Stand / as of: 2026-11-11 09:12:19 UTC · index.json · status.json · allowed_signers
Jeder Regnis-VPN-Server prüft einmal täglich zu einer zufälligen Uhrzeit mit
verify-exit-node.sh (55 Prüfungen), dass er keine Verbindungsdaten speichert:
keine Logs auf der Platte, keine Peer-Liste auf der Platte, keine DNS-Protokolle, kein Connection-Accounting,
keine Mitschnitt- oder Monitoring-Dienste. Das Ergebnis wird auf dem Server selbst mit einem nur dort
liegenden ed25519-Schlüssel signiert. Wir veröffentlichen jeden Bericht unverändert, auch wenn eine Prüfung fehlschlägt.
Once a day, at a random time, every Regnis VPN server runs verify-exit-node.sh
(55 checks) to confirm it stores no connection data. The result is signed on the server itself
with an ed25519 key that exists only there. Every report is published unchanged, failures included.
| Server | Datum / date | Ergebnis / result | Letzter Neustart / last reboot | Software | Bericht / report |
|---|---|---|---|---|---|
| exit-ro1 Rumänien / Romania · FlokiNET | 2026-11-11 2026-11-11 05:59:47 UTC | 55/55 bestanden / passed 0 fail, 0 warn | 2026-11-10 11:50:35 UTC | Kernel 6.8.0-149-generic WireGuard-Tools 1.0.20210914-1ubuntu4 Unbound 1.19.2-1ubuntu3.12 Script f1e23389c3c4c141… | JSON · .sig |
| exit-fi1 Finnland / Finland · FlokiNET | 2026-11-11 2026-11-11 05:59:51 UTC | 55/55 bestanden / passed 0 fail, 0 warn | 2026-11-10 11:58:32 UTC | Kernel 6.8.0-149-generic WireGuard-Tools 1.0.20210914-1ubuntu4 Unbound 1.19.2-1ubuntu3.12 Script f1e23389c3c4c141… | JSON · .sig |
| exit-nl1 Niederlande / Netherlands · LiteServer | 2026-11-11 2026-11-11 05:59:53 UTC | 55/55 bestanden / passed 0 fail, 0 warn | 2026-11-10 16:01:33 UTC | Kernel 6.8.0-149-generic WireGuard-Tools 1.0.20210914-1ubuntu4 Unbound 1.19.2-1ubuntu3.12 Script f1e23389c3c4c141… | JSON · .sig |
| exit-de1 Deutschland / Germany · Hetzner | 2026-11-11 2026-11-11 09:11:42 UTC | 57/57 bestanden / passed 0 fail, 0 warn | 2026-11-11 09:06:39 UTC | Kernel 6.8.0-149-generic WireGuard-Tools 1.0.20210914-1ubuntu4 Unbound 1.19.2-1ubuntu3.12 Script d8c772e33aafc5d7… | JSON · .sig |
Keine Auffälligkeiten. / No problems found.
PASS journald-disk no journal files in /var/log/journalPASS journald-config Storage=volatilePASS syslog-daemon no syslog daemon runningPASS tmpfs:/var/log on tmpfsPASS tmpfs:/tmp on tmpfsPASS tmpfs:/var/tmp on tmpfsPASS swap no unencrypted swap on diskPASS core-dumps core dumps discardedPASS wg-config-peers no [Peer] in wg0.confPASS wg-saveconfig SaveConfig offPASS wg-leftovers no peer lists or client keys in /etc/wireguardPASS wg-peers-ram peer list on tmpfsPASS wg-peer-script regnis-wg-peer stores under /runPASS wg-scrub-timer metadata scrub timer activePASS wg-up wg0 is upPASS wg-stale-metadata no idle peer keeps endpoint, handshake or countersPASS wg-keys-on-disk no active peer key found on diskPASS wg-dyndbg WireGuard debug logging offPASS unbound:log-queries noPASS unbound:log-replies noPASS unbound:log-servfail noPASS unbound:log-local-actions noPASS unbound:use-syslog noPASS unbound:extended-statistics noPASS unbound:prefetch noPASS unbound:verbosity 0PASS unbound:stats-interval 0PASS unbound:logfile nonePASS unbound:cache-max-ttl 300 sPASS unbound:cache-neg-ttl 60 sPASS unbound-up unbound runningPASS unbound-restart-timer hourly restart clears expired names from memoryPASS filter-addresses filter addresses 100.64.0.1-63 mappedPASS filter-unbound-nologs filter Unbound: no query, reply or action logs, cache <= 300 sPASS filter-zone-content blocklists contain list domains onlyPASS filter-no-other-data blocklist directories hold list files onlyPASS filter-update-unit list refresh unprivileged, no log filePASS filter-update-timer daily list refresh timer activePASS filter-active filter Unbound servingPASS iptables-log no logging targets in iptablesPASS nftables-log no logging statements in nftablesPASS conntrack-acct per-connection byte accounting offPASS conntrack-timestamp connection timestamps offPASS conntrack-tcp established TCP kept at most 7440 sPASS conntrack-udp UDP streams kept at most 120 sPASS nf-log-netns netfilter logging limited to init namespacePASS ip-forward forwarding onPASS tunnel-private-nets tunnel cannot reach private networksPASS tunnel-client-isolation tunnel clients cannot reach each otherPASS capture-tools no flow, capture or audit daemon runningPASS monitoring-agents no monitoring agent runningPASS fail2ban fail2ban not runningPASS hoster-agent no hypervisor guest agentPASS dedicated-host no container runtimePASS sshd-loglevel LogLevel SILENTPASS journald-disk no journal files in /var/log/journalPASS journald-config Storage=volatilePASS syslog-daemon no syslog daemon runningPASS tmpfs:/var/log on tmpfsPASS tmpfs:/tmp on tmpfsPASS tmpfs:/var/tmp on tmpfsPASS swap no unencrypted swap on diskPASS core-dumps core dumps discardedPASS wg-config-peers no [Peer] in wg0.confPASS wg-saveconfig SaveConfig offPASS wg-leftovers no peer lists or client keys in /etc/wireguardPASS wg-peers-ram peer list on tmpfsPASS wg-peer-script regnis-wg-peer stores under /runPASS wg-scrub-timer metadata scrub timer activePASS wg-up wg0 is upPASS wg-stale-metadata no idle peer keeps endpoint, handshake or countersPASS wg-keys-on-disk no active peer key found on diskPASS wg-dyndbg WireGuard debug logging offPASS unbound:log-queries noPASS unbound:log-replies noPASS unbound:log-servfail noPASS unbound:log-local-actions noPASS unbound:use-syslog noPASS unbound:extended-statistics noPASS unbound:prefetch noPASS unbound:verbosity 0PASS unbound:stats-interval 0PASS unbound:logfile nonePASS unbound:cache-max-ttl 300 sPASS unbound:cache-neg-ttl 60 sPASS unbound-up unbound runningPASS unbound-restart-timer hourly restart clears expired names from memoryPASS filter-addresses filter addresses 100.64.0.1-63 mappedPASS filter-unbound-nologs filter Unbound: no query, reply or action logs, cache <= 300 sPASS filter-zone-content blocklists contain list domains onlyPASS filter-no-other-data blocklist directories hold list files onlyPASS filter-update-unit list refresh unprivileged, no log filePASS filter-update-timer daily list refresh timer activePASS filter-active filter Unbound servingPASS iptables-log no logging targets in iptablesPASS nftables-log no logging statements in nftablesPASS conntrack-acct per-connection byte accounting offPASS conntrack-timestamp connection timestamps offPASS conntrack-tcp established TCP kept at most 7440 sPASS conntrack-udp UDP streams kept at most 120 sPASS nf-log-netns netfilter logging limited to init namespacePASS ip-forward forwarding onPASS tunnel-private-nets tunnel cannot reach private networksPASS tunnel-client-isolation tunnel clients cannot reach each otherPASS capture-tools no flow, capture or audit daemon runningPASS monitoring-agents no monitoring agent runningPASS fail2ban fail2ban not runningPASS hoster-agent no hypervisor guest agentPASS dedicated-host no container runtimePASS sshd-loglevel LogLevel SILENTPASS journald-disk no journal files in /var/log/journalPASS journald-config Storage=volatilePASS syslog-daemon no syslog daemon runningPASS tmpfs:/var/log on tmpfsPASS tmpfs:/tmp on tmpfsPASS tmpfs:/var/tmp on tmpfsPASS swap no unencrypted swap on diskPASS core-dumps core dumps discardedPASS wg-config-peers no [Peer] in wg0.confPASS wg-saveconfig SaveConfig offPASS wg-leftovers no peer lists or client keys in /etc/wireguardPASS wg-peers-ram peer list on tmpfsPASS wg-peer-script regnis-wg-peer stores under /runPASS wg-scrub-timer metadata scrub timer activePASS wg-up wg0 is upPASS wg-stale-metadata no idle peer keeps endpoint, handshake or countersPASS wg-keys-on-disk no active peer key found on diskPASS wg-dyndbg WireGuard debug logging offPASS unbound:log-queries noPASS unbound:log-replies noPASS unbound:log-servfail noPASS unbound:log-local-actions noPASS unbound:use-syslog noPASS unbound:extended-statistics noPASS unbound:prefetch noPASS unbound:verbosity 0PASS unbound:stats-interval 0PASS unbound:logfile nonePASS unbound:cache-max-ttl 300 sPASS unbound:cache-neg-ttl 60 sPASS unbound-up unbound runningPASS unbound-restart-timer hourly restart clears expired names from memoryPASS filter-addresses filter addresses 100.64.0.1-63 mappedPASS filter-unbound-nologs filter Unbound: no query, reply or action logs, cache <= 300 sPASS filter-zone-content blocklists contain list domains onlyPASS filter-no-other-data blocklist directories hold list files onlyPASS filter-update-unit list refresh unprivileged, no log filePASS filter-update-timer daily list refresh timer activePASS filter-active filter Unbound servingPASS iptables-log no logging targets in iptablesPASS nftables-log no logging statements in nftablesPASS conntrack-acct per-connection byte accounting offPASS conntrack-timestamp connection timestamps offPASS conntrack-tcp established TCP kept at most 7440 sPASS conntrack-udp UDP streams kept at most 120 sPASS nf-log-netns netfilter logging limited to init namespacePASS ip-forward forwarding onPASS tunnel-private-nets tunnel cannot reach private networksPASS tunnel-client-isolation tunnel clients cannot reach each otherPASS capture-tools no flow, capture or audit daemon runningPASS monitoring-agents no monitoring agent runningPASS fail2ban fail2ban not runningPASS hoster-agent no hypervisor guest agentPASS dedicated-host no container runtimePASS sshd-loglevel LogLevel SILENTPASS journald-disk no journal files in /var/log/journalPASS journald-config Storage=volatilePASS syslog-daemon no syslog daemon runningPASS tmpfs:/var/log on tmpfsPASS tmpfs:/tmp on tmpfsPASS tmpfs:/var/tmp on tmpfsPASS swap no unencrypted swap on diskPASS core-dumps core dumps discardedPASS wg-config-peers no [Peer] in wg0.confPASS wg-saveconfig SaveConfig offPASS wg-leftovers no peer lists or client keys in /etc/wireguardPASS wg-peers-ram peer list on tmpfsPASS wg-peer-script regnis-wg-peer stores under /runPASS wg-scrub-timer metadata scrub timer activePASS wg-up wg0 is upPASS wg-stale-metadata no idle peer keeps endpoint, handshake or countersPASS wg-keys-on-disk no active peer key found on diskPASS wg-dyndbg WireGuard debug logging offPASS unbound:log-queries noPASS unbound:log-replies noPASS unbound:log-servfail noPASS unbound:log-local-actions noPASS unbound:use-syslog noPASS unbound:extended-statistics noPASS unbound:prefetch noPASS unbound:verbosity 0PASS unbound:stats-interval 0PASS unbound:logfile nonePASS unbound:cache-max-ttl 300 sPASS unbound:cache-neg-ttl 60 sPASS unbound-up unbound runningPASS unbound-restart-timer hourly restart clears expired names from memoryPASS filter-addresses filter addresses 100.64.0.1-63 mappedPASS filter-unbound-nologs filter Unbound: no query, reply or action logs, cache <= 300 sPASS filter-zone-content blocklists contain list domains onlyPASS filter-no-other-data blocklist directories hold list files onlyPASS filter-update-unit list refresh unprivileged, no log filePASS filter-update-timer daily list refresh timer activePASS filter-active filter Unbound servingPASS iptables-log no logging targets in iptablesPASS nftables-log no logging statements in nftablesPASS p2p-block BitTorrent block: 8 rules, no counter, log or statePASS p2p-tracker-dns 295 tracker names NXDOMAIN in both resolvers, list onlyPASS conntrack-acct per-connection byte accounting offPASS conntrack-timestamp connection timestamps offPASS conntrack-tcp established TCP kept at most 7440 sPASS conntrack-udp UDP streams kept at most 120 sPASS nf-log-netns netfilter logging limited to init namespacePASS ip-forward forwarding onPASS tunnel-private-nets tunnel cannot reach private networksPASS tunnel-client-isolation tunnel clients cannot reach each otherPASS capture-tools no flow, capture or audit daemon runningPASS monitoring-agents no monitoring agent runningPASS fail2ban fail2ban not runningPASS hoster-agent no hypervisor guest agentPASS dedicated-host no container runtimePASS sshd-loglevel LogLevel SILENTMit OpenSSH ≥ 8.1 (Linux, macOS, Windows 10+). Ausgabe Good "regnis-nologs" signature = der Bericht
stammt unverändert vom Schlüssel dieses Servers. / With OpenSSH 8.1 or later; Good "regnis-nologs" signature
means the report is unchanged and was signed by that server's key.
S=exit-ro1 # exit-fi1, exit-nl1 curl -sSO https://docs.regnis.app/no-logs/allowed_signers -o $S.json https://docs.regnis.app/no-logs/$S/latest.json -o $S.json.sig https://docs.regnis.app/no-logs/$S/latest.json.sig ssh-keygen -Y verify -f allowed_signers -I $S -n regnis-nologs -s $S.json.sig < $S.json
Schlüssel-Fingerprints (vergleiche mit dem Repository / compare with the repository,
scaffold/vpn/nologs-collector/allowed_signers):
exit-ro1: SHA256:4Kg/89ktaVXoFerTisNd9/8sZ75DdwP0ArFomMk+5Gkexit-fi1: SHA256:bh31QWFc+WnKtBRgGCCUeIUaqR1Z7eI2pl2SIvc2tk0exit-nl1: SHA256:l+jrZ29VSlIiZJD0szQtnfQW0nAm+R14H3UMbtTCAYYexit-de1: SHA256:SZG9lyw01LHnKy5futZC6QBRy/QFnb9PKwDIE/af6WkRegnis · docs.regnis.app · regnis.app