v3.40.4 v3.41.0
BITyia/DroneSplatDec 24, 2025 → Dec 25, 20251 day between releases
What's New
v3.41.0 adds DoH and overhauls healthchecks, but renames DNS env vars in a breaking config change.
Breaking Changes
- DNS options renamed: DOT to DNS_SERVER, DOT_PROVIDERS to DNS_UPSTREAM_RESOLVERS, DOT_PRIVATE_ADDRESS to DNS_PRIVATE_ADDRESSES, DOT_CACHING to DNS_CACHING, and DOT_IPV6 to DNS_UPSTREAM_IPV6.
- DNS_KEEP_NAMESERVER is deprecated and should no longer be used.
New Features
- DNS over HTTPS support with selectable upstream resolver types: dot, doh, or plain.
- Healthcheck system reworked with startup full checks, periodic full checks, and periodic small checks.
- New healthcheck options including HEALTH_TARGET_ADDRESSES, HEALTH_ICMP_TARGET_IPS, HEALTH_SMALL_CHECK_TYPE, and HEALTH_RESTART_VPN.
- Port forwarding templates now support {{PORT}} and {{VPN_INTERFACE}} variables.
- HTTP_CONTROL_SERVER_AUTH_DEFAULT_ROLE added for control server authentication.
Improvements
- DNS over TLS now reuses TCP connections, reducing stress on VPN server connection rate limits.
- Blocked DNS requests are logged with a reason.
- DNS rebinding protection is always enabled, with hostname exceptions supported.
- Local network names can be resolved using private DNS resolvers found at container start.
- Built-in server data was updated for multiple VPN providers, alongside dependency bumps.
Upgrade Notes
Before upgrading, rename all DOT_* environment variables to their DNS_* equivalents and remove DNS_KEEP_NAMESERVER. Review any custom healthcheck configuration against the reworked healthcheck options. If using port forwarding templates, adopt the new {{PORT}} and {{VPN_INTERFACE}} variables where applicable.
The Two Releases
v3.40.4
Dec 24, 2025· 10 months ago
A maintenance release focused on fixing regressions in Wireguard endpoint IP handling and resolving DNS stability issues, alongside updates to provider server data.
Full release notesv3.41.0
Dec 25, 2025· 10 months ago
A major release introducing DNS over HTTPS/TLS support, a complete healthcheck system overhaul, and significant maintenance updates including renamed DNS options and dependency bumps.
Full release notes