17852 Commits

Author SHA1 Message Date
Franco Fichtner
e226092abe firmware: add an upgrade test for wrong pkg repository
PR: https://forum.opnsense.org/index.php?topic=45614.0
2025-02-07 08:50:17 +01:00
Ad Schellevis
65a74b42d5 dnsmasq: migrate to MVC/API, use interface binding instead of trying to search addresses in legacy backend. https://github.com/opnsense/core/issues/7905
Introduced ages ago (b4323f39bc), it's time to say goodbye to this trickery.
When interfaces are specified, dnsmasq binds to all (*) and filters the requests it should answer, which makes the bind more resilient to change as well (and shouldn't require a restart on interface changes).

This change is intended to ease the migration with minimal impact on current setups.
2025-02-06 20:02:12 +01:00
Franco Fichtner
93ee6e0236 firmware: show that we abort, a problem of the previous bug 2025-02-05 20:56:37 +01:00
Franco Fichtner
cda21f4427 firmware: kernel may not be pending so be sure to check
We need the reboot when no kernel is pending since applying
a non-pending kernel will cause the upgrade to abort.  This
is a thing on partial upgrade failures, most likely in the
packages stage.  Packages are downloaded but then never
executed.

PR: https://forum.opnsense.org/index.php?topic=45614.0
2025-02-05 20:46:56 +01:00
Chris
3aee9456bd
Expose Kea option v6-only-preferred in the GUI (#8286)
* Add Kea GUI options for IPv6-only Preferred (option 108)

* Indentation

* Add advanced, mention option 108 in option title, mention minim value in help
2025-02-05 19:34:15 +01:00
Ad Schellevis
7c09ab5549 Reporting: Unbound DNS - missing typecast in epoch range, closes https://github.com/opnsense/core/issues/8288 2025-02-05 17:26:28 +01:00
Franco Fichtner
a8c84bea0c unbound: style sweep, retain newlines and model bump 2025-02-05 07:41:44 +01:00
Nigel Jones
405ee249fb
opnsense: Add support for forward-first when configuring forwarders (#8275)
Signed-off-by: Nigel Jones <nigel.l.jones+git@gmail.com>
2025-02-04 20:10:03 +01:00
Ad Schellevis
8139d9e1cb Services: Captive Portal - missing import, fixes Error: Class "OPNsense\CaptivePortal\Api\SanitizeFilter" not found ..
ref: https://forum.opnsense.org/index.php?topic=45604.msg228101#msg228101
2025-02-04 13:32:26 +01:00
Monviech
855bd7a65b
dhcp/kea: Integrate layout_partials/base_bootgrid_table (#8253)
* dhcp/kea: dhcpv4.volt - Integrate layout_partials/base_bootgrid_table

* Fix whitespace

* dhcp/kea: Change location of Configuration Change Message above Apply
2025-02-04 11:05:02 +01:00
Monviech
a3bdccd5e4
dns/unbound: Integrate layout_partials/base_bootgrid_table (#8229)
* dns/unbound: acl.volt - Integrate layout_partials/base_bootgrid_table

* dns/unbound: dot.volt - Integrate layout_partials/base_bootgrid_table

* dns/unbound: overrides.volt - Clean up a bit more after https://github.com/opnsense/core/issues/7243

* dns/unbound: overrides.volt - Integrate layout_partials/base_bootgrid_table

* dns/unbound: Ensure all fields are part of the searchBase - Integrate layout_partials/base_bootgrid_table

* dns/unbound: Restructure the Apply buttons to look the same in dot.volt, overrides.volt and acl.volt. Put the Configuration Change Message above the Apply button.

* dns/unbound: Remove commands and rowtoggles in overrides.volt cause 79f5d8f3fa

* dns/unbound: Fix whitespace
2025-02-03 17:38:04 +01:00
Franco Fichtner
e19e1edff3 src: sync and style after refactor 2025-02-03 12:47:47 +01:00
Ad Schellevis
163cbd2735 dnsmasq: migrate to MVC/API, minor style fix https://github.com/opnsense/core/issues/7905 2025-02-03 11:14:24 +01:00
Ad Schellevis
e93833258b
dnsmasq: migrate to MVC/API - phase 1 : frontend migration (#8260)
* dnsmasq: migrate to MVC/API, initial boilerplate for https://github.com/opnsense/core/issues/7905

* dnsmasq: migrate to MVC/API, work in progress for https://github.com/opnsense/core/issues/7905

* add general tab fields
* initial hosts tab with inline migration

* dnsmasq: migrate to MVC/API, replace current frontend for https://github.com/opnsense/core/issues/7905

More or less feature complete refactory of the current frontend, which should be a drop-in replacement for the legacy frontend.
The default migration will force an inline migration for aliases and domain ip addresses (which in legacy is a combined field).

* dnsmasq: migrate to MVC/API, missing isset() -> !empty() for  https://github.com/opnsense/core/issues/7905
2025-02-03 11:07:02 +01:00
Ad Schellevis
49f7da283e ui: theme - default (light) theme header fixes, closes https://github.com/opnsense/core/issues/8269 2025-01-31 18:35:25 +01:00
Ad Schellevis
ef97ce785f System: Health: add "stacked" option and some curly braces. 2025-01-30 20:06:30 +01:00
Stephan de Wit
6f464fc064 health: for 25.7 2025-01-30 14:26:26 +01:00
Stephan de Wit
98464bab9a
System: Health: refactor to Chart.js (#8258) 2025-01-30 14:02:41 +01:00
Franco Fichtner
695772d201 system: exclude pchtherm thresholds
PR: https://forum.opnsense.org/index.php?topic=45484.msg227497#msg227497
2025-01-30 11:45:46 +01:00
Ad Schellevis
464bd59ec3 ui: opnsense-dark theme - remove right border from <aside>, closes https://github.com/opnsense/core/issues/8263
Although its not the fix I preferred, removing the border seems to be the only option that actually works.
Setting a border on an item below <aside> does not offer the same result, trying to fix this via the opnsense_theme.js module might be better, but too impactfull.
2025-01-30 10:33:55 +01:00
Monviech
a556e10d06
dhcp/dhcrelay: Integrate layout_partials/base_bootgrid_table (#8254) 2025-01-30 09:12:47 +01:00
Ad Schellevis
bef9066195 Revert "monit: wrap exec in double quotes to allow arguments (#8085)"
This reverts commit 4c8fee08f7f3f3f6198e7ac472ac444b3b15aa55.

ref: https://github.com/opnsense/core/pull/8085#issuecomment-2622838033
2025-01-30 08:36:37 +01:00
Ad Schellevis
f66d639b82 VPN: IPsec - missing pattern in banner search (https://github.com/opnsense/core/issues/8093) 2025-01-29 14:05:59 +01:00
Ad Schellevis
cf5180306b mirrors - remove inactive ones from the list. (new ones won't be added as people can use the custom option for this) 2025-01-29 08:58:26 +01:00
Franco Fichtner
a08b79edbc firmware: switch to 25.7 development mode 2025-01-29 07:41:40 +01:00
Franco Fichtner
ce194034bb firmware: almost there 2025-01-28 08:39:36 +01:00
Stephan de Wit
c9a3a84127 unbound: reporting: update chartjs references 2025-01-27 11:20:55 +01:00
Franco Fichtner
e6ef56170e firmware: fix "r" abbreviation vs. version_compare(); closes #8244 2025-01-27 11:16:32 +01:00
Ad Schellevis
03a8812a3b Firewall: Aliases - add "URL Table in JSON format (IPs)" type which parses json payloads and extracts addresses, closes https://github.com/opnsense/core/issues/8107
While here, also fix a minor issue in https://github.com/opnsense/core/pull/8238 to calculate a proper alias has value when auth properties are specified.
2025-01-26 16:34:11 +01:00
Ben Smithurst
3654b42210
fix undefined array key warnings (#8243) 2025-01-24 10:59:50 +01:00
Ad Schellevis
6765a6b25b firewall: anti-lockout and "allow access to DHCP failover" automatic rules fix, closes https://github.com/opnsense/core/issues/8242 2025-01-24 10:23:15 +01:00
Stephan de Wit
8d26447e82
aliases: add optional authorization for URL type aliases (#8238)
* aliases: add optional authorization for URL type aliases

* aliases: missing break statement

* aliases: update helptext and link to proper id

* aliases: merge token and password fields and shorten code

* Firewall: Aliases - minor modifications for https://github.com/opnsense/core/pull/8238

o re-add selectpicker, title on select killed the default bevaior
o change token to password as the default use-case is username+password, bearer is less common / functional

* aliases: validation should be adjusted as such

---------

Co-authored-by: Ad Schellevis <ad@opnsense.org>
2025-01-24 09:12:10 +01:00
Stephan de Wit
9900d91cd5 system: weird spot in status update handling 2025-01-23 17:00:17 +01:00
Stephan de Wit
b7ba53634b suricata: policy: policy content dropdown missing data-container 2025-01-23 15:04:33 +01:00
Stephan de Wit
7c3048ecfa firewall: automation: typo in filter rule dialog 2025-01-23 14:59:37 +01:00
Stephan de Wit
f37256980e system: fix plist 2025-01-23 14:57:27 +01:00
Ad Schellevis
18fc1f0797 Services: Monit - flag overwrites when they exist (https://docs.opnsense.org/manual/monit.html#advanced-configurations) 2025-01-23 14:43:26 +01:00
Ad Schellevis
526d747db7 VPN: OpenVPN: Instances - add validation "A disabled renegotiation time requires a token lifetime.". closes https://github.com/opnsense/core/pull/8203 2025-01-23 14:06:09 +01:00
Ad Schellevis
e43bca743b Services: Unbound DNS - flag overwrites when they exists (https://docs.opnsense.org/manual/unbound.html#advanced-configurations) 2025-01-23 13:38:52 +01:00
Ad Schellevis
e4b6ec183b Firewall: NAT: Port Forward - fix unassociated rule, closes https://github.com/opnsense/core/pull/8198
It's probably still best to prevent editing associated rules as we can not guarantee settings stick, for unassociated rules, we should be able to edit them.
Fixes missing type in the process here (on firewall rules).
2025-01-23 11:23:21 +01:00
Monviech
a05c23133d
firewall/nat: Add missing columns in one-to-one nat bootgrid (#8237)
Fixes: https://github.com/opnsense/core/issues/8235
2025-01-23 11:11:57 +01:00
Franco Fichtner
7335db7fb1 installer: one more tweak for powering down 2025-01-23 10:42:46 +01:00
Ad Schellevis
9b40922f1d Services: Intrusion Detection: Policy - cleanse metadata for brackets, closes https://github.com/opnsense/core/issues/8232 2025-01-22 18:50:17 +01:00
Stephan de Wit
23fd657f08 theme: compile sass for a6b0a8593f 2025-01-22 14:40:43 +01:00
Stephan de Wit
d752050a11 system: adjust CSS for ChartJS v4
maintainAspectRatio has changed to respect the container height.
This has introduced issues as is described in the issue linked in
this commit. Since some of the chart containers rely on maintainAspectRatio
being set to false, setting the aspect-ratio in CSS there will cause
those charts to ignore this setting, causing infinite scaling. These
containers are excluded from the workaround using
canvas-container-noaspectratio. Since these charts do not change
in height, they are not subject to the same degree of responsiveness.

While here, using a chart with an overflowable widget seems unnecessary
and is causing visual artifacts. Eventually we want to split up the
"expansion" logic to their own widgets or configurable setting anyway.
2025-01-22 14:40:43 +01:00
Stephan de Wit
343ba9ada3 traffic: account for ChartJS v4 upgrade here as well 2025-01-22 14:40:43 +01:00
Stephan de Wit
43e6bdb205 system: upgrade ChartJS to v4
A couple of notes:

- the streaming plugin is not officially supported with ChartJS v4. Instead, a fork
has been used (https://socket.dev/npm/package/@robloche/chartjs-plugin-streaming/overview/3.1.0).
This fork required a oneline-fix which has as of yet not been applied to the
minified or regular .js file, only to the .esm.js file
(see https://socket.dev/npm/package/@robloche/chartjs-plugin-streaming/diff/3.1.0).
- Only the .umd.js version of ChartJSv4 seems to work out of the box.
- The colorschemes plugin is also a fork (https://github.com/MaximBelov/chartjs-plugin-colorschemes)
- adapter-moment works out of the box.
- This commit has not been thoroughly tested across all usages of ChartJS in the UI.
- The responsive resizing nature of canvas elements using ChartJS don't seem to work
anymore when expanding a widget.
2025-01-22 14:40:43 +01:00
Ad Schellevis
5d596601d4 VPN: IPsec - add banner message when using custom configuration files. closes https://github.com/opnsense/core/issues/8093 2025-01-22 12:00:51 +01:00
Franco Fichtner
2bb0301fa3 src: style sweep 2025-01-22 11:12:36 +01:00
Ad Schellevis
4f12007431 Services: Unbound DNS: Blocklist - cleanup available blocklists and add https://github.com/hagezi/dns-blocklists
closes https://github.com/opnsense/core/issues/8224

Deprecated (but can still be downloaded for compatibility reasons):

* NoCoin List
* All Porn List
* PornTop1M List
* Simple Ad List
* Simple Tracker List
* WindowsSpyBlocker (*)
2025-01-22 10:54:49 +01:00