diff --git a/CHANGELOG.md b/CHANGELOG.md
index 19e4516..01530fb 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,19 @@
 # Changelog
 
+## 0.1.1 — 2026-07-07
+
+### Fixed
+- Deploy workflow: start Zoraxy → upload certs via API → stop → write proxy configs → restart
+- Lego runs per-domain instead of SAN cert
+- Removed CSRF token issues by separating config phases
+- `.env` quoting for special chars, email validation in install.sh
+- Configurable subdomains (hub/noc/www/auth)
+
+### Changed
+- LE certs backed up to `/opt/backup/certificates/`, persistent across `--destroy`
+- Helper tool `nextwks-tool` for LE (lego) + BoltDB operations
+- Binary simplified: no login form, trusts `X-Forwarded-User` from Zoraxy
+
 ## 0.1.0 — 2026-07-06
 
 ### Added
diff --git a/VERSION b/VERSION
index 6e8bf73..17e51c3 100644
--- a/VERSION
+++ b/VERSION
@@ -1 +1 @@
-0.1.0
+0.1.1