Franco Fichtner
af235daa43
system: change the "monitor" syshook and de-deprecate; closese #8199
...
We move the gateway recovery into the hook as a user and users
can do their on similar scripts to fetch current status and
inspect and react accordingly. We do so before filter reload
to avoid excessive reloads in the facility script(s).
What this loses is the ability to get the previous argments
for statistics, but OTOH it also reduces the risk for spurious
events as we only trigger on state transitions.
2025-02-14 11:10:42 +01:00
Franco Fichtner
11b7ca4d01
system: add an "import" syshook; closes #8325
...
Allow import hooks to be overwritten or manipulated.
No functional changes but it allows to bootstrap a
/conf/config.xml before opnsense-importer (making it
skip import) or modifying the imported /conf/config.xml
afterwards.
2025-02-14 10:46:20 +01:00
Stephan de Wit
08718088ba
system: update Chart.js to 4.4.7
2025-02-14 10:27:41 +01:00
Franco Fichtner
d55c52d422
system: remove sysctls from ACL test
...
I think I could have done this before. We don't need historic artefacts
in a config.xml copy that doesn't do anything with it (nor need it in any
way).
2025-02-14 09:16:18 +01:00
Franco Fichtner
cde5b0d685
system: unused default since 5bb73b120ba
...
It's optional so only enforced when we had to employ that
particular workaround. Eventually we will jus tremove it.
2025-02-14 09:11:12 +01:00
Franco Fichtner
bf67f2b591
system: a few more #7440
...
Leave vm.pmap.pti and hw.ibrs_disable im the sysctl tag for legacy
reasons at the moment keeping their "optional" status.
2025-02-14 09:08:27 +01:00
Franco Fichtner
6a48c7f34a
system: and another one for #7440
2025-02-14 09:00:15 +01:00
Franco Fichtner
6cae0ba7bb
system: more for #7440
2025-02-14 08:43:17 +01:00
Franco Fichtner
206c57b39d
system: flip defaults for registered sysctls #7440
...
Require all except when 'optional' is set. Most will be required.
The ones that are not are probably old cruft.
2025-02-14 08:35:13 +01:00
Franco Fichtner
b4b0ce46e6
system: more for #7440
2025-02-14 08:25:46 +01:00
Franco Fichtner
8220db412c
system: squelch 'cannot forward' message by default
...
PR: https://www.reddit.com/r/opnsense/comments/1inr63v/comment/mckfzsh/?context=3
2025-02-13 17:15:39 +01:00
Stephan de Wit
4d71586539
dashboard: gateways: cached gateways were unused, fix UI as well
2025-02-13 13:20:39 +01:00
Joe Roback
e511d52e95
Handle dev.pchtherm temperatures in the thermal dashboard widget ( #8062 )
2025-02-13 11:32:51 +01:00
Ad Schellevis
cc16ba7b33
VPN: OpenVPN - Support "password first" for static-challenges, closes https://github.com/opnsense/core/pull/8058
2025-02-12 21:12:14 +01:00
Ad Schellevis
e248e4517f
Firewall: Rules - properly unpack multiple source/destination items. closes https://github.com/opnsense/core/issues/8321
2025-02-12 18:57:52 +01:00
Ad Schellevis
7fd17d527d
Firewall: Rules - hide internal aliases to align with previous legacy_list_aliases() function. closes https://github.com/opnsense/core/issues/8322
2025-02-12 18:39:49 +01:00
Stephan de Wit
c8173dddda
dashboard: compile sass for d988511b7e
2025-02-12 16:45:49 +01:00
Stephan de Wit
d988511b7e
dashboard: adjust CSS for chart.js v4
...
continuation of d752050a11
aspect-ratio introduced visual artifacts with dead space when resizing
widgets.
2025-02-12 16:10:29 +01:00
Ad Schellevis
09eba5d82f
Firewall: Aliases: support partial alias exports, closes https://github.com/opnsense/core/issues/8320
...
Pass selected items to export button and filter results, while here, also pretty-print the results so their easier to inspect locally.
2025-02-12 15:39:47 +01:00
Ad Schellevis
a3d588cca2
Services: Captive Portal: Vouchers - urlencode() selector items in vouchergrouplist, closes https://github.com/opnsense/core/issues/8319
...
Although this isn't the prettiest option in the world, it does solve the issue. It would have been better if we had "keyed" the items in some way so input is less sensitive for issues like these
2025-02-12 14:48:05 +01:00
Franco Fichtner
f1f87d134b
openvpn: remove the old wizard
...
As discussed the wizard will be removed and the legacy component
it is feeding moved to a plugin for 25.7 so it makes no sense to
drag this along any further.
2025-02-12 12:18:05 +01:00
Franco Fichtner
bac5dfe99e
src: style
2025-02-12 08:58:36 +01:00
Monviech
bf952c2c32
core/tunables: Integrate layout_partials/base_apply_button ( #8312 )
2025-02-12 08:52:00 +01:00
Monviech
79e887241f
dhcp/dhcrelay: Integrate layout_partials/base_apply_button ( #8314 )
2025-02-12 08:51:44 +01:00
Franco Fichtner
ad95318b6a
system: migrate a few tunable defaults for #7440
2025-02-12 08:47:25 +01:00
Franco Fichtner
2e63bae3f3
interfaces: remove unused
2025-02-12 08:35:32 +01:00
Franco Fichtner
07e1223e34
interfaces: move function to only caller
2025-02-12 08:34:03 +01:00
Franco Fichtner
6759113b9d
interfaces: remove unused
2025-02-12 08:30:06 +01:00
Franco Fichtner
62bf08c78f
reporting: reformat header
2025-02-11 11:28:26 +01:00
Franco Fichtner
05a035ee11
reporting: nothing changed here
2025-02-11 11:25:33 +01:00
Monviech
24a61420cf
mvc/view: Create layout_partials/base_apply_button to centralize design of the standard Apply button ( #8297 )
...
* mvc/view: Create layout_partials/base_apply_button to centralize design of the standard Apply button
* dhcp/kea: Example implementation of layout_partials/base_apply_button
* mvc/view: Change edit_alert_id to global static default, add data-grid-reload and dynamic ids to base_apply_button partial
2025-02-10 16:57:52 +01:00
Ad Schellevis
769fa742f7
System: High Availability: Status - update tooltips (restart -> sync and restart), for https://github.com/opnsense/core/issues/8301
2025-02-10 10:58:57 +01:00
Ad Schellevis
74db3260b7
Services: Captive Portal: partially revert new lighttpd tls defaults as introduced in https://www.lighttpd.net/2025/1/10/1.4.77/ , closes https://github.com/opnsense/core/issues/8300
...
For simplicity, use webgui defaults as specified in 8ea8b90cad/src/etc/inc/plugins.inc.d/webgui.inc (L420-L424)
2025-02-10 10:05:12 +01:00
Franco Fichtner
8ea8b90cad
src: style sweep
2025-02-10 09:39:34 +01:00
Ad Schellevis
05aee2df0d
System: Access / regression in groupAllowed(), member attributes are comma seperated now, which means we should split and validate to detect membership. closes https://github.com/opnsense/core/issues/8303
2025-02-10 09:23:34 +01:00
Ad Schellevis
986dcb2324
dnsmasq: migrate to MVC/API, fix wrong domain container in delete for https://github.com/opnsense/core/issues/7905
2025-02-08 17:02:17 +01:00
Ad Schellevis
44eaf077b8
dnsmasq: migrate to MVC/API, dnsmasq supports custom includes as well, let's make sure to signal the user when they exist. for https://github.com/opnsense/core/issues/7905
2025-02-08 10:42:55 +01:00
Monviech
1a2eeb9044
interface/vip: Add nosync option to carp and ip alias ( #8296 )
...
* interface/vip: Add nosync option to carp and ip alias, fixes: https://github.com/opnsense/core/issues/8291
2025-02-07 13:52:59 +01:00
Franco Fichtner
b9cebe5a0e
interfaces: hello, good bye!
...
Was a leftover of 7c1caf1a1132
2025-02-07 12:02:01 +01:00
Franco Fichtner
9c49d7c545
interfaces: remove cruft to match getRealInterface()
...
Discussed with: @adschellevis
2025-02-07 09:19:00 +01:00
Franco Fichtner
e226092abe
firmware: add an upgrade test for wrong pkg repository
...
PR: https://forum.opnsense.org/index.php?topic=45614.0
2025-02-07 08:50:17 +01:00
Ad Schellevis
65a74b42d5
dnsmasq: migrate to MVC/API, use interface binding instead of trying to search addresses in legacy backend. https://github.com/opnsense/core/issues/7905
...
Introduced ages ago (b4323f39bc ), it's time to say goodbye to this trickery.
When interfaces are specified, dnsmasq binds to all (*) and filters the requests it should answer, which makes the bind more resilient to change as well (and shouldn't require a restart on interface changes).
This change is intended to ease the migration with minimal impact on current setups.
2025-02-06 20:02:12 +01:00
Franco Fichtner
93ee6e0236
firmware: show that we abort, a problem of the previous bug
2025-02-05 20:56:37 +01:00
Franco Fichtner
cda21f4427
firmware: kernel may not be pending so be sure to check
...
We need the reboot when no kernel is pending since applying
a non-pending kernel will cause the upgrade to abort. This
is a thing on partial upgrade failures, most likely in the
packages stage. Packages are downloaded but then never
executed.
PR: https://forum.opnsense.org/index.php?topic=45614.0
2025-02-05 20:46:56 +01:00
Chris
3aee9456bd
Expose Kea option v6-only-preferred in the GUI ( #8286 )
...
* Add Kea GUI options for IPv6-only Preferred (option 108)
* Indentation
* Add advanced, mention option 108 in option title, mention minim value in help
2025-02-05 19:34:15 +01:00
Ad Schellevis
7c09ab5549
Reporting: Unbound DNS - missing typecast in epoch range, closes https://github.com/opnsense/core/issues/8288
2025-02-05 17:26:28 +01:00
Franco Fichtner
a8c84bea0c
unbound: style sweep, retain newlines and model bump
2025-02-05 07:41:44 +01:00
Nigel Jones
405ee249fb
opnsense: Add support for forward-first when configuring forwarders ( #8275 )
...
Signed-off-by: Nigel Jones <nigel.l.jones+git@gmail.com>
2025-02-04 20:10:03 +01:00
Ad Schellevis
8139d9e1cb
Services: Captive Portal - missing import, fixes Error: Class "OPNsense\CaptivePortal\Api\SanitizeFilter" not found ..
...
ref: https://forum.opnsense.org/index.php?topic=45604.msg228101#msg228101
2025-02-04 13:32:26 +01:00
Monviech
855bd7a65b
dhcp/kea: Integrate layout_partials/base_bootgrid_table ( #8253 )
...
* dhcp/kea: dhcpv4.volt - Integrate layout_partials/base_bootgrid_table
* Fix whitespace
* dhcp/kea: Change location of Configuration Change Message above Apply
2025-02-04 11:05:02 +01:00