Commit Graph

  • 0bc67b73a8 feat(dns): info log all requests filtered out Quentin McGaw 2025-11-14 16:19:07 +00:00
  • c7ab5bd34c feat(dns): DNS_REBINDING_PROTECTION_EXEMPT_HOSTNAMES option Quentin McGaw 2025-11-14 16:14:23 +00:00
  • 843bf08aa1 chore(deps): bump dns to https://github.com/qdm12/dns/commit/248acd28339f329b0f51c7da987f8f7c72e59e45 Quentin McGaw 2025-11-14 16:13:59 +00:00
  • 5b25cc95a9 chore(docker): clear DNS_BLOCK_IP_PREFIXES values since DNS rebinding protection is built-in the filter middleware Quentin McGaw 2025-11-14 15:04:56 +00:00
  • 0fddbc54a2 Chore(deps): Bump github.com/cloudflare/circl from 1.6.0 to 1.6.1 (#2977) dependabot[bot] 2025-11-13 23:27:51 +01:00
  • 11fcfb7d19 Chore(deps): Bump golang.org/x/net from 0.46.0 to 0.47.0 (#2976) dependabot[bot] 2025-11-13 23:27:10 +01:00
  • 3cd7d7edcb Chore(deps): Bump golang.org/x/text from 0.30.0 to 0.31.0 (#2975) dependabot[bot] 2025-11-13 23:26:55 +01:00
  • 30609b6fe9 hotfix(configuration/settings): fix requirement for proton username and password Quentin McGaw 2025-11-13 21:58:46 +00:00
  • 8a0921748b fix(protonvpn): authenticated servers data updating (#2878) Quentin McGaw 2025-11-13 14:05:26 -05:00
  • 3fac02a82a feat(server/auth): HTTP_CONTROL_SERVER_AUTH_DEFAULT_ROLE option (JSON encoded) - For example: {"auth":"basic","username":"me","password":"pass"} - For example{"auth":"apiKey","apikey":"xyz"} - For example{"auth":"none"} (I don't recommend) Quentin McGaw 2025-11-13 18:24:34 +00:00
  • f11f142bee feat(settings/wireguard): precise WIREGUARD_ENDPOINT_IP must be an IP address for now Quentin McGaw 2025-11-13 16:20:00 +00:00
  • 596faef8f2 Chore(deps): Bump golang.org/x/sys from 0.37.0 to 0.38.0 (#2973) dependabot[bot] 2025-11-13 16:47:26 +01:00
  • 3d1b6bc861 feat(server/portforward): change route from /v1/openvpn/portforwarded to /v1/portforward - This route has nothing to do with openvpn specifically - Remove the ed in portforwarded to accomodate future routes such as changing the state of port forwarding - maintaining retrocompatibility with /v1/openvpn/portforwarded - maintaining retrocompatibility with /openvpn/portforwarded - Moved to its own handler /v1/portforward instead of /v1/vpn/portforward to reduce the complexity of the vpn handler Quentin McGaw 2025-11-13 14:50:36 +00:00
  • 46ad576233 fix(server/log): log out full URL path not just bottom request URI Quentin McGaw 2025-11-13 14:29:58 +00:00
  • 46beaac34b hotfix(server/auth): add old route /openvpn/portforwarded as valid Quentin McGaw 2025-11-13 14:21:50 +00:00
  • 3025476e8b chore(portforward): remove double log when clearing port forward file Quentin McGaw 2025-11-13 14:10:13 +00:00
  • cd6f9493a4 docs(Dockerfile): specify default PUID and PGID to avoid confusion - Both of these already defaulted to 1000 in the Go code Quentin McGaw 2025-11-13 13:06:21 +00:00
  • 9984ad22d7 chore(settings/health): remove unneeded health fields Quentin McGaw 2025-11-13 12:27:33 +00:00
  • 3565ba67c4 hotfix(healthcheck/dns): use dns address tring with port Quentin McGaw 2025-11-12 01:45:10 +00:00
  • ffb0bec4da chore(vpn): rename openvpn* to vpn* variables Quentin McGaw 2025-11-07 15:26:24 +00:00
  • 4d2b8787e0 chore(dns): replace UNBLOCK with DNS_UNBLOCK_HOSTNAMES Quentin McGaw 2025-11-07 14:33:20 +00:00
  • d4831ad4a6 chore(dns): replace DOT_PRIVATE_ADDRESS with DNS_BLOCK_IPS and DNS_BLOCK_IP_PREFIXES Quentin McGaw 2025-11-07 14:31:09 +00:00
  • 9e1b53a732 feat(server): log number of roles read from auth file Quentin McGaw 2025-11-05 23:05:10 +00:00
  • d0113849d6 feat(dns): support doh upstream type Quentin McGaw 2025-11-05 21:21:16 +00:00
  • 7b25fdfee8 chore(deps): bump dns to v2.0.0-rc9 Quentin McGaw 2025-11-05 20:55:28 +00:00
  • 5ed6e82922 feat(dns): DNS_UPSTREAM_RESOLVER_TYPE option which can be plain or DoT - Migrate DOT to DNS_SERVER - Migrate DOT_PROVIDERS to DNS_UPSTREAM_RESOLVERS - Migrate DOT_PRIVATE_ADDRESS to DNS_PRIVATE_ADDRESSES - Migrate DOT_CACHING to DNS_CACHING - Migrate DOT_IPV6 to DNS_UPSTREAM_IPV6 Quentin McGaw 2025-11-05 20:41:19 +00:00
  • 7dbd14df27 chore(dns): merge DoT settings with DNS settings Quentin McGaw 2025-11-05 20:14:25 +00:00
  • 96d8b53338 Chore(deps): Bump github.com/breml/rootcerts from 0.3.2 to 0.3.3 (#2964) dependabot[bot] 2025-11-04 20:34:22 -05:00
  • 2bd19640d9 feat(health/dns): try another DNS server if one fails Quentin McGaw 2025-11-04 15:51:04 +00:00
  • 1047508bd7 docs(github): update provider issue template Quentin McGaw 2025-11-04 15:07:16 +00:00
  • eb49306b80 hotfix(health): change default icmp target to 1.1.1.1 - Cloudflare's 1.1.1.1 seems more reliable than the VPN server public IP address you connect to - This can still be changed back to 0.0.0.0 to use the VPN server IP address if needed Quentin McGaw 2025-11-04 14:47:24 +00:00
  • 43da9ddbb3 fix(cyberghost): log warnings from updater resolver Quentin McGaw 2025-11-04 14:42:54 +00:00
  • 7fbc5c3c07 feat(cyberghost): update servers data Quentin McGaw 2025-11-04 14:38:25 +00:00
  • e03f545e07 Chore(deps): Bump github.com/stretchr/testify from 1.10.0 to 1.11.1 (#2959) dependabot[bot] 2025-11-04 15:33:12 +01:00
  • 942f1f2c0f Chore(deps): Bump github.com/pelletier/go-toml/v2 from 2.2.3 to 2.2.4 (#2958) dependabot[bot] 2025-11-04 15:33:00 +01:00
  • baf566d7a5 Chore(deps): Bump github.com/klauspost/compress from 1.17.11 to 1.18.1 (#2957) dependabot[bot] 2025-11-04 15:32:46 +01:00
  • 6712adfe6b hotfix(firewall): handle textual values for protocols - Alpine / iptables-legacy bug introduced in Alpine 3.22 - Alpine: what the hell? Stop introducing breaking changes in iptables on every god damn release! Quentin McGaw 2025-11-04 14:16:11 +00:00
  • 2e2e5f9df5 fix(firewall): parse "all" protocol from iptables chains Quentin McGaw 2025-11-03 16:06:21 +00:00
  • 35e9b2365d fix(ci): consider 429 as valid status code for markdown links Quentin McGaw 2025-11-03 16:00:42 +00:00
  • b0b769d2c1 ci(markdown): fix config file path Quentin McGaw 2025-10-31 20:02:55 +00:00
  • d3c7d3c7bc docs(readme): update Alpine version and image size Quentin McGaw 2025-10-30 16:14:16 +00:00
  • 65f49ea012 fix(wireguard): specify IP family for new route (#2629) Quentin McGaw 2025-10-30 17:14:45 +01:00
  • 5687555921 chore(container): bump Alpine from 3.20 to 3.22 Quentin McGaw 2025-10-30 16:08:40 +00:00
  • 0fb75036a0 chore(build): bump Go from 1.24 to 1.25 Quentin McGaw 2025-10-30 16:04:10 +00:00
  • 2b513dd43d Chore(deps): Bump github.com/vishvananda/netlink from 1.2.1 to 1.3.1 (#2932) dependabot[bot] 2025-10-30 17:02:32 +01:00
  • 687d9b4736 hotfix(tests): fix unit test for healthcheck Quentin McGaw 2025-10-30 16:01:25 +00:00
  • c70c2ef932 Chore(deps): Bump golang.org/x/net from 0.34.0 to 0.46.0 (#2937) dependabot[bot] 2025-10-30 17:00:30 +01:00
  • af3ada109b Chore(deps): Bump actions/setup-go from 5 to 6 (#2929) dependabot[bot] 2025-10-30 17:00:15 +01:00
  • 9d40564734 chore(deps): bump breml/rootcerts from v0.2.20 to v0.3.2 Quentin McGaw 2025-10-30 15:59:20 +00:00
  • 3734815ada hotfix(health): debug log failed attempts and warn log all attempt errors if all failed - Reduce "worrying" noise of icmp attempt failing - Only log when an action (restart the VPN) is taken Quentin McGaw 2025-10-30 15:57:40 +00:00
  • b9cc5c1fdc fix(port-forward): clear port file instead of removing it - Prevent port forwarding loop crash when trying to delete a directly bind mounted file - See https://github.com/qdm12/gluetun/issues/2942#issuecomment-3468510402 Quentin McGaw 2025-10-30 15:45:01 +00:00
  • c646ca5766 Chore(deps): Bump peter-evans/create-or-update-comment from 4 to 5 (#2931) dependabot[bot] 2025-10-30 03:45:31 +01:00
  • 1394be5143 Chore(deps): Bump golang.org/x/sys from 0.29.0 to 0.37.0 (#2939) dependabot[bot] 2025-10-30 03:45:16 +01:00
  • 93442526f8 chore(ci): run container and wait for it to connect (#2956) Quentin McGaw 2025-10-30 03:44:31 +01:00
  • d85402050b Chore(deps): Bump github.com/ulikunitz/xz from 0.5.11 to 0.5.15 (#2955) dependabot[bot] 2025-10-30 01:57:18 +01:00
  • b1c62cb525 Chore(deps): Bump golang.org/x/text from 0.21.0 to 0.30.0 (#2938) dependabot[bot] 2025-10-30 01:56:53 +01:00
  • fae64a297a Chore(deps): Bump github/codeql-action from 3 to 4 (#2935) dependabot[bot] 2025-10-30 01:56:41 +01:00
  • 6e2682a9ce docs(readme): remove no longer valid LoC badge Quentin McGaw 2025-10-30 00:55:15 +00:00
  • 555049f09c feat(privado): update servers data Quentin McGaw 2025-10-29 12:30:48 +00:00
  • 712f7c3d35 chore(build): bump Go from 1.23 to 1.24 Quentin McGaw 2025-10-29 02:34:22 +00:00
  • 7a51c211cd fix(publicip): respect PUBLICIP_ENABLED Quentin McGaw 2025-10-23 19:49:21 +00:00
  • c48189c1c4 feat(health/icmp): log out return address on errors Quentin McGaw 2025-10-23 19:22:31 +00:00
  • 9803fa1cfd hotfix(health): info log on healthcheck passing after failure Quentin McGaw 2025-10-23 18:58:19 +00:00
  • cf756f561a feat(health): info log when healthcheck passes after failure for the case of HEALTH_VPN_RESTART=off Quentin McGaw 2025-10-21 18:42:33 +00:00
  • a4021fedc3 feat(health): HEALTH_RESTART_VPN option - You should really leave it to on ⚠️ - Turn it to off if you have trust issues with the healthcheck. Don't then report issues if the connection is dead though. Quentin McGaw 2025-10-21 15:36:15 +00:00
  • 31a36a9250 hotfix(health): increase timeout values and periods - run small check every 60s, from 15s - small check (icmp/dns) initial timeout from 3s to 10s - small check (icmp/dns) timeout increase from 1s to 10s - full check initial timeout increased from 10s to 20s - full check extra timeout increase from 3s to 10s Quentin McGaw 2025-10-19 23:27:02 +00:00
  • 36fe349b70 chore(ci): ignore .github/pull_request_template.md with markdown linter Quentin McGaw 2025-10-19 23:23:41 +00:00
  • 3ef1cfd97c docs(github): add pull request template (#2918) shwoop 2025-10-17 20:34:05 +02:00
  • 669feb45f1 hotfix(healthcheck): correct error string for DNS plain lookup fallback Quentin McGaw 2025-10-17 18:08:24 +00:00
  • 85890520ab feat(healthcheck): combination of ICMP and TCP+TLS checks (#2923) Quentin McGaw 2025-10-17 01:45:50 +02:00
  • 340016521e Chore(deps): Bump github.com/breml/rootcerts from 0.2.19 to 0.2.20 (#2683) dependabot[bot] 2025-10-06 13:36:00 +02:00
  • ef523df42c feat(expressvpn): update hardcoded servers data (#2888) Matthew Bennett 2025-10-06 04:33:36 -07:00
  • 5306e3bab1 feat(mullvad): update servers data Quentin McGaw 2025-10-03 14:04:06 +00:00
  • 72a49afd2b docs(healthcheck): fix grammar issue in log (#2773) Vahin M 2025-09-26 17:58:08 +01:00
  • 9b8edbb81e hotfix(vpnunlimited): fix formatting of certificates Quentin McGaw 2025-09-24 12:55:45 +00:00
  • a1554feb3f chore(dev): add vscode git remote add task Quentin McGaw 2025-08-17 18:44:38 +00:00
  • 490410bf09 chore(dev): convert .vscode/launch.json to tasks.json Quentin McGaw 2025-08-17 16:32:19 +00:00
  • 8c113f5268 fix(vpnunlimited): update certificate values (#2835) mutschler 2025-09-11 21:15:20 +02:00
  • 075cbd5a0f chore(ci): bump github actions and use go.mod Go version (#2880) shwoop 2025-09-11 21:14:19 +02:00
  • d82df2b431 hotfix(build): bump xcputranslate so it's available on ghcr.io - v0.7.0 is a broken build - v0.9.0 is the version available on ghcr.io Quentin McGaw 2025-08-16 20:34:07 +00:00
  • a09f8214d9 hotfix(build): bump xcputranslate so it's available on ghcr.io Quentin McGaw 2025-08-16 20:29:40 +00:00
  • 396e9c003e chore(ci): pull container images at build time from ghcr.io when possible - Reduce silly image pull rate limiting from docker hub registry - still rely on docker hub registry to pull golang and alpine images since these are not on ghcr.io Quentin McGaw 2025-08-16 20:12:21 +00:00
  • b0c4a28be6 chore(lint): upgrade linter to v2.4.0 - migrate configuration file - fix existing code issues - add exclusion rules - update linter names Quentin McGaw 2025-08-15 16:53:05 +00:00
  • 85325e4a31 chore(dev): upgrade dev container to v0.21 Quentin McGaw 2025-08-15 16:12:51 +00:00
  • 9933dd3ec5 Chore(deps): Bump DavidAnson/markdownlint-cli2-action from 18 to 19 (#2632) dependabot[bot] 2025-01-22 09:27:10 +01:00
  • 13532c8b4b Chore(deps): Bump golang.org/x/net from 0.31.0 to 0.34.0 (#2648) dependabot[bot] 2025-01-22 09:26:57 +01:00
  • 3926797295 docs(readme): remove docker-compose example version field (#2663) Leroy 2025-01-22 09:26:39 +01:00
  • febd3f784f docs(readme): "swiss-knife-like" -> "swiss-army-knife-like" (#2652) K1 2025-01-22 11:55:46 +03:30
  • 61b053f0e1 Chore(deps): Bump golang.org/x/crypto from 0.29.0 to 0.31.0 (#2619) dependabot[bot] 2024-12-27 21:15:31 +01:00
  • 6476cedae9 Remove unneeded allow-compression asym ovpn Quentin McGaw 2024-12-27 20:06:34 +00:00
  • 8f386dd91e Remove support for multihop Quentin McGaw 2024-12-27 20:05:35 +00:00
  • 9c514bf661 Add missing "key-direction 1" Quentin McGaw 2024-12-25 12:49:22 +00:00
  • 355cb950c3 Set TLS crypt for Singapore hostnames only Quentin McGaw 2024-11-08 16:19:57 +00:00
  • ff93ea6bac Add missing openvpn options - CA - TLS auth - TLS crypt (for singapore) - allow-compression asym - replay-window 256 - remote-cert-tls server - move aes256gcm as preferred cipher Quentin McGaw 2024-10-27 12:53:50 +00:00
  • 231f5d9789 initial code Quentin McGaw 2024-10-23 09:05:32 +00:00
  • 8dae352ccc fix(cli): fix openvpnconfig command panic due to missing SetDefaults call Quentin McGaw 2024-12-27 09:30:58 +00:00
  • e890c50da6 feat(firewall): support icmp rules v3.40.0 Quentin McGaw 2024-12-25 20:05:46 +00:00
  • ddd9f4d021 chore(natpmp): fix determinism for test Test_Client_ExternalAddress Quentin McGaw 2024-12-14 21:04:07 +00:00
  • 7e58b4baee Chore(deps): Bump github.com/stretchr/testify from 1.9.0 to 1.10.0 (#2600) dependabot[bot] 2024-12-14 21:19:30 +01:00
  • a21fbb9a4f Chore(deps): Bump github.com/breml/rootcerts from 0.2.18 to 0.2.19 (#2601) dependabot[bot] 2024-12-14 21:19:11 +01:00