PortLoom v0.2.0
Highlights
- One-command two-host onboarding: install Server on a public VPS, generate an Agent command in the WebUI, and run it on the NAS.
- Managed SSH sidecar with per-Agent keys, exact loopback listener authorization, persistent host identity, and no host OpenSSH changes.
- One-time, resumable Agent enrollment with pinned Server host keys and token-free restart verification.
- Built-in Caddy HTTPS entry with route-authorized on-demand certificates.
- Clear Local, Tunnel, and Public health states for HTTP/HTTPS routes.
- Hardened Server/Agent installers with per-home locks, atomic configuration writes, and NAS UID 65532 recovery support.
- Updated bilingual documentation, Docker examples, release checks, and complete two-host integration tests.
Install
Use the exact release tag for production installations:
./install-server.sh --domain portloom.example.com --version 0.2.0Generate the matching Agent command from the Server WebUI. See the five-minute quick start.
Scope
The built-in public data path supports HTTP/HTTPS host routing. Legacy TCP fields remain metadata and do not create public TCP listeners.