17811 Commits

Author SHA1 Message Date
Franco Fichtner
7335db7fb1 installer: one more tweak for powering down 2025-01-23 10:42:46 +01:00
Ad Schellevis
9b40922f1d Services: Intrusion Detection: Policy - cleanse metadata for brackets, closes https://github.com/opnsense/core/issues/8232 2025-01-22 18:50:17 +01:00
Stephan de Wit
23fd657f08 theme: compile sass for a6b0a8593f 2025-01-22 14:40:43 +01:00
Stephan de Wit
d752050a11 system: adjust CSS for ChartJS v4
maintainAspectRatio has changed to respect the container height.
This has introduced issues as is described in the issue linked in
this commit. Since some of the chart containers rely on maintainAspectRatio
being set to false, setting the aspect-ratio in CSS there will cause
those charts to ignore this setting, causing infinite scaling. These
containers are excluded from the workaround using
canvas-container-noaspectratio. Since these charts do not change
in height, they are not subject to the same degree of responsiveness.

While here, using a chart with an overflowable widget seems unnecessary
and is causing visual artifacts. Eventually we want to split up the
"expansion" logic to their own widgets or configurable setting anyway.
2025-01-22 14:40:43 +01:00
Stephan de Wit
343ba9ada3 traffic: account for ChartJS v4 upgrade here as well 2025-01-22 14:40:43 +01:00
Stephan de Wit
43e6bdb205 system: upgrade ChartJS to v4
A couple of notes:

- the streaming plugin is not officially supported with ChartJS v4. Instead, a fork
has been used (https://socket.dev/npm/package/@robloche/chartjs-plugin-streaming/overview/3.1.0).
This fork required a oneline-fix which has as of yet not been applied to the
minified or regular .js file, only to the .esm.js file
(see https://socket.dev/npm/package/@robloche/chartjs-plugin-streaming/diff/3.1.0).
- Only the .umd.js version of ChartJSv4 seems to work out of the box.
- The colorschemes plugin is also a fork (https://github.com/MaximBelov/chartjs-plugin-colorschemes)
- adapter-moment works out of the box.
- This commit has not been thoroughly tested across all usages of ChartJS in the UI.
- The responsive resizing nature of canvas elements using ChartJS don't seem to work
anymore when expanding a widget.
2025-01-22 14:40:43 +01:00
Ad Schellevis
5d596601d4 VPN: IPsec - add banner message when using custom configuration files. closes https://github.com/opnsense/core/issues/8093 2025-01-22 12:00:51 +01:00
Franco Fichtner
2bb0301fa3 src: style sweep 2025-01-22 11:12:36 +01:00
Ad Schellevis
4f12007431 Services: Unbound DNS: Blocklist - cleanup available blocklists and add https://github.com/hagezi/dns-blocklists
closes https://github.com/opnsense/core/issues/8224

Deprecated (but can still be downloaded for compatibility reasons):

* NoCoin List
* All Porn List
* PornTop1M List
* Simple Ad List
* Simple Tracker List
* WindowsSpyBlocker (*)
2025-01-22 10:54:49 +01:00
Stephan de Wit
788680a780 system: mute disk space status in case of live install media 2025-01-22 10:06:03 +01:00
Stephan de Wit
cfdd274979 system: optimize system status collection
- split up the logic into class collection and status collection
so that out of scope objects don't need to check their status.
- with the previous, status dismissal doesn't need a status check
either anymore
- remove the UI delay from head.inc as well
- scale up the disk space status thresholds a bit for systems with
lower assigned disk space
- non-persistent status objects without a location had their
pointer-events removed, making it non-dismissable
2025-01-22 09:55:51 +01:00
Franco Fichtner
dcc457b580 LICENSE: sync 2025-01-22 08:05:20 +01:00
Ad Schellevis
5a9a551425 login/www: prioritize index page and prevent redirection to a /api page on login, closes https://github.com/opnsense/core/pull/8222 2025-01-21 20:43:24 +01:00
Ad Schellevis
ed7a90194c Firewall: Rules - add experimental inline shaper support 2025-01-21 19:52:50 +01:00
John Fieber
c375cc5050
mvc: fix NetworkValidator for IPv4-mapped addresses with netmask (#8228)
The NetworkValidator fails on IPv4-mapped addresses[1], for example ::ffff:198.51.100.0/120.  Inferring IPv4 from the presence of a period (.) fails as these IPv6 address forms contain periods. Inferring IPv6 from the presence of a colon (:) should be more robust.

1. https://www.rfc-editor.org/rfc/rfc4291#section-2.2
2025-01-21 19:45:15 +01:00
Franco Fichtner
c38dbab3d2 installer: seems to be the other way around 2025-01-21 18:50:31 +01:00
Franco Fichtner
814e983052 system: fix 'installer' user's use of $force_password
While here simplify the unlock code and correct the comment.
2025-01-21 17:05:20 +01:00
Franco Fichtner
c8871daa07 installer: allow halting after install
PR: https://github.com/opnsense/installer/issues/20
2025-01-21 15:49:07 +01:00
Franco Fichtner
60f297f5a6 plugins: turning binary data into JSON may fail globally
By ignoring invalid UTF-8 we can get the bulk of the data.  It's
not likely we are ever going to get unencoded binary data through
JSON, especially in pluginctl.

PR: https://forum.opnsense.org/index.php?topic=45194.0
2025-01-21 13:33:28 +01:00
Franco Fichtner
2862db60b3 src: style 2025-01-21 11:41:05 +01:00
Ad Schellevis
e14cb5c415 webui: increase max header size (max-request-field-size), closes https://github.com/opnsense/core/issues/8230 2025-01-21 11:32:03 +01:00
Franco Fichtner
0e8d2c5589 firmware: upgrade hint also 2025-01-21 11:30:08 +01:00
Ad Schellevis
0b2195b0bd theme: compile sass for d3466788f0 2025-01-21 08:31:35 +01:00
Ad Schellevis
6cd26612f7 filter:bogons - remove duplicate table definition and make sure bogonsv6 always exists, closes https://github.com/opnsense/core/issues/8212
In the long run, we should consider moving the bogons alias functionality to our standard table update, perhaps by implementing a "file" type to link a local file.
For now just remove the duplication and make sure bogonsv6 always exists, even when its empty.
2025-01-20 21:22:46 +01:00
Franco Fichtner
14bdcc9d3d unbound: fixup permission on copy; closes #8133 2025-01-17 21:09:07 +01:00
Franco Fichtner
0e2043c92b system: oops #8221 2025-01-17 20:50:45 +01:00
Stephan de Wit
d09cb928a3 system: remove status delay
With the introduction of the banners, the delay has become
a bit of a nuisance due to shifting elements
2025-01-17 15:49:51 +01:00
Stephan de Wit
49f1b0d0b3 users: remove unused client certificate field for now
There's no model property backing it so this is probably a leftover
from the implementation.
2025-01-17 13:57:34 +01:00
Stephan de Wit
8a8d411f77 system: adjust ACL for system status accordingly for previous 2025-01-17 11:32:22 +01:00
Stephan de Wit
1b2abc89c1 system: handle privileges for notifications 2025-01-17 11:25:02 +01:00
Franco Fichtner
6d75f5d0c7 mvc: allow to reset StoreB64Field values #8221 2025-01-17 10:42:06 +01:00
Franco Fichtner
d85bf8c0d8 system: configdpRun() needs to be used #8221
In the group case that is a refactor, in the user case that
is a bugfix because the argument was not passed...
2025-01-17 10:34:09 +01:00
Franco Fichtner
672c3da6e6 system: more of the same, logic repair #8221 2025-01-17 10:15:25 +01:00
Franco Fichtner
ad358ed999 system: more of the same for #8221 2025-01-17 10:11:11 +01:00
Franco Fichtner
43cf2fccea system: root shell is implicit #8221 2025-01-17 09:47:53 +01:00
Stephan de Wit
32b8e9b05b system: overzealous status dot in UI due to banner/notification intermingling
While here, the dismissStatus relied on an objectMap being set, requiring
us to collect status in the constructor anyway.
2025-01-17 09:46:23 +01:00
Franco Fichtner
f32b64f850 firmware: getting ready for 25.1-RC1 2025-01-17 09:20:18 +01:00
Franco Fichtner
ddbb390542 system: style 2025-01-16 17:52:59 +01:00
Stephan de Wit
a77b5a39ca system: add scope to status class to limit banner notifications to specific pages
While here, marking a status as a banner will exclude it from the notifications
popup
2025-01-16 16:58:25 +01:00
Stephan de Wit
fd39bafe72 system: adjust for overrides banner
Introduces the isBanner property, which explicitly defines the message
as a banner, which doesn't necessarily have a relation to
the persistent property. While here, update the UI to remove
cursor events when the message doesn't have a location set.
2025-01-16 15:11:23 +01:00
Franco Fichtner
1850661335 system: dismissStatus() already implemented as such 2025-01-14 16:47:59 +01:00
Franco Fichtner
7235dd5e43 pkg: fix plist 2025-01-14 16:35:01 +01:00
Neil Greatorex
99a4563c1e
system: allow custom additions to sshd_config (#8206) 2025-01-14 16:34:43 +01:00
Franco Fichtner
20402d1d6a LICENSE: sync 2025-01-14 13:33:33 +01:00
Franco Fichtner
8e44615f86 src: minor style issues 2025-01-14 13:32:28 +01:00
ja-softdevel
97327f29ff
dashboard: Show "Active" beside the active gateway in the Gateways Widget on the Dashboard (#8208) 2025-01-13 15:10:57 +01:00
Stephan de Wit
d3466788f0 dashboard: minor UI fixes
- proper overflow handling and combined tooltips for grid table cells
- remove widget border radius
2025-01-13 14:53:13 +01:00
Sebastian Pucilowski
88530c33df src: fix 'adresses' -> 'address' typo 2025-01-13 13:53:25 +01:00
Sebastian Pucilowski
e58197e5a5 test: testIpAddress typo fix 2025-01-13 13:53:25 +01:00
Sebastian Pucilowski
e8f6a825b7 src: fix IKEAdressField -> IKEAddressField typo 2025-01-13 13:53:25 +01:00