Wiregate

• Overhauled Installer
  -switched to checkbox selector menu
  +Added Darkwire.io option

• Updated UI (Thanks D.Zou @ WG-Dashboard & Contributors)
  + Dark Mode 🌗
  + Data Usage Graph 📈
• Switched to Docker volumes for Wiregate relevant data
• Added Nginx to serve Uwsgi
• Nginx & Uwsgi config optimization for WG-Dashboard
• Master Peer Named in Admin Zone
• Zone Iptable rules now accesible in the wg_iptables: volume
• Flask Key Rotates on Container Restarts and 4000+ charters long
• Persists Peer Data across container updates & restarts
• Arm 32bit builds are back (25s builds 😃)
• Docker Image Performance Improvements & Size reduction
• Fixed Installer
• Added Auto Swap file for potato deployments 🥔 IE. 512 MB RAM, 1 core Linux VPS)
• No Ipv6, increases attack surface.
• Removed API button from Channels (Help Needed to Implement a few Ideas)
• Renamed Channels to WireChat & changed local URL to http://wire.chat
• Wiregate can be deployed in a standalone config for easy combination in other docker stacks -

wiregate:
image: noxcis/wg-dashboard:kraken #the latest release build tag has auto daily builds for CVE mitigation
container_name: wiregate
cap_add:
	- NET_ADMIN
	- SYS_MODULE
restart: unless-stopped
volumes:
	- wg_configs:/etc/wireguard
	- wg_data:/home/app/dashboard-config
	- wg_db:/home/app/db
	- wg_iptables:/home/app/Iptables
	- ./Master-Key:/home/app/master-key
environment:
	- WG_DASH_USER=admin
	- WG_DASH_PASS=admin
	- WG_DASH_SERVER_IP=0.0.0.0
	- WG_DASH_DNS=1.1.1.1, 1.0.0.1
	- WG_DASH_PEER_ENDPOINT_ALLOWED_IP=0.0.0.0/0
	- WG_DASH_KEEP_ALIVE=21
	- WG_DASH_MTU=1420
	- WG_DASH_PORT_RANGE_STARTPORT=443
ports:
	- "443-446:443-446/udp" # WireGuard Listen Ports
	#- 8000:80/tcp  #Uncomment to expose Wiregate dashboard to the open internet
sysctls:
	- net.ipv4.ip_forward=1
	- net.ipv4.conf.all.src_valid_mark=1

volumes:
	wg_data:
	wg_configs:
	wg_db:
	wg_iptables:
	
	````

## What's Changed
* Kraken by @NOXCIS in https://github.com/NOXCIS/Wiregate/pull/32


**Full Changelog**: https://github.com/NOXCIS/Wiregate/compare/cetus...kraken

• Minor Release

What's Changed

• Quickdev by @NOXCIS in https://github.com/NOXCIS/Wiregate/pull/31

Full Changelog: https://github.com/NOXCIS/Wiregate/compare/mantis-shrimp...cetus

• Added iptables Rules for Wireguard Interfaces
• Added Client Network Access Permission Zones
• Improved Setup Script
• Improved Folder Structure
• Improved Security Policy
• Removed ability to set number of interfaces
• increased Logging output for WG-Dash container for debugging
• Wireguard Dashboard Hardening
• Docker Network Hardening

What's Changed

• Tables by @NOXCIS in https://github.com/NOXCIS/Wiregate/pull/29

Full Changelog: https://github.com/NOXCIS/Wiregate/compare/marlin...mantis-shrimp

• Changed Name to Wiregate
• Debian Installer Support
• Dashboard Hardening
• uWSGI no longer using root
• Install Script improvements
• Fixed Channels CVE's
• Enjoinment Variables self Destruct
• Bash History Self Destruct
• Fixed Auto Prereq's check and install

What's Changed

• Tinfoil by @NOXCIS in https://github.com/NOXCIS/Wiregate/pull/27

Full Changelog: https://github.com/NOXCIS/Wiregate/compare/orca...marlin

• Improved Installer
• Fixed uWSGI on WG-Dash
• WG-Dash User & Pass now set from installer
• switched from sha256 to blowfish for WG-Dash

What's Changed

• Wsgi fix by @NOXCIS in https://github.com/NOXCIS/Worm-Hole/pull/26

Full Changelog: https://github.com/NOXCIS/Worm-Hole/compare/hammerhead...orca

• Added AdGuard Install Option
• Improved Reset Functions
• Improved Install Script

• Fixed Docker Image CVE's
• Added Preset Environment Files and option in installer
• Improved Installer
• Fixed WireGuard Config permissions
• Master Key Encryption
• Added Channels messenger for Secure Private LAN based Compunction
• Improved Folder Structure
• Improved Unbound Configuration
• Removed Unbound Conditional Forwarding
• Updated Readme

What's Changed

• Added Multi Architecture Support
• No Port Exposure
• Dashboard Access via WireGuard Connection Only
• Improved Install Script
• Auto Generate Client Config
• Improved Setup Instructions
• Added local domains for Pihole & WireGuard Dashboards
• Added WireGuard Reset Option

Full Changelog: https://github.com/NOXCIS/Worm-Hole/compare/stingray...squid

• Fixed Docker Image CVE's
• Added Preset Environment Files and option in installer
• Improved Installer
• Fixed WireGuard Config permissions
• Master Key Encryption
• Added Channels messenger for Secure Private LAN based Compunction
• Improved Folder Structure
• Improved Unbound Configuration
• Removed Unbound Conditional Forwarding
• Updated Readme

What's Changed

• Blackhat by @NOXCIS in https://github.com/NOXCIS/Worm-Hole/pull/15
• Blackhat by @NOXCIS in https://github.com/NOXCIS/Worm-Hole/pull/16

Full Changelog: https://github.com/NOXCIS/Worm-Hole/compare/squid-multi-arch...moray

What's Changed

• Lockdown by @NOXCIS in https://github.com/NOXCIS/Worm-Hole/pull/9

Full Changelog: https://github.com/NOXCIS/Worm-Hole/compare/hammerhead...ocean-gate

• Removed Exposed ports from WG Dashboard Dockerfile.
• Updated WG Dashboad image to use Alpine Linux instead of Ubuntu.
• Updated WG Dashboad image to use Uwsgi instead of Gunicorn.
• Removed WG Dashboard volume mount (unnecessary).
• Fixed world accessible WireGuard server config files.
• Improvements to WG Dashboard startup script logic (wgd.sh)
• Improvements to WG Dashboard entrypoint script logic (entrypoint.sh)
• Improvements to installation script.
• Improved nginx.conf

+multi interface config fixed
+interface config now auto start

• Added custom unbound config
• Improved installation script.
• Updated WG-Dash docker image (no longer resets on server restart)

• nginx

  • Dashboard redirect page now on localhost:80

• firwallD

  • Auto Setup via setup script.
  • Added firewall rules to only allow 80,443 on public zone and 10086, 51820/udp on docker zone.

• Portainer

  • Unexposed ports 9000 & 8000.
  • Only accessible through tunnel connection @ 10.2.0.5:9000.

• Setup script improvements

  • Removed redundant commands
  • Added better descriptors
  • Reduced verbosity
  • Added headless setup script for faster deployment.

Working Beta

• added Readme
• cleaned folder structure

Working Beta

• fixed unbound

working beta

Full Changelog: https://github.com/NOXCIS/Worm-Hole/commits/beta