3d25d20e86
systemd service - don't use deprecated PermissionsStartOnly ( #6465 )
2025-11-09 10:44:21 +01:00
7452c95080
systemd service - don't use deprecated PermissionsStartOnly
...
- elevate Prestart and Poststop script permissions using "+" prefix instead,
as per https://www.freedesktop.org/software/systemd/man/latest/systemd.service.html#Command%20lines
( PermissionsStartOnly was deprecated in systemd 241 and no longer appears in
documentation since 2018 https://github.com/systemd/systemd/pull/10802 )
Signed-off-by: Rob Gill <rrobgill@protonmail.com >
2025-11-08 15:35:10 +10:00
4ff250edac
Fix libcap capabilities not being granted on OpenRC distros
...
Created on behalf of @mgziminsky - see this issue comment: https://github.com/pi-hole/pi-hole/issues/6454#issuecomment-3476576177
Signed-off-by: Sparronator9999 <86388887+Sparronator9999@users.noreply.github.com >
2025-11-02 07:29:20 +11:00
1d6b3cd894
Add log file path variables and ensure log files are created if missing ( #6441 )
2025-10-28 13:40:00 +00:00
72e3699265
Add log file path variables and ensure log files are created if missing
...
Signed-off-by: Yannick7777 <admin@eyer.life >
2025-10-26 15:19:56 +01:00
1818e7e59e
Ensure 'versions' file exist on first start
...
Signed-off-by: casperklein <casperklein@users.noreply.github.com >
2025-10-26 12:05:13 +01:00
106b999054
Rename views, upgrade gravity database and bump gravity databae version ( #6386 )
2025-10-05 20:33:30 +02:00
0db48383ae
Add support for alpine
...
Signed-off-by: Michael Ziminsky (Z) <mgziminsky@users.noreply.github.com >
2025-08-16 21:47:54 +00:00
9e258e7005
Rename views, upgrade gravity database and bump gravity databae version
...
Signed-off-by: DL6ER <dl6er@dl6er.de >
2025-08-15 19:39:21 +02:00
842afc2475
Give FTL 60 seconds for graceful shutdown
...
Signed-off-by: Christian König <github@yubiuser.dev >
2025-05-12 19:02:29 +02:00
95c1b1a542
Add ON DELETE CASCADE to FOREIGN KEY REFERENCES in gravity.db ( #6113 )
2025-04-15 06:24:52 +02:00
5002ce8ba7
Source files relative to the repos root
...
Signed-off-by: Christian König <github@yubiuser.dev >
2025-04-07 14:10:01 +02:00
ca1bab3c1b
Fix more shellcheck warnings
...
Signed-off-by: Christian König <github@yubiuser.dev >
2025-04-07 10:52:57 +02:00
36e6c9921e
Shellcheck Tweaks ( #6147 )
2025-04-07 10:08:25 +02:00
9f5e18b1cd
Make it 644
...
Signed-off-by: Christian König <github@yubiuser.dev >
2025-04-06 21:13:47 +02:00
e579397f51
Allow all users to read the version file
...
Signed-off-by: Christian König <github@yubiuser.dev >
2025-04-06 20:52:57 +02:00
2088601148
Add .shellcheckrc to configure shellcheck ignore SC1090-1 globally
...
Signed-off-by: Adam Warner <me@adamwarner.co.uk >
2025-04-06 18:46:47 +01:00
4108c817dc
Revert "source with source not dot ( #6137 )"
...
This reverts commit 8fd2ebd3d7557bc6f179
2025-04-04 19:12:57 +01:00
4efe4dfd4b
source with source not dot
...
Signed-off-by: Michael Woolweaver <michael@woolweaver.bid >
2025-04-02 14:21:45 -05:00
71ec0a0244
Add ON DELETE CASCADE to FOREIGN KEY REFERENCES in gravity.db
...
Signed-off-by: DL6ER <dl6er@dl6er.de >
2025-03-27 13:10:53 +01:00
349544b24a
Create webserver.log on FTL startup ( #6051 )
2025-03-10 06:14:22 +01:00
9b4502a7a9
Add trailing / to directories
...
Signed-off-by: casperklein <casperklein@users.noreply.github.com >
2025-03-07 23:00:40 +01:00
e437e3a805
Create webserver.log on FTL startup
...
Signed-off-by: Christian König <github@yubiuser.dev >
2025-03-06 09:48:06 +01:00
0130f7be74
Fix find command syntax, remove log dir from search
...
Signed-off-by: Jack'lul <8418678+jacklul@users.noreply.github.com >
2025-03-01 14:43:36 +01:00
ad6a48b219
Add comment about TLS-related file permissions
...
Co-authored-by: Dominik <DL6ER@users.noreply.github.com >
Signed-off-by: MichaIng <micha@dietpi.com >
2025-02-26 20:59:32 +01:00
83a38bb71d
Add comment about file permissions
...
Co-authored-by: Dominik <DL6ER@users.noreply.github.com >
Signed-off-by: MichaIng <micha@dietpi.com >
2025-02-26 12:26:50 +01:00
232d581916
Re-add comment about execute bit on directory
...
Co-authored-by: Dominik <DL6ER@users.noreply.github.com >
Signed-off-by: MichaIng <micha@dietpi.com >
2025-02-26 12:25:51 +01:00
0b380d671d
Follow symlinks with find
...
Incorporating https://github.com/pi-hole/pi-hole/pull/5997
Signed-off-by: MichaIng <micha@dietpi.com >
2025-02-24 17:37:01 +01:00
e70981d80f
Do not overwrite TLS cert/key mode
...
FTL correctly creates the cert and especially private key with 0600 mode. But the prestart scripts changes it to 0660.
After removing the dedicated webserver from Pi-hole setups, the pihole group has no purpose anymore, and files should not be writable to any other user than pihole itself, and the private TLS key not reasable to anyone else either.
Additionally, this commit consolidates the chmod calls, applying 0755 to all directories and 0640 to all files, but the TLS key and cert.
Signed-off-by: MichaIng <micha@dietpi.com >
2025-02-24 17:29:58 +01:00
b59ab5852a
Add missing trailing / when setting permissions of /etc/pihole
...
Signed-off-by: Christian König <github@yubiuser.dev >
2025-02-24 15:59:11 +01:00
579dc07046
Merge branch 'development' into tweak/gravity_backup
...
Signed-off-by: DL6ER <dl6er@dl6er.de >
2024-11-26 21:08:09 +01:00
633c971a44
Store failed gravity restoration status in message table
...
Signed-off-by: DL6ER <dl6er@dl6er.de >
2024-11-23 09:44:39 +01:00
2dc5bd15cc
Remove remaining traces of audit log
...
Signed-off-by: DL6ER <dl6er@dl6er.de >
2024-11-16 09:45:53 +01:00
2fd51bd244
Fix gavity version 19
...
Signed-off-by: Christian König <github@yubiuser.dev >
2024-10-18 23:00:31 +02:00
1ed5994fa5
Remove temporal log file symlink code. It was introduced 2 years ago with v5.11 and always thought to be temporarily only
...
Signed-off-by: Christian König <github@yubiuser.dev >
2024-07-29 09:25:12 +02:00
db1431a1ae
Remove obsolet files
...
Signed-off-by: Christian König <github@yubiuser.dev >
2024-07-29 09:25:12 +02:00
2c32d485bd
Remove obsolet getFTLPIDFile()
...
We can get the path of the PID file via getFTLConfigValue files.pid
Signed-off-by: Christian König <github@yubiuser.dev >
2024-07-27 22:00:52 +02:00
fafd47ba75
Please editorconfig-checker
...
Signed-off-by: Christian König <ckoenig@posteo.de >
2024-07-02 20:57:28 +02:00
e232361b2d
Add CAP_SYS_TIME to FTL's ambient capabilities
...
Signed-off-by: DL6ER <dl6er@dl6er.de >
2024-06-07 19:02:43 +02:00
b5ab8ac198
Change UNIQUEness constraint from (address) to (address, type) in the adlist table. This will allow certain adlists to be associated to different groups. A possible scenario is an adlist meant to block a specific service (e.g. Twitter, Youtube, etc.). It can then either be used to ensure these services are really blocked on the devices of group A but will never be blocked on devices of group B.
...
Signed-off-by: DL6ER <dl6er@dl6er.de >
2024-02-11 16:54:22 +01:00
0066c6fbff
Make IDs of anti-/gravity lists available in vw_(anti)gravity
...
Signed-off-by: DL6ER <dl6er@dl6er.de >
2023-12-25 05:29:29 +01:00
a87d1bbc4f
Remove pihole.sudo
...
Signed-off-by: Christian König <ckoenig@posteo.de >
2023-12-09 21:04:56 +01:00
d77dbf736c
Logrotate config file needs to be owned by root
...
Signed-off-by: Christian König <ckoenig@posteo.de >
2023-10-18 22:09:38 +02:00
40c75289b5
Allow pihole to access subdirs in /etc/pihole
...
Signed-off-by: Christian König <ckoenig@posteo.de >
2023-10-13 20:07:25 +02:00
69a264a3c2
Add antigravity support to gravity ( #5330 )
2023-09-29 19:09:24 +01:00
3c693c1da5
Apply suggestions from code review
...
Co-authored-by: DL6ER <dl6er@dl6er.de >
Signed-off-by: Christian König <ckoenig@posteo.de >
2023-08-06 12:04:55 +02:00
7bb0ca59d1
Remove traces of /run/pihole
...
Signed-off-by: Christian König <ckoenig@posteo.de >
2023-08-05 14:54:09 +02:00
587a2a1c04
# allow all users to enter der directories
...
Signed-off-by: Christian König <ckoenig@posteo.de >
2023-08-04 23:52:53 +02:00
c360743d41
Re-add file/folder permissions
...
Signed-off-by: Christian König <ckoenig@posteo.de >
2023-08-04 21:12:40 +02:00
a3ea2cd8c3
User pihole should be allowed to edit all its files
...
Signed-off-by: Christian König <ckoenig@posteo.de >
2023-08-04 19:32:19 +02:00
yubiuser