-
released this
2026-07-03 05:55:47 +00:00 | 10 commits to main since this releaseAdded
tunecommand.sudo ./src/deploy.sh tuneapplies the host performance profile (kernel sysctl +
FD limits scaled to RAM/cores) on demand, confirming first — separate from a full install / harden.statusgets its own Performance section. Performance no longer sits under Security; it's a
dedicated numbered section showing the active profile (connection backlog, conntrack, congestion
control, swappiness).doc/PERFORMANCE-TUNING.md— a dedicated performance doc (migrated + expanded from
SYSTEM-HARDENING.md): the host sysctl profile, Caddyweb.performanceknobs, immutable cache headers,
and how to apply/skip it (--alldefault,tune,--no-tune, orharden).
Changed
- Clarified everywhere (README,
--help, docs) that--allapplies hardening and tuning by default
— opt out per stage with--no-harden/--no-tune.
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
-
released this
2026-07-03 04:21:26 +00:00 | 11 commits to main since this releaseAdded
- Favicon. The web UI serves a favicon (
/favicon.ico, 16/32/48 — the box mark on the brand
background) plus a 180×180apple-touch-icon.png, bundled in assets and written to the mirror root by
the sweep (version-cache-busted like the CSS/logo).
Changed
- README screenshot refreshed to the current branding (logo header, no tagline).
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
- Favicon. The web UI serves a favicon (
-
released this
2026-07-03 03:26:38 +00:00 | 12 commits to main since this releaseChanged
- Web UI header polish. Removed the "MIKROTIK FIRMWARE MIRROR" tagline, enlarged the logo to 75px,
and added breathing room above the channel-filter nav.
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
- Web UI header polish. Removed the "MIKROTIK FIRMWARE MIRROR" tagline, enlarged the logo to 75px,
-
released this
2026-07-03 03:16:48 +00:00 | 13 commits to main since this releaseAdded
- Branded logo. The README header uses the packagemini logo (icon + title, rosbackup-ng style), and
the web UI header shows the full wordmark logo (a dark-UI variant,/logo.png, written into the
mirror root by the sweep) in place of the CSS gem. Logo sources live indoc/img/. The stylesheet and
logo URLs are version-cache-busted (?v=<version>) so a browser never renders new HTML against a
stale cached CSS.
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
- Branded logo. The README header uses the packagemini logo (icon + title, rosbackup-ng style), and
-
released this
2026-07-02 18:32:30 +00:00 | 14 commits to main since this releaseChanged
- GoAccess board moved to its own port. The board now serves on a dedicated Caddy listener at
https://<fqdn>:7443/(configurable viaweb.goaccess.port) instead of the/goaccesspath. The
HTTP/1.1 pin needed for its live WebSocket is scoped to that listener only, so the main mirror keeps
HTTP/2 + HTTP/3 for firmware downloads (previously enabling the board forced the whole site to H1).
The installer/firewall opens the port when the board is enabled;open-goaccessandstatusprint the
new URL. If you customise the port, setPM_GOACCESS_PORTin.envtoo (compose mapping + firewall).
Added
- README: an "under active development — feature-incomplete until v1.0" notice.
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
- GoAccess board moved to its own port. The board now serves on a dedicated Caddy listener at
-
released this
2026-07-02 17:41:54 +00:00 | 16 commits to main since this releaseChanged
- Performance tuning is now its own stage, separate from security hardening. The installer runs a
distinctPerformance tuningstage afterSystem hardening,hardenshows it under its own section,
and a new--no-tuneflag skips it independently of--no-harden. - Hardening removes Cockpit. The firewall measure now fully removes the Cockpit web admin UI
(dnf remove 'cockpit*'+ disables/stops the socket), dropping the:9090attack surface and its
"Activate the web console with: systemctl enable --now cockpit.socket" login banner. One-way — a later
disabledoes not reinstall it.
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
- Performance tuning is now its own stage, separate from security hardening. The installer runs a
-
released this
2026-07-02 17:27:08 +00:00 | 18 commits to main since this releaseFixed
- Directory sizes now show on the main listing. 0.6.0 only wired folder sizes into the
/routeros/
directory-index + arch pages; the root "All versions" and channel pages (the ones you actually land on)
still showed "—". Their version rows now carry the folder total too.
Added
- More performance tuning.
- Host (sysctl): BBR congestion control +
fqqdisc (big throughput win on lossy/high-latency
WAN links; enabled only if the kernel provides bbr, and persisted across reboots),vm.swappiness = 0
(keep hot firmware in page cache on a dedicated box), and faster conntrack teardown timeouts. - Caddy: immutable
Cache-Controlheaders on firmware artifacts (*.npk/.zip/.tar.gz/.ova/…) so
routers/proxies/CDNs skip re-downloads (index pages stay uncached); plus an opt-in
web.performance.compressthat gzip/zstd-compresses TEXT responses only (firmware is excluded).
- Host (sysctl): BBR congestion control +
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
- Directory sizes now show on the main listing. 0.6.0 only wired folder sizes into the
-
released this
2026-07-02 16:59:43 +00:00 | 19 commits to main since this releaseAdded
- Directory sizes in the listing. Version and arch folders now show their total size in the SIZE
column (previously "—") — computed recursively and cached in a hidden.sizefile per immutable
(.complete) folder, so the frequent site regeneration re-reads a cached total instead of re-walking
released trees. - Performance tuning for larger installations.
- Host: a
harden"performance" measure writes a kernel-sysctl + FD-limit profile scaled to the
box (RAM + CPU cores) — connection backlogs (somaxconn,tcp_max_syn_backlog,
netdev_max_backlog),nf_conntrack_max, socket buffers, ephemeral port range, andfs.file-max.
Applied by--all; toggle any time withsudo ./src/deploy.sh harden; shown instatus. - Caddy: optional
web.performanceserver knobs (read_timeout,write_timeout,idle_timeout,
keepalive) rendered into a globalserversblock, and the web container'snofileulimit raised.
- Host: a
- Footer version toggle.
web.show_version(defaulttrue) — setfalseto drop the
· v<version>suffix from the public page footer.
Changed
- README: highlight large-fleet performance + in-place version-safe updates; note Windows + Linux
netinstall.
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
- Directory sizes in the listing. Version and arch folders now show their total size in the SIZE
-
released this
2026-07-02 15:22:16 +00:00 | 24 commits to main since this releaseFixed
- Legend column alignment. The "What am I looking at?" rows now align chip / filename / description
into tidy columns (grid instead of flex), so the widernetinstall · win/netinstall · linuxchips
no longer push their filenames out of line with the rows above.
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
- Legend column alignment. The "What am I looking at?" rows now align chip / filename / description
-
released this
2026-07-02 15:14:39 +00:00 | 25 commits to main since this releaseFixed
- Netinstall legend layout. The two-flavour netinstall entry was crammed onto one flex row (two chips
- two code snippets + long text), which wrapped and misaligned. Split it into two clean rows —
netinstall · win → netinstall-<ver>.zipandnetinstall · linux → netinstall-<ver>.tar.gz— matching
every other legend entry.
- two code snippets + long text), which wrapped and misaligned. Split it into two clean rows —
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
- Netinstall legend layout. The two-flavour netinstall entry was crammed onto one flex row (two chips