Commit graph

1405 commits

Author SHA1 Message Date
Franco Fichtner
3823813daf system: add/change cron job descriptions 2025-09-12 08:20:05 +02:00
Ad Schellevis
8c24bf56f2 changelogs 2025-09-09 16:48:29 +02:00
Ad Schellevis
beab1e1088 changelogs 2025-09-03 12:47:35 +02:00
Ad Schellevis
b4ab6a809f update image in install manual 2025-08-28 14:56:23 +02:00
Ad Schellevis
608e1292ce changelogs 2025-08-21 14:16:24 +02:00
Franco Fichtner
3a970a3062 development: follow changes in master regarding script dir use 2025-08-20 15:47:44 +02:00
Franco Fichtner
648c753d33 development: _opnsense_bootup_run was renamed...
to _var_script and was integrated into FreeBSD as _setup eventually.
2025-08-20 15:44:11 +02:00
Sean Johnson
f2c81c11a9
proxywebfilter: remove old third party sources (#771)
This removes the two existing third party sources as the domains are no longer valid places to get third party blacklists.
2025-08-19 08:21:22 +02:00
Ad Schellevis
c69c5b9163 Firewall: Shaper - add tip to configure kern.hz value. Certainly on virtual machines, this value is usually lower than advised. 2025-08-17 13:15:30 +02:00
Stephan de Wit
e7fdde232d Hardware / BIOS: update dates as well 2025-08-12 14:40:55 +02:00
Stephan de Wit
220d76613d Hardware / BIOS: Update A10 BIOS to version 34 and A20 BIOS to version 17 2025-08-12 14:38:46 +02:00
Stephan de Wit
0a1b059c6e Hardware / BIOS: remove old A30 v24 2025-08-11 14:21:07 +02:00
Stephan de Wit
2f45090b68
ipsec: clarify NAT situation and document new skip_fw option. Closes https://github.com/opnsense/docs/issues/760 (#769) 2025-08-11 11:59:46 +02:00
Stephan de Wit
9ad47c6e0f Hardware / BIOS: update A30 BIOS to version 26 2025-08-11 11:57:38 +02:00
Ad Schellevis
33122a4b70 Firewall / zones - 3 x 3 is nine, closes https://github.com/opnsense/docs/issues/768 2025-08-10 16:12:22 +02:00
Steven Hostetler
204522942b
update consistent usage of the word instead (#766) 2025-08-08 08:56:35 +02:00
Monviech
daf7da53da
dhcp: Add new manual for KEA, clean up DHCP pages, put ISC and DHCrelay in own documents (#764)
* dhcp/kea: Add base for new documentation

* Kea: Add HA configuration example

* Kea: Fix headers in tabs

* dhcp and services: Recursively clean up structure, put ISC and DHCrelay in own documents
2025-08-07 14:50:17 +02:00
Franco Fichtner
e1b5148358 firmware: move the audits section to the firmware menu page
The link is at the top but perhaps better to move the section there although
it goes a bit into depth but I don't want to create two spots where one spot
is worse than  the other.
2025-08-07 12:27:45 +02:00
Ad Schellevis
9298fd63ab changelogs 2025-08-06 16:30:18 +02:00
Ad Schellevis
8fa2b941e5 changelogs 2025-07-31 10:55:12 +02:00
Ad Schellevis
f1ad588821 api update / plugins 2025-07-31 10:54:03 +02:00
Stephan de Wit
284f78ffc4 how-tos: fix doc links 2025-07-24 10:40:40 +02:00
Ad Schellevis
262d83b439 api update / core 2025-07-23 14:08:33 +02:00
Ad Schellevis
3e386e4d09 update tiers 2025-07-23 14:08:06 +02:00
Ad Schellevis
8051820487 changelogs 2025-07-23 13:57:50 +02:00
Monviech
e46dfd4cb7
devel/grid_example: Update documentation for base_bootgrid_table and base_apply_button (#757) 2025-07-18 15:57:33 +02:00
Monviech
85fca0594d
dnsmasq: Update firewall rule help text, pf reload is automatic now (#758) 2025-07-18 15:17:53 +02:00
Franco Fichtner
8b9ae8e478 firmware: make this clearer 2025-07-17 10:53:10 +02:00
Franco Fichtner
453bc094c5 firmware: document the new show community plugins switch and tier 4 2025-07-17 10:45:20 +02:00
Monviech
16c6d17517
dnsmasq: Add cname records and subnet mask options (#755) 2025-07-14 10:35:05 +02:00
Stephan de Wit
575bcf9b91
carp: advanced troubleshooting guide (#671)
* carp: initial troubleshooting guide

* carp: troubleshooting: mention preemption as well

* carp: troubleshooting: mention two-way synchronization as well

* carp: Put troubleshooting section inside carp setup, put focus on WebGUI options but also supply the shell commands by using grouped tabs

* update carp troubleshooting to account for senderr_demotion_factor change

---------

Co-authored-by: Monviech <gitacc@pischem.com>
2025-07-10 17:02:50 +02:00
SeimusS
f2ea87eee1
shaper: Control plane shaping (#706)
* shaper: Control plane shaping

Fixes https://github.com/opnsense/docs/issues/705

* Introduce proper Concepts of the planes in networking
* Explanation of the issue and necessity so separate control plane from rest of the traffic
* Create an example of such Shaper

* Update shaper.rst

* Update shaping.rst

* Update shaper_bufferbloat.rst

added warning for dynamic routing protocols and IPv6

* Update shaper_bufferbloat.rst

found an old typo
flows max is 65535 and not 65536

* Update source/manual/how-tos/shaper_control_plane.rst

Co-authored-by: Stephan de Wit <stephan.de.wit@deciso.com>

* Update source/manual/how-tos/shaper_control_plane.rst

Co-authored-by: Stephan de Wit <stephan.de.wit@deciso.com>

* Update source/manual/how-tos/shaper_control_plane.rst

Co-authored-by: Stephan de Wit <stephan.de.wit@deciso.com>

* Update source/manual/how-tos/shaper_control_plane.rst

Co-authored-by: Stephan de Wit <stephan.de.wit@deciso.com>

* Update source/manual/how-tos/shaper_control_plane.rst

Co-authored-by: Stephan de Wit <stephan.de.wit@deciso.com>

* Update source/manual/how-tos/shaper_control_plane.rst

Co-authored-by: Stephan de Wit <stephan.de.wit@deciso.com>

* Update source/manual/how-tos/shaper_control_plane.rst

Co-authored-by: Stephan de Wit <stephan.de.wit@deciso.com>

* Update source/manual/how-tos/shaper_control_plane.rst

Co-authored-by: Stephan de Wit <stephan.de.wit@deciso.com>

* Update source/manual/how-tos/shaper_control_plane.rst

Co-authored-by: Stephan de Wit <stephan.de.wit@deciso.com>

* Update source/manual/how-tos/shaper_control_plane.rst

Co-authored-by: Stephan de Wit <stephan.de.wit@deciso.com>

* Update source/manual/how-tos/shaper_control_plane.rst

Co-authored-by: Stephan de Wit <stephan.de.wit@deciso.com>

* Update source/manual/how-tos/shaper_bufferbloat.rst

Co-authored-by: Stephan de Wit <stephan.de.wit@deciso.com>

* Update source/manual/how-tos/shaper_control_plane.rst

Co-authored-by: Stephan de Wit <stephan.de.wit@deciso.com>

* Update source/manual/how-tos/shaper_control_plane.rst

Co-authored-by: Stephan de Wit <stephan.de.wit@deciso.com>

* Update shaper_control_plane.rst

Updated minimum BW requirements

* Update shaper_control_plane.rst

- interpunction correction

* Update source/manual/how-tos/shaper_control_plane.rst

Co-authored-by: Monviech <79600909+Monviech@users.noreply.github.com>

* Update source/manual/how-tos/shaper_control_plane.rst

Co-authored-by: Monviech <79600909+Monviech@users.noreply.github.com>

* Update source/manual/how-tos/shaper_control_plane.rst

Co-authored-by: Monviech <79600909+Monviech@users.noreply.github.com>

---------

Co-authored-by: Stephan de Wit <stephan.de.wit@deciso.com>
Co-authored-by: Monviech <79600909+Monviech@users.noreply.github.com>
2025-07-10 16:29:51 +02:00
Ad Schellevis
598211fdc4 security/certification - update status https://cpstic.ccn.cni.es/en/catalogue/377-opnsense-business-edition25-4?ic=1 2025-07-07 10:40:18 +02:00
Ad Schellevis
593af44716 changelogs 2025-07-07 10:40:18 +02:00
Monviech
d911449d0a
dnsmasq: Add docs for the firewall alias (ipset) feature (#754)
* dnsmasq: Add docs for the firewall alias (ipset) feature

* fix typo

* fix typo

* dnsmasq: Finish the IPset guide, add example with dnsmasq as primary dns resolver

* Fix typos

* Update source/manual/dnsmasq.rst

Co-authored-by: Stephan de Wit <stephan.de.wit@deciso.com>

---------

Co-authored-by: Stephan de Wit <stephan.de.wit@deciso.com>
2025-07-04 17:24:37 +02:00
Monviech
83e4894df3
www/caddy: change certificate to Auto HTTPS (#753) 2025-07-02 13:18:53 +02:00
Monviech
3730ab3bfe
net/frr: Add Listen Ranges to Peer Group documentation (#752) 2025-07-01 14:07:29 +02:00
Monviech
7c0c4d5771
dnsmasq: Add domain type references (#751) 2025-07-01 13:31:56 +02:00
Ad Schellevis
5e5f3fef2f changelogs 2025-06-30 11:05:52 +02:00
Ad Schellevis
e9d2e3ea7a fix typo 2025-06-24 19:52:42 +02:00
Stephan de Wit
10b1f4611b sfp_compatibility: add multiple 10G Ubiquiti modules 2025-06-23 11:20:53 +02:00
Puff Machine
a0fb2eca6c
pppoe: Update Point-to-Point menu location in setup guide (#750) 2025-06-22 21:25:48 +03:00
Stephan de Wit
67a55214bb sfp_compatibility: add 10G MMF FlexOptix module 2025-06-16 14:48:04 +02:00
Ad Schellevis
d39e4fa830 changelogs 2025-06-12 17:24:59 +02:00
Monviech
daf36e7e86
dnsmasq: Clear up some points about dhcp reservations (#746)
* dnsmasq: Clear up some points about dhcp reservations

* dhcp: Clear up reservation types of all dhcp services
2025-06-12 13:11:09 +02:00
Ad Schellevis
9c553c8054 backend/configd - missing underscore in noproxy, captital letters might be clearer as well (although both should work according to https://curl.se/libcurl/c/CURLOPT_NOPROXY.html) 2025-06-11 14:55:59 +02:00
Zachary Pax
a2b0f8d7b3
Minor grammar fixes and rewording [Interface] Network (#743)
* Minor grammar fixes and rewording [Interface] Network

* Update firewall_generic.rst
2025-06-11 11:30:21 +02:00
MeganerdNL
4c65b5040d
Unbound: Remove "ISC" from "Register ISC DHCP Static Mappings" (#744)
Remove "ISC" from "Register ISC DHCP Static Mappings". Also supported by Kea now.
2025-06-07 18:16:43 +02:00
Zachary Pax
953d2ec31d
cpu-microcode: fixed typos (#742) 2025-06-06 14:48:28 +02:00
Ad Schellevis
1d7d160e6f development/backend/configd - explain "noproxy" env setting in example, practical for xmlrpc 2025-06-02 10:59:08 +02:00
Monviech
a84eb16879
dnsmasq: Sort ra modes via RA flags, add local directive to host (#740) 2025-05-30 15:31:38 +02:00
Ad Schellevis
2b2786d032 security / LINCE 2025-05-30 09:35:36 +02:00
Zachary Pax
756f84d871
random typos (#739) 2025-05-29 11:06:22 +02:00
Monviech
bcf524a665
firewall/automation: Add missing index (#738) 2025-05-28 16:12:53 +02:00
Ad Schellevis
dcdb330cea development:backend:plugins - fix typo 2025-05-27 16:04:45 +02:00
Ad Schellevis
1b981f0fc1 Development/plugins - add services options 2025-05-27 09:30:10 +02:00
Ad Schellevis
c8cefa21fb development - add missing allowed_groups option in configd 2025-05-26 20:30:06 +02:00
7heo
f11aed3f5d
Update git-backup.rst (#734)
Bare does not mean empty. From
https://git-scm.com/book/en/v2/Git-on-the-Server-Getting-Git-on-a-Server
"a new bare repository — a repository that doesn’t contain a working
directory".

Additionally corrected a typo: should be send -> should be sent
2025-05-26 19:58:18 +02:00
Ad Schellevis
b9900ff4eb development: update links to Jinja2 2025-05-26 15:57:29 +02:00
Monviech
dd1c4f76aa
dnsmasq: Add tip for DHCPv6 DNS server option (#737) 2025-05-23 16:35:36 +02:00
Monviech
6684c69fb1
dnsmasq: Fix DHCP reservation manual (#736) 2025-05-22 14:26:46 +02:00
Monviech
c087ccc01d
automation: Add small manual for automation ui page (#696)
* automation: First draft for a document explaining this ui component

* automation: Add firewall filter form dialog.

* Update source/manual/firewall_automation.rst

Co-authored-by: Franco Fichtner <franco@opnsense.org>

* Update source/manual/firewall_automation.rst

Co-authored-by: Franco Fichtner <franco@opnsense.org>

* Update source/manual/firewall_automation.rst

Co-authored-by: Franco Fichtner <franco@opnsense.org>

* automation: Remove legacy terminology and explain sort order and sequence

---------

Co-authored-by: Franco Fichtner <franco@opnsense.org>
2025-05-22 14:25:53 +02:00
Stephan de Wit
60e19ac562
dnsmasq: sync with current options and clarify their usage (#735)
* dnsmasq: sync with current options and clarify their usage

* Update source/manual/dnsmasq.rst

Co-authored-by: Monviech <79600909+Monviech@users.noreply.github.com>

* Update source/manual/dnsmasq.rst

Co-authored-by: Monviech <79600909+Monviech@users.noreply.github.com>

---------

Co-authored-by: Monviech <79600909+Monviech@users.noreply.github.com>
2025-05-22 13:41:33 +02:00
Ad Schellevis
cad7815aaa update default configs 2025-05-22 13:32:41 +02:00
Monviech
3b80ed58ad
dnsmasq: Specify default DHCP options better (#732) 2025-05-22 13:00:15 +02:00
7heo
08b1388df6
Update git-backup.rst (#733)
Typo
2025-05-21 13:29:23 +02:00
Ad Schellevis
1031c5e31a Development: add controller class structure 2025-05-21 10:59:40 +02:00
Ad Schellevis
4aa84dd8c4 changelogs 2025-05-20 17:56:34 +02:00
Stephan de Wit
9561b7fd56 captive portal: wrong ports for documented firewall rules 2025-05-19 16:35:47 +02:00
Monviech
7d79f65289
dnsmasq: Add dhcp boot section to docs (#731) 2025-05-19 13:09:02 +02:00
Ad Schellevis
4991e77b5f changelogs 2025-05-19 11:35:41 +02:00
Monviech
fa350c49ab
www/caddy: Remove DNS providers except Cloudflare for os-caddy-2.0.0 (#730) 2025-05-16 18:02:19 +02:00
Monviech
56e4a445a5
dnsmasq: Add value of DHCP option, add common RA mode values (#729)
* dnsmasq: Add value of DHCP option, add common RA mode values
2025-05-16 16:40:11 +02:00
Andy Binder
14e2d3f901
net/frr: update docs for OSPF neighbor feature opnsense/plugins#4694 (#723) 2025-05-16 14:58:02 +02:00
Monviech
b1f23caabc
dnsmasq: Add PTR Records, remove manual setting of router and dns options (#728)
* dnsmasq: Add PTR Records, remove manual setting of router and dns options

* dnsmasq: Manual options are not needed for simple setups, only the range is enough
2025-05-16 14:54:17 +02:00
Ad Schellevis
fcae9dd9e1 development/architecture - add operating stages 2025-05-12 18:22:51 +02:00
Stephan de Wit
3be13e30c6
captive portal: update documentation (#722)
* captive portal: update documentation

* remove commented out pass rule section

* captive portal: adjust to current situation

* Update source/manual/captiveportal.rst

Co-authored-by: Monviech <79600909+Monviech@users.noreply.github.com>

* Update source/manual/captiveportal.rst

Co-authored-by: Monviech <79600909+Monviech@users.noreply.github.com>

* Update source/manual/how-tos/guestnet.rst

Co-authored-by: Monviech <79600909+Monviech@users.noreply.github.com>

* Update source/manual/how-tos/shaper.rst

Co-authored-by: Monviech <79600909+Monviech@users.noreply.github.com>

---------

Co-authored-by: Monviech <79600909+Monviech@users.noreply.github.com>
2025-05-12 14:42:26 +02:00
Ad Schellevis
7ac0bf1c23 changelogs 2025-05-08 15:38:13 +02:00
Monviech
256a10ea19
firewall: Add multiselection hints (#721) 2025-05-08 13:44:47 +02:00
Ad Schellevis
b4c4f50227 development/guidelines/basics - add missing new lines 2025-05-08 11:22:00 +02:00
Stephan de Wit
f758b5e37c
boot: update boot troubleshooting guide (#708) 2025-05-07 16:42:07 +02:00
Monviech
1b5e6684c8
gateways: Add tutorial for failover and failback states (#719)
* gateways: Add first draft for state kills

* gateways: Add tutorial for failover and failback states.

* Update source/manual/how-tos/multiwan.rst

Co-authored-by: Franco Fichtner <franco@opnsense.org>

---------

Co-authored-by: Franco Fichtner <franco@opnsense.org>
2025-05-07 11:09:19 +02:00
robel
ac219aa438
fix spelling in shaper_bufferbloat (#718)
Co-authored-by: Belotserkovski, Rostislav <Rosti.Belotserkovski@philips.com>
Co-authored-by: Franco Fichtner <franco@lastsummer.de>
2025-05-07 10:22:04 +02:00
Ad Schellevis
fda5ca471f
ndproxy - add cloud example and refer to it in ipv6 document (#717)
* ndproxy - add cloud example and refer to it in ipv6 document

* ndproxy - update with review comments, for https://github.com/opnsense/docs/pull/717
2025-05-07 10:05:35 +02:00
Monviech
64928fa4f9
net/ndproxy: Revise setup for SLAAC only configuration (#716)
* net/ndproxy: Revise setup for SLAAC only configuration. Warn that this is generally not a good idea to do as it is quite fragile and only worth it in the most extreme edge cases. Remove all advanced descriptions because we are unsure of the whole scope. This is the minimal working reproducible setup.
2025-05-06 15:10:49 +02:00
Monviech
73463de8c5
carp: Add note about known limitations, based on experiences with vendor or configuration specific issues or network design oversights (#715)
* carp: Add note about known limitations, based on experiences with vendor or configuration specific issues or network design oversights.

* carp: Add some common switch configuration options that can mess with CARP

* carp: Make CAM learning behavior clearer.

* Update source/manual/how-tos/carp.rst

Co-authored-by: Stephan de Wit <stephan.de.wit@deciso.com>

* Update source/manual/how-tos/carp.rst

Co-authored-by: Stephan de Wit <stephan.de.wit@deciso.com>

---------

Co-authored-by: Stephan de Wit <stephan.de.wit@deciso.com>
2025-05-06 14:46:48 +02:00
Ad Schellevis
37119d5626 collect_api_endpoints.py - skip empty endpoints (unknown contents) 2025-05-06 12:41:50 +02:00
Ad Schellevis
935ba27550 Interfaces: IPv6 - remove ndproxy reference 2025-05-06 12:41:22 +02:00
Stephan de Wit
6554af9ff5
user management: add a note about user & group synchronization (#707)
* user management: add a note about user & group synchronization

* reword a bit

* review feedback
2025-05-05 16:18:22 +02:00
Monviech
4c72bbd93f
troubleshooting: Add section for restoring config.xml from backup cache via serial console (#698) 2025-05-05 11:34:23 +02:00
Ad Schellevis
ed4048d011 change Action.method to Action.methods as this can be a list of (unique) options. for https://github.com/opnsense/docs/pull/713 2025-05-04 17:04:43 +02:00
Freddie Sackur
dfcf9f3aeb
Note about menu cache file (#711)
* dev doc: note about menu cache file

* dev doc: note about ACL cache file

* dev doc: remove mention of version from notes about UI caching
2025-05-04 13:23:58 +02:00
Ad Schellevis
f44b9b32ea api doc: fix method sort order 2025-05-01 13:06:32 +02:00
Ad Schellevis
e8d878d186 api update: plugins 2025-05-01 10:05:15 +02:00
Ad Schellevis
dedf145f2f api update: core 2025-05-01 10:03:43 +02:00
Ad Schellevis
02823b6055 collect_api_endpoints.py: refactor and split extraction logic, uses a lexer now to aase further extensions. 2025-05-01 09:58:59 +02:00
Stephan de Wit
f8f0fc1572 Hardware / BIOS: remove old versions 2025-05-01 09:38:50 +02:00
Stephan de Wit
f7a8167328 Hardware / BIOS: BIOS updates for A10,A20,A30 platforms 2025-05-01 09:37:11 +02:00
Ad Schellevis
f500f841c4 Interfaces: IPv6 - minor update 2025-04-30 09:10:35 +02:00
Ad Schellevis
83d9aa86c4 development/api - camel to snake case for commands and update endpoints. 2025-04-29 20:03:20 +02:00