🔐 v1.0.3: Security Hardening & Portability Fixes

[SamNet-dev]

🔐 v1.0.3: Security Hardening & Portability Fixes

This release focuses on safer firewall management, encryption security, and cross-distro compatibility.

🛡️ Firewall Safety

• Include Pattern: SamNet no longer overwrites /etc/nftables.conf. Rules are now loaded via include from /etc/samnet/samnet.nft.
• Tagged iptables: All Docker compatibility rules now use --comment "samnet-wg" for surgical removal.
• Clean Uninstall: Only removes SamNet-specific rules, preserving UFW, Docker, and other services.

🔐 Encryption Security

• No Plaintext Fallback: Peer key encryption now fails safely if API is unavailable, preventing accidental plaintext storage in the database.
• Clear Error Messages: If encryption fails, users get actionable instructions.

🔧 Bug Fixes

• Portable Port Detection: Fixed non-portable \s regex in port checks - now works on all distros.
• Wizard Navigation: Back button (B) in firewall mode selection now correctly returns to previous step.
• Install Mode Fix: "SamNet Managed" mode can now be selected during fresh installation.

🧹 Code Cleanup

• Removed duplicate function definitions (dead code).
• Added multi-distro support: apt, dnf, yum, pacman.

📋 Coming Soon

• One-line curl | bash install
• samnet --update for seamless upgrades

---

This discussion was created from the release 🔐 v1.0.3: Security Hardening & Portability Fixes.