Fixes: CVE-2021-33880

* Use color-scheme detection for theme
* Sync translations with Turris OS
* Improve cards transitions
* Fix headline in README

Changed:
* Increase persistent logs size to 100 MB in logrotate config
* Refactor srv init script
* Restart rainbow service instead of hardcoded set to white in srv init script

Fixed
* Handle missing /srv directory in srv init script
* Prevent to manipulate programmable LEDs on routers without rainbow command in srv init script

* faster rendering of snapshots table
* unified management of temporary files
* used credentials file for samba

Fixed:
* networks: fix reading multiple interfaces of wan (e.g. bridge)
* wan: ipv6_address in 6in4 may contain prefix as well

* Add & update translations
* Replace `attack detection` by `threat detection`
* NPM audit fix

Martin Prudek authored 3 years ago and Karel Koci committed 3 years ago

Term 'data collection' is no longer desired. We should replace it
wherever possible with terms like:
 - Turris Security
 - Turris Sentinel
 - Threat detection

Call cleanup of the database faster to allow smaller databases.

Michal Hrusecky authored 3 years ago and Karel Koci committed 3 years ago

It is being generated, but the contract enforcing part was missing
altogether.

Vladimír Čunát authored 3 years ago and Karel Koci committed 3 years ago

Note: reading and writing the *.md5 file is now done within a couple lines,
instead of being sprinkled across a few scripts.

Also, change URL in PKG_SOURCE_URL as the repository was moved

* support for remotes on Samba
* allow to keep remote snapshots forever

In version 0.2.0, there was added feature to provide list of countries
[1]. There was also added to setup_requires (in setup.py)
dependency/package: l18n. OpenWrt has a problem
issue with it as can be seen below:

Error:
  error: invalid command 'bdist_wheel'
  ----------------------------------------
  ERROR: Failed building wheel for l18n
ERROR: Failed to build one or more wheels

It can be solved by adding host package build depends as described here
[2], which solved it for me so I could compile it.

[1] turris/foris-controller/turris-timezone@0a799a24
[2] https://github.com/openwrt/packages/blob/2edbc4c805d61d859f5e2af84293cdfb051f7f56/lang/python/README.md#installing-host-side-python-packages

Added:
* utils: add `ip_network_address` helper function

Changed:
* router_notifications: change default "from" and "host" of custom smtp server to empty s      tring

Fixed:
* dns: fix setting custom forwarder port for non-TLS servers
* lan: update openvpn server push route configuration on lan update
* lan: fix crash on dhcp host which has multiple MAC addresses (contributed by ktetzlaff)
* lan: fix crash on negative dhcpv6 lease time; set it to 0 for now
* wan: add missing fw rule for 6to4
* zeroconf: Foris-controller won't fully start when something is running on port 5353

Added:
* hook to reload openvpn server settings

Fixes:
* maintain-{lighttpd,network}-restart, maintain-reboot: fix reading of IP addresses

Changed:
* maintain-{lighttpd,network}-restart, maintain-reboot: Set mqtt as the only message bus used

Issue foris-controller#146 introduced new way of storing IP address and
netmask for lan, to be more aligned with the way LuCI stores it.

However it breaks several maintenance scripts, which in turn won't send
notification to re/foris to show the "reloading network..." spinner.

This fixes reading of IP address from uci.

Followup of commit c5428642

Set mqtt as the only message bus, because we no longer use another message
buses on regular router setup.

Fixed:
* ignore files and consider only symlinks in `/sys/class/net` as interfaces

Bump v1.4.1
* Add & update translations
* Add make-test-js command
* Update Foris JS library to v5.1.14
* NPM audit fix * Other small improvements

* Add fluid layout support
* Add & update translations
* Refine texts & Tokens table
* Restructure headings
* Integrate ESLint + Prettier + reForis styleguide
* Update Foris JS library to v5.1.13
* Fix python dependencies
* NPM audit fix
* Other small improvements

Michal Hrusecky authored 3 years ago and Karel Koci committed 3 years ago

Fix various errors in script when run on 3.X like unsupported `umount
-R` and extended it to support not only uSD card, but also USB flash
drive. This needs support in kernel as well to work properly, but 5.X is
ready.

Fixed in 2.0.2
- time: ntp default servers location

Fix working with remote snapshots.