ff6e45fae0
chore(ci): disable PIA end to end testing due to expired credentials
2026-06-04 16:52:53 +00:00
17f24343d6
fix(providers/custom): use proto tcp-client instead of proto tcp ( #3350 )
2026-05-25 18:07:35 +02:00
ebbc630b31
chore(storage): remove servers.json in favor of just code at runtime
2026-05-24 22:22:41 +00:00
39ac8b3432
hotfix(updater): use DoH for all updating operations, not just resolving server hostnames
2026-05-24 21:46:22 +00:00
f65ee3dcb1
hotfix(github): fix dependabot config (AI at it again)
2026-05-24 21:22:18 +00:00
7e8d81b161
Chore(deps): Bump golang.org/x/net from 0.51.0 to 0.55.0 ( #3338 )
2026-05-24 23:09:52 +02:00
21e868c89c
hotfix(protonvpn): small port forwarding fixes for edge cases
2026-05-24 21:08:56 +00:00
2e20e2df66
feat(protonvpn): use symmetric port forwarding for first port then asymmetric for next ports ( #3345 )
2026-05-24 22:47:58 +02:00
6f5f518d1d
chore(github): finer grain schedules for dependency checking
...
- default to weekly instead of daily
- check gluetun-servers daily
- check some Go modules only quartely since they are not important
2026-05-24 20:34:57 +00:00
1998e0d04f
chore(deps): remove direct dependency on golang.org/x/exp
2026-05-24 20:28:54 +00:00
14f30bc641
docs(maintenance): clear up some finished items
2026-05-24 20:18:27 +00:00
f89e55b8ff
chore(storage): remove outdated servers.json CI and documentation
2026-05-24 20:18:07 +00:00
7ad6af0947
docs(github): remove servers.json checkbox from PR template
2026-05-24 20:13:07 +00:00
d3e089ccd7
hotfix(firewall/iptables): filter out DOCKER* chains from nat table when saving/restoring
2026-05-23 21:44:22 +00:00
3eebbf65a8
hotfix(firewall/iptables): only restore firewall if IPv6 port redirection failed but NAT is supported
2026-05-23 21:26:08 +00:00
a1ef736b0f
hotfix(portforwarding): disallow setting ports when running port forwarding code
2026-05-23 13:20:20 +00:00
46edfe49e3
fix(portforwarding): handle empty ports without panicing
2026-05-23 13:19:37 +00:00
7f9cd0fd0c
chore(ci): update markdown workflow to use docker hub password from secrets environment
2026-05-21 20:33:28 +00:00
1a25f7377a
chore(ci): update CI to work with passteque/gluetun
...
- push to ghcr.io/qdm12/gluetun using qdm12 GHCR_PAT secret
- change 'qdm12/gluetun' to 'passteque/gluetun' in CI files
2026-05-21 18:32:28 +00:00
691dc3b0bf
docs: update url from qdm12/gluetun to passteque/gluetun
2026-05-21 17:54:07 +00:00
5fed7f70ed
docs: add socks5 to readme and labels
2026-05-21 17:25:21 +00:00
eb9916f0ac
feat: socks5 proxy server ( #3336 )
...
- `SOCKS5_ENABLED=off`
- `SOCKS5_LISTENING_ADDRESS=":1080"`
- `SOCKS5_USER=`
- `SOCKS5_PASSWORD=`
2026-05-21 19:18:55 +02:00
2210a0e9ad
fix(command): fix rare race condition on log line stream at command completion
2026-05-21 15:44:21 +00:00
f8a677a424
hotfix(portforward): log both external and internal ports when they diverge
...
- useful for ProtonVPN only
- clarify things up for the user
2026-05-21 14:45:40 +00:00
8f012014d6
hotfix(firewall/iptables): only save stdout from iptables-save, not stderr
2026-05-21 03:50:44 +00:00
b119325241
hotfix(storage): do not write filepath field for non-manifest files
2026-05-19 03:03:30 +00:00
7720b1fad4
fix(storage): ignore empty manifest servers file
...
- Fix #3318
2026-05-19 02:53:45 +00:00
854bf5811d
fix(wireguard): skip tun device checks when using kernelspace
2026-05-19 02:46:40 +00:00
8f82376996
feat(storage): storage file structure changes ( #3301 )
...
- migrate persisted server data storage from `/gluetun/servers.json` to `/gluetun/servers/`
- add `STORAGE_SERVERS_ENABLED=on` to enable or disable on-disk server data storage
- add `STORAGE_SERVERS_DIRECTORY_PATH=/gluetun/servers` to configure where per-provider server files are stored
- keep backward compatibility with legacy `STORAGE_FILEPATH=/gluetun/servers.json`
- automatically read and migrate legacy `/gluetun/servers.json` into the new `/gluetun/servers/` layout when needed
- try to remove the legacy servers file after a successful migration to the new storage directory
- switch persisted server data from one large JSON file to a manifest plus per-provider JSON files
- add `UPDATER_PREFER_DIRECT_DOWNLOAD` to allow preferring direct download of provider server data
- keep deprecated updater flags `-enduser` and `-maintainer` as no-op warnings for backward compatibility
- preserve compatibility checks so persisted server data is discarded when its schema version no longer matches the built-in data
- allow preferred persisted provider data to override built-in data when versions match
- servers data now lives at https://github.com/qdm12/gluetun-servers/tree/main/pkg/servers
2026-05-19 04:28:25 +02:00
cd19093d1d
fix(openvpn/extract): trim spaces in config lines before parsing ( #3327 )
2026-05-12 03:44:29 +02:00
fd12e5f9e7
chore(provider/utils): fix flaky test caused by new random shuffle
2026-05-12 01:28:11 +00:00
3ca4b48887
hotfix(provider/utils): randomize pool of filterd servers to pick connections from
2026-05-12 01:08:19 +00:00
38cf094573
chore(boringpoll): remove gluetun.com which is now DOWN 🎉
2026-05-12 00:58:23 +00:00
5b01324d5f
hotfix(pmtud): detect IPv6 usage in VPN connection
2026-05-09 14:40:04 +00:00
445f99d9dc
hotfix(openvpn): bump hand-window from 10s to 20s
2026-05-08 16:12:13 +00:00
891249849a
fix(provider/pia): handle "port is busy" messages and retry port forwarding logic
2026-05-08 04:16:15 +00:00
5cae870745
feat(provider/pia): try parsing JSON on bad port forwarding API status codes
2026-05-08 04:15:30 +00:00
4ea9884c6c
chore(dev): add task to devrun run
2026-05-07 19:21:22 +00:00
3c84a94f11
hotfix(pmtud/ip): handle network is unreachable silently
2026-05-07 19:20:50 +00:00
a9e8e427a5
docs(readme): inform users of repository migration under passteque organization
2026-05-07 18:33:50 +00:00
e1d31f53f1
fix(configuration/settings/wireguard): ignore empty address strings
2026-05-07 04:53:50 +00:00
548e4342c9
fix(provider/pia): update default OpenVPN ports
...
- 8080 for UDP
- 8443 for TCP
- According to https://github.com/pia-foss/manual-connections/commit/8a75e46be81583d17f9ab3570881419b35000969
- Credits to @darthShadow
2026-05-06 05:00:39 +00:00
12f08bf5ad
fix(configuration/sources/files/wireguard): fix parsing ipv6 endpoint port
2026-05-05 21:28:08 +00:00
4ea2337668
feat(dns): re-introduce DNS_SERVER option
...
- force to set `DNS_UPSTREAM_RESOLVER_TYPE=plain` to avoid any confusion/security hole
- force to set `DNS_UPSTREAM_PLAIN_ADDRESSES` to addresses only with port 53
2026-05-05 21:15:28 +00:00
aab10f9d3f
feat(ipv6): prefer IPv6 endpoints when IPv6 is supported
2026-05-04 13:21:52 +00:00
3e59447e58
chore(ci): verify-tools job to check tooling programs
2026-05-04 13:17:45 +00:00
fed09562e5
feat(vpn): rotate filtered servers on internal vpn restarts
...
- Fix #290
2026-05-04 03:29:35 +00:00
4b819b4dbb
fix(pia): allow ports 501 and 502 as custom ports given they are the defaults
2026-05-04 03:10:23 +00:00
a0f6b208f7
feat(openvpn): reduce handshake window to 10 seconds for faster failure detection (again)
2026-05-03 04:29:29 +00:00
44d510417e
chore(devrun): support key and cert for OpenVPN credentials
2026-05-03 04:29:10 +00:00
Quentin McGaw