Commit graph

5587 commits

Author SHA1 Message Date
Konstantinos Spartalis
eceb4ea9d1
ddclient: Add some ACL (#5476) 2026-06-03 14:15:04 +02:00
Franco Fichtner
72597ed8e4 www/nginx: document fix 2026-06-02 11:10:57 +02:00
Franco Fichtner
c42a129ff9 security/maltrail: update 2026-06-02 11:08:44 +02:00
Franco Fichtner
03a04234d9 net/frr: bump revision after change 2026-06-02 11:04:37 +02:00
Jan Chlouba
ce226aa858
nginx: fix HTTP/3 reuseport duplicates (#5184) 2026-06-01 10:39:14 +02:00
NullCascade
2b98f0702c
rc.d: use absolute path for python3 in maltrailsensor + maltrailserver (#5466)
service(8) invokes rc.d scripts with PATH=/sbin:/bin:/usr/sbin:/usr/bin
via `env -i`, which does not include /usr/local/bin where python3 lives.
daemon(8)'s execvp("python3") ENOENTs all four PATH entries and the
supervisor exits silently after the pre-detach parent has already
returned 0 to rc.subr. Net result: service start exits 0 with nothing
running, and boot-time autostart is broken when maltrailsensor_enable=YES.

Use absolute path /usr/local/bin/python3 to bypass the PATH lookup,
matching the convention used by other OPNsense plugin rc.d scripts
(stunnel, ddclient, tinc, openconnect).

Validated on OPNsense 26.4 / FreeBSD 14.3-RELEASE-p12 across
3 start/stop cycles + truss re-trace + full cold-start reboot.

Co-authored-by: Tom Reid <tokamaktx@users.noreply.github.com>
2026-06-01 10:37:24 +02:00
Monviech
cb9a5d6d69
net/frr: BGP Improve visibility in ModelRelationFields and enable internalModelUseSafeDelete (#5461)
* net/frr: Improve visibility in ModelRelationFields and enable internalModelUseSafeDelete

* Adjust BGP template to only emit a single set for multiple selected items with the same name
2026-05-22 11:32:00 +02:00
Franco Fichtner
37562c36e9 security/netbird: annotate hotfix 2026-05-22 10:33:43 +02:00
Franco Fichtner
191dff0848 security/strongswan-legacy: bump revision 2026-05-22 10:32:17 +02:00
Franco Fichtner
6d3cc0b4f4 security/tinc: bump revision after fix 2026-05-22 10:31:22 +02:00
Steve Hay
6a8edb972b
dns/rfc2136: allow "*." prefix in hostname for wildcard updates (#5460)
When using rfc2136 dynamic DNS, users may want the same address
record to apply to every subdomain of the configured hostname (e.g.
for host.example.org and *.host.example.org to resolve to the same IP).
2026-05-22 00:07:45 +02:00
Franco Fichtner
13ed9a251c dns/rfc2136: add missing changelog 2026-05-21 21:19:24 +02:00
Monviech
d3c3e79628
net/frr: OSPF/OSPF6 More visibility and safety for ModelRelationField references (#5459)
* Allow multiple prefix list selections in a route map in OSPF6 as well

* Improve visibility for route-maps and prefix-lists in OSPF/OSPF6 and enable internalModelUseSafeDelete
2026-05-21 14:53:07 +02:00
Franco Fichtner
b495e6b001 net/ndproxy: set EoL 2026-05-21 09:59:00 +02:00
Franco Fichtner
34a9438fbb security/strongswan-legacy: follow core in naming IPv4+6 "any"
This will die eventually since "inet46" is only in the legacy code,
but in order to mark this spot as done we do the rename.
2026-05-20 11:15:17 +02:00
Franco Fichtner
842ec4b972 security/netbird: fix setupKey passing for #5452 2026-05-20 08:19:15 +02:00
Monviech
0798cde904 net/frr: OSPF improve many to one relationship between prefix lists and route maps, allow multiple selection 2026-05-19 13:52:02 +02:00
Franco Fichtner
4b94d331ae make: readlink -f needs an argument 2026-05-18 13:11:15 +02:00
Konstantinos Spartalis
3e46afbae7
tinc: evaluate if hosts enabled (#5447) 2026-05-15 16:51:06 +02:00
Franco Fichtner
f16b0a5cbf security/netbird: start a changelog 2026-05-12 13:49:53 +02:00
Franco Fichtner
d482ffba2a net/frr: minor nit 2026-05-12 10:07:37 +02:00
Monviech
6b9a6d4704
net/frr: Update pkg-descr for v1.52 (#5435)
* net/frr: Update pkg-descr for v1.52

* Revise contributor details in pkg-descr
2026-05-12 10:01:25 +02:00
Franco Fichtner
238848e022 dns/ddclient: new version 2026-05-12 09:52:42 +02:00
Franco Fichtner
bf8a657e26 security/q-feeds-connector: wrap up 1.6 2026-05-12 09:43:31 +02:00
Franco Fichtner
0cc81b599b security/etpro-telemetry: bump 2026-05-12 09:39:44 +02:00
Ad Schellevis
884bae968e security/q-feeds-connector - missed a file in aa77707728 for https://github.com/opnsense/plugins/issues/5417 2026-05-12 07:33:34 +02:00
Ad Schellevis
317f860947 security/etpro-telemetry - swapped log lines, closes https://github.com/opnsense/plugins/issues/5433 2026-05-12 07:32:22 +02:00
txr13
3cc717d619
Fix spelling in input.xml (#5434)
Miscellaneous spelling fixes.

Co-authored-by: Lance Hathaway <8388429+txr13@users.noreply.github.com>
2026-05-12 07:22:40 +02:00
Ad Schellevis
aa77707728 security/q-feeds-connector - add alert when license expired or invalid. closes https://github.com/opnsense/plugins/issues/5417 2026-05-10 14:46:18 +02:00
Ad Schellevis
7f87ba3846 security/q-feeds-connector - use local file timestamp for feed updated_at, closes https://github.com/opnsense/plugins/issues/5415 2026-05-08 19:21:39 +02:00
Ad Schellevis
8ad516a76d security/q-feeds-connector - add error message for https://github.com/opnsense/plugins/issues/5428 2026-05-08 07:33:09 +02:00
Frank Wall
be18b31cb3
Merge pull request #5423 from fraenki/turnserver_130
net/turnserver: release 1.3
2026-05-05 14:04:01 +02:00
Franco Fichtner
e4375d20cc security/q-feeds-connector: finish release notes 2026-05-05 11:54:38 +02:00
Franco Fichtner
4c9ec85b18 security/q-feeds-connector: prep for hotfix 2026-05-05 11:50:17 +02:00
Ad Schellevis
b9084be77b security/q-feeds-connector: ignore invalid json index file leading to instant exit of qfeedsctl.py 2026-05-04 18:20:26 +02:00
Ad Schellevis
7b3b5a4e3c security/q-feeds-connector: add optional locked mode in qfeedsctl.py for cron runners and wait for configfile changes when HTTP 401 is thrown. closes https://github.com/opnsense/plugins/issues/5416
This should prevent firewalls from spamming Q-Feeds infrastructure when either an empty or invalid token is specified.
2026-05-04 17:29:55 +02:00
Franco Fichtner
11ac729b07 sysutils/cpu-microcode: revoke tier 2
A number of cheapish hardware has issues with microcode updates now
and then preventing them to boot.  Since this isn't good enough for
our standards revoke tier 2 so that this goes back to community scope.

PR: https://forum.opnsense.org/index.php?topic=51786.msg266329#msg266329
2026-05-04 11:33:31 +02:00
Franco Fichtner
453de9e8f3 security/netbird: move validation message to help text 2026-05-04 11:29:56 +02:00
Myah Mitchell
66845547dc security/netbird: added netbird_devices() so that wt0 is a volatile interface 2026-05-04 11:24:28 +02:00
Franco Fichtner
ec0f068b0c security/acme-client: bump revision to chase rename 2026-05-01 09:50:44 +02:00
Konstantinos Spartalis
0a45144c4e
netbird: add option/auth banner (#5404) 2026-04-28 15:48:39 +02:00
Frank Wall
f3dd27587c net/turnserver: bump version 2026-04-28 14:00:46 +02:00
Frank Wall
f8395a54dd net/turnserver: remove obsolete options from config
The fixes the following issues when using the most recent version of Coturn:

ERROR: no-cli option is deprecated, see --cli
WARNING: Bad configuration format: no-tlsv1
WARNING: Bad configuration format: no-tlsv1_1
WARNING: Bad configuration format: no-stun-backward-compatibility
2026-04-28 13:59:22 +02:00
Franco Fichtner
0ae49cfafc devel/grid_example: add option field to showcase grid %field magic
The form %field magic works here too but let's not complicate an
example controller with it.

PR: https://github.com/opnsense/core/issues/10225
2026-04-28 10:51:01 +00:00
Franco Fichtner
825702e60c devel/helloworld: add dynamic hint usage
PR: https://github.com/opnsense/core/issues/10225
2026-04-28 10:11:20 +00:00
Franco Fichtner
12e13fc716 net/isc-dhcp: add isolated menu registration code 2026-04-22 08:03:02 +02:00
Franco Fichtner
ed017f7e1e make: definitely the wrong coffee this morning 2026-04-17 09:32:43 +02:00
Franco Fichtner
58c1ae78b5 make: add proper merge target origin 2026-04-17 09:30:58 +02:00
Maksim Tokarev
846f3f5f23
dns/ddclient: Add multiple hostname support for cloudflare (#5405) 2026-04-16 08:26:25 +02:00
Franco Fichtner
acf0c92bb5 net-mgmt/zabbix-proxy: remove leftover 2026-04-13 23:20:58 +02:00