Repository navigation
Releases
Releases · AdamWilliam69/nowhere-
nowhere7.3
nowhere7.2
Improved download verification, rollback on update failures, credential handling, and automatic output generation.
nowhere7.1
- Replace “Skip if the certificate already exists” with four pre-issuance checks: the certificate file exists, the private key matches the certificate, the SAN contains the domain, and the certificate has more than 30 days remaining before expiration. Skip issuance only if all checks pass.
- Replace the lack of post-issuance validation with immediate OpenSSL verification after issuance. If verification fails, report an error and abort immediately, preventing an invalid certificate from reaching Step 11.
- Add a DNS preflight check for HTTP-01, which currently has no preflight validation. Before issuance, resolve the domain and compare the resolved IP address against the server’s public IP address, issuing an early warning if they do not match.
- Fix the renewal workflow:
- In the Certbot branch, explicitly run enable --now certbot.timer and verify that the timer is active. On systems without a systemd timer, fall back to cron.
- In the acme.sh branch, verify that the renewal cron job exists.
- Add an optional one-click renewal rehearsal during installation using certbot renew --dry-run. This does not consume Let’s Encrypt issuance quotas and allows the renewal workflow to be validated immediately, helping ensure that renewal will work when the certificate approaches its 90-day expiration.
- Redesign the acme.sh branch: explicitly reject manual DNS mode and instruct users to select an alternative supported validation method.
- Add Menu Item 16: Check Certificate Status / Renew Manually. Allow users to check the remaining validity period and renewal mechanism health at any time, and manually trigger a renewal check.
- Apply general hardening:
- Enable set -o pipefail.
- Download files into a dedicated temporary directory created with mktemp.
- Perform SHA-256 checksum verification of release packages when a checksum is available.
- Remove renewal hooks during uninstallation.
nowhere7
Follow the project's Nowhere version 3.0 for a disruptive update, adding an export verification feature
nowhere6.2
nowhere6.1
nowhere6.0
Added a native Vector client, removed the spec parameter. This is a breaking update.
nowhere5.3
nowhere5.2
nowhere5.1
加入防呆注释 安装向导里 Pool 询问改成条件触发Portal服务端不接受此参数,不会写入启动命令