vpn-router (0.3.1-1) unstable; urgency=medium

  * Ignore virtual interfaces when mode auto looks for the internal
    interface. The Docker bridge docker0, which has an address, was counted
    as a second internal interface, so vpn-router-setup and
    vpn-router-docker failed on a host with Docker installed.

 -- Sławomir Koszewski <slawek@koszewscy.waw.pl>  Fri, 23 Oct 2026 13:44:00 +0200

vpn-router (0.3.0-1) unstable; urgency=medium

  * Secure the ports Docker publishes. Rules in a chain of their own,
    VPN-ROUTER-DOCKER, entered by a jump at the top of DOCKER-USER, accept
    IPsec protected traffic, TCP to docker.exposed_ports and established
    connections from the external interface and drop the rest of it. Other
    rules in DOCKER-USER are left alone. The rules cover IPv4 only.
  * Add the docker configuration section. docker.mode is auto (the default,
    secures Docker when docker.service is installed), on (requires Docker) or
    off (removes the rules); docker.exposed_ports lists the TCP ports and port
    ranges reachable from the external interface, none by default.
  * Add the vpn-router-docker service, which applies the Docker rules after
    docker.service starts and removes them when it stops. vpn-router-setup
    restarts it while Docker runs, so a changed configuration takes effect.
  * Installing Docker before this package is recommended. When Docker is
    installed later, restart vpn-router-setup to apply the rules.

 -- Sławomir Koszewski <slawek@koszewscy.waw.pl>  Fri, 23 Oct 2026 12:44:45 +0200

vpn-router (0.2.0-1) unstable; urgency=medium

  * Change the configuration file to JSON, /etc/vpn-router/vpn-router.json.
    Lists are arrays, booleans and the WireGuard listen port are native JSON
    types, and unknown sections, unknown settings and wrong value types are
    rejected.
  * Replace remote.psk_b64 with remote.psk, holding the pre-shared key as a
    plain string. remote.psk_file still takes precedence.
  * Ship /usr/share/doc/vpn-router/vpn-router.json.example in place of
    vpn-router.conf.example.
  * Add platform "none" as the default, so installing the package changes
    nothing on the machine until a platform is chosen.
  * Add the mode setting (manual, interfaces, auto) controlling how much of
    the network configuration is supplied and how much is read from the
    system.
  * Manage the configuration file with ucf, so dpkg-reconfigure reapplies
    debconf answers without overwriting local edits.
  * Apply NAT and forward rules to every local subnet, not only the first.

 -- Sławomir Koszewski <slawek@koszewscy.waw.pl>  Fri, 23 Oct 2026 08:00:06 +0200

vpn-router (0.1.0-1) unstable; urgency=medium

  * Initial release.

 -- Sławomir Koszewski <slawek@koszewscy.waw.pl>  Tue, 26 May 2026 00:00:00 +0200