Changes:
-refresh patches
-add libnghttp2 dependency because of DoH

For some protocols there is fully valid setting with no ifname but state
configuration injected by netifd inserts ifname. Original approach was
to take devices (the variable used for original ifname value in state)
and if those were not present then ifname. The idea was that if there
were no devices then device was down or not configured and ifname
contains real configuration. That is unfortunately not true clearly in
case of protocols such as wireguard.
New approach is cleaner as we just simply ignore state and read real
configuration directly. In the end this even simplifies the code.

Update to the latest version containing few important fixes, but mainly,
NATing and firewall management is no longer patched in, but handled by
vpn_client module and firewall is setup by uci-default script that is no
longer patched in, but included in the package. In the end, this is
mostly about cleaning up the package and adding latest bugfixes.

This is fix for patch added in 45423f2f.
The issue is that it was patch taken from commit as it is. Thye issue is
not in code patched but in CHANGELOG.md file. This rebases that patch on
top of version 1.3.1.

This migrates EULA approval to new configuration option. Originally
there were two ways how data collecton was enabled. It was either trough
contract or trough foris config. We now have one central location for
that in sentinel configuration file.

Since Knot Resolver version 5.0.0, forks is deprecated.

I originally released version 1.3.3 with this fix but 1.3.2 version
includes changes that I do not want to include so instead I am just
pulling patch here.
This fixes exception when approvals without any delay are configured.

This fixes invalid cron file generated by
nextcloud_install script.

This adds in Updater module output from /etc/config/pkglists

Martin Matějek authored 4 years ago and Karel Koci committed 4 years ago

Fix crash of maintain-reboot in case that interface ip addresses are
configured as list instead of option.

Use EUci instead of uci.

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Note:
This change is part of foris-controller version 1.0.20

Note:
This changes default edns buffer size value to 1232
which is required by DNS Flag Day 2020

Fixes: CVE-2020-15180

Default recommended EDNS buffer size must be 1232 bytes instead of 4096 bytes.

More details about it can be found here:
https://dnsflagday.net/2020/

This reverts commit 25e88c1f.

There is a file netdata.lighttpd and because of that, we need to restart
lighttpd to reflect those changes

(cherry picked from commit 05676d57)

In generic package there was missing /etc directory.

Michal Hrusecky authored 4 years ago and Karel Koci committed 4 years ago

Long press does factory reset as well as the default reset mode
triggered during boot.

If you want to run generate_dh.sh, it fails with permission denied.

root@turris:~# /usr/share/dhparam/generate_dh.sh
-ash: /usr/share/dhparam/generate_dh.sh: Permission denied

Michal Hrusecky authored 4 years ago and Karel Koci committed 4 years ago

Adding interface into correct firewall zone was broken, so fixing the
setup.

There is just one line of shell here to run other script. There is no
reason to to replace original process with fix script.

The reason is that with bump we trigger update of that package and rerun
of install script. The point of fix package is that updater controls
when it is installed and removed so when install and removal scripts are
executed.

This changes name for fix package that recovers corrupted contract
variable.
It primarilly removes nor-update from it. It can be replaced by just
installing nor-update package.
It is problematic to detect Turris Shield before this fix so it is
easier to install this packages on all moxes. It is also beneficial to
do so because of Omnias that are under contract. We do not want to force
nor-update on all routers so we can't do nor-update here.