Commit graph

5199 commits

Author SHA1 Message Date
Franco Fichtner
9ebf053b8e misc/theme-flexcolor: inject css into files that are cache safe
This is a bit weird, but lets us inline the branding CSS and the
cache invalidation for CSS works fine.
2025-11-22 14:36:29 +01:00
Franco Fichtner
a696ef090f make: expand on plain target or target with argument 2025-11-20 16:01:54 -05:00
Franco Fichtner
0f09a24fc8 net/frr: new version 2025-11-20 11:13:17 -05:00
Franco Fichtner
a92fe03b6a www/nginx: one more refactor revision bump 2025-11-20 09:46:06 -05:00
Franco Fichtner
65187a2de4 README: sync 2025-11-20 09:43:37 -05:00
Franco Fichtner
9c9c657d79 net/ndp-proxy-go: release 1.0 2025-11-20 09:42:08 -05:00
GutierrezJeremy
16c1d89a57
Add StartAgentPollers and MaxConcurrentChecksPerPoller options to Zabbix Proxy plugin (#5037)
Co-authored-by: Jeremy Gutierrez <Jeremy.gutierrez@markt.de>
2025-11-19 11:51:48 -05:00
Franco Fichtner
9f23d0fb80 sysutils/git-backup: update the shell execution code
1. Use explicit commands here for better tracing even if it requires
   spelling out '/usr/local/bin/git' a number of times.
2. Use the functionality that the Shell class has to offer now.
3. Use -C for changing the git working directory.
4. A bit of style left and right.
2025-11-19 11:06:13 -05:00
Monviech
840714060e
www/caddy: Add changelog for sudo fix (#5036) 2025-11-18 21:28:19 +01:00
Franco Fichtner
2e56601903 www/OPNProxy: switch to mwexecf() use 2025-11-17 21:47:57 -05:00
Franco Fichtner
9f23ada61d www/caddy: revision bump after trust store vs. sudo fix 2025-11-17 21:43:17 -05:00
Franco Fichtner
b50c0c3daa www/nginx: another change here 2025-11-17 21:42:47 -05:00
Franco Fichtner
db0943a4a2 net/upnp: safe execution change
shell_safe() is better than raw exec() although we do not have any
dynamic shell arguments to handle.  This call requires a new explode
extension (true parameter) that will be available in 25.7.8
2025-11-17 21:39:54 -05:00
Franco Fichtner
e2601dc289 net/frr: safe execution changes 2025-11-17 21:38:20 -05:00
Self-Hosting-Group
458997d163
net/upnp: service improvements - additions (#5005) 2025-11-17 10:40:05 -05:00
Franco Fichtner
c1b5dfe2a3 net/upnp: switch from shell_exec() to shell_safe() with automatic trim() 2025-11-16 17:15:50 -05:00
Franco Fichtner
0916add402 security/acme-client: fix legacy inclusion 2025-11-15 18:46:23 -05:00
Franco Fichtner
20b507efeb net/upnp: minor transformation as mwexecf_bg() will be removed 2025-11-15 18:46:23 -05:00
Franco Fichtner
b92c2e631f dns/rfc2136: second iteration using mwexecfb(), no functional changes 2025-11-15 18:46:23 -05:00
Monviech
6fba852a9d
net/frr: Fix snmp ospfd and ospf6d flags (#5025) 2025-11-13 13:09:24 +01:00
Monviech
355309551b
net/frr: Fix STATIC template interface issue, use isEmpty() in validation (#5019)
* net/frr: Fix STATIC template interface issue, use isEmpty() in validation

* Properly safeguard optional parameters
2025-11-13 10:37:42 +01:00
Monviech
68505ed357
net/frr: Add hint about service reload (frr-reload) vs full restart requirement (#5022)
* net/frr: Add hint about service reload (frr-reload) vs full restart requirement

* Add missing translations
2025-11-12 19:05:42 +01:00
Monviech
6061da298b
net/ndp-proxy-go: Fix naming and add docs link (#5017) 2025-11-11 19:09:23 +01:00
Monviech
0152180865
www/caddy: Prevent sudo on startup via skip_install_trust (#5015)
This can happen when an internal domain has been added, e.g. example.internal. Caddy will then generate a self signed certificate via smallstep CA, and on startup it tries to install a root certificate for it into the FreeBSD trust store.

If running as www user, this causes sudo to appear at boot, because that is baked into smallstep CA.

https://github.com/smallstep/truststore/blob/master/truststore_freebsd.go

Via skip_install_trust, we prevent caddy from trying this.
2025-11-10 17:01:03 +01:00
Franco Fichtner
c4c5632a49 misc/theme-flexcolor: add rc file for handling default_scheme.css
Due to not overcomplicating this with a GUI do the lower end RC so that
we users can change this easily.

This works nicely, but the import statement is cached by the browser:

@import url('default_scheme.css');

and this needs to be fixed or the plugin split.
2025-11-07 13:03:29 +01:00
Maurice Walker
4518d481f5
net/tayga: fix typo in static mappings (#5010) 2025-11-07 06:55:03 +01:00
Franco Fichtner
e51e367336 net/igmp-proxy: remove the notion of a "realif"
Actually the last in the plugin code!
2025-11-06 11:09:05 +01:00
Franco Fichtner
124194c2fc dns/rfc2136: bump revision 2025-11-04 14:47:19 +01:00
Franco Fichtner
f7e1982bfe net/tayga: minimal polish 2025-11-04 14:44:07 +01:00
Franco Fichtner
001fa57d90 net/freeradius: cleanups for next version 2025-11-04 14:31:00 +01:00
Robert Resch
370bc89493
net/freeradius: add fallback Tunnel-Password field (#4983) 2025-11-04 14:28:39 +01:00
Franco Fichtner
1e8b6c8e0a README: sync 2025-11-04 14:17:27 +01:00
Franco Fichtner
04585ada9e net/ndp-proxy-go: minor adjustments 2025-11-04 14:16:26 +01:00
Monviech
e03666d614
net/frr: Bump version to 1.48 (#5003) 2025-11-03 15:08:45 +01:00
Monviech
1ce75bdc52
net/frr: Allow disabling enforce_first_as, which is a new default in frr10 (#5001) 2025-11-03 15:08:31 +01:00
Monviech
674f0a6fa5
net/frr: BGP add bestpath route selection options (#5002) 2025-11-03 15:07:52 +01:00
Franco Fichtner
b4f54361f0 README: sync 2025-11-03 14:06:16 +01:00
Monviech
f4b6ed6b80
net/ndp-proxy-go: Add initial plugin version (#4998) 2025-10-31 21:58:34 +01:00
Monviech
1b489c0a68
net/frr: Add BFD configuration detect-multiplier, transmit-interval, receive-interval (#5000)
* net/frr: Add BFD configuration detect-multiplier, transmit-interval, receive-interval

* Hide in advanced mode
2025-10-31 11:21:40 +01:00
Franco Fichtner
466c73a7b3 net/upnp: suggestion from #4629 2025-10-30 12:46:30 +01:00
Franco Fichtner
f658f82aa4 net/upnp: suggestion from @Self-Hosting-Group 2025-10-29 16:40:48 +01:00
Franco Fichtner
b6db17f7b0 net/miniupnpd: small updates as discussed 2025-10-29 15:02:58 +01:00
Self-Hosting-Group
f69ae0ecd9
net/upnp: Service improvements (#4629) 2025-10-29 10:05:50 +01:00
Franco Fichtner
d2940eb8af dns/rfc2136: mwexecf_bg, exec_safe and file_safe
PR: https://github.com/opnsense/core/issues/9325
2025-10-28 16:07:25 +01:00
Franco Fichtner
ad06910687 security/acme-client: use mwexec/file_safe
Although technically we shouldn't from classes inside MVC but it is what
it is.

PR: https://github.com/opnsense/core/issues/9325
2025-10-28 15:37:39 +01:00
Franco Fichtner
3af63008f9 net/igmp-proxy: use mwexecf and file_safe
PR: https://github.com/opnsense/core/issues/9325
2025-10-28 15:27:51 +01:00
Franco Fichtner
7ceccc441b www/nginx: use mwexecf
PR: https://github.com/opnsense/core/issues/9325
2025-10-28 15:26:04 +01:00
Franco Fichtner
5962dc7c18 net/upnp: switch to mwexecf variants
PR: https://github.com/opnsense/core/issues/9325
2025-10-28 15:24:47 +01:00
Franco Fichtner
4b8549f7dd plugins: sync and wording in advanced theme 2025-10-27 11:26:58 +01:00
Franco Fichtner
dcb2e4d7f1 misc/theme-flexcolor: automated style sweep and wording 2025-10-27 11:26:30 +01:00