# Changelog — Rathole Cloudron Package

## 1.0.0 (2026-09-01)

Initial Cloudron package for Rathole 0.5.0 (server mode).

- Pre-compiled-binaries pattern: upstream `x86_64-unknown-linux-gnu`
  release zip downloaded at build time behind a sha256 pin (musl release
  builds were dropped upstream in v0.5.0).
- Runtime `cloudron/base:4.0.0` (Ubuntu 22.04): the gnu binary requires
  glibc >= 2.35, too new for the 3.x (20.04) base used by earlier
  packages.
- `start.sh` seeds `/app/data/server.toml` on first run with a random
  `default_token` (openssl) and a placeholder `[server.services.example]`
  binding :5200 — upstream rejects a server config with zero services —
  then execs `rathole --server`; the config hot-reloads on save.
- Verified end-to-end at build time: a client container tunneled its own
  HTTP server through the packaged server (token auth, lazy service bind,
  hot-reload of added services).
- TCP surface: control channel on 2333 + a 100-port tunnel exit range
  (5200-5299) declared via `tcpPorts` with `containerPort`/`portCount`.
- No user concept → `httpAuth.type = proxy` gates a small static status
  page served on the HTTP port (also serves as the platform health
  check); tunnel access itself is controlled by rathole's mandatory
  per-service tokens.
- Addons: `localstorage` only (config persistence; no database).
- Logo padded from the upstream wordmark to a 256x256 PNG.