Skip to content

Latest commit

 

History

History
82 lines (60 loc) · 3.81 KB

CHANGES.md

File metadata and controls

82 lines (60 loc) · 3.81 KB
Raw

CHANGES

v3.0.1-beta (2024-04-22)

We're preparing for many breaking changes, stay tuned!

  • Database backend upgrade:
    • We're now using SQLite v3 instead of simple file systems v2
    • Upgrade from v2 to v3 is automatic, certs database will be migrated if possible
    • The SQLite file is saved to .certs/db.sqlite, users is advised to remove v2 files if migration has been done without problems
  • Stat endpoint:
    • We provide /stat endpoint with HOME_DOMAIN env set instead of old separate domain
    • Should be much faster to execute since we count rows with SQLite
    • The domain count is reduced since SQLite only captures domains with correct config
      • While old v2 also count domains with failed attempts
      • This reduces our stat from ~186000 domains to ~46700 domains!
  • Depedencies change:
    • Upgrade jose from v3 to v5
    • Removed pem in favor of rsa-csr to avoid OpenSSL binaries
    • Added better-sqlite3 for new SQLite DB backend
  • Added Domain name and CAA Test conforming Let's Encrypt requirements
    • CAA and TXT records should be correctly handled when using CNAME
    • Fix to handle multiple CAA records. Contributed by @djbe
  • Test and code quality improvements
    • More complete JSDoc annotations (typescript is overkill for Node)
    • Added Unit tests with bun test to test utility logics
    • Integrated tests: Use extra test certs instead of ignoring insecure ones
    • Added CI for Docker image build. Contributed by @djbe
    • Added CI for Linting and Dependabot. Contributed by @djbe

v3.0.0-beta (2024-04-09)

  • Add integration tests with Pebble
  • Add a domain whitelisting mechanism using WHITELIST_HOSTS envar
  • Removed pm2 and dotenv to make CI's installation faster
    • Please install pm2 manually if you need that (npx pm2)
    • Please load .env manually with --env-file=.env (Node >= 20)
  • index.js now exports plainServer and secureServer

v2.6 (2024-02-06)

  • Throw error when directly accessing by IP address

v2.5 (2023-04-24)

  • Add http-status TXT record option to set HTTP status code. Contributed by @dzegarra
  • Improve lock mechanism when a website is verificating certs.

v2.4 (2023-04-21)

  • Fix global service lock when a website is verificating certs.
  • Update code deps, refactor imports to ESM.

v2.3 (2022-08-16)

  • Add stat API s.forwarddomain.net, separate node script.

v2.2 (2022-06-16)

  • Moving all parameters to .env file
  • Add a domain blacklist mechanism (we received a report that this service is used for phising activity, for the first time)
    • Configure using BLACKLIST_HOSTS

v2.1 (2022-01-03)

  • Added AAAA record in r.forwarddomain.net for IPv6 support. (see #2 for apex domains setup)

v2.0 (2021-09-21)

  • Dropped forward-domain-cert-maintainer= record (as of LE explanation the provider is the bearer).
  • The software is now keeping LE's account keypair instead of generating new one every restart.
  • Changed IPv4 from 206.189.61.89 to 167.172.5.31 (we use DO's floating IP address now)
  • Changed TXT location to subdomain _ (because TXT can't be put together with CNAME)
  • Dropped IPv6 record.

v1.0 (2021-08-23)

  • First release