pfSensible.Core Release Notes

Topics

v0.6.2

added auto choice for myid_type and peerid_type (#145)
pfsense_ca - added key parameter to import CA private key (#57)
pfsense_dns_resolver - validate domainoverrides.ip field
pfsense_openvpn_client - added v4only and v6only` values for create_gw (#133)
pfsense_openvpn_override - support changed semantics of push_reset in pfSense Plus 24.11
pfsense_openvpn_server - no longer sort authmode items
pfsense_setup - Update language list for pfSense 2.7.1 / pfSense Plus 23.09.
pfsensible_interface - implemented ipv6_type: slaac and added the slaacusev4iface parameter (#121).
pfsensible_openvpn_server - Allow Local Database for authmode parameter (#125).

made pfsense_dns_resolver hosts idempotent (#151)
pfsense - handle "."s prefixing php() output triggered by the presense of /var/run/booting and issue a warning (#118)
pfsense_dns_resolver - allow for comma separated list of IP addresses in hosts.ip (#150)
pfsense_openvpn_client - add tls_type parameter
pfsense_openvpn_client/server - apply tls setting to config (#132)
pfsense_user - fixed setting multiple groups for a user (#130)
set global $config; in phpshell() to find update commands in pfSense Plus 24.11

Bump required ansible version to 2.12.
Have _get_ansible_param_bool set the value to value_false if the parameter is present and false.
Refactor pfsense_authserver_ldap and pfsense_authserver_radius. Should not have any visible impact.
Ship tests so other pfsensible collections can use them.
pfsense_ca - allow for disabling randomserial and trust parameters.
pfsense_dhcp_static - Add arp_table_static_entry argument (#109).

The pfsensible_haproxy* modules have moved to the pfsensible.haproxy collection and will be removed from pfsensible.core in version 0.8.0.

ipaddress support for pfSense 2.4.4
pfsense_cert - Support EC certs (#98)
pfsense_interface - Always return ifname - even on interface creation
pfsense_interface - Prevent removal if interface is part of an interface group
pfsense_nat_outbound - Allow for NET:INTERFACE addresses
pfsense_nat_port_forward - 2.4.5 compatibility
pfsense_openvpn_server - Do not allow removal of an instance with an interface assignment
pfsense_rule - Add option to ignore an inexistent queue
pfsense_rule - Add support for floating 'any' interface rule (#90)
plugins/lookup/pfsense - Optimization and ignore queue setting
tests/plays - Add plays for testing with a live pfSense instance

pfsense_aggregate - Fix where a rule with a duplicated name would not be deleted if required
pfsense_dhcp_static - Allow removing entry with just name (#69)
pfsense_dhcp_static - Allow use of display name for netif. Error in case a interface group name is specified (#79)
pfsense_interface - Properly shut dwon interface and kill dhclient process when removing interface (#67)
pfsense_interface_group - Check that members list is unique
pfsense_interface_group - Fix creation (#74)
pfsense_interface_group - members is only required for creation
pfsense_nat_outbound - Fix boolean values, invert (#92)
pfsense_openvpn_client - Fix strictuserdn -> strictusercn option (#93)
pfsense_openvpn_client/override/server - Allow network alias and non-strict network address for tunnel_network/tunnel_network6 (#77)
pfsense_openvpn_server - Fix use of generate with shared_key and tls (#81)
pfsense_setup - No default values - leads to unexpected changes (#91)
pfsense_user - Fix setting system group membership (#70)

pfsensible.core.pfsense_default_gateway - Manage pfSense default gateway
pfsensible.core.pfsense_dns_resolver - Manage pfSense DNS resolver (unbound) settings