• v0.10.0 ef875e058d

    v0.10.0
    All checks were successful
    release / release (push) Successful in 17s
    Stable

    Ghost released this 2026-07-03 05:55:47 +00:00 | 10 commits to main since this release

    Added

    • tune command. sudo ./src/deploy.sh tune applies the host performance profile (kernel sysctl +
      FD limits scaled to RAM/cores) on demand, confirming first — separate from a full install / harden.
    • status gets its own Performance section. Performance no longer sits under Security; it's a
      dedicated numbered section showing the active profile (connection backlog, conntrack, congestion
      control, swappiness).
    • doc/PERFORMANCE-TUNING.md — a dedicated performance doc (migrated + expanded from
      SYSTEM-HARDENING.md): the host sysctl profile, Caddy web.performance knobs, immutable cache headers,
      and how to apply/skip it (--all default, tune, --no-tune, or harden).

    Changed

    • Clarified everywhere (README, --help, docs) that --all applies hardening and tuning by default
      — opt out per stage with --no-harden / --no-tune.
    Downloads
  • v0.9.3 c92a89188b

    v0.9.3
    All checks were successful
    release / release (push) Successful in 20s
    Stable

    Ghost released this 2026-07-03 04:21:26 +00:00 | 11 commits to main since this release

    Added

    • Favicon. The web UI serves a favicon (/favicon.ico, 16/32/48 — the box mark on the brand
      background) plus a 180×180 apple-touch-icon.png, bundled in assets and written to the mirror root by
      the sweep (version-cache-busted like the CSS/logo).

    Changed

    • README screenshot refreshed to the current branding (logo header, no tagline).
    Downloads
  • v0.9.2 f784dba14f

    v0.9.2
    All checks were successful
    release / release (push) Successful in 22s
    Stable

    Ghost released this 2026-07-03 03:26:38 +00:00 | 12 commits to main since this release

    Changed

    • Web UI header polish. Removed the "MIKROTIK FIRMWARE MIRROR" tagline, enlarged the logo to 75px,
      and added breathing room above the channel-filter nav.
    Downloads
  • v0.9.1 a8d74bb433

    v0.9.1
    All checks were successful
    release / release (push) Successful in 20s
    Stable

    Ghost released this 2026-07-03 03:16:48 +00:00 | 13 commits to main since this release

    Added

    • Branded logo. The README header uses the packagemini logo (icon + title, rosbackup-ng style), and
      the web UI header shows the full wordmark logo (a dark-UI variant, /logo.png, written into the
      mirror root by the sweep) in place of the CSS gem. Logo sources live in doc/img/. The stylesheet and
      logo URLs are version-cache-busted (?v=<version>) so a browser never renders new HTML against a
      stale cached CSS.
    Downloads
  • v0.9.0 f6627c5b06

    v0.9.0
    All checks were successful
    release / release (push) Successful in 27s
    Stable

    Ghost released this 2026-07-02 18:32:30 +00:00 | 14 commits to main since this release

    Changed

    • GoAccess board moved to its own port. The board now serves on a dedicated Caddy listener at
      https://<fqdn>:7443/ (configurable via web.goaccess.port) instead of the /goaccess path. The
      HTTP/1.1 pin needed for its live WebSocket is scoped to that listener only, so the main mirror keeps
      HTTP/2 + HTTP/3
      for firmware downloads (previously enabling the board forced the whole site to H1).
      The installer/firewall opens the port when the board is enabled; open-goaccess and status print the
      new URL. If you customise the port, set PM_GOACCESS_PORT in .env too (compose mapping + firewall).

    Added

    • README: an "under active development — feature-incomplete until v1.0" notice.
    Downloads
  • v0.8.0 ed0a173c08

    v0.8.0
    All checks were successful
    release / release (push) Successful in 17s
    Stable

    Ghost released this 2026-07-02 17:41:54 +00:00 | 16 commits to main since this release

    Changed

    • Performance tuning is now its own stage, separate from security hardening. The installer runs a
      distinct Performance tuning stage after System hardening, harden shows it under its own section,
      and a new --no-tune flag skips it independently of --no-harden.
    • Hardening removes Cockpit. The firewall measure now fully removes the Cockpit web admin UI
      (dnf remove 'cockpit*' + disables/stops the socket), dropping the :9090 attack surface and its
      "Activate the web console with: systemctl enable --now cockpit.socket" login banner. One-way — a later
      disable does not reinstall it.
    Downloads
  • v0.7.0 1c786d4e6a

    v0.7.0
    All checks were successful
    release / release (push) Successful in 16s
    Stable

    Ghost released this 2026-07-02 17:27:08 +00:00 | 18 commits to main since this release

    Fixed

    • Directory sizes now show on the main listing. 0.6.0 only wired folder sizes into the /routeros/
      directory-index + arch pages; the root "All versions" and channel pages (the ones you actually land on)
      still showed "—". Their version rows now carry the folder total too.

    Added

    • More performance tuning.
      • Host (sysctl): BBR congestion control + fq qdisc (big throughput win on lossy/high-latency
        WAN links; enabled only if the kernel provides bbr, and persisted across reboots), vm.swappiness = 0
        (keep hot firmware in page cache on a dedicated box), and faster conntrack teardown timeouts.
      • Caddy: immutable Cache-Control headers on firmware artifacts (*.npk/.zip/.tar.gz/.ova/…) so
        routers/proxies/CDNs skip re-downloads (index pages stay uncached); plus an opt-in
        web.performance.compress
        that gzip/zstd-compresses TEXT responses only (firmware is excluded).
    Downloads
  • v0.6.0 da04f2bcf0

    v0.6.0
    All checks were successful
    release / release (push) Successful in 22s
    Stable

    Ghost released this 2026-07-02 16:59:43 +00:00 | 19 commits to main since this release

    Added

    • Directory sizes in the listing. Version and arch folders now show their total size in the SIZE
      column (previously "—") — computed recursively and cached in a hidden .size file per immutable
      (.complete) folder, so the frequent site regeneration re-reads a cached total instead of re-walking
      released trees.
    • Performance tuning for larger installations.
      • Host: a harden "performance" measure writes a kernel-sysctl + FD-limit profile scaled to the
        box
        (RAM + CPU cores) — connection backlogs (somaxconn, tcp_max_syn_backlog,
        netdev_max_backlog), nf_conntrack_max, socket buffers, ephemeral port range, and fs.file-max.
        Applied by --all; toggle any time with sudo ./src/deploy.sh harden; shown in status.
      • Caddy: optional web.performance server knobs (read_timeout, write_timeout, idle_timeout,
        keepalive) rendered into a global servers block, and the web container's nofile ulimit raised.
    • Footer version toggle. web.show_version (default true) — set false to drop the
      · v<version> suffix from the public page footer.

    Changed

    • README: highlight large-fleet performance + in-place version-safe updates; note Windows + Linux
      netinstall.
    Downloads
  • v0.5.2 72bf7a6212

    v0.5.2
    All checks were successful
    release / release (push) Successful in 30s
    Stable

    Ghost released this 2026-07-02 15:22:16 +00:00 | 24 commits to main since this release

    Fixed

    • Legend column alignment. The "What am I looking at?" rows now align chip / filename / description
      into tidy columns (grid instead of flex), so the wider netinstall · win / netinstall · linux chips
      no longer push their filenames out of line with the rows above.
    Downloads
  • v0.5.1 692acf565c

    v0.5.1
    All checks were successful
    release / release (push) Successful in 20s
    Stable

    Ghost released this 2026-07-02 15:14:39 +00:00 | 25 commits to main since this release

    Fixed

    • Netinstall legend layout. The two-flavour netinstall entry was crammed onto one flex row (two chips
      • two code snippets + long text), which wrapped and misaligned. Split it into two clean rows —
        netinstall · win → netinstall-<ver>.zip and netinstall · linux → netinstall-<ver>.tar.gz — matching
        every other legend entry.
    Downloads