bunkerity/bunkerweb v1.6.6-rc2

on GitHub

Documentation : https://docs.bunkerweb.io/1.6.6-rc2/

Docker tags :

• BunkerWeb : bunkerity/bunkerweb:1.6.6-rc2 or ghcr.io/bunkerity/bunkerweb:1.6.6-rc2
• Scheduler : bunkerity/bunkerweb-scheduler:1.6.6-rc2 or ghcr.io/bunkerity/bunkerweb-scheduler:1.6.6-rc2
• Autoconf : bunkerity/bunkerweb-autoconf:1.6.6-rc2 or ghcr.io/bunkerity/bunkerweb-autoconf:1.6.6-rc2
• UI : bunkerity/bunkerweb-ui:1.6.6-rc2 or ghcr.io/bunkerity/bunkerweb-ui:1.6.6-rc2

Linux packages : https://packagecloud.io/app/bunkerity/bunkerweb/search?q=1.6.6-rc2&filter=all&dist=

Changelog :

• [FEATURE] Refactor Let's Encrypt mail handling: validate the configured email and warn if missing/invalid. Use normal registration when valid; otherwise add --register-unsafely-without-email to Certbot and log that choice.
• [FEATURE] Add DuckDNS as a DNS provider in the letsencrypt plugin
• [FEATURE] Add AUTH_BASIC_ROUNDS setting to the authbasic plugin to configure password hashing strength (default: 656000, range: 1000-999999999).
• [FEATURE] Add new mtls plugin for mutual TLS client certificate authentication, allowing services to require and verify client certificates against trusted CA bundles with configurable verification modes, chain depth control, and optional header forwarding for downstream authorization.
• [AUTOCONF] Implement event debouncing in Docker, Ingress, and Swarm controllers for improved configuration management
• [MISC] Update default value for Permissions-Policy header to include additional features (private-state-token-issuance and private-state-token-redemption).
• [DEPS] Update coreruleset-v4 version to v4.20.0
• [DEPS] Updated luajit2 version to v2.1-20251030
• [DEPS] Updated lua-resty-core version to v0.1.32
• [DEPS] Updated lua-nginx-module version to v0.10.29
• [DEPS] Updated stream-lua-nginx-module version to v0.0.17
• [DEPS] Update lua-resty-openssl version to v1.7.0