Quentin McGaw
01fa9934bc
hotfix(routing): detect vpn local gateway with new routes listing
2024-08-25 07:01:33 +00:00
Quentin McGaw
ff7cadb43b
chore(server): move log middleware to internal/server/middlewares/log
2024-08-23 13:46:52 +00:00
Quentin McGaw
540acc915d
chore(deps): upgrade vishvananda/netlink from v1.2.1-beta.2 to v1.2.1
2024-08-23 13:46:09 +00:00
Quentin McGaw
4851bd70da
chore(deps): remove qdm12/golibs dependency
...
- Implement friendly duration formatting locally
2024-08-21 13:27:30 +00:00
Quentin McGaw
a2b3d7e30c
chore(deps): implement github.com/qdm12/golibs/command locally ( #2418 )
2024-08-21 15:21:31 +02:00
Quentin McGaw
4d60b71583
feat(dns): replace unbound with qdm12/dns@v2.0.0-beta-rc6 ( #1742 )
...
- Faster start up
- Clearer error messages
- Allow for more Gluetun-specific customization
- DNSSEC validation is dropped for now (it's sort of unneeded)
- Fix #137
2024-08-21 14:35:41 +02:00
Quentin McGaw
3f130931d2
hotfix(firewall): fix ip prefix parsing for ipv6 (again)
2024-08-19 17:06:45 +00:00
Quentin McGaw
946f055fed
hotfix(firewall): handle iptables CIDR ranges with 3 digits for IPv6
2024-08-19 14:02:53 +00:00
Quentin McGaw
eaece0cb8e
fix(ivpn): split city into city and region
...
- Fix bad city values containing a comma
- update ivpn servers data
2024-08-19 03:10:53 +00:00
Quentin McGaw
4203f4fabf
fix(nordvpn): remove commas from region values
2024-08-19 03:08:14 +00:00
Quentin McGaw
c39edb6378
fix(pia): support port forwarding using Wireguard ( #2420 )
...
- Build API IP address using the first 2 bytes of the gateway IP and adding `128.1` to it
- API IP address is valid for both OpenVPN and Wireguard
- Fix #2320
2024-08-19 03:19:16 +02:00
Quentin McGaw
b3cc2781ff
hotfix(config): fix missing test lines for previous commit
2024-08-19 01:00:30 +00:00
Jean-François Roy
12c411e203
feat(storage): STORAGE_FILEPATH option ( #2416 )
...
- `STORAGE_FILEPATH=` disables storing to and reading from a local servers.json file
- `STORAGE_FILEPATH` defaults to `/gluetun/servers.json`
- Fix #2074
2024-08-19 02:26:46 +02:00
Quentin McGaw
3bf937d705
feat(privado): update servers data
2024-08-18 23:29:10 +00:00
Quentin McGaw
bc55c25e73
fix(firewall): delete chain rules by line number ( #2411 )
...
- Fix #2334
- Parsing of iptables chains, contributing to progress for #1856
2024-08-17 20:12:22 +02:00
Quentin McGaw
897a9d7f57
feat(config): allow invalid server filters ( #2419 )
...
- Disallow setting a server filter when there is no choice available
- Allow setting an invalid server filter when there is at least one choice available
- Log at warn level when an invalid server filter is set
- Fix #2337
2024-08-17 12:01:26 +02:00
Quentin McGaw
9233f3f5ba
feat(pia/updater): use v6 API to get servers data
2024-08-16 12:40:22 +00:00
Quentin McGaw
11c2354408
feat(privatevpn): native port forwarding support ( #2285 )
2024-08-16 14:20:00 +02:00
Quentin McGaw
1f2882434a
feat(format-servers): add json format option
2024-08-16 10:14:06 +00:00
Quentin McGaw
09c47c740c
fix(version): log last release by tag name alphabetically instead of date
2024-08-09 07:43:48 +00:00
Quentin McGaw
7be9288685
fix(privatevpn): set openvpn vpn type for no hostname server
2024-08-09 06:24:06 +00:00
Quentin McGaw
74ea1a0f5a
hotfix(firewall): prefer ip6tables (nft) instead of ip6tables-legacy
2024-08-05 14:01:27 +00:00
Quentin McGaw
2a9ab29e7d
fix(firewall): VPN_PORT_FORWARDING_LISTENING_PORT behavior fixed again
...
- allow redirection destination port in INPUT table
2024-08-05 13:57:30 +00:00
Quentin McGaw
f6165d206a
fix(firewall): VPN_PORT_FORWARDING_LISTENING_PORT behavior fixed
...
by not restricting the destination address to 127.0.0.1
2024-08-05 13:37:49 +00:00
Quentin McGaw
01283def17
fix(format-servers): add missing vpn type column for natively supported providers
...
- nordvpn
- surfshark
2024-08-04 08:33:24 +00:00
Quentin McGaw
ac9446e296
feat(protonvpn): Wireguard support ( #2390 )
2024-08-03 16:10:35 +02:00
Quentin McGaw
dea4080a7b
fix(custom-openvpn): remove comments before parsing file
2024-08-03 13:37:57 +00:00
Quentin McGaw
34e8f5f3a9
hotfix(custom): assume all custom servers support port forwarding
...
- Fix custom wireguard with the protonvpn port forwarding implementation
- Might fix #2389
2024-08-01 11:52:38 +00:00
Quentin McGaw
ceb6ff4ca4
hotfix(protonvpn): fix free detection and update p2p->port_forward
2024-07-31 21:04:05 +00:00
Quentin McGaw
4c3da54303
chore(example/updater): simplify update code for openvpn+wireguard servers
2024-07-31 16:08:49 +00:00
Quentin McGaw
5d75bbc869
feat(config): only use port forwarding servers when port forwarding is enabled for ProtonVPN and PIA
2024-07-31 14:49:33 +00:00
Quentin McGaw
72e227f87d
fix(config): log out if port forwarding only servers is enabled
2024-07-31 14:44:19 +00:00
Quentin McGaw
c5c37e7f96
hotfix(protonvpn): port forward only option
...
- Allow to use with Protonvpn (not just PIA)
- Update code comments
- Check server supports port forwarding when invoking port forward code
2024-07-31 14:43:59 +00:00
Quentin McGaw
aaf3019d8c
hotfix(protonvpn): add markdown headers for servers
2024-07-31 14:33:24 +00:00
Quentin McGaw
5191f3558f
hotfix(protonvpn): drop P2P_ONLY in favor of PORT_FORWARD_ONLY
2024-07-31 14:29:31 +00:00
Quentin McGaw
13ffffb157
feat(fastestvpn): Wireguard support ( #2383 )
...
Credits to @Zerauskire for the initial investigation and @jvanderzande for an initial implementation as well as reviewing the pull request
2024-07-31 16:16:50 +02:00
Quentin McGaw
7bc2972b27
feat(perfectprivacy): port forwarding support ( #2378 )
2024-07-30 22:00:26 +02:00
Quentin McGaw
ab08a5e666
feat(fastestvpn): update servers data using API instead of zip file
...
- Add city filter
- More dynamic to servers updates on fastestvpn's end
- Update servers data
2024-07-30 14:50:32 +00:00
Quentin McGaw
8c730a6e4a
chore(port-forward): support multiple port forwarded
2024-07-29 13:55:28 +00:00
Quentin McGaw
4c47b6f142
feat(protonvpn): determine free status with tier value
2024-07-29 13:55:27 +00:00
Quentin McGaw
264480b659
hotfix(pia): remove crl verify
...
- Refers to issue #2376
2024-07-29 08:23:39 +00:00
Koen van Zuijlen
cb99f90bb5
feat(protonvpn): feature filters ( #2182 )
...
- `SECURE_CORE_ONLY`
- `TOR_ONLY`
- `P2P_ONLY`
2024-07-29 08:57:31 +02:00
Quentin McGaw
2bf2525bc5
chore(config): split server filter validation for features and subscription tier
...
- `validateSubscriptionTierFilters` function
- `validateFeatureFilters` function
- idea introduced in #2182
2024-07-29 06:18:28 +00:00
Quentin McGaw
26705f5a23
hotfix(firewall): re-add iptables-legacy for setups with nft kernel support
2024-07-29 05:43:34 +00:00
Quentin McGaw
ddbfdc9f14
feat(firewall): prefer using iptables nft instead of legacy
2024-07-28 14:29:00 +00:00
Quentin McGaw
36c8da7ea7
hotfix(config): split common VPN options per VPN type
...
- Split `VPN_ENDPOINT_IP` in `OPENVPN_ENDPOINT_IP` and `WIREGUARD_ENDPOINT_IP`
- Split `VPN_ENDPOINT_PORT` in `OPENVPN_ENDPOINT_PORT` and `WIREGUARD_ENDPOINT_PORT`
- Fixes bad usage of Wireguard config file endpoint for OpenVPN #2347
2024-07-27 10:42:01 +00:00
Quentin McGaw
73832d8b49
hotfix(firewall): add iptables -m flag for input port instructions
2024-07-26 11:40:12 +00:00
Quentin McGaw
a03041cfea
hotfix(config): do not log retro-compat warning when using OPENVPN_USER or OPENVPN_PASSWORD
2024-07-26 08:42:32 +00:00
Quentin McGaw
e7381b3800
chore(config): rename FIREWALL to FIREWALL_ENABLED_DISABLING_IT_SHOOTS_YOU_IN_YOUR_FOOT
2024-07-26 08:25:05 +00:00
Quentin McGaw
0501743814
feat(pia): port forwarding options VPN_PORT_FORWARDING_USERNAME and VPN_PORT_FORWARDING_PASSWORD
...
- Retro-compatible with `OPENVPN_USER` + `OPENVPN_PASSWORD`
- No more reading for the OpenVPN auth file
- Allow to use PIA port forwarding with Wireguard
2024-07-09 14:44:46 +00:00