v0.3.0: OpenWrt support and a free basic tier

PassGate now works with OpenWrt as well as OPNsense, and can offer a free, slow tier with your passes as the upgrade.

New

OpenWrt support
PassGate can now control an OpenWrt router (22.03 or newer) instead of OPNsense, so a single consumer router can run the whole setup. One script on the router does the firewall side:

• a list of paid devices, plus rules that let them reach the internet but never your private networks
• sends unpaid web traffic to the sign-in page
• a login for PassGate that can only change that list (it can't open LuCI or change anything else)

It's safe to run again, and sh setup.sh remove undoes it. In PassGate, choose Settings → Router: OpenWrt.
Guide: docs/openwrt-setup.md

Free basic tier
Offer an always-available slow connection for messages, email and simple browsing. Guests tap Use free basic Wi-Fi, with no account or card, and see your paid plans as "Upgrade to full speed".

• optionally limited to a number of minutes per device per day (resets at midnight)
• free devices go in a free_clients router list that the router slows down:
  • OpenWrt: the setup script creates the limit (default 2 Mbit/s down, 1 Mbit/s up per device; change it with FREE_DOWN / FREE_UP)
  • OPNsense: two shaper rules (network guide, section 8)
• devices that have paid, are on the always-online list, or are checking out always get full speed

Changed

• The Promotions admin page is now Free Wi-Fi and holds both the free tier and scheduled promotions.
• Settings show only the connection fields for the router you picked.
• The README and Unraid template cover both routers.

Upgrading

Pull the new image and recreate the container; the database updates itself. Nothing changes for existing OPNsense setups.
If you want the free tier on OPNsense, add the free_clients alias and its two shaper rules before turning it on, or free guests get full speed.

Image: ghcr.io/axon07/passgate:0.3.0 (amd64 and arm64)