users: api: add descriptions and created timestamps, refactor https://github.com/opnsense/core/pull/11056
final bits and pieces.
The 27.1 release should remove some actions as mentioned in the comments, rest should work as planned, performance might not be the highest in the world, but given the expected request volume that's unlikely an issue.
Services: Kea DHCPv4: Add a simple shared_networks option to subnets (#11115)
Subnets can now select an interface, subnets with the same interface will be put into a shared network.
This means its not decided by the interface IP of the receiving interface anymore, but by a mandatory client-classes membership
which is decided by matching a single DHCP option of the users choice as the gatekeeper to the subnet.
This way, multiple subnets can be served from the same interface.
dashboard: certificate widget: change floor to ceil so that certificates with less than a day left are not expired (#11161)
(cherry picked from commit 3c004aeffb9f077f82ae15a6c31f971f8441f373)
Firewall: Rules - fix decoration magic in searchRuleAction(), partly reverts https://github.com/opnsense/core/commit/c96610594dc770023047441d3657989f6ea9b7ad
Initial the meta fields where added in https://github.com/opnsense/core/pull/9121 because of missing tooltips, but because the $filter_funct_rs method already parsed the data, it was a convenience to place it inside the block (so we only need to loop through the set once).
Given the loop is much cheaper than the filter action added later, we better move this out of there and only return that data to the user for the output he actually receives (after filtering).
(cherry picked from commit ea38a1b1e91ee9a71c1ab5e5a0f401b094ce09a2)
system: invalidate sysctl cache on apply; closes #11109
As mentioned in 41ab7fb9f57 this fixes the glaring issue of the
sysctl cache being stuck while trying to avoid reloads during
normal operation. The performance hit is solely in the apply
path with is already slow, but now at least syncs up with the
system each time which also means there is no more boot race.
Move the cache to the configd end, which is a more flexible
alternative nowadays. We may want to support an indefinite
cache TTL, but that's not for the scope here.
(cherry picked from commit dffa9086c7245265eebd28e119fac8ddbdd8b478)
(cherry picked from commit 50105e67ed9ea901d79442804e573bbaf9d9b03b)
firewall: DNAT - decorate rules after filtering
Decorating only the returned rows avoids unnecessary presentation metadata work.
(cherry picked from commit dfb125bd16d8472bc0314b0b3168b44551c41f25)
