🐛 Bug Fixes

• Migrate DB before using for the first time @jamilbk (#1310)
• Add missing env var @jamilbk (#1309)

📝 Documentation

• Update default REST API docs path; Note on stdout api tokens @jamilbk (#1306)

What's Changed

• Hotfix default PK values on connectivity_checks table by @AndrewDryga in https://github.com/firezone/firezone/pull/1300
• Fix docs link by @jamilbk in https://github.com/firezone/firezone/pull/1303
• Boot minimal app for DB changes by @jamilbk in https://github.com/firezone/firezone/pull/1305

Full Changelog: https://github.com/firezone/firezone/compare/0.7.0...0.7.1

• Generate API docs from tests and Phoenix Controller docs @AndrewDryga (#1286)
• Allow running Firezone in a non-root directory @AndrewDryga (#1248)
• [Supercedes #1255] Replace npm with yarn @jamilbk (#1256)

✨ Features

• Use eval for create-or-reset-admin; expose with RESET_ADMIN_ON_BOOT @jamilbk (#1287)
• API Token CLI @jamilbk (#1271)
• Expose some http client ssl opts via HTTP_CLIENT_SSL_OPTS @jamilbk (#1221)
• REST API @jamilbk (#1155)

🐛 Bug Fixes

• Fix minor deploy docs typos @jamilbk (#1280)
• Fix docs page crash @jamilbk (#1265)
• Fix asserts -> assets typo @jamilbk (#1259)
• Remove broken link in docs @gongjason (#1253)

🧰 Maintenance

• Bump to 0.7.0 release @jamilbk (#1291)
• Add deprecation warning to postinst script @jamilbk (#1282)
• Bump phoenix_live_view from 0.18.3 to 0.18.6 @dependabot (#1278)
• Bump excoveralls from 0.15.1 to 0.15.2 @dependabot (#1274)
• Bump phoenix from 1.7.0-rc.0 to 1.7.0-rc.1 @dependabot (#1275)
• Bump gettext from 0.20.0 to 0.21.0 @dependabot (#1276)
• Bump telemetry from 1.1.0 to 1.2.0 @dependabot (#1277)
• Add more comprehensive REST API tests @jamilbk (#1269)
• Bump rubocop from 1.41.1 to 1.42.0 @dependabot (#1260)

📝 Documentation

• Add note on generating API token @jamilbk (#1294)
• Add HTTP_CLIENT_SSL_OPTS example @jamilbk (#1290)
• Don't assume PostHog is available @jamilbk (#1258)
• Update recommendations for local authentication @jamilbk (#1252)

🐛 Bug Fixes

• Conditionally append port to endpoint @jamilbk (#1247)

🧰 Maintenance

• Bump rubocop from 1.40.0 to 1.41.1 @dependabot (#1243)
• Bump pre-commit from 2.20.0 to 2.21.0 @dependabot (#1242)

🐛 Bug Fixes

• Fix sites.endpoint default when EXTERNAL_URL is missing @jamilbk (#1238)
• Fix InstallBlock links using BrowserOnly @jamilbk (#1239)

🧰 Maintenance

• Add SupportOptions component and utm_source for links @jamilbk (#1219)

🐛 Bug Fixes

• Removes hammer and hammer_plug deps and their code references @ssaunderss (#1230)
• Don't cache Elixir build in static_analysis workflow @jamilbk (#1227)
• Change foreign key constraint to cascading delete @jamilbk (#1235)
• fix: endpoint migration when EXTERNAL_URL is not present @conectado (#1232)

🐛 Bug Fixes

• Fix rollback for release_test.exs due to Ecto 3.9.2 @jamilbk (#1223)
• Support more dense QR codes with error correction level L @jamilbk (#1222)

🧰 Maintenance

• Fix missing PLT cache key @jamilbk (#1225)
• Enrichment @jamilbk (#1220)

Note: This release moves the WIREGUARD_DNS, WIREGUARD_ALLOWED_IPS and WIREGUARD_PERSISTENT_KEEPALIVE environment variables to the /settings/site page to be more consistent with other runtime configuration. They'll be populated there after you upgrade.

Furthermore, this release fixes IPv6 support for Docker containers. See our docs section on the changes required. For those upgrading, be sure you also add IPv6 addresses to your $HOME/.firezone/docker-compose.yml by setting the following fields:

services:
  firezone:
    networks:
      firezone-network:
        ipv6_address: 2001:3990:3990::99

# ...
networks:
  firezone-network:
    ipam:
      config:
        - subnet: 2001:3990:3990::/64
        - gateway: 2001:3990:3990::1

🐛 Bug Fixes

• Fix IPv6 routing for Docker-based deployments @jamilbk (#1204)
• Use site table fields, not ENV vars for optional WireGuard config @jamilbk (#1207)
• Fix whitespace @jamilbk (#1208)
• Allow IPv6 remote_ips in StatsUpdater @jamilbk (#1206)
• Add IPv6 address to interface in docker-compose prod @jamilbk (#1203)

🧰 Maintenance

• Bump wireguardex from 0.3.5 to 0.3.6 @dependabot (#1209)
• Use site table fields, not ENV vars for optional WireGuard config @jamilbk (#1207)
• Move IdP services to separate docker compose file @akrousset (#1198)
• Bump rubocop from 1.39.0 to 1.40.0 @dependabot (#1195)

📝 Documentation

• Document WIREGUARD_MTU is for server interface only @jamilbk (#1212)
• Update Docker IPv6 CIDR to use 2001:db8:1::/64 @jamilbk (#1213)
• General Docs Improvements @gongjason (#1194)

🐛 Bug Fixes

• Use application_version() to link back to repo @jamilbk (#1181)
• Fix AsyncAPI specification errors @jamilbk (#1177)
• Wrap magic link with url() @jamilbk (#1170)
• Update Docker migration script to match install improvements @jamilbk (#1166)

🧰 Maintenance

• Small improvements to make setup process easier for OS contributors @AndrewDryga (#1171)
• Bump hammer_plug from 2.1.1 to 3.0.0 @dependabot (#1176)
• Bump phoenix_live_reload from 1.4.0 to 1.4.1 @dependabot (#1174)

📝 Documentation

• Fix typo "MacOS" in user documentation @tyrann0us (#1161)
• docs: Fix Google SAML setup instruction @gongjason (#1168)

🐛 Bug Fixes

• Use complete Firezone URL for post_logout_uri @jamilbk (#1160)

🐛 Bug Fixes

• Fix typos @kianmeng (#1141)
• Fix intermittent assert_{patched,redirected} failures @jamilbk (#1125)
• Disallow netmasks in devices' ip to prevent overlaps in firewall @conectado (#1140)
• Change restart policy to unless-stopped @jamilbk (#1138)
• Prevent navigating to /user_devices/new when management is disabled @jamilbk (#1130)
• Ensure phoenix 1.7 is in subproject @jamilbk (#1128)
• Allow btree_gist extension to preexist @toreanderson (#1122)

🧰 Maintenance

• Update Phoenix to 1.7.0-rc.0 @jamilbk (#1119)
• Run checks on master too @jamilbk (#1143)
• Remove nodejs from test workflow @jamilbk (#1131)
• Bump Elixir to 1.14.2, OTP to 25.1.2 @jamilbk (#1129)
• Add codespell @jamilbk (#1142)
• Bump excoveralls from 0.15.0 to 0.15.1 @dependabot (#1154)
• Bump guardian from 2.3.0 to 2.3.1 @dependabot (#1153)
• Bump akhilerm/tag-push-action from 2.0.0 to 2.1.0 @dependabot (#1152)
• Bump remote_ip from 1.0.0 to 1.1.0 @dependabot (#1126)
• Conventional Commits @jamilbk (#1116)

📝 Documentation

• Add google SAML doc and update existing guides @gongjason (#1127)
• Add missing LOCAL_AUTH_ENABLED config to docs @jamilbk (#1124)

Firezone 0.6.8 contains many improvements related to OIDC and SAML authentication and is recommended for all users.

See our updated docs on SAML authentication for integration your provider:

https://docs.firezone.dev/authenticate/saml/

✨ Features

• Support end_session_uri, custom redirect_uri and PKCE @jamilbk (#1110)

🐛 Bug Fixes

• Allow pgcrypto extension to preexist @toreanderson (#1114)
• Update esaml to properly parse signed assertions @jamilbk (#1113)

🧰 Maintenance

• Bump rubocop from 1.38.0 to 1.39.0 @dependabot (#1106)
• Add AsyncAPI WIP @jamilbk (#1104)
• Bump rubocop from 1.37.1 to 1.38.0 @dependabot (#1096)
• Bump floki from 0.33.1 to 0.34.0 @dependabot (#1097)

📝 Documentation

• Updated upgrade.mdx "docker-compose" to "docker compose" @thermionic (#1112)
• Update esaml to properly parse signed assertions @jamilbk (#1113)
• Add onelogin and okta SAML docs @gongjason (#1108)
• Backlink config reference to configure guide @jamilbk (#1107)

🐛 Bug Fixes

• fetch logo from config instead of default image @mostafahussein (#1098)
• Use IP for firezone @jamilbk (#1102)

🐛 Bug Fixes

• Build/fix no prefix @conectado (#1089)
• 🐛 Make IPs match diagram @pemontto (#1072)
• double-quote @jamilbk (#1095)
• tlsOpts @jamilbk (#1094)
• Use tls opts @jamilbk (#1093)
• remove rest api reference in docs for now @jamilbk (#1088)
• check for docker compose before docker-compose @jamilbk (#1084)
• Use named volume for postgres @jamilbk (#1076)
• Add trailingSlash @jamilbk (#1074)

🧰 Maintenance

• Allow RELEASE_NAME to be overridden in environment @marbindrakon (#1087)
• Bump plug_cowboy from 2.5.2 to 2.6.0 @dependabot (#1082)
• Bump andstor/file-existence-action from 1 to 2 @dependabot (#1080)
• Bump plug from 1.13.6 to 1.14.0 @dependabot (#1083)
• Bump phoenix_live_reload from 1.3.3 to 1.4.0 @dependabot (#1081)
• specify caddy-opts @jamilbk (#1077)
• Fix links related to trailingSlash @jamilbk (#1075)

📝 Documentation

• Add restart note @jamilbk (#1085)
• remove rest api reference in docs for now @jamilbk (#1088)
• Add a building from source doc for Firezone @akrousset (#1078)

🐛 Bug Fixes

• don't swallow errors @jamilbk (#1070)
• Fix CADDY_OPTS @jamilbk (#1065)
• Polish install, migration script, docs @jamilbk (#1050)

🧰 Maintenance

• Minor docs fixes @jamilbk (#1071)
• Use :live, not live.html @jamilbk (#1069)
• Bump phoenix_live_dashboard from 0.7.1 to 0.7.2 @dependabot (#1067)
• Bump phoenix_live_view from 0.18.2 to 0.18.3 @dependabot (#1068)
• Bump phoenix_swoosh from 1.0.1 to 1.1.0 @dependabot (#1064)
• Bump phoenix from 1.6.14 to 1.6.15 @dependabot (#1062)
• Bump ex_doc from 0.28.6 to 0.29.0 @dependabot (#1056)
• Bump rubocop from 1.36.0 to 1.37.1 @dependabot (#1055)

📝 Documentation

• Add details on uninstalling docker deployment @jamilbk (#1066)
• docs: rename business to enterprise @gongjason (#1060)
• Polish install, migration script, docs @jamilbk (#1050)

🐛 Bug Fixes

• Docker install @jamilbk (#1041)
• Fix configure bug for admins @jamilbk (#1045)
• Make install script work on macOS @jamilbk (#1044)
• Always create interface inside container @jamilbk (#1042)
• docker_install -> install @jamilbk (#1040)

🐛 Bug Fixes

• Use defaults in server script @jamilbk (#1038)

🧰 Maintenance

• Rename docker install script @jamilbk (#1036)
• Bump actions/cache from 3.0.10 to 3.0.11 @dependabot (#1029)
• Bump JamesIves/github-pages-deploy-action from 4.4.0 to 4.4.1 @dependabot (#1030)

📝 Documentation

• fix manual docker steps @jamilbk (#1037)
• typo for 192.168.0.0/16 @thermionic (#1035)

🐛 Bug Fixes

• REmove old versions of docs @jamilbk (#1034)
• Fix build artifact download for publish @jamilbk (#1032)
• Sleep in docker install script @jamilbk (#1031)

• Bump OTP @jamilbk (#1028)

🎉 Release 0.6.0 🎉

Firezone 0.6.0 contains two main features:

• Docker support is finally here! See our migration docs for instructions to upgrade: https://docs.firezone.dev/administer/migrate
• Support for SAML 2.0 authentication methods

✨ Features

• allow dns hosts; fix notifications concurrency issues @jamilbk (#1027)
• Build docker image in build workflow; Update automatic install to use Docker @jamilbk (#983)
• Docker Support

🧰 Maintenance

• Better validate OIDC and SAML configs @jamilbk (#1026)
• Swallow OIDC errors @jamilbk (#1025)
• Bump elixir/otp @jamilbk (#1021)
• 0.6.0 @jamilbk (#1004)
• Fix table @jamilbk (#1019)
• Docs sec controls @jamilbk (#1018)
• Fix docs links @jamilbk (#990)
• revert script name for now @jamilbk (#988)
• Bump phoenix_live_view from 0.18.1 to 0.18.2 @dependabot (#1011)
• Bump excoveralls from 0.14.6 to 0.15.0 @dependabot (#1012)
• Move persistent term cache to cachex @jamilbk (#1003)
• Bump phoenix_live_view from 0.18.0 to 0.18.1 @dependabot (#1000)
• Fix error due to updated LiveView @jamilbk (#1001)
• Bump actions/cache from 2 to 3.0.10 @dependabot (#997)
• Bump ecto_sql from 3.8.3 to 3.9.0 @dependabot (#998)
• Bump phoenix from 1.6.12 to 1.6.13 @dependabot (#999)
• Use EXTERNAL_URL host as default endpoint @jamilbk (#986)

📝 Documentation

• Add Keycloak doc and clean up others for OIDC providers @akrousset (#1024)
• Add keycloak dev @jamilbk (#1023)