16529 Commits

Author SHA1 Message Date
Franco Fichtner
11b7ca4d01 system: add an "import" syshook; closes #8325
Allow import hooks to be overwritten or manipulated.
No functional changes but it allows to bootstrap a
/conf/config.xml before opnsense-importer (making it
skip import) or modifying the imported /conf/config.xml
afterwards.
2025-02-14 10:46:20 +01:00
Stephan de Wit
08718088ba system: update Chart.js to 4.4.7 2025-02-14 10:27:41 +01:00
Franco Fichtner
d55c52d422 system: remove sysctls from ACL test
I think I could have done this before.  We don't need historic artefacts
in a config.xml copy that doesn't do anything with it (nor need it in any
way).
2025-02-14 09:16:18 +01:00
Franco Fichtner
cde5b0d685 system: unused default since 5bb73b120ba
It's optional so only enforced when we had to employ that
particular workaround.  Eventually we will jus tremove it.
2025-02-14 09:11:12 +01:00
Franco Fichtner
bf67f2b591 system: a few more #7440
Leave vm.pmap.pti and hw.ibrs_disable im the sysctl tag for legacy
reasons at the moment keeping their "optional" status.
2025-02-14 09:08:27 +01:00
Franco Fichtner
6a48c7f34a system: and another one for #7440 2025-02-14 09:00:15 +01:00
Franco Fichtner
6cae0ba7bb system: more for #7440 2025-02-14 08:43:17 +01:00
Franco Fichtner
206c57b39d system: flip defaults for registered sysctls #7440
Require all except when 'optional' is set.   Most will be required.
The ones that are not are probably old cruft.
2025-02-14 08:35:13 +01:00
Franco Fichtner
b4b0ce46e6 system: more for #7440 2025-02-14 08:25:46 +01:00
Franco Fichtner
8220db412c system: squelch 'cannot forward' message by default
PR: https://www.reddit.com/r/opnsense/comments/1inr63v/comment/mckfzsh/?context=3
2025-02-13 17:15:39 +01:00
Stephan de Wit
4d71586539 dashboard: gateways: cached gateways were unused, fix UI as well 2025-02-13 13:20:39 +01:00
Joe Roback
e511d52e95
Handle dev.pchtherm temperatures in the thermal dashboard widget (#8062) 2025-02-13 11:32:51 +01:00
Ad Schellevis
cc16ba7b33 VPN: OpenVPN - Support "password first" for static-challenges, closes https://github.com/opnsense/core/pull/8058 2025-02-12 21:12:14 +01:00
Ad Schellevis
e248e4517f Firewall: Rules - properly unpack multiple source/destination items. closes https://github.com/opnsense/core/issues/8321 2025-02-12 18:57:52 +01:00
Ad Schellevis
7fd17d527d Firewall: Rules - hide internal aliases to align with previous legacy_list_aliases() function. closes https://github.com/opnsense/core/issues/8322 2025-02-12 18:39:49 +01:00
Stephan de Wit
c8173dddda dashboard: compile sass for d988511b7e 2025-02-12 16:45:49 +01:00
Stephan de Wit
d988511b7e dashboard: adjust CSS for chart.js v4
continuation of d752050a11

aspect-ratio introduced visual artifacts with dead space when resizing
widgets.
2025-02-12 16:10:29 +01:00
Ad Schellevis
09eba5d82f Firewall: Aliases: support partial alias exports, closes https://github.com/opnsense/core/issues/8320
Pass selected items to export button and filter results, while here, also pretty-print the results so their easier to inspect locally.
2025-02-12 15:39:47 +01:00
Ad Schellevis
a3d588cca2 Services: Captive Portal: Vouchers - urlencode() selector items in vouchergrouplist, closes https://github.com/opnsense/core/issues/8319
Although this isn't the prettiest option in the world, it does solve the issue. It would have been better if we had "keyed" the items in some way so input is less sensitive for issues like these
2025-02-12 14:48:05 +01:00
Franco Fichtner
f1f87d134b openvpn: remove the old wizard
As discussed the wizard will be removed and the legacy component
it is feeding moved to a plugin for 25.7 so it makes no sense to
drag this along any further.
2025-02-12 12:18:05 +01:00
Franco Fichtner
bac5dfe99e src: style 2025-02-12 08:58:36 +01:00
Monviech
bf952c2c32
core/tunables: Integrate layout_partials/base_apply_button (#8312) 2025-02-12 08:52:00 +01:00
Monviech
79e887241f
dhcp/dhcrelay: Integrate layout_partials/base_apply_button (#8314) 2025-02-12 08:51:44 +01:00
Franco Fichtner
ad95318b6a system: migrate a few tunable defaults for #7440 2025-02-12 08:47:25 +01:00
Franco Fichtner
2e63bae3f3 interfaces: remove unused 2025-02-12 08:35:32 +01:00
Franco Fichtner
07e1223e34 interfaces: move function to only caller 2025-02-12 08:34:03 +01:00
Franco Fichtner
6759113b9d interfaces: remove unused 2025-02-12 08:30:06 +01:00
Franco Fichtner
62bf08c78f reporting: reformat header 2025-02-11 11:28:26 +01:00
Franco Fichtner
05a035ee11 reporting: nothing changed here 2025-02-11 11:25:33 +01:00
Monviech
24a61420cf
mvc/view: Create layout_partials/base_apply_button to centralize design of the standard Apply button (#8297)
* mvc/view: Create layout_partials/base_apply_button to centralize design of the standard Apply button

* dhcp/kea: Example implementation of layout_partials/base_apply_button

* mvc/view: Change edit_alert_id to global static default, add data-grid-reload and dynamic ids to base_apply_button partial
2025-02-10 16:57:52 +01:00
Ad Schellevis
769fa742f7 System: High Availability: Status - update tooltips (restart -> sync and restart), for https://github.com/opnsense/core/issues/8301 2025-02-10 10:58:57 +01:00
Ad Schellevis
74db3260b7 Services: Captive Portal: partially revert new lighttpd tls defaults as introduced in https://www.lighttpd.net/2025/1/10/1.4.77/ , closes https://github.com/opnsense/core/issues/8300
For simplicity, use webgui defaults as specified in 8ea8b90cad/src/etc/inc/plugins.inc.d/webgui.inc (L420-L424)
2025-02-10 10:05:12 +01:00
Franco Fichtner
8ea8b90cad src: style sweep 2025-02-10 09:39:34 +01:00
Ad Schellevis
05aee2df0d System: Access / regression in groupAllowed(), member attributes are comma seperated now, which means we should split and validate to detect membership. closes https://github.com/opnsense/core/issues/8303 2025-02-10 09:23:34 +01:00
Ad Schellevis
986dcb2324 dnsmasq: migrate to MVC/API, fix wrong domain container in delete for https://github.com/opnsense/core/issues/7905 2025-02-08 17:02:17 +01:00
Ad Schellevis
44eaf077b8 dnsmasq: migrate to MVC/API, dnsmasq supports custom includes as well, let's make sure to signal the user when they exist. for https://github.com/opnsense/core/issues/7905 2025-02-08 10:42:55 +01:00
Monviech
1a2eeb9044
interface/vip: Add nosync option to carp and ip alias (#8296)
* interface/vip: Add nosync option to carp and ip alias, fixes: https://github.com/opnsense/core/issues/8291
2025-02-07 13:52:59 +01:00
Franco Fichtner
b9cebe5a0e interfaces: hello, good bye!
Was a leftover of 7c1caf1a1132
2025-02-07 12:02:01 +01:00
Franco Fichtner
9c49d7c545 interfaces: remove cruft to match getRealInterface()
Discussed with: @adschellevis
2025-02-07 09:19:00 +01:00
Franco Fichtner
e226092abe firmware: add an upgrade test for wrong pkg repository
PR: https://forum.opnsense.org/index.php?topic=45614.0
2025-02-07 08:50:17 +01:00
Ad Schellevis
65a74b42d5 dnsmasq: migrate to MVC/API, use interface binding instead of trying to search addresses in legacy backend. https://github.com/opnsense/core/issues/7905
Introduced ages ago (b4323f39bc), it's time to say goodbye to this trickery.
When interfaces are specified, dnsmasq binds to all (*) and filters the requests it should answer, which makes the bind more resilient to change as well (and shouldn't require a restart on interface changes).

This change is intended to ease the migration with minimal impact on current setups.
2025-02-06 20:02:12 +01:00
Franco Fichtner
93ee6e0236 firmware: show that we abort, a problem of the previous bug 2025-02-05 20:56:37 +01:00
Franco Fichtner
cda21f4427 firmware: kernel may not be pending so be sure to check
We need the reboot when no kernel is pending since applying
a non-pending kernel will cause the upgrade to abort.  This
is a thing on partial upgrade failures, most likely in the
packages stage.  Packages are downloaded but then never
executed.

PR: https://forum.opnsense.org/index.php?topic=45614.0
2025-02-05 20:46:56 +01:00
Chris
3aee9456bd
Expose Kea option v6-only-preferred in the GUI (#8286)
* Add Kea GUI options for IPv6-only Preferred (option 108)

* Indentation

* Add advanced, mention option 108 in option title, mention minim value in help
2025-02-05 19:34:15 +01:00
Ad Schellevis
7c09ab5549 Reporting: Unbound DNS - missing typecast in epoch range, closes https://github.com/opnsense/core/issues/8288 2025-02-05 17:26:28 +01:00
Franco Fichtner
a8c84bea0c unbound: style sweep, retain newlines and model bump 2025-02-05 07:41:44 +01:00
Nigel Jones
405ee249fb
opnsense: Add support for forward-first when configuring forwarders (#8275)
Signed-off-by: Nigel Jones <nigel.l.jones+git@gmail.com>
2025-02-04 20:10:03 +01:00
Ad Schellevis
8139d9e1cb Services: Captive Portal - missing import, fixes Error: Class "OPNsense\CaptivePortal\Api\SanitizeFilter" not found ..
ref: https://forum.opnsense.org/index.php?topic=45604.msg228101#msg228101
2025-02-04 13:32:26 +01:00
Monviech
855bd7a65b
dhcp/kea: Integrate layout_partials/base_bootgrid_table (#8253)
* dhcp/kea: dhcpv4.volt - Integrate layout_partials/base_bootgrid_table

* Fix whitespace

* dhcp/kea: Change location of Configuration Change Message above Apply
2025-02-04 11:05:02 +01:00
Monviech
a3bdccd5e4
dns/unbound: Integrate layout_partials/base_bootgrid_table (#8229)
* dns/unbound: acl.volt - Integrate layout_partials/base_bootgrid_table

* dns/unbound: dot.volt - Integrate layout_partials/base_bootgrid_table

* dns/unbound: overrides.volt - Clean up a bit more after https://github.com/opnsense/core/issues/7243

* dns/unbound: overrides.volt - Integrate layout_partials/base_bootgrid_table

* dns/unbound: Ensure all fields are part of the searchBase - Integrate layout_partials/base_bootgrid_table

* dns/unbound: Restructure the Apply buttons to look the same in dot.volt, overrides.volt and acl.volt. Put the Configuration Change Message above the Apply button.

* dns/unbound: Remove commands and rowtoggles in overrides.volt cause 79f5d8f3fa

* dns/unbound: Fix whitespace
2025-02-03 17:38:04 +01:00