<feed xmlns='http://www.w3.org/2005/Atom'>
<title>vyos-1x.git/data/templates/https, branch T6732-reusable-build-package</title>
<subtitle>VyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git)
</subtitle>
<id>https://git.amelek.net/vyos/vyos-1x.git/atom?h=T6732-reusable-build-package</id>
<link rel='self' href='https://git.amelek.net/vyos/vyos-1x.git/atom?h=T6732-reusable-build-package'/>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/'/>
<updated>2024-08-13T10:15:15+00:00</updated>
<entry>
<title>T5743: HTTPS API ability to import PKI certificates</title>
<updated>2024-08-13T10:15:15+00:00</updated>
<author>
<name>Nataliia Solomko</name>
<email>natalirs1985@gmail.com</email>
</author>
<published>2024-08-13T10:15:15+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/commit/?id=27fb633bbe45321eecd8225c32a2fd16882633a9'/>
<id>urn:sha1:27fb633bbe45321eecd8225c32a2fd16882633a9</id>
<content type='text'>
</content>
</entry>
<entry>
<title>http-api: T6107: add an option to increase the request body size limit</title>
<updated>2024-03-07T20:30:01+00:00</updated>
<author>
<name>Daniil Baturin</name>
<email>daniil@baturin.org</email>
</author>
<published>2024-03-07T20:04:56+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/commit/?id=4792d39bb84991768404f69ff807e43a9979a79e'/>
<id>urn:sha1:4792d39bb84991768404f69ff807e43a9979a79e</id>
<content type='text'>
</content>
</entry>
<entry>
<title>https: T5902: remove virtual-host configuration</title>
<updated>2024-01-09T06:29:16+00:00</updated>
<author>
<name>Christian Breunig</name>
<email>christian@breunig.cc</email>
</author>
<published>2024-01-06T09:55:42+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/commit/?id=d0d3071e99eb65edb888c26ef2fdc9e038438887'/>
<id>urn:sha1:d0d3071e99eb65edb888c26ef2fdc9e038438887</id>
<content type='text'>
We have not seen the adoption of the https virtual-host CLI option.

What it did?
* Create multiple webservers each listening on a different IP/port
  (but in the same VRF)
* All webservers shared one common document root
* All webservers shared the same SSL certificates
* All webservers could have had individual allow-client configurations
* API could be enabled for a particular virtual-host but was always enabled on
  the default host

This configuration tried to provide a full webserver via the CLI but VyOS is a
router and the Webserver is there for an API or to serve files for a local-ui.

Changes

Remove support for virtual-hosts as it's an incomplete and thus mostly useless
"thing". Migrate all allow-client statements to one top-level allow statement.
</content>
</entry>
<entry>
<title>https: T5886: migrate https certbot to new "pki certificate" CLI tree</title>
<updated>2024-01-06T07:33:33+00:00</updated>
<author>
<name>Christian Breunig</name>
<email>christian@breunig.cc</email>
</author>
<published>2024-01-05T21:35:59+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/commit/?id=9ab6665c80c30bf446d94620fc9d85b052d48072'/>
<id>urn:sha1:9ab6665c80c30bf446d94620fc9d85b052d48072</id>
<content type='text'>
</content>
</entry>
<entry>
<title>T5474: establish common file name pattern for XML conf mode commands</title>
<updated>2023-12-31T22:49:48+00:00</updated>
<author>
<name>Christian Breunig</name>
<email>christian@breunig.cc</email>
</author>
<published>2023-12-30T22:25:20+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/commit/?id=4ef110fd2c501b718344c72d495ad7e16d2bd465'/>
<id>urn:sha1:4ef110fd2c501b718344c72d495ad7e16d2bd465</id>
<content type='text'>
We will use _ as CLI level divider. The XML definition filename and also
the Python helper should match the CLI node.

Example:
set interfaces ethernet -&gt; interfaces_ethernet.xml.in
set interfaces bond -&gt; interfaces_bond.xml.in
set service dhcp-server -&gt; service_dhcp-server-xml.in
</content>
</entry>
<entry>
<title>T5767: HTTPS API add reboot and poweroff endpoints</title>
<updated>2023-11-21T10:17:53+00:00</updated>
<author>
<name>Viacheslav Hletenko</name>
<email>v.gletenko@vyos.io</email>
</author>
<published>2023-11-21T10:17:53+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/commit/?id=36f3c329c2df0e78f2f5da933d9729a872fb2a11'/>
<id>urn:sha1:36f3c329c2df0e78f2f5da933d9729a872fb2a11</id>
<content type='text'>
Add ability to reboot and poweroff the system via API

curl -k --location --request POST 'https://vyos/reboot' \
  --form data='{"op": "reboot", "path": ["now"]}' \
  --form key='apikey'

curl -k --location --request POST 'https://vyos/poweroff' \
  --form data='{"op": "poweroff", "path": ["now"]}' \
  --form key='apikey'
</content>
</entry>
<entry>
<title>http: T5762: api: make API socket backend communication the one and only default</title>
<updated>2023-11-20T16:17:25+00:00</updated>
<author>
<name>Christian Breunig</name>
<email>christian@breunig.cc</email>
</author>
<published>2023-11-20T09:13:21+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/commit/?id=f5e43b1361fb59a9c260739bdb28729d5119507c'/>
<id>urn:sha1:f5e43b1361fb59a9c260739bdb28729d5119507c</id>
<content type='text'>
Why: Smoketests fail as they can not establish IPv6 connection to uvicorn
backend server.

https://github.com/vyos/vyos-1x/pull/2481 added a bunch of new smoketests.

While debugging those failing, it was uncovered, that uvicorn only listens on
IPv4 connections

vyos@vyos# netstat -tulnp | grep 8080
(Not all processes could be identified, non-owned process info
 will not be shown, you would have to be root to see it all.)
tcp        0      0 127.0.0.1:8080          0.0.0.0:*               LISTEN      -

As the CLI already has an option to move the API communication from an IP to a
UNIX domain socket, the best idea is to make this the default way of
communication, as we never directly talk to the API server but rather use the
NGINX reverse proxy.
</content>
</entry>
<entry>
<title>http-api: T2612: reload server within configsession for api self-config</title>
<updated>2023-10-09T16:18:38+00:00</updated>
<author>
<name>John Estabrook</name>
<email>jestabro@vyos.io</email>
</author>
<published>2023-10-07T03:27:19+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/commit/?id=93d2ea7d635c7aa5acf3000654393ea48b7c6405'/>
<id>urn:sha1:93d2ea7d635c7aa5acf3000654393ea48b7c6405</id>
<content type='text'>
</content>
</entry>
<entry>
<title>http-api: T5126: allow restricting client IP address</title>
<updated>2023-03-31T17:14:56+00:00</updated>
<author>
<name>John Estabrook</name>
<email>jestabro@vyos.io</email>
</author>
<published>2023-03-30T00:48:52+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/commit/?id=11b1d043310833447ddeea3b68fba2a1d1f5799d'/>
<id>urn:sha1:11b1d043310833447ddeea3b68fba2a1d1f5799d</id>
<content type='text'>
</content>
</entry>
<entry>
<title>Merge pull request #1848 from sever-sever/T5029</title>
<updated>2023-02-24T16:37:57+00:00</updated>
<author>
<name>Christian Breunig</name>
<email>christian@breunig.cc</email>
</author>
<published>2023-02-24T16:37:57+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/commit/?id=73ceaaafa9e7f14c25ccafe0789ba89933ab7b14'/>
<id>urn:sha1:73ceaaafa9e7f14c25ccafe0789ba89933ab7b14</id>
<content type='text'>
T5029: Change nginx default root directory</content>
</entry>
</feed>
