v0.1.2

Fixed

• Config-line injection guard in WG_SERVER_ENDPOINT, peer endpoints, and the WG_PRE_UP / WG_POST_UP / WG_PRE_DOWN / WG_POST_DOWN hooks - newlines in these values would otherwise inject extra [Interface] or [Peer] keys into the generated config
• WG_DNS validation tightened from blocklist to allowlist (IPs, hostnames, commas, spaces only), rejecting all other characters up front
• Key and PSK file parsing now strips all whitespace, not only \r / \n - files written by editors that add trailing spaces or tabs no longer produce a broken .conf
• Monitor process reaped on shutdown: the background connection-monitor is now waited on after kill, closing a brief zombie window when the container stops
• Signal-loss window between the old trap '' INT TERM and the re-trap closed; SIGINT and SIGTERM are now handled by the parent throughout startup

Changed

• Peer IDs from WG_PEER_<ID>_PUBKEY are sorted with sort -V, so CLIENT1, CLIENT2, CLIENT10 appear in natural order in the generated config and in the startup log (previously: CLIENT1, CLIENT10, CLIENT2)

v0.1.1

The image is now available on Docker Hub as ivenos/compwire - all documentation and examples have been updated to reference it directly.

Changes

• feat: publish image to Docker Hub (ivenos/compwire) (#1)
• docs: switch all image references from GHCR to Docker Hub

v0.1.0

This is the first public release of compwire.

All features have been tested through an automated unit test suite covering config generation and input validation, and through real WireGuard integration tests running on amd64 and arm64.

If you run into any issues, please open a GitHub issue so I can look into it.

See the README for setup instructions and all available configuration options.