v0.9.1

0.9.1 (2026-07-06)

Changed

• Database connection pool keeps idle connections warm and bounds open (#16)
  connections, avoiding repeated peer tunnel setup costs on remote nodes (#16)

Commit summary (auto-generated)

Performance Improvements

• db: keep the connection pool warm and bounded (e565ac0)

v0.9.0

0.9.0 (2026-07-06)

Added

• listLocalOnlineUsers shell command that lists users connected to the current node (#15)

Changed

• Authentication, status reports and mesh routing lookups now cost a single (#15)
  database roundtrip instead of 3-4 with full-row payloads (#15)

Commit summary (auto-generated)

Bug Fixes

• gateway: apply review findings on the single-roundtrip paths (e0d9f7d)

Features

• gateway: add listLocalOnlineUsers command (81d62d9)

Performance Improvements

• db: make hot paths cost a single database roundtrip (980369b)

v0.8.0

0.8.0 (2026-07-06)

Added

• listOnlineUsers shell command that lists users currently online across the mesh (#14)
• Each user record now reports its nodeId in the JSON output (#14)

Changed

• Node liveness is now derived from a heartbeat; upgrade all mesh nodes together, (#14)
  old-binary nodes do not refresh their heartbeat and will be considered offline (#14)
• update geoip2 dependencies (geoip2-golang v2.2.0, maxminddb-golang v2.4.1) (#13)

Fixed

• Crashed nodes now age out of peer discovery instead of being redialed forever (#14)
• nodeId no longer goes stale when a user leaves one node but stays on another (#14)

Commit summary (auto-generated)

Bug Fixes

• auth: do not mark rejected disabled logins online (bc2cb69)
• gateway: age out crashed nodes from peer discovery (eb62b41)
• gateway: apply self-review findings on mesh online status (b08214b)
• gateway: refresh node_id on the online heartbeat to self-heal (c8aa5ad)

Features

• gateway: add listOnlineUsers command and report nodeId per user (d978c90)
• gateway: make online status mesh-wide via online_at heartbeat (b4935c5)

v0.7.0

0.7.0 (2026-07-05)

Added

• Release docker images (linux/amd64, linux/arm64) are now published to docker.io/ziyan/gatewaysshd, tagged with the release version and latest. (#10)

Commit summary (auto-generated)

Features

• ci: publish docker image to docker.io/ziyan/gatewaysshd on release (03e7052)

v0.6.1

0.6.1 (2026-07-05)

Fixed

• Set WORKDIR / in the Docker image so the daemon's relative default file paths resolve against container-root mounts (regression from the busybox→distroless switch) (#9)

Commit summary (auto-generated)

Bug Fixes

• docker: set WORKDIR / so relative default paths resolve on distroless (8ec168f)

v0.6.0

0.6.0 (2026-07-05)

Added

• --postgres-password-file flag to supply the postgres password from a file instead of a command-line argument. (#7)

Commit summary (auto-generated)

Features

• cli: allow postgres password to be supplied via file (4655f1a)

v0.5.0

0.5.0 (2026-07-04)

Added

• Mesh peering: gateway nodes sharing one postgres database can tunnel a user on one node to a user's service on another node over the existing SSH service port (#6)
• Separate peer certificate authority (--peer-ca-public-key, --node-certificate, --node-id, --node-address) for inter-node trust, layered on top of the user CA (#6)
• Reach the central postgres through a peer node's SSH service port (--postgres-peer, --postgres-peer-host-public-key) (#6)
• Configurable postgres sslmode (--postgres-sslmode) (#6)

Changed

• db.Open now takes a db.Settings struct; auth.NewConfig now takes an auth.Settings struct (#6)

Commit summary (auto-generated)

Bug Fixes

• gateway: address code review findings for mesh peering (19ae754)
• gateway: second review round — data races, lifecycle, naming (2bb20c0)

Features

• gateway: mesh peering across nodes sharing a central database (a8e882e)
• gateway: optional socks5 and http forward proxies (3314ad3)

v0.4.0

0.4.0 (2026-07-03)

Features

• Upgrade to Go 1.25 and modernize dependencies, including urfave/cli v3 and geoip2-golang v2
• Add GitHub Actions workflows for CI and automated releases
• Switch docker image base from busybox to distroless
• Add deferutil package and recover from panics in all goroutines
• Lint with mulint and golangci-lint v2, fix all lint issues
• Add unit and postgres-backed integration tests, including ssh end-to-end tests