T_RELEASE_v1.5.0

version 1.5.0

- update bind (dns) zonefiles
- add vpn3le to ffl nodelist

---

Notes for Debian OS upgrade from 11 to 12:

# update the current system
apt update -y ; apt dist-upgrade -y ; apt clean

# upgrade to debian 12
sed -i 's/bullseye/bookworm/g' /etc/apt/sources.list
apt update -y ; apt dist-upgrade -y

# do not panic! the error
# E: Sub-process /usr/bin/dpkg returned an error code (1)
# is not a real Problem and will be fixed in the next salt runs!

apt clean
reboot

after rebooting:

# install new deps.
/usr/local/bin/freifunk-manuell_update.sh

apt update -y ; apt dist-upgrade -y

version 1.5.0rc3

- switch to new sysinfo.json version 18 that combines network statistics and makes it interface independent
- add config option to enable the firewall log

version 1.5.0rc2

- remove support for debian 10
- add support for debian 12
- add tbb_wg and wg_vpn* traffic in sysinfo.json
- update build uci script
- cleanup some unneeded code snippets
- smaller fixes

version 1.5.0rc1

- update bmxd to version 1.4
- update wireguard_accept_cgi to version 1.2.3
- update dns records for vpn gateways
- add locale gateway functionality
- fastd: allow to disable fastd via /etc/config/ffdd
- remove symlink of /etc/nvram.conf
- fix sudoers for iptables which is used by sysinfo.json to determine gw traffic (ovpn)
- fastd: add config to /etc/config/ffdd to disable fastd
- wireguard: sync wg registration (script) with the one used in firmware (to easier setting up connections between servers)
	- add "wg-backbone.sh register" cmd

T_RELEASE_latest

version 1.5.0

- update bind (dns) zonefiles
- add vpn3le to ffl nodelist

---

Notes for Debian OS upgrade from 11 to 12:

# update the current system
apt update -y ; apt dist-upgrade -y ; apt clean

# upgrade to debian 12
sed -i 's/bullseye/bookworm/g' /etc/apt/sources.list
apt update -y ; apt dist-upgrade -y

# do not panic! the error
# E: Sub-process /usr/bin/dpkg returned an error code (1)
# is not a real Problem and will be fixed in the next salt runs!

apt clean
reboot

after rebooting:

# install new deps.
/usr/local/bin/freifunk-manuell_update.sh

apt update -y ; apt dist-upgrade -y

version 1.5.0rc3

- switch to new sysinfo.json version 18 that combines network statistics and makes it interface independent
- add config option to enable the firewall log

version 1.5.0rc2

- remove support for debian 10
- add support for debian 12
- add tbb_wg and wg_vpn* traffic in sysinfo.json
- update build uci script
- cleanup some unneeded code snippets
- smaller fixes

version 1.5.0rc1

- update bmxd to version 1.4
- update wireguard_accept_cgi to version 1.2.3
- update dns records for vpn gateways
- add locale gateway functionality
- fastd: allow to disable fastd via /etc/config/ffdd
- remove symlink of /etc/nvram.conf
- fix sudoers for iptables which is used by sysinfo.json to determine gw traffic (ovpn)
- fastd: add config to /etc/config/ffdd to disable fastd
- wireguard: sync wg registration (script) with the one used in firmware (to easier setting up connections between servers)
	- add "wg-backbone.sh register" cmd

T_RELEASE_v1.5.0rc3

- switch to new sysinfo.json version 18 that combines network statistics and makes it interface independent
- add config option to enable the firewall log

T_RELEASE_v1.5.0rc2

- remove support for debian 10
- add support for debian 12
- add tbb_wg and wg_vpn* traffic in sysinfo.json
- update build uci script
- cleanup some unneeded code snippets
- smaller fixes

T_RELEASE_v1.5.0rc1

- update bmxd to version 1.4
- update wireguard_accept_cgi to version 1.2.3
- update dns records for vpn gateways
- add locale gateway functionality
- fastd: allow to disable fastd via /etc/config/ffdd
- remove symlink of /etc/nvram.conf
- fix sudoers for iptables which is used by sysinfo.json to determine gw traffic (ovpn)
- fastd: add config to /etc/config/ffdd to disable fastd
- wireguard: sync wg registration (script) with the one used in firmware (to easier setting up connections between servers)
	- add "wg-backbone.sh register" cmd

T_RELEASE_v1.4.0

version 1.4.0

No significant changes since version 1.4.0rc11.

version 1.4.0rc11

- update bmxd to version 1.2
- update apache serveralias for ffl
- add dns zone for .ffl

version 1.4.0rc10

- remove support for debian 9 and ubuntu 16.04/18.04
- add support for ubuntu 22.04
- salt: fix for ubuntu 20.04
- fastd: fix check in generate_keys

version 1.4.0rc9

- airvpn: add preshared key and remove "+" from variable assignment where only one value is allowed
- move fastd and wireguard config (/etc/config/ffdd) to its own section
- fastd:
	- fix uci command
	- add logger info for "lerned" new unkown connections
	- remove fastd key generation from "autoconfig" to remove circular dependency
	- fix peers check for fastd22 which seems to always use "verify". when server was restricted known peers were also rejected
- openvpn: set service to restart on failue. openvpn sometimes stoppes running
- fix extraction of ipv4 adresses for dns server
- init_server.sh: update system before we check the system

version 1.4.0rc8

- update wg_cgi to version 1.2.1
- fix wg_cgi, Version 1.2.0 only supported glibc >= 2.29
	ubuntu 18.04 only has glibc 2.27
	debian 10 only has 2.28
	newer versions have >= 2.29
- update communities and fix checkup script

version 1.4.0rc7

- dns: add vpn15

version 1.4.0rc6

- apt: add source.list for debian bullseye
- dns: add vpn9 & vpn10

version 1.4.0rc5

- add firewall rule to accept ipip gateway packets

version 1.4.0rc4

- add network_id and community_server info to status page
- show network_id in sysinfo.json

version 1.4.0rc3

- fix openvpn service

version 1.4.0rc2

- update bmxd to version 1.1
	- parameter changed/added
	- retrigger gw selection
	- fix community gw selection
	- disable bmxd debug traces (syslog)
	- change script to keep created container to regenerate deb-packages
- sysinfo: prevent synatax error then we use sh/dash

version 1.4.0rc1

- remove ubuntu 16.04 support
- add support for debian 11
- update missing deps for ubuntu 20.04 support
- update fastd2 to v22
- update bmxd to version 1.0
	- move bmxd build script to [ffdd-bmxd repo](https://github.com/Freifunk-Dresden/ffdd-bmxd)
- add ipip tunnel as alternative to bat0
- add check-script for new uci config options
- add speedtest-backend for speedtest.ffdd
- some small bug fixes

T_RELEASE_v1.4.0rc11

- update bmxd to version 1.2
- update apache serveralias for ffl
- add dns zone for .ffl

T_RELEASE_v1.4.0rc10

- drop support for debian 9 and ubuntu 16.04/18.04
- add support for ubuntu 22.04
- salt: fix for ubuntu 20.04
- fastd: fix check in generate_keys

T_RELEASE_v1.4.0rc9

- airvpn: add preshared key and remove "+" from variable assignment where only one value is allowed
- move fastd and wireguard config (/etc/config/ffdd) to its own section
- fastd:
	- fix uci command
	- add logger info for "lerned" new unkown connections
	- remove fastd key generation from "autoconfig" to remove circular dependency
	- fix peers check for fastd22 which seems to always use "verify". when server was restricted known peers were also rejected
- openvpn: set service to restart on failue. openvpn sometimes stoppes running
- fix extraction of ipv4 adresses for dns server

T_RELEASE_v1.4.0rc8

- update wg_cgi to version 1.2.1
- fix wg_cgi, Version 1.2.0 only supported glibc >= 2.29
	ubuntu 18.04 only has glibc 2.27
	debian 10 only has 2.28
	newer versions have >= 2.29
- update communities and fix checkup script