## 1.2 [(Unreleased)](https://github.com/trailofbits/algo/tree/HEAD)
### Added
- New provider CloudStack added [\#1420 ](https://github.com/trailofbits/algo/pull/1420 )
- Support for Ubuntu 20.04 [\#1782 ](https://github.com/trailofbits/algo/pull/1782 )
- Allow WireGuard to listen on port 53 [\#1594 ](https://github.com/trailofbits/algo/pull/1594 )
- Introducing Makefile [\#1553 ](https://github.com/trailofbits/algo/pull/1553 )
- Option to unblock SMB and Netbios [\#1558 ](https://github.com/trailofbits/algo/pull/1558 )
- Allow OnDemand to be toggled later [\#1557 ](https://github.com/trailofbits/algo/pull/1557 )
- New provider Hetzner added [\#1549 ](https://github.com/trailofbits/algo/pull/1549 )
- Alternative Ingress IP [\#1605 ](https://github.com/trailofbits/algo/pull/1605 )
### Fixes
- WSL private SSH key permissions [\#1584 ](https://github.com/trailofbits/algo/pull/1584 )
- Scaleway instance creating issue [\#1549 ](https://github.com/trailofbits/algo/pull/1549 )
### Changed
- Discontinue use of the WireGuard PPA [\#1855 ](https://github.com/trailofbits/algo/pull/1855 )
- SSH changes [\#1636 ](https://github.com/trailofbits/algo/pull/1636 )
- Default port is set to `4160` and can be changed in the config
- SSH user for every cloud provider is `algo`
- EC2: enable EBS encryption by default [\#1556 ](https://github.com/trailofbits/algo/pull/1556 )
- Upgrades [\#1549 ](https://github.com/trailofbits/algo/pull/1549 )
- Python 3
- Ansible 2.9 [\#1777 ](https://github.com/trailofbits/algo/pull/1777 )
### Breaking changes
- Python virtual environment moved to .env [\#1549 ](https://github.com/trailofbits/algo/pull/1549 )
## 1.1 [(Jul 31, 2019)](https://github.com/trailofbits/algo/releases/tag/v1.1)
### Removed
- IKEv2 for Windows is now deleted, use Wireguard [\#1493 ](https://github.com/trailofbits/algo/issues/1493 )
### Added
- Tmpfs for key generation [\#145 ](https://github.com/trailofbits/algo/issues/145 )
- Randomly generated pre-shared keys for WireGuard [\#1465 ](https://github.com/trailofbits/algo/pull/1465 ) ([elreydetoda](https://github.com/elreydetoda))
- Support for Ubuntu 19.04 [\#1405 ](https://github.com/trailofbits/algo/pull/1405 ) ([jackivanov](https://github.com/jackivanov))
- AWS support for existing EIP [\#1292 ](https://github.com/trailofbits/algo/pull/1292 ) ([statik](https://github.com/statik))
- Script to support cloud-init and local easy deploy [\#1366 ](https://github.com/trailofbits/algo/pull/1366 ) ([jackivanov](https://github.com/jackivanov))
- Automatically create cloud firewall rules for installs onto Vultr [\#1400 ](https://github.com/trailofbits/algo/pull/1400 ) ([TC1977](https://github.com/TC1977))
- Randomly generated IP address for the local dns resolver [\#1429 ](https://github.com/trailofbits/algo/pull/1429 ) ([jackivanov](https://github.com/jackivanov))
- Update users: add server pick-list [\#1441 ](https://github.com/trailofbits/algo/pull/1441 ) ([TC1977](https://github.com/TC1977))
- Additional testing [\#213 ](https://github.com/trailofbits/algo/issues/213 )
- Add IPv6 support to DNS [\#1425 ](https://github.com/trailofbits/algo/pull/1425 ) ([shapiro125](https://github.com/shapiro125))
- Additional p12 with the CA cert included [\#1403 ](https://github.com/trailofbits/algo/pull/1403 ) ([jackivanov](https://github.com/jackivanov))
### Fixed
- Fixes error in 10-algo-lo100.network [\#1369 ](https://github.com/trailofbits/algo/pull/1369 ) ([adamluk](https://github.com/adamluk))
- Error message is missing for some roles [\#1364 ](https://github.com/trailofbits/algo/issues/1364 )
- DNS leak in Linux/Wireguard when LAN gateway/DNS is 172.16.0.1 [\#1422 ](https://github.com/trailofbits/algo/issues/1422 )
- Installation error after \#1397 [\#1409 ](https://github.com/trailofbits/algo/issues/1409 )
- EC2 encrypted images bug [\#1528 ](https://github.com/trailofbits/algo/issues/1528 )
### Changed
- Upgrade Ansible to 2.7.12 [\#1536 ](https://github.com/trailofbits/algo/pull/1536 )
- DNSmasq removed, and the DNS adblocking functionality has been moved to the dnscrypt-proxy
- Azure: moved to the Standard_B1S image size
- Refactoring, Linting and additional tests [\#1397 ](https://github.com/trailofbits/algo/pull/1397 ) ([jackivanov](https://github.com/jackivanov))
- Scaleway modules [\#1410 ](https://github.com/trailofbits/algo/pull/1410 ) ([jackivanov](https://github.com/jackivanov))
- Use VULTR_API_CONFIG variable if set [\#1374 ](https://github.com/trailofbits/algo/pull/1374 ) ([davidemyers](https://github.com/davidemyers))
- Simplify Apple Profile Configuration Template [\#1033 ](https://github.com/trailofbits/algo/pull/1033 ) ([faf0](https://github.com/faf0))
- Include roles as separate tasks [\#1365 ](https://github.com/trailofbits/algo/pull/1365 ) ([jackivanov](https://github.com/jackivanov))
## 1.0 [(Mar 19, 2019)](https://github.com/trailofbits/algo/releases/tag/v1.0)
### Added
- Tagged releases and changelog [\#724 ](https://github.com/trailofbits/algo/issues/724 )
- Add support for custom domain names [\#759 ](https://github.com/trailofbits/algo/issues/759 )
### Fixed
- Set the name shown to the user \(client\) to be the server name specified in the install script [\#491 ](https://github.com/trailofbits/algo/issues/491 )
- AGPLv3 change [\#1351 ](https://github.com/trailofbits/algo/pull/1351 )
- Migrate to python3 [\#1024 ](https://github.com/trailofbits/algo/issues/1024 )
- Reorganize the project around ipsec + wireguard [\#1330 ](https://github.com/trailofbits/algo/issues/1330 )
- Configuration folder reorganization [\#1330 ](https://github.com/trailofbits/algo/issues/1330 )
- Remove WireGuard KeepAlive and include as an option in config [\#1251 ](https://github.com/trailofbits/algo/issues/1251 )
- Dnscrypt-proxy no longer works after reboot [\#1356 ](https://github.com/trailofbits/algo/issues/1356 )
## 20 Oct 2018
### Added
- AWS Lightsail
## 7 Sep 2018
### Changed
- Azure: Deployment via Azure Resource Manager
## 27 Aug 2018
### Changed
- Large refactor to support Ansible 2.5. [Details ](https://github.com/trailofbits/algo/pull/976 )
- Add a new cloud provider - Vultr
### Upgrade notes
- If any problems encountered follow the [instructions ](https://github.com/trailofbits/algo#deploy-the-algo-server ) from scratch
- You can't update users on your old servers with the new code. Use the old code before this release or rebuild the server from scratch
- Update AWS IAM permissions for your user as per [issue ](https://github.com/trailofbits/algo/issues/1079#issuecomment-416577599 )
## 04 Jun 2018
### Changed
- Switched to [new cipher suite ](https://github.com/trailofbits/algo/issues/981 )
## 24 May 2018
### Changed
- Switched to Ubuntu 18.04
### Removed
- Lightsail support until they have Ubuntu 18.04
### Fixed
- Scaleway API paginagion
## 30 Apr 2018
### Added
- WireGuard support
### Removed
- Android StrongSwan profiles
### Release notes
- StrongSwan profiles for Android are deprecated now. Use WireGuard
## 25 Apr 2018
### Added
- DNScrypt-proxy added
- Switched to CloudFlare DNS-over-HTTPS by default
## 19 Apr 2018
### Added
- IPv6 in subjectAltName of the certificates. This allows connecting to the Algo instance via the main IPv6 address
### Fixed
- IPv6 DNS addresses were not passing to the client
### Release notes
- In order to use the IPv6 address as the connection endpoint you need to [reinit ](https://github.com/trailofbits/algo/blob/master/config.cfg#L14 ) the PKI and [reconfigure ](https://github.com/trailofbits/algo#configure-the-vpn-clients ) your devices with new certificates.
