24.05.24: - Rebase to Alpine 3.20, install wireguard-tools from Alpine repo.
10.03.24: - Use iptables-legacy on Alpine 3.19.
05.03.24: - Rebase master to Alpine 3.19.
03.10.23: - Potentially Breaking Change: Support for multiple interfaces added. Wireguard confs moved to /config/wg_confs/. Any file with a .conf extension in that folder will be treated as a live tunnel config and will be attempted to start. If any of the tunnels fail, all tunnels will be stopped. Tunnels are started in alphabetical order. Managed server conf will continue to be hardcoded to wg0.conf.
28.06.23: - Rebase master to Alpine 3.18 again.
26.06.23: - Revert master to Alpine 3.17, due to issue with openresolv.
12.10.22: - Add Alpine branch. Optimize wg and coredns services.
04.10.22: - Rebase to Jammy. Upgrade to s6v3.
16.05.22: - Improve NAT handling in server mode when multiple ethernet devices are present.
23.04.22: - Add pre-shared key support. Automatically added to all new peer confs generated, existing ones are left without to ensure no breaking changes.
10.04.22: - Rebase to Ubuntu Focal. Add LOG_CONFS env var. Remove deprecated add-peer command.
28.10.21: - Add site-to-site vpn support.
11.02.21: - Fix bug related to changing internal subnet and named peer confs not updating.
06.10.20: - Disable CoreDNS in client mode, or if port 53 is already in use in server mode.
04.10.20: - Allow to specify a list of names as PEERS and add ALLOWEDIPS environment variable. Also, add peer name/id to each one of the peer sections in wg0.conf. Important: Existing users need to delete /config/templates/peer.conf and restart
27.09.20: - Cleaning service binding example to have accurate PreDown script.
06.08.20: - Replace resolvconf with openresolv due to dns issues when a client based on this image is connected to a server also based on this image. Add IPv6 info to readme. Display kernel version in logs.
29.07.20: - Update Coredns config to detect dns loops (existing users need to delete /config/coredns/Corefile and restart).
27.07.20: - Update Coredns config to prevent issues with non-user-defined bridge networks (existing users need to delete /config/coredns/Corefile and restart).
05.07.20: - Add Debian updates and security repos for headers.
25.06.20: - Simplify module tests, prevent iptables issues from resulting in false negatives.
19.06.20: - Add support for Ubuntu Focal (20.04) kernels. Compile wireguard tools and kernel module instead of using the ubuntu packages. Make module install optional. Improve verbosity in logs.
29.05.20: - Add support for 64bit raspbian.
28.04.20: - Add Buster/Stretch backports repos for Debian. Tested with OMV 5 and OMV 4 (on kernel 4.19.0-0.bpo.8-amd64).
20.04.20: - Fix typo in client mode conf existence check.
13.04.20: - Fix bug that forced conf recreation on every start.
08.04.20: - Add arm32/64 builds and enable multi-arch (rpi4 with ubuntu and raspbian buster tested). Add CoreDNS for PEERDNS=auto setting. Update the add-peer/show-peer scripts to utilize the templates and the INTERNAL_SUBNET var (previously missed, oops).
05.04.20: - Add INTERNAL_SUBNET variable to prevent subnet clashes. Add templates for server and peer confs.
01.04.20: - Add show-peer script and include info on host installed headers.