freeradius: add configurable LDAP group membership mode (#5430)
Adds `group_membership_mode` to the LDAP settings (model, form, template):
- `attribute` (default): `membership_attribute = 'memberOf'` — existing
behaviour, compatible with POSIX groups and flat LDAP structures.
- `filter`: `membership_filter` with LDAP_MATCHING_RULE_IN_CHAIN OID
(1.2.840.113556.1.4.1941) — resolves nested group membership against
Active Directory and Samba 4 AD DC in a single LDAP query.
The `memberOf` attribute reflects only direct memberships, breaking
`Ldap-Group ==` checks (e.g. VLAN assignment) when groups are nested.
The OID-based filter traverses the full membership chain server-side.
Default is `attribute`; existing configurations are unaffected.
Tested with Samba 4.24 AD DC and FreeRADIUS 3.2 (os-freeradius plugin).
net/cloudflared: add edge IP version setting, move advanced options behind toggle (#5512)
* net/cloudflared: add edge IP version setting, move advanced options
Add edge_ip_version dropdown (Auto/IPv4/IPv6) passed via
TUNNEL_EDGE_IP_VERSION env var.
Move protocol, post-quantum, and QUIC PMTU discovery fields behind
the advanced toggle, leaving Enable and Tunnel Token on the main screen.
Co-Authored-By: Claude Sonnet 4.6 <noreply at anthropic.com>
* net/cloudflared: bump model version, refactor rc.conf.d env assembly
Bump Cloudflared.xml model version to 1.0.1.
Refactor rc.conf.d to build cloudflared_env via a Jinja2 namespace,
replacing the inline conditional string with per-variable set blocks
that are easier to read and extend.
[19 lines not shown]
net/frr: Some options are in the rc file, some in zebra. Distinguish whats still possible to be changed in general options by hiding zebra relevant options
dns/bind: add SVCB record type to BIND record model (#5508)
Adds SVCB to the Record model OptionValues so RFC 9460/9461 SVCB records
(e.g. _dns DDR records for encrypted-DNS discovery) can be created via the
plugin GUI/API. BIND 9.18+ supports SVCB natively; the plugin validation
rejected the type before it reached named. One-line change, complements the
HTTPS record type (#5425).
