slawek f1d9c3bc36 feature: a VPN user has WireGuard peers, each a device with its public key and IPs, kept in the directory and written into wg0.conf by setup.

2026-10-26 02:33:58 +01:00

..

changelog

feature: a VPN user has WireGuard peers, each a device with its public key and IPs, kept in the directory and written into wg0.conf by setup.

2026-10-26 02:33:58 +01:00

config

feature: the router has a two-level CA with an optional offline root, issuing CAs for P2S, site-to-site and general use, templates, published certificates and CRLs and an ACME server, site-to-site connections authenticate with certificates, and setup installs Caddy from Ubuntu or Caddy's repository.

2026-10-25 22:05:39 +01:00

control

fix: the shell runs as the console account of each member of admins, a local account or the user's own POSIX account in the directory, which also signs in with SSH and sudo, instead of one web.shell_user.

2026-10-26 00:21:13 +01:00

copyright

Reengineed the code. Generalized the package. Cloud configurators are modules.

2026-08-10 09:02:45 +02:00

dirs

Reengineed the code. Generalized the package. Cloud configurators are modules.

2026-08-10 09:02:45 +02:00

install

feature: the router has a two-level CA with an optional offline root, issuing CAs for P2S, site-to-site and general use, templates, published certificates and CRLs and an ACME server, site-to-site connections authenticate with certificates, and setup installs Caddy from Ubuntu or Caddy's repository.

2026-10-25 22:05:39 +01:00

postinst

feature: the router has a two-level CA with an optional offline root, issuing CAs for P2S, site-to-site and general use, templates, published certificates and CRLs and an ACME server, site-to-site connections authenticate with certificates, and setup installs Caddy from Ubuntu or Caddy's repository.

2026-10-25 22:05:39 +01:00

postrm

fix: the shell runs as the console account of each member of admins, a local account or the user's own POSIX account in the directory, which also signs in with SSH and sudo, instead of one web.shell_user.

2026-10-26 00:21:13 +01:00

prerm

feature: the router has a two-level CA with an optional offline root, issuing CAs for P2S, site-to-site and general use, templates, published certificates and CRLs and an ACME server, site-to-site connections authenticate with certificates, and setup installs Caddy from Ubuntu or Caddy's repository.

2026-10-25 22:05:39 +01:00

rules

feature: the router has a two-level CA with an optional offline root, issuing CAs for P2S, site-to-site and general use, templates, published certificates and CRLs and an ACME server, site-to-site connections authenticate with certificates, and setup installs Caddy from Ubuntu or Caddy's repository.

2026-10-25 22:05:39 +01:00

templates

feature: the router has a two-level CA with an optional offline root, issuing CAs for P2S, site-to-site and general use, templates, published certificates and CRLs and an ACME server, site-to-site connections authenticate with certificates, and setup installs Caddy from Ubuntu or Caddy's repository.

2026-10-25 22:05:39 +01:00

vpn-router.vpn-router-backup.service

feature: the router makes scheduled backups to a local folder, copied to the cloud with rclone, or to a Proxmox Backup Server, and vpn-router-backup restores them.

2026-10-25 20:18:00 +01:00

vpn-router.vpn-router-backup.timer

feature: the router makes scheduled backups to a local folder, copied to the cloud with rclone, or to a Proxmox Backup Server, and vpn-router-backup restores them.

2026-10-25 20:18:00 +01:00

vpn-router.vpn-router-bootstrap.service

feature: bootstrap diagnostics on port 17081 during the first setup.

2026-10-24 10:07:22 +02:00

vpn-router.vpn-router-caddy.service

feature: the router has a two-level CA with an optional offline root, issuing CAs for P2S, site-to-site and general use, templates, published certificates and CRLs and an ACME server, site-to-site connections authenticate with certificates, and setup installs Caddy from Ubuntu or Caddy's repository.

2026-10-25 22:05:39 +01:00

vpn-router.vpn-router-docker.service

fix: router setup hangs on race condition with Docker.

2026-10-23 20:03:17 +02:00

vpn-router.vpn-router-metrics.service

feature: the router keeps its metrics in PostgreSQL, serves them for an OpenTelemetry Collector and pushes them over OTLP.

2026-10-25 14:57:47 +01:00

vpn-router.vpn-router-pki.service

feature: the router has a two-level CA with an optional offline root, issuing CAs for P2S, site-to-site and general use, templates, published certificates and CRLs and an ACME server, site-to-site connections authenticate with certificates, and setup installs Caddy from Ubuntu or Caddy's repository.

2026-10-25 22:05:39 +01:00

vpn-router.vpn-router-pki.timer

feature: the router has a two-level CA with an optional offline root, issuing CAs for P2S, site-to-site and general use, templates, published certificates and CRLs and an ACME server, site-to-site connections authenticate with certificates, and setup installs Caddy from Ubuntu or Caddy's repository.

2026-10-25 22:05:39 +01:00

vpn-router.vpn-router-setup.service

feature: users sign in to the web service, and only members of admins manage the router.

2026-10-24 04:19:01 +02:00

vpn-router.vpn-router-web.service

feature: the router has a two-level CA with an optional offline root, issuing CAs for P2S, site-to-site and general use, templates, published certificates and CRLs and an ACME server, site-to-site connections authenticate with certificates, and setup installs Caddy from Ubuntu or Caddy's repository.

2026-10-25 22:05:39 +01:00