1.2 (Unreleased)
- New provider CloudStack added #1420
- Support for Ubuntu 20.04 #1782
- Allow WireGuard to listen on port 53 #1863
- Introducing Makefile #1553
- Option to unblock SMB and Netbios #1558
- Allow OnDemand to be toggled later #1557
- New provider Hetzner added #1549
- Alternative Ingress IP #1605
- Discontinue use of the WireGuard PPA #1855
- SSH changes #1636
- Default port is set to
4160and can be changed in the config - SSH user for every cloud provider is
algo
- Default port is set to
- EC2: enable EBS encryption by default #1556
- Upgrades #1549
- Python 3
- Ansible 2.9 #1777
- Python virtual environment moved to .env #1549
1.1 (Jul 31, 2019)
- IKEv2 for Windows is now deleted, use Wireguard #1493
- Tmpfs for key generation #145
- Randomly generated pre-shared keys for WireGuard #1465 (elreydetoda)
- Support for Ubuntu 19.04 #1405 (jackivanov)
- AWS support for existing EIP #1292 (statik)
- Script to support cloud-init and local easy deploy #1366 (jackivanov)
- Automatically create cloud firewall rules for installs onto Vultr #1400 (TC1977)
- Randomly generated IP address for the local dns resolver #1429 (jackivanov)
- Update users: add server pick-list #1441 (TC1977)
- Additional testing #213
- Add IPv6 support to DNS #1425 (shapiro125)
- Additional p12 with the CA cert included #1403 (jackivanov)
- Fixes error in 10-algo-lo100.network #1369 (adamluk)
- Error message is missing for some roles #1364
- DNS leak in Linux/Wireguard when LAN gateway/DNS is 172.16.0.1 #1422
- Installation error after #1397 #1409
- EC2 encrypted images bug #1528
- Upgrade Ansible to 2.7.12 #1536
- DNSmasq removed, and the DNS adblocking functionality has been moved to the dnscrypt-proxy
- Azure: moved to the Standard_B1S image size
- Refactoring, Linting and additional tests #1397 (jackivanov)
- Scaleway modules #1410 (jackivanov)
- Use VULTR_API_CONFIG variable if set #1374 (davidemyers)
- Simplify Apple Profile Configuration Template #1033 (faf0)
- Include roles as separate tasks #1365 (jackivanov)
1.0 (Mar 19, 2019)
- Set the name shown to the user (client) to be the server name specified in the install script #491
- AGPLv3 change #1351
- Migrate to python3 #1024
- Reorganize the project around ipsec wireguard #1330
- Configuration folder reorganization #1330
- Remove WireGuard KeepAlive and include as an option in config #1251
- Dnscrypt-proxy no longer works after reboot #1356
- AWS Lightsail
- Azure: Deployment via Azure Resource Manager
- Large refactor to support Ansible 2.5. Details
- Add a new cloud provider - Vultr
- If any problems encountered follow the instructions from scratch
- You can't update users on your old servers with the new code. Use the old code before this release or rebuild the server from scratch
- Update AWS IAM permissions for your user as per issue
- Switched to new cipher suite
- Switched to Ubuntu 18.04
- Lightsail support until they have Ubuntu 18.04
- Scaleway API paginagion
- WireGuard support
- Android StrongSwan profiles
- StrongSwan profiles for Android are deprecated now. Use WireGuard
- DNScrypt-proxy added
- Switched to CloudFlare DNS-over-HTTPS by default
- IPv6 in subjectAltName of the certificates. This allows connecting to the Algo instance via the main IPv6 address
- IPv6 DNS addresses were not passing to the client
- In order to use the IPv6 address as the connection endpoint you need to reinit the PKI and reconfigure your devices with new certificates.