wireguard: Transparently replace 0.0.0.0/0 with 0.0.0.0/1 and 128.0.0.0/1

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard-functions.pl: Fix Perl syntax issue

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard.cgi: Fix connection status for RW connections

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard.cgi: Make it clear what peer is being edited

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard.cgi: Suggest a PSK for new N2N peers

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard.cgi: Show our own public key when creating N2N peers

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard.cgi: Don't show the public key

There is very little use now since we don't use this key for N2N
connections any more. RW clients will have the public key in their
configuration files.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard.cgi: Fix fetching connection status with multiple interfaces

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard: Store the connection name as an alias

This way it is easier to find the correct interface on the console.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard.cgi: Allow to edit the port and automatically chose one

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard.cgi: Add controls to download configuration

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard.cgi: Store the private key for RW peers, too

We have so much key material stored that it does not make much sense to
drop a bit of it when it makes life so much harder.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard: Implement creating an extra interface per N2N peer

When importing a configuration, we will receive a new private key which
we cannot apply to the original interface. Therefore we need to create a
new one for each peer. RW peers will remain on wg0 which will always
exist.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard-functions.pl: Store networks in CIDR notation only

wg(8) does not accept anything else.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard.cgi: Implement a way to import a connection

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard.cgi: Rename function to check keys

This function can check all types of keys and not only the public key.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard-functions.pl: Don't send DNS configuration to n2n peers

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard.cgi: Rename "generate_client_configuration" to "generate_peer_configuration"

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard.cgi: Normalize filenames

This is because Windows clients won't import any configurations that
have spaces in the filename. Therefore we replace it and remove anything
else unwanted on the way.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard: Select the correct source IP address for N2N peers

This is so that the firewall chooses the correct IP address when trying
to establish connections to the remote networks.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

misc-progs: Fix compiling wireguardctrl

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard.cgi: Allow to configure a custom endpoint

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard.cgi: Permit empty client pool

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

firewall: Add WireGuard RW to the UI

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard: Move functions into their own file

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

firewall: Allow WG traffic when the firewall is in permissive mode

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard.cgi: Only show the location if we have something

Otherwise the text won't be centered in the box which looks a little bit
wrong.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

services.cgi: Don't always try expand the status column unless asked

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard.cgi: Remove the large box to warn people that the configuration will only be shown once

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard.cgi: Add a button to return after creating a new connection

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

AQM: Ignore WireGuard interfaces

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

web UI: Add a menu entry

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

misc-progs: Update rootfile

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard.cgi: Don't allow creating RW connections if there is no address space

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard.cgi: Don't show an empty table if there are no peers

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard: Install empty configuration files

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

firewall: Fix typo in "iptables"

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard.cgi: Rename local subnets to allowed subnets

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

misc-progs: Add wireguardctrl

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard-tools: New package

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard: Block unauthorized traffic

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard: Rename routes to remote subnets

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

lang: Add translation for "remarks"

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard.cgi: Implement toggle enable/disable peers

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard.cgi: Make the client configuration downloadable

I believe this is much better than copy & paste.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard.cgi: Implement DNS configuration for clients

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard.cgi: Correctly compose the FQDN

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

general-functions.pl: Always load the main settings

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard.cgi: Call start instead of reload

I didn't implement reload in the helper.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard.cgi: Dynamically allocate a pool address for clients

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard.cgi: Ensure that AllowedIPs are in CIDR format

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard: Route the client pool

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard.cgi: Show a QR code that contains the client configuration

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard.cgi: Show client configuration after creating a client

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard.cgi: Check if the client pool is in use and prevent editing

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard.cgi: Add client pool config option

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard.cgi: Implement creating host-to-net connections

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard.cgi: Move creating private keys into a separate function

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard.cgi: Rename editor to edit-net

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard.cgi: Fix typo of %checked

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard.cgi: Fix disabling the service

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard.cgi: Allow the endpoint to be empty

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard.cgi: Fix saving empty PSKs

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard.cgi: Implement option to configure keepalive

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard.cgi: Group keys together

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard.cgi: Implement helper functions to read/write subnets

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard: Implement optional PSK for post-quantum stuff

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard.cgi: Implement deleting peers

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard.cgi: Check for duplicate names

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard.cgi: Add helper functions to encode/decode remarks

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard.cgi: Implement launching the editor for editing a connection

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard.cgi: Fix typo in variable name

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard.cgi: Adjust IDs of the peer

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard.cgi: Store remarks encoded as base64

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard.cgi: Rename CREATE-PEER-NET action to SAVE-PEER-NET

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard.cgi: Add editor to create a new peer

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard.cgi: Implement choice to create a new connection

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard.cgi: Remove the extra box around the peers

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard.cgi: Move the status column more to the left

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard.cgi: Show visual status when disconected

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard.cgi: Show origin of the connected peer

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard.cgi: Fix connection detection

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard.cgi: Fix calling wireguardctrl

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard.cgi: Show status for each peer

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard.cgi: Show peers in a table

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard.cgi: Add a basic CGI to configure the global settings

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

firewall: Automatically open ports for WireGuard

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wireguard: Add initscript

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core195: Ship pakfire.cgi

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

pakfire.cgi: Change titles on confirmation pages.

- Change confirmation page titles from 'Request' to 'Install' and 'Remove'.

Signed-off-by: Stephen Cuka <stephen@firemypi.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

HTTP Client: Change checkip URL to ipfire.org

This is the same service, but I think it makes more sense to use the
ipfire.org domain.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core195: Ship downloader changes

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

http-client-functions.pl: Allow to user define the timeout value.

This allows to specify the the timeout value.
Defaults to to 60 seconds if not set.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ids-functions.pl: Use new downloader function from http-client-functions.pl

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ddns.cgi, wio.cgi: Use GetDyndnsRedIP from http-client-functions.pl file

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Move GetDyndnsRedIP from general-functions.pl to http-client-functions.pl

This function depends on the previously FetchPublicIp function
and so also has to be moved.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

general-functions.pl: Drop FetchPublicIp function.

This function has been reworked and moved into the
http-client-functions library.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

http-client-functions.pl: Add FetchPublicIP function.

This functions uses the newly introduced downloader to fetch
the pulic IPv4 address on red and will replace the current used one
from the general-functions.pl library.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

http-client-functions.pl: Introduce LWP-based flexible downloader function.

This perl library contains a function which can be used to grab content
and/or store it into files.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

htop: Update to 3.4.1

For details see:
https://github.com/htop-dev/htop/blob/main/ChangeLog

"What's new in version 3.4.1

* Support for PMAPI v3 for PCP
* PCP code cleanups
* Proper checks for strchrnul
* Code cleanup in the NetworkIOMeter
* Improved documentation for the --user option
* Display stuck processes on Darwin
* Handle issues when the monotonic clock runs backwards
* Fix builds using native curses on NetBSD"

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>