650 Commits (331eb6d7e1e45d6f57f72276edaba0e9b77f8da1)

Author	SHA1	Message	Date
Monviech	331eb6d7e1	Update caddy.rst - Added hint about wildcard domains not containing their root domain in a certificate.	5 months ago
Monviech	3919b81c04	Update caddy.rst - Small fix regarding DynDNS	5 months ago
Monviech	f58e55533b	Update caddy.rst - Add new upstream load balance description	5 months ago
Stephan de Wit	bbe50b3abc	carp: minor clarifications	5 months ago
Stephan de Wit	c7b6de9b9e	carp: clarify on the concept of a VHID and the CARP implementation. Also add the procedure for safely adding a Virtual IP to a running CARP cluster	5 months ago
Monviech	71ece67d04	www/caddy: Changes for version 1.5.3 and 1.5.4 (#548) ... * Update caddy.rst - Some terminology changes for the new os-caddy version. * Update caddy.rst - Small Typo fixed. * Update caddy.rst - DNS01 is not needed for Dynamic DNS to work * Update caddy.rst - Another small typo. * Update caddy.rst Add HTTP-01 challenge redirection option * Update caddy.rst - Added Tutorial section for the HTTP-01 challenge redirection - A few more changes to get the docs in line with the new os-caddy-1.5.3 update * Update caddy.rst - Add HTTP Response Code and Message * Update caddy.rst - Add Header Manipulation * Update caddy.rst - Added short tutorial how to use the most common header manipulation. * Update caddy.rst - Improve header manipulation tutorial with the most common usecase, reverse proxying to an upstream webserver with vhosts. * Update caddy.rst - Format fix * Update caddy.rst - Add new fields for forward_auth support * Update caddy.rst - Add configuration example for Authelia * Update caddy.rst - Reformat doc * Update caddy.rst * Update caddy.rst - Again a few typos * Revert all changes regarding forward_auth in caddy.rst Since implementing this feature properly would take a redesign how the current handle/reverse_proxy structure works, it is unfeasible for now. I am unsure the usecase is really there either. With basic_auth implemented, it's far easier to restrict access in a less convoluted way. Combining basic_auth with http logs and crowdsec, makes bruteforcing also impossible, IP addresses are banned quite swiftly. * Update source/manual/how-tos/caddy.rst - Typo Co-authored-by: Dany Marcoux <github@dmarcoux.com> * Update source/manual/how-tos/caddy.rst - Typo Co-authored-by: Dany Marcoux <github@dmarcoux.com> --------- Co-authored-by: Dany Marcoux <github@dmarcoux.com>	5 months ago
Hritwik	040d2bdffe	wireguard: fix the order of steps in docs (#550)	6 months ago
Franco Fichtner	096eb7861d	wireguard: slight modification for current GUI ... how-tos are still busted but need more work anyway.	6 months ago
Dany Marcoux	a0f4ac7ca4	Add instructions in Caddy on how to prevent the HTTP_REFERER error (#547) ... While setting up a reverse proxy for the OPNsense web UI, I stumbled on this error. Without this configuration change, we get the following error after logging in to https://opn.example.com > The HTTP_REFERER "https://opn.example.com/" does not match the predefined settings	6 months ago
Ad Schellevis	86ad155808	changelogs	6 months ago
Monviech	5703a65b37	Update caddy.rst (#546) ... TLS Insecure Skip Verify added to docs	6 months ago
Ad Schellevis	01d23c0b9e	caddy - fix some compile warnings	6 months ago
Monviech	6dbed48048	www/caddy: Documentation (#545)	6 months ago
Ad Schellevis	3745c9d920	ipsec/openvpn - fix invalid IP notations, closes https://github.com/opnsense/docs/issues/531	6 months ago
Stephan de Wit	58e7286b3a	aliases: explain OpenVPN group alias type constraint	6 months ago
Ad Schellevis	ac586586b2	wireguard - remove plugin install from wireguard-client.	7 months ago
Franco Fichtner	7e370a8032	manual: adjust for syslog settings merge ... Also remove a bit of clutter from the text and adjust GUI labels slightly where the text was mismatching plus fill the gap of missing option max file size. PR: https://github.com/opnsense/core/issues/6830	7 months ago
Ad Schellevis	5b22aef2ed	virtuals - fix paragraphs after merging https://github.com/opnsense/docs/pull/539	7 months ago
cieska	1c2293bd23	A minor addition for Hyper-V section in virtuals.rst (#539)	7 months ago
SatMagnus	0475e7abe4	Add changes to sslvpn_instance_s2s.rst (#540)	7 months ago
Silejonu	a134cafc88	Update wireguard-client.rst (#538) ... Fix mixing up of "PrivateKey" and "PublicKey" in the Step 7 paragraph, in regards to the Appendix	7 months ago
Ad Schellevis	e5ac1666fa	install: add warning about the need to uncompress the image before verify (as introduced in 6950921b56)	7 months ago
Ad Schellevis	30c1c9984b	ddclient - add Netcup (https://github.com/opnsense/plugins/pull/3549)	7 months ago
Ad Schellevis	21b1d00995	install / aws - add a note about console password reset	8 months ago
Ad Schellevis	dc87727733	ISC DHCP / unbound / dnsmasq - be more explicit of what the feature offers. https://github.com/opnsense/core/issues/7209	8 months ago
Stephan de Wit	f85849736d	ntp: warn about interface selection usage	8 months ago
Ad Schellevis	1209f476d3	openvpn - fix typo	8 months ago
Ad Schellevis	6405bc83e8	os-squid : add a note about plugin installation.	8 months ago
Ad Schellevis	157797f2f2	VPN: OpenVPN: Client Specific Overrides - add small troubleshooting section	8 months ago
Ad Schellevis	4b3e99efcd	Access / Servers / LDAP - update page to match ui settings. closes https://github.com/opnsense/docs/issues/537	8 months ago
Franco Fichtner	6950921b56	install: fix image signature verification step ... This changed for 24.1: the image signatures are for the uncompressed images in order to verify the integrity before writing to a medium. There have been cases of damaged uncompressed images so this way it can be found and avoided.	8 months ago
Thore Goebel	cd9d88871c	Fix typo in link (#535)	8 months ago
Thore Goebel	472a1c6a4b	Update Spamhaus How-To (#533) ... * Spamhaus How-To: update terms to match UI * Mention DROPv6	8 months ago
Ad Schellevis	715a08ed2d	web proxy: move to plugins (https://github.com/opnsense/core/issues/7030)	8 months ago
Ad Schellevis	2f28a48538	aliases / geoip - add note for BE	8 months ago
Stephan de Wit	b074c9b48e	VPN: IPsec: small note about Radius usage in road warrior setups	8 months ago
Ad Schellevis	22e2a930db	System: Gateways: Single: migrate to MVC - update docs. closes https://github.com/opnsense/core/issues/6377	8 months ago
Ad Schellevis	c5bed41355	development/configd - add documentation for new config imports introduced in a1b0dd8071 , closes https://github.com/opnsense/docs/issues/532	8 months ago
Ad Schellevis	a10e5962e6	icap- replace icar test string with the one available on our download mirror. closes https://github.com/opnsense/docs/issues/530	9 months ago
Ad Schellevis	858c9f5f79	Trust / OpenVPN - add OCSP/CRL documentation. closes https://github.com/opnsense/core/issues/7114	9 months ago
Andreas Dolp	ff3ea5b11a	Fix typo in documentation/manuals/how-tos/multiwan. (#529)	9 months ago
Ad Schellevis	c0240b55a0	Services / Kea DHCP - add basic documentation. closes https://github.com/opnsense/core/issues/6971	9 months ago
doktornotor	8ae0112402	ips.rst - fix spelling (#528)	9 months ago
Amy Nagle	24ba3cb158	Unbound: Update predefined blacklist sources (#527)	9 months ago
doktornotor	08b7784965	Remove duplicated words in dnscrypt-proxy.rst (#525)	9 months ago
scudelletti	910c9c3f96	Typo applcation => application (#524)	9 months ago
Ad Schellevis	0dd678d19f	VPN: OpenVPN - add a tip for client specific overrides and subnet topology	9 months ago
Stephan	f01d95c6cf	unbound: small warning about forwarding to system nameservers in multi-WAN setups	10 months ago
satrapes	64c73024ed	Add a ProtonVPN Road Warrior setup page (#521) ... * Add ProtonVPN WireGuard page --------- Co-authored-by: Dimitris Paraskevopoulos <dimitris.paraskevopoulos@u-blox.com>	10 months ago
Ad Schellevis	46d56a8e71	git-backup - remove "master" and add a tip about "branch" creation, might clarify https://github.com/opnsense/plugins/issues/3132	10 months ago