Commit Graph

466 Commits

Author SHA1 Message Date
kulikov-a f326f0fd8d tmpfs logs fix (#4199) 2024-12-16 08:38:06 +01:00
Monviech b8c07d4a62 www/caddy: Add missing changelog for 1.7.6 (#4405) 2024-12-13 16:15:18 +01:00
Gavin Chappell 7c0c385c94 opnsense/plugins#4402: configure custom permissions on caddy.sock (#4403) 2024-12-13 11:00:00 +01:00
Franco Fichtner 8dedafb725 www/OPNProxy: remove sessionClose() 2024-12-12 08:38:11 +01:00
Monviech b4e133bb39 www/caddy: Fix redirect regression (#4390)
www/caddy: Fix redirect regression, always attach http to redir instead of empty default
2024-12-10 08:47:27 +01:00
Franco Fichtner bb2ec32b0e www/caddy: remove sessionClose() 2024-12-10 08:18:10 +01:00
Monviech 6d79d32ea8 www/caddy: Fix wildcard certificate extraction for widget (#4385)
* www/caddy: Fix wildcard certificate extraction for widget

Co-authored-by: Franco Fichtner <franco@lastsummer.de>

---------

Co-authored-by: Franco Fichtner <franco@lastsummer.de>
2024-12-05 08:11:11 +01:00
Franco Fichtner ae922ba20c www/nginx: bump cert.pem location 2024-12-03 20:30:52 +01:00
Monviech 6bde751bc9 www/caddy: Add Load Balancing options to Reverse Proxy and Layer4 Proxy (#4379)
* www/caddy: Add Load Balancing options to Reverse Proxy and Layer4 Proxy

* www/caddy: Add Load Balancing options to Reverse Proxy and Layer4 Proxy

* Update www/caddy/src/opnsense/mvc/app/controllers/OPNsense/Caddy/forms/dialogHandle.xml

Co-authored-by: Franco Fichtner <franco@lastsummer.de>

* www/caddy: Add changelog

---------

Co-authored-by: Franco Fichtner <franco@lastsummer.de>
2024-12-02 16:15:58 +01:00
Monviech 3913456755 www/caddy: widgets, hide unused certs, improve error handling (#4372)
* www/caddy: CaddyCertificate widget, compare certs on disk with configured hostnames and only display relevant ones

* www/caddy: Caddy Domain widget improve error handling
2024-12-02 14:40:35 +01:00
Monviech 088ab968c7 www/caddy: Add TLS termination to Layer4 Proxy (#4364)
* www/caddy: Add TLS termination to Layer4 Proxy

* www/caddy: Unhide important options from advanced and change position of new TerminateTls

* www/caddy: default in template is better, reduce diff

* www/caddy: Add changelog

* www/caddy: Improve UX of layer4 dialog, since it is unclear what happens when routing type is not exposed

* www/caddy: Make style
2024-11-29 17:49:44 +01:00
Monviech ec4b328027 www/caddy: Add h2c protocol to handler (#4369)
* www/caddy: Add h2c protocol to handler

* www/caddy: Hide tls options when http or h2c is selected

* www/caddy: elif is better, reduce diff

* www/caddy: Add comments for clarity
2024-11-29 17:31:30 +01:00
Monviech 5925be8c33 www/caddy: Refactor certificate extraction to Trust model (#4365)
* www/caddy: Refactor certificate extraction script to use model

* www/caddy: caddy_certs remove namespace, use load_phalcon, use getCaChain to get full chain
2024-11-29 10:45:45 +01:00
Franco Fichtner 4f40b607a1 www/nginx: style issue 2024-11-11 10:28:20 +01:00
Franco Fichtner 1e23572053 www/nginx: fix isEmpty() use #4342 2024-11-09 12:44:44 +01:00
Monviech 50f261d4e5 www/caddy: Fix access list handle being the same duplicate string when appended to both wildcard and subdomain. (#4334) 2024-11-04 17:26:41 +01:00
Monviech 72e09d54d1 www/caddy: Add Layer4 openvpn, winbox and quic matcher (#4325)
* www/caddy: Add CRUD for Layer4 OpenVPN matcher with mode and static key support.

* www/caddy: Export static keys to the filesystem as uuid.key

* www/caddy: Remove validation that checks for multiple keys, help text is enough.

* www/caddy: Expand layer4 template for all supported OpenVPN modes.

* www/caddy: Prevent multiple static keys for modes other than crypt2_client. Fix helptexts.

* www/caddy: Add unique constraint to description of openvpn static key

* www/caddy: Changelog and version bump

* www/caddy: Make static key optional when choosing the tls mode in openvpn matcher

* www/caddy: Prepare new Layer7 Matcher Tab for more customizable matchers in the future.

* www/caddy: Add Layer4 QUIC matcher.

* www/caddy: Rename matcherTab

* www/caddy: Revert a4ea0cb3 since its non operational and will not be needed for a while anyway

* www/caddy: Changelog
2024-11-04 17:26:24 +01:00
Monviech e806ea3fd6 www/caddy: Remove default route from layer4 since its obsolete (#4323) 2024-11-04 17:25:09 +01:00
Monviech 72dfcfa12b www/caddy: Fix WebGUI ports validation (by removing it) (#4311)
* www/caddy: Remove WebGUI validation
2024-10-21 20:54:40 +02:00
Monviech 75702c050d www/caddy: Put Layer4 Proxy into own menu, cleanup reverse_proxy.volt (#4312)
* www/caddy: Move Layer4 tab to own Menu entry to make it less convoluted.

* www/caddy: Remove stray data-column-id

* www/caddy: Fix ACL for Layer4 menu

* www/caddy: Cleanup terminology of previous

* www/caddy: Rename Layer4 to Layer4 Proxy

* www/caddy: Cleanup reverse_proxy.volt. Remove Subdomain tab and add it to the Domains tab. Remove some of the hide logic for subdomains for brevity. Add clear all button for filter by domain selectpicker.

* www/caddy: Adjust helptext and remove style that is no longer needed due to change where subdomains are displayed

* www/caddy: Changelog and version bump

* www/caddy: Remove stray data-column-id in handle bootgrid, again
2024-10-21 17:02:36 +02:00
Franco Fichtner 4f9801f9de www/caddy: style fix 2024-10-16 08:31:10 +02:00
Monviech 30a1d4796e www/caddy: Complete Layer4 routing feature (#4281)
* www/caddy: Improve Layer 4 Routes to allow configurations outside the context of listener_wrappers, streaming and loadbalancing any TCP/UDP traffic on custom ports.

* www/caddy: Add validations for Layer 4 Routes.

* www/caddy: Control visibility of FromDomain in Layer4 based on Matcher. Remove need to always select * even when matcher does not support domains. Remove requirement for FromDomain, it is now validated based on selected Matcher.

* www/caddy: Cleanup validations, add isFieldChanged where applicable, removed weird old subdomain validation.

* www/caddy: Introduce InvertMatchers to invert any matchers, replacing the not tls sni matcher. Add HTTP and TLS without domain requirement as additional matchers. Add validations to ensure these matchers can not be chosen for listener_wrappers. Improve validations to ensure domain is empty when not using HTTP Host Header or TLS SNI Client Hello matchers.

* www/caddy: Bump model version. Add changelog.

* www/caddy: Since the prior validation demanded * and required FromDomain to be filled out, the new validation has to allow this too to avoid migration issues.

* www/caddy: Implement sequence number so rules can be sorted and be processed in custom order.
2024-10-08 13:00:43 +02:00
Monviech 8e4128a353 www/caddy-custom: Update layer4 module (#4279) 2024-10-04 22:12:43 +02:00
Franco Fichtner 1118565a1a www/caddy: misplaced release note 2024-10-02 08:09:30 +02:00
Monviech 07fae7ecf9 www/caddy: Add redir directive to HTTP Handler (#4263)
* www/caddy: Directive can be chosen in HTTP Handler, redir added to create HTTP redirects.

* www/caddy: Disable reverse_proxy specific fields when redir is chosen, these fields do not generate anything in the config even when they have been filled out. The disable property makes that clearer to the user. Unhide directive from advanced mode so its easier to create basic redirects. Clean up style names for consistency.

* www/caddy: HandleDirective does not need default in template
2024-09-29 09:11:58 +02:00