DietPi, a lightweight Debian-based Linux distribution for the Raspberry Pi and other single-board computers, released version 10.8 on 21 October 2026. heise reported on it on 27 October. DietPi is a common base for small home servers: its software installer includes Home Assistant, openHAB, Domoticz, Homebridge, Scrypted and TasmoAdmin. The main addition in 10.8 is a tool that makes it much easier to reach such a server from outside the home over a WireGuard VPN.

dietpi-wireguard

The new dietpi-wireguard tool manages WireGuard servers and their clients from a menu or the command line. It can:

  • create a server and clients;
  • show a client configuration as a QR code to scan in the WireGuard app on a phone;
  • disable, enable and remove clients or change their settings;
  • change the server port, address and IPv6 settings.

It also works with existing configurations in /etc/wireguard, including servers that were not set up through DietPi's software installer. A new server installed through dietpi-software no longer creates a client automatically. According to the documentation, the default server is wg0 on UDP port 51820, with VPN address 10.9.0.1. To connect from outside, forward that UDP port on your router.

New servers also get an IPv6 subnet (NAT66) and IPv6 forwarding, so clients can use IPv6 through the VPN, which did not work with the previous configuration. Existing servers can turn IPv6 on with the new tool. If IPv6 is disabled in dietpi-config, it is also turned off for WireGuard servers, because they would not start otherwise.

A VPN is a safer way to reach a smart home server remotely than opening the Home Assistant or openHAB web interface directly to the internet, because only devices with a client key can connect at all.

Software by name

dietpi-software now uses names instead of numbers for software IDs, for example nodered instead of 122. This applies to the command line, the search menu, the AUTO_SETUP_INSTALL_SOFTWARE_ID entries in dietpi.txt and the /boot/dietpi/.installed file. Input is normalized, so "Node-RED" also works. Numeric IDs are still accepted and existing files are migrated, so automated installation scripts should keep working, but new ones are easier to read.

Other changes

  • HAProxy now comes as a DietPi package from its APT server instead of being compiled, and its workers no longer run as root.
  • Many dietpi-network fixes: Wi-Fi hotspot settings are no longer reverted in the menu, a hotspot no longer breaks when wpa_supplicant connects to a known network, and invalid IP addresses are rejected.
  • A warning appears when a second default gateway is set, which could cut off internet access after a reboot.