linux-cloud-router

fix: /https/settings shows the https section and switches https.acme_staging, for the Router Manager.

Release #97:Commit c2c33cfca0 pushed by slawek

0.38.1

2026-10-30 02:47:08 +01:00

56s

feature: https.acme_staging takes Caddy's certificates from Let's Encrypt's staging environment.

Release #96:Commit f36e2a3b04 pushed by slawek

0.38.0

2026-10-30 02:35:38 +01:00

14s

fix: an answer whose client went away ends quietly, and a shell whose client left before it opened is stopped.

Release #95:Commit 1e0e375d60 pushed by slawek

0.37.3

2026-10-30 02:04:21 +01:00

16s

fix: the web service, the metrics service and the bootstrap server log a failure in one line instead of a traceback, and nothing when a client goes away.

Release #94:Commit dd489e65aa pushed by slawek

0.37.2

2026-10-30 02:01:52 +01:00

17s

fix: /config answers the OpenID Provider's state and issuer.

Release #93:Commit 3de030b06b pushed by slawek

0.37.1

2026-10-30 01:55:09 +01:00

15s

feature: the OpenID Provider has the client credentials and device authorization grants, public clients, and service accounts as resources with roles and scopes in JWT access tokens.

Release #92:Commit 3c4c5a8c32 pushed by slawek

0.37.0

2026-10-30 01:02:11 +01:00

17s

feature: a shell opens with one of the user's passkeys in place of the password and the TOTP code.

Release #91:Commit 3ed79c7563 pushed by slawek

0.36.0

2026-10-29 23:13:34 +01:00

17s

update: the package is published for Ubuntu 26.04 (resolute) as well as 24.04 (noble).

Release #90:Commit 3e78d520ae pushed by slawek

0.35.2-2

2026-10-29 21:42:53 +01:00

33s

feature: the router serves S3-compatible object storage with versitygw, with one S3 account per user and buckets owned by users.

Release #89:Commit 1eac15e640 pushed by slawek

0.36.0

2026-10-29 19:24:41 +01:00

14s

fix: the web service answers /, /status and /status/full again while IKEv2 runs.

Release #88:Commit d99e4ea425 pushed by slawek

0.35.2

2026-10-29 19:04:37 +01:00

22s

update: the router web service is split into the package vpnrouter_web, with one module per family of paths.

Release #87:Commit 46d3550eab pushed by slawek

0.35.1

2026-10-29 18:53:11 +01:00

14s

feature: vre opens files from the Router Manager's shell in the editor of its Shell page.

Release #86:Commit 3b14b7723e pushed by slawek

0.35.0

2026-10-29 18:11:17 +01:00

17s

fix: the router's IPsec remote access is called IKEv2 instead of road-warrior.

Release #82:Commit dd2dfaaf2b pushed by slawek

0.33.2

2026-10-27 08:47:32 +01:00

53s

fix: the name server is the primary of any number of domains, each with secondary name servers and a switch for the records of the sites.

Release #81:Commit 1697e1aa38 pushed by slawek

0.33.1

2026-10-26 21:27:02 +01:00

13s

feature: road-warrior clients resolve the domains of the new setting p2s.dns_domains with the router's resolver.

Release #80:Commit 57e8bbcffe pushed by slawek

0.33.0

2026-10-26 20:58:51 +01:00

14s

fix: a VPN user downloads the own OpenVPN client profile through /account, with the current password and code.

Release #79:Commit 9ca8fce14e pushed by slawek

0.32.1

2026-10-26 20:43:57 +01:00

22s

feature: the web service gives Apple VPN profiles that set up IKEv2 road-warrior access on macOS, iOS and iPadOS.

Release #78:Commit 74c24d7bc6 pushed by slawek

0.32.0

2026-10-26 20:38:25 +01:00

14s

fix: WireGuard clients may use the router's DNS resolver, which runs while WireGuard does, and /remote-access names its addresses for their configuration.

Release #77:Commit 770332728e pushed by slawek

0.31.3

2026-10-26 18:33:19 +01:00

14s

fix: dnsmasq answers the remote access clients' DNS queries, so they no longer get the router's own host name with all its addresses from systemd-resolved.

Release #76:Commit e14bbe2ba1 pushed by slawek

0.31.2

2026-10-26 16:53:57 +01:00

13s

fix: the remote access clients' resolver answers on the internal address by default, chosen by p2s.dns_listen, so the name server can take port 53 of the external addresses.

Release #75:Commit dabe4e8365 pushed by slawek

0.31.1

2026-10-26 16:11:45 +01:00

36s

feature: Caddy serves static web sites from folders on the router, defined in their own database, with files uploaded through the web service or WebDAV, and an optional PowerDNS name server answers for a zone of the sites.

Release #74:Commit ea8ca97417 pushed by slawek

0.31.0

2026-10-26 15:27:51 +01:00

21s

feature: the web service serves the last lines of the journal of the router's units and of the log files web.log_files lists, at /logs.

Release #73:Commit 77bdbcb058 pushed by slawek

0.30.0

2026-10-26 12:38:24 +01:00

29s

feature: vpn-config-edit set and remove take --restart, which applies the change with vpn-router-setup and waits for it.

Release #72:Commit cb33b3bfa1 pushed by slawek

0.29.0

2026-10-26 11:49:16 +01:00

25s

feature: bash completes the vpn-* commands, their options and the names they take.

Release #71:Commit 81b7f4cac6 pushed by slawek

0.28.0

2026-10-26 11:36:01 +01:00

12s

feature: the web service is an OpenID Provider, which signs the directory's users in to other systems, the clients being service accounts with redirect URIs.

Release #70:Commit 8cac21845a pushed by slawek

0.27.0

2026-10-26 11:15:30 +01:00

13s

fix: a service account may be named by a GUID in lowercase, as the Router Manager proposes for a new one.

Release #69:Commit d1d565b1d9 pushed by slawek

0.26.2

2026-10-26 09:11:29 +01:00

14s

fix: the package installs vpnrouter_passkeys, without which the web service and vpn-router-user do not start.

Release #68:Commit e675540ce2 pushed by slawek

0.26.1

2026-10-26 08:40:51 +01:00

20s

feature: users sign in to the Router Manager with passkeys, and console login needs a TOTP token, so a user without one is refused the shell, SSH and sudo.

Release #67:Commit 90db6d46a2 pushed by slawek

0.26.0

2026-10-26 08:35:27 +01:00

14s

fix: a shell opens without the password and code again while the user's last use of a shell is within web.shell_auth_timeout minutes.

Release #66:Commit 91cc64d6a6 pushed by slawek

0.25.4

2026-10-26 07:56:38 +01:00

13s

fix: /remote-access gives the router's WireGuard public key, endpoint and allowed IPs, which a peer's configuration needs.

Release #63:Commit 4491377d9b pushed by slawek

0.25.1

2026-10-26 02:50:54 +01:00

13s