This is a pretty significant release and includes some breaking changes! Please watch the latest progress report video here.
- WireGuard tunnel interfaces have been renamed from
wg
totun_wg
(#27) - Old configuration using the old
wg
names will not port over to thetun_wg
names. This will very likely be the last breaking change to the schema moving forward, unless something happens upstream that necessitates a change on our end (#27) - Removed all
earlyshellcmds
and all extra scripts as these are no longer needed (#27) - Renamed
blur secrets
tohide secrets
and we are now using a password field instead. Deterministic blurring using csstext-shadow
is cosmetically pleasing but trivial to crack (issue not tracked on GitHub)
Reminder that if you intend to route traffic over a tunnel using policy-based routing, you will need to create your own gateway definition as the package does not create this for you! Treat these tunnels like any other WAN.