Martin Matějek authored Aug 18, 2022 and Josef Schlehofer committed Sep 29, 2022

Prefer LAN interface IP addresses before WAN IP addresses.

This should help with issue that sometimes pops up - after action that
is triggered from reForis which requires reboot or restart of some
components (e.g. network), browser is redirected to unexpected IP
address of router (WAN instead of LAN).

In fc3f7ce9, develop branch was merged
to master, but github actions were not adjusted accordingly.

Fixes: c7083f7a ("turris1x-uboot: copy
existing images from uboot-mpc85xx")

Karel Koci authored Apr 01, 2022 and Michal Vasilek committed Sep 26, 2022

The lighttpd now prefixes the configuration files with numbers to ensure
their ordering. We should use this as well and this changes names of all
our lighttpd configuration files to be prefix with number.

The rules used here is:
80: any regular web service
70: dependency of other web services (just as API not for configuration)
60: root configuration
50: dependencies for other services (variables required for configuration)
45: the conditional modification of basic Lighttpd behavior
40: the SSL enable (modification of basic behavior)

turris-root.conf was prefixed by 90 instead of 60 because it appends "/"
mapping to alias.url which prevents succeeding mappings from matching.

Co-Authored-By: Šimon Bořek <simon.borek@nic.cz>

Martin Matějek authored Sep 23, 2022 and Josef Schlehofer committed Sep 26, 2022

Added
- Add notification about status of the `nextcloud_install` script.

Changed
- Handle exit code of `nextcloud_install` script and return result regardless of
  success or failure.
- Run `nextcloud_install` script on background and let the script report progress
  of nextcloud configure phase via WebSocket notifications.

Michal Hrusecky authored Sep 20, 2022 and Josef Schlehofer committed Sep 26, 2022

If run with -d or --daemon, Nextcloud easy_install will run itself in
background and will just send notifications to the frontend whenever
something changes.

Michal Hrusecky authored Sep 02, 2022 and Josef Schlehofer committed Sep 26, 2022

We need to run it once to take into account the newly installed
Nextcloud config, for making sure that all php files and configs are
updated correctly php-fpm restart is enough. Apart from that restarting
lighttpd during setup breaks websockets and hinders the UX.

Martin Matějek authored Sep 13, 2022 and Josef Schlehofer committed Sep 26, 2022

From OpenWrt 21.02 on, mosquitto runs under it's own user (mosquitto),
but CA files are created by foris-controller with owner root.

Mosquitto fails with following error:

```
Error: Unable to load server key file "/etc/ssl/ca/remote/01.key". Check keyfile.
```

Which in turn breaks other services using `mosquitto` as message bus.
For example: foris-controller & reforis

This oneshot fix should set correct file permissions in case there
already is remote access CA on the router.

Foris-controller should handle permissions for new CA created from
scratch.

Fixes: CVE-2022-3204

Exact U-boot version:
- U-Boot 2022.10-rc4-OpenWrt-r16653+119-44ce70f0e2 (Sep 15 2022 - 18:21:35 +0000)
checksum: 561260872b19632660d0f0d2eab0fc5f8389fa97a6b6908319feeb85c7fdfc61

U-boot comes from:
* turris-build: b12dbac87d78ae2620f9489d7fe81cb35b7d3acb
* openwrt: 44ce70f0e209c12cc9548d5fa60890997a2707f2
* turris-os-packages: c7083f7a

(cherry picked from commit 2e2cde37)

Michal Vasilek authored Sep 22, 2022 and Josef Schlehofer committed Sep 25, 2022

* fixes CVE-2022-40188

(cherry picked from commit 7eb63d0c)

* fixes CVE-2022-40188

Release notes:
https://www.lighttpd.net/2022/9/17/1.4.67/

UCI can't handle dash in section name so we are going to replace dashes
with underscores to make everything work again. This commit adds patches
to fix both rainbow itself and luci-app-rainbow.

This package is no required anymore as Turris MOX U-boot image was added
to package uboot-mvebu by patch in Turris Build repository and it will
be upstreamed as soon as Turris MOX is added to OpenWrt.

Among other things, supress warning while compiling U-boot as OpenWrt
does it as well. Rename this package from mox-uboot-uboot to mox-uboot

This silences warning:
cc1: note: someone does not honour COPTS correctly, passed 0 times

As OpenWrt does it, too.

Exact U-boot version:
- U-Boot 2022.10-rc4-OpenWrt-r16653+119-44ce70f0e2 (Sep 15 2022 - 18:21:35 +0000)
checksum: 561260872b19632660d0f0d2eab0fc5f8389fa97a6b6908319feeb85c7fdfc61

U-boot comes from:
* turris-build: b12dbac87d78ae2620f9489d7fe81cb35b7d3acb
* openwrt: 44ce70f0e209c12cc9548d5fa60890997a2707f2
* turris-os-packages: c7083f7a