OwnTransit 0.6.0 — Relay migration and straightforward setup

OwnTransit 0.6.0 completes the relay migration and setup flow: enter your existing relay URL, review a recognized legacy installation if found, and continue with the machine-specific NEXT instructions.

• URL-first selection removes the need to remember a local instance name. Explicit selectors remain restrictive; existing relays are never silently repointed.
• Recognized manual relay services are replaced with managed services while retaining their keys, data mount, port and website route. Superseded containers and service units are removed after verification; unrelated relays and sites are preserved.
• Interrupted migrations and upgrades use checked, durable recovery. Unknown ownership, conflicting routes, unexpected identities and unsafe files fail closed.
• A short four-step quickstart identifies the VPS, receiving SSH machine and client. The client needs only the private 56-character receiver code; there is no VPS code to copy.
• Large unrelated reverse-proxy fragments no longer block valid site discovery. Website routes are checked before fresh identities are created.
• If a verified HTTPS request receives HTTP 403 from the VPS's own website policy, setup can report local verification only after exact route, service and retained-identity checks. It does not weaken the policy or claim public reachability; endpoints still verify their actual public connections normally.

Start with the 0.6.0 quickstart. For upgrades, rerun the installer for the local role. On the VPS enter its existing URL; on paired receivers follow the printed restart command instead of re-pairing. See migration and recovery.

Both independent TLS boundaries and the fixed receiver target 127.0.0.1:22 remain unchanged. SSH accounts, keys, host verification and configuration remain yours. Do not send the private pairing code to the VPS.

Downloads support Linux amd64/arm64 and Apple-silicon macOS clients, using the existing distribution signer and nine-asset inventory. Historical preview filenames remain for compatibility. No extended soak, pristine-host certification or independent external security certification is claimed.

Verification status

Passed: CI on Linux amd64, Linux arm64 and Apple silicon, including both race/vet profiles, security scanning, installer and relay migration/rollback fixtures. The exact signed Mac capsule passed isolated installation, reinstall and removal. The exact signed relay passed live migration, repeat setup and service restart, with retained keys, public WebSocket reachability and preservation of an unrelated relay and websites verified.

Pending manual verification: the final live Mac → relay → Linux SSH end-to-end test using all three exact 0.6.0 components. The maintainer will perform this after publication; it is not recorded as passed. Keep independent SSH or console recovery access while testing.