Commit Graph

1046 Commits

Author SHA1 Message Date
Monviech 97b46f8102
Update caddy.rst for www/caddy: v1.5.5 (#556) 2024-04-24 17:26:41 +02:00
Monviech a744c2893a
Update caddy.rst - forgot : (#555) 2024-04-20 09:22:44 +02:00
Ad Schellevis 23882a3414 System: Settings: Logging - mention rotate cron as a tip (https://github.com/opnsense/core/commit/917cfdc2cbf) 2024-04-19 17:03:53 +02:00
Monviech 0d838464f7
www/caddy: Add new upstream load balance description (#552) 2024-04-19 14:10:03 +02:00
Ad Schellevis e6e43c3672 changelogs 2024-04-18 18:26:41 +02:00
Ad Schellevis cc27fb2c78 fix broken links 2024-04-18 18:26:41 +02:00
Franco Fichtner 2b8e776366 dhcp: update DHCRelay section to reflect reality of 24.1.6 2024-04-18 09:04:55 +02:00
Stephan de Wit aeb31a5a6e system: multi-wan: add a tip for handling traffic towards private networks 2024-04-15 15:38:01 +02:00
Thomas C d838de2615
Added note to create NAT outbound rule for redirect-gateway to work (#554)
* Added note to create NAT outbound rule for redirect-gateway to work
https://github.com/opnsense/core/issues/7318

* Added a brief info abount redirect-gateway

---------

Co-authored-by: Thomas Cekal <admin@cekal.org>
2024-04-15 13:10:55 +02:00
Ad Schellevis 594fd7a696 how-tos/wireguard-client - align key generation to situation in 24.1. closes https://github.com/opnsense/docs/issues/553 2024-04-14 16:57:33 +02:00
Stephan de Wit bbe50b3abc carp: minor clarifications 2024-04-12 16:22:03 +02:00
Stephan de Wit c7b6de9b9e carp: clarify on the concept of a VHID and the CARP implementation. Also add the procedure for safely adding a Virtual IP to a running CARP cluster 2024-04-12 13:30:28 +02:00
Monviech 71ece67d04
www/caddy: Changes for version 1.5.3 and 1.5.4 (#548)
* Update caddy.rst - Some terminology changes for the new os-caddy version.

* Update caddy.rst - Small Typo fixed.

* Update caddy.rst - DNS01 is not needed for Dynamic DNS to work

* Update caddy.rst - Another small typo.

* Update caddy.rst

Add HTTP-01 challenge redirection option

* Update caddy.rst

- Added Tutorial section for the HTTP-01 challenge redirection
- A few more changes to get the docs in line with the new os-caddy-1.5.3 update

* Update caddy.rst - Add HTTP Response Code and Message

* Update caddy.rst - Add Header Manipulation

* Update caddy.rst - Added short tutorial how to use the most common header manipulation.

* Update caddy.rst - Improve header manipulation tutorial with the most common usecase, reverse proxying to an upstream webserver with vhosts.

* Update caddy.rst - Format fix

* Update caddy.rst - Add new fields for forward_auth support

* Update caddy.rst - Add configuration example for Authelia

* Update caddy.rst - Reformat doc

* Update caddy.rst

* Update caddy.rst - Again a few typos

* Revert all changes regarding forward_auth in caddy.rst

Since implementing this feature properly would take a redesign how the current handle/reverse_proxy structure works, it is unfeasible for now.

I am unsure the usecase is really there either. With basic_auth implemented, it's far easier to restrict access in a less convoluted way.

Combining basic_auth with http logs and crowdsec, makes bruteforcing also impossible, IP addresses are banned quite swiftly.

* Update source/manual/how-tos/caddy.rst - Typo

Co-authored-by: Dany Marcoux <github@dmarcoux.com>

* Update source/manual/how-tos/caddy.rst - Typo

Co-authored-by: Dany Marcoux <github@dmarcoux.com>

---------

Co-authored-by: Dany Marcoux <github@dmarcoux.com>
2024-04-11 14:20:33 +02:00
Monviech 94ee5e68e6
Update models_fieldtypes.rst - Add example to display multiple fields (#551) 2024-04-05 14:40:09 +02:00
Hritwik 040d2bdffe
wireguard: fix the order of steps in docs (#550) 2024-04-05 09:13:01 +02:00
Ad Schellevis c0f908a735 changelogs 2024-04-04 14:12:25 +02:00
Franco Fichtner 096eb7861d wireguard: slight modification for current GUI
how-tos are still busted but need more work anyway.
2024-04-04 13:35:33 +02:00
Dany Marcoux a0f4ac7ca4
Add instructions in Caddy on how to prevent the HTTP_REFERER error (#547)
While setting up a reverse proxy for the OPNsense web UI, I stumbled on
this error. Without this configuration change, we get the following
error after logging in to https://opn.example.com

> The HTTP_REFERER "https://opn.example.com/" does not match the predefined settings
2024-03-28 17:55:31 +01:00
Ad Schellevis 86ad155808 changelogs 2024-03-28 13:04:55 +01:00
Monviech 5703a65b37
Update caddy.rst (#546)
TLS Insecure Skip Verify added to docs
2024-03-28 08:35:44 +01:00
Ad Schellevis 01d23c0b9e caddy - fix some compile warnings 2024-03-20 14:38:16 +01:00
Ad Schellevis b36e459f7f changelogs 2024-03-20 14:36:58 +01:00
Monviech 6dbed48048
www/caddy: Documentation (#545) 2024-03-20 14:14:35 +01:00
Ad Schellevis 3745c9d920 ipsec/openvpn - fix invalid IP notations, closes https://github.com/opnsense/docs/issues/531 2024-03-17 19:57:06 +01:00
Ad Schellevis e88821a9e1 development - add csv import/export helpers. closes https://github.com/opnsense/docs/issues/541 2024-03-17 19:51:39 +01:00
Ad Schellevis 2795d75201 development/frontend/models - add volatile option. closes https://github.com/opnsense/docs/issues/542 2024-03-17 19:02:18 +01:00
Stephan de Wit 9e3010b482 sfp_compatibility: add 1G MMF and 1/2.5/5/10G modules 2024-03-14 14:10:27 +01:00
Monviech d272e953dd
Update README.md (#544)
Hint the use of sphinx autobuild in Readme.md. It's a great tool to see a live preview while writing docs and editing them. The instant feedback really helps to get work done faster.
2024-03-13 17:36:04 +01:00
Stephan de Wit 58e7286b3a aliases: explain OpenVPN group alias type constraint 2024-03-13 14:00:31 +01:00
Stephan de Wit f16a148b52 OPNWAF: clarify some common pitfalls 2024-03-13 13:53:27 +01:00
Ad Schellevis ac586586b2 wireguard - remove plugin install from wireguard-client. 2024-03-11 09:07:37 +01:00
Ad Schellevis 6f99048dcc update changelogs 2024-03-06 14:12:20 +01:00
Franco Fichtner 7e370a8032 manual: adjust for syslog settings merge
Also remove a bit of clutter from the text and adjust GUI labels
slightly where the text was mismatching plus fill the gap of missing
option max file size.

PR: https://github.com/opnsense/core/issues/6830
2024-03-04 09:12:19 +01:00
Ad Schellevis 5b22aef2ed virtuals - fix paragraphs after merging https://github.com/opnsense/docs/pull/539 2024-02-22 08:43:55 +01:00
Ad Schellevis b5c2a3b4d1 changelogs 2024-02-22 08:36:20 +01:00
cieska 1c2293bd23
A minor addition for Hyper-V section in virtuals.rst (#539) 2024-02-21 08:20:57 +01:00
SatMagnus 0475e7abe4
Add changes to sslvpn_instance_s2s.rst (#540) 2024-02-20 16:02:50 +01:00
Ad Schellevis 6c154cfaeb api endpoints (plugins) 2024-02-20 15:52:06 +01:00
Ad Schellevis 9728f6cf56 api endpoints (core) 2024-02-20 15:51:39 +01:00
Ad Schellevis 6b38206586 changelogs 2024-02-20 15:49:44 +01:00
Ad Schellevis 5dfe37f0d6 development - add "special model types" 2024-02-19 11:13:30 +01:00
Silejonu a134cafc88
Update wireguard-client.rst (#538)
Fix mixing up of "PrivateKey" and "PublicKey" in the Step 7 paragraph, in regards to the Appendix
2024-02-14 09:08:13 +01:00
Ad Schellevis e5ac1666fa install: add warning about the need to uncompress the image before verify (as introduced in 6950921b56) 2024-02-13 10:27:51 +01:00
Ad Schellevis 30c1c9984b ddclient - add Netcup (https://github.com/opnsense/plugins/pull/3549) 2024-02-11 19:05:12 +01:00
Ad Schellevis 6124beb335 fix date 2024-02-10 09:36:49 +01:00
Ad Schellevis 21b1d00995 install / aws - add a note about console password reset 2024-02-08 14:50:39 +01:00
Ad Schellevis dc87727733 ISC DHCP / unbound / dnsmasq - be more explicit of what the feature offers. https://github.com/opnsense/core/issues/7209 2024-02-08 10:09:17 +01:00
Stephan de Wit f85849736d ntp: warn about interface selection usage 2024-02-07 11:01:26 +01:00
Ad Schellevis eb2abcb411 security/intrusion-detection-content-pt-open - remove from the list. ref https://github.com/opnsense/plugins/issues/3803 2024-02-07 08:50:41 +01:00
Ad Schellevis 1209f476d3 openvpn - fix typo 2024-02-06 17:57:36 +01:00