summaryrefslogtreecommitdiff
path: root/data
AgeCommit message (Collapse)Author
2022-05-13sshguard: T4408: rename whitelist-address -> allow-fromChristian Poessinger
We do not only allow individual host addresses but also prefixes.
2022-05-12sshguard: T4408: Add service ssh dynamic-protectionViacheslav Hletenko
Sshguard protects hosts from brute-force attacks Can inspect logs and block "bad" addresses by threshold Auto-generate rules for nftables When service stopped all generated rules are deleted nft "type filter hook input priority filter - 10" set service ssh dynamic-protection set service ssh dynamic-protection block-time 120 set service ssh dynamic-protection detect-time 1800 set service ssh dynamic-protection threshold 30 set service ssh dynamic-protection whitelist-address 192.0.2.1
2022-05-08container: T4000: use unique storage for container imageChristian Poessinger
Do no longer store container images which are pulled from any registry to /config/containers. Instead save them to a unified location that is the same accross all images on the system: /usr/lib/live/mount/persistence/container/storage Reason for this change is, while living under /config/containers a VyOS image upgrade copied all downloaded container images to the new image - doubling the used space per image on every upgrade. With the new location the images are all the same for every VyOS image running. Container userdata can still be stored under /config and copied to a newer image making rollbacks still efficient.
2022-05-08container: T4353: fix conf-mode script nameChristian Poessinger
2022-05-08policy: evpn: T3739: support "set evpn gateway-ip"Christian Poessinger
2022-05-06ipsec: T4353: use "" quotes on road-warrior idChristian Poessinger
2022-05-05Merge pull request #1312 from sever-sever/T4410Christian Poessinger
monitoring: T4410: Add telegraf output Plugin http for Splunk
2022-05-05policy: T4414: add support for route-map "as-path prepend last-as x"Christian Poessinger
2022-05-05monitoring: T4410: Add telegraf output Plugin http for SplunkViacheslav Hletenko
Ability to send HTTP output to Splunk via telegraf set service monitoring telegraf splunk authentication insecure set service monitoring telegraf splunk authentication token 'xxx' set service monitoring telegraf splunk url 'https://x.x.x.x'
2022-05-03monitoring: T4315: Add telegraf output plugin prometheus-clientViacheslav Hletenko
Add output Plugin "prometheus-client" for telegraf: set service monitoring telegraf prometheus-client
2022-05-02ipsec: T4353: bugfix template extensionChristian Poessinger
2022-05-02T2216: file is called container.pyChristian Poessinger
2022-05-01accel-ppp: T4353: fix Jinja2 linting errorsChristian Poessinger
2022-05-01http: api: T4353: fix Jinja2 linting errorsChristian Poessinger
2022-05-01system-logs: T4353: fix Jinja2 linting errorsChristian Poessinger
2022-05-01openconnect: T4353: fix Jinja2 linting errorsChristian Poessinger
2022-05-01syslog: T4353: fix Jinja2 linting errorsChristian Poessinger
2022-05-01igmp-proxy: T4353: fix Jinja2 linting errorsChristian Poessinger
2022-05-01pppoe: T4353: fix Jinja2 linting errorsChristian Poessinger
2022-05-01nhrp: T4353: fix Jinja2 linting errorsChristian Poessinger
2022-05-01firewall: zone: T4353: fix Jinja2 linting errorsChristian Poessinger
2022-05-01lcd: T4353: fix Jinja2 linting errorsChristian Poessinger
2022-05-01vrrp: T4353: fix Jinja2 linting errorsChristian Poessinger
2022-05-01firewall: T4353: fix Jinja2 linting errorsChristian Poessinger
2022-05-01system-options: T4353: fix Jinja2 linting errorsChristian Poessinger
2022-05-01ids: T4353: fix Jinja2 linting errorsChristian Poessinger
2022-05-01router-advert: T4353: fix Jinja2 linting errorsChristian Poessinger
2022-05-01mdns-repeater: T4353: fix Jinja2 linting errorsChristian Poessinger
2022-05-01ipsec: T4353: fix Jinja2 linting errorsChristian Poessinger
2022-05-01vrf: T4353: fix Jinja2 linting errorsChristian Poessinger
2022-05-01login: T4353: fix Jinja2 linting errorsChristian Poessinger
2022-05-01telegraf: T4353: fix Jinja2 linting errorsChristian Poessinger
2022-05-01serial-console: T4353: fix Jinja2 linting errorsChristian Poessinger
2022-05-01webproxy: T4353: fix Jinja2 linting errorsChristian Poessinger
2022-05-01flow-accounting: T4353: fix Jinja2 linting errorsChristian Poessinger
2022-05-01snmp: T4353: fix Jinja2 linting errorsChristian Poessinger
2022-05-01lldp: T4353: fix Jinja2 linting errorsChristian Poessinger
2022-05-01tftp-server: T4353: fix Jinja2 linting errorsChristian Poessinger
2022-05-01container: T4353: fix Jinja2 linting errorsChristian Poessinger
2022-05-01conserver: T4353: fix Jinja2 linting errorsChristian Poessinger
2022-05-01conntrackd: T4353: fix Jinja2 linting errorsChristian Poessinger
2022-05-01conntrack: T4353: fix Jinja2 linting errorsChristian Poessinger
2022-05-01bcast-relay: T4353: fix Jinja2 linting errorsChristian Poessinger
2022-04-30vyos-configd: enable firewall supportChristian Poessinger
2022-04-29T2216: containers need to be added via "add container image" in advance ↵Christian Poessinger
before using them
2022-04-28configd: eanble other missed out servicesChristian Poessinger
2022-04-28system-proxy: T1741: migrate to get_config_dict()Christian Poessinger
2022-04-26dhcp: T4389: fix vendor name, it is ubiquiti with an i, not yxChristian Poessinger
2022-04-26dhcp(v6): T3100: enable support with vyos-configdChristian Poessinger
2022-04-26vti: T1579: enable vyos-configd supoportChristian Poessinger