4a670635c4
log out json from dns leak test
2026-06-24 22:25:32 +00:00
b5f815640e
SERVER_DEDICATED option
2026-06-24 22:12:30 +00:00
506c9140ba
PR feedback
2026-06-24 22:12:30 +00:00
80763145dc
Remove unneeded allow-compression asym
2026-06-24 22:12:30 +00:00
cfb8fcf00f
Add missing "key-direction 1"
2026-06-24 22:12:30 +00:00
b9421221da
Set TLS crypt for Singapore hostnames only
2026-06-24 22:12:30 +00:00
83feb533de
Add missing openvpn options
...
- CA
- TLS auth
- TLS crypt (for singapore)
- `allow-compression asym`
- `replay-window 256`
- remote-cert-tls server
- move aes256gcm as preferred cipher
2026-06-24 22:12:30 +00:00
1b12dcb5b4
initial code
2026-06-24 22:12:29 +00:00
a17591dcdb
Chore(deps): Bump github.com/mdlayher/genetlink from 1.3.2 to 1.4.0 ( #3348 )
2026-06-24 21:51:14 +02:00
c31c566282
Chore(deps): Bump golang.org/x/text from 0.37.0 to 0.38.0 ( #3362 )
2026-06-24 21:50:47 +02:00
496458ca4e
Chore(deps): Bump github.com/amnezia-vpn/amneziawg-go from 0.2.16 to 0.2.18 ( #3347 )
2026-06-24 21:50:27 +02:00
52a41cb891
hotfix(command): fix streamLines behavior
...
- Fix #3365
2026-06-14 14:43:50 +00:00
6c76273ef6
hotfix(socks5): bump UDP association packet queue channel capacity from 2 to 64
...
- Fix #3368
2026-06-14 14:24:17 +00:00
366062dc12
chore(socks5): add server integration test for UDP
2026-06-11 16:55:39 +00:00
8abb05567c
hotfix(command): fix unit test
2026-06-11 14:06:26 +00:00
a53a0267e4
hotfix(socks5): support domain name udp association
2026-06-11 13:50:50 +00:00
4e986c8af7
chore(socks5): fix lint errors on integration test
2026-06-11 13:37:58 +00:00
6d84462f00
feat(socks5): UDP proxying ( #3353 )
2026-06-11 15:32:38 +02:00
acab89b91a
fix(command): wait for all stdout and stderr streams to complete correctly
2026-06-11 13:30:59 +00:00
48c1f2bf6a
chore(lint): run linter on integration tests
2026-06-11 13:29:57 +00:00
c599e7fd2c
chore(ci): disabe workflow concurrency by workflow-[pr|ref]
2026-06-05 15:50:01 +00:00
ff6e45fae0
chore(ci): disable PIA end to end testing due to expired credentials
2026-06-04 16:52:53 +00:00
17f24343d6
fix(providers/custom): use proto tcp-client instead of proto tcp ( #3350 )
2026-05-25 18:07:35 +02:00
ebbc630b31
chore(storage): remove servers.json in favor of just code at runtime
2026-05-24 22:22:41 +00:00
39ac8b3432
hotfix(updater): use DoH for all updating operations, not just resolving server hostnames
2026-05-24 21:46:22 +00:00
f65ee3dcb1
hotfix(github): fix dependabot config (AI at it again)
2026-05-24 21:22:18 +00:00
7e8d81b161
Chore(deps): Bump golang.org/x/net from 0.51.0 to 0.55.0 ( #3338 )
2026-05-24 23:09:52 +02:00
21e868c89c
hotfix(protonvpn): small port forwarding fixes for edge cases
2026-05-24 21:08:56 +00:00
2e20e2df66
feat(protonvpn): use symmetric port forwarding for first port then asymmetric for next ports ( #3345 )
2026-05-24 22:47:58 +02:00
6f5f518d1d
chore(github): finer grain schedules for dependency checking
...
- default to weekly instead of daily
- check gluetun-servers daily
- check some Go modules only quartely since they are not important
2026-05-24 20:34:57 +00:00
1998e0d04f
chore(deps): remove direct dependency on golang.org/x/exp
2026-05-24 20:28:54 +00:00
14f30bc641
docs(maintenance): clear up some finished items
2026-05-24 20:18:27 +00:00
f89e55b8ff
chore(storage): remove outdated servers.json CI and documentation
2026-05-24 20:18:07 +00:00
7ad6af0947
docs(github): remove servers.json checkbox from PR template
2026-05-24 20:13:07 +00:00
d3e089ccd7
hotfix(firewall/iptables): filter out DOCKER* chains from nat table when saving/restoring
2026-05-23 21:44:22 +00:00
3eebbf65a8
hotfix(firewall/iptables): only restore firewall if IPv6 port redirection failed but NAT is supported
2026-05-23 21:26:08 +00:00
a1ef736b0f
hotfix(portforwarding): disallow setting ports when running port forwarding code
2026-05-23 13:20:20 +00:00
46edfe49e3
fix(portforwarding): handle empty ports without panicing
2026-05-23 13:19:37 +00:00
7f9cd0fd0c
chore(ci): update markdown workflow to use docker hub password from secrets environment
2026-05-21 20:33:28 +00:00
1a25f7377a
chore(ci): update CI to work with passteque/gluetun
...
- push to ghcr.io/qdm12/gluetun using qdm12 GHCR_PAT secret
- change 'qdm12/gluetun' to 'passteque/gluetun' in CI files
2026-05-21 18:32:28 +00:00
691dc3b0bf
docs: update url from qdm12/gluetun to passteque/gluetun
2026-05-21 17:54:07 +00:00
5fed7f70ed
docs: add socks5 to readme and labels
2026-05-21 17:25:21 +00:00
eb9916f0ac
feat: socks5 proxy server ( #3336 )
...
- `SOCKS5_ENABLED=off`
- `SOCKS5_LISTENING_ADDRESS=":1080"`
- `SOCKS5_USER=`
- `SOCKS5_PASSWORD=`
2026-05-21 19:18:55 +02:00
2210a0e9ad
fix(command): fix rare race condition on log line stream at command completion
2026-05-21 15:44:21 +00:00
f8a677a424
hotfix(portforward): log both external and internal ports when they diverge
...
- useful for ProtonVPN only
- clarify things up for the user
2026-05-21 14:45:40 +00:00
8f012014d6
hotfix(firewall/iptables): only save stdout from iptables-save, not stderr
2026-05-21 03:50:44 +00:00
b119325241
hotfix(storage): do not write filepath field for non-manifest files
2026-05-19 03:03:30 +00:00
7720b1fad4
fix(storage): ignore empty manifest servers file
...
- Fix #3318
2026-05-19 02:53:45 +00:00
854bf5811d
fix(wireguard): skip tun device checks when using kernelspace
2026-05-19 02:46:40 +00:00
8f82376996
feat(storage): storage file structure changes ( #3301 )
...
- migrate persisted server data storage from `/gluetun/servers.json` to `/gluetun/servers/`
- add `STORAGE_SERVERS_ENABLED=on` to enable or disable on-disk server data storage
- add `STORAGE_SERVERS_DIRECTORY_PATH=/gluetun/servers` to configure where per-provider server files are stored
- keep backward compatibility with legacy `STORAGE_FILEPATH=/gluetun/servers.json`
- automatically read and migrate legacy `/gluetun/servers.json` into the new `/gluetun/servers/` layout when needed
- try to remove the legacy servers file after a successful migration to the new storage directory
- switch persisted server data from one large JSON file to a manifest plus per-provider JSON files
- add `UPDATER_PREFER_DIRECT_DOWNLOAD` to allow preferring direct download of provider server data
- keep deprecated updater flags `-enduser` and `-maintainer` as no-op warnings for backward compatibility
- preserve compatibility checks so persisted server data is discarded when its schema version no longer matches the built-in data
- allow preferred persisted provider data to override built-in data when versions match
- servers data now lives at https://github.com/qdm12/gluetun-servers/tree/main/pkg/servers
2026-05-19 04:28:25 +02:00
Quentin McGaw