Changelog for headscale-debugsource-0.25.0-1.1.x86_64.rpm :

* Thu Feb 13 2025 Richard Rahl - update to 0.25.0: BREAKING:
* Authentication flow has been rewritten
* Remove support for Tailscale clients older than 1.62 (Capability version 87) CHANGES:
* oidc.map_legacy_users is now false by default
* Print Tailscale version instead of capability versions for outdated nodes
* Do not allow renaming of users from OIDC
* Change minimum hostname length to 2
* Fix migration error caused by nodes having invalid auth keys
* Pre auth keys belonging to a user are no longer deleted with the user
* Pre auth keys that are used by a node can no longer be deleted
* Rehaul HTTP errors, return better status code and errors to users
* Fri Feb 07 2025 Richard Rahl - update 0.24.3:
* Fix migration error caused by nodes having invalid auth keys
* Pre auth keys belonging to a user are no longer deleted with the user
* Pre auth keys that are used by a node can no longer be deleted- update to 0.24.2:
* Fix issue where email and username being equal fails to match in Policy
* Delete invalid routes before adding a NOT NULL constraint on node_id- update to 0.24.1:
* Fix migration issue with user table for PostgreSQL
* Relax username validation to allow emails
* Remove invalid routes and add stronger constraints for routes to avoid API panic
* Fix panic when derp.update_frequency is 0- update to 0.24.0: BREAKING:
* Remove dns.use_username_in_magic_dns configuration option
* Having usernames in magic DNS is no longer possible.
* Remove versions older than 1.56
* Clean up old code required by old versions
* If you depend on a Headscale Web UI, you should wait with this update until the UI have been updated to match the new API.
* GET /api/v1/user/{name} and GetUser have been removed in favour of ListUsers with an ID parameter
* RenameUser and DeleteUser now require an ID instead of a name. CHANGES:
* Improved compatibility of built-in DERP server with clients connecting over WebSocket
* Allow nodes to use SSH agent forwarding
* Fixed processing of fields in post request in MoveNode rpc
* Added conversion of \'Hostname\' to \'givenName\' in a node with FQDN rules applied
* Fixed updating of hostname and givenName when it is updated in HostInfo
* Fixed missing stable-debug container tag
* Loosened up server_url and base_domain check. It was overly strict in some cases
* CLI for managing users now accepts --identifier in addition to --name, usage of --identifier is recommended
* Add dns.extra_records_path configuration option
* Support client verify for DERP
* Add PKCE Verifier for OIDC
* Thu Jan 02 2025 Marcus Rueckert - Fix the system integration - actually build and use the sysuser pre snippet so that the user is created before tmpfiles.d tries to create files- no longer break debugsymbols for the binary (remove -s -w)- use systemd macros for paths- ensure proper requires/ordering for sysuser/systemd
* Wed Sep 18 2024 Richard Rahl - update to 0.23.0:
* Code reorganisation, a lot of code has moved
* Change the structure of database configuration, see config-example.yaml - Old structure has been remove and the configuration must be converted - Adds additional configuration for PostgreSQL for setting max open, idle connection and idle connection lifetime
* API: Machine is now Node
* Remove support for older Tailscale clients (supported >=1.42)
* Headscale checks that at least one DERP is defined at start
* Embedded DERP server requires a private key
* Prefixes are now defined per v4 and v6 range
* MagicDNS domains no longer contain usernames
* YAML files are no longer supported for headscale policy (use HuJSON)
* DNS configuration has been restructured
* Use versioned migrations
* Make the OIDC callback page better
* SSH support
* State management has been improved
* Use error group handling to ensure tests actually pass
* Fix hang on SIGTERM
* Send logs to stderr by default
* Fix TS-2023-006 security UPnP issue
* Turn off gRPC logging
* Added the possibility to manually create a DERP-map entry
* Add support for deleting api keys
* Add command to backfill IP addresses for nodes missing IPs from configured prefixes
* Log available update as warning
* Add autogroup:internet to Policy
* Restore foreign keys and add constraints
* Make registration page easier to use on mobile devices
* Make write-ahead-log default on and configurable for SQLite
* Add APIs for managing headscale policy
* Fix for registering nodes using preauthkeys when running on a postgres database in a non-UTC timezone
* Make sure integration tests cover postgres for all scenarios
* CLI commands (all except serve) only requires minimal configuration
* CLI results are now concistently sent to stdout and errors to stderr
* Fix issue where shutting down headscale would hang
* add shutdown that asserts if headscale had panics
* Thu Apr 18 2024 Richard Rahl - remove CAP_CHOWN from systemd unit file, as it\'s unneeded
* Wed Dec 20 2023 Richard Rahl - initial packaging