v2.2.4

What's New in v2.2.4

Operator quality-of-life and a transport/monitoring refresh. No breaking changes — keys, users, and certificates are untouched.

Added

• moav user revoke --all — revoke every user (or several at once, moav user revoke alice bob carol) in one pass, with a confirmation prompt unless --yes.
• Donation resume — moav donate skips configs already in its ledger; moav donate submit --force re-submits on purpose (e.g. after regenerating a user).
• Automated PR review + issue triage — admin-triggered Claude Code (@claude review on a PR, @claude triage on an issue). Advisory; never edits code.

Changed

• Batch revoke resets the proxy services once instead of once per user — no more repeated tunnel drops when revoking many users.
• Component updates (no config changes required):
  • wstunnel 10.6.2 → 10.7.1 — lower memory on asymmetric links, SOCKS5 waits for tunnel establishment, self-signed cert valid ≥1yr
  • TrustTunnel 1.0.33 → 1.1.0 — UDP socket-leak fix, global-IPv6 classification fix, opt-in per-user metrics
  • telemt 3.5.2 → 3.5.5 — carrier negotiation, iOS carrier fix
  • AmneziaWG-go → v3.1.20260828 — obfuscation correctness fixes
  • Prometheus 3.13.2 → 3.14.0

Fixed

• Config donation no longer overloads the MahsaNet API on a quota cap. A new-donor submission limit returns HTTP 400; the loop used to keep firing every remaining config (all rejected). It now detects the quota message, stops, and reports what was donated so a later run resumes.

Upgrade

moav update -b main && moav build && moav start

No config changes required.

Full Changelog: v2.2.3...v2.2.4

---

Quick Install

curl -fsSL https://moav.sh/install.sh | bash

This will install MoaV to /opt/moav and guide you through setup.

Documentation

moav.sh/docs — full documentation

Get started

• Quick Start — install to first user in ~10 minutes
• Client Setup — connect from phones and desktops
• DNS Configuration — records, delegations, freeing port 53

Reference

• CLI Reference — every command and flag
• Setup Guide — every option, in depth
• Monitoring — Grafana dashboards and metrics
• Troubleshooting — symptom-first fixes

Understand it

• Supported Protocols — per-protocol ports, ciphers, stealth
• Architecture — container topology and bundle flow
• Threat Model — what is and is not protected
• OPSEC Guide — operator-side hardening

Help out

• Support MoaV — run a server, contribute, translate, donate
• Translating the Docs — one page is a complete contribution

Running it with an AI agent? llms.txt is a compact
orientation for coding agents; llms-full.txt is the
whole corpus. Both ship as release assets.

Community

Telegram · X · Issues · moav.sh