digitalocean/marketplace-pi-hole-vpn v0.2.1-beta

SSH Lock & IPV6 Fixes

Repository: digitalocean/marketplace-pi-hole-vpn

Tag: v0.2.1-beta

Published: 2022-10-04T14:33:41Z

Prerelease: yes

Release notes:

Lock SSH in image

Lock SSH in image instead of during first boot. Locking SSH on first boot is racey and allows a user to login before setup is complete By locking in the image, it prevents this race.

Also, provide feedback to user to help them avoid being temporarily blocked by firewall during first boot.

Fix WireGuard IPv6 support

• If server has a public IPv6 address on eth0, use that for client configs; otherwise, use the public IPv4 address on eth0. Previously, it always defaulted to IPv4. If the user wants to change the client config to use the IPv4 address when an IPv6 address is set, they can do so manually.
• Add WireGuard firewall rules as part of WireGuard setup instead of postup / postdown. Previously, if an IPv6 address was not set, postup / postdown did not work correctly. This is a more resilient approach.
• Change ip6tables icmp allow rule to allow ipv6-icmp. Previously, ipv6-icmp was unintentionally blocked.
• Set IPv6 DNS in client config. Previously, only Pi-hole's IPv4 address was set.