v1.7.2
What's New
Changed
- XDNS and XHTTP enabled by default — Latest Xray-core FinalMask protocols, currently working in the most
restrictive environments. dnstt/Slipstream disabled by default (can be re-enabled in .env) - Docker security hardening (#81, closes #31 as well) — cap_drop: ALL, read-only filesystems, memory/CPU limits on all containers
- CLI help reorganized — Grouped into logical sections, trimmed examples
- Monitoring prompt — Users now prompted during bootstrap instead of silently disabled
Added
- DNS zone file export (moav doctor generates Cloudflare-importable zone file)
- XDNS NS delegation in bootstrap DNS table with "Used by" column
- Happ client in all protocol app tables
- XDNS documentation in DNS.md
Fixed
- Port 53 conflict on fresh install (XDNS vs systemd-resolved)
- Let's Encrypt cert generation (decoy missing NET_BIND_SERVICE)
- Grafana proxy "Host Error" (missing NET_BIND_SERVICE)
- Grafana plugin install "no space left" (tmpfs too small)
- GeoIP download failed on bootstrap (read_only blocking apk)
- Telemt cache write errors (missing tmpfs)
- Admin dashboard user creation permission error
- XDNS bundle generation in both bootstrap and admin paths
- moav migrate-ip missing 7 protocols
- Bash 3.x compatibility (declare -A → function lookup)
- 5 additional container hardening fixes
Upgrade
moav update
Note: XDNS and XHTTP are now enabled by default for new installs. Existing .env files are not affected.
Full Changelog
Full Changelog: v1.7.0...v1.7.2
Quick Install
curl -fsSL moav.sh/install.sh | bashThis will install MoaV to /opt/moav and guide you through setup.
Documentation
moav.sh/docs — Full documentation
- Setup Guide — Complete installation instructions
- Client Setup — How to connect from devices
- DNS Configuration — DNS records setup
- CLI Reference — All commands and options
- Monitoring — Grafana dashboards and metrics
- Troubleshooting — Common issues and solutions