5f92851a96
Files-basierter RADIUS-Server (Clients + Users), managed analog DHCP/WireGuard.
- Migration 0042: radius_settings (singleton, node-lokal), radius_clients (secret_enc), radius_users (password_enc) — Secrets via secrets.Box verschlüsselt.
- internal/freeradius: Multi-File-Renderer (clients.conf + authorize) via Box.Open, Secret-Escaping (" \), Service default-off/an enabled gekoppelt. internal/services/radius + internal/handlers/radius.go: Settings + Client/User-CRUD, write-only Secret-Semantik, Validierung (IP/CIDR, name-charset), GET liefert secret_configured statt Secret.
- Firewall: udp 1812/1813 Auto-Rule bei enabled. Cluster: clients/users repliziert (hashSpec), radius_settings node-lokal.
- main.go + render.go + WithAllReloaders. Packaging: freeradius Dependency, setgid-Dir /etc/edgeguard/freeradius (Gruppe freeradius), Symlinks clients.conf+authorize, disable-on-install, sudoers.
- UI: RADIUS-Seite (Einstellungen + Clients + Benutzer) unter Sicherheit, Route/Nav/i18n de/en.
- Tests (guarded): Renderer-Inhalt + Secret-Escaping/Roundtrip + Masking. Scope v1: PAP/CHAP files-based (kein EAP/802.1X).
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
20 lines
1.0 KiB
Plaintext
20 lines
1.0 KiB
Plaintext
Package: edgeguard-api
|
|
Version: __VERSION__
|
|
Architecture: __ARCH__
|
|
Maintainer: NetCell IT <support@netcell-it.de>
|
|
Homepage: https://edgeguard.netcell-it.de
|
|
Description: EdgeGuard — native Reverse-Proxy / LB / Forward-Proxy / VPN / Firewall
|
|
EdgeGuard is a native Debian/Ubuntu edge gateway combining HAProxy
|
|
(TLS termination + L7 routing + LB), Squid, WireGuard, Unbound and
|
|
nftables, configured from a PostgreSQL single-source-of-truth via
|
|
a Go management API.
|
|
Deployable as a cluster of symmetric peers (KeyDB Active-Active +
|
|
PG Streaming Replication + provider Floating-IP for HTTP ingress).
|
|
.
|
|
This package ships the management API, scheduler and CLI.
|
|
Depends: postgresql-16 | postgresql-17, haproxy (>= 2.8), squid, wireguard-tools, unbound, chrony, kea-dhcp4-server, freeradius, nftables, keepalived, certbot, openssl, sudo, adduser, systemd, ca-certificates, ulogd2, ulogd2-json, iputils-ping, traceroute, dnsutils, curl, netcat-openbsd
|
|
Recommends: edgeguard-keydb (>= 6.3.4-edgeguard1), apparmor, fail2ban
|
|
Section: admin
|
|
Priority: optional
|
|
Installed-Size: 0
|