FreedomBox 23.20 has been released and uploaded to Debian unstable. Typically, the freedombox package will migrate to testing in 2 days, and then can be uploaded to stable-backports.

Highlights:

• backups: Don't leave services stopped if backup fails
• coturn: Fix incorrectly passing transport argument to STUN URIs

Other Changes:

• apache: tests: Update to use DiagnosticCheck class
• app: Update diagnose() docstring
• datetime: Fix diagnostic test for checking NTP server sync
• diagnostics: Add shortcut to re-run setup for app
• ejabberd: Update old STUN URIs to remove 'transport' parameter
• email: Increase the size of the message to 100MiB
• locale: Update translations for Albanian, German, Spanish, Turkish, Ukrainian
• matrixsynapse: Update old STUN URIs to remove 'transport' parameter
• operation: Fix issue with re-running setup when it fails first time
• tests: functional: Run tests on two app servers

The following people contributed to the git repository for this release:

• Besnik Bleta
• Burak Yavuz
• Ettore Atalan
• gallegonovato
• Ihor Hordiichuk
• James Valleroy
• Joseph Nuthalapati
• Sunil Mohan Adapa

FreedomBox 23.16 has been released and uploaded to Debian unstable. Typically, the freedombox package will migrate to testing in 2 days, and then can be uploaded to stable-backports.

Highlights:

• openvpn: Renew server/client certificates
• openvpn: Correctly set expiry of server/client certs to 10 years

Other Changes:

• backups: Remove use of length_is template function
• django: Remove use of X-XSS-Protection header
• locale: Update translations for Czech, Norwegian Bokmål, Swedish
• networks, samba: Fix tests setting firewall zone
• openvpn: Ensure that re-running setup works as expected
• openvpn: Fix app not installing on Debian testing
• openvpn: Minor refactoring in setting up easy-rsa
• openvpn: Use config file instead of env vars for easy-rsa
• sso: Switch to django-axes >= 5.0
• sso: Use POST method for logout
• users, networks: Use the autofocus HTML attribute sparingly

The following people contributed to the git repository for this release:

• James Valleroy
• Jiří Podhorecký
• Joseph Nuthalapati
• Michael Breidenbach
• Petter Reinholdtsen
• Sunil Mohan Adapa

FreedomBox 23.15 has been released and uploaded to Debian unstable. Typically, the freedombox package will migrate to testing in 2 days, and then can be uploaded to stable-backports.

Changes:

• debian: Add Swedish translation for debconf
• locale: Update translations for Dutch, German, Spanish, Turkish, Ukrainian

The following people contributed to the git repository for this release:

• Burak Yavuz
• Ettore Atalan
• gallegonovato
• Ihor Hordiichuk
• ikmaak
• James Valleroy

FreedomBox 23.14 has been released and uploaded to Debian unstable. Typically, the freedombox package will migrate to testing in 2 days, and then can be uploaded to stable-backports.

Highlights:

• app: Implement advanced option to rerun app setup
• torproxy: Add separate app for Tor Proxy
• upgrades: Use codename in apt preferences

Other Changes:

• HACKING: Add instructions for container on Raspberry Pi
• bepasty: Don't enable app when setup is rerun
• bind: Don't enable app when setup is rerun
• ci: Add mypy static type check
• container: Add support for retrieving GPG keys using wget
• container: Update for bookworm images
• deluge: Don't enable app when setup is rerun
• ejabberd: Don't enable app when setup is rerun
• firewall: Add diagnostic check for backend
• firewall: Add diagnostic check for passthroughs
• firewall: Add diagnostic for default zone
• gitweb: Don't enable app when setup is rerun
• ikiwiki: Don't enable app when setup is rerun
• infinoted: Don't enable app when setup is rerun
• janus: Don't enable app when setup is rerun
• jsxc: Don't enable app when setup is rerun
• kvstore: Optionally, don't throw exception when deleting key
• locale: Update translations for Dutch
• mediawiki: Don't enable app when setup is rerun
• minetest: Don't enable app when setup is rerun
• openvpn: Don't enable app when setup is rerun
• performance: Don't enable app when setup is rerun
• privoxy: Don't enable app when setup is rerun
• quassel: Don't enable app when setup is rerun
• radicale: Don't enable app when setup is rerun
• rssbridge: Don't enable app when setup is rerun
• shaarli: Don't enable app when setup is rerun
• sharing: Don't enable app when setup is rerun
• tor, torproxy: Export settings from old to new app
• tor, torproxy: Update description for info on services provided
• tor: tests: Make functional test check for running service
• ttrss: Don't enable app when setup is rerun
• upgrades: Use codename for unattended-upgrades origin pattern
• users: Add diagnostic checks for nsswitch config
• users: Add diagnostics check for nslcd config
• wireguard: Don't enable app when setup is rerun
• zoph: Don't enable app when setup is rerun

The following people contributed to the git repository for this release:

• fliu
• ikmaak
• James Valleroy
• Sunil Mohan Adapa

FreedomBox 23.13 has been released and uploaded to Debian unstable. Typically, the freedombox package will migrate to testing in 2 days, and then can be uploaded to stable-backports.

Changes:

• container: Add support for ARM64 containers
• HACKING: Instructions for macOS on Apple Silicon
• locale: Update translations for German, Spanish, Turkish, Ukrainian

The following people contributed to the git repository for this release:

• Burak Yavuz
• Ettore Atalan
• gallegonovato
• Ihor Hordiichuk
• James Valleroy
• Joseph Nuthalapati

FreedomBox 23.11 has been released and uploaded to Debian experimental. These changes will not be available to most FreedomBox users until after Debian Bookworm is released (June 10).

Highlights

• *: Fix icons not present in the generated .deb
• shadowsocksserver: Add separate app for Shadowsocks server

Other Changes

• apache: Fix failure during app update
• apache: Use drop-in config component for /etc files
• bepasty: Use drop-in config component for /etc files
• calibre: Use drop-in config component for /etc files
• cockpit: Use drop-in config component for /etc files
• config: Add new component for managing drop-in /etc/ config files
• debian/install: Add new place in /usr to keep drop-in config files
• deluge: Use drop-in config component for /etc files
• ejabberd: Use drop-in config component for /etc files
• email: Use drop-in config component for /etc files
• gitweb: Use drop-in config component for /etc files
• i2p: Use drop-in config component for /etc files
• ikiwiki: Use drop-in config component for /etc files
• janus: Use drop-in config component for /etc files
• letsencrypt: Use drop-in config component for /etc files
• matrixsynapse: Use drop-in config component for /etc files
• mediawiki: Use drop-in config component for /etc files
• minidlna: Use drop-in config component for /etc files
• networks: Use drop-in config component for /etc files
• pagekite: Drop the config file for forcing use of Debian certs
• privacy: Use drop-in config component for /etc files
• radicale: Use drop-in config component for /etc files
• roundcube: Use drop-in config component for /etc files
• rssbridge: Use drop-in config component for /etc files
• searx: Use drop-in config component for /etc files
• security: Use drop-in config component for /etc files
• sharing: Use drop-in config component for /etc files
• ssh: Use drop-in config component for /etc files
• sso: Use drop-in config component for /etc files
• syncthing: Use drop-in config component for /etc files
• transmission: Use drop-in config component for /etc files
• ttrss: Use drop-in config component for /etc files
• upgrades: Use drop-in config component for /etc files
• users: Use drop-in config component for /etc files
• wordpress: Use drop-in config component for /etc files

The following people contributed to the git repository for this release:

• James Valleroy
• Sunil Mohan Adapa

FreedomBox 22.27 has been released and uploaded to Debian unstable. Typically, the freedombox package will migrate to testing in 2 days, and then can be uploaded to stable-backports.

Highlights

• minidlna: Fix incorrect marking for firewall local protection
• zoph, wordpress: Add conflicts on libpam-tmpdir

Other Changes

• container: Drop free tag from image URLs
• d/control: Don't recommend libpam-tmpdir
• locale: Update translations for Bulgarian, Chinese (Simplified), Czech, Dutch, German, Turkish, Ukrainian
• package, email: Move conflicting package removal to framework
• snapshot: Fix showing unsupported message on non-btrfs filesystems
• tests: functional: Set timeout to 3 hours
• upgrades: dist-upgrade: Don't change apt security line
• users: tests: Fix privileged tests
• wordpress: Redirect Webfinger queries

The following people contributed to the git repository for this release:

• 109247019824
• Burak Yavuz
• Eric
• Ihor Hordiichuk
• ikmaak
• James Valleroy
• Jiří Podhorecký
• Johannes Keyser
• Joseph Nuthalapati
• Sunil Mohan Adapa

FreedomBox 22.26 has been released and uploaded to Debian unstable. Typically, the freedombox package will migrate to testing in 2 days, and then can be uploaded to stable-backports.

Highlights:

• ejabberd: Enable mod_http_upload
• email: dovecot: Add fail2ban jail
• security: Remove restricted access setting and configuration
• ssh: Restrict logins to groups root, admin and freedombox-ssh

Other Changes:

• calibre: Add protection to local service using firewall
• deluge: Add protection to local service using firewall
• email: Add protection to local service using firewall
• email: Fix creation of aliases for security@ and usenet@
• firewall: Create a mechanism for protecting local services
• firewall: Introduce component for local service protection
• i2p: Add protection to local service using firewall
• i2p: Remove donation URL that is no longer available
• minidlna: Add protection to local service using firewall
• searx: Ensure that socket is only reachable by Apache and root
• ssh: Add checkbox to remove login group restrictions
• syncthing: Add protection to local service using firewall
• transmission: Add protection to local service using firewall

The following people contributed to the git repository for this release:

• James Valleroy
• nbenedek
• Sunil Mohan Adapa

FreedomBox 22.24 has been released and uploaded to Debian unstable. Typically, the freedombox package will migrate to testing in 2 days, and then can be uploaded to stable-backports.

Highlights:

• locale: Update translations for Bulgarian, French, German, Norwegian Bokmål

Other Changes:

• debian/lintian-overrides: Fix mismatch patterns and new messages
• minetest: Handle upgrade from 5.3.0 to 5.6.1
• storage: Drop skip_recommends
• upgrades: Add documentation link to upgrades service file
• upgrades: Update list of holds during dist upgrade

The following people contributed to the git repository for this release:

• 109247019824
• Coucouf
• James Valleroy
• Johannes Keyser
• Petter Reinholdtsen
• Sunil Mohan Adapa

FreedomBox 22.23 has been released and uploaded to Debian unstable. Typically, the freedombox package will migrate to testing in 2 days, and then can be uploaded to stable-backports.

Highlights:

• letsencrypt: Fix regression with comparing certificate
• rssbridge: Add option to allow public access

Other Changes:

• locale: Update translations for Bulgarian, Hungarian, Swedish
• storage: Handle file systems on non-physical devices
• upgrades: Allow FreedomBox vendor when adding backports
• upgrades: Skip unattended-upgrade in dist-upgrade

It also includes these changes from 22.22.1:

• debian: tests: Fix PYTHONPATH
• locale: Update translations for Bulgarian, Chinese (Simplified), Czech, Dutch, Turkish, Ukrainian
• privacy: Remove unused import, fix pipeline

The following people contributed to the git repository for these releases:

• 109247019824
• Benedek Nagy
• Burak Yavuz
• Eric
• ikmaak
• James Valleroy
• Jiří Podhorecký
• Michael Breidenbach
• nbenedek
• Sunil Mohan Adapa
• tunebes
• Tymofii Lytvynenko

FreedomBox 22.22 has been released and uploaded to Debian unstable. Typically, the freedombox package will migrate to testing in 2 days, and then can be uploaded to stable-backports.

Note: Submitting list of used apps anonymously is enabled on FreedomBox, and one may visit the new privacy app to disable it.

Highlights:

• privacy: Add new system app for popularity-contest
• matrix: Add fail2ban jail

Other Changes:

• *: Use privileged decorator for actions
• action_utils: Drop support for non-systemd environments
• action_utils: Drop unused progress requests from apt-get
• actions: Allow actions to be called by other users
• actions: Allow nested and top-level actions
• actions: Drop unused superuser_run and related methods
• actions: Implement getting raw output from the process
• actions: Use separate IPC for communicating results
• apache: Fix logs still going into /var/log files
• bind: Drop enabling DNSSEC (deprecated) as it is always enabled
• config: Drop ability to set hostname on systems without systemd
• config: Drop legacy migration of Apache homepage settings
• fail2ban: Make fail2ban log to journald
• firewall: Drop showing running status
• locale: Update translations for Albanian, Czech, Norwegian Bokmål, Russian, Swedish, Ukrainian
• minidlna: Use the exposed URL for diagnostic test
• openvpn: Drop RSA to ECC migration code and two-step setup
• privacy: Set vendor as FreedomBox for dpkg and popularity-contest
• searx: Show status of public access irrespective of enabled state
• templates: Update HTML meta tags for better description and app-name
• tests: Add fixture to help in testing privileged actions
• wordpress: Update fail2ban filter

The following people contributed to the git repository for this release:

• Besnik Bleta
• James Valleroy
• Jiří Podhorecký
• Michael Breidenbach
• nbenedek
• Nikita Epifanov
• Petter Reinholdtsen
• Sunil Mohan Adapa
• Tymofii Lytvynenko

FreedomBox 22.21 has been released and uploaded to Debian unstable. Typically, it will migrate to testing in 2 days, and then can be uploaded to stable-backports.

Changes

• janus: Enable systemd sandboxing
• locale: Update translations for Albanian, Bulgarian, Czech, Danish, Dutch, French, German, Greek, Hungarian, Indonesian, Italian, Latvian, Lithuanian, Norwegian Bokmål, Persian, Polish, Portuguese, Russian, Serbian, Slovenian, Spanish, Swedish, Turkish, Ukrainian
• mediawiki: Add powered by freedombox logo
• wordpress: Add fail2ban filter and jail
• wordpress: Disable readme.html, xmlrpc.php, wp-cron.php

The following people contributed to the git repository for this release:

• 109247019824
• Andrij Mizyk
• Besnik Bleta
• ikmaak
• James Valleroy
• Michael Breidenbach
• nbenedek
• Oğuz Ersen
• Sunil Mohan Adapa