Commit Graph

  • 2eb6478b50 Merge branch 'master' into nftables nftables Quentin McGaw 2026-08-07 11:41:25 +00:00
  • 7eed6eaf16 Chore(deps): Bump golang.org/x/crypto from 0.50.0 to 0.52.0 in /devrun (#3389) master dependabot[bot] 2026-08-07 13:22:46 +02:00
  • 0501e2ae0a Chore(deps): Bump golang.org/x/crypto from 0.51.0 to 0.52.0 (#3390) dependabot[bot] 2026-08-07 13:22:35 +02:00
  • 35ff57ea8c Chore(deps): Bump actions/setup-go from 6 to 7 (#3406) dependabot[bot] 2026-08-07 13:22:19 +02:00
  • fa888a7d23 Chore(deps): Bump the low-importance group across 1 directory with 6 updates (#3407) dependabot[bot] 2026-08-07 13:22:00 +02:00
  • 3d76b14224 more fixes Quentin McGaw 2026-08-07 11:32:24 +00:00
  • 2697b4422f remove unused code Quentin McGaw 2026-08-07 11:25:12 +00:00
  • ba5942a929 ai generated tests Quentin McGaw 2026-08-07 11:20:23 +00:00
  • c463c56f86 moare fixes Quentin McGaw 2026-08-06 20:19:10 +00:00
  • a10285d874 Merge branch 'master' into nftables Quentin McGaw 2026-08-06 20:13:34 +00:00
  • c513b8fbd2 human review! Quentin McGaw 2026-08-06 20:08:38 +00:00
  • 0f337b4277 RunUserPostRules uses nft cli Quentin McGaw 2026-08-06 18:56:57 +00:00
  • 27b089d757 FIREWALL_IMPLEMENTATION option Quentin McGaw 2026-08-06 15:56:19 +00:00
  • eff529e3d1 feat: update servers data with bump of gluetun-servers to v0.2.0 Quentin McGaw 2026-08-06 04:41:08 +00:00
  • c5b9ee89c6 expressvpn wip expressvpn-updater-website Quentin McGaw 2026-08-06 01:04:03 +00:00
  • 7ca92b5099 fix(privatevpn): updater now scraps webpage instead of very outdated zip file Quentin McGaw 2026-08-05 17:16:57 +00:00
  • 3c4d5f1a04 fix(vpnunlimited): remove no longer valid hosts from updater Quentin McGaw 2026-08-05 14:40:04 +00:00
  • 26574b9687 fix(expressvpn): remove no longer resolving hostnames Quentin McGaw 2026-08-05 14:37:52 +00:00
  • f7d8e4bf1c fix(vyprvpn): update zip file url for updater Quentin McGaw 2026-08-05 14:33:04 +00:00
  • 3ae441e862 chore(lint): bump linter from v2.4.0 to v2.11.4 Quentin McGaw 2026-08-05 14:26:21 +00:00
  • d994ce5809 fix(vpnsecure): fix updater code with new URL Quentin McGaw 2026-08-05 14:05:03 +00:00
  • db6992d0b3 chore(providers): remove perfect privacy Quentin McGaw 2026-08-05 10:15:14 +00:00
  • 4d7fd514c5 fix(protonvpn/updater): add xk country code for Kosovo servers Quentin McGaw 2026-08-05 10:08:58 +00:00
  • 9b8939eb5b hotfix(ipvanish): fix lint error so CI can pass Quentin McGaw 2026-08-05 01:41:30 +00:00
  • 0186f2ff4a feat(wireguard): WIREGUARD_GSO option to disable TUN vnet hdr batching (#3424) Tyler MacDonald 2026-08-04 21:31:22 -04:00
  • 297d6480d0 fix(ipvanish): updater user agent to work again Quentin McGaw 2026-08-04 22:26:37 +00:00
  • 6f5fbab228 chore(hidemyass): disable updater which no longer works anyway Quentin McGaw 2026-08-04 19:16:29 +00:00
  • ad42ba501a fix(giganews): update servers data url Quentin McGaw 2026-08-04 19:14:27 +00:00
  • 113253b523 wip ai Quentin McGaw 2026-07-16 21:09:07 +00:00
  • 4ff4ff4d90 DEBUG_EXTERNAL_PORT_MISMATCH_CYCLES issue-3408 Quentin McGaw 2026-08-02 14:44:29 +00:00
  • ab09534a84 feat(portforward): log subcommands outputs with "up/down command:" prefix Quentin McGaw 2026-07-31 00:27:40 +00:00
  • 3d1e20c555 hotfix(portforward): add missing break statements for log streaming v3.41.3 v3.41 Quentin McGaw 2026-07-30 11:49:18 +00:00
  • 44143aa3ba hotfix(ci): fix secrets access v3.41.2 Quentin McGaw 2026-07-29 11:18:09 +00:00
  • 56e5cad66b fix(ci): update if conditions from qdm12/gluetun to passteque/gluetun Quentin McGaw 2026-07-29 06:26:21 +00:00
  • c0073c9567 fix(healthcheck): prevent race condition on the healthchecker (#3400) Matt Van Horn 2026-07-28 19:22:20 -07:00
  • cccd7c4c1b hotfix(command): fix unit test Quentin McGaw 2026-06-11 14:06:26 +00:00
  • 4ddf7c9a57 fix(command): wait for all stdout and stderr streams to complete correctly Quentin McGaw 2026-06-11 13:30:59 +00:00
  • b00279bc61 hotfix(portforwarding): allow setting ports when no custom code is running copilot/investigate-issue-3416 Quentin McGaw 2026-07-29 06:06:09 +00:00
  • a4df514e4b fix(providers/custom): use proto tcp-client instead of proto tcp (#3350) ligistx 2026-05-25 09:07:35 -07:00
  • 35847bb3b2 fix(portforwarding): handle empty ports without panicing Quentin McGaw 2026-05-23 13:19:37 +00:00
  • d36d0f84d7 fix(command): fix rare race condition on log line stream at command completion Quentin McGaw 2026-05-21 15:44:21 +00:00
  • e68b70ff8b fix(wireguard): skip tun device checks when using kernelspace Quentin McGaw 2026-05-19 02:46:40 +00:00
  • 73c3ce23da fix(openvpn/extract): trim spaces in config lines before parsing (#3327) Immanuel Tikhonov 2026-05-12 05:44:29 +04:00
  • 6857210429 fix(provider/pia): handle "port is busy" messages and retry port forwarding logic Quentin McGaw 2026-05-08 04:16:15 +00:00
  • 0f7f35d6dc fix(configuration/settings/wireguard): ignore empty address strings Quentin McGaw 2026-05-07 04:53:50 +00:00
  • ec71f1881b fix(provider/pia): update default OpenVPN ports - 8080 for UDP - 8443 for TCP - According to https://github.com/pia-foss/manual-connections/commit/8a75e46be81583d17f9ab3570881419b35000969 - Credits to @darthShadow Quentin McGaw 2026-05-06 05:00:39 +00:00
  • 44f2df6f87 fix(configuration/sources/files/wireguard): fix parsing ipv6 endpoint port Quentin McGaw 2026-05-05 21:28:08 +00:00
  • 650c61e93c fix(pia): allow ports 501 and 502 as custom ports given they are the defaults Quentin McGaw 2026-05-04 03:10:23 +00:00
  • 2f98539848 hotfix(openvpn): fix support for tcp-client Quentin McGaw 2026-05-01 00:39:54 +00:00
  • 5c02e2106c hotfix(pia): fix servers data updater and update servers data - use v7 API endpoint to get correct list of servers - skip offline regions - do not skip *.pvt.site Quentin McGaw 2026-04-22 12:32:47 +00:00
  • e6815054d9 fix(pia): ignore *.pvt.site regions Quentin McGaw 2026-04-22 00:49:47 +00:00
  • 9fe34266f0 fix(pia): try x.y.128.1 and x.y.0.1 from the gateway IP to find the API IP address Quentin McGaw 2026-04-22 00:42:23 +00:00
  • cdfd644c04 fix(portforward): no longer stuck after failed port forwarding Quentin McGaw 2026-04-20 15:27:47 +00:00
  • 1c722b0f80 hotfix(dns): fix pool panicing (again) Quentin McGaw 2026-04-21 17:31:36 +00:00
  • 2e204e11b6 hotfix(dns): fix race condition with DoT pool Quentin McGaw 2026-04-20 14:31:35 +00:00
  • c745f61156 fix(privateinternetaccess): use AES-GCM for all presets Quentin McGaw 2026-04-19 18:00:56 +00:00
  • 4301196c21 fix(privateinternetaccess): remove none encryption preset Quentin McGaw 2026-04-19 17:51:20 +00:00
  • ef48826e48 fix(dns): DNS over TLS pool behavior fixed - handle timed out connections the same as closed connections - close connection on TLS handshake failure - improve mutex handling during connection renewal and retrieval Quentin McGaw 2026-04-19 01:30:54 +00:00
  • 3fca8b3dfe fix(proton): fix updater code - simplest fix ever - proton: how can you return such obscure error messages - ai: you suck hard at fixing anything still it's embarassing Quentin McGaw 2026-04-10 14:45:30 +00:00
  • 8ab97bb4b4 fix(wireguard): support IPv6 address formatting from config files (#3273) Drew Wells 2026-04-08 10:04:35 -05:00
  • 8269fad3b2 fix(server/auth): return 404 or 405 depending on route - Fix #3275 Quentin McGaw 2026-04-07 19:41:05 +00:00
  • 16870d6385 fix(vyprvpn/updater): update OpenVPN configs zip URL (#3264) Damoon Tahmasbi 2026-04-03 22:34:10 +10:00
  • d41081f4b3 fix(server/portforward): use port and ports for both single port and multiple ports forwarded Quentin McGaw 2026-03-29 01:20:13 +00:00
  • 5fbe277f9c fix(openvpn): bundle provider CA certificates in one block (#3258) Michael Bisbjerg 2026-03-26 22:32:43 +01:00
  • c5b20a3b06 fix(firewall/iptables): shared mutex for both iptables and ip6tables Quentin McGaw 2026-03-23 14:09:26 +00:00
  • 1b871496ea fix(ci): set hash of PR commit instead of synthetic commit in docker build argument Quentin McGaw 2026-03-13 15:12:54 +00:00
  • 05795ad2d1 fix(dns): correct error wrapping for DNS listening address validation - Fix #3216 Quentin McGaw 2026-03-10 12:38:56 +00:00
  • f9a86f48aa fix(updater): only uses DoH to cloudflare+google - prevent dns plaintext manipulation both the periodic update and when running in cli mode - possibly higher reliability on poor connections versus UDP - drop -dns flag in update command - for now no configuration allowed since it makes everything rather complex Quentin McGaw 2026-03-06 21:01:52 +00:00
  • 3a39236fa8 fix(expressvpn): remove pakistan server Quentin McGaw 2026-03-06 14:01:00 +00:00
  • 998ae46e97 feat(airvpn): update servers data (#3186) github-actions[bot] 2026-03-04 20:53:28 +01:00
  • c4e65f8cc7 fix(expressvpn): fix missing characters in CA string (#3192) Dennis Nienhuis 2026-03-05 17:15:07 +01:00
  • a20795df9e fix(expressvpn): add new CA3 certificate to fix TLS handshake failure (#3184) Dennis Nienhuis 2026-03-04 20:01:24 +01:00
  • 78929cd6e1 fix(openvpn/extract): restrict custom openvpn config protocol to tcp or udp internally - Fix #3179 - I believe specifying tcp4, tcp6 or tcp-client does not change anything versus tcp + remote ip address - I believe specifying udp4 or udp6 does not change anything versus tcp + remote ip address - Simplify firewall code to not account for tcp-client etc. Quentin McGaw 2026-03-04 18:58:33 +00:00
  • 75c2404179 fix(privado): allow additional OpenVPN ports 443, 8080 and 8443 for both tcp and udp Quentin McGaw 2026-03-01 11:59:03 +00:00
  • bcbc8c41f2 fix(privado): allow OpenVPN TCP protocol Quentin McGaw 2026-03-01 11:58:16 +00:00
  • 3da0c21c82 fix(mod): probe searches for features built-in the kernel Quentin McGaw 2026-02-26 16:24:30 +00:00
  • 009b8e45b7 fix(privado): update servers data using JSON API - Fixes #3159 - Fixes #2118 - Fixes #2657 Quentin McGaw 2026-02-25 16:02:52 +00:00
  • 05dc21ed61 fix(all): increase global http client timeout to 35s and precise lower timeouts where needed - Fix DNS blocklists slow downloads, fix #3102 - Leave 35s timeout for updaters - Set timeouts to 1s for local calls - Set timeouts to 5s for LAN VPN calls and small external calls - Set timeouts to 10s external VPN API calls Quentin McGaw 2026-02-20 16:40:51 +00:00
  • 270dce9acb fix(dns): skip blocking if block lists download fails Quentin McGaw 2026-02-16 15:27:07 +00:00
  • 23cf3231f0 fix(healthcheck): corret behavior when HEALTH_RESTART_VPN=off and startup check fails Quentin McGaw 2026-02-11 17:33:14 +00:00
  • df3c9fa668 fix(healthcheck): prevent race condition on the healthchecker (#3400) Matt Van Horn 2026-07-28 19:22:20 -07:00
  • 257787ce15 feat(ci): attach provenance and SBOM attestations to the published image (#3415) Kobi Hikri 2026-07-29 04:51:19 +03:00
  • 78f6076c83 chore(restrictednet): internal/restrictednet package (#3361) Quentin McGaw 2026-07-19 10:06:48 -04:00
  • 03d0838356 chore(tests): migrate to use go.uber.org/mock instead of github.com/golang/mock Quentin McGaw 2026-07-19 13:16:15 +00:00
  • e2a15204a5 Chore(deps): Bump golang.org/x/net from 0.55.0 to 0.57.0 dependabot/go_modules/golang.org/x/net-0.56.0 dependabot[bot] 2026-07-19 13:18:37 +00:00
  • 1bac07c05a Chore(deps): Bump golang.org/x/sys from 0.45.0 to 0.47.0 dependabot/go_modules/golang.org/x/sys-0.46.0 dependabot[bot] 2026-07-19 13:18:37 +00:00
  • 3fa3d3e4a5 Chore(deps): Bump github.com/amnezia-vpn/amneziawg-go dependabot/go_modules/github.com/amnezia-vpn/amneziawg-go-0.2.19 dependabot[bot] 2026-07-19 13:18:35 +00:00
  • 08e0403d2b chore(tests): migrate to use go.uber.org/mock instead of github.com/golang/mock Quentin McGaw 2026-07-19 13:16:15 +00:00
  • e7b304d0b4 chore(dev): bump dev container from v0.21 to v0.22 - notable changes - Go upgraded from 1.25 to 1.26 - golangci-lint upgraded from v2.4.0 to v2.11.4 - mockgen and gomock upgraded from golang/mock to uber-go/mock v0.6.0 Quentin McGaw 2026-07-19 13:15:39 +00:00
  • 61376829d7 Chore(deps): Bump DavidAnson/markdownlint-cli2-action from 22 to 24 dependabot/github_actions/DavidAnson/markdownlint-cli2-action-24 dependabot[bot] 2026-07-08 05:22:20 +00:00
  • 93cc5a4b2c chore(dns): deprecate BLOCK_SURVEILLANCE Quentin McGaw 2026-06-29 05:15:41 +00:00
  • 4a670635c4 log out json from dns leak test ovpn Quentin McGaw 2026-06-24 22:25:32 +00:00
  • b5f815640e SERVER_DEDICATED option Quentin McGaw 2026-05-22 01:12:24 +00:00
  • 506c9140ba PR feedback Quentin McGaw 2026-05-22 00:29:35 +00:00
  • 80763145dc Remove unneeded allow-compression asym Quentin McGaw 2024-12-27 20:06:34 +00:00
  • cfb8fcf00f Add missing "key-direction 1" Quentin McGaw 2024-12-25 12:49:22 +00:00
  • b9421221da Set TLS crypt for Singapore hostnames only Quentin McGaw 2024-11-08 16:19:57 +00:00
  • 83feb533de Add missing openvpn options - CA - TLS auth - TLS crypt (for singapore) - allow-compression asym - replay-window 256 - remote-cert-tls server - move aes256gcm as preferred cipher Quentin McGaw 2024-10-27 12:53:50 +00:00
  • 1b12dcb5b4 initial code Quentin McGaw 2024-10-23 09:05:32 +00:00
  • e409465cc5 Chore(deps): Bump github.com/mdlayher/netlink from 1.9.0 to 1.11.2 dependabot/go_modules/github.com/mdlayher/netlink-1.11.2 dependabot[bot] 2026-06-24 19:52:30 +00:00