nginx-cf-realip (0.3.1-1) unstable; urgency=medium

  * Verify the peer certificate and hostname on HTTPS fetches
  * Restrict the fetch client to TLS 1.2 and TLS 1.3
  * Size the outbound HTTP request from the URL instead of a fixed buffer
  * Compile the HTTPS client into OBS builds (NGX_HTTP_SSL)
  * Build-depend on libcrypt-dev (Ubuntu 26.04 no longer ships crypt.h in libc6-dev)

 -- Rumen Damyanov <contact@rumenx.com>  Wed, 28 Oct 2026 12:00:00 +0200

nginx-cf-realip (0.3.0-1) unstable; urgency=medium

  * Major refactor: replaced libcurl with native NGINX HTTP fetching
  * Removed libcurl dependency
  * Added native DNS resolution via ngx_resolver
  * Added native SSL/TLS support for HTTPS
  * Requires 'resolver' directive in nginx config

 -- Rumen Damyanov <contact@rumenx.com>  Thu, 16 Jan 2026 12:00:00 +0000

nginx-cf-realip (0.2.0-1) unstable; urgency=medium

  * Refactored module configuration context structure
  * Global settings now only valid in http{} block
  * Fixed CONTRIBUTING.md references

 -- Rumen Damyanov <contact@rumenx.com>  Thu, 16 Jan 2026 10:00:00 +0000

nginx-cf-realip (0.1.0-1) unstable; urgency=medium

  * Initial release for OBS
  * Automatic Cloudflare IP range fetching
  * IPv4 and IPv6 support
  * SHA256 change detection
  * Exponential backoff on failures

 -- Rumen Damyanov <contact@rumenx.com>  Sun, 06 Oct 2024 12:00:00 +0000
