v0.2.0

nebula-mesh v0.2.0

Install — see README for the full snippets.

• Server: nebula-mgmt_0.2.0_<os>_<arch>.tar.gz or docker pull ghcr.io/juev/nebula-mgmt:0.2.0
• Agent: nebula-agent_0.2.0_<os>_<arch>.tar.gz or docker pull ghcr.io/juev/nebula-agent:0.2.0

Changelog

Features

• 3f46685: feat(auth): add OIDC operator login (Keycloak/Authentik/Okta/...) (#24) (@juev)
• 824328a: feat(auth): add TOTP 2FA with recovery codes for operators (#23) (@juev)
• af34cf3: feat(auth): add configurable self-registration flow with admin-only operator API (#32) (@juev)
• f5d835a: feat(auth): support multiple operator users (foundation) (#22) (@juev)
• cfea47b: feat(cli): add host delete, block, and unblock subcommands (#21) (@juev)
• 4eb3c6e: feat(hosts): support advanced per-host config overrides (#30) (@juev)
• 7c69877: feat(pki): per-operator CAs with envelope-encrypted in-DB key storage (#35) (@juev)
• 30b015c: feat(ui): add profile page and move logout out of the main navigation (#33) (@juev)
• ec81320: feat(web): add SVG favicon and /favicon.ico route (#20) (@juev)

Bug fixes

• c74a2fe: fix(hosts): validate IP belongs to network CIDR, is unique, and is not reserved (#29) (@juev)
• 8f0267e: fix(store): apply each migration once and split multi-statement scripts (#38) (@juev)
• b9fb288: fix(web): show network name instead of UUID in dashboard and hosts list (#19) (@juev)

Others

• 1272820: build(release): expand nebula-agent target matrix to Nebula-aligned platforms (#27) (@juev)
• 8733bb8: build(release): produce .deb and .rpm packages for nebula-agent (#28) (@juev)
• 96283a9: docs(adr): record ADR 0002 — per-operator CAs with in-DB encrypted storage (#34) (@juev)
• c99e014: docs(adr): record decision to keep CA key on the filesystem (#25) (@juev)
• 21aa498: docs(agent): add comprehensive nebula-agent operations guide (#26) (@juev)
• 0e34833: docs(readme): hoist badges, dedup auth sections, refresh Features/Security/Roadmap (#44) (@juev)

---

Full changelog: v0.1.2...v0.2.0