v1.7.3

What's Changed

Security

• Fixed a security issue related to default credentials in the configuration by @dmesad in #148
• Fixed an nginx location injection vulnerability by @dmesad in #149
• Updated OAuth2 Proxy to the latest supported version, including security and maintenance improvements by @dmesad in #150

Acknowledgements

Special thanks to @EQSTLab for responsibly reporting the security issues and helping improve Wiredoor's security.

Full Changelog: v1.7.2...v1.7.3

v1.7.2

What's Changed

• Updated project dependencies.
• Fixed critical security vulnerabilities identified by Dependabot.

Full Changelog: v1.7.1...v1.7.2

Release v1.7.1

What's Changed

• fix Oops typo by @VIPQualityPost in #144
• fix condition for Token expiration check 0bbb843
• update deps to fix dependabot issues

New Contributors

• @VIPQualityPost made their first contribution in #144

Full Changelog: v1.7.0...v1.7.1

Release v1.7.0

What's Changed

• Implement http01 validation for domain verification by @dmesad in #119
• Avoid model sync and create migrations by @dmesad in #123
• Fix/improve logging by @dmesad in #124
• DNS Integration (Cloudflare, GoDaddy) by @dmesad in #129
• Fix dynamic DNS resolution for TCP/UDP services in NGINX stream by @dmesad in #134
• [feat] - Add system theme support and dark mode page login by @Stoufiler in #135
• Allow multiple HTTP services to reuse the same backend target by @harrywesterman in #141

New Contributors

• @Stoufiler made their first contribution in #135
• @harrywesterman made their first contribution in #141

Full Changelog: v1.6.0...v1.7.0

v1.6.0

What’s Changed

New Features

• HTTP/2 enabled by default for all sites exposed through Wiredoor, improving performance and connection efficiency by @dmesad in #117
• HTTP/3 (QUIC) support added for one domain, configurable via the environment variable NGINX_HTTP3_DOMAIN by @dmesad in #117
• Automatic generation of quic_host_key to ensure persistent and stable QUIC connections across NGINX reloads by @dmesad in #117
• Added support for configuring NGINX_CLIENT_MAX_BODY_SIZE via environment variable.

Updates & Fixes

• Updated OAuth2 Proxy to version v7.13.0.
• Proxy buffering disabled globally to improve real-time streaming behavior and SSE compatibility.
• Fixed UI issues in the node details view and resolved a validation bug in the service form.
• Updated project dependencies to their latest stable versions.

Notes on HTTP/3

HTTP/3 (QUIC) can only be enabled for one domain per Wiredoor instance, as NGINX currently allows a single QUIC listener per address:port combination (UDP/443).

To enable it, add the following environment variable to your .env file:

NGINX_HTTP3_DOMAIN=your-domain.example.com

Make sure that UDP port 443 is exposed in your docker-compose.yml:

ports:
  - "443:443/tcp"
  - "443:443/udp"

Then recreate the Wiredoor container

Full Changelog: v1.5.2...v1.6.0

v1.5.2

What's Changed

• let users define default MTU by env var by @dmesad in bf4bdd6
• let users use same backed port with different ip for TCP services by @dmesad in #112

Full Changelog: v1.5.1...v1.5.2

v1.5.1

What's Changed

• Set correct permissions to oauth2-proxy dir @dmesad in cb971ea
• Set correct permissions to process manager by @dmesad in fccc9a5
• Add permission preflight messages by @dmesad in bfcb661
• Update Project's License from MIT to Apache-2.0 by @dmesad in 7436d40
• Exec route management and link checking command using sudo by @dmesad in e5c29b1

Full Changelog: v1.5.0...v1.5.1

v1.5.0

What's Changed

• Run as non-root (security hardening) by @dmesad in #107
• Custom nginx error pages by @dmesad in #107
• Replace crond by supercronic by @dmesad in #107
• add lastPingTs to node monitor to set correct status for windows clients by @dmesad in #107

IMPORTANT:

If you are upgrading from a previous Wiredoor version to v1.5.0, please run these commands before updating.

Starting in v1.5.0, the container runs as a non-root user (UID:GID 1000:1000), so host-mounted volumes must be owned by that user.

# Run these on your current version BEFORE upgrading to v1.5.0
docker compose run --rm -u root wiredoor chown -R 1000:1000 /data
docker compose run --rm -u root wiredoor chown -R 1000:1000 /var/log/nginx
docker compose run --rm -u root wiredoor chown -R 1000:1000 /etc/letsencrypt

# Then upgrade to the latest version
docker compose pull wiredoor
docker compose up -d --force-recreate

Full Changelog: v1.4.1...v1.5.0

v1.4.1

What's Changed

• Handle error if gatewayNetworks not defined @dmesad
• Update supervisor version @dmesad
• Image size optimized @dmesad

Full Changelog: v1.4.0...v1.4.1

v1.4.0

What's Changed

• Support bypassing OAuth2 for specific paths and refactor NGINX service configuration by @dmesad in #97
• Feat/ Add support for multiple gateway networks and advanced node configurations by @dmesad in #100
• Feat/ Update node version and deps by @dmesad in #104
• Fix/105 cannot click save button when edit http services by @dmesad in #106
• Update oauth2-proxy to v7.12.0 @dmesad in a3809a1
• Remove default initial ssl certs and create dynamically ssl certs if not exists at startup @dmesad
• Fix mechanism to expose UDP services @dmesad

Full Changelog: v1.3.1...v1.4.0