23.0

This release should not break anything due to auto-migration support. Yet there still might be some corner cases that will not end up in any data loss but will prevent expected behavior.

Check out the migration section of README first.

Changed

• IPSec-based configuration replaced with swanctl-based one;
• Entrypoint script commands altered accordingly.

Added

• /etc/ipsec.secrets auto-migration functionality;
• Multiple PSK credentials support and management.

Removed

• NDPPD service and configuration.

22.3

Removed

• Non-EC Diffie Hellman group IKE and ESP algorithms.

Changed

• Profile and service (user) names contains a host value now.

22.2

Changed

• Entrypoint script now handles empty /etc/ipsec.secrets properly.

22.1

Changed

• Separate profile templates replaced with a single (universal) one;
• Minor profile template refactoring.

Added

• Profile template now has VPN DNS (Cloudflare) addresses.

Fixed

• Entrypoint script’s profile compilation output.

22.0

First (CalVer) numbered release. The current version of strongswan is 5.9.1.

Added

• GitHub workflow for an image building and publishing;
• @dependabot configuration.

Changed

• Base image changed to bitnami/minideb:bullseye;
• Entrypoint script updated to use legacy iptables tools (because of nf_tables);
• README updated.