package/gluon-web-admin/luasrc/lib/gluon/config-mode/model/admin/remote.lua

+--[[
+Copyright 2008 Steven Barth <steven@midlink.org>
+Copyright 2011 Jo-Philipp Wich <xm@subsignal.org>
+Copyright 2013 Nils Schneider <nils@nilsschneider.net>
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+	http://www.apache.org/licenses/LICENSE-2.0
+]]--
+
+local util = require 'gluon.util'
+local site = require 'gluon.site'
+local sp = util.subprocess
+
+local unistd = require 'posix.unistd'
+local wait = require 'posix.sys.wait'
+
+local f_keys = Form(translate("SSH keys"), translate("You can provide your SSH keys here (one per line):"), 'keys')
+local s = f_keys:section(Section)
+local keys = s:option(TextValue, "keys")
+keys.wrap = "off"
+keys.rows = 5
+keys.default = util.readfile("/etc/dropbear/authorized_keys") or ""
+
+function keys:write(value)
+	value = util.trim(value:gsub("\r", ""))
+	if value ~= "" then
+		local f = io.open("/etc/dropbear/authorized_keys", "w")
+		f:write(value, "\n")
+		f:close()
+	else
+		unistd.unlink("/etc/dropbear/authorized_keys")
+	end
+end
+
+local config = site.config_mode.remote_login
+if not config.show_password_form(false) then
+	-- password login is disabled in site.conf
+	return f_keys
+end
+
+local min_password_length = config.min_password_length(12)
+local mintype = 'minlength(' .. min_password_length .. ')'
+local length_hint
+
+if min_password_length > 1 then
+	length_hint = translatef("%u characters min.", min_password_length)
+end
+
+local f_password = Form(translate("Password"), translate(
+	"Alternatively, you can set a password to access your node. Please choose a "
+	.. "secure password you don't use anywhere else.<br><br>If you set an empty "
+	.. "password, login via password will be disabled. This is the default."
+	), 'password'
+)
+f_password.reset = false
+
+s = f_password:section(Section)
+
+local pw1 = s:option(Value, "pw1", translate("Password"))
+pw1.password = true
+pw1.optional = true
+pw1.datatype = mintype
+function pw1.cfgvalue()
+	return ''
+end
+
+local pw2 = s:option(Value, "pw2", translate("Confirmation"), length_hint)
+pw2.password = true
+pw2.optional = true
+pw2.datatype = mintype
+function pw2.cfgvalue()
+	return ''
+end
+
+local function set_password(password)
+	local options = {
+		stdin = sp.PIPE,
+		stdout = sp.DEVNULL,
+		stderr = sp.DEVNULL,
+	}
+	local pid, pipe = sp.popen('passwd', {}, options)
+	if not pid then
+		return false
+	end
+	local inw = pipe.stdin
+
+	unistd.write(inw, string.format('%s\n%s\n', password, password))
+	unistd.close(inw)
+
+	local wpid, status, code = wait.wait(pid)
+	return wpid and status == 'exited' and code == 0
+end
+
+function f_password:write()
+	if pw1.data ~= pw2.data then
+		f_password.errmessage = translate("The password and the confirmation differ.")
+		return
+	end
+
+	local pw = pw1.data
+
+	if pw ~= nil and #pw > 0 then
+		if set_password(pw) then
+			f_password.message = translate("Password changed.")
+		else
+			f_password.errmessage = translate("Unable to change the password.")
+		end
+	else
+		-- We don't check the return code here as the error 'password for root is already locked' is normal...
+		os.execute('passwd -l root >/dev/null')
+		f_password.message = translate("Password removed.")
+	end
+end
+
+return f_keys, f_password

package/gluon-web-autoupdater/Makefile

+# Copyright (C) 2013 Nils Schneider <nils at nilsschneider.net>
+# This is free software, licensed under the Apache 2.0 license.
+
+include $(TOPDIR)/rules.mk
+
+PKG_NAME:=gluon-web-autoupdater
+
+include ../gluon.mk
+
+define Package/gluon-web-autoupdater
+  TITLE:=gluon-web module for gluon-autoupdater
+  DEPENDS:=+gluon-web-admin +gluon-autoupdater
+endef
+
+$(eval $(call BuildPackageGluon,gluon-web-autoupdater))

package/gluon-luci-autoupdater/i18n/de.po → package/gluon-web-autoupdater/i18n/de.po

 msgid ""
 msgstr ""
-"Content-Type: text/plain; charset=UTF-8\n"
 "Project-Id-Version: PACKAGE VERSION\n"
 "PO-Revision-Date: 2015-05-04 01:55+0200\n"
 "Last-Translator:  <mschiffer@universe-factory.net>\n"
 "Language-Team: German\n"
 "Language: de\n"
 "MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
@@ -15,3 +15,6 @@ msgstr "Automatische Updates"
 
 msgid "Branch"
 msgstr "Branch"
+
+msgid "Enable"
+msgstr "Aktivieren"

package/gluon-luci-autoupdater/i18n/fr.po → package/gluon-web-autoupdater/i18n/fr.po

 msgid ""
 msgstr ""
-"Content-Type: text/plain; charset=UTF-8\n"
 "Project-Id-Version: PACKAGE VERSION\n"
 "PO-Revision-Date: 2015-08-19 20:20+0100\n"
 "Last-Translator: Bernot Tobias <tqbs@airmail.cc>\n"
 "Language-Team: French\n"
 "Language: fr\n"
 "MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n != 1);\n"
 
@@ -15,3 +15,6 @@ msgstr "Mise a jour automatique"
 
 msgid "Branch"
 msgstr "Branche"
+
+msgid "Enable"
+msgstr "Activer"

package/gluon-luci-autoupdater/i18n/gluon-luci-autoupdater.pot → package/gluon-web-autoupdater/i18n/gluon-web-autoupdater.pot

@@ -6,3 +6,6 @@ msgstr ""
 
 msgid "Branch"
 msgstr ""
+
+msgid "Enable"
+msgstr ""

package/gluon-web-autoupdater/luasrc/lib/gluon/config-mode/controller/admin/autoupdater.lua

+package 'gluon-web-autoupdater'
+
+entry({"admin", "autoupdater"}, model("admin/autoupdater"), _("Automatic updates"), 80)

package/gluon-web-autoupdater/luasrc/lib/gluon/config-mode/model/admin/autoupdater.lua

+-- SPDX-FileCopyrightText: 2013 Nils Schneider <nils@nilsschneider.net>
+-- SPDX-License-Identifier: Apache-2.0
+
+local uci = require("simple-uci").cursor()
+local autoupdater = uci:get_first("autoupdater", "autoupdater")
+
+local f = Form(translate("Automatic updates"))
+local s = f:section(Section)
+local o
+
+o = s:option(Flag, "enabled", translate("Enable"))
+o.default = uci:get_bool("autoupdater", autoupdater, "enabled")
+function o:write(data)
+	uci:set("autoupdater", autoupdater, "enabled", data)
+end
+
+o = s:option(ListValue, "branch", translate("Branch"))
+
+local branches = {}
+uci:foreach("autoupdater", "branch", function(branch)
+	table.insert(branches, branch)
+end)
+table.sort(branches, function(a, b)
+	return a.name < b.name
+end)
+for _, branch in ipairs(branches) do
+	o:value(branch[".name"], branch.name)
+end
+
+o.default = uci:get("autoupdater", autoupdater, "branch")
+function o:write(data)
+	uci:set("autoupdater", autoupdater, "branch", data)
+end
+
+function f:write()
+	uci:commit("autoupdater")
+end
+
+return f

package/gluon-web-cellular/Makefile

+include $(TOPDIR)/rules.mk
+
+PKG_NAME:=gluon-web-cellular
+
+include ../gluon.mk
+
+define Package/gluon-web-cellular
+  DEPENDS:=+gluon-web-admin
+  TITLE:=UI for activating cellular WAN
+endef
+
+$(eval $(call BuildPackageGluon,gluon-web-cellular))

package/gluon-web-cellular/i18n/de.po

+msgid ""
+msgstr ""
+"Content-Type: text/plain; charset=UTF-8\n"
+"Project-Id-Version: PACKAGE VERSION\n"
+"PO-Revision-Date: 2023-01-23 13:33+0100\n"
+"Last-Translator: Tom Herbers <mail@tomherbers.de>\n"
+"Language-Team: German\n"
+"Language: de\n"
+"MIME-Version: 1.0\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=2; plural=(n != 1);\n"
+
+msgid "APN"
+msgstr ""
+
+msgid "Cellular"
+msgstr ""
+
+msgid "Enabled"
+msgstr "Aktiviert"
+
+msgid "IPv4"
+msgstr ""
+
+msgid "IPv4/IPv6"
+msgstr ""
+
+msgid "IPv6"
+msgstr ""
+
+msgid "Password"
+msgstr "Passwort"
+
+msgid "SIM PIN"
+msgstr ""
+
+msgid "Type"
+msgstr "Typ"
+
+msgid "Username"
+msgstr "Nutzername"
+
+msgid ""
+"You can enable uplink via cellular service. If you decide so, the VPN "
+"connection is established using the integrated WWAN modem."
+msgstr ""
+"Du kannst den Uplink über einen Mobilfunk Service aktivieren. Wenn du "
+"dich dafür entscheidest, wird die VPN-Verbindung über das integrierte "
+"Mobilfunk-Modem hergestellt."
+
+msgid "Authentication"
+msgstr "Authentifizierung"
+
+msgid "None"
+msgstr "Keine"
+
+msgid "PAP"
+msgstr ""
+
+msgid "CHAP"
+msgstr ""
+
+msgid "Both"
+msgstr "Beide"

package/gluon-web-cellular/i18n/gluon-web-cellular.pot

+msgid ""
+msgstr "Content-Type: text/plain; charset=UTF-8"
+
+msgid "APN"
+msgstr ""
+
+msgid "Cellular"
+msgstr ""
+
+msgid "Enabled"
+msgstr ""
+
+msgid "IPv4"
+msgstr ""
+
+msgid "IPv4/IPv6"
+msgstr ""
+
+msgid "IPv6"
+msgstr ""
+
+msgid "Password"
+msgstr ""
+
+msgid "SIM PIN"
+msgstr ""
+
+msgid "Type"
+msgstr ""
+
+msgid "Username"
+msgstr ""
+
+msgid ""
+"You can enable uplink via cellular service. If you decide so, the VPN "
+"connection is established using the integrated WWAN modem."
+msgstr ""
+
+msgid "Authentication"
+msgstr ""
+
+msgid "None"
+msgstr ""
+
+msgid "PAP"
+msgstr ""
+
+msgid "CHAP"
+msgstr ""
+
+msgid "Both"
+msgstr ""

package/gluon-web-cellular/luasrc/lib/gluon/config-mode/controller/admin/cellular.lua

+local platform = require 'gluon.platform'
+
+package 'gluon-web-cellular'
+
+if platform.is_cellular_device() then
+	entry({"admin", "cellular"}, model("admin/cellular"), _("Cellular"), 30)
+end

package/gluon-web-cellular/luasrc/lib/gluon/config-mode/model/admin/cellular.lua

+local uci = require("simple-uci").cursor()
+
+local f = Form(translate("Cellular"))
+
+local s = f:section(Section, nil, translate(
+	'You can enable uplink via cellular service. If you decide so, the VPN connection is established '
+	.. 'using the integrated WWAN modem.'
+))
+
+local enabled = s:option(Flag, "enabled", translate("Enabled"))
+enabled.default = uci:get('gluon', 'cellular') and uci:get_bool('gluon', 'cellular', 'enabled')
+
+local pin = s:option(Value, "pin", translate("SIM PIN"))
+pin:depends(enabled, true)
+pin.default = uci:get('gluon', 'cellular', 'pin')
+
+local apn = s:option(Value, "apn", translate("APN"))
+apn:depends(enabled, true)
+apn.default = uci:get('gluon', 'cellular', 'apn')
+
+local pdptype = s:option(ListValue, "type", translate("Type"))
+pdptype:depends(enabled, true)
+pdptype:value("IP", translate("IPv4"))
+pdptype:value("IPV6", translate("IPv6"))
+pdptype:value("IPV4V6", translate("IPv4/IPv6"))
+pdptype.default = uci:get('gluon', 'cellular', 'pdptype') or "IP"
+
+local username = s:option(Value, "username", translate("Username"))
+username:depends(enabled, true)
+username.default = uci:get('gluon', 'cellular', 'username')
+
+local password = s:option(Value, "password", translate("Password"))
+password:depends(enabled, true)
+password.default = uci:get('gluon', 'cellular', 'password')
+
+local auth = s:option(ListValue, "auth", translate("Authentication"))
+auth:depends(enabled, true)
+auth:value("none", translate("None"))
+auth:value("pap", translate("PAP"))
+auth:value("chap", translate("CHAP"))
+auth:value("both", translate("Both"))
+auth.default = uci:get('gluon', 'cellular', 'auth') or "none"
+
+function f:write()
+	local cellular_enabled = false
+	if enabled.data then
+		cellular_enabled = true
+	end
+
+	uci:section('gluon', 'cellular', 'cellular', {
+		enabled = cellular_enabled,
+		apn = apn.data,
+		pdptype = pdptype.data,
+		pin = pin.data,
+		username = username.data,
+		password = password.data,
+		auth = auth.data,
+	})
+
+	uci:commit('gluon')
+end
+
+return f

package/gluon-web-logging/Makefile

+include $(TOPDIR)/rules.mk
+
+PKG_NAME:=gluon-web-logging
+
+include ../gluon.mk
+
+define Package/gluon-web-logging
+  DEPENDS:=+gluon-web-admin
+  TITLE:=UI for remote syslog configuration
+endef
+
+$(eval $(call BuildPackageGluon,gluon-web-logging))

package/gluon-web-logging/i18n/de.po

+msgid ""
+msgstr "Content-Type: text/plain; charset=UTF-8\n"
+
+msgid "Enable"
+msgstr ""
+
+msgid "IP"
+msgstr ""
+
+msgid ""
+"If you want to use a remote syslog server, you can set it up here. Please "
+"keep in mind that the data is not encrypted, which may cause individual-"
+"related data to be transmitted unencrypted over the internet."
+msgstr ""
+"Wenn du einen Remote-Syslog-Server nutzen möchtest, dann kannst du ihn hier "
+"eintragen. Bitte beachte, dass diese Daten nicht verschlüsselt werden. Dies "
+"kann dazu führen, dass personenbezogene Daten unverschlüsselt über das "
+"Internet übertragen werden."
+
+msgid "Logging"
+msgstr "Logging"
+
+msgid "Port"
+msgstr ""

package/gluon-web-logging/i18n/gluon-web-logging.pot

+msgid ""
+msgstr "Content-Type: text/plain; charset=UTF-8"
+
+msgid "Enable"
+msgstr ""
+
+msgid "IP"
+msgstr ""
+
+msgid ""
+"If you want to use a remote syslog server, you can set it up here. Please "
+"keep in mind that the data is not encrypted, which may cause individual-"
+"related data to be transmitted unencrypted over the internet."
+msgstr ""
+
+msgid "Logging"
+msgstr ""
+
+msgid "Port"
+msgstr ""

package/gluon-web-logging/luasrc/lib/gluon/config-mode/controller/admin/logging.lua

+package 'gluon-web-logging'
+
+entry({"admin", "logging"}, model("admin/logging"), _("Logging"), 85)

package/gluon-web-logging/luasrc/lib/gluon/config-mode/model/admin/logging.lua

+local uci = require('simple-uci').cursor()
+local system = uci:get_first('system', 'system')
+
+local f = Form(translate('Logging'), translate(
+	"If you want to use a remote syslog server, you can set it up here. "
+	.. "Please keep in mind that the data is not encrypted, which may cause "
+	.. "individual-related data to be transmitted unencrypted over the internet."
+))
+local s = f:section(Section)
+
+local enable = s:option(Flag, 'log_remote', translate('Enable'))
+enable.default = uci:get_bool('system', system, 'log_remote')
+function enable:write(data)
+	uci:set('system', system, 'log_remote', data)
+end
+
+local ip = s:option(Value, 'log_ip', translate('IP'))
+ip.default = uci:get('system', system, 'log_ip')
+ip:depends(enable, true)
+ip.optional = false
+ip.placeholder = '0.0.0.0'
+ip.datatype = 'ipaddr'
+function ip:write(data)
+	uci:set('system', system, 'log_ip', data)
+end
+
+local port = s:option(Value, 'log_port', translate('Port'))
+port.default = uci:get('system', system, 'log_port')
+port:depends(enable, true)
+port.optional = true
+port.placeholder = 514
+port.datatype = 'irange(1, 65535)'
+function port:write(data)
+	uci:set('system', system, 'log_port', data)
+end
+
+function f:write()
+	uci:commit('system')
+end
+
+return f

package/gluon-web-mesh-vpn-fastd/Makefile

+include $(TOPDIR)/rules.mk
+
+PKG_NAME:=gluon-web-mesh-vpn-fastd
+
+include ../gluon.mk
+
+define Package/gluon-web-mesh-vpn-fastd
+  TITLE:=gluon-web module to enable and disable encryption for the mesh VPN
+  DEPENDS:=+gluon-web-admin +gluon-mesh-vpn-fastd
+endef
+
+$(eval $(call BuildPackageGluon,gluon-web-mesh-vpn-fastd))

package/gluon-web-mesh-vpn-fastd/check_site.lua

+need_value(in_site({'mesh_vpn', 'fastd', 'configurable'}), true)

package/gluon-web-mesh-vpn-fastd/files/lib/gluon/config-mode/view/mesh-vpn-fastd.html

+<div class="gluon-value">
+	<div class="gluon-value-title">
+		<input data-update="change" type="radio" value="security"<%= attr("id", id..'.1') .. attr("name", id) .. attr("checked", ((self:cfgvalue() or self.default) == "security") and "checked") %>>
+		<label<%= attr("for", id..'.1')%>></label>
+	</div>
+	<div class="gluon-value-field-long">
+		<label<%= attr("for", id..'.1') %> class="gluon-value-title"><%:Security mode%></label>
+		<br>
+		<%| translate(
+			'In security mode, the mesh VPN uses an encrypted tunnel to connect to the VPN servers. ' ..
+			'The encryption ensures that it is impossible for your internet access provider to see what ' ..
+			'data is exchanged over your node.'
+		) %>
+		<br>
+	</div>
+	<div class="gluon-value-field-long-after"></div>
+</div>
+
+<div class="gluon-value gluon-value-last">
+	<div class="gluon-value-title">
+		<input data-update="change" type="radio" value="performance"<%= attr("id", id..'.2') .. attr("name", id) .. attr("checked", ((self:cfgvalue() or self.default) == "performance") and "checked") %>>
+		<label<%= attr("for", id..'.2')%>></label>
+	</div>
+	<div class="gluon-value-field-long">
+		<label<%= attr("for", id..'.2') %> class="gluon-value-title"><%:Performance mode%></label>
+		<br>
+		<%| translate(
+			'In performance mode, no encryption is used. This usually allows for higher throughput, but the data exchanged over your node is not ' ..
+			'protected against eavesdropping.'
+		) %>
+		<br>
+	</div>
+	<div class="gluon-value-field-long-after"></div>
+</div>