v0.0.5

Nexora Node v0.0.5

Before you update

No panel update is needed: this node works with panels on v0.0.3, v0.0.4 and v0.0.5. Panel v0.0.5 is out at the same time and adds forms for the new OpenVPN settings.

If you run the node in Docker with a Tailscale endpoint, make sure /app/cache is mounted on host storage, as the shipped docker-compose.yml does. The endpoint's login now lives there. The first start after this update still joins the tailnet as a new device, one last time, because the earlier containers kept no state.

What's new

• MikroTik clients can connect to the OpenVPN server. RouterOS refused the server's reply and never finished connecting. This was tested on a real MikroTik.
• Tailscale endpoints keep their device. The node now keeps the endpoint's login in its cache directory. A restart or a new container no longer joins the tailnet as a new device, and an endpoint set up with a one-off auth key stays logged in after its key is spent. On a server install, the first start moves the existing login into the cache, so the node keeps its machine key and its tailnet address.
• Start warnings clear themselves. When the node skipped an item at start and the panel later added, fixed or removed it, the node kept reporting it as skipped until the next restart. Now the warning goes away as soon as the change applies. For example, endpoints whose certificate arrived after the first push no longer show as missing while they serve.

Under the hood

• The OpenVPN module is updated to v0.1.5.
• Fixes from upstream libraries: mieru 3.38.2 (a QUIC read loop, socks5 authentication checks) and pion/dtls 3.1.14 (handshake and session-resumption hardening), plus the golang.org/x modules.
• The Docker image now runs on Alpine 3.24, since Alpine 3.20 is out of support.
• Built with Go 1.27.2.