What's New

Changed

• XDNS and XHTTP enabled by default — Latest Xray-core FinalMask protocols, currently working in the most
  restrictive environments. dnstt/Slipstream disabled by default (can be re-enabled in .env)
• Docker security hardening (#81, closes #31 as well) — cap_drop: ALL, read-only filesystems, memory/CPU limits on all containers
• CLI help reorganized — Grouped into logical sections, trimmed examples
• Monitoring prompt — Users now prompted during bootstrap instead of silently disabled

Added

• DNS zone file export (moav doctor generates Cloudflare-importable zone file)
• XDNS NS delegation in bootstrap DNS table with "Used by" column
• Happ client in all protocol app tables
• XDNS documentation in DNS.md

Fixed

• Port 53 conflict on fresh install (XDNS vs systemd-resolved)
• Let's Encrypt cert generation (decoy missing NET_BIND_SERVICE)
• Grafana proxy "Host Error" (missing NET_BIND_SERVICE)
• Grafana plugin install "no space left" (tmpfs too small)
• GeoIP download failed on bootstrap (read_only blocking apk)
• Telemt cache write errors (missing tmpfs)
• Admin dashboard user creation permission error
• XDNS bundle generation in both bootstrap and admin paths
• moav migrate-ip missing 7 protocols
• Bash 3.x compatibility (declare -A → function lookup)
• 5 additional container hardening fixes

Upgrade

moav update

Note: XDNS and XHTTP are now enabled by default for new installs. Existing .env files are not affected.

Full Changelog

Full Changelog: v1.7.0...v1.7.2

Quick Install

curl -fsSL moav.sh/install.sh | bash

This will install MoaV to /opt/moav and guide you through setup.

Documentation

moav.sh/docs — Full documentation

• Setup Guide — Complete installation instructions
• Client Setup — How to connect from devices
• DNS Configuration — DNS records setup
• CLI Reference — All commands and options
• Monitoring — Grafana dashboards and metrics
• Troubleshooting — Common issues and solutions