Add network management over SSH for Ubuntu (netplan) and Debian/Proxmox (ifupdown): interfaces, IPs, DHCP, gateway, DNS, bonds with LACP, bridges, VLANs, hostname and config files, applied with automatic rollback; UFW shows a hint when disabled

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

README.md

@@ -34,6 +34,7 @@ sudo pacman -S freerdp gnome-keyring   # use kwallet instead of gnome-keyring on
 - **Keychain**: generate Ed25519/ECDSA/RSA keys, import existing ones and copy the public key
 - **Docker & Podman**: list a host's containers, open a shell inside a container, follow logs, and start, stop, restart or remove containers, all over SSH
 - **Firewall**: view and edit UFW and iptables/ip6tables rules on your servers
+- **Network**: configure interfaces, IP addresses, DHCP, gateway, DNS, bonds (LACP), bridges, VLANs and the hostname on Ubuntu and Debian/Proxmox servers, with automatic rollback
 - **Port forwarding**: local (-L), remote (-R) and dynamic/SOCKS5 (-D)
 - **VPN**: add WireGuard or OpenVPN configurations and assign them to hosts. MrTerm connects the VPN automatically when you open such a host
 - **Snippets**: save frequently used commands and send them to a terminal with one click
@@ -87,8 +88,28 @@ Right-click an SSH host and choose **Firewall**, or click **Firewall** in the to
 - **iptables**: all chains with their rules, the policy of INPUT, FORWARD and OUTPUT, and adding or deleting rules. iptables changes are lost on reboot unless you click **Save permanently** (uses `netfilter-persistent` on Debian/Ubuntu or `/etc/iptables/*.rules` on Arch).
 - **Lockout protection**: if you enable UFW without a rule that allows SSH, MrTerm warns you and offers to allow SSH first. Switching a default policy to blocking asks for confirmation.
 
+UFW rules can only be viewed and added while UFW is enabled.
+
 This needs root privileges. Either log in as root, or save the password of a user with sudo rights on the host.
 
+## Network
+
+Right-click an SSH host and choose **Network**, or click **Network** in the terminal toolbar. MrTerm shows every interface with its state, MAC address, MTU and IP addresses. Bonds also show their mode, LACP rate and the status of each member. The default gateway, DNS servers and hostname appear at the top.
+
+On **Ubuntu (netplan)** and **Debian/Proxmox (ifupdown)** you can also edit the configuration:
+
+- **Per interface**: DHCP or static IPv4 addresses, gateway, DNS servers and search domains, IPv6 (SLAAC, DHCPv6, static or disabled) and MTU
+- **Bonds** with any mode, including **802.3ad (LACP)** with LACP rate, hash policy and MII monitoring
+- **Bridges** (e.g. Proxmox `vmbr`) and **VLANs**, which you can also create and delete
+- **Hostname** and, if not managed by systemd-resolved, `/etc/resolv.conf`
+- **Config files**: edit the netplan files, `/etc/network/interfaces` or `/etc/hosts` directly
+
+**Automatic rollback:** before applying a change, MrTerm backs up the configuration and checks the new one. After applying it, MrTerm opens a new SSH connection to confirm the server is still reachable. If that doesn't work within 90 seconds, the server restores the previous configuration by itself, so a wrong IP address won't lock you out. If your change affects the address MrTerm connects to, enter the new address in the confirmation dialog.
+
+On Ubuntu, MrTerm writes the complete netplan configuration to `/etc/netplan/90-mrterm.yaml` and renames the previous files to `*.yaml.mrterm-off`. On Debian/Proxmox, only the changed interfaces are rewritten, and all other lines (such as `post-up` or `bridge-fd`) are kept.
+
+Root privileges are required, the same as for the firewall.
+
 ## VPN
 
 Under **VPN** in the sidebar you can add WireGuard (`.conf`) and OpenVPN (`.ovpn`) configurations. Paste them or load them from a file, then assign hosts, either in the VPN itself or through the *VPN* field of a host.