Commit Graph

  • d0229ab2df docs: clarify production validation scope main founder 2026-08-29 08:06:58 +05:00
  • a21cc0f251 docs: record clean production acceptance founder 2026-08-29 07:54:45 +05:00
  • 21dc1e44c4 docs: record 0.3.1 validation results v0.3.1 founder 2026-08-28 22:10:03 +05:00
  • 37573022c2 fix: use documented swapon show columns founder 2026-08-28 21:52:29 +05:00
  • 7390d1fa2c fix: scope fstab fallback mode to non-unix builds founder 2026-08-28 20:07:17 +05:00
  • ff22a9ffea fix: make build script executable and shellcheck-clean founder 2026-08-28 19:32:10 +05:00
  • d3c532c936 docs: clarify BBR policy and upstream revision founder 2026-08-28 18:52:46 +05:00
  • 0c32c9abbe fix: harden production topology and runtime state founder 2026-08-28 15:19:12 +05:00
  • 9dd4732655 fix: harden firewall and traffic reconciliation founder 2026-08-28 05:56:40 +05:00
  • 9787cb2d23 perf(traffic): optimize production reconciliation founder 2026-08-28 02:43:26 +05:00
  • 185991504a feat: support AmneziaWG 3.1 founder 2026-08-28 00:28:26 +05:00
  • 3912b91bc4 fix(daemon): record the docker events failure, not only the recovery [P2] founder 2026-08-07 06:15:38 +05:00
  • 383e67605a fix(swap): activate the previous swapfile in place when it cannot be moved back [P0] founder 2026-08-07 06:05:59 +05:00
  • 61dcea2d25 fix(swap): never reduce active swap to zero in a rollback [P0] founder 2026-08-07 05:42:09 +05:00
  • 6b3e5d1b2f fix(swap): never release the fallback swap during a failed rollback; release 0.3.0 [P0] founder 2026-08-07 05:23:42 +05:00
  • 431732396b fix: apply nft batches in the selected namespace, complete the swap rollback [P0] founder 2026-08-07 05:08:20 +05:00
  • eea787d6f8 chore: reap docker events, cut per-cycle work, use mkswap --file [P1/P2] founder 2026-08-07 04:50:57 +05:00
  • dd5be47ef7 fix(firewall): replace nftables tables in one transaction [P0] founder 2026-08-07 04:47:20 +05:00
  • fa44ffbb24 fix: verify the state directory before use, keep fstab copies at the original mode [P1] founder 2026-08-07 04:44:35 +05:00
  • 516e6209fc fix(swap): make every swap transition reversible [P0] founder 2026-08-07 04:41:46 +05:00
  • 61ce1beb19 fix: make the reboot plan trustworthy and report unreadable sysctl files [P2] founder 2026-08-07 04:18:35 +05:00
  • 116b1ea91a fix(swap): roll back partial teardown, resize without a swapless gap, lock the disable path [P1] founder 2026-08-07 04:15:40 +05:00
  • 322f67f69a fix(swap): bind ownership to device+inode, restrict swap.path to root-owned roots [P0] founder 2026-08-07 04:08:52 +05:00
  • c2cf194a68 fix(fs): refuse to write through symlinks, make fstab validation mandatory [P0/P1] founder 2026-08-07 04:04:01 +05:00
  • 6643328567 docs+test(wg): column count never identifies an AWG version [P2] founder 2026-08-06 23:03:10 +05:00
  • c6fa1a0af9 chore: drop dead code and the stale wireguard-tools dependency [P2] founder 2026-08-06 22:59:18 +05:00
  • bf43b763cd refactor(lock): use kernel file locking instead of a hand-rolled PID lock [P2] founder 2026-08-06 22:56:59 +05:00
  • a9b6e3c15d fix(systemd): drop the duplicate ensure-swap, use Type=exec and stepped restart backoff [P1] founder 2026-08-06 22:54:11 +05:00
  • 63dcf7676c fix(config): tighten CIDR, interface and list validation [P1] founder 2026-08-06 22:52:17 +05:00
  • e9f0e29f75 refactor: one ownership model for every file written under /etc [P1] founder 2026-08-06 22:50:19 +05:00
  • a895295701 fix(swap): never touch an unowned swapfile, activate before deactivating [P0] founder 2026-08-06 21:07:55 +05:00
  • 549fbcae31 fix(swap): make the /etc/fstab rewrite transactional [P0] founder 2026-08-06 21:02:38 +05:00
  • 7254ebe9e4 traffic: make apply and verify share one class-id assignment founder 2026-08-06 18:53:24 +05:00
  • dbceda5c13 refactor(firewall): split firewall.rs by subsystem, collapse duplicated test fixtures founder 2026-08-06 18:51:31 +05:00
  • b42d99068b refactor(traffic): split traffic.rs into a module directory, code move only founder 2026-08-06 18:46:52 +05:00
  • 84275d0fe4 status: deduplicate the healthy and degraded paths, keep the System block contiguous founder 2026-08-06 18:41:39 +05:00
  • d98ade42ce docs: unify language contract to Russian and reconcile the spec with the code founder 2026-08-06 16:45:00 +05:00
  • 16214f3c66 AmneziaWG 3.0 readiness: centralize wg CLI contract, drop dead host-side fallback founder 2026-08-06 15:32:26 +05:00
  • 5edefa74b1 Обновить README.md Crimson 2026-06-23 03:03:55 +00:00
  • 9a80afdb9e Обновить README.md main_v0.2.6 Crimson 2026-06-21 17:34:01 +00:00
  • 0d0b1c006b fix(sysctl_tuning): complete fix36 production reconcile and bbr modules-load lifecycle founder 2026-05-28 20:04:08 +05:00
  • 4f384bcff0 Decouple sysctl runtime validation and modprobe dependencies founder 2026-05-28 12:12:42 +05:00
  • 10b2d0aefb Production sysctl_tuning hardening and upgrade-safe defaults founder 2026-05-28 12:01:08 +05:00
  • 2c27bff800 Реализован production-модуль sysctl_tuning и полная интеграция fix33 founder 2026-05-28 11:31:13 +05:00
  • 4ff2bb2c30 Документация: унификация проверок для amnezia-awg2 и amnezia-awg founder 2026-05-12 21:19:08 +05:00
  • c7b5da98f4 Документация DNS: динамический deep-check и уточнение критериев founder 2026-05-12 21:12:15 +05:00
  • 8e3e924952 Документация и postinst UX: безопасная проверка checksum и preflight-first founder 2026-05-12 20:46:57 +05:00
  • c78015f76e Конфиг: переведены комментарии в config.example.toml на русский founder 2026-05-12 20:37:52 +05:00
  • 4757799f04 Документация: обязательный production-профиль AmneziaDNS и правила DNS/53 founder 2026-05-12 20:36:17 +05:00
  • b3d274f89d Документация и UX установки: полный production-fix по fix32 founder 2026-05-12 20:16:56 +05:00
  • 2ee50bfa8e docs: уточнён формат SSH-ключа для установки через Amnezia main_v0.1.6 founder 2026-05-12 18:41:23 +05:00
  • d1d919a615 fix31: финальный polish формулировок без исторических отсылок founder 2026-05-12 18:05:27 +05:00
  • bb37da72c0 fix30: очищены old-bash формулировки и уточнён class-id контракт founder 2026-05-12 17:50:15 +05:00
  • b493c9df3b chore: удалить временный fix29.txt из репозитория founder 2026-05-12 17:28:48 +05:00
  • 44a62cf634 fix29: удалён legacy, введён Debian 13-only и обновлён rollback founder 2026-05-12 17:26:41 +05:00
  • 69c737bcf4 fix28: обновлена production-документация и упаковка docs в deb founder 2026-05-12 16:56:36 +05:00
  • a9bac8fdad fix27: исправлен парсер root-класса tc без ложных совпадений founder 2026-05-12 14:34:28 +05:00
  • ead1130e5f fix25: исправлена идемпотентность swap и удаления default qdisc founder 2026-05-12 14:24:02 +05:00
  • a64fae7fe6 fix24: исправлен production-парсинг версии пакета в build.sh founder 2026-05-12 14:12:51 +05:00
  • c10fb775e9 Fix23: вернуть production ssh_port 2323 в конфиге и документации founder 2026-05-12 14:02:12 +05:00
  • 6e586c7af9 Fix23: финализация production-сборки 0.1.4 founder 2026-05-12 14:00:54 +05:00
  • 44d3593944 Fix22: подготовка production 0.1.4 и стабилизация сервиса founder 2026-05-12 13:47:37 +05:00
  • ff2ae98d30 Fix21: прод-фиксы swap/firewall/wg без легаси founder 2026-05-12 13:37:37 +05:00
  • c463e64205 Исправлены runtime-баги firewall policy и парсера swapon для Debian 13 founder 2026-05-12 13:15:14 +05:00
  • bbefd299fd Исправлен packaging-gate для build-host без runtime-зависимостей founder 2026-05-12 12:46:06 +05:00
  • 5800b6c874 Исправлен парсер tc-хитов для строк match+success founder 2026-05-12 12:34:37 +05:00
  • bff9c50a6b Исправлены clippy-замечания под gate -D warnings founder 2026-05-12 12:19:47 +05:00
  • d114784d7d Убраны дубли проверок в build gate и package выводе founder 2026-05-12 11:54:28 +05:00
  • 1e2a3b5b67 Добавлен fallback диагностики FORWARD через nft и расширен вывод status founder 2026-05-12 11:48:18 +05:00
  • ed786f165f Исправлен сломанный unit-тест docker parser в docker.rs founder 2026-05-12 11:33:32 +05:00
  • f8c6f2e92d Уточнена диагностика UDP port mapping для Docker и обновлены checklist/docs founder 2026-05-11 19:30:25 +05:00
  • adc244daa7 Добавлена диагностика Docker/Amnezia port path в status и уточнена документация host firewall founder 2026-05-11 19:22:39 +05:00
  • 640178a592 Исправлен drift-check host firewall для established/related, добавлены тесты и trim policy в status founder 2026-05-11 18:54:15 +05:00
  • 36600c0a5a fix10: стабилизация host firewall first-run и no-op reconcile founder 2026-05-11 18:45:17 +05:00
  • ed4a571d71 fix9: безопасный host firewall apply и строгий конфиг founder 2026-05-11 18:33:46 +05:00
  • 3d5bec424c chore: форматирование тестов wg и reboot module founder 2026-05-11 18:16:26 +05:00
  • 381c106f9d fix8: продакшн host firewall + dual reconcile firewall founder 2026-05-11 18:14:46 +05:00
  • 7a4e9764b1 fix7: продакшен-реализация полного reconcile swap и интеграций founder 2026-05-11 17:30:15 +05:00
  • 819cc9c308 Документация и runtime: полный production-fix по fix6 без legacy founder 2026-05-10 22:58:59 +05:00
  • 83c4e3ba05 workspace и reboot-модуль: второй продакшн бинарь и упаковка founder 2026-05-10 21:30:06 +05:00
  • d4cd6a4e43 traffic_core: продакшн-фиксы runtime и валидации founder 2026-05-10 21:29:52 +05:00
  • a4bb7adb4f Traffic: исправить детект ingress redirect для реального вывода tc founder 2026-05-10 18:07:05 +05:00
  • b83f2ee3a9 Пакет: убрать docker.io из metadata и улучшить help/docs layout founder 2026-05-10 17:36:31 +05:00
  • 9d2d2bc0c2 Сборка: добавить production packaging flow через .deb founder 2026-05-10 17:26:11 +05:00
  • 76c6b52f4e Полный продакшн-фикс: parity с old bash, drift-recovery, status/runtime и builder separation founder 2026-05-10 17:09:39 +05:00
  • b8d2c4592b Полный production-рефакторинг билдера, drift-reconcile и документации по up5 founder 2026-05-10 16:42:09 +05:00
  • b3dad5974c Полный продакшн-фикс: hardened build/install, drift/firewall/wg проверки и актуализация документации founder 2026-05-10 15:41:44 +05:00
  • 535c1dbc33 Полная реализация production-фиксов из up3: anti-torrent rebuild, peer-status, drift rate/ceil, reboot window founder 2026-05-10 00:15:17 +05:00
  • d9f140b3e0 Полностью доведена production-логика AWG2 harness по up2: strict execution, tc parser, anti-torrent, status и документация founder 2026-05-09 23:38:53 +05:00
  • e7818054e8 Рефакторинг под прод: nsenter-first транспорт, drift-aware reconcile, hardening daemon/lock/reboot/swap, расширенный status и build-скрипт founder 2026-05-09 22:03:30 +05:00
  • d937f816bf feat: bootstrap awg2 harness rust workspace and docs founder 2026-05-09 02:17:25 +05:00