v0.1.3

Changed

• Reworked the publish workflow and added PR/CLA templates
• Updated the Alpine base image to v3.24 #4

Security

• Restricted GitHub Actions workflows to least-privilege permissions

v0.1.2

Fixed

• Config-line injection guard in WG_SERVER_ENDPOINT, peer endpoints, and the WG_PRE_UP / WG_POST_UP / WG_PRE_DOWN / WG_POST_DOWN hooks - newlines in these values would otherwise inject extra [Interface] or [Peer] keys into the generated config
• WG_DNS validation tightened from blocklist to allowlist (IPs, hostnames, commas, spaces only), rejecting all other characters up front
• Key and PSK file parsing now strips all whitespace, not only \r / \n - files written by editors that add trailing spaces or tabs no longer produce a broken .conf
• Monitor process reaped on shutdown: the background connection-monitor is now waited on after kill, closing a brief zombie window when the container stops
• Signal-loss window between the old trap '' INT TERM and the re-trap closed; SIGINT and SIGTERM are now handled by the parent throughout startup

Changed

• Peer IDs from WG_PEER_<ID>_PUBKEY are sorted with sort -V, so CLIENT1, CLIENT2, CLIENT10 appear in natural order in the generated config and in the startup log (previously: CLIENT1, CLIENT10, CLIENT2)

v0.1.1

Added

• Publish container images to Docker Hub in addition to GHCR #1

Changed

• Switched image references in the documentation to Docker Hub

v0.1.0

This is the first public release of compwire.

All features have been tested through an automated unit test suite covering config generation and input validation, and through real WireGuard integration tests running on amd64 and arm64.

If you run into any issues, please open a GitHub issue so I can look into it.

See the README for setup instructions and all available configuration options.