# Changelog v0.3.72 - 2026-05-27

### Fixed
- **Docker/LAN web UI access** — The router daemon's origin check now accepts private network IPs (10.x, 172.16-31.x, 192.168.x) and `.local`/`.internal` hostnames, so the web UI works when accessed from another machine on the same network or from a Docker container. Previously only `localhost`/`127.0.0.1` origins were allowed, causing silent 403s for remote browser access.

### Added
- **`FCM_ALLOWED_ORIGINS` env var** — Comma-separated list of extra origins allowed to access the web UI (e.g. `http://mybox:19280,http://10.0.0.5:19280`). Useful for custom Docker/LAN setups that don't fall in standard private ranges.
- **Docker Compose** now passes `FCM_ALLOWED_ORIGINS` through from the host environment.