Quentin McGaw
843bf08aa1
chore(deps): bump dns to 248acd2833
2025-11-14 16:14:46 +00:00
Quentin McGaw
5b25cc95a9
chore(docker): clear DNS_BLOCK_IP_PREFIXES values since DNS rebinding protection is built-in the filter middleware
2025-11-14 16:14:46 +00:00
dependabot[bot]
0fddbc54a2
Chore(deps): Bump github.com/cloudflare/circl from 1.6.0 to 1.6.1 ( #2977 )
2025-11-13 23:27:51 +01:00
dependabot[bot]
11fcfb7d19
Chore(deps): Bump golang.org/x/net from 0.46.0 to 0.47.0 ( #2976 )
2025-11-13 23:27:10 +01:00
dependabot[bot]
3cd7d7edcb
Chore(deps): Bump golang.org/x/text from 0.30.0 to 0.31.0 ( #2975 )
2025-11-13 23:26:55 +01:00
Quentin McGaw
30609b6fe9
hotfix(configuration/settings): fix requirement for proton username and password
2025-11-13 21:58:46 +00:00
Quentin McGaw
8a0921748b
fix(protonvpn): authenticated servers data updating ( #2878 )
...
- `-proton-username` flag for cli update
- `-proton-password` flag for cli update
- `UPDATER_PROTONVPN_USERNAME` option for periodic updates
- `UPDATER_PROTONVPN_PASSWORD` option for periodic updates
2025-11-13 20:05:26 +01:00
Quentin McGaw
3fac02a82a
feat(server/auth): HTTP_CONTROL_SERVER_AUTH_DEFAULT_ROLE option (JSON encoded)
...
- For example: `{"auth":"basic","username":"me","password":"pass"}`
- For example`{"auth":"apiKey","apikey":"xyz"}`
- For example`{"auth":"none"}` (I don't recommend)
2025-11-13 18:24:41 +00:00
Quentin McGaw
f11f142bee
feat(settings/wireguard): precise WIREGUARD_ENDPOINT_IP must be an IP address for now
2025-11-13 18:24:41 +00:00
dependabot[bot]
596faef8f2
Chore(deps): Bump golang.org/x/sys from 0.37.0 to 0.38.0 ( #2973 )
2025-11-13 16:47:26 +01:00
Quentin McGaw
3d1b6bc861
feat(server/portforward): change route from /v1/openvpn/portforwarded to /v1/portforward
...
- This route has nothing to do with openvpn specifically
- Remove the `ed` in `portforwarded` to accomodate future routes such as changing the state of port forwarding
- maintaining retrocompatibility with `/v1/openvpn/portforwarded`
- maintaining retrocompatibility with `/openvpn/portforwarded`
- Moved to its own handler `/v1/portforward` instead of `/v1/vpn/portforward` to reduce the complexity of the vpn handler
2025-11-13 14:50:36 +00:00
Quentin McGaw
46ad576233
fix(server/log): log out full URL path not just bottom request URI
2025-11-13 14:29:58 +00:00
Quentin McGaw
46beaac34b
hotfix(server/auth): add old route /openvpn/portforwarded as valid
2025-11-13 14:21:50 +00:00
Quentin McGaw
3025476e8b
chore(portforward): remove double log when clearing port forward file
2025-11-13 14:10:13 +00:00
Quentin McGaw
cd6f9493a4
docs(Dockerfile): specify default PUID and PGID to avoid confusion
...
- Both of these already defaulted to 1000 in the Go code
2025-11-13 13:06:21 +00:00
Quentin McGaw
9984ad22d7
chore(settings/health): remove unneeded health fields
2025-11-13 12:27:33 +00:00
Quentin McGaw
3565ba67c4
hotfix(healthcheck/dns): use dns address tring with port
2025-11-12 01:45:10 +00:00
Quentin McGaw
ffb0bec4da
chore(vpn): rename openvpn* to vpn* variables
2025-11-07 15:26:24 +00:00
Quentin McGaw
4d2b8787e0
chore(dns): replace UNBLOCK with DNS_UNBLOCK_HOSTNAMES
2025-11-07 14:36:10 +00:00
Quentin McGaw
d4831ad4a6
chore(dns): replace DOT_PRIVATE_ADDRESS with DNS_BLOCK_IPS and DNS_BLOCK_IP_PREFIXES
2025-11-07 14:31:09 +00:00
Quentin McGaw
9e1b53a732
feat(server): log number of roles read from auth file
2025-11-05 23:05:10 +00:00
Quentin McGaw
d0113849d6
feat(dns): support doh upstream type
2025-11-05 21:21:16 +00:00
Quentin McGaw
7b25fdfee8
chore(deps): bump dns to v2.0.0-rc9
2025-11-05 20:56:37 +00:00
Quentin McGaw
5ed6e82922
feat(dns): DNS_UPSTREAM_RESOLVER_TYPE option which can be plain or DoT
...
- Migrate `DOT` to `DNS_SERVER`
- Migrate `DOT_PROVIDERS` to `DNS_UPSTREAM_RESOLVERS`
- Migrate `DOT_PRIVATE_ADDRESS` to `DNS_PRIVATE_ADDRESSES`
- Migrate `DOT_CACHING` to `DNS_CACHING`
- Migrate `DOT_IPV6` to `DNS_UPSTREAM_IPV6`
2025-11-05 20:47:21 +00:00
Quentin McGaw
7dbd14df27
chore(dns): merge DoT settings with DNS settings
2025-11-05 20:47:21 +00:00
dependabot[bot]
96d8b53338
Chore(deps): Bump github.com/breml/rootcerts from 0.3.2 to 0.3.3 ( #2964 )
2025-11-04 20:34:22 -05:00
Quentin McGaw
2bd19640d9
feat(health/dns): try another DNS server if one fails
2025-11-04 15:51:04 +00:00
Quentin McGaw
1047508bd7
docs(github): update provider issue template
2025-11-04 15:07:16 +00:00
Quentin McGaw
eb49306b80
hotfix(health): change default icmp target to 1.1.1.1
...
- Cloudflare's 1.1.1.1 seems more reliable than the VPN server public IP address you connect to
- This can still be changed back to 0.0.0.0 to use the VPN server IP address if needed
2025-11-04 14:47:24 +00:00
Quentin McGaw
43da9ddbb3
fix(cyberghost): log warnings from updater resolver
2025-11-04 14:43:02 +00:00
Quentin McGaw
7fbc5c3c07
feat(cyberghost): update servers data
2025-11-04 14:43:02 +00:00
dependabot[bot]
e03f545e07
Chore(deps): Bump github.com/stretchr/testify from 1.10.0 to 1.11.1 ( #2959 )
2025-11-04 15:33:12 +01:00
dependabot[bot]
942f1f2c0f
Chore(deps): Bump github.com/pelletier/go-toml/v2 from 2.2.3 to 2.2.4 ( #2958 )
2025-11-04 15:33:00 +01:00
dependabot[bot]
baf566d7a5
Chore(deps): Bump github.com/klauspost/compress from 1.17.11 to 1.18.1 ( #2957 )
2025-11-04 15:32:46 +01:00
Quentin McGaw
6712adfe6b
hotfix(firewall): handle textual values for protocols
...
- Alpine / iptables-legacy bug introduced in Alpine 3.22
- Alpine: what the hell? Stop introducing breaking changes in iptables on every god damn release!
2025-11-04 14:16:11 +00:00
Quentin McGaw
2e2e5f9df5
fix(firewall): parse "all" protocol from iptables chains
2025-11-03 16:09:24 +00:00
Quentin McGaw
35e9b2365d
fix(ci): consider 429 as valid status code for markdown links
2025-11-03 16:00:42 +00:00
Quentin McGaw
b0b769d2c1
ci(markdown): fix config file path
2025-10-31 20:02:55 +00:00
Quentin McGaw
d3c7d3c7bc
docs(readme): update Alpine version and image size
2025-10-30 16:15:44 +00:00
Quentin McGaw
65f49ea012
fix(wireguard): specify IP family for new route ( #2629 )
2025-10-30 17:14:45 +01:00
Quentin McGaw
5687555921
chore(container): bump Alpine from 3.20 to 3.22
2025-10-30 16:08:40 +00:00
Quentin McGaw
0fb75036a0
chore(build): bump Go from 1.24 to 1.25
2025-10-30 16:04:10 +00:00
dependabot[bot]
2b513dd43d
Chore(deps): Bump github.com/vishvananda/netlink from 1.2.1 to 1.3.1 ( #2932 )
2025-10-30 17:02:32 +01:00
Quentin McGaw
687d9b4736
hotfix(tests): fix unit test for healthcheck
2025-10-30 16:01:25 +00:00
dependabot[bot]
c70c2ef932
Chore(deps): Bump golang.org/x/net from 0.34.0 to 0.46.0 ( #2937 )
2025-10-30 17:00:30 +01:00
dependabot[bot]
af3ada109b
Chore(deps): Bump actions/setup-go from 5 to 6 ( #2929 )
2025-10-30 17:00:15 +01:00
Quentin McGaw
9d40564734
chore(deps): bump breml/rootcerts from v0.2.20 to v0.3.2
2025-10-30 15:59:20 +00:00
Quentin McGaw
3734815ada
hotfix(health): debug log failed attempts and warn log all attempt errors if all failed
...
- Reduce "worrying" noise of icmp attempt failing
- Only log when an action (restart the VPN) is taken
2025-10-30 15:57:40 +00:00
Quentin McGaw
b9cc5c1fdc
fix(port-forward): clear port file instead of removing it
...
- Prevent port forwarding loop crash when trying to delete a directly bind mounted file
- See https://github.com/qdm12/gluetun/issues/2942#issuecomment-3468510402
2025-10-30 15:45:01 +00:00
dependabot[bot]
c646ca5766
Chore(deps): Bump peter-evans/create-or-update-comment from 4 to 5 ( #2931 )
2025-10-30 03:45:31 +01:00