Monviech
4f95c4fd22
net/frr: BGP do not render empty remote-as for peer-group
2026-09-28 17:16:24 +02:00
Monviech
42668815e5
net/frr: Bump version to 1.60 (new major release) and add additional migration notes and changelog
2026-09-28 14:56:49 +02:00
Monviech
fd1cbe203d
net/frr: OSPF/OSPFv3 Passive interface should be visible by default in grid
2026-09-28 14:56:49 +02:00
Monviech
55856d40e3
net/frr: Guard M1_1_0.php migration so it doesn't get executed for unrelated frr models
2026-09-28 14:56:49 +02:00
Monviech
e6232ad9b9
net/frr: The trim in M1_1_5.php is not needed
2026-09-28 14:56:49 +02:00
Monviech
3f53a02b54
net/frr: Update model versions to the latest migration state so these won't trigger the migrations again in the future
2026-09-28 14:56:49 +02:00
Monviech
3a7b49a5fc
net/frr: OSPF/OSPFv3 Interface should be required and exclude firewall group interfaces
2026-09-28 14:56:49 +02:00
Monviech
7f5c7fdac4
net/frr: OSPF/OSPFv3 move tabs around to reflect natural configuration order
2026-09-28 14:56:49 +02:00
Monviech
9df97b592a
net/frr: OSPF passive interface moves to correct spot, the interface configuration
2026-09-28 14:56:49 +02:00
Monviech
737b483429
net/frr: make OSPF and OSPFv3 areas explicit
2026-09-28 14:56:49 +02:00
Franco Fichtner
315ca3d7e4
dns/ddclient: linter pass over executables
2026-09-28 08:45:44 +02:00
5t0n3
b3f5426338
dns/ddclient: native porkbun script ( #5599 )
2026-09-25 11:32:33 +02:00
Mark Youngman
27c894bc10
dns/ddclient: address.py lstrip should be removeprefix ( #5725 )
2026-09-25 11:29:29 +02:00
Monviech
d701990c65
net/frr: fix and complete automatic firewall rules ( #5736 )
...
* net/frr: fix and complete automatic firewall rules
Generate rules directly for every enabled routing protocol and remove the dependency on configured OSPF networks or interfaces.
* Tighten the OSPF rules a bit more
* Also guard creation of rules if frr is not enabled
2026-09-25 09:14:01 +02:00
Franco Fichtner
16e30e831c
net/firewall-legacy: also add ACLs where possible
...
Menu registrations remain in core and can be deleted when the
plugin goes away. Same is true for the ACL pattern for the
page firewall_rules.php which is anchored in core because it
is being shared with the MVC framework.
2026-09-23 10:07:53 +02:00
Franco Fichtner
be8411be79
net/firewall-legacy: moved outbound NAT page from core
2026-09-23 09:50:25 +02:00
Franco Fichtner
a18b13bef0
README: sync
2026-09-22 21:31:33 +02:00
René
58f00c2310
Vicuna/Tukan theme revised ( #5657 )
2026-09-22 21:01:24 +02:00
Frank Wall
5de7ffb2dc
Merge pull request #5344 from fraenki/puppet_200
...
sysutils/puppet-agent: release 2.0
2026-09-22 10:16:12 +02:00
Franco Fichtner
c27fb6dac7
security/openconnect: add changelog and style in rc.d script
2026-09-21 09:25:59 +02:00
Yuriy Karachev
4c0e7ef6dc
security/openconnect: clean up stale tun interfaces on start ( #5728 )
...
A crashed instance leaves ocvpn0 behind, so the rename at the next
start fails and the fresh tunnel stays on tun30000 without the
ocvpn group. Destroy ocvpn0 right before the rename. A leftover
tun30000 is harmless: openconnect reopens /dev/tun30000 and reuses
it.
AI-assisted: Zed coding agent, model DeepSeek V4 Pro
2026-09-21 09:21:31 +02:00
Greelan
a3525daf2f
webgui: navbar alignment fix for cicada theme ( #5520 )
2026-09-19 08:17:07 +02:00
Michael
2392c95f85
net-mgmt/net-snmp switch to StrictTextField ( #5715 )
2026-09-15 14:26:50 +02:00
Franco Fichtner
78af74cfb1
www/caddy: document change
2026-09-15 09:51:48 +02:00
Richard Rosalion and Claude Sonnet 5
4d827e3b1f
www/caddy: fix authentik forward-auth Host header for #5712
...
Both the outpost passthrough (reverse_proxy) and forward_auth
directives sent the auth backend's own address as Host instead of
the original request's Host. authentik's shared outpost dispatches
by Host, so it could not tell which Provider/App a forward-auth
check was for and returned 404 instead of redirecting into the
login flow.
Hardcode header_up Host {http.request.host} on both directives,
unconditional of AuthToTls, since the original Host is always what
authentik needs regardless of how the auth backend itself is
reached.
Co-Authored-By: Claude Sonnet 5 <[email protected]
2026-09-14 13:05:20 +02:00
Franco Fichtner
acb1d44b11
LICENSE: sync
2026-09-10 13:12:15 +02:00
Franco Fichtner
2549932a01
security/openvpn-legacy: move CARP hook from core
2026-09-10 13:10:45 +02:00
Frank Wall
5b87fa5f36
sysutils/puppet: add ruby dependency
2026-09-09 12:08:37 +02:00
Frank Wall
12f3ca8a87
Merge pull request #5707 from fraenki/turnserver_140
...
net/turnserver: release 1.4
2026-09-08 13:08:10 +02:00
Frank Wall
9fa5424573
Merge pull request #5706 from fraenki/acme_417
...
security/acme-client: release 4.17
2026-09-08 13:07:35 +02:00
Frank Wall
40844716ef
security/acme-client: update changelog
2026-09-08 13:05:22 +02:00
Leandro Scardua
02ff37690b
security/acme-client: add support for Hostinger DNS API ( #5693 )
2026-09-08 13:03:54 +02:00
Franco Fichtner
91d6508f44
security/intrusion-detection-content-at-antiphishing: bump
2026-09-08 09:41:28 +02:00
Franco Fichtner
77648fd1a9
sysutils/git-backup: bump and document
2026-09-08 09:39:34 +02:00
Franco Fichtner
8474fca380
sysutils/nextcloud-backup: document previous
2026-09-08 09:37:33 +02:00
Franco Fichtner
21d53eda61
net/frr: bump revision for now
2026-09-08 09:35:37 +02:00
Franco Fichtner
975db814a1
misc/theme-rebellion: style
2026-09-08 09:34:39 +02:00
Frank Wall
deba2700b7
security/acme-client: deprecate deploy hook truenas_ws, refs #5498 , refs #5660
2026-09-07 17:38:05 +02:00
Frank Wall
65f99c0f2b
security/acme-client: fix using incorrect truenas_ws config keys, closes #5498
...
This regression was introduced in 72043b78bc
2026-09-07 17:01:57 +02:00
Frank Wall
0f035facb3
net/turnserver: fix permissions when running as non-root user, closes #5704
...
See also:
https://github.com/FreeBSD/freebsd-ports/commit/87d11fd7305cb245dff284e34be3a5c0c423aa60
2026-09-07 16:17:05 +02:00
Frank Wall
1940ee620f
security/acme-client: release 4.17
2026-09-07 15:13:03 +02:00
Frank Wall
d320db69b9
security/acme-client: fix FreeMyIP class name, refs #5682
2026-09-07 14:15:35 +02:00
Leonardo de Macedo Sartorello
db3ff93a75
security/acme-client: add support for FreeMyIP DNS API ( #5682 )
...
* add support for FreeMyIP DNS API
2026-09-07 14:13:01 +02:00
Frank Wall
9102972d36
security/acme-client: fix gcore indentation, refs #5544
2026-09-07 14:00:14 +02:00
Frank Wall
6d8d13123a
security/acme-client: fix gcore class/filename/sort order, refs #5544
2026-09-07 13:56:32 +02:00
Frank Wall
5c8de2c0c5
Merge pull request #5544 from olofvndrhr/master
...
security/acme-client: Add GCore DNS Provider
2026-09-07 13:52:44 +02:00
Frank Wall
c5074855a9
Merge pull request #5473 from progS1m/patch-1
...
security/acme-client: fix incomplete permissions
2026-09-07 13:46:46 +02:00
François Maymil and Claude Opus 5
261c32ef71
sysutils/git-backup: don't accept credentials in the backup url ( #5702 )
...
The url mask allows a userinfo section, and Git::backup() adds the mandatory
User Name field on top, so an ssh url that already carries a user ends up as
ssh://git@git@host/... and the push never authenticates. Credentials belong in
the User Name and Password fields, so exclude them from the url.
Closes #5477
Co-authored-by: Claude Opus 5 (1M context) <[email protected]
2026-09-06 13:26:59 +02:00
Martin Wasley
31cc1ea4a2
Colour correction to tokenize entry box ( #5700 )
...
When adding a new entry to tokenize boxes the border/background and colour were wrong. This changes it to no border, transparent background and white text.
2026-09-04 19:57:23 +02:00
Nuadh123 and Daniel Lysfjord
eef7ad9e59
sysutils/nextcloud-backup: move creation of root directory to before addhostname check ( #5295 )
...
and create subdir if neede
Co-authored-by: Daniel Lysfjord <[email protected]
2026-09-02 16:14:59 +02:00
Monviech