5532 Commits

Author SHA1 Message Date
Ad Schellevis
12f88282d9 Squashed commit of the following:
commit b256ed7fcfa5e36bfd29e08c479bd02b461b21f5
Author: Ad Schellevis <ad@opnsense.org>
Date:   Sun Apr 12 14:31:54 2026 +0200

    net/frr - Routing: STATIC, finish https://github.com/opnsense/plugins/pull/5390 and add diagnostics.

commit be8a53d3d2
Author: Sven Scholle <sven@shelldog.de>
Date:   Sat Apr 11 14:50:56 2026 +0200

    net/frr: add BFD dependency support for static routes

    We redistribute static routes from staticd into OSPF via WireGuard tunnels.
    We want the redistribution to depend on whether the tunnel is actually up.
    Since WireGuard interfaces remain up even when the tunnel is not functional, BFD appears to be the simplest solution for detecting tunnel failures.
2026-04-12 14:35:29 +02:00
Franco Fichtner
042783df72 github: update pull request template following tweaks on master 2026-04-12 09:53:02 +02:00
Franco Fichtner
4d7a938c13 net/frr: some small style updates while here 2026-04-09 10:30:26 +02:00
Franco Fichtner
290c67d271 dns/ddclient: linter complaints fixed 2026-04-09 10:23:37 +02:00
Franco Fichtner
ec68572f0f security/acme-client: rename class file name to match class name 2026-04-09 10:23:16 +02:00
Franco Fichtner
aa099c5901 security/q-feeds-connector: wrap up this revision 2026-04-09 09:50:45 +02:00
Franco Fichtner
35508e79e1 LICENSE: sync 2026-04-09 09:48:16 +02:00
Franco Fichtner
32901792ad dns/ddclient: bump revision for now 2026-04-09 09:45:29 +02:00
Frank Wall
8ec5fbd5ba Merge pull request #5345 from fraenki/turnserver_120
net/turnserver: release 1.2
2026-04-07 16:28:45 +02:00
Ad Schellevis
56a62796f8 net/frr: add local-address and interface options to BFD neighbors (#5317)
Fix regression, missing line ending.
2026-04-05 12:05:29 +02:00
r3m8
d112536444 net/frr: add local-address and interface options to BFD neighbors (#5317)
* net/frr: add local-address and interface options to BFD neighbors

* net/frr: simplify BFD template conditions

Remove unnecessary empty strings in Jinja2 template (default false).

Co-authored-by: Ad Schellevis <AdSchellevis@users.noreply.github.com>

---------

Co-authored-by: Ad Schellevis <AdSchellevis@users.noreply.github.com>
2026-04-05 12:01:55 +02:00
n3wtype
7657da6cd7 os-frr: Add description of bgp neighbor to frr.conf (#5364)
Co-authored-by: Marcin Matlag <mmatlag@cloudferro.com>
2026-04-05 11:57:24 +02:00
Ad Schellevis
1e7cf83624 net/frr - Routing: Diagnostics: OSPFv3 / routing - missing routes due to changed frr output. closes https://github.com/opnsense/plugins/issues/5252 2026-04-05 11:52:53 +02:00
Ad Schellevis
948648891b net/frr - after wwitch to watchfrr, setup.sh doesn't seem to be triggered, most likely https://github.com/opnsense/plugins/pull/5367 2026-04-04 10:39:17 +02:00
cakallie
2d3ee9f491 dns/ddclient: add all-inkl.com KAS API DynDNS provider (#5339)
* dns/ddclient: add all-inkl.com KAS API DynDNS provider

Adds a new Python provider for all-inkl.com hosting using the KAS SOAP API
(KasApi.wsdl). Supports A and AAAA records, including root (@) and wildcard (*)
entries. Credentials are passed per-request (no separate auth step).

- allinkl.py: new provider class AllInkl, service key 'allinkl'
- dialogAccount.xml: show Zone field for service_allinkl
- DynDNS.xml: add allinkl to static service list (ddclient backend fallback)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

* dns/ddclient: address review feedback for all-inkl.com provider

- Remove allinkl entry from DynDNS.xml; known_services() handles
  registration automatically for Python providers
- Replace regex-based XML parsing with xml.etree.ElementTree:
  fault detection, record lookup and update success check
- Also catches ET.ParseError for malformed responses
- Fix German comments in docstring to English

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

---------

Co-authored-by: Carsten <carsten@kallies-net.de>
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-03 14:55:45 +02:00
Ad Schellevis
d1ebcc49ad security/q-feeds-connector - ignore "pass" log lines for qfeedsctl.py logs, closes https://github.com/opnsense/plugins/issues/5349 2026-03-29 10:42:41 +02:00
Maxfield Allison
d0d9a7ffb2 net/frr: add BGP maximum-paths support for ECMP (#5340) 2026-03-27 09:55:15 +01:00
Konstantinos Spartalis
fd6d2de572 plugins: use Konstantinos' real name in historic mentions (#5352) 2026-03-26 16:57:34 +01:00
Konstantinos Spartalis
3ec12a40ec Contributing: typo (#5351) 2026-03-26 16:57:05 +01:00
Frank Wall
52f68df15c net/turnserver: bump version 2026-03-24 18:39:03 +01:00
Frank Wall
f9ad70c77c net/turnserver: add support for external-ip, closes #4906 2026-03-24 18:37:15 +01:00
Frank Wall
1e584c803b net/turnserver: modernize UI template 2026-03-24 18:18:56 +01:00
Frank Wall
8788b22a16 security/acme-client: update changelog 2026-03-24 17:52:54 +01:00
Frank Wall
af38ee45eb Merge pull request #5282 from pgerber/common-name
security/acme-client: always use configured cert name in cert description
2026-03-24 17:24:17 +01:00
Frank Wall
fe22642209 security/acme-client: fix truenas_ws filename, refs #5309 2026-03-24 17:17:42 +01:00
Konstantinos Spartalis
678a930dfb security/acme-client: add deploy hook truenas_ws (#5309) 2026-03-24 17:09:00 +01:00
Franco Fichtner
13c5cea88c www/nginx: update revision 2026-03-24 11:21:30 +01:00
Franco Fichtner
6f80f6882b dns/ddclient: update revision 2026-03-24 11:19:55 +01:00
Franco Fichtner
27d00b7c70 net/frr: clear revision 2026-03-24 11:18:07 +01:00
JNikodemus
a24a88b038 dns/ddclient hetzner existing record update patch (#5188)
* Update hetzner.py

Added workaround for API bug on update record. Thanks to @arcanconsulting

* Update hetzner.py

Added LOG_NOTICE for deletion.

* Update hetzner.py

Updated _update method. No workaround needed.

* Update hetzner.py

fix: correct indentation of return statement in _update_record

* Update hetzner.py

fix: removed ttl from _update_record as its not supported (thanks to Ollienator).

* Removed _get_record() and existence-check of zone to save API-Calls. Thanks to @TheRealBecks

* restored filepermissions to 755 and removed useless comment

* removed links and added original whitespaces.

* removed whitespace on line 62

---------

Co-authored-by: Julian Nikodemus <dev@nkdms.de>
2026-03-23 19:18:14 +01:00
Franco Fichtner
9c047f8733 www/OPNProxy: fix issue with 2e56601903 2026-03-23 16:59:23 +01:00
Maurice Walker
4430e38986 net/tayga: relax RFC 6052 restrictions (#5321)
Allow non-global IPv4 addresses when using Well-Known Prefix 64:ff9b::/96
2026-03-20 13:26:14 +01:00
GitHoubi
855c662052 os-nginx: fix setup command paths for nginx and php_fpm (#5335)
Co-authored-by: GitHoubi <openclaw@houbi.ch>
2026-03-20 12:10:37 +01:00
Franco Fichtner
0e62a49924 net/wol: add access to get_arp so dashboard widget works
For core the dashboard ACL holds all the dashboard related API
patterns but we don't want to taint it with plugin requirements.

So instead of adding a WoL-Dashboard privilege add the required
API endpoint to the standard ACL to unbreak.  This is only relevant
for the plugin when installed and explicitly using the privilege.
2026-03-12 22:00:04 +01:00
Franco Fichtner
a4191cf131 misc/theme-cicada: bump revision 2026-03-12 11:02:01 +01:00
Daniel Ohnesorge
e389a81569 net/frr: add per-neighbor local-as option for BGP (#5308) 2026-03-12 10:21:30 +01:00
René
06b8dae9d1 Firewall - old rules - fix disabled rule (#5310)
Co-authored-by: Manuel <mr-manuel@outlook.it>
2026-03-11 15:04:59 +01:00
Franco Fichtner
ca028fc1ce security/q-feeds-connector: annotate last fix 2026-03-11 09:00:03 +01:00
Franco Fichtner
4b70c26279 dns/ddclient: changelog 2026-03-11 08:58:46 +01:00
Ad Schellevis
78e3906a3e security/q-feeds-connector - on reconfigure, ensure alias cache is flushed to prevent consumers not knowing about our just registered dynamic entries. closes https://github.com/opnsense/plugins/issues/5288 2026-03-09 11:03:22 +01:00
Franco Fichtner
02ec4f56eb LICENSE: sync 2026-03-04 11:36:43 +01:00
Franco Fichtner
7e3e3e3c0b dns/ddclient: bump revisionm 2026-03-04 09:44:42 +01:00
Franco Fichtner
e05c8ee1da net/upnp: coding style and version bump 2026-03-04 09:41:07 +01:00
Self-Hosting-Group
6c81f6d085 net/upnp: Complete service improvements 2/2 (#5256) 2026-03-04 09:34:53 +01:00
Franco Fichtner
cc2149dedf dns/ddclient: reduce code and fix #5287 2026-03-04 08:35:24 +01:00
Franco Fichtner
1728943cca misc/theme-flexcolor: manually merge #5095 2026-03-03 14:28:35 +01:00
René
cd01f842bf Theme Cicada/Vicuna (#5279) 2026-03-03 13:51:01 +01:00
Franco Fichtner
7baf70309f sysutils/nextcloud-backup: changelog and version 2026-03-03 13:38:39 +01:00
Franco Fichtner
c4758d3525 net/upnp: mark this release as development 2026-03-03 13:33:41 +01:00
Peter Gerber
8887a667fa security/acme-client: always use configured cert name in cert description
This a fix for the PHP warning below. I propose to simply never use the
certificate name because:

a) It's easier to understand if the description always has the same source.

b) The use of a common name is no longer recommended and will disappear
   sooner or later anyway [1,2].

[1]: https://letsencrypt.org/docs/glossary/#def-CN
[2]: https://letsencrypt.org/docs/profiles/#tlsserver

Related PHP warning:

[02-Mar-2026 15:02:54 Etc/UTC] PHP Warning:  Undefined array key "commonname" in /usr/local/opnsense/mvc/app/library/OPNsense/AcmeClient/LeCertificate.php on line 206
2026-03-02 16:14:45 +00:00