linux-cloud-router

feature: users sign in to the Router Manager with passkeys, and console login needs a TOTP token, so a user without one is refused the shell, SSH and sudo.

Release #67:Commit 90db6d46a2 pushed by slawek

0.26.0

2026-10-26 08:35:27 +01:00

14s

fix: a shell opens without the password and code again while the user's last use of a shell is within web.shell_auth_timeout minutes.

Release #66:Commit 91cc64d6a6 pushed by slawek

0.25.4

2026-10-26 07:56:38 +01:00

13s

fix: /config gives the state of caddy.service with the installed Caddy, for the Router Manager's Web page.

Release #65:Commit a1f314d8c1 pushed by slawek

0.25.3

2026-10-26 07:36:01 +01:00

17m18s

fix: wireguard.address must be the router's own address in its network, not the network or broadcast address, from which the peers' addresses are told apart.

Release #64:Commit 7d8892b8c4 pushed by slawek

0.25.2

2026-10-26 03:16:01 +01:00

16m1s

fix: /remote-access gives the router's WireGuard public key, endpoint and allowed IPs, which a peer's configuration needs.

Release #63:Commit 4491377d9b pushed by slawek

0.25.1

2026-10-26 02:50:54 +01:00

13s

feature: a VPN user has WireGuard peers, each a device with its public key and IPs, kept in the directory and written into wg0.conf by setup.

Release #62:Commit f1d9c3bc36 pushed by slawek

0.25.0

2026-10-26 02:34:13 +01:00

13s

fix: the status gives the number of connected OpenVPN clients at most 5 seconds old instead of up to a minute.

Release #61:Commit 015fba50ca pushed by slawek

0.24.1

2026-10-26 02:11:03 +01:00

22s

feature: /remote-access of the web service shows and changes the settings of IKEv2 road-warrior, OpenVPN and WireGuard access and whether each runs, for the Router Manager's Remote access page.

Release #60:Commit 9255d56276 pushed by slawek

0.24.0

2026-10-26 00:57:38 +01:00

14s

fix: the shell of a user's own POSIX account opens on the first setup that sets up console login, and the journal records each refused shell with the reason.

Release #59:Commit 07dbe91d0c pushed by slawek

0.23.2

2026-10-26 00:44:18 +01:00

20s

fix: the shell runs as the console account of each member of admins, a local account or the user's own POSIX account in the directory, which also signs in with SSH and sudo, instead of one web.shell_user.

Release #58:Commit ec93bc6a2d pushed by slawek

0.23.1

2026-10-26 00:21:43 +01:00

28s

feature: web.shell lets /shell of the web service open a login shell of web.shell_user over a WebSocket for the Router Manager's Shell page, after the user signs in again.

Release #57:Commit 2e1eb89f52 pushed by slawek

0.23.0

2026-10-26 00:05:31 +01:00

15s

fix: the status gives the number of site-to-site connections set up and established, not each connection by name.

Release #56:Commit 1825e1efb1 pushed by slawek

0.22.1

2026-10-25 23:44:34 +01:00

28s

feature: pki.extended_key_usages adds custom extended key usages by their OIDs, which templates give by name, and a template's policies put certificate policy OIDs into its certificates.

Release #55:Commit d648d294ec pushed by slawek

0.22.0

2026-10-25 23:27:43 +01:00

20s

fix: /status/full of the status web service gives an authenticated client the whole status, whatever web.status_content says.

Release #54:Commit a245ec26cd pushed by slawek

0.21.5

2026-10-25 23:16:50 +01:00

28s

fix: vpn-router-setup, vpn-router-ca and /ca read a CA's key and CRL from the directory each as itself, instead of failing on a CA with a CRL.

Release #53:Commit 7404ee88c4 pushed by slawek

0.21.4

2026-10-25 23:07:57 +01:00

26s

fix: the PKI is kept in ou=pki of the router's directory instead of files under /etc/vpn-router/pki, and the router's site-to-site certificate names only the identities its connections present, and /ca/bundle gives the certificate bundle of a CA.

Release #52:Commit 448ce05b3a pushed by slawek

0.21.3

2026-10-25 23:03:34 +01:00

29s

fix: pki.root_key_warning silences the warning of vpn-router-ca status and /ca about the root key on the router.

Release #51:Commit e11c88f0de pushed by slawek

0.21.2

2026-10-25 22:21:07 +01:00

24s

fix: vpn-router-ca status and /ca warn about a CRL the router signs only once vpn-router-pki.timer has not renewed it in time.

Release #50:Commit c19b195ea0 pushed by slawek

0.21.1

2026-10-25 22:12:44 +01:00

28s

feature: the router has a two-level CA with an optional offline root, issuing CAs for P2S, site-to-site and general use, templates, published certificates and CRLs and an ACME server, site-to-site connections authenticate with certificates, and setup i…

Release #49:Commit 8d3469d10a pushed by slawek

0.21.0

2026-10-25 22:05:54 +01:00

13s

feature: the router makes scheduled backups to a local folder, copied to the cloud with rclone, or to a Proxmox Backup Server, and vpn-router-backup restores them.

Release #48:Commit fe45272f7c pushed by slawek

0.20.0

2026-10-25 20:18:15 +01:00

12s

update: ADR-24 names Ubuntu's apt-daily timer, not a cron job, as what updates the package lists.

Release #47:Commit 7d1f639508 pushed by slawek

0.19.1-3

2026-10-25 19:08:38 +01:00

12s

update: ADR-24 says that the Router Manager checks for updates on demand.

Release #46:Commit 959ca0cd32 pushed by slawek

0.19.1-2

2026-10-25 19:02:34 +01:00

13s

fix: /metrics/history gives the availability of each site-to-site connection as the percentage of time it was up in slots of the view.

Release #45:Commit 1cef4c044f pushed by slawek

0.19.1

2026-10-25 18:50:19 +01:00

30s

feature: service accounts have a display name and a description, which the router sets for its internal ones.

Release #44:Commit 25c151841b pushed by slawek

0.19.0

2026-10-25 18:35:23 +01:00

20s

fix: internal service accounts are the router's own, of which the metrics service's is the one at present, and the documentation says what a service account is.

Release #43:Commit 68ebd541b2 pushed by slawek

0.18.3

2026-10-25 18:27:26 +01:00

13s

fix: service accounts are managed at /service-accounts, not /users, and the internal one of the metrics service is only listed.

Release #42:Commit f01be41191 pushed by slawek

0.18.2

2026-10-25 18:18:20 +01:00

12s

fix: vpn-router-setup owns only the creation of the metrics service's account, which is marked internal, and administrators add service accounts with vpn-router-user add --service and /users.

Release #41:Commit d1970b77b7 pushed by slawek

0.18.1

2026-10-25 18:00:59 +01:00

32s

update: release.py tags a Debian revision other than 1 as x.y.z-n.

Release #40:Commit bf651da5a6 pushed by slawek

0.18.0-2

2026-10-25 17:33:10 +01:00

19s

feature: site_to_site holds any number of named site-to-site connections, which /site-to-site lists, adds, changes and removes.

Release #39:Commit 4a5b15a559 pushed by slawek

0.18.0

2026-10-25 17:14:38 +01:00

12s

feature: /config shows the router's PostgreSQL clusters and their settings, and /postgresql their databases with their sizes.

Release #38:Commit a79510a02f pushed by slawek

0.17.0

2026-10-25 15:27:25 +01:00

28s