Skip to content

CHANGELOG.md

Latest commit

 

History

History
70 lines (60 loc) · 4.05 KB

CHANGELOG.md

File metadata and controls

70 lines (60 loc) · 4.05 KB

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[Unreleased]

Added

  • Local CA / tls internal — Caddy-style internal certificate authority for local development and internal services. On first start, gatel generates a 10-year ECDSA P-256 root + 7-day intermediate under the platform user-data directory, and signs 12-hour leaf certificates on demand at TLS handshake time. Opt in per-site with tls internal or globally via tls { internal } (fallback when ACME isn't configured). Two new CLI subcommands install/remove the root in the OS trust store: gatel trust (Windows uses the current-user Root store via schannel — no UAC; macOS/Linux shell out to security / update-ca-trust / update-ca-certificates — may need sudo) and gatel untrust. See docs/en/tls-and-acme.md.
  • Config import "path/to/other.kdl" directive — split a single main config across multiple files. Paths are resolved relative to the importing file's directory, imports expand in place in source order, global blocks remain restricted to the main file, and circular / diamond imports are handled safely. Missing imported files emit a warning and are skipped (optional drop-ins are safe). Glob patterns (*, ?, [...]) are supported — import "conf.d/*.kdl" loads every matching file in sorted order, and a glob matching zero files is a warning, not an error. Edits to imported files are picked up on hot-reload via SIGHUP, gatel reload, and the admin POST /config/reload endpoint.
  • CORS middleware — reuses salvo-cors with full KDL config support
  • Timeout middleware — reuses salvo_extra::timeout
  • Request ID middleware — reuses salvo_extra::request_id (ULID-based)
  • Force HTTPS middleware — reuses salvo_extra::force_https
  • Trailing slash middleware — reuses salvo_extra::trailing_slash
  • Docker support — Dockerfile (distroless), Dockerfile.alpine, compose.yml
  • Install scripts — install.sh (Linux/macOS), install.ps1 (Windows)
  • Justfile with build, install, uninstall, test, lint, fmt, docker recipes
  • DEB and RPM packaging infrastructure
  • GitHub Actions release workflow with multi-platform builds
  • Community files — CONTRIBUTING.md, CODE_OF_CONDUCT.md, SECURITY.md
  • Cross-compilation support via Cross.toml
  • Build optimizations — LTO, binary stripping, single codegen unit

Changed

  • Refactored proxy handlers to include goals module
  • Streamlined import statements across modules

[0.1.0] - 2025-01-01

Added

  • Initial release
  • KDL-based configuration with snippets and hot-reload
  • Reverse proxy with 10 load-balancing strategies
  • Active and passive health checking
  • Automatic TLS via ACME (Let's Encrypt, ZeroSSL)
  • Manual TLS certificates with per-site overrides
  • Mutual TLS (mTLS) client verification
  • On-demand TLS for dynamic certificate issuance
  • HTTP/1.1, HTTP/2, and HTTP/3 (QUIC) support
  • Response compression (Gzip, Brotli, Zstd, Deflate)
  • Static file serving with ETag, range requests, directory browsing
  • Rate limiting (token bucket, per-IP)
  • Basic authentication with bcrypt/argon2/scrypt/pbkdf2
  • Forward authentication delegation
  • IP filtering (CIDR allow/deny)
  • Header manipulation with placeholders
  • URI rewriting with regex support
  • Response body replacement
  • In-memory HTTP response caching
  • Server-side HTML templates
  • Request body and response body size limits
  • FastCGI, SCGI, and CGI protocol support
  • HTTP CONNECT forward proxy
  • L4 TCP stream proxy
  • WebSocket proxying
  • PROXY protocol v1/v2 support
  • DNS and SRV-based dynamic upstream discovery
  • Admin REST API (config, health, upstreams, metrics)
  • Plugin/module system for custom middleware and handlers
  • Graceful shutdown with connection draining
  • Structured logging with file rotation
  • Prometheus-compatible metrics
  • gatel-passwd password hashing utility
  • gatel-precompress static asset compression utility