 slawek
|
448ce05b3a
|
fix: the PKI is kept in ou=pki of the router's directory instead of files under /etc/vpn-router/pki, and the router's site-to-site certificate names only the identities its connections present, and /ca/bundle gives the certificate bundle of a CA.
Release / release (push) Successful in 29s
|
2026-10-25 23:03:03 +01:00 |
|
|
slawek
|
e11c88f0de
|
fix: pki.root_key_warning silences the warning of vpn-router-ca status and /ca about the root key on the router.
Release / release (push) Successful in 24s
|
2026-10-25 22:20:39 +01:00 |
|
|
slawek
|
c19b195ea0
|
fix: vpn-router-ca status and /ca warn about a CRL the router signs only once vpn-router-pki.timer has not renewed it in time.
Release / release (push) Successful in 28s
|
2026-10-25 22:12:13 +01:00 |
|
|
slawek
|
8d3469d10a
|
feature: the router has a two-level CA with an optional offline root, issuing CAs for P2S, site-to-site and general use, templates, published certificates and CRLs and an ACME server, site-to-site connections authenticate with certificates, and setup installs Caddy from Ubuntu or Caddy's repository.
Release / release (push) Successful in 13s
|
2026-10-25 22:05:39 +01:00 |
|
|
slawek
|
fe45272f7c
|
feature: the router makes scheduled backups to a local folder, copied to the cloud with rclone, or to a Proxmox Backup Server, and vpn-router-backup restores them.
Release / release (push) Successful in 13s
|
2026-10-25 20:18:00 +01:00 |
|
|
slawek
|
7d1f639508
|
update: ADR-24 names Ubuntu's apt-daily timer, not a cron job, as what updates the package lists.
Release / release (push) Successful in 12s
|
2026-10-25 19:08:24 +01:00 |
|
|
slawek
|
959ca0cd32
|
update: ADR-24 says that the Router Manager checks for updates on demand.
Release / release (push) Successful in 13s
|
2026-10-25 19:02:19 +01:00 |
|
|
slawek
|
1cef4c044f
|
fix: /metrics/history gives the availability of each site-to-site connection as the percentage of time it was up in slots of the view.
Release / release (push) Successful in 30s
|
2026-10-25 18:49:47 +01:00 |
|
|
slawek
|
25c151841b
|
feature: service accounts have a display name and a description, which the router sets for its internal ones.
Release / release (push) Successful in 20s
|
2026-10-25 18:34:59 +01:00 |
|
|
slawek
|
68ebd541b2
|
fix: internal service accounts are the router's own, of which the metrics service's is the one at present, and the documentation says what a service account is.
Release / release (push) Successful in 13s
|
2026-10-25 18:27:10 +01:00 |
|
|
slawek
|
f01be41191
|
fix: service accounts are managed at /service-accounts, not /users, and the internal one of the metrics service is only listed.
Release / release (push) Successful in 12s
|
2026-10-25 18:18:03 +01:00 |
|
|
slawek
|
d1970b77b7
|
fix: vpn-router-setup owns only the creation of the metrics service's account, which is marked internal, and administrators add service accounts with vpn-router-user add --service and /users.
Release / release (push) Successful in 32s
|
2026-10-25 18:00:25 +01:00 |
|
|
slawek
|
bf651da5a6
|
update: release.py tags a Debian revision other than 1 as x.y.z-n.
Release / release (push) Successful in 19s
|
2026-10-25 17:32:48 +01:00 |
|
|
slawek
|
4a5b15a559
|
feature: site_to_site holds any number of named site-to-site connections, which /site-to-site lists, adds, changes and removes.
Release / release (push) Successful in 12s
|
2026-10-25 17:14:23 +01:00 |
|
|
slawek
|
a79510a02f
|
feature: /config shows the router's PostgreSQL clusters and their settings, and /postgresql their databases with their sizes.
Release / release (push) Successful in 28s
|
2026-10-25 15:26:54 +01:00 |
|
|
slawek
|
38151bf5be
|
feature: the router keeps its metrics in PostgreSQL, serves them for an OpenTelemetry Collector and pushes them over OTLP.
Release / release (push) Successful in 14s
|
2026-10-25 14:57:47 +01:00 |
|
|
slawek
|
83c1c50d8d
|
feature: vpn-config-edit shows and changes the router's configuration.
Release / release (push) Successful in 19s
|
2026-10-25 13:29:12 +01:00 |
|
|
slawek
|
650896131d
|
fix: web.status_content is basic by default.
Release / release (push) Successful in 19s
|
2026-10-25 13:09:57 +01:00 |
|
|
slawek
|
dbc2046e24
|
feature: the status page shows the Client IP, and web.status_content sets how much it shows.
Release / release (push) Successful in 12s
|
2026-10-25 13:08:08 +01:00 |
|
|
slawek
|
45d73abe7b
|
feature: Caddy serves the status page and the Router Manager over HTTPS with a certificate from Let's Encrypt.
Release / release (push) Successful in 23s
|
2026-10-25 12:25:57 +01:00 |
|
|
slawek
|
993a7a9fa9
|
fix: the web service listens on the internal address, the external address or both.
Release / release (push) Successful in 25s
|
2026-10-25 11:37:43 +01:00 |
|
|
slawek
|
581b53d447
|
fix: the web service manages users also when it started before setup.
Release / release (push) Successful in 19s
|
2026-10-24 21:32:00 +02:00 |
|
|
slawek
|
8782edff0f
|
fix: the status page shows whether the Router Manager runs.
Release / release (push) Successful in 19s
|
2026-10-24 12:50:49 +02:00 |
|
|
slawek
|
fe17e83b49
|
feature: every user manages their own account through /account.
Release / release (push) Successful in 11s
|
2026-10-24 12:44:49 +02:00 |
|
|
slawek
|
17331eea37
|
feature: the status page shows the Router Manager's version.
Release / release (push) Successful in 12s
|
2026-10-24 12:16:02 +02:00 |
|
|
slawek
|
af3127d1e8
|
feature: Manager-only accounts, and the Router Manager's first administrator.
Release / release (push) Successful in 20s
|
2026-10-24 11:56:58 +02:00 |
|
|
slawek
|
b1e6d9cd0b
|
fix: the web service starts once libpq can be found.
Release / release (push) Successful in 12s
|
2026-10-24 11:07:45 +02:00 |
|
|
slawek
|
732cc8cb54
|
fix: the web service waits for the PostgreSQL driver instead of failing at start.
Release / release (push) Successful in 25s
|
2026-10-24 10:43:51 +02:00 |
|
|
slawek
|
c0cd323a0c
|
feature: bootstrap diagnostics on port 17081 during the first setup.
Release / release (push) Successful in 13s
|
2026-10-24 10:07:22 +02:00 |
|
|
slawek
|
2e2bacee7d
|
feature: the web service creates its key and database itself and shows its starting phase.
Release / release (push) Successful in 29s
|
2026-10-24 09:07:28 +02:00 |
|
|
slawek
|
4f1aa282f6
|
fix: a failing user directory or token database no longer leaves the tunnels down.
Release / release (push) Failing after 15m34s
|
2026-10-24 08:55:25 +02:00 |
|
|
slawek
|
caf0e334f0
|
feature: users sign in to the web service, and only members of admins manage the router.
Release / release (push) Failing after 16m57s
|
2026-10-24 04:19:01 +02:00 |
|
|
slawek
|
791fc7fddd
|
feature: users can be enrolled for TOTP one-time passwords.
Release / release (push) Failing after 15m23s
|
2026-10-24 03:00:35 +02:00 |
|
|
slawek
|
f135d776f8
|
fix: package upgrades no longer ask the configuration questions.
Release / release (push) Successful in 18s
|
2026-10-24 02:16:19 +02:00 |
|
|
slawek
|
cda33fc4c7
|
fix: an upgrade keeps the configuration and asks nothing.
Release / release (push) Successful in 18s
|
2026-10-24 02:08:23 +02:00 |
|
|
slawek
|
08693f7e68
|
feature: users have a first name, a last name and an e-mail address.
Release / release (push) Successful in 11s
|
2026-10-24 01:47:50 +02:00 |
|
|
slawek
|
b9003bacb9
|
update: the status web service listens on port 7081 by default.
Release / release (push) Successful in 11s
|
2026-10-24 01:14:21 +02:00 |
|
|
slawek
|
0bf78b16b1
|
feature: users and their certificates no longer need a P2S system enabled.
Release / release (push) Successful in 21s
|
2026-10-24 00:00:44 +02:00 |
|
|
slawek
|
0ff74cc8c9
|
feature: the firewall lets the Router Manager in on the internal interface.
Release / release (push) Successful in 11s
|
2026-10-23 23:24:59 +02:00 |
|
|
slawek
|
a7b29e0655
|
fix: the status always shows the state of slapd.
Release / release (push) Successful in 19s
|
2026-10-23 22:59:17 +02:00 |
|
|
slawek
|
c377801be0
|
fix: /config no longer shows secret options.
Release / release (push) Successful in 11s
|
2026-10-23 22:48:31 +02:00 |
|
|
slawek
|
a4cffb67e4
|
fix: the web service works in every state of the router.
Release / release (push) Successful in 11s
|
2026-10-23 22:35:53 +02:00 |
|
|
slawek
|
cc6748a622
|
update: Added OpenLDAP and OpenVPN to the router.
Release / release (push) Successful in 18s
|
2026-10-23 21:55:03 +02:00 |
|
|
slawek
|
609921348b
|
fix: incorrect swanctl parsing.
Release / release (push) Successful in 18s
|
2026-10-23 20:56:52 +02:00 |
|
|
slawek
|
90e7c79840
|
fix: replace webservice swanctl call human readble output with structured one.
Release / release (push) Successful in 18s
|
2026-10-23 20:44:17 +02:00 |
|
|
slawek
|
a6b25b8bb4
|
fix: router setup hangs on race condition with Docker.
Release / release (push) Successful in 18s
|
2026-10-23 20:03:17 +02:00 |
|
|
slawek
|
7163f167e0
|
feature: Added an internally only exposed status web service.
Release / release (push) Successful in 17s
|
2026-10-23 19:46:26 +02:00 |
|
|
slawek
|
5402256ef6
|
fix: removed unnecressary peer ID handling that is no longer required for >=5.0 StrongSwan.
Release / release (push) Successful in 17s
|
2026-10-23 17:31:22 +02:00 |
|
|
slawek
|
64da0cf97f
|
fix: update interface detection code to support additional interfaces Docker adds.
Release / release (push) Successful in 17s
|
2026-10-23 13:43:46 +02:00 |
|
|
slawek
|
2e0cee10ac
|
feat: added support for running the VPN router on a host with Docker Community Edition.
Release / release (push) Successful in 1m8s
|
2026-10-23 13:17:32 +02:00 |
|