v3.3.3

This version of Zoraxy brings a mix of new features, housekeeping changes, and stability improvements. The long-deprecated SMTP feature has been removed in this release, and trusted proxy gating has been extended to cover more internal services. IP scanning received a few minor improvements, and the internal database dependency has been migrated to a maintained fork of boltDB.

Since the web file manager interface has been deprecated from previous release, a new WebDAV server access plugin is now available for those who need it, and the Uptime Monitor now supports setting a custom URI for health checks. On the stability side, the ACME certificate request regression that was inadvertently introduced in rc2 has been resolved. Main listeners now correctly enforce ReadHeaderTimeout and IdleTimeout to prevent connections from getting stuck indefinitely. A supporter list has also been quietly added to the webmin UI.

As always, thanks for all your contributions and pull requests to make this project better for everyone :)

What's Changed

• Update CHANGELOG.md by @Morethanevil in #1082
• feat(acme): url.URL support for dnsCredentials by @t510599 in #1078
• feat: add a basic CI script by @AnthonyMichaelTDM in #752
• Bump docker/login-action from 4.0.0 to 4.1.0 by @dependabot[bot] in #1104
• Features: Turnstile for directory by @Klarulor in #1112
• Bump docker/build-push-action from 7.0.0 to 7.1.0 by @dependabot[bot] in #1113
• Bump actions/setup-go from 4 to 6 by @dependabot[bot] in #1103
• Bump actions/checkout from 4 to 6 by @dependabot[bot] in #1105
• fix: Allow Location header rewrite when target matches OriginalHost by @TuxLux40 in #1120
• Fix certificate file permissions by @devilmonastery in #1116
• Update lego to v4.35.2 by @zen8841 in #1130
• Update golang version in ci by @zen8841 in #1131
• V3.3.3 by @tobychui in #1129
• Fix typo in customHeaders.html by @jeremyy294 in #1167
• V3.3.3-rc2 by @tobychui in #1166
• fix #1169 by @zen8841 in #1171
• chore: clean up Docker related files by @PassiveLemon in #1175
• Sync docker change to dev branch by @tobychui in #1177
• Add custom URI for Uptime Monitor health check by @barto95100 in #1172
• V3.3.3-rc3 by @tobychui in #1178
• Bump docker/build-push-action from 7.1.0 to 7.2.0 by @dependabot[bot] in #1190
• fix(dynamicproxy): set ReadHeaderTimeout and IdleTimeout on main listeners by @ElmoViggiani in #1187
• Bump docker/login-action from 4.1.0 to 4.2.0 by @dependabot[bot] in #1189
• Bump docker/setup-buildx-action from 4.0.0 to 4.1.0 by @dependabot[bot] in #1188
• V3.3.3-rc4 by @tobychui in #1192

New Contributors

• @t510599 made their first contribution in #1078
• @Klarulor made their first contribution in #1112
• @TuxLux40 made their first contribution in #1120
• @devilmonastery made their first contribution in #1116
• @jeremyy294 made their first contribution in #1167
• @barto95100 made their first contribution in #1172

Full Changelog: v3.3.2...v3.3.3

v3.3.3-rc4

This version patched up a few more bugs, add timeout for stuck connections and supporter list.
Currently undergoing internal testing, if it is stable and everything goes well, I will be releasing the v3.3.3 next week.

What's Changed

• Bump docker/build-push-action from 7.1.0 to 7.2.0 by @dependabot[bot] in #1190
• fix(dynamicproxy): set ReadHeaderTimeout and IdleTimeout on main listeners by @ElmoViggiani in #1187
• Bump docker/login-action from 4.1.0 to 4.2.0 by @dependabot[bot] in #1189
• Bump docker/setup-buildx-action from 4.0.0 to 4.1.0 by @dependabot[bot] in #1188
• V3.3.3-rc4 by @tobychui in #1192

New Contributors

• @ElmoViggiani made their first contribution in #1187

Full Changelog: v3.3.3-rc3...v3.3.3-rc4

v3.3.3-rc3

This version removed the deprecated SMTP feature as well as adding trusted proxy gating to more services. This version also fixed the ACME issue and a few more minor bugs.

New experimental features including

• Health-check URI support for uptime monitor
• Trusted proxy for basic auth
• Access control for stream proxy

What's Changed

• fix #1169 by @zen8841 in #1171
• chore: clean up Docker related files by @PassiveLemon in #1175
• Add custom URI for Uptime Monitor health check by @barto95100 in #1172
• V3.3.3-rc3 by @tobychui in #1178

New Contributors

• @barto95100 made their first contribution in #1172

Full Changelog: v3.3.3-rc2...v3.3.3-rc3

Known Issues

ACME: A regression was found in this RC2 build where requesting new certificates may fail.

• Note: Existing certificate renewals are unaffected and working as expected.
• Status: This has been fixed in the latest development branch and will be included in the next release.

v3.3.3-rc2

This release added new features for v3.3.3, including

1. Traffic flow diagram (experimental)
2. Better main menu design
3. Fix for stream proxy nil pointer bug on some platforms
4. geoip lookup tool
5. Websocket timeout settings and auto deadline adjustment based on traffic flow
6. and more small UX adjustments and bug fixes

What's Changed

• Fix typo in customHeaders.html by @jeremyy294 in #1167
• V3.3.3-rc2 by @tobychui in #1166

New Contributors

• @jeremyy294 made their first contribution in #1167

Full Changelog: v3.3.3-rc1...v3.3.3-rc2

v3.3.3-rc1

This version mainly fixed some bugs from previous release and introduced a few minor helpful features in IP scanning and WebDAV server access (new plugin). This also updated the database dependencies to use a more modern and properly maintained key-value db.

Notes: Due to my homelab got flooded, I cannot test it on my production system for this build. Please open an issue if you encounter anything strange.

What's Changed

• Update CHANGELOG.md by @Morethanevil in #1082
• feat(acme): url.URL support for dnsCredentials by @t510599 in #1078
• feat: add a basic CI script by @AnthonyMichaelTDM in #752
• Bump docker/login-action from 4.0.0 to 4.1.0 by @dependabot[bot] in #1104
• Features: Turnstile for directory by @Klarulor in #1112
• Bump docker/build-push-action from 7.0.0 to 7.1.0 by @dependabot[bot] in #1113
• Bump actions/setup-go from 4 to 6 by @dependabot[bot] in #1103
• Bump actions/checkout from 4 to 6 by @dependabot[bot] in #1105
• fix: Allow Location header rewrite when target matches OriginalHost by @TuxLux40 in #1120
• Fix certificate file permissions by @devilmonastery in #1116
• Update lego to v4.35.2 by @zen8841 in #1130
• Update golang version in ci by @zen8841 in #1131
• V3.3.3 by @tobychui in #1129

New Contributors

• @t510599 made their first contribution in #1078
• @Klarulor made their first contribution in #1112
• @TuxLux40 made their first contribution in #1120
• @devilmonastery made their first contribution in #1116

Full Changelog: v3.3.2...v3.3.3-rc1

v3.3.2

This version of Zoraxy introduced a few new features, including Trusted Proxy settings in access rule system, Zoraxy Auth SSO and some major improvement of the uptime monitor. This version also updated the social banner and dpcore design and now it is a bit faster (from my observation) and provide better connections reuse than previous implementation.

Also worth mentioning, due to the Web File Manager API are getting too many security advisory (mostly related to path traversal after user login, and most of them are not a threat due to the current single admin architecture), it has been replaced with a proper implementation of WebDAV Server which could be mounted as a local file system and directly opened using local IDE like VSCode. This new implementation should be really useful for web developers that also provide deployment services for their clients.

As always, thanks for all your contributions and pull request to make this project better for everyone :)

What's Changed

• V3.3.2-rc1 by @kjagosz in #1005
• Bump actions/checkout from 6.0.1 to 6.0.2 by @dependabot[bot] in #1013
• Sync v3.3.1-rc3 changes to v3.3.2 by @tobychui in #1015
• Update CHANGELOG.md by @Morethanevil in #1018
• Fix typo, change from "Any acess requesting" to "Any access requesting" by @coddec in #1023
• Bump actions/checkout from 6.0.1 to 6.0.2 by @dependabot[bot] in #1026
• Bump docker/login-action from 3.6.0 to 3.7.0 by @dependabot[bot] in #1025
• Update IP blacklist description text by @Psychoboy in #1034
• V3.3.2-rc1 by @tobychui in #1041
• Bump docker/build-push-action from 6.18.0 to 6.19.2 by @dependabot[bot] in #1043
• fix: forward auth saving and defaults by @CrazyWolf13 in #1045
• Update lego to v4.32.0 and fix shell script by @zen8841 in #1051
• remove: docker webfm env var by @PassiveLemon in #1057
• v3.3.2-rc2 by @tobychui in #1055
• Enable providers for lego by @zen8841 in #1068
• Bump docker/setup-qemu-action from 3.7.0 to 4.0.0 by @dependabot[bot] in #1063
• Bump docker/build-push-action from 6.19.2 to 7.0.0 by @dependabot[bot] in #1064
• Bump docker/setup-buildx-action from 3.12.0 to 4.0.0 by @dependabot[bot] in #1065
• Bump docker/login-action from 3.7.0 to 4.0.0 by @dependabot[bot] in #1066
• V3.3.2-rc3 by @tobychui in #1069
• V3.3.2-rc4 by @tobychui in #1077
• Fixed #1079 by @tobychui in #1081

New Contributors

• @coddec made their first contribution in #1023
• @Psychoboy made their first contribution in #1034
• @CrazyWolf13 made their first contribution in #1045

Full Changelog: v3.3.1...v3.3.2

v3.3.2-rc4

This version added a few quick patch regarding security and uptime monitor so upstream with improper setup TLS certificate can still seen as online in uptime monitor. (The job of the uptime monitor is only here to see if upstream is online, that is why configurations should not affects the online status of an upstream. This fixes the design choice of the upstream detection behavior.)

Will be releasing the formal v3.3.2 this weekend.

What's Changed

• V3.3.2-rc4 by @tobychui in #1077

Full Changelog: v3.3.2-rc3...v3.3.2-rc4

v3.3.2-rc3

This version introduced group policy for Zoraxy Auth, now all the basic feature of a SSO are built into Zoraxy. @zen8841 also take the chance to update lego and add a few more DNS provider as well, if everything goes well this will be the last rc release for for v3.3.2.

What's Changed

• Enable providers for lego by @zen8841 in #1068
• Bump docker/setup-qemu-action from 3.7.0 to 4.0.0 by @dependabot[bot] in #1063
• Bump docker/build-push-action from 6.19.2 to 7.0.0 by @dependabot[bot] in #1064
• Bump docker/setup-buildx-action from 3.12.0 to 4.0.0 by @dependabot[bot] in #1065
• Bump docker/login-action from 3.7.0 to 4.0.0 by @dependabot[bot] in #1066
• V3.3.2-rc3 by @tobychui in #1069

Full Changelog: v3.3.2-rc2...v3.3.2-rc3

v3.3.2-rc2

This release introduced the new experimental Zoraxy Auth integrated SSO options for those like me who are too lazy to setup an external auth instance. This rc also added new Wintty Web SSH terminal for Windows host server, update implementation in dpcore and add verbal output to uptime monitor when dev-true flag is set.

Some improvements are also being introduced with this release, one of the most noticeable one is that now, fast-geoip mode takes around 150MB (compare to previously 800+MB) due to an improvement in the trie tree implementation as well as some geo-ip resolve logic changes. Feedback are welcomed.

What's Changed

• fix: forward auth saving and defaults by @CrazyWolf13 in #1045
• Update lego to v4.32.0 and fix shell script by @zen8841 in #1051
• remove: docker webfm env var by @PassiveLemon in #1057
• v3.3.2-rc2 by @tobychui in #1055

New Contributors

• @CrazyWolf13 made their first contribution in #1045

Full Changelog: v3.3.2-rc1...v3.3.2-rc2

v3.3.2-rc1

This version contains a subset of all the new features of v3.3.2. New features that is introduced in this release candidate includes redirection device type filter (i.e. you can now choose to only redirect clients that is accessing your site with mobile / desktop), experimental trusted proxy access filter and Proxy protocol switch in the webmin UI.

What's Changed

• V3.3.2-rc1 oauth2 update by @kjagosz in #1005
• Bump actions/checkout from 6.0.1 to 6.0.2 by @dependabot[bot] in #1013
• Update CHANGELOG.md by @Morethanevil in #1018
• Fix typo, change from "Any acess requesting" to "Any access requesting" by @coddec in #1023
• Bump actions/checkout from 6.0.1 to 6.0.2 by @dependabot[bot] in #1026
• Bump docker/login-action from 3.6.0 to 3.7.0 by @dependabot[bot] in #1025
• Update IP blacklist description text by @Psychoboy in #1034
• V3.3.2-rc1 by @tobychui in #1041
• Bump docker/build-push-action from 6.18.0 to 6.19.2 by @dependabot[bot] in #1043

New Contributors

• @coddec made their first contribution in #1023
• @Psychoboy made their first contribution in #1034

Full Changelog: v3.3.1...v3.3.2-rc1