Commit Graph

8793 Commits

Author SHA1 Message Date
Wakatatsu Ryou cc80884976 acme: add haproxy support
Signed-off-by: Wakatatsu Ryou <lialosiu@gmail.com>
2021-09-01 14:13:53 -07:00
Wakatatsu Ryou 98985a9561 acme: add haproxy support
Signed-off-by: Wakatatsu Ryou <lialosiu@gmail.com>
2021-09-01 14:13:53 -07:00
Etienne Champetier 440d3c0450 tinc: use 'uci_get_state' instead of 'uci -P /var/state get'
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2021-09-01 14:12:26 -07:00
Rosen Penev 40b30f7359
Merge pull request #16505 from gladiac1337/haproxy-2.4.3
haproxy: Update HAProxy to v2.4.3
2021-09-01 14:09:23 -07:00
Kerma Gérald e34396fd0e fail2ban: initial package of fail2ban version 0.11.2
python3-pyinotify: initial package version 0.9.6 of pyinotify for python3

Signed-off-by: Kerma Gérald <gandalf@gk2.net>
2021-09-01 14:08:17 -07:00
Jo-Philipp Wich e8fb7fd648 nlbwmon: update to latest Git HEAD
d82c910 nfnetlink: warn if the requested recv buffer size surpasses rmem_max

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2021-09-01 21:54:17 +02:00
Cristian Le e3183a3312 ddns-script-gandi: Better error management
- Changed DNS endpoint to LiveDNS
- Now using `jshn.sh`
- Better handle errors and ouput

Signed-off-by: Cristian Le <git@lecris.me>
2021-08-31 23:51:35 +09:00
Cristian Le 36afa3dfce ddns-scripts-pdns: Add package
Signed-off-by: Cristian Le <git@lecris.me>
2021-08-31 21:55:09 +09:00
Alexandru Ardelean c5d49e35f3
Merge pull request #16462 from commodo/python-sync-host-pip-reqs
python3-package.mk: add check for dependencies in host-pip-requirements
2021-08-31 13:27:52 +03:00
Christian Lachner 59d2e519e6 haproxy: Update HAProxy to v2.4.3
- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2021-08-31 09:08:08 +02:00
Florian Eckert cb8ae4ac19
Merge pull request #16498 from TDT-AG/pr/20210830-stunnel
stunnel: update to version 5.60
2021-08-31 08:08:32 +02:00
Florian Eckert 21a70fa8b5
Merge pull request #16497 from TDT-AG/pr/20210830-keepalived
keepalived: update to version 2.2.4
2021-08-31 08:08:14 +02:00
Tianling Shen 60c917089f
v2rayA: Update to 1.5.2
Refreshed init script to adapt new arguments accepted by the program.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-08-31 00:23:17 +08:00
Florian Eckert 5517bd925d stunnel: update to version 5.60
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2021-08-30 11:49:04 +02:00
Florian Eckert 3f5b2d8cb3 keepalived: update to version 2.2.4
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2021-08-30 11:47:53 +02:00
Alexandru Ardelean 5e00a051d6 seafile-seahub: move Django-1.11.txt in package folder
Django 1.11 (host-build) is only needed for Seahub.
And won't ever be needed for anything else (hopefully).

This change moves it to the Seahub folder.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2021-08-30 10:01:48 +03:00
Dirk Brenken 6b7193bbd1
Merge pull request #16489 from dibdot/banIP
banip: update 0.7.10
2021-08-29 20:06:26 +02:00
Tianling Shen 90ec599f9e v2rayA: add new package
v2rayA is a Linux web GUI client of Project V which supports V2Ray,
Xray, Shadowsocks, ShadowsocksR, Trojan and Pingtunnel.

Wiki: https://github.com/v2rayA/v2rayA/wiki

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-08-29 10:13:45 -07:00
Dirk Brenken 8ac0103cbd
banip: update 0.7.10
* switch to unencrypted http downloads for ipdeny.com due to persistant certificate issues
* compact json generator code (tested with report files > 2MB)
* various code cleanups and optimizations

Signed-off-by: Dirk Brenken <dev@brenken.org>
2021-08-29 17:16:59 +02:00
Wout Bertrums d27edd5fff pdns-recursor: Update to v4.5.5
Signed-off-by: Wout Bertrums <wout@wbnet.eu>
2021-08-28 16:51:54 -07:00
Wout Bertrums 0f245533dd pdns-recursor: Update recursor.conf-dist
It has been updated to the latest version shipped by upstream.
This has not been done since v4.2.1, hence the big diff.

Signed-off-by: Wout Bertrums <wout@wbnet.eu>
2021-08-28 16:51:54 -07:00
Paul Spooren c57abd4a56 memcached: use memcached user
This avoid using `nobody` as user since multiple services fallback to
this user, resulting in a security issue. The UID was taken from Gentoos
`acct-user` repository.

https://gitweb.gentoo.org/repo/gentoo.git/tree/acct-user/memcached/memcached-0-r1.ebuild

Signed-off-by: Paul Spooren <mail@aparcar.org>
2021-08-28 16:50:48 -07:00
Rosen Penev 2d3409d5c4 nfs-kernel-server: update to 2.5.4
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-08-28 16:47:52 -07:00
Rosen Penev ad4c04283e squid: update to 4.16
Fixes compilation with GCC11.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-08-28 16:47:38 -07:00
Rosen Penev 3b3de12651
Merge pull request #16476 from 1715173329/dnsproxy
dnsproxy: Update to 0.39.4
2021-08-27 13:31:33 -07:00
Moritz Warning b10162586c smcroute: update to version 2.5.2
Signed-off-by: Moritz Warning <moritzwarning@web.de>
2021-08-27 21:36:06 +02:00
Tianling Shen 030562fee6
dnsproxy: Update to 0.39.4
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-08-28 00:46:03 +08:00
Tianling Shen dcd3f288e4
xray-core: fix build under go 1.17
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-08-26 22:34:12 +08:00
Rosen Penev b5f5e94715
Merge pull request #16418 from SibrenVasse/master
openssh: update to 8.7p1
2021-08-25 14:07:07 -07:00
Sibren Vasse 89ab4ebcdb
openssh: update to 8.7p1
Signed-off-by: Sibren Vasse <github@sibrenvasse.nl>
2021-08-25 15:24:38 +02:00
Rosen Penev 3176f3793a
Merge pull request #16405 from neheb/airr
aircrack-ng: add fcommon
2021-08-24 19:08:41 -07:00
Rosen Penev 1882afb8f6
Merge pull request #16330 from neheb/ksmbbb
ksmbd stuff: update to 3.4.1
2021-08-24 19:08:14 -07:00
Olivier Poitrey b23563ee34 nextdns: Update to version 1.36.0
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-08-24 23:40:39 +00:00
Karl Palsson 0be066d1c2 mosquitto: allow auth options with per listener settings
Some settings can be either global or per listener, and we need to
support both forms in UCI.

Signed-off-by: Karl Palsson <karlp@etactica.com>
2021-08-24 14:19:41 +00:00
Karl Palsson 734f65d557 mosquitto: init: support more UCI options
Recent versions of mosquitto have added a lot more fine grained control
of various options.  Add UCI support for all of them, and fix a couple
of things that were configured as per listener, that are actually global
settings.

Signed-off-by: Karl Palsson <karlp@etactica.com>
2021-08-24 12:08:31 +00:00
Rosen Penev 7315c6498b
Merge pull request #16420 from neheb/fakepop
fakepop: fix compilation with PKG_ASLR
2021-08-24 02:25:49 -07:00
Rosen Penev d6e4de99cd
Merge pull request #16439 from ja-pa/tailscale-1.12.3
tailscale: update to version 1.12.3
2021-08-24 02:25:28 -07:00
Rosen Penev 769732f844
Merge pull request #16446 from micmac1/mdio-tools-ac_init
mdio-tools: fix buildbot build
2021-08-24 02:24:13 -07:00
Daniel Bermond c92a1a6173
proxychains-ng: update to version 4.15
Maintainer: me

Build system: Arch Linux x86_64
Build tested: ipq806x/R7800
Run tested  : ipq806x/R7800

Signed-off-by: Daniel Bermond <danielbermond@gmail.com>
2021-08-23 21:14:26 -03:00
Rosen Penev 48d404cd1d
Merge pull request #16408 from vgaetera/iface-bond
bonding: use shorter interface prefix
2021-08-23 14:50:46 -07:00
Vladislav Grigoryev 4f4722e36f bonding: use shorter interface prefix
Change the interface protocol prefix from "bonding-" to "bond-".
This allows longer custom interface names and useful for VLANs.

Signed-off-by: Vladislav Grigoryev <vg.aetera@gmail.com>
2021-08-24 00:17:15 +03:00
Sebastian Kemper f0e12ae71b mdio-tools: fix buildbot build
On buildbots the build fails because git isn't finding any git repo and
then AC_INIT refuses to run:

fatal: not a git repository (or any parent up to mount point /)
Stopping at filesystem boundary (GIT_DISCOVERY_ACROSS_FILESYSTEM not set).
configure.ac:5: error: AC_INIT should be called with package and version arguments

Address this by substituting the git command with $(PKG_VERSION).

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2021-08-23 21:13:45 +02:00
Jan Pavlinec 23d90cabd2
tailscale: update to version 1.12.3
Signed-off-by: Jan Pavlinec <jan.pavlinec1@gmail.com>
2021-08-23 08:45:04 +02:00
Hsing-Wang Liao 455536670b aria2: bump to v1.36.0
Signed-off-by: Hsing-Wang Liao <kuoruan@gmail.com>
2021-08-23 02:21:08 +00:00
Rosen Penev 8c55f72146
Merge pull request #16432 from nickberry17/update_MM_and_libs
bump ModemManager and libs
2021-08-22 14:33:52 -07:00
Rosen Penev da6c6acebc
Merge pull request #16427 from neheb/vs
vsftpd: update to 3.0.5
2021-08-22 14:04:30 -07:00
Etienne Champetier 7a1c237937 phantap: update to latest commit
26bd876 Switch from ifname to device
d8d3d5f Fix blog post link

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2021-08-22 07:47:09 -04:00
Nicholas Smith c7ec9ec410 modemmanager: switch to autorelease
Signed-off-by: Nicholas Smith <nicholas@nbembedded.com>
2021-08-22 16:12:36 +10:00
Nicholas Smith 858d61b148 modemmanager: bump to 1.16.10
Signed-off-by: Nicholas Smith <nicholas@nbembedded.com>
2021-08-22 15:50:33 +10:00
Dirk Brenken 114b8da841
Merge pull request #16428 from dibdot/travelmate
travelmate: update to 2.0.6
2021-08-22 06:38:25 +02:00
Dirk Brenken 1c0fcbd28b
travelmate: update to 2.0.6
* replaced pipe input for a while/read-loop with a here document/variable as input
  (fix various subshell related bugs and oddities)
* further improve abort and re-connection handling
* prevent alleged detected connection failures (false positives) with an additional gw check,
  to stabilize VPN connections in particular

Signed-off-by: Dirk Brenken <dev@brenken.org>
2021-08-22 06:31:51 +02:00
Rosen Penev a9ae3c0295 vsftpd: update to 3.0.5
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-08-21 12:14:45 -07:00
Rosen Penev ac5097af94 ksmbd-tools: update to 3.4.1
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-08-21 12:02:36 -07:00
Rosen Penev 0b01966590 nfdump: fix compilation with PKG_ASLR
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-08-21 11:45:19 -07:00
Rosen Penev 15d2ed15ca fakepop: fix compilation with PKG_ASLR
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-08-21 11:43:57 -07:00
Etienne Champetier 374e1dd56e https-dns-proxy: patch CMakeList.txt to use OpenWrt CFLAGS
This fixes compilation issues with ASLR PIE enabled

We were compiling with '-g -DDEBUG'

https-dns-proxy_2021-07-29-*_arm_cortex-a9_vfpv3-d16.ipk
shrink from 19514 to 19095

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2021-08-20 15:45:44 -04:00
Ted Hess 6981009f48 dnscrypt-proxy2: Upgrade to 2.1.0
Adjust build opts to force GOPATH mode by setting GO111MODULE off.
Ref: https://go.dev/blog/go116-module-changes

Signed-off-by: Ted Hess <thess@kitschensync.net>
2021-08-20 19:40:27 +02:00
Rosen Penev 3096840aef
Merge pull request #16379 from neheb/sft
softethervpn5: fix compilation without engines
2021-08-20 08:25:31 -07:00
Rosen Penev 264e7b1572 aircrack-ng: add fcommon
Fixes compilation with GCC10+.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-08-19 13:46:59 -07:00
Rosen Penev aac14f7134
Merge pull request #16396 from paper42/git-2.33
git: update to 2.33.0
2021-08-18 23:07:55 -07:00
William Fleurant 6b280aef02 yggdrasil: uci ifname is now known as device
Signed-off-by: William Fleurant <meshnet@protonmail.com>
2021-08-18 21:21:51 +02:00
Michal Vasilek e684672916
git: update to 2.33.0
* refresh patches

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
2021-08-18 14:53:03 +02:00
Eric Luehrsen 17c25269d7 unbound: update to 1.3.2
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
2021-08-17 02:24:37 -04:00
Philip Prindeville e36a65459a
Merge pull request #16273 from pprindeville/strongswan-sysupgrade
strongswan: add /etc/config/ipsec to sysupgrade list
2021-08-16 22:38:31 -06:00
Rosen Penev 3e9295546e softethervpn5: fix compilation without engines
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-08-16 21:26:06 -07:00
Stijn Tintel 3649ed721d kea: add kea-uci package with basic init script
This init script allows to start the Kea Control Agent, the DHCPv4
server, the DHCPv6 server, and the DHCP-DDNS server. It expects the
config files to be where the packages install them.

As this is a single init script that can start 4 different binaries that
are each in their own package, these files cannot be included in any of
these other package, so create a dedicated package for it.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2021-08-16 20:41:51 +03:00
Stijn Tintel 8c855f390e kea: add conffiles
Add the /etc/kea directory to conffiles, so configuration will not be
lost during sysupgrade.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2021-08-16 20:41:51 +03:00
Stijn Tintel f59243aa83 kea: add package for high availability hook
This allows running multiple kea instances in load balancing or
hot-standby mode, minimizing risk of downtime.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2021-08-16 20:37:39 +03:00
Stijn Tintel 5459bd9b30 kea: add package for lease commands hook
This is required for the HA hook.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2021-08-16 20:37:38 +03:00
Alexandru Ardelean 06e70ff8cc
Merge pull request #16363 from stintel/tcpreplay
tcpreplay: avoid host lib leakage
2021-08-16 11:20:53 +03:00
Dirk Brenken b4a4aab5fa
Merge pull request #16372 from dibdot/travelmate
travelmate: update to 2.0.5-3
2021-08-15 20:30:18 +02:00
Fritz D. Ansel 47e87e1b75 ksmbd: use hostname only as name
even if a fqdn (with domain) is set by user

Signed-off-by: Fritz D. Ansel <fdansel@yandex.ru>
2021-08-15 18:07:07 +03:00
Dirk Brenken 58a3cf1f01
travelmate: update to 2.0.5-3
* simplify the scan logic, to get rid of nifty IFS tricks
* limit the nearby scan results to process only the strongest uplinks, set 'trm_maxscan' accordingly (default '10')
* update the readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
2021-08-15 15:49:35 +02:00
Fritz D. Ansel 28ed2b82c5 ksmbd: set stoplevel
to allow graceful stop of the daemon

Signed-off-by: Fritz D. Ansel <fdansel@yandex.ru>
2021-08-15 14:56:33 +03:00
Fritz D. Ansel 2992e3bb7d samba4: allow disabling wsdd2 in menuconfig
but keep it selected by default as before
so it could be selected if nmbd and/or wssd2
should be used

Signed-off-by: Fritz D. Ansel <fdansel@yandex.ru>
2021-08-15 14:55:31 +03:00
Fritz D. Ansel 6bac8c6275 samba4: use hostname only as name
even if a fqdn (with domain) is set by user

Signed-off-by: Fritz D. Ansel <fdansel@yandex.ru>
2021-08-15 14:44:18 +03:00
Fritz D. Ansel 059f622ac9 samba4: set stoplevel
to allow graceful stop of the daemon

Signed-off-by: Fritz D. Ansel <fdansel@yandex.ru>
2021-08-15 14:44:09 +03:00
Fritz D. Ansel 3953ff956d wsdd2: dont use fqdn
workgroups use the name of the host without domain

Signed-off-by: Fritz D. Ansel <fdansel@yandex.ru>
2021-08-15 14:42:37 +03:00
Stijn Tintel e4b8fec79c tcpreplay: avoid host lib leakage
On hosts that have pcapnav-config installed, there is host lib leakage.
From config.log:

LNAVLIB='-L/usr/lib64 -lpcapnav -lpcap'
LNAV_CFLAGS='-I/usr/include'

Fix this by disabling pcapnav-config, which isn't available anyway.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2021-08-14 22:50:25 +03:00
Stan Grishin 243c86ffc8 curl: update to 7.78.0
* update to 7.78.0
* change maintainer
* remove obsolete mirror (curl.mirror.anstey.ca)
* update main curl URLs

Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-08-14 01:24:38 +01:00
Toke Høiland-Jørgensen 62c16aacb4 sqm-scripts: bump to v1.5.1
Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2021-08-13 17:54:46 +02:00
Dirk Brenken e6e3c9481d
travelmate: update to 2.0.5-2
* scan for open uplinks even if no other station has been added/configured

Signed-off-by: Dirk Brenken <dev@brenken.org>
2021-08-13 08:28:29 +02:00
Rosen Penev d0fcffee78
Merge pull request #16341 from Payne-X6/master
knot: update to version 3.1.1
2021-08-12 11:07:51 -07:00
Florian Eckert 4608a73bf0
Merge pull request #16318 from selanf/x2
xinetd: support for anonym configs
2021-08-12 14:18:01 +02:00
Fritz D. Ansel afdc1c2a75 xinetd: fix syntax violation
see https://github.com/openwrt/packages/pull/16318#discussion_r687481110

Signed-off-by: Fritz D. Ansel <fdansel@yandex.ru>
2021-08-12 14:05:09 +02:00
Fritz D. Ansel 631e3fa10f xinetd: support for anonym configs
config by names clashes if a service supports
udp and tcp, eg time and daytime

Signed-off-by: Fritz D. Ansel <fdansel@yandex.ru>
2021-08-12 14:01:48 +02:00
Jan Hak 7aee9d1308 knot: update to version 3.1.1
Signed-off-by: Jan Hak <jan.hak@nic.cz>
2021-08-12 13:28:32 +02:00
Toke Høiland-Jørgensen fac3fe43c7 radsecproxy: Bump to v1.9.0
Remove 300-gcc10.patch as that was applied upstream, and refresh the
other patch.

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2021-08-12 13:18:38 +02:00
Dirk Brenken 7e90250f5a
Merge pull request #16323 from dibdot/travelmate
travelmate: update to 2.0.5
2021-08-11 23:11:51 +02:00
Michael Heimpold 50500bddda
Merge pull request #16112 from dmascord/add_mdio-tools
mdio-tools: add package plus kernel module
2021-08-11 22:09:41 +02:00
Dirk Brenken c6328bad6c
travelmate: update to 2.0.5
* support the new travelmate option 'macaddr' to use a pre-defined MAC address (per uplink)
* vpn connections are now handled separately for each uplink
* The autoadd-feature for adding open uplinks will now be limited by the 'trm_maxautoadd' option. The default is '5', '0' disables this limitation.
* more code cleanups und optimizations to reduce the repetitive connection handling workload
* bugfixes regarding multiple radio support
* refine cp detection (no longer write and parse an error file)

Signed-off-by: Dirk Brenken <dev@brenken.org>
2021-08-11 19:14:56 +02:00
Rosen Penev 6c1ec516ce
Merge pull request #16197 from Ansuel/nginx-up
nginx: bump to 1.21.1 and improve makefile
2021-08-10 16:16:51 -07:00
Michal Vasilek e7127d4684
knot-resolver: update to version 5.4.0
* refresh patches
* disable kres_gen_test to fix cross

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
2021-08-09 09:35:23 +02:00
Michal Vasilek 81e0fcb76f
knot: update to version 3.1.0
* refresh patches

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
2021-08-09 09:34:53 +02:00
Daniel Golle 847b17651a
transmission: add mount trigger
Restart transmission once an underlaying mountpoint becomes available.
Add myself as maintainer.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-08-08 15:49:26 +01:00
Rosen Penev e7afd1a9c7
Merge pull request #16245 from neheb/ksmbd1
ksmbd: update to 3.4.0
2021-08-07 16:46:49 -07:00
Dirk Brenken cfc1c6a7e7
Merge pull request #16285 from jamesmacwhite/stubby-trigger-interfaces
stubby: Add multi WAN support for procd trigger
2021-08-07 16:05:07 +02:00
James White 1ad5e3f88c stubby: Add multi WAN support for procd trigger
Signed-off-by: James White <james@jmwhite.co.uk>
2021-08-07 09:30:52 +01:00
Josef Schlehofer 18a2db6bf7
Merge pull request #16290 from ja-pa/tailscale-update
tailscale: update to version 1.12.1
2021-08-06 20:08:38 +02:00
Rosen Penev db193797d3
Merge pull request #16151 from rsalvaterra/tor-bump
tor: bump to 0.4.6.6 stable
2021-08-03 12:21:47 -07:00
Rosen Penev 6c88d12417
Merge pull request #16279 from Ansuel/improve-atlas
atlas-sw-probe: fix copypaste error and clean tmp dir on exit
2021-08-03 12:09:09 -07:00
Josef Schlehofer b98471e412
Merge pull request #16194 from miska/snort3-master
net/snort3: Include default configs and snort2lua
2021-08-03 12:02:03 +02:00
Josef Schlehofer 0bba19ad79
Merge pull request #16280 from 1715173329/dnsproxy
dnsproxy: Update to 0.39.1
2021-08-03 10:31:18 +02:00
Jan Pavlinec bb419b3227
tailscale: update to version 1.12.1
Signed-off-by: Jan Pavlinec <jan.pavlinec1@gmail.com>
2021-08-03 08:46:01 +02:00
Stan Grishin c5fad97b39
Merge pull request #16255 from stangri/master-curl
curl: enable HTTP/2 support by default
2021-08-02 17:26:33 -07:00
Tianling Shen 481540b411
dnsproxy: Update to 0.39.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-08-02 21:23:31 +08:00
Ansuel Smith 842a9d399f
atlas-sw-probe: fix copypaste error and clean tmp dir on exit
- Fix copypaste error for PUB_KEY link creation
- Clean tmp dir on exit to clear any remaining data

Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>
2021-08-02 15:11:01 +02:00
Wout Bertrums 398cad2960 pdns: Update to 4.5.1
TARGET_CXX is added, because PowerDNS now uses C++17.

pdns.conf-dist is updated to the latest version shipped by PowerDNS.

010-time_t-check.patch, which is also used in pdns-recursor and dnsdist,
is added to patch out the check for 64-bit time_t,
because OpenWrt still supports 32-bit devices.

100-pdns-disable-pdns.conf-dist.patch is refreshed.

Signed-off-by: Wout Bertrums <wout@wbnet.eu>
2021-08-02 13:32:03 +02:00
Rui Salvaterra a45b962eef tor: bump to 0.4.6.6 stable
Run-tested on mvebu/cortexa9 (tor-basic) without issues.

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
2021-08-02 11:22:36 +01:00
Stan Grishin 699447cdb3 simple-adblock: update to 1.8.7-6
* supports newer shellcheck
* restore EXTRA_COMMANDS compatibility with 19.07
* move status display from various functions to status_service
* bugfix: status_service line break after output
* minor arythmetic fix in status_service

Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-08-02 07:03:36 +00:00
Stan Grishin 5c2b487336
Merge pull request #16252 from stangri/master-https-dns-proxy
https-dns-proxy: update to 2021-07-29-1
2021-08-01 22:58:22 -07:00
Rui Salvaterra 2c90c305a6 transmission: apply DSCP to UDP sockets too
Backport a pending patch in order to DSCP-mark UDP traffic. This allows for
correct binning of traffic in diffserv-capable routers.

Additionally, remove Rosen Penev from the maintainers list, as per his request.

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
2021-08-01 23:14:07 +01:00
Philip Prindeville 93cbdcbef5 strongswan: add /etc/config/ipsec to sysupgrade list
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2021-08-01 14:57:39 -06:00
Daniel Golle 0a38cb930a
opentracker: update to git HEAD
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-08-01 04:15:07 +01:00
Yu Fang 554b1330a2 gateway-go: update to 0.2.0
Signed-off-by: Yu Fang <yu@iotserv.com>
2021-07-31 10:29:58 +08:00
Stan Grishin 83b4d4f89c curl: enable HTTP/2 support by default
Description: Lack of support of HTTP/2 by default starts to hurt,
for example with https-dns-proxy package, some DoH resolvers (like mullvad)
no longer support HTTP/1 and are not usable.

This enables HTTP/2 support by default (which would bring ~68Kb libnghttp).

Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-07-30 23:15:06 +00:00
Stan Grishin 062e8f4fb3 https-dns-proxy: update to 2021-07-29-01
* update binary to the latest commit (2021-07-29) to fix #16222 and #16239
* add hotplug.d/iface file and update Makefile to install it
* use Cloudflare's and Google's bootstrap DNS if bootstrap DNS is missing
* minor improvements in append_bool function
* add append_counter function for verbosity setting
* add append_bootstrap function (and supporting functions) to parse/sanitize bootstrap setting
* move firewall array from 'main' instance to the first proxy instance
* delete useless 'main' instace

Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-07-30 13:10:54 +00:00
Olivier Poitrey d8ac739dab nextdns: Update to version 1.35.0
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2021-07-30 12:39:51 +03:00
Rosen Penev 0162bd3a9f ksmbd-tools: update to 3.4.0
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-07-29 13:07:21 -07:00
Rosen Penev 4858affffb
Merge pull request #16187 from neheb/Fu
sshfs: update to 3.7.2
2021-07-29 12:39:00 -07:00
Rosen Penev 5ad6bb0a01
Merge pull request #16078 from ja-pa/fix-email
treewide: change email address in PKG_MAINTAINER
2021-07-29 12:37:06 -07:00
Jan Pavlinec 3ee2a087a3
treewide: change email
Change from jan.pavlinec@nic.cz to jan.pavlinec1@gmail.com

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2021-07-29 13:21:02 +02:00
Stijn Tintel 653716eb19 openvswitch: add SSL support
Open vSwitch supports SSL to connect to an OpenFlow controller. This is
recommended for security. Expand the UCI ovs config section to allow
configuring SSL CA, certificate and private key.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2021-07-29 12:30:39 +03:00
Stijn Tintel 2430c4ef82 openvswitch: add missing basescript variable
The Open vSwitch init script does not set USE_PROCD=1. Instead, it
defines most of the functions and variables that would be set when
USE_PROCD is set to 1, but with some minor changes.

The basescript variable however, which is used when calling
procd_open_service and procd_kill, is not set. As a result, basename of
the contents of the initscript variable is used as the service name. As
the service is automatically started via its symlink in /etc/rc.d,
S15openvswitch, the service name is S15openvswitch.

Set the basescript variable so that the service name is openvswitch.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2021-07-29 12:30:22 +03:00
Stijn Tintel 4a4c1634e6 openvswitch: support setting OpenFlow datapath ID
By default, Open vSwitch will generate the OpenFlow datapath ID of a
bridge based on the MAC address of one of its ports. Due to this, it's
possible that the datapath ID changes when new ports are added. When the
datapath ID changes, Open vSwitch disconnects from the controller, as
there is no way to notify the controller that the datapath ID has
changed.

Add an option to set the datapath ID so that the above situation can be
avoided. The option takes either exactly 16 hex characters, or when
prefixed with 0x, between 1 and 16 hex characters.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2021-07-29 11:02:34 +03:00
Stijn Tintel 5423522944 openvswitch: check correct config symbol
The config symbol is named CONFIG_OPENVSWITCH_WITH_LIBUNBOUND, so check
for that instead of the non-existent CONFIG_OPENVSWITCH_WITH_UNBOUND.

Fixes: 45c8cc9d8a ("openvswitch: make libunbound optional")
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2021-07-27 23:52:44 +03:00
Nick Hainke 6582979678 dawn: update to 2021-07-27
276ca16 msghandler: fix rrm array parsing
1e4871d datastorage: debug rrm capabilities

Signed-off-by: Nick Hainke <vincent@systemli.org>
2021-07-27 15:59:17 +02:00
Josef Schlehofer 21992344b5 irssi: add test.sh
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2021-07-27 12:55:24 +02:00
Rosen Penev 752656c6be irssi: update to 1.2.3
Switch to AUTORELEASE for simplicity.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-07-27 10:27:53 +02:00
Stijn Tintel 4b4a3b7b87
Merge pull request #16211 from stintel/ovs-libunbound-optional
openvswitch: make libunbound optional
2021-07-27 08:11:12 +03:00
Stan Grishin 051abe8e18 vpn-policy-routing: update to 0.3.5-1
support for 21.02.0-rc2 and up
support for reloading a single interface on ifup/ifupdate
rename config file
updated shellcheck compatibility
remove obsolete create/remove_lock
interface processing optimizations to speed up reloads
drop dependency on curl in user scripts
uniform styling of functions

Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-07-26 23:20:41 +00:00
Dirk Brenken 0fdad26614
Merge pull request #16226 from dibdot/master
adblock: bugfix 4.1.3-3
2021-07-26 19:05:59 +02:00
Dirk Brenken 69a2a68c31
adblock: bugfix 4.1.3-3
* fix regex to prepare google safesearch domains

Signed-off-by: Dirk Brenken <dev@brenken.org>
2021-07-26 17:40:13 +02:00
Stijn Tintel 45c8cc9d8a openvswitch: make libunbound optional
Installing openvswitch on an x86/64 snapshot image pulls in a bunch of
dependencies, good for a total size of 3648406 byte. Disabling
libunbound reduces that with 559941 byte, for a total of 3088465 byte.
This is quite a big reduction for a small tradeoff: without libunbound,
hostnames can not be used to specify OpenFlow managers or controllers.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2021-07-26 18:25:13 +03:00
Stijn Tintel 9b86d46d3c
Merge pull request #16163 from stintel/openvswitch
openvswitch: allow complex port configurations
2021-07-26 18:21:55 +03:00
Dirk Brenken 380a5110b4
travelmate: update to 2.0.4
* code cleanup
* add auto login script for Julianahoeve beach resort (NL)
* add auto login script for Vodafone hotspots (DE)
* add auto login script for telekom hotspots (DE)
* enhance captive portal detection to support html redirects as well
* change default captive portal detection url to
  'detectportal.firefox.com'

Signed-off-by: Dirk Brenken <dev@brenken.org>
2021-07-25 21:50:27 +02:00
Paul Fertser 8f0bd0b4fe net: socat: add option user
Allow UCI configuration to specify username to run this service as.
Defaults to root.

Signed-off-by: Paul Fertser <fercerpav@gmail.com>
2021-07-25 22:26:34 +03:00
Rosen Penev 83304d7d67
Merge pull request #16198 from 1715173329/dnsproxy
dnsproxy: Update to 0.39.0 and add init script
2021-07-23 20:48:05 -07:00
Daniel Golle 3c7da5dc7d
hs20: set PKG_SOURCE_SUBDIR
Building without the mirror-tarballs fails to PKG_SOURCE_SUBDIR not
matching the hostapd source subdir name. Fix that.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-07-24 04:35:29 +01:00
Rosen Penev dc7daeaf68
Merge pull request #16170 from neheb/Iperf
iperf: update to 2.1.3
2021-07-23 19:47:48 -07:00
Rosen Penev 637c9e90d2
Merge pull request #16182 from neheb/lk
lksctp-tools: update to 1.0.19
2021-07-23 19:47:33 -07:00
Tianling Shen 10aebfd51b
dnsproxy: add basic init script
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-07-23 23:29:26 +08:00
Tianling Shen f4ed32e14c
dnsproxy: Update to 0.39.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-07-23 23:29:16 +08:00
Stijn Tintel eff5adb9a3 openvswitch: allow complex port configurations
The current way to add ports to an Open vSwitch bridge does not allow
complex port configurations. Use a dedicated uci config section per port
instead of the current port:type syntax. This way we can easily support
more features like setting the VLAN tag or the OpenFlow port number.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2021-07-23 12:16:29 +03:00
Stijn Tintel a5648280b3 openvswitch: only init bridges when (re)starting
Calling the ovs_bridge_init function when stopping the service will
result in ovs-vsctl being called after ovsdb-server has been shut down.
This causes the following error:

ovs-vsctl: unix:/var/run/openvswitch/db.sock: database connection failed (No such file or directory)

Calling the ovs_bridge_init function when requesting the service status
has no added value.

Only call ovs_bridge_init during start or restart to fix this.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2021-07-23 12:16:29 +03:00
Stijn Tintel 261961a33c openvswitch: refresh patches
CI run fails due to dirty patches, so refresh them.

Fixes: f4f1a25e80 ("openvswitch: bump to version 2.15.0")
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2021-07-23 12:16:29 +03:00
Ansuel Smith e9617f5532
nginx: bump to 1.21.1 and improve makefile
- Bump to 1.21.1
- Rework makefile to fix bad make refresh
- Refresh patch

Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>
2021-07-22 18:49:03 +02:00
Michal Hrusecky 2fe854ebd6
net/snort3: Include default configs and snort2lua
Include default configuration files to have something to start from.
Also include snort2lua to help convert snort2 rules to snort3 to also
help with bootstrapping the configuration.

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
2021-07-22 13:55:38 +02:00
Michael Heimpold 30299084e8 mdio-tools: upgrade to latest commit
Also fix minor style issues.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2021-07-21 22:24:49 +02:00
Rosen Penev 2f6a07dfe8
Merge pull request #16188 from neheb/Ua
uacme: update to 1.7.1
2021-07-21 02:37:03 -07:00