Commit Graph
176 Commits
Author SHA1 Message Date
DL6ER 1161463a60 Fix spellcheck error
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-09-15 17:35:29 +02:00
DL6ER 2c516d1d8c Add ability to specify domains, lists, clients and group names as arrays for creating multiple with the same properties (comment, groups, ...) at the same time
Signed-off-by: Dominik Derigs <dl6er@dl6er.de>
2023-09-15 17:35:29 +02:00
DL6ER 392db953b3 Merge pull request #1607 from pi-hole/tweak/query_details
Provide regex ID for API
2023-09-15 17:25:17 +02:00
DL6ER 9704455591 Always set regex_id when available
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-09-13 16:44:40 +02:00
DL6ER 2788fa0137 Add files.pcap to expose integrated packet (PCAP) dumping to a file
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-09-02 18:25:34 +02:00
Christian König 22954823b5 Hard limit for searching the adlists is 10,000
Signed-off-by: Christian König <ckoenig@posteo.de>
2023-08-09 22:13:34 +02:00
DL6ER 52c08c42b9 Embed missing file API specs file specs/action.yaml
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-08-02 18:17:38 +02:00
Christian König da544dcbb2 Change default webport to 80
Signed-off-by: Christian König <ckoenig@posteo.de>
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-08-01 15:54:20 +02:00
DL6ER a9d47713e4 Provide regex ID for API
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-07-30 21:49:23 +02:00
DL6ER e085728e3e Merge pull request #1601 from pi-hole/fix/redirect_slash
Slash the slash
2023-07-28 23:07:30 +02:00
DL6ER 55785f1b0c Simplify code and handle case of missing trailing slashes for index pages properly
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-07-28 22:36:41 +02:00
DL6ER 723db23703 Use explicitly sized integers (u/int64_t) to ensure consistent operation on both 32 and 64 bit architectures
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-07-27 04:10:23 +02:00
DL6ER e772442ea7 Use header SID authentication instead of the implicit cookie authentication to circumvent CORS issues
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-07-18 22:01:58 +02:00
DL6ER 756a688f05 Fix OpenAPI documentation login
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-07-18 22:00:06 +02:00
DL6ER de3e9bf0a5 Fix logo path to use the embedded SVG icon
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-07-13 20:03:31 +02:00
DL6ER ea40474635 Add OpenAPI Authentication and Authorization details for the API. Every endpoint except GET,POST /api/auth needs authentication
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-07-13 20:00:11 +02:00
DL6ER 73f9ad02a0 Allow defining lines to inject into the generated dnsmasq configuration (misc.dnsmasq_lines)
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-06-15 17:53:21 +02:00
DL6ER 07f1f7df44 Save number of ABP-style entries in adlist table's new column abp_entries
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-06-15 09:38:37 +02:00
DL6ER a7f47a5e1f The number of entries on a list should be the sum of domains and ABP-style entries
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-06-12 21:44:24 +02:00
DL6ER 813509841b Accept cookie authentication only when CSRF header is provided (and correct)
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-06-04 19:29:54 +02:00
DL6ER 6975a17c7c Allow fractional delay for blocking mode changes and fix a few smaller memory leaks
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-06-03 13:26:58 +02:00
DL6ER 7ad68b785b Fix favicon for API documentation (in the same way we did for the web interface a few minutes ago)
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-06-03 12:50:15 +02:00
Christian König 62cfc25b95 Fix spelling in v6
Signed-off-by: Christian König <ckoenig@posteo.de>
2023-05-30 22:42:13 +02:00
DL6ER 19c72d354e !!! BREAKING CHANGE !!! Switch to the proven memory-hard password-hashing alogorithm BALLOON. The stored password hash will be upgraded on the first successdful login. To wave the necessity to implement BALLOON with every client trying to access the API, we remove the existing challenge-response authentication in favor of allowing login straight with the password. This has been avoided in the past, however, seems now acceptable that FTL (even by default) offers secure end-to-end encryption over HTTPS.
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-05-30 21:22:45 +02:00
DL6ER d42d4be97b Add webserver.tls.rev_server boolean useful to tell FTL that unencrypted connections are still secure (in the context of Pi-hole solely being reachable through a reverse proxy)
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-05-28 14:45:03 +02:00
DL6ER d86a2f1c95 Add pihole.webhome() and add settings + group pages deep URI rewrite
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-05-26 21:50:26 +02:00
DL6ER 54cf9ad1f9 Add new debug.tls option logging any mbedTLS debug output to webserver.log
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-05-25 18:28:34 +02:00
DL6ER 0aecb57375 Add to /api/info/ftl if FTL is allowed to perform destructive operations (such as poweroff or reboot)
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-05-24 20:59:23 +02:00
DL6ER c672120123 Add a setting to block possibly harmful actions
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-05-24 20:49:27 +02:00
DL6ER b5a6ae44aa Add /api/action/flush/arp flushing both the network and network_addresses tables in pihole-FTL.db
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-05-24 20:47:51 +02:00
DL6ER 3b404ff9a0 Add /api/actions/flush/logs
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-05-24 20:39:18 +02:00
DL6ER 7b72c762ce Add dns boolean to /api/auth signalling if the DNS server is up and running
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-05-24 20:25:02 +02:00
DL6ER 1083128828 Fix OpenAPI definition of /api/dns/blocking
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-05-24 18:48:55 +02:00
DL6ER f48683a11e Continue to run webserver even when dnsmasq fails to still serve the web interface. Change the type of api/dns/blocking from bool to enum-string to support the new "failure" state
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-05-24 17:19:12 +02:00
DL6ER f5cd3b00d2 Add strict_tls property to list of sessions showing if really every connection of this session happened over TLS/SSL
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-05-22 20:30:56 +02:00
DL6ER 391d1c9d0c Extend /info/metrics to show details also about stale cache records
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-05-11 14:18:21 +02:00
DL6ER f06b2e5397 Add tls boolean to list of sessions to indicate whether this session was established over a secure (end-to-end encrypted) connection
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-05-09 10:01:05 +02:00
DL6ER d4f30e4f3d Send more gravity-specific quantities in /search/{domain}
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-05-07 13:10:24 +02:00
DL6ER c12625f0c1 Add global object "took" to all API endpoints
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-05-07 12:20:07 +02:00
DL6ER c3468b7403 Include regex results in domains array when using /search/{domain}
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-05-07 11:19:02 +02:00
DL6ER b7b63506fd Add method to delete network table entires by their database ID
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-05-07 11:04:31 +02:00
DL6ER 7281da34b4 Add /api/clients/_suggestions
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-05-06 07:31:21 +02:00
DL6ER 469e73e0ff Allow deleteing multiple messages at once (provide them comma-separated)
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-05-04 12:13:09 +02:00
DL6ER 3f0b8f4280 Ensure we always read diagnosis messages from the database
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-05-03 21:16:51 +02:00
DL6ER e6b46a2c60 Simplify redirection when user is already authenticated
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-04-26 22:10:43 +02:00
DL6ER b642bacf08 Rename the API endpoint from /logs/http to /logs/webserver for consistency with the config option renameing
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-04-26 21:39:29 +02:00
DL6ER 2b2c02f0c7 Remove PH7
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-04-26 21:09:33 +02:00
DL6ER 7359b496ff Move database.maxHistory to webserver.api.maxHistory
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-04-25 22:26:25 +02:00
DL6ER 515fe8b440 Add certificate generation command (pihole-FTL --gen-x509 ...)
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-04-05 21:21:14 +02:00
DL6ER c05502f24a Reimplement DNS cache metrics in the light of arbitrary RRTYPE caching
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-04-01 16:10:49 +02:00