v1.1.0
WhiteDNS Wizard v1.1.0 focuses on reliability, clearer setup guidance, faster release builds, and better Reality support.
Highlights
- Replaced Reality XHTTP profiles with Reality TCP Vision using
flow=xtls-rprx-vision. - Added ACME DNS-01 preflight checks so DNS/Cloudflare issues fail earlier with clearer errors.
- Moved remote managed state from
/opt/wdns-wizard/3x-uito/var/lib/whitedns/3x-uifor better VPS compatibility. - Improved Cloudflare token permission documentation with screenshots.
- Made GitHub release builds faster with parallel matrix builds.
Added
- ACME readiness checks before certificate issuance:
- Cloudflare zone access
- Zone active status
- Public NS/SOA checks
_acme-challengeDNS readiness
- Friendly ACME errors for bad delegation, wrong token scope, inactive zones, and DNS resolver failures.
- Cloudflare permission tutorial screenshots in the README.
- Single-target release build script for faster CI builds.
- Release workflow uploads all platform artifacts and checksums after publishing a release.
Changed
- Reality profiles now use:
type=tcpsecurity=realityflow=xtls-rprx-vision- Tags:
wdns-reality-tcp-visionandwdns-tor-reality-tcp-vision
- Reality XHTTP legacy profiles are replaced during apply/reset/repair.
- Reality SNI selection is restricted to stable validated options.
- Remote Docker state now lives under
/var/lib/whitedns/3x-ui. - README now documents the correct Cloudflare Edit zone DNS token flow.
Fixed
- Fixed release asset upload workflow configuration.
- Fixed Windows/remote path handling around uploads and restore scripts.
- Fixed remote upload directory preparation before writing compose and Tor files.
- Fixed VPS failures where
/optis read-only or unsafe for Docker bind mounts. - Fixed confusing raw ACME errors by adding clearer preflight messages.
- Resolved Reality connection failures caused by bad SNI choices.
Upgrade Notes
- Existing installs using
/opt/wdns-wizard/3x-uiare migrated automatically when possible. - Users should rerun WhiteDNS apply/reset so old Reality XHTTP inbounds are replaced with Reality TCP Vision.
- Direct TLS and Hysteria profiles still require valid Cloudflare DNS delegation because they depend on public ACME certificates.