17866 Commits

Author SHA1 Message Date
Franco Fichtner
07e1223e34 interfaces: move function to only caller 2025-02-12 08:34:03 +01:00
Franco Fichtner
6759113b9d interfaces: remove unused 2025-02-12 08:30:06 +01:00
Franco Fichtner
62bf08c78f reporting: reformat header 2025-02-11 11:28:26 +01:00
Franco Fichtner
05a035ee11 reporting: nothing changed here 2025-02-11 11:25:33 +01:00
Monviech
24a61420cf
mvc/view: Create layout_partials/base_apply_button to centralize design of the standard Apply button (#8297)
* mvc/view: Create layout_partials/base_apply_button to centralize design of the standard Apply button

* dhcp/kea: Example implementation of layout_partials/base_apply_button

* mvc/view: Change edit_alert_id to global static default, add data-grid-reload and dynamic ids to base_apply_button partial
2025-02-10 16:57:52 +01:00
Ad Schellevis
769fa742f7 System: High Availability: Status - update tooltips (restart -> sync and restart), for https://github.com/opnsense/core/issues/8301 2025-02-10 10:58:57 +01:00
Ad Schellevis
74db3260b7 Services: Captive Portal: partially revert new lighttpd tls defaults as introduced in https://www.lighttpd.net/2025/1/10/1.4.77/ , closes https://github.com/opnsense/core/issues/8300
For simplicity, use webgui defaults as specified in 8ea8b90cad/src/etc/inc/plugins.inc.d/webgui.inc (L420-L424)
2025-02-10 10:05:12 +01:00
Franco Fichtner
8ea8b90cad src: style sweep 2025-02-10 09:39:34 +01:00
Ad Schellevis
05aee2df0d System: Access / regression in groupAllowed(), member attributes are comma seperated now, which means we should split and validate to detect membership. closes https://github.com/opnsense/core/issues/8303 2025-02-10 09:23:34 +01:00
Ad Schellevis
986dcb2324 dnsmasq: migrate to MVC/API, fix wrong domain container in delete for https://github.com/opnsense/core/issues/7905 2025-02-08 17:02:17 +01:00
Ad Schellevis
44eaf077b8 dnsmasq: migrate to MVC/API, dnsmasq supports custom includes as well, let's make sure to signal the user when they exist. for https://github.com/opnsense/core/issues/7905 2025-02-08 10:42:55 +01:00
Monviech
1a2eeb9044
interface/vip: Add nosync option to carp and ip alias (#8296)
* interface/vip: Add nosync option to carp and ip alias, fixes: https://github.com/opnsense/core/issues/8291
2025-02-07 13:52:59 +01:00
Franco Fichtner
b9cebe5a0e interfaces: hello, good bye!
Was a leftover of 7c1caf1a1132
2025-02-07 12:02:01 +01:00
Franco Fichtner
9c49d7c545 interfaces: remove cruft to match getRealInterface()
Discussed with: @adschellevis
2025-02-07 09:19:00 +01:00
Franco Fichtner
e226092abe firmware: add an upgrade test for wrong pkg repository
PR: https://forum.opnsense.org/index.php?topic=45614.0
2025-02-07 08:50:17 +01:00
Ad Schellevis
65a74b42d5 dnsmasq: migrate to MVC/API, use interface binding instead of trying to search addresses in legacy backend. https://github.com/opnsense/core/issues/7905
Introduced ages ago (b4323f39bc), it's time to say goodbye to this trickery.
When interfaces are specified, dnsmasq binds to all (*) and filters the requests it should answer, which makes the bind more resilient to change as well (and shouldn't require a restart on interface changes).

This change is intended to ease the migration with minimal impact on current setups.
2025-02-06 20:02:12 +01:00
Franco Fichtner
93ee6e0236 firmware: show that we abort, a problem of the previous bug 2025-02-05 20:56:37 +01:00
Franco Fichtner
cda21f4427 firmware: kernel may not be pending so be sure to check
We need the reboot when no kernel is pending since applying
a non-pending kernel will cause the upgrade to abort.  This
is a thing on partial upgrade failures, most likely in the
packages stage.  Packages are downloaded but then never
executed.

PR: https://forum.opnsense.org/index.php?topic=45614.0
2025-02-05 20:46:56 +01:00
Chris
3aee9456bd
Expose Kea option v6-only-preferred in the GUI (#8286)
* Add Kea GUI options for IPv6-only Preferred (option 108)

* Indentation

* Add advanced, mention option 108 in option title, mention minim value in help
2025-02-05 19:34:15 +01:00
Ad Schellevis
7c09ab5549 Reporting: Unbound DNS - missing typecast in epoch range, closes https://github.com/opnsense/core/issues/8288 2025-02-05 17:26:28 +01:00
Franco Fichtner
a8c84bea0c unbound: style sweep, retain newlines and model bump 2025-02-05 07:41:44 +01:00
Nigel Jones
405ee249fb
opnsense: Add support for forward-first when configuring forwarders (#8275)
Signed-off-by: Nigel Jones <nigel.l.jones+git@gmail.com>
2025-02-04 20:10:03 +01:00
Ad Schellevis
8139d9e1cb Services: Captive Portal - missing import, fixes Error: Class "OPNsense\CaptivePortal\Api\SanitizeFilter" not found ..
ref: https://forum.opnsense.org/index.php?topic=45604.msg228101#msg228101
2025-02-04 13:32:26 +01:00
Monviech
855bd7a65b
dhcp/kea: Integrate layout_partials/base_bootgrid_table (#8253)
* dhcp/kea: dhcpv4.volt - Integrate layout_partials/base_bootgrid_table

* Fix whitespace

* dhcp/kea: Change location of Configuration Change Message above Apply
2025-02-04 11:05:02 +01:00
Monviech
a3bdccd5e4
dns/unbound: Integrate layout_partials/base_bootgrid_table (#8229)
* dns/unbound: acl.volt - Integrate layout_partials/base_bootgrid_table

* dns/unbound: dot.volt - Integrate layout_partials/base_bootgrid_table

* dns/unbound: overrides.volt - Clean up a bit more after https://github.com/opnsense/core/issues/7243

* dns/unbound: overrides.volt - Integrate layout_partials/base_bootgrid_table

* dns/unbound: Ensure all fields are part of the searchBase - Integrate layout_partials/base_bootgrid_table

* dns/unbound: Restructure the Apply buttons to look the same in dot.volt, overrides.volt and acl.volt. Put the Configuration Change Message above the Apply button.

* dns/unbound: Remove commands and rowtoggles in overrides.volt cause 79f5d8f3fa

* dns/unbound: Fix whitespace
2025-02-03 17:38:04 +01:00
Franco Fichtner
e19e1edff3 src: sync and style after refactor 2025-02-03 12:47:47 +01:00
Ad Schellevis
163cbd2735 dnsmasq: migrate to MVC/API, minor style fix https://github.com/opnsense/core/issues/7905 2025-02-03 11:14:24 +01:00
Ad Schellevis
e93833258b
dnsmasq: migrate to MVC/API - phase 1 : frontend migration (#8260)
* dnsmasq: migrate to MVC/API, initial boilerplate for https://github.com/opnsense/core/issues/7905

* dnsmasq: migrate to MVC/API, work in progress for https://github.com/opnsense/core/issues/7905

* add general tab fields
* initial hosts tab with inline migration

* dnsmasq: migrate to MVC/API, replace current frontend for https://github.com/opnsense/core/issues/7905

More or less feature complete refactory of the current frontend, which should be a drop-in replacement for the legacy frontend.
The default migration will force an inline migration for aliases and domain ip addresses (which in legacy is a combined field).

* dnsmasq: migrate to MVC/API, missing isset() -> !empty() for  https://github.com/opnsense/core/issues/7905
2025-02-03 11:07:02 +01:00
Ad Schellevis
49f7da283e ui: theme - default (light) theme header fixes, closes https://github.com/opnsense/core/issues/8269 2025-01-31 18:35:25 +01:00
Ad Schellevis
ef97ce785f System: Health: add "stacked" option and some curly braces. 2025-01-30 20:06:30 +01:00
Stephan de Wit
6f464fc064 health: for 25.7 2025-01-30 14:26:26 +01:00
Stephan de Wit
98464bab9a
System: Health: refactor to Chart.js (#8258) 2025-01-30 14:02:41 +01:00
Franco Fichtner
695772d201 system: exclude pchtherm thresholds
PR: https://forum.opnsense.org/index.php?topic=45484.msg227497#msg227497
2025-01-30 11:45:46 +01:00
Ad Schellevis
464bd59ec3 ui: opnsense-dark theme - remove right border from <aside>, closes https://github.com/opnsense/core/issues/8263
Although its not the fix I preferred, removing the border seems to be the only option that actually works.
Setting a border on an item below <aside> does not offer the same result, trying to fix this via the opnsense_theme.js module might be better, but too impactfull.
2025-01-30 10:33:55 +01:00
Monviech
a556e10d06
dhcp/dhcrelay: Integrate layout_partials/base_bootgrid_table (#8254) 2025-01-30 09:12:47 +01:00
Ad Schellevis
bef9066195 Revert "monit: wrap exec in double quotes to allow arguments (#8085)"
This reverts commit 4c8fee08f7f3f3f6198e7ac472ac444b3b15aa55.

ref: https://github.com/opnsense/core/pull/8085#issuecomment-2622838033
2025-01-30 08:36:37 +01:00
Ad Schellevis
f66d639b82 VPN: IPsec - missing pattern in banner search (https://github.com/opnsense/core/issues/8093) 2025-01-29 14:05:59 +01:00
Ad Schellevis
cf5180306b mirrors - remove inactive ones from the list. (new ones won't be added as people can use the custom option for this) 2025-01-29 08:58:26 +01:00
Franco Fichtner
a08b79edbc firmware: switch to 25.7 development mode 2025-01-29 07:41:40 +01:00
Franco Fichtner
ce194034bb firmware: almost there 2025-01-28 08:39:36 +01:00
Stephan de Wit
c9a3a84127 unbound: reporting: update chartjs references 2025-01-27 11:20:55 +01:00
Franco Fichtner
e6ef56170e firmware: fix "r" abbreviation vs. version_compare(); closes #8244 2025-01-27 11:16:32 +01:00
Ad Schellevis
03a8812a3b Firewall: Aliases - add "URL Table in JSON format (IPs)" type which parses json payloads and extracts addresses, closes https://github.com/opnsense/core/issues/8107
While here, also fix a minor issue in https://github.com/opnsense/core/pull/8238 to calculate a proper alias has value when auth properties are specified.
2025-01-26 16:34:11 +01:00
Ben Smithurst
3654b42210
fix undefined array key warnings (#8243) 2025-01-24 10:59:50 +01:00
Ad Schellevis
6765a6b25b firewall: anti-lockout and "allow access to DHCP failover" automatic rules fix, closes https://github.com/opnsense/core/issues/8242 2025-01-24 10:23:15 +01:00
Stephan de Wit
8d26447e82
aliases: add optional authorization for URL type aliases (#8238)
* aliases: add optional authorization for URL type aliases

* aliases: missing break statement

* aliases: update helptext and link to proper id

* aliases: merge token and password fields and shorten code

* Firewall: Aliases - minor modifications for https://github.com/opnsense/core/pull/8238

o re-add selectpicker, title on select killed the default bevaior
o change token to password as the default use-case is username+password, bearer is less common / functional

* aliases: validation should be adjusted as such

---------

Co-authored-by: Ad Schellevis <ad@opnsense.org>
2025-01-24 09:12:10 +01:00
Stephan de Wit
9900d91cd5 system: weird spot in status update handling 2025-01-23 17:00:17 +01:00
Stephan de Wit
b7ba53634b suricata: policy: policy content dropdown missing data-container 2025-01-23 15:04:33 +01:00
Stephan de Wit
7c3048ecfa firewall: automation: typo in filter rule dialog 2025-01-23 14:59:37 +01:00
Stephan de Wit
f37256980e system: fix plist 2025-01-23 14:57:27 +01:00