/cli/proxy/loadbalancer_claim.rb
 - lib/dash/cli/proxy/loadbalancer_reboot.rb
 - lib/dash/cli/proxy/reboot.rb