gitea_admin/FreeRADIUS
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
15 Commits 1 Branch 2 Tags
629a51a905622fb605800115abc14c9d8e134de1
Commit Graph
15 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
gitea_admin 629a51a905 security(freeradius): enforce require_message_authenticator globally 
- Set require_message_authenticator = yes in security block
- Set limit_proxy_state = yes
- Mitigate BLASTRADIUS vulnerability
- Harden RADIUS request validation
 2026-02-27 21:59:10 +01:00
gitea_admin fc35d35b00 fix(radius/openvpn): activate SQL authorize pipeline to enforce static IP allocation 
- Enable `sql` in sites-enabled/default authorize section
- Allow processing of radreply attributes (e.g. Framed-IP-Address)
- Fix static IP assignment from RADIUS for OpenVPN clients
- Bump Helm chart version to 1.0.11
 2026-02-26 16:34:51 +01:00
gitea_admin 35e0f2f419 feat(freeradius): add radius.conf and queries.conf ConfigMaps and bump chart version 
- Move FreeRADIUS SQL and radius.conf into ConfigMaps
- Add /etc/freeradius/mods-config/sql/main/mysql/queries.conf and /etc/freeradius/radius.conf templates for Helm deployment
- Update SQL post-auth query formatting
- Enable suppress_secrets in radius.conf
- Bump Helm chart version to 1.0.10
- Adjust GitLab CI and Deployment to use new config structure
 2026-02-03 15:33:08 +01:00
gitea_admin 7d90707deb update chart files and remove old tgz packages , update version 1.0.9 2025-11-25 14:17:58 +01:00
gitea_admin e50df4ba36 add manual job to push Helm chart to Gitea OCI registry 2025-10-28 11:13:04 +01:00
gitea_admin a08dcf6983 feat(radius): enable dynamic client support via SQL nas table 
- Activated `dynamic_clients` module to allow loading RADIUS clients dynamically from the database
- Configured SQL query to fetch client secret, shortname, and type based on Packet-Src-IP-Address
- Integrated `dynamic_clients` into the `authorize` section for real-time NAS resolution
- Eliminated need to restart FreeRADIUS when adding new NAS entries
 2025-07-01 12:13:43 +02:00
gitea_admin aad17e7b3f enable SQL accounting and disable detail logging in FreeRADIUS 2025-07-01 10:35:07 +02:00
gitea_admin 4885bc1eb4 edit mods-availabe/eap form default_eap_type= md5 to default_eap_type=peap 2025-06-30 13:19:44 +02:00
gitea_admin 3ccf50ed57 feat: add EAP module support with dynamic CA file path and config injection 
- Added `files/mods-available/eap` with environment-based `ca_file` reference
- Updated `mods-enabled.yaml` to include EAP module via Helm `.Files.Glob`
- Modified `Deployment.yaml` to mount EAP config into /mods-enabled/eap
 2025-06-30 12:35:39 +02:00
gitea_admin f025437c6a new version 1.0.4 2025-06-25 11:43:25 +02:00
gitea_admin bb0a10b2bf Disable Client Certificate Requirement 2025-06-24 16:43:25 +02:00
gitea_admin a7e7202761 comment out clients = radsec on freeradius/files/sites-available/tls 2025-06-24 15:49:19 +02:00
gitea_admin 763d743c16 add .helmignore 2025-06-24 12:53:59 +02:00
gitea_admin 642f747b48 comment out the “dh_file” configuration element from files/sites-available/tls 2025-06-24 12:04:48 +02:00
gitea_admin 98c2fa6240 Initial commit 
- update else condition on the line 239 in templates/Deployment
- update  st-common version from 0.1.10 to 0.1.12 on Chart.yaml file
- add gitlab ci/cd pipeline to  package the Helm chart into a .tgz. and Publish it to GitLab’s Helm package registry
 2025-06-24 11:20:34 +02:00