v0.6.0

tui-wireguard v0.6.0

tui-wireguard 0.6.0

• Saving keeps the conf secret-free (#32). w runs wg-quick save and then, in the same previewed step, removes PrivateKey when the conf loads it from the tool's key file, and replaces each peer's inline PresharedKey with a PostUp that loads it from its .psk file. Saving again changes nothing. A hand-written conf, or one whose key file is missing or different, keeps its keys inline as before.
• Kernel forwarding outside wg-quick (#33). A forwarding server turns on net.ipv4.ip_forward with a drop-in, /etc/sysctl.d/90-tui-wireguard-<interface>-forward.conf, and sysctl -w, both previewed, instead of a PostUp hook that Ubuntu 26.04's AppArmor profile for wg-quick denies. New confs no longer carry the hook; existing ones are left alone.
• F on the interfaces screen turns kernel forwarding on for a forwarding server that lacks it (servers made by earlier versions on Ubuntu 26.04), or removes the tool's drop-in.
• Forwarding off is reported. The FORWARD column shows ip_fwd=0 and --check reports kernelForwarding, kernelForwardingAtBoot and per-interface forwardingDropIn and problems when rules exist but the kernel does not forward.

Built by this repository's CI on the tag itself. Each archive ships a
CycloneDX SBOM, checksums.txt carries a keyless cosign signature, and
every file has SLSA build provenance — see the README's "Verify a
download" for the two commands that check them.

The commits in this release:

Changelog

• 9199135 Keep the conf secret-free on save; kernel forwarding via sysctl.d (#37)