Difuse/packages
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
packages/net
History
Peter Stadler f62599d27e nginx-util: use UCI for server configuration 
**tl;dr:** The functions `{add,del}_ssl` modify a server
section of the UCI config if there is no `.conf` file with
the same name in `/etc/nginx/conf.d/`.

Then `init_lan` creates `/var/lib/nginx/uci.conf` files by
copying the `/etc/nginx/uci.conf.template` and standard
options from the UCI config; additionally the special path
`logd` can be used in `{access,error}_log`.

The init does not change the configuration beside
re-creating self-signed certificates when needed. This is
also the only purpose of the new `check_ssl`, which is
installed as yearly cron job.

**Initialization:**

Invoking `nginx-util init_lan` parses the UCI configuration
for package `nginx`. It creates a server part in
`/var/lib/nginx/uci.conf` for each `section server '$name'`
by copying all UCI options but the following:

* `option uci_manage_ssl` is skipped. It is set to
'self-signed' by `nginx-util add_ssl $name`, removed by
`nginx-util del_ssl $name` and used by
`nginx-util check_ssl` (see below).

* `logd` as path in `error_log` or `access_log` writes them
to STDERR respective STDOUT, which are fowarded by Nginx's
init to the log daemon. Specifically:
`option error_log 'logd'` becomes `error_log stderr;` and
`option access_log 'logd openwrt'` becomes
`access_log /proc/self/fd/1 openwrt;`

Other `[option|list] key 'value'` entries just become
`key value;` directives.

The init.d calls internally also `check_ssl` for rebuilding
self-signed SSL certificates if needed (see below). And it
still sets up `/var/lib/nginx/lan{,_ssl}.listen` files as
it is doing in the current version (so they stay available).

**Defaults:**

The package installs the file `/etc/nginx/restrict_locally`
containing allow/deny directives for restricting the access
to LAN addresses by including it into a server part. The
default server '_lan' includes this file and listens on all
IPs (instead of only the local IPs as it did before; other
servers do not need to listen explicitly on the local IPs
anymore). The default server is contained together with a
server that redirects HTTP requests for inexistent URLs to
HTTPS in the UCI configuration file `/etc/config/nginx`.
Furthermore, the packages installs a
`/etc/nginx/uci.conf.template` containing the current setup
and a marker, which will be replaced by the created UCI
servers when calling `init_lan`.

**Other:**

If there is a file named `/etc/nginx/conf.d/$name.conf` the
functions `init_lan`, `add_ssl $name` and `del_ssl $name`
will use that file instead of a UCI server section (this is
similar to the current version).

Else it selects the UCI `section server $name`, or, when
there is no such section, it searches for the first one
having `option server_name '… $name …'`. For this section:

* `nginx-util add_ssl $name` will add to it:
`option uci_manage_ssl 'self-signed'`
`option ssl_certificate '/etc/nginx/conf.d/$name.crt'`
`option ssl_certificate_key '/etc/nginx/conf.d/$name.key'`
`option ssl_session_cache 'shared:SSL:32k'`
`option ssl_session_timeout '64m'`
If these options are already present, they will stay the
same; just the first option `uci_manage_ssl` will always be
changed to 'self-signed'. The command also changes all
`listen` list items to use port 443 and ssl instead of port
80 (without ssl). If they stated another port than 80
before, they are kept the same. Furthermore, it creates a
self-signed SSL certificate if necessary, i.e., if there is
no *valid* certificate and key at the locations given by
the options `ssl_certificate` and `ssl_certificate_key`.

* `nginx-util del_ssl $name` checks if `uci_manage_ssl` is
set 'self-signed' in the corresponding UCI section. Only
then it removes all of the above options regardless of the
value looking just at the key name. Then, it also changes
all `listen` list items to use port 80 (without ssl)
instead of port 443 with ssl. If stating another port than
443, they are kept the same. Furthermore, it removes the
SSL certificate and key that were indicated by
`ssl_certificate{,_key}`.

* `nginx-util check_ssl` looks through all server sections
of the UCI config for `uci_manage_ssl 'self-signed'`. On
every hit it checks if the SSL certificate-key-pair
indicated by the options `ssl_certificate{,_key}` is
expired. Then it re-creates a self-signed certificate.
If there exists at least one `section server` with
`uci_manage_ssl 'self-signed'`, it will try to install
itself as cron job. If there are no such sections, it
removes that cron job if possible.

For installing a ssl certificate and key managed by
another app, you can call:
`nginx-util add_ssl $name $manager $crtpath $keypath`
Hereby `$name` is as above, `$manager` is an arbitrary
string, and the the ssl certificate and its key are
indicated by their absolute path. If you want to remove
the directives again, then you can use:
`nginx-util del_ssl $name $manager`

Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
2020-11-28 18:34:39 +01:00
..
acme Add option for days until renewal 2020-10-29 10:44:57 +01:00
adblock adblock: adapt openwrt rc.common changes 2020-11-03 19:51:46 +01:00
addrwatch treewide: fix broken conffiles 2020-07-07 18:29:13 +08:00
adguardhome adguardhome: upstream upgrade to v0.104.1 2020-11-24 21:24:47 +02:00
aggregate aggregate: respect CFLAGS, LDFLAGS 2019-01-23 10:06:32 +03:00
aircrack-ng aircrack-ng: Update to 1.6 2020-01-28 05:49:02 +08:00
announce
apache Merge pull request from micmac1/apa-faker 2020-11-25 15:05:52 -08:00
apcupsd apcupsd: Preset binaries used on target system 2019-09-24 21:29:54 +03:00
apfree-wifidog apfree-wifidog: use new extra_command function definition 2020-11-04 08:50:34 +01:00
apinger apinger: fix compilation with GCC 10 2020-07-17 20:35:34 -07:00
aria2 treewide: add conffiles 2020-05-09 06:06:43 +08:00
ariang ariang: update to 1.1.17 2020-09-12 18:02:37 -07:00
arp-scan arp-scan: update to 1.9.7 2019-12-02 09:51:19 +03:00
atftp CI: add runtime test for atftp and atftpd 2020-09-18 21:18:30 -07:00
autossh autossh: switch to procd 2020-08-31 07:05:12 -07:00
banip banip: removed logd check since logd dep has been dropped 2020-11-10 08:34:56 +01:00
bcp38 treewide: Change .*GPL.*+ licenses to SPDX compatible identifier 2019-09-10 07:45:15 +02:00
beanstalkd treewide: add PKG_CPE_ID for better cvescanner coverage 2019-09-17 12:40:26 +02:00
bfdd bfdd: fix compilation with GCC 10 2020-07-17 20:34:36 -07:00
bind bind: update to version 9.16.8 2020-10-31 06:39:05 -07:00
bitlbee treewide: add PKG_CPE_ID for better cvescanner coverage 2019-09-17 12:40:26 +02:00
bmon
boinc boinc: fix compilation without deprecated OpenSSL APIs 2020-08-04 19:12:49 -07:00
bonding bonding: proto notify error definitions 2020-03-30 12:15:29 +02:00
bridge-utils bridge-utils: update to 1.7 2020-07-15 19:14:34 -07:00
bwm-ng
bwping bwping: update to version 2.2 2020-11-27 23:12:14 +03:00
cgi-io cgi-io: update to version 2020-10-27 2020-10-27 23:10:17 +01:00
chaosvpn chaosvpn: fix compilation without sys/cdefs 2020-08-10 15:26:41 -07:00
chrony chrony: add package variant with NTS 2020-11-18 12:01:35 +01:00
cifs-utils cifs-utils: update to 6.11 2020-09-14 14:22:56 -07:00
clamav clamav: update to version 0.102.4 (security fix) 2020-07-30 15:28:52 +02:00
conntrack-tools conntrack-tools: add missing patch 2019-01-24 13:09:23 +01:00
conserver conserver: update to version 8.2.6 2020-10-25 19:24:52 +01:00
coova-chilli coova-chilli: Update pkg_release 2020-05-26 17:51:26 -04:00
cshark cshark: Switch to standard PKG_SOURCE_VERSION/DATE 2019-09-21 15:56:58 -07:00
curl curl: fix build against OpenSSL 2020-11-26 14:47:55 +08:00
daemonlogger treewide: Use default PKG_BUILD_DIR when possible 2019-10-13 02:01:34 +08:00
darkstat darkstat: correct incompatbility with sshd 2020-07-01 18:40:42 -04:00
davfs2 davfs2: update to 1.6.0 2020-08-19 14:35:40 -07:00
dawn dawn: bump version 2020-09-03 21:07:41 +02:00
dcstad dcwifi: Update component versions 2019-10-09 14:53:01 +00:00
dcwapd treewide: add conffiles 2020-05-09 06:06:43 +08:00
ddns-scripts ddns-scripts: update sitelutions url 2020-10-22 07:44:26 +02:00
dhcp-forwarder
dhcpcd treewide: add PKG_CPE_ID for better cvescanner coverage 2019-09-17 12:40:26 +02:00
dmapd dmapd: update 0.0.86 2020-11-19 13:05:39 -06:00
dnscrypt-proxy dnscrypt-proxy: Changed 'Provider Key' for securedns to current value 2020-04-05 10:26:52 +01:00
dnscrypt-proxy2 dnscrypt-proxy2: update to version 2.0.44 2020-07-16 15:31:30 +02:00
dnsdist dnsdist: update to 1.5.1 2020-10-10 14:27:27 -07:00
dnstap dnstap: update to version 0.2.2 2020-10-05 15:17:54 +02:00
dnstop dnstop: add new package 2019-07-27 21:23:37 +08:00
dynapoint treewide: Change .*GPL.*+ licenses to SPDX compatible identifier 2019-09-10 07:45:15 +02:00
esniper
etesync-server etesync-server: use relative path for static_url 2020-10-17 21:29:44 +02:00
etherwake etherwake: Remove obsolete uClibc patch 2019-07-21 12:30:52 +02:00
etherwake-nfqueue etherwake-nfqueue: Fix PKG_LICENSE 2019-09-28 23:06:52 +02:00
fakeidentd treewide: Change .*GPL.*+ licenses to SPDX compatible identifier 2019-09-10 07:45:15 +02:00
fakepop fakepop: Fix PKG_LICENSE, remove libc dependency 2020-08-22 22:18:44 +01:00
family-dns family-dns: add new package 2020-04-11 23:20:47 -05:00
fastd fastd: update to v21 2020-10-19 21:52:43 +02:00
foolsm foolsm: change mail dependency 2020-07-08 10:54:39 +02:00
fping fping: update to 5.0 2020-08-19 15:00:34 -07:00
freeradius3 freeradius3: move "release_" from PKG_VERSION 2020-10-14 13:02:22 +03:00
frp frp: update to 0.34.0 2020-09-23 16:04:00 +08:00
frr frr: fix running on mips (again) 2020-09-08 23:23:43 +03:00
fwknop fwknop: Use sensible defaults. 2020-10-15 20:11:30 +02:00
gateway-go gateway-go: add default config and gateway-go.init for background service 2020-09-21 12:37:47 +08:00
geth geth: update to 1.9.22 2020-10-11 19:13:38 -07:00
git git: update to 2.27.0 2020-06-13 18:10:49 -07:00
gitolite treewide: Remove myself as maintainer 2020-03-20 14:12:55 -04:00
gnunet gnunet: use new extra_command function definition 2020-11-04 08:50:34 +01:00
gnunet-fuse gnunet-fuse: update to version 0.13.0 2020-08-04 21:00:26 +01:00
gnurl gnurl: update to release 0.72.0 2020-09-17 10:56:10 +01:00
haproxy haproxy: Update HAProxy to v2.2.5 2020-11-07 15:37:49 +01:00
hcxdumptool hcxtools: update to 5.3.0. + Changes to Makefile to include latest binaries being compiled 2020-02-03 17:17:42 +01:00
hcxtools hcxtools: update to 5.3.0. + Changes to Makefile to include latest binaries being compiled 2020-02-03 17:17:42 +01:00
horst treewide: Change .*GPL.*+ licenses to SPDX compatible identifier 2019-09-10 07:45:15 +02:00
hs20 hs20: prepare server using uci-defaults and ship files 2020-08-17 14:12:05 +01:00
htpdate treewide: Change .*GPL.*+ licenses to SPDX compatible identifier 2019-09-10 07:45:15 +02:00
httping treewide: Use default PKG_BUILD_DIR when possible 2019-10-13 02:01:34 +08:00
https-dns-proxy https-dns-proxy: re-add conffiles and add description to Makefile 2020-06-26 03:09:26 +00:00
i2pd i2pd: refresh patch 2020-09-13 20:21:45 -07:00
ibrdtn-tools ibrdtn-tools: Switch to uClibc++ 2019-05-26 23:06:02 -07:00
ibrdtnd ibrdtnd: Remove c++03 option 2019-12-12 23:40:46 -08:00
ifstat ifstat: import fixes from Debian package 2020-10-27 23:53:28 -07:00
inadyn inadyn: update to 2.7 2020-08-04 19:10:09 -07:00
iodine treewide: add PKG_CPE_ID for better cvescanner coverage 2019-09-17 12:40:26 +02:00
iptraf-ng treewide: Remove self from PKG_MAINTAINER 2019-12-21 12:52:41 -08:00
iputils iputils: update to 20200821 2020-09-01 12:21:55 -07:00
ipvsadm ipvsadm: update version to 1.31 2020-01-09 13:00:00 +01:00
irssi irssi: update to version 1.2.2 (security fix) 2019-09-18 20:12:17 +02:00
isc-dhcp isc-dhcp: add support for RFC-3442 classless routes to hosts 2020-09-10 10:43:29 -06:00
jool jool: update to 4.1.4 2020-10-14 19:46:08 -07:00
kadnode treewide: add conffiles 2020-05-09 06:06:43 +08:00
kcptun kcptun: bump to v20201010 2020-10-12 02:23:42 +08:00
kea kea: fix compilation with libcxx 2020-10-31 18:23:28 -07:00
keepalived keepalived: update PKG_VERSION to 2.1.5 2020-10-12 08:55:18 +02:00
kismet kismet: fix compilation under uClibc-ng and GCC10 2020-08-31 00:39:54 -07:00
knot knot: disable embedded xdp 2020-11-16 11:22:24 +01:00
knxd knxd: fix compilation without sys/cdefs 2020-08-10 15:25:04 -07:00
kplex treewide: Change .*GPL.*+ licenses to SPDX compatible identifier 2019-09-10 07:45:15 +02:00
krb5 krb5: update to 1.18.3 2020-11-19 13:24:26 -06:00
ksmbd-tools ksmbd-tools: update to 3.2.6 2020-06-01 11:03:55 +08:00
lcdringer lcdringer: apply brcm2708 target rename to bcm27xx to dependencies 2020-02-11 14:05:35 +01:00
leech leech: remove empty install defines 2019-11-15 14:11:02 +00:00
lftp lftp: update to 4.9.2 2020-08-27 17:30:32 -07:00
libndp treewide: add PKG_CPE_ID for better cvescanner coverage 2019-09-17 12:40:26 +02:00
libreswan libreswan: update to 4.1 2020-10-25 16:09:13 +02:00
lighttpd lighttpd: add config for logrotate 2020-10-29 15:18:54 +01:00
linknx linknx: fix compilation without sys/cdefs 2020-08-10 15:23:59 -07:00
linuxptp linuxptp: Upgrade to v3.1 2020-09-29 14:33:25 +02:00
lksctp-tools treewide: add missing BUILDONLY 2020-10-12 17:43:49 -07:00
lora-gateway-hal treewide: avoid deref symlinks when installing .so 2019-06-21 09:52:32 +08:00
lynx treewide: add PKG_CPE_ID for better cvescanner coverage 2019-09-17 12:40:26 +02:00
mac-telnet mac-telnet: fix mirror hash 2020-04-15 09:54:24 +02:00
mbusd mbusd: add mbusd 2020-10-08 16:57:00 +02:00
mdnsresponder treewide: add PKG_CPE_ID for better cvescanner coverage 2019-09-17 12:40:26 +02:00
memcached memcached: update to 1.6.8 2020-11-19 16:15:48 -08:00
mikrotik-btest
mini_snmpd mini_snmpd: update to 1.6 2020-09-19 11:43:25 +02:00
miniupnpc miniupnpc: update to 2.2.0 2020-11-19 16:15:00 -08:00
miniupnpd net/miniupnpd: ext_ip_reserved_ignore support 2020-11-26 15:56:20 +08:00
modemmanager modemmanager: include all init commands in the procd instance 2020-11-02 10:55:17 +01:00
mosh mosh: use mips16 and remove configure patch 2020-03-17 17:49:01 -07:00
mosquitto net/mosquitto: Update to 1.6.12 2020-08-19 15:30:36 +00:00
mrmctl dcwifi: Update component versions 2019-10-09 14:53:01 +00:00
mstpd mstpd: fix compilation with uClibc-ng 2020-08-31 01:12:14 -07:00
mtr mtr: update to 0.94 2020-11-24 22:43:14 -08:00
mwan3 mwan3: version bump to 2.10.3-3 2020-11-16 11:40:50 -05:00
nbd nbd: Remove other build dependency 2019-10-03 16:22:38 -07:00
ncp
net-snmp treewide: add missing BUILDONLY 2020-10-12 17:43:49 -07:00
net-tools net-tools: add route utility 2020-01-07 10:27:34 +01:00
netatalk netatalk: fix compile error in mac os 2020-08-03 12:26:32 +03:00
netcat netcat: fix Illegal instruction on listen udp 2020-06-30 23:42:10 +01:00
netdiscover netdiscover: fix compilation with GCC 10 2020-08-10 15:54:32 -07:00
netifyd netifyd: Updated to v3.05. 2020-10-05 09:30:56 -04:00
netopeer2 netopeer2: update to 1.1.39 2020-08-22 18:26:04 +02:00
netperf netperf: fix compilation with GCC10 2020-08-09 00:02:48 -07:00
netsniff-ng netsniff-ng: add missing header 2020-08-13 21:29:11 -07:00
netstinky netstinky: IDS for detecting IoCs on your network 2020-11-10 02:17:15 +00:00
nextdns nextdns: Update to version 1.9.4 2020-11-23 22:15:05 +00:00
nfdump nfdump: update to 1.6.22 2020-11-22 18:47:49 -06:00
nfs-kernel-server nfs-kernel-server: update to 2.5.1 2020-06-29 17:50:31 +02:00
nft-qos nft-qos: support mac address based speed limit 2020-08-19 09:39:57 -04:00
nginx nginx: update to version 1.19.4 2020-11-04 19:25:33 +01:00
nginx-util nginx-util: use UCI for server configuration 2020-11-28 18:34:39 +01:00
ngircd ngircd: update to 26 2020-07-17 15:11:35 -07:00
nlbwmon nlbwmon: add hotplug script to reload after interface ifup 2020-07-28 19:23:12 +03:00
nmap nmap: fix compilation with libcxx 10 2020-06-03 10:31:23 +02:00
noddos treewide: fix broken conffiles 2020-07-07 18:29:13 +08:00
nsd nsd: update to 4.2.4 2020-01-25 17:54:04 -08:00
ntpclient ntpclient: fixup time patch 2020-04-11 19:52:44 -07:00
ntpd ntpd: Include sntp binary only with ntp-utils 2020-09-18 02:49:10 -07:00
ntripcaster treewide: Change .*GPL.*+ licenses to SPDX compatible identifier 2019-09-10 07:45:15 +02:00
ntripclient treewide: Change .*GPL.*+ licenses to SPDX compatible identifier 2019-09-10 07:45:15 +02:00
ntripserver treewide: Change .*GPL.*+ licenses to SPDX compatible identifier 2019-09-10 07:45:15 +02:00
nut nut: fix _ handling 2020-09-19 16:52:58 -07:00
obfs4proxy obfs4proxy: Update to 0.0.11 2019-06-30 03:15:35 +08:00
ocserv ocserv: include ocserv-worker 2020-09-22 21:25:27 +02:00
ola ola: update to 0.10.8 2020-11-23 19:31:35 -08:00
ooniprobe ooniprobe: udpate to version 3.0.11 2020-11-23 12:18:05 +01:00
oor oor: fix compilation with GCC 10 2020-08-10 16:19:11 -07:00
open-iscsi open-iscsi: fix compilation with musl 1.2.0 2020-08-10 15:53:58 -07:00
open-isns open-isns: fix compilation without deprecated signal API 2020-08-13 21:35:05 -07:00
openconnect openconnect: allow specify --protocol from config 2020-10-25 21:44:32 +01:00
openfortivpn openfortivpn: fix shellcheck warnings 2020-09-10 17:56:10 -04:00
openssh openssh: update to 8.4p1 2020-10-05 15:20:26 +08:00
opentracker openconnect: Switch to HTTPS for the source URL 2019-11-30 18:30:35 -08:00
openvswitch openvswitch: use new extra_command function definition 2020-11-04 08:50:34 +01:00
ostiary ostiary: Initial package creation 2019-06-11 07:37:07 +01:00
overture overture: update to 1.6.1 2020-06-23 17:09:23 +08:00
ovn ovn: bump to version 20.09.0 2020-10-19 14:17:04 +08:00
p910nd p910nd: Run as non-root by default 2019-08-02 15:58:57 +08:00
pagekitec pagekitec: update to latest 2020-11-19 22:12:18 +00:00
pdns pdns: update to 4.3.1 2020-10-10 18:58:19 -07:00
pdns-recursor pdns-recursor: update to 4.4.0 2020-11-04 23:00:47 -08:00
pen treewide: Change .*GPL.*+ licenses to SPDX compatible identifier 2019-09-10 07:45:15 +02:00
phantap phantap: update to latest commit 2020-02-09 21:47:59 -05:00
pingcheck pingcheck: Update and add script directories 2020-02-12 12:17:12 +00:00
pixiewps treewide: Capitalize submenus 2019-07-25 09:35:40 +08:00
polipo treewide: add PKG_CPE_ID for better cvescanner coverage 2019-09-17 12:40:26 +02:00
port-mirroring treewide: add conffiles 2020-05-09 06:06:43 +08:00
pppossh treewide: add missing PKGARCH:=all to non-binary packages 2019-03-30 17:11:50 +08:00
pptpd treewide: add PKG_CPE_ID for better cvescanner coverage 2019-09-17 12:40:26 +02:00
privoxy treewide: add PKG_CPE_ID for better cvescanner coverage 2019-09-17 12:40:26 +02:00
prosody prosody: fix shellcheck warnings 2020-10-15 18:20:20 -07:00
proxychains-ng proxychains-ng: new package 2019-09-24 20:31:46 +00:00
ptunnel-ng ptunnel-ng: update to 1.42 2019-04-29 20:12:56 +02:00
quassel-irssi quassel-irssi: refresh patches to avoid fuzz 2019-09-24 20:36:09 +02:00
radicale radicale: use new extra_command function definition 2020-11-04 08:50:34 +01:00
radicale2 radicale2: Clean up Makefile 2020-04-29 17:48:46 +08:00
radsecproxy radsecproxy: fix compilation with GCC10 2020-07-17 15:46:48 -07:00
ratched ratched: add new package 2020-09-21 17:39:42 +02:00
ratechecker treewide: Change .*GPL.*+ licenses to SPDX compatible identifier 2019-09-10 07:45:15 +02:00
reaver reaver: enable PKG_BUILD_PARALLEL 2020-03-27 10:57:24 +08:00
redsocks
remserial treewide: Change .*GPL.*+ licenses to SPDX compatible identifier 2019-09-10 07:45:15 +02:00
restic-rest-server treewide: add conffiles 2020-07-07 06:27:51 +08:00
rosy-file-server rosy-file-server: add new package 2019-04-01 14:20:15 +08:00
rp-pppoe rp-pppoe: increase PKG_RELEASE 2020-11-05 21:06:13 +01:00
rpcbind rpcinfo: add upstream commit to fix stack buffer overflow 2019-05-12 21:14:31 +02:00
rsync rsync: add config option for zstd support 2020-10-02 22:01:58 -07:00
rsyslog rsyslog: update to 8.2006.0 2020-07-17 15:33:53 -07:00
rtorrent rtorrent: Switch to using static libtorrent 2019-09-09 15:32:29 -07:00
safe-search safe-search: duckduckgo.com new ip address 2020-09-08 17:31:41 -05:00
samba4 samba4: update to version 4.12.7 2020-09-24 12:29:16 +02:00
scapy scapy: update to 2.4.4 2020-09-20 17:19:10 -07:00
seafile-ccnet seafile-ccnet: Update to 7.1.5 2020-10-13 06:42:26 +08:00
seafile-seahub seafile-seahub: Update to 7.1.5, refresh patches 2020-10-13 06:42:26 +08:00
seafile-server seafile-server: use new extra_command function definition 2020-11-04 08:50:34 +01:00
ser2net treewide: add conffiles 2020-05-09 06:06:43 +08:00
shadowsocks-libev shadowsocks-libev: bump to version 3.3.5 2020-09-21 17:19:59 +08:00
shorewall Shorewall: Bump to 5.2.8 2020-09-27 22:33:51 +02:00
shorewall-core Shorewall-core: Bump to 5.2.8 2020-09-27 22:33:05 +02:00
shorewall-lite Shorewall-lite: Bump to 5.2.8 2020-09-27 22:33:26 +02:00
shorewall6 Shorewall6: Bump to 5.2.8 2020-09-27 22:34:27 +02:00
shorewall6-lite Shorewall6-lite: Bump to 5.2.8 2020-09-27 22:33:37 +02:00
siit siit: replace SUBDIRS with M in package recipe 2020-03-11 00:50:22 +01:00
simple-adblock simple-adblock: use new extra_command function definition 2020-11-04 08:50:34 +01:00
smartdns smartdns: update to 1.2020.30 2020-03-21 00:33:37 +08:00
smartsnmpd treewide: add conffiles 2020-05-09 06:06:43 +08:00
smcroute smcroute: Remove faulty tab in conf section 2020-04-21 08:28:01 +02:00
snort snort: update to 2.9.16.1 2020-11-19 14:53:24 -06:00
snort3 snort3: require new libdaq3 package 2020-11-22 18:14:33 -06:00
socat socat: update to 1.7.3.4 2020-02-13 15:53:36 -08:00
softethervpn softethervpn: update to 4.34-9745 2020-10-26 21:46:20 -07:00
softethervpn5 softethervpn5: update to 9672 2020-06-09 16:56:35 +02:00
softflowd softflowd: fix compilation with newer musl 2020-03-28 20:40:52 -07:00
spawn-fcgi spawn-fcgi: switch to CMake 2020-07-04 15:22:53 -07:00
speedtest-netperf speedtest-netperf: new package to measure network performance 2019-02-22 13:34:25 -08:00
spoofer spoofer: Update to 1.4.6 2020-07-24 15:42:36 -07:00
sqm-scripts sqm-scripts: depend directly on kmod-sched-cake again 2020-08-31 21:57:28 +02:00
sqm-scripts-extra
squid squid: update to version 4.12 2020-07-20 08:56:50 +02:00
sshfs sshfs: update to 3.7.1 2020-11-19 16:14:05 -08:00
sshtunnel sshtunnel: correct access of config file 2020-08-24 13:49:45 -07:00
sslh sslh: update to 1.21c 2020-08-27 17:32:06 -07:00
sstp-client sstp-client: Update to 1.0.13 2019-12-04 10:23:51 -08:00
static-neighbor-reports static-neighbor-reports: add package 2020-10-12 01:40:30 +02:00
strongswan strongswan: bump to 5.9.0 2020-09-02 23:20:33 +03:00
stubby stubby: fix typo 2020-09-18 14:28:08 -07:00
stunnel stunnel: update version to 5.57 2020-10-29 12:49:41 +01:00
subversion subversion: fix build failure 2020-01-27 22:57:58 +01:00
switchdev-poller switchdev-poller: netifd now keep dev down 2020-04-29 17:52:20 -03:00
sysrepo sysrepo: update to 1.4.70 2020-08-22 18:26:04 +02:00
tac_plus tac_plus: Disabled PAM by default and added a PAM variant 2019-05-12 09:21:51 +02:00
tcpproxy treewide: Change .*GPL.*+ licenses to SPDX compatible identifier 2019-09-10 07:45:15 +02:00
tcpreplay tcpreplay: bump to version 4.3.3 2020-06-25 19:29:52 +03:00
tgt tgt: update to 1.0.80 2020-11-09 12:49:59 +02:00
tinc tinc: use new extra_command function definition 2020-11-04 08:50:34 +01:00
tinyproxy tinyproxy: convert to procd 2020-03-15 13:40:13 -07:00
tor tor: update to version 0.4.4.6 (security fix) 2020-11-18 12:47:09 +01:00
tor-fw-helper tor-fw-helper: new package 2018-11-06 20:33:55 +08:00
tor-hs tor-hs: add new package 2020-04-17 13:57:00 +02:00
torsocks torsocks: add new package 2019-03-17 02:49:32 +01:00
trafficshaper treewide: replace which with command -v 2020-08-09 13:58:14 -10:00
transmission transmission: convert seccomp filter rules to OCI format 2020-11-17 13:16:17 +00:00
transmission-web-control transmission-web-control: remove Transmission SSL variants 2020-11-08 11:38:15 +01:00
travelmate travelmate: fix possible race condition 2020-11-26 22:39:15 +01:00
u2pnpd net/u2pnpd: convert init to procd 2020-08-23 22:52:31 +02:00
uacme uacme: remove cron entry on package removal 2020-05-28 22:36:20 -07:00
uanytun treewide: Use default PKG_BUILD_DIR when possible 2019-10-13 02:01:34 +08:00
udpspeeder udpspeeder: Add new package udpspeeder to implement Forward Error Correction (FEC) for UDP VPNs like OpenVPN 2020-11-11 13:32:48 +05:30
udptunnel udptunnel: new package 2019-04-14 21:11:29 +02:00
udpxy udpxy: fix error 'enable verbose' command flag in init script 2020-10-21 15:39:53 +08:00
ulogd ulogd: Add back autoreconf 2019-09-16 17:49:17 -07:00
umurmur umurmur: fix paths 2019-10-29 20:54:22 +01:00
unbound unbound: clean up interface interpretation in UCI 2020-11-04 19:25:08 -05:00
usbip usbip: remove no longer necessary udev hack 2020-11-03 12:38:12 +00:00
uwsgi uwsgi: update to version 2.0.19.1 2020-07-17 17:45:44 +02:00
vallumd vallumd: switch to codeload.github.com 2020-05-08 04:17:48 +03:00
vncrepeater
vnstat
vnstat2 vnstat2: update to version 2.6 2020-01-21 14:05:22 +01:00
vpn-policy-routing vpn-policy-routing: use new extra_command function definition 2020-11-04 08:50:34 +01:00
vpnbypass vpnbypass: use new extra_command function definition 2020-11-04 08:50:34 +01:00
vpnc vpnc: fix IPv6-triggered inoperability 2019-03-09 03:17:47 -08:00
vpnc-scripts vpnc-script: bumped release version 2019-12-18 21:24:45 +01:00
vsftpd vsftpd: fix compilation with glibc 2020-04-20 22:14:06 +02:00
wakeonlan treewide: add missing PKGARCH:=all to non-binary packages 2019-03-30 17:11:50 +08:00
wavemon wavemon: fix compilation with glibc 2020-08-26 16:12:55 -07:00
webui-aria2 webui-arai2: bump to v2018-12-09 2020-02-12 16:05:11 +08:00
wget wget: make the ssl variant provides wget-ssl 2020-04-14 11:37:04 +08:00
wifidog wifidog: use new extra_command function definition 2020-11-04 08:50:34 +01:00
wifischedule treewide: Capitalize submenus 2019-07-25 09:35:40 +08:00
wsdd2 wsdd2: Uppercase NB_PARM 2020-07-18 13:00:22 +02:00
xinetd xinetd: do not restart service after config change if it is not running 2020-11-05 14:29:38 +01:00
xl2tpd xl2tpd: fix invoking xl2tpd-control 2020-11-12 15:20:16 +08:00
xtables-addons xtables-addons: include xt_geoip_fetch utility 2020-11-25 17:45:28 -07:00
yggdrasil yggdrasil: bump to 0.3.15 2020-09-28 06:04:14 -04:00
zerotier zerotier: disable pie support 2020-07-23 13:41:00 -07:00
znc znc: Add support for many configurable listeners 2020-10-20 21:06:05 +03:00