bunkerity/bunkerweb v1.6.2-rc1

on GitHub

Documentation : https://docs.bunkerweb.io/1.6.2-rc1/

Docker tags :

• BunkerWeb : bunkerity/bunkerweb:1.6.2-rc1 or ghcr.io/bunkerity/bunkerweb:1.6.2-rc1
• Scheduler : bunkerity/bunkerweb-scheduler:1.6.2-rc1 or ghcr.io/bunkerity/bunkerweb-scheduler:1.6.2-rc1
• Autoconf : bunkerity/bunkerweb-autoconf:1.6.2-rc1 or ghcr.io/bunkerity/bunkerweb-autoconf:1.6.2-rc1
• UI : bunkerity/bunkerweb-ui:1.6.2-rc1 or ghcr.io/bunkerity/bunkerweb-ui:1.6.2-rc1

Linux packages : https://packagecloud.io/app/bunkerity/bunkerweb/search?q=1.6.2-rc1&filter=all&dist=

Changelog :

• [BUGFIX] Fix database migration issues when upgrading from older versions to v1.6.1-rc1 with a PostgreSQL database
• [BUGFIX] Fix shenanigans with templates in the web UI when editing/creating a service using the easy mode
• [BUGFIX] Improve database table existence checks and error handling in scripts to avoid errors when the LANG is not en_US.UTF-8
• [BUGFIX] Fix Country plugin regex to avoid false positives and deduplicate entries in the lua code
• [BUGFIX] Fix Let's Encrypt clear old certificates logic to avoid deleting the wrong certificates
• [DOCS] Enhance documentation about all-in-one image
• [DOCS] Refactor the settings documentation to make it more consistent and easier to read, it is now renamed to Features
• [FEATURE] Enhance SSL plugin configuration with customizable cipher levels modern, intermediate, and old for better control over SSL/TLS settings and the ability to set a custom cipher list
• [FEATURE] Add the possibility to ignore URI, IP, reverse DNS, ASN, and User-Agent in the Antibot plugin
• [FEATURE] Add the possibility to configure the algorithm used when generating the self-signed certificate in the Self-signed certificate plugin (default is ec-prime256v1)
• [FEATURE] Add Infomaniak as a DNS provider in the letsencrypt plugin
• [MISC] Add the possibility to use the less secure dns_cloudflare_email and dns_cloudflare_api_key credentials in the letsencrypt plugin for Cloudflare DNS provider
• [MISC] Update regex in the Self-signed certificate plugin for subject validation so we don't have to always start with /CN=
• [MISC] Update regex in the Security.txt plugin to support both HTTP and HTTPS URLs and add an helper function to convert HTTP URLs to HTTPS
• [MISC] Update regex in the SSL plugin to support older HTTPS protocols
• [MISC] Make the default certificate more secure by using the secp384r1 curve and the sha384 hash algorithm instead of the secp256r1 curve and the sha256 hash algorithm
• [AUTOCONF] Remove possible infinite loop in Kubernetes integration
• [UI] The temporary web UI will now accept X-Forwarded-For headers to allow the use of a reverse proxy in front of it
• [UI] Persist DataTable page length in localStorage for consistent user experience.
• [UI] Fix 2FA setup page QR code not being scannable when using the dark mode
• [UI] Update latest stable release only if available to avoid unnecessary updates prompting
• [UI] Fix correct key retrieval for Redis metrics
• [UI] Enhance report data formatting and error handling in reports module
• [UI] Templates are now listed in an appropriate order in the web UI when creating a new service in easy mode (low -> medium -> high -> custom)
• [UI] Refactor easy mode to improve the user experience and make it more intuitive
• [ALL-IN-ONE] Enhance supervisord configuration to ensure proper startup and shutdown of all services in the all-in-one image
• [ALL-IN-ONE] Improve logging mechanism in the all-in-one image to ensure that logs are properly captured and displayed
• [LINUX] Fix NGINX service not being disabled correctly in the post-install script
• [DEPS] Add lua-upstream-nginx-module
• [DEPS] Update lua-resty-redis version to v0.32
• [DEPS] Update ngx_devel_kit version to v0.3.4
• [DEPS] Update mbedtls version to v3.6.3