friwall/web
Timotej Lazar c3e35777e0 Do not configure prefixes defined in NetBox
Push them to firewall nodes with ansible instead, as they will only
change in NetBox. Also don’t mess around with ipset “groups” based on
hyphenation, which was probably a bad idea.

With more data included in NetBox I am thinking we should configure
NAT and other stuff with ansible also, but let’s start small.
2024-03-18 17:37:19 +01:00
..
static Make a squash 2023-01-26 10:51:51 +01:00
templates Warn about deleting key for active connection 2023-12-10 13:21:52 +01:00
__init__.py vpn: configure IPv6 addresses for WG clients 2023-12-08 17:12:37 +01:00
auth.py Get OIDC end_session_endpoint from server metadata 2023-09-14 10:09:45 +02:00
config.py Set blueprint paths in main app 2023-12-04 09:46:37 +01:00
db.py Simplify database locking 2023-05-19 09:30:28 +02:00
errors.py Switch to OIDC authentication 2023-09-07 11:46:57 +02:00
ipsets.py Set blueprint paths in main app 2023-12-04 09:46:37 +01:00
nat.py nat: rename bound variable 2023-12-04 09:47:50 +01:00
rules.py Set blueprint paths in main app 2023-12-04 09:46:37 +01:00
system.py Do not configure prefixes defined in NetBox 2024-03-18 17:37:19 +01:00
vpn.py vpn: assign an IPv6 subnet instead of a single address 2023-12-12 19:26:55 +01:00