2
0
mirror of https://github.com/opnsense/docs synced 2024-11-10 19:10:55 +00:00
Commit Graph

650 Commits

Author SHA1 Message Date
Monviech
331eb6d7e1
Update caddy.rst - Added hint about wildcard domains not containing their root domain in a certificate. 2024-04-16 17:45:11 +02:00
Monviech
3919b81c04
Update caddy.rst - Small fix regarding DynDNS 2024-04-15 10:59:39 +02:00
Monviech
f58e55533b
Update caddy.rst - Add new upstream load balance description 2024-04-12 19:05:58 +02:00
Stephan de Wit
bbe50b3abc carp: minor clarifications 2024-04-12 16:22:03 +02:00
Stephan de Wit
c7b6de9b9e carp: clarify on the concept of a VHID and the CARP implementation. Also add the procedure for safely adding a Virtual IP to a running CARP cluster 2024-04-12 13:30:28 +02:00
Monviech
71ece67d04
www/caddy: Changes for version 1.5.3 and 1.5.4 (#548)
* Update caddy.rst - Some terminology changes for the new os-caddy version.

* Update caddy.rst - Small Typo fixed.

* Update caddy.rst - DNS01 is not needed for Dynamic DNS to work

* Update caddy.rst - Another small typo.

* Update caddy.rst

Add HTTP-01 challenge redirection option

* Update caddy.rst

- Added Tutorial section for the HTTP-01 challenge redirection
- A few more changes to get the docs in line with the new os-caddy-1.5.3 update

* Update caddy.rst - Add HTTP Response Code and Message

* Update caddy.rst - Add Header Manipulation

* Update caddy.rst - Added short tutorial how to use the most common header manipulation.

* Update caddy.rst - Improve header manipulation tutorial with the most common usecase, reverse proxying to an upstream webserver with vhosts.

* Update caddy.rst - Format fix

* Update caddy.rst - Add new fields for forward_auth support

* Update caddy.rst - Add configuration example for Authelia

* Update caddy.rst - Reformat doc

* Update caddy.rst

* Update caddy.rst - Again a few typos

* Revert all changes regarding forward_auth in caddy.rst

Since implementing this feature properly would take a redesign how the current handle/reverse_proxy structure works, it is unfeasible for now.

I am unsure the usecase is really there either. With basic_auth implemented, it's far easier to restrict access in a less convoluted way.

Combining basic_auth with http logs and crowdsec, makes bruteforcing also impossible, IP addresses are banned quite swiftly.

* Update source/manual/how-tos/caddy.rst - Typo

Co-authored-by: Dany Marcoux <github@dmarcoux.com>

* Update source/manual/how-tos/caddy.rst - Typo

Co-authored-by: Dany Marcoux <github@dmarcoux.com>

---------

Co-authored-by: Dany Marcoux <github@dmarcoux.com>
2024-04-11 14:20:33 +02:00
Hritwik
040d2bdffe
wireguard: fix the order of steps in docs (#550) 2024-04-05 09:13:01 +02:00
Franco Fichtner
096eb7861d wireguard: slight modification for current GUI
how-tos are still busted but need more work anyway.
2024-04-04 13:35:33 +02:00
Dany Marcoux
a0f4ac7ca4
Add instructions in Caddy on how to prevent the HTTP_REFERER error (#547)
While setting up a reverse proxy for the OPNsense web UI, I stumbled on
this error. Without this configuration change, we get the following
error after logging in to https://opn.example.com

> The HTTP_REFERER "https://opn.example.com/" does not match the predefined settings
2024-03-28 17:55:31 +01:00
Ad Schellevis
86ad155808 changelogs 2024-03-28 13:04:55 +01:00
Monviech
5703a65b37
Update caddy.rst (#546)
TLS Insecure Skip Verify added to docs
2024-03-28 08:35:44 +01:00
Ad Schellevis
01d23c0b9e caddy - fix some compile warnings 2024-03-20 14:38:16 +01:00
Monviech
6dbed48048
www/caddy: Documentation (#545) 2024-03-20 14:14:35 +01:00
Ad Schellevis
3745c9d920 ipsec/openvpn - fix invalid IP notations, closes https://github.com/opnsense/docs/issues/531 2024-03-17 19:57:06 +01:00
Stephan de Wit
58e7286b3a aliases: explain OpenVPN group alias type constraint 2024-03-13 14:00:31 +01:00
Ad Schellevis
ac586586b2 wireguard - remove plugin install from wireguard-client. 2024-03-11 09:07:37 +01:00
Franco Fichtner
7e370a8032 manual: adjust for syslog settings merge
Also remove a bit of clutter from the text and adjust GUI labels
slightly where the text was mismatching plus fill the gap of missing
option max file size.

PR: https://github.com/opnsense/core/issues/6830
2024-03-04 09:12:19 +01:00
Ad Schellevis
5b22aef2ed virtuals - fix paragraphs after merging https://github.com/opnsense/docs/pull/539 2024-02-22 08:43:55 +01:00
cieska
1c2293bd23
A minor addition for Hyper-V section in virtuals.rst (#539) 2024-02-21 08:20:57 +01:00
SatMagnus
0475e7abe4
Add changes to sslvpn_instance_s2s.rst (#540) 2024-02-20 16:02:50 +01:00
Silejonu
a134cafc88
Update wireguard-client.rst (#538)
Fix mixing up of "PrivateKey" and "PublicKey" in the Step 7 paragraph, in regards to the Appendix
2024-02-14 09:08:13 +01:00
Ad Schellevis
e5ac1666fa install: add warning about the need to uncompress the image before verify (as introduced in 6950921b56) 2024-02-13 10:27:51 +01:00
Ad Schellevis
30c1c9984b ddclient - add Netcup (https://github.com/opnsense/plugins/pull/3549) 2024-02-11 19:05:12 +01:00
Ad Schellevis
21b1d00995 install / aws - add a note about console password reset 2024-02-08 14:50:39 +01:00
Ad Schellevis
dc87727733 ISC DHCP / unbound / dnsmasq - be more explicit of what the feature offers. https://github.com/opnsense/core/issues/7209 2024-02-08 10:09:17 +01:00
Stephan de Wit
f85849736d ntp: warn about interface selection usage 2024-02-07 11:01:26 +01:00
Ad Schellevis
1209f476d3 openvpn - fix typo 2024-02-06 17:57:36 +01:00
Ad Schellevis
6405bc83e8 os-squid : add a note about plugin installation. 2024-02-05 09:27:28 +01:00
Ad Schellevis
157797f2f2 VPN: OpenVPN: Client Specific Overrides - add small troubleshooting section 2024-02-04 19:46:02 +01:00
Ad Schellevis
4b3e99efcd Access / Servers / LDAP - update page to match ui settings. closes https://github.com/opnsense/docs/issues/537 2024-02-03 08:34:44 +01:00
Franco Fichtner
6950921b56 install: fix image signature verification step
This changed for 24.1: the image signatures are for the uncompressed
images in order to verify the integrity before writing to a medium.

There have been cases of damaged uncompressed images so this way it
can be found and avoided.
2024-02-02 16:50:16 +01:00
Thore Goebel
cd9d88871c
Fix typo in link (#535) 2024-01-30 16:40:40 +01:00
Thore Goebel
472a1c6a4b
Update Spamhaus How-To (#533)
* Spamhaus How-To: update terms to match UI

* Mention DROPv6
2024-01-30 15:43:25 +01:00
Ad Schellevis
715a08ed2d web proxy: move to plugins (https://github.com/opnsense/core/issues/7030) 2024-01-29 20:48:58 +01:00
Ad Schellevis
2f28a48538 aliases / geoip - add note for BE 2024-01-29 17:44:50 +01:00
Stephan de Wit
b074c9b48e VPN: IPsec: small note about Radius usage in road warrior setups 2024-01-29 09:44:03 +01:00
Ad Schellevis
22e2a930db System: Gateways: Single: migrate to MVC - update docs. closes https://github.com/opnsense/core/issues/6377 2024-01-24 09:52:02 +01:00
Ad Schellevis
c5bed41355 development/configd - add documentation for new config imports introduced in a1b0dd8071 , closes https://github.com/opnsense/docs/issues/532 2024-01-23 16:42:44 +01:00
Ad Schellevis
a10e5962e6 icap- replace icar test string with the one available on our download mirror. closes https://github.com/opnsense/docs/issues/530 2024-01-09 08:39:45 +01:00
Ad Schellevis
858c9f5f79 Trust / OpenVPN - add OCSP/CRL documentation. closes https://github.com/opnsense/core/issues/7114 2024-01-06 14:45:38 +01:00
Andreas Dolp
ff3ea5b11a
Fix typo in documentation/manuals/how-tos/multiwan. (#529) 2024-01-04 07:01:29 +01:00
Ad Schellevis
c0240b55a0 Services / Kea DHCP - add basic documentation. closes https://github.com/opnsense/core/issues/6971 2023-12-28 21:38:44 +01:00
doktornotor
8ae0112402
ips.rst - fix spelling (#528) 2023-12-28 18:22:37 +01:00
Amy Nagle
24ba3cb158
Unbound: Update predefined blacklist sources (#527) 2023-12-28 10:04:49 +01:00
doktornotor
08b7784965
Remove duplicated words in dnscrypt-proxy.rst (#525) 2023-12-24 11:25:25 +01:00
scudelletti
910c9c3f96
Typo applcation => application (#524) 2023-12-18 16:22:07 +01:00
Ad Schellevis
0dd678d19f VPN: OpenVPN - add a tip for client specific overrides and subnet topology 2023-12-14 16:18:24 +01:00
Stephan
f01d95c6cf unbound: small warning about forwarding to system nameservers in multi-WAN setups 2023-12-11 09:11:18 +01:00
satrapes
64c73024ed
Add a ProtonVPN Road Warrior setup page (#521)
* Add ProtonVPN WireGuard page

---------

Co-authored-by: Dimitris Paraskevopoulos <dimitris.paraskevopoulos@u-blox.com>
2023-11-29 11:46:04 +01:00
Ad Schellevis
46d56a8e71 git-backup - remove "master" and add a tip about "branch" creation, might clarify https://github.com/opnsense/plugins/issues/3132 2023-11-21 15:00:50 +01:00