Commit graph

5477 commits

Author SHA1 Message Date
Frank Wall
bfd90d27f7 security/acme-client: post-merge fixes for #4824 2025-12-01 14:57:55 +01:00
Frank Wall
0d641df774
Merge pull request #4654 from fraenki/turn_1_1
net/turnserver: release 1.1
2025-12-01 13:39:32 +01:00
Frank Wall
124b4dbf68 net/turnserver: add log page, switch to syslog
Co-authored-by: Franco Fichtner <franco@lastsummer.de>
2025-12-01 12:32:11 +01:00
Franco Fichtner
5032208e80 net/zerotier: set as unmaintained for #4746 2025-12-01 11:15:29 +01:00
Franco Fichtner
77424cdf9f security/acme-client: fix style for "DEPREC(I)ATED" 2025-12-01 08:15:50 +01:00
Franco Fichtner
564674b469 net/haproxy: change wording style for "DEPRECATED" 2025-12-01 08:14:21 +01:00
Franco Fichtner
5675e6f23d LICENSE: sync 2025-12-01 08:06:11 +01:00
Franco Fichtner
b9241d6888 security/acme-client: style changes 2025-12-01 07:59:07 +01:00
Lis
a12012ad37
security/acme-client: add support for selectel.ru V2 API (#4824)
* security/acme-client: add support for selectel.ru V2 API
* fix syntax depreciation warning in SecurityController.php
2025-11-30 22:53:46 +01:00
Frank Wall
e866e541da
Merge pull request #4830 from kevinvanblokland/master
security/acme-client: add support for AzureDNS System Assigned Managed Identity
2025-11-30 22:40:05 +01:00
Peter
ce2dfe7705
security/acme-client: Add support for mijn.host DNS challenge (#4446)
* Add support for mijn.host DNS challenge.
2025-11-30 22:34:50 +01:00
Ad Schellevis
fafe14b7bd www/squid - remove references to firewall_nat.php as this will go away shortly and we don't plan to re-add a similar template for this.
ref: https://github.com/opnsense/core/issues/8401
2025-11-30 11:13:35 +01:00
Franco Fichtner
4e967c787d net/freeradius: modify VLAN fallback logic #5050
While it's nice to constrain this it's also very inflexible.
With fallback disabled we can retain values in tunnel pw and
VLAN ID.  Enabling it without these options may be weird, but
not a large problem.  Template was rearranged to generate
the most logic outcome.

Some due maintenance sprinkled on top.
2025-11-29 08:51:48 +01:00
Franco Fichtner
5ca28c8447 net/freeradius: proposal for #5050 2025-11-29 08:24:56 +01:00
Franco Fichtner
248ef71920 security/tailscale: simplify previous a little 2025-11-27 17:48:28 +01:00
Sam Sheridan
351090da19
security/tailscale: fix to prevent use of pre-auth key in startup after auth (#5047) 2025-11-27 17:40:17 +01:00
GutierrezJeremy
c77c3c0cca
net-mgmt/zabbix-proxy and zabbix-agent: add ListenBacklog option (#5046)
Co-authored-by: Jeremy Gutierrez <Jeremy.gutierrez@markt.de>
2025-11-27 17:36:51 +01:00
Franco Fichtner
df4b6e006e databases/redis: wow, fix this stupid bug
PR: https://www.reddit.com/r/opnsense/comments/1ozm5pc/cant_start_redis_on_opnsense_2577_4_track66379/
2025-11-26 20:54:05 +01:00
Frank Wall
094a8fc068
Merge pull request #5020 from flortsch/feature/hetzner-cloud-dns
security/acme-client: add support for Hetzner Cloud DNS API
2025-11-24 15:33:21 +01:00
Franco Fichtner
b8b276326b [bd]*: minimal style sweep (whitespace only) 2025-11-24 09:10:55 +01:00
Franco Fichtner
6f123ed553 security/q-feeds-connector: style sweep 2025-11-24 09:07:56 +01:00
Q-Feeds
3897c7316c
Feature/threat lookup magnifier button (#5044)
* Update Makefile

* Update pkg-descr

* Update security/q-feeds-connector/pkg-descr

Co-authored-by: Franco Fichtner <franco@lastsummer.de>

* Update security/q-feeds-connector/Makefile

Co-authored-by: Franco Fichtner <franco@lastsummer.de>

* Add threat lookup magnifier buttons to events table

- Add magnifier buttons next to source and destination IP addresses in events table
- Buttons open Threat Intelligence Portal in new tab with IP pre-filled
- Automatically triggers search when TIP page loads
- Buttons are right-aligned in their respective columns
- Works for both logged-in and logged-out users (with proper redirect handling)

* Update pkg-descr

* Refactor formatters to use template literals (backticks) for better readability

Addresses reviewer feedback to use template literals instead of string concatenation for HTML generation in JavaScript formatters.

* Update pkg-descr: consolidate all changes into version 1.3

* Use const instead of var for modern JavaScript best practices

Addresses reviewer feedback to use const/let instead of var for better block scoping and to prevent accidental reassignment.

---------

Co-authored-by: Franco Fichtner <franco@lastsummer.de>
2025-11-24 08:30:14 +01:00
Q-Feeds
52ec3fd3f9
Add ports to events page (#5043)
* Add ports to Events page

* Update Makefile

* Update pkg-descr

* Update security/q-feeds-connector/pkg-descr

Co-authored-by: Franco Fichtner <franco@lastsummer.de>

* Update security/q-feeds-connector/Makefile

Co-authored-by: Franco Fichtner <franco@lastsummer.de>

---------

Co-authored-by: Franco Fichtner <franco@lastsummer.de>
2025-11-23 18:29:58 +01:00
Q-Feeds
d2a47d4703
security/q-feeds-connector - Add license expiry date + name to widget (#5040) 2025-11-22 16:00:28 +01:00
Franco Fichtner
b5fd182511 sysutils/virtualbox: switch to newer package 2025-11-22 15:07:58 +01:00
Franco Fichtner
9ebf053b8e misc/theme-flexcolor: inject css into files that are cache safe
This is a bit weird, but lets us inline the branding CSS and the
cache invalidation for CSS works fine.
2025-11-22 14:36:29 +01:00
Franco Fichtner
a696ef090f make: expand on plain target or target with argument 2025-11-20 16:01:54 -05:00
Franco Fichtner
0f09a24fc8 net/frr: new version 2025-11-20 11:13:17 -05:00
Franco Fichtner
a92fe03b6a www/nginx: one more refactor revision bump 2025-11-20 09:46:06 -05:00
Franco Fichtner
65187a2de4 README: sync 2025-11-20 09:43:37 -05:00
Franco Fichtner
9c9c657d79 net/ndp-proxy-go: release 1.0 2025-11-20 09:42:08 -05:00
GutierrezJeremy
16c1d89a57
Add StartAgentPollers and MaxConcurrentChecksPerPoller options to Zabbix Proxy plugin (#5037)
Co-authored-by: Jeremy Gutierrez <Jeremy.gutierrez@markt.de>
2025-11-19 11:51:48 -05:00
Franco Fichtner
9f23d0fb80 sysutils/git-backup: update the shell execution code
1. Use explicit commands here for better tracing even if it requires
   spelling out '/usr/local/bin/git' a number of times.
2. Use the functionality that the Shell class has to offer now.
3. Use -C for changing the git working directory.
4. A bit of style left and right.
2025-11-19 11:06:13 -05:00
Florian Latifi
a4fea0d6a2 security/acme-client: add support for Hetzner Cloud DNS API 2025-11-19 13:55:20 +01:00
Monviech
840714060e
www/caddy: Add changelog for sudo fix (#5036) 2025-11-18 21:28:19 +01:00
Franco Fichtner
2e56601903 www/OPNProxy: switch to mwexecf() use 2025-11-17 21:47:57 -05:00
Franco Fichtner
9f23ada61d www/caddy: revision bump after trust store vs. sudo fix 2025-11-17 21:43:17 -05:00
Franco Fichtner
b50c0c3daa www/nginx: another change here 2025-11-17 21:42:47 -05:00
Franco Fichtner
db0943a4a2 net/upnp: safe execution change
shell_safe() is better than raw exec() although we do not have any
dynamic shell arguments to handle.  This call requires a new explode
extension (true parameter) that will be available in 25.7.8
2025-11-17 21:39:54 -05:00
Franco Fichtner
e2601dc289 net/frr: safe execution changes 2025-11-17 21:38:20 -05:00
Self-Hosting-Group
458997d163
net/upnp: service improvements - additions (#5005) 2025-11-17 10:40:05 -05:00
Franco Fichtner
c1b5dfe2a3 net/upnp: switch from shell_exec() to shell_safe() with automatic trim() 2025-11-16 17:15:50 -05:00
Franco Fichtner
0916add402 security/acme-client: fix legacy inclusion 2025-11-15 18:46:23 -05:00
Franco Fichtner
20b507efeb net/upnp: minor transformation as mwexecf_bg() will be removed 2025-11-15 18:46:23 -05:00
Franco Fichtner
b92c2e631f dns/rfc2136: second iteration using mwexecfb(), no functional changes 2025-11-15 18:46:23 -05:00
Monviech
6fba852a9d
net/frr: Fix snmp ospfd and ospf6d flags (#5025) 2025-11-13 13:09:24 +01:00
Monviech
355309551b
net/frr: Fix STATIC template interface issue, use isEmpty() in validation (#5019)
* net/frr: Fix STATIC template interface issue, use isEmpty() in validation

* Properly safeguard optional parameters
2025-11-13 10:37:42 +01:00
Monviech
68505ed357
net/frr: Add hint about service reload (frr-reload) vs full restart requirement (#5022)
* net/frr: Add hint about service reload (frr-reload) vs full restart requirement

* Add missing translations
2025-11-12 19:05:42 +01:00
Monviech
6061da298b
net/ndp-proxy-go: Fix naming and add docs link (#5017) 2025-11-11 19:09:23 +01:00
Monviech
0152180865
www/caddy: Prevent sudo on startup via skip_install_trust (#5015)
This can happen when an internal domain has been added, e.g. example.internal. Caddy will then generate a self signed certificate via smallstep CA, and on startup it tries to install a root certificate for it into the FreeBSD trust store.

If running as www user, this causes sudo to appear at boot, because that is baked into smallstep CA.

https://github.com/smallstep/truststore/blob/master/truststore_freebsd.go

Via skip_install_trust, we prevent caddy from trying this.
2025-11-10 17:01:03 +01:00