bbcda1a033
Merge commit from fork
...
* fix: improve user permission checks
* fix: improve user permission checks
2026-02-24 22:32:37 +01:00
3e0ffec07c
Fixes minor chart issues #629 ( #630 )
2026-02-23 22:55:40 +01:00
53eb56e83d
chore(deps): bump the actions group across 1 directory with 2 updates ( #627 )
...
Bumps the actions group with 2 updates in the / directory: [docker/login-action](https://github.com/docker/login-action ) and [docker/build-push-action](https://github.com/docker/build-push-action ).
Updates `docker/login-action` from 3.6.0 to 3.7.0
- [Release notes](https://github.com/docker/login-action/releases )
- [Commits](5e57cd1181...c94ce9fb46https://github.com/docker/build-push-action/releases )
- [Commits](263435318d...10e90e3645
2026-02-20 19:10:03 +01:00
ce695648c0
fix: improve peer email handling logic ( #620 )
2026-02-20 19:09:37 +01:00
85d407ff11
chore: update dependencies
2026-02-20 18:59:58 +01:00
e62db0d62e
Merge commit from fork
...
* fix: prevent open redirect in OAuth return URL validation
* reformat check
---------
Co-authored-by: Arne Cools <arne.cools@intigriti.com>
2026-01-29 22:37:16 +01:00
129cd0d408
chore(deps): bump the actions group with 2 updates ( #618 )
...
Bumps the actions group with 2 updates: [actions/checkout](https://github.com/actions/checkout ) and [actions/setup-python](https://github.com/actions/setup-python ).
Updates `actions/checkout` from 6.0.1 to 6.0.2
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](8e8c483db8...de0fac2e45https://github.com/actions/setup-python/releases )
- [Commits](83679a892e...a309ff8b42
2026-01-26 22:24:34 +01:00
70cc44cc4d
feat: add live traffic stats ( #530 ) ( #616 )
2026-01-26 22:24:10 +01:00
e53b8c8087
fix: improve import of existing allowed-IPs ( #615 )
2026-01-25 00:33:33 +01:00
df9fdd14fb
fix: typo in local.go ( #613 )
2026-01-21 22:22:40 +01:00
e0f6c1d04b
feat: allow multiple auth sources per user (#500,#477) ( #612 )
...
* feat: allow multiple auth sources per user (#500,#477)
* only override isAdmin flag if it is provided by the authentication source
2026-01-21 22:22:22 +01:00
d2fe267be7
chore(deps): bump golang.org/x/crypto from 0.46.0 to 0.47.0 ( #606 )
...
Bumps [golang.org/x/crypto](https://github.com/golang/crypto ) from 0.46.0 to 0.47.0.
- [Commits](https://github.com/golang/crypto/compare/v0.46.0...v0.47.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/crypto
dependency-version: 0.47.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-19 23:15:08 +01:00
bb516e9115
chore(deps): bump golang.org/x/sys from 0.39.0 to 0.40.0 ( #607 )
...
Bumps [golang.org/x/sys](https://github.com/golang/sys ) from 0.39.0 to 0.40.0.
- [Commits](https://github.com/golang/sys/compare/v0.39.0...v0.40.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/sys
dependency-version: 0.40.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-19 23:07:11 +01:00
5d58df8a19
fix: parity of Base64/URL encoding between frontend and backend ( #611 )
...
Signed-off-by: Arnaud Rocher <arnaud.roche3@gmail.com>
2026-01-17 19:38:48 +01:00
2200509bc0
feat: introduce "Create Default Peer" flag for interfaces ( #513 ) ( #605 )
2026-01-13 23:11:22 +01:00
1b56acac87
Doc Update ( #603 )
...
* docs: enhance binary usage guide and systemd setup (#577 )
* docs: remove invalid mail templates section from configuration overview
2026-01-05 23:25:37 +01:00
015220dc7b
bulk actions for peers and users ( #492 ) ( #602 )
2026-01-05 23:25:17 +01:00
4b49a55ea2
chore(deps): bump the actions group across 1 directory with 3 updates ( #599 )
...
Bumps the actions group with 3 updates in the / directory: [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action ), [actions/upload-artifact](https://github.com/actions/upload-artifact ) and [actions/download-artifact](https://github.com/actions/download-artifact ).
Updates `docker/setup-buildx-action` from 3.11.1 to 3.12.0
- [Release notes](https://github.com/docker/setup-buildx-action/releases )
- [Commits](e468171a9d...8d2750c68ahttps://github.com/actions/upload-artifact/releases )
- [Commits](330a01c490...b7c566a772https://github.com/actions/download-artifact/releases )
- [Commits](018cc2cf5b...37930b1c2a
2026-01-05 23:24:27 +01:00
93db40c995
chore(deps): bump github.com/go-playground/validator/v10 ( #601 )
...
Bumps [github.com/go-playground/validator/v10](https://github.com/go-playground/validator ) from 10.28.0 to 10.30.1.
- [Release notes](https://github.com/go-playground/validator/releases )
- [Commits](https://github.com/go-playground/validator/compare/v10.28.0...v10.30.1 )
---
updated-dependencies:
- dependency-name: github.com/go-playground/validator/v10
dependency-version: 10.30.1
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-04 23:54:33 +01:00
0a88fe745f
allow setting a base-path for the web UI and API ( #583 ) ( #595 )
2025-12-20 15:30:55 +01:00
8cc937b031
Custom templates ( #594 )
...
* allow custom mail templates (#533 )
* allow to override embedded frontend (#533 )
2025-12-10 23:10:43 +01:00
54ca1d8aed
Add Pfsense backend (ALPHA) ( #585 )
...
* Add pfSense backend domain types and configuration
This adds the necessary domain types and configuration structures
for the pfSense backend support. Includes PfsenseInterfaceExtras and
PfsensePeerExtras structs, and the BackendPfsense configuration
with API URL, key, and timeout settings.
* Add low-level pfSense REST API client
Implements the HTTP client for interacting with the pfSense REST API.
Handles authentication via X-API-Key header, request/response parsing,
and error handling. Uses the pfSense REST API v2 endpoints as documented
at https://pfrest.org/ .
* Implement pfSense WireGuard controller
This implements the InterfaceController interface for pfSense firewalls.
Handles WireGuard tunnel and peer management through the pfSense REST API.
Includes proper filtering of peers by interface (since API filtering doesn't
work) and parsing of the allowedips array structure with address/mask fields.
* Register pfSense controllers and update configuration
Registers the pfSense backend controllers in the controller manager
and adds example configuration to config.yml.sample. Also updates
README to mention pfSense backend support.
* Fix peer filtering and allowedips parsing for pfSense backend
The pfSense REST API doesn't support filtering peers by interface
via query parameters, so all peers are returned regardless of the
filter. This caused peers from all interfaces to be randomly assigned
to a single interface in wg-portal.
Additionally, the API returns allowedips as an array of objects with
"address" and "mask" fields instead of a comma-separated string,
which caused parsing failures.
Changes:
- Remove API filter from GetPeers() since it doesn't work
- Add client-side filtering by checking the "tun" field in peer responses
- Update convertWireGuardPeer() to parse allowedips array structure
- Add parseAddressArray() helper for parsing address objects
- Attempt to fetch interface addresses from /tunnel/{id}/address endpoint
(endpoint may not be available in all pfSense versions)
- Add debug logging for peer filtering and address loading operations
Note: Interface addresses may still be empty if the address endpoint
is not available. Public Endpoint and Default DNS Servers are typically
configured manually in wg-portal as the pfSense API doesn't provide
this information.
* Extract endpoint, DNS, and peer names from pfSense peer data
The pfSense API provides endpoint, port, and description (descr) fields
in peer responses that can be used to populate interface defaults and
peer display names.
Changes:
- Extract endpoint and port from peers and combine them properly
- Fix peer name/description extraction to check "descr" field first
(pfSense API uses "descr" instead of "description" or "comment")
- Add extractPfsenseDefaultsFromPeers() helper to extract common
endpoint and DNS from peers during interface import
- Set PeerDefEndpoint and PeerDefDnsStr from peer data for pfSense
backends during interface import
- Use most common endpoint/DNS values when multiple peers are present
* Fix interface display name to use descr field from pfSense API
The pfSense API uses "descr" field for tunnel descriptions, not
"description" or "comment". Updated convertWireGuardInterface()
to check "descr" first so that tunnel descriptions (e.g., "HQ VPN")
are displayed in the UI instead of just the tunnel name (e.g., "tun_wg0").
* Remove calls to non-working tunnel and peer detail endpoints
The pfSense REST API endpoints /api/v2/vpn/wireguard/tunnel/{id}
and /api/v2/vpn/wireguard/tunnel/{id}/address don't work and were
causing log spam. Removed these calls and use only the data from
the tunnel/peer list responses.
Also removed the peer detail endpoint call that was added for
statistics collection, as it likely doesn't work either.
* Fix unused variable compilation error
Removed unused deviceId variable that was causing build failure.
* Optimize tunnel address fetching to use /tunnel?id endpoint
Instead of using the separate /tunnel/address endpoint, now query
the specific tunnel endpoint /tunnel?id={id} which includes the
addresses array in the response. This avoids unnecessary API calls
and simplifies the code.
- GetInterface() now queries /tunnel?id={id} after getting tunnel ID
- loadInterfaceData() queries /tunnel?id={id} as fallback if addresses missing
- extractAddresses() properly parses addresses array from tunnel response
- Removed /tunnel/address endpoint calls
Signed-off-by: rwjack <jack@foss.family>
* Fix URL encoding issue in tunnel endpoint queries
Use Filters in PfsenseRequestOptions instead of passing query strings
directly in the path. This prevents the ? character from being encoded
as %3F, which was causing 404 errors.
- GetInterface() now uses Filters map for id parameter
- loadInterfaceData() now uses Filters map for id parameter
Signed-off-by: rwjack <jack@foss.family>
* update backend docs for pfsense
---------
Signed-off-by: rwjack <jack@foss.family>
2025-12-09 22:33:12 +01:00
a318118ee6
chore: update dependencies
2025-12-09 22:19:29 +01:00
a8b4b23742
chore(deps): bump the actions group across 1 directory with 4 updates ( #591 )
...
Bumps the actions group with 4 updates in the / directory: [actions/checkout](https://github.com/actions/checkout ), [actions/setup-python](https://github.com/actions/setup-python ), [docker/metadata-action](https://github.com/docker/metadata-action ) and [softprops/action-gh-release](https://github.com/softprops/action-gh-release ).
Updates `actions/checkout` from 5.0.0 to 6.0.1
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](08c6903cd8...8e8c483db8https://github.com/actions/setup-python/releases )
- [Commits](e797f83bcb...83679a892ehttps://github.com/docker/metadata-action/releases )
- [Commits](318604b99e...c299e40c65https://github.com/softprops/action-gh-release/releases )
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md )
- [Commits](5be0e66d93...a06a81a03e
2025-12-09 22:11:04 +01:00
a1fcce6fde
set file permissions to 0600 for the sqlite database ( #579 )
2025-11-23 20:33:04 +01:00
364f7b3a5b
Update russian translation ( #574 )
...
Signed-off-by: ornaras <ornaras.us@gmail.com>
2025-11-21 13:50:47 +01:00
907bb0599a
fix race condition during ldap initialization ( #571 )
2025-11-20 18:28:20 +01:00
d759fc7dc7
allow to log raw LDAP user data ( #571 )
2025-11-19 16:00:11 +01:00
67192170fc
doc: fix incorrect config examples
2025-11-18 23:23:49 +01:00
8f25bef050
feat: config by environment variables ( #570 )
...
* feat: config by environment variables without config file
Signed-off-by: Isak Wertwein <isak.wertwein@gmail.com>
* string slice by environment variable
Signed-off-by: Isak Wertwein <isak.wertwein@gmail.com>
---------
Signed-off-by: Isak Wertwein <isak.wertwein@gmail.com>
2025-11-16 18:33:25 +01:00
8bc4990441
chore: update frontend and backend dependencies
2025-11-13 20:01:47 +01:00
80dc7f290a
correct enum for User-Source in api doc ( #562 )
2025-11-13 20:00:37 +01:00
de91506bfa
chore(deps): bump the patch group across 1 directory with 2 updates ( #566 )
...
Bumps the patch group with 2 updates in the / directory: [gorm.io/driver/sqlserver](https://github.com/go-gorm/sqlserver ) and [gorm.io/gorm](https://github.com/go-gorm/gorm ).
Updates `gorm.io/driver/sqlserver` from 1.6.1 to 1.6.3
- [Commits](https://github.com/go-gorm/sqlserver/compare/v1.6.1...v1.6.3 )
Updates `gorm.io/gorm` from 1.31.0 to 1.31.1
- [Release notes](https://github.com/go-gorm/gorm/releases )
- [Commits](https://github.com/go-gorm/gorm/compare/v1.31.0...v1.31.1 )
---
updated-dependencies:
- dependency-name: gorm.io/driver/sqlserver
dependency-version: 1.6.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: patch
- dependency-name: gorm.io/gorm
dependency-version: 1.31.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-11-13 19:35:29 +01:00
380d71ba07
chore(deps): bump softprops/action-gh-release in the actions group ( #567 )
...
Bumps the actions group with 1 update: [softprops/action-gh-release](https://github.com/softprops/action-gh-release ).
Updates `softprops/action-gh-release` from 2.4.1 to 2.4.2
- [Release notes](https://github.com/softprops/action-gh-release/releases )
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md )
- [Commits](6da8fa9354...5be0e66d93
2025-11-13 19:34:54 +01:00
3d4a190949
Mejoras en la traducción al español y añade traducción para la herramienta de calculadora y cambio de contraseña. ( #568 )
...
* Mejorar traducción al español
* Update es.json
* Mejorar/Añadir traducciones al español
2025-11-13 17:48:33 +01:00
df450cf384
fix(helm): Append prerelease pattern for Helm kubeVersion check ( #560 )
2025-11-09 20:53:31 +01:00
9fbebc82f6
Update and pin all actions versions ( #564 )
...
Signed-off-by: Dmytro Bondar <git@bonddim.dev>
2025-11-07 23:17:00 +01:00
7c557d3e66
add german translation for ip calculator ( #503 )
2025-11-07 23:13:24 +01:00
bda99464f1
fix path parameter handling in REST api ( #563 )
2025-11-07 23:12:36 +01:00
d66a4b71b8
add IPCalculator View ( #557 )
...
* create IPCalculator View + add cidr_tools package
* fixed translation and comma separated ip as placeholder
2025-11-03 17:40:42 +01:00
da76327569
chore(deps): bump golang.org/x/oauth2 from 0.31.0 to 0.32.0 ( #544 )
...
Bumps [golang.org/x/oauth2](https://github.com/golang/oauth2 ) from 0.31.0 to 0.32.0.
- [Commits](https://github.com/golang/oauth2/compare/v0.31.0...v0.32.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/oauth2
dependency-version: 0.32.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-10-15 21:14:22 +02:00
c154cb3977
chore(deps): bump golang.org/x/sys from 0.36.0 to 0.37.0 ( #545 )
...
Bumps [golang.org/x/sys](https://github.com/golang/sys ) from 0.36.0 to 0.37.0.
- [Commits](https://github.com/golang/sys/compare/v0.36.0...v0.37.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/sys
dependency-version: 0.37.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-10-15 21:12:15 +02:00
7bca35728d
chore(deps): bump golang.org/x/crypto from 0.42.0 to 0.43.0 ( #546 )
...
Bumps [golang.org/x/crypto](https://github.com/golang/crypto ) from 0.42.0 to 0.43.0.
- [Commits](https://github.com/golang/crypto/compare/v0.42.0...v0.43.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/crypto
dependency-version: 0.43.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-10-15 21:12:04 +02:00
3d923b328e
password change UI ( #543 ) ( #548 )
2025-10-15 21:11:40 +02:00
139fb17f98
redo UI screenshots, fix the responsiveness of the image slider for wgportal.org
2025-10-12 15:48:08 +02:00
faf1d995a8
fix parsing IP addresses in UI (ip-address lib was updated to V10)
2025-10-12 15:20:38 +02:00
f53d0b3d7f
add the possibility to debug oauth or oidc login issues ( #541 )
2025-10-12 15:09:40 +02:00
cdf3a49801
Cleanup route handling ( #542 )
...
* mikrotik: allow to set DNS, wip: handle routes in wg-controller
* replace old route handling for local controller
* cleanup route handling for local backend
* implement route handling for mikrotik controller
2025-10-12 14:31:19 +02:00
298c9405f6
add support for sending emails to peers without linked user accounts if their user-identifier is a valid email address
2025-10-12 14:31:01 +02:00
c7724b620a
smaller UI improvements; add system theme
2025-10-12 00:48:35 +02:00
h44z
htiryaki-oe24
dependabot[bot]
ShiroTohu
Arnaud Rocher
rwjack
Potorochin Max
Isak Wertwein
Osvaldo-Net
David Gonzalez
Dmytro Bondar
Tomáš Lukča