Update wireguard to version 15.0.0
🤖 This is an automated pull request to update wireguard to version 15.0.0. This PR must be reviewed and tested before merging.
Auto-generated update considerations:
- Breaking change requiring complete fresh installation and manual import of existing configurations
- Almost all environment variables have been removed, requiring configuration review
- New INSECURE environment variable required for HTTP connections
- Added Docker volume mount for /lib/modules that may need host system compatibility
- Changed to SQLite database which may require data migration from previous versions
- New API Basic Authentication system that may affect existing integrations
- Changed API structure that could break existing API clients or scripts
- ARMv6 support removed, affecting compatibility with older ARM devices
🤖 This is an automated summary of installation tests for wireguard:
- ✅ App successfully installed in umbrel-dev instance
- ✅ App successfully listed in umbrel.yaml
- ✅ App UI successfully returns a 200 status code
- 📸 Screenshot of the app:
This PR must still be reviewed and tested before merging.
🎉 Linting finished with no errors or warnings 🎉
Thank you for your submission! This is an automated linter that checks for common issues in pull requests to the Umbrel App Store.
Please review the linting results below and make any necessary changes to your submission.
Linting Results
| Severity | File | Description |
|---|---|---|
| ℹ️ | wireguard/docker-compose.yml |
External port mapping "51820:51820/udp": Port mappings may be unnecessary for the app to function correctly. Docker's internal DNS resolves container names to IP addresses within the same network. External access to the web interface is handled by the app_proxy container. Port mappings are only needed if external access is required to a port not proxied by the app_proxy, or if an app needs to expose multiple ports for its functionality (e.g., DHCP, DNS, P2P, etc.). |
| ℹ️ | wireguard/docker-compose.yml |
Potentially using unsafe user in service "app": The default container user "root" can lead to security vulnerabilities. If you are using the root user, please try to specify a different user (e.g. "1000:1000") in the compose file or try to set the UID/PUID and GID/PGID environment variables to 1000. |
Legend
| Symbol | Description |
|---|---|
| ❌ | Error: This must be resolved before this PR can be merged. |
| ⚠️ | Warning: This is highly encouraged to be resolved, but is not strictly mandatory. |
| ℹ️ | Info: This is just for your information. |
I have recently migrated my personal instance of wireguard. In their docs they state that users should make a backup manually first and then upgrade: https://wg-easy.github.io/wg-easy/latest/advanced/migrate/from-14-to-15/#migration
Unfortunately they don't seem to expose the backup functionality in their API, but maybe I am just missing it, as they don't have documented them. They just refer to the file-based routing folders in their repo.
Upstream issue: https://github.com/wg-easy/wg-easy/issues/1987