diff --git a/.github/ISSUE_TEMPLATE.md b/.github/ISSUE_TEMPLATE.md index 2922ea86..b4e473c6 100644 --- a/.github/ISSUE_TEMPLATE.md +++ b/.github/ISSUE_TEMPLATE.md @@ -1,6 +1,38 @@ -* **PHP version:** -* **MySQL version:** -* **Webserver (Nginx, Apache...):** -* **What is the expected behaviour?** -* **What do you see instead?** -* **PHP logs on pastebin:** +**OS and version** (e.g. Ubuntu 24.04): + +**PHP version** (`php -v`): + +**MySQL / MariaDB version** (`mysql --version`): + +**fail2ban version** (`fail2ban-client --version`): + +**OpenVPN version** (`openvpn --version`): + +**Admin panel version** (shown in CHANGELOG or git tag): + +**What did you expect to happen?** + +**What happened instead?** + +**Steps to reproduce:** + +1. +2. +3. + +**Relevant logs** (redact sensitive info): + +Apache error log (`/var/log/apache2/error.log`): +``` + +``` + +PHP errors (if any): +``` + +``` + +fail2ban log if relevant (`/var/log/fail2ban.log`): +``` + +``` diff --git a/.vs/ProjectSettings.json b/.vs/ProjectSettings.json new file mode 100644 index 00000000..f8b48885 --- /dev/null +++ b/.vs/ProjectSettings.json @@ -0,0 +1,3 @@ +{ + "CurrentProjectSetting": null +} \ No newline at end of file diff --git a/.vs/slnx.sqlite b/.vs/slnx.sqlite new file mode 100644 index 00000000..d482d038 Binary files /dev/null and b/.vs/slnx.sqlite differ diff --git a/CHANGELOG.md b/CHANGELOG.md index 1afa1080..65abcf7c 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,110 @@ # OpenVPN-Admin Version History +## 1.1.4 + +### Fixes +- **Public IP never applied to client `.ovpn` files** — `install.sh` patched the placeholder `remote xxx.xxx.xxx.xxx 1194/443`, but the shipped templates actually use `remote 10.10.100.27 1194`. The `sed` pattern never matched, so every fresh install (including the one-liner installer) shipped `.ovpn` files still pointing at the example IP instead of the detected/entered public IP. The installer now matches the real placeholder. +- **Fail2Ban page always shows the "grant sudo access" warning, even after following it** — on Ubuntu 26.04+, `apache2.service` ships with `InaccessiblePaths=-/etc/sudoers` and `-/etc/sudoers.d`, which hides sudo's config from Apache and everything it spawns (PHP included) as a defense against a compromised web app escalating to root. This silently broke the web UI's `sudo fail2ban-client` / `sudo easyrsa` calls regardless of what was in `/etc/sudoers.d` — adding the suggested sudoers entry had no effect. `install.sh` now drops a systemd override (`apache2.service.d/openvpn-admin-sudo.conf`) that re-declares `InaccessiblePaths` without those two entries, when the packaged unit has them. + +### Changes +- **Client Configuration Editor simplified** — the GNU/Linux and macOS/Viscosity tabs are removed from the admin Configs page; only the shared `.ovpn` template remains, under a single "Editor" tab. + +--- + +## 1.1.3 + +### Fixes +- **All admin buttons missing / Fail2Ban page stuck on spinner** — the `Content-Security-Policy` header (`script-src 'self'`) silently blocked the inline ` - - - - - - - - - - - - - + +