fuss-server (13.0.30) unstable; urgency=medium

  * Rename configure to reconfigure to clarify its recommended use.

 -- Elena Grandi <elena@truelite.it>  Thu, 19 Feb 2026 11:13:18 +0100

fuss-server (13.0.29) unstable; urgency=medium

  [ Paolo Dongilli ]
  * restrictmoderate is not enough; commented out CNAMEs in db.rpz

  [ Elena Grandi ]
  * Allow octonet to be accessed as octonet.{{domain}} as well as
    octofuss.{{domain}}.

  [ Simone Piccardi ]
  * Move glpi internal configs on a first time executed task
  * Added support for print reporting

 -- Simone Piccardi <piccardi@truelite.it>  Wed, 11 Feb 2026 11:35:48 +0100

fuss-server (13.0.28) unstable; urgency=medium

  * Fixed typo slipped in web_proxy role

 -- Simone Piccardi <piccardi@truelite.it>  Mon, 26 Jan 2026 18:20:46 +0100

fuss-server (13.0.27) unstable; urgency=medium

  * Fixed many glpi-server configurations
  * Changed restrict.youtube.com to restrictmoderate.youtube.com in db.rpz
  * Added glpi as CNAME to proxy into internal zone resolution
  * Added octonet as CNAME to proxy into internal zone resolution

 -- Simone Piccardi <piccardi@truelite.it>  Mon, 26 Jan 2026 17:28:28 +0100

fuss-server (13.0.26) unstable; urgency=medium

  * Use wildcard certificates for LDAP & C.
  * Use octonet instead of octofuss (still supported) for Octonet Vhost

 -- Simone Piccardi <piccardi@truelite.it>  Tue, 20 Jan 2026 18:47:08 +0100

fuss-server (13.0.25) unstable; urgency=medium

  * Added role for glpi local server installation
  * Add a script to install glpi on a non-managed machine.

 -- Simone Piccardi <piccardi@truelite.it>  Fri, 16 Jan 2026 15:49:19 +0100

fuss-server (13.0.24) unstable; urgency=medium

  * Increase NFS kernel threads when CPU are available to improve performance
  * Adding conditional GPLI agent configuration depending on zone
  * Adding support to save CUPS print accounting data in a SQLite DB file
  * Separate CUPS configurations in a dedicate role

 -- Simone Piccardi <piccardi@truelite.it>  Fri, 09 Jan 2026 15:35:04 +0100

fuss-server (13.0.23) unstable; urgency=medium

  * Expand information logged in CUPS page_log for print accounting
  * Configure bind to force using safesearch on google (see #987)

 -- Simone Piccardi <piccardi@truelite.it>  Fri, 12 Dec 2025 18:39:40 +0100

fuss-server (13.0.22) unstable; urgency=medium

  [ Simone Piccardi ]
  * Added CSRF configuration for octonet https access
  * Added apt-cacher-ng restart after installation

  [ Elena Grandi ]
  * Fix guessing configuration when there is no guest_network nor the old
    hotspot_network.

 -- Simone Piccardi <piccardi@truelite.it>  Fri, 05 Dec 2025 17:15:15 +0100

fuss-server (13.0.21) unstable; urgency=medium

  * Added script to create missing personal HTML pages directories
  * Added Subject Alternative Names to certificate for use in HTTPs
  * Reconfigured octofuss virtual host to go in https using local certs

 -- Simone Piccardi <piccardi@truelite.it>  Wed, 03 Dec 2025 17:18:44 +0100

fuss-server (13.0.20) unstable; urgency=medium

  * Add missed file in the move to the new rsyslog role

 -- Simone Piccardi <piccardi@truelite.it>  Tue, 25 Nov 2025 15:33:02 +0100

fuss-server (13.0.19) unstable; urgency=medium

  * Put all rsyslog configurations in a dedicated role
  * Really enable six month rotation for auth.log

 -- Simone Piccardi <piccardi@truelite.it>  Tue, 25 Nov 2025 14:18:53 +0100

fuss-server (13.0.18) unstable; urgency=medium

  * Enable rsyslogd to receive log from fuss clients
  * Support for optional enabling of personal html pages

 -- Simone Piccardi <piccardi@truelite.it>  Mon, 24 Nov 2025 15:08:56 +0100

fuss-server (13.0.17) unstable; urgency=medium

  [ Simone Piccardi ]
  * Use LDAP certificates for Apache instead of snakeoil

  [ Elena Grandi ]
  * Leave some addresses out of the DHCP range at the end of the network.
  * Also check that the broadcast address is not in the DHCP range.
  * Allow access to tldr.sh without proxy auth.
  * Delete old kerberos keys when adding a new one.

  [ Paolo Dongilli ]
  * Added files to delete in home-cleanup-weekly

 -- Simone Piccardi <piccardi@truelite.it>  Fri, 14 Nov 2025 14:56:43 +0100

fuss-server (13.0.16) unstable; urgency=medium

  * Serve boot images via http instead of tftp for better performance.

 -- Elena Grandi <elena@truelite.it>  Tue, 30 Sep 2025 10:36:21 +0200

fuss-server (13.0.15) unstable; urgency=medium

  [ Simone Piccardi ]
  * Added script cert-renew.sh to renew LDAP SSL certificates
  * Added default of 5 years for SSL certificates expiration
  * Added montly cron to renew SSL certificate if near to expire
  * Removed daily mail on missing fuss-server upgrade
  * Revision for cron.d setups with variables definition

 -- Elena Grandi <elena@truelite.it>  Tue, 16 Sep 2025 12:04:25 +0200

fuss-server (13.0.14) unstable; urgency=medium

  [ Elena Grandi ]
  * Remove legacy network configuration files.
  * Serve /var/www/fuss-data-conf also as a windows share.
  * Publish the pGina installer for windows machines.
  * Rename hotspot and alien networks to guest and device.
  * Enable unattended upgrades on a selection of packages.
  * Disclaimer for the fuss_zone field.

  [ Simone Piccardi ]
  * Cleanup firewall for WiFi Guest rules
  * Removing unneeded file fuss-captive-portal.conf
  * Make WiFi network names on configs consistent
  * Ensure that /etc/clusters exists

 -- Simone Piccardi <piccardi@truelite.it>  Mon, 01 Sep 2025 18:44:13 +0200

fuss-server (13.0.13) unstable; urgency=medium

  * Revision of squid repository ACL
  * Improved firewall rules for alien network

 -- Simone Piccardi <piccardi@truelite.it>  Thu, 24 Jul 2025 18:35:51 +0200

fuss-server (13.0.12) unstable; urgency=medium

  * Suppress warning about the autodetected python interpreter.
  * Set a default for the alien and hotspot network addresses.
  * Disable the fuss-manager service, since it's not working.
  * Allow unauthenticated access to debian.org via https.

 -- Elena Grandi <elena@truelite.it>  Fri, 11 Jul 2025 13:17:51 +0200

fuss-server (13.0.11) unstable; urgency=medium

  [ Simone Piccardi ]
  * Correction on fuss-default-repo.conf squid config
  * Corrections on squid-fuss.conf for firefox acl

  [ Elena Grandi ]
  * Additional ansible fixes.
  * Force the localnet value to be a network
  * use /usr/sbin/kadmin.local in keytabclean.sh so that there is no need to
    change $PATH.

 -- Elena Grandi <elena@truelite.it>  Thu, 03 Jul 2025 11:10:31 +0200

fuss-server (13.0.10) unstable; urgency=medium

  [ Elena Grandi ]
  * Make sure that fuss-archive-keyring is installed.

  [ Simone Piccardi ]
  * Remove check on lenght for boolean zone_relay_config

 -- Elena Grandi <elena@truelite.it>  Fri, 27 Jun 2025 10:20:38 +0200

fuss-server (13.0.9) unstable; urgency=medium

  [ Elena Grandi ]
  * New fuss-zone values: Mini-BZ and IC-IlariaAlpi-MI
  * Use openssh_keypair and generate ed25519 instead of rsa keys.
  * Fix conditionals for new ansible versions.
  * Updated fuss-fucc to use the ed25519 key.

  [ Simone Piccardi ]
  * Using openssh_keypair module to generate clonezilla SSH keys

 -- Elena Grandi <elena@truelite.it>  Wed, 11 Jun 2025 10:33:03 +0200

fuss-server (13.0.8) unstable; urgency=medium

  [ Simone Piccardi ]
  * Removed pam_mkhomedir configs, unused and unneeded
  * Added 8006 and 10020 to HTTPs allowed ports from squid
  * Added configurations for alien network (when present)

  [ Elena Grandi ]
  * Add support for an alien network.
  * Restructure the fuss-server command interface according to #996.
  * Removed the fuss-server-dependencies metapackage: not really in use.
  * Run etckeeper to autocommit changes after a fuss-server run.
  * If a field is missing in /etc/fuss-server/fuss-server.yaml set it as empty.

 -- Elena Grandi <elena@truelite.it>  Wed, 09 Apr 2025 10:24:14 +0200

fuss-server (13.0.7) unstable; urgency=medium

  [ Elena Grandi ]
  * Store access and proxy logs for up to one year.
  * Also run the freeradius role in the upgrade playbook when captive portal
    is configured.
  * Add the dialup permission for users (needed by e.g. arduino).
  * Update the syntax doc for firewall-allowed-wan-host-services.

  [ Simone Piccardi ]
  * Fix firewall script for allowed_wan_host_services
  * added firewall-default-added-rules for generic rules valid for anyone
  * use lineinfile for defaults in firewall config files
  * Added dates on bash history
  * Firewall role review
  * Added Airwave server access on firewall for ProvBZ zone
  * Use chrony instead of ntpsec (commit a25ee5e) as NTP server

 -- Simone Piccardi <piccardi@truelite.it>  Mon, 24 Mar 2025 16:08:09 +0100

fuss-server (13.0.6) unstable; urgency=medium

  * Revision of reverse DNS zone configurations
  * Added script to remove/find duplicated entries in known_hosts
  * Add configuration for HashKnownHosts no in /etc/ssh_config.d/
  * Issue slapd certificates as suitable for server use

 -- Simone Piccardi <piccardi@truelite.it>  Tue, 04 Feb 2025 13:16:19 +0100

fuss-server (13.0.5) unstable; urgency=medium

  [ Elena Grandi ]
  * Bump PHP version for trixie to 8.4.

  [ Simone Piccardi ]
  * Added wpad on DHCP config for wifi network

 -- Elena Grandi <elena@truelite.it>  Thu, 23 Jan 2025 13:24:14 +0100

fuss-server (13.0.4) unstable; urgency=medium

  [ Paolo ]
  * Add ccze as useful base package.
  * Correct double echo in users-delete.sh.

  [ Simone Piccardi ]
  * Enable SMB3 protocol in Samba config
  * Fix proxy config for ttf-mscorefonts-installer fonts download
  * Remove proxy auth on WiFi (only), we rely on Radius
  * Process cp-common role on upgrade before octofussd

  [ Claudio Cavalli ]
  * Added home-cleanup-weekly script
  * Corrected leases.py script 

 -- Claudio Cavalli <ccavalli@fuss.bz.it>  Fri, 10 Jan 2025 09:34:21 +0100

fuss-server (13.0.3) unstable; urgency=medium

  * Small improvements to the new fuss-server interface.

 -- Elena Grandi <elena@truelite.it>  Mon, 18 Nov 2024 10:25:21 +0100

fuss-server (13.0.2) unstable; urgency=medium

  [ Elena Grandi ]
  * Remove existing kerberos keys when (re-)connecting a client.
  * Use ansible.utils.ipaddr instead of the deprecated ipaddr. close #988
  * Add a new variable fuss_zone to allow custom settings.
  * Allow clients to connect to CUPS using the "proxy" name.
  * Remove the optional gtk configuration interface, no longer working.
  * Install etherwake to turn clients on remotely.
  * Remove role ssl-ca-init (replaced by ssl-init-ca).
  * Cleanup of ssl-init-ca.
  * Remove unused LDAP client config.
  * Remove unused geoplace variable.
  * New interactive interface to configure a fuss-server.

  [ Simone Piccardi ]
  * Remove obsolete scripts
  * Put all added SSH configs on /etc/ssh/sshd_config.d/
  * Revised fuss-dump.sh script
  * Setup a saner .bashrc for root
  * Fix but fuss-client to delete local user
  * Added script to cleanup /var and keytabs
  * Added notification for lack of fuss-server upgrade
  * Comment debug logging on firewall script
  * Add correct PATH to cron.d for keytabclean.sh
  * Fix varclean.sh script to no process empty mailbox

 -- Elena Grandi <elena@truelite.it>  Wed, 13 Nov 2024 10:25:15 +0100

fuss-server (13.0.1) unstable; urgency=medium

  * Update ruamel.yaml syntax.

 -- Elena Grandi <elena@truelite.it>  Wed, 08 May 2024 14:37:17 +0200

fuss-server (13.0.0) unstable; urgency=medium

  * New release targeting trixie.
  * Update ansible syntax.

 -- Elena Grandi <elena@truelite.it>  Tue, 07 May 2024 14:41:29 +0200

fuss-server (12.0.25) unstable; urgency=medium

  [ Marco Marinello ]
  * Add file to load custom iptables rules
  * Check if DNS and DHCP key are equal, otherwise fail

 -- Paolo Dongilli <dongilli@fuss.bz.it>  Fri, 22 Mar 2024 18:59:08 +0100

fuss-server (12.0.24) unstable; urgency=medium

  * Modified prevent duplication in /etc/exports file  

 -- Claudio Cavalli <ccavalli@fuss.bz.it>  Wed, 06 Mar 2024 18:22:29 +0100

fuss-server (12.0.23) unstable; urgency=medium
                                                                                
  [ Claudio Cavalli ]                                                           
  * Added new script to delete PCs from a print queue                           
                                                                                
  [ Paolo Dongilli ]                                                            
  * Added in CLEAN_LIST Singleton* files created by Google Chrome and Chromium

  [ Marco Marinello ]
  * Adequate handling of LM/NT Password lines in freeradius config
  * Add file to load custom iptables rules (#992)

  [ Claudio Cavalli ]
  * Prevent duplication in /etc/exports file

 -- Claudio Cavalli <ccavalli@fuss.bz.it>  Wed, 06 Mar 2024 17:13:25 +0100

fuss-server (12.0.22) unstable; urgency=medium

  [ Paolo Dongilli ]
  * Added url for firmware updates.

  [Marco Marinello]
  * Ask for password confirmation when configuring fuss server
  * Fixed typos

 -- Paolo <dongilli@fuss.bz.it>  Wed, 14 Feb 2024 14:59:35 +0100

fuss-server (12.0.20) unstable; urgency=medium

  * Updated scripts folder

 -- Claudio Cavalli <ccavalli@fuss.bz.it>  Fri, 13 Oct 2023 17:10:12 +0200

fuss-server (12.0.19) unstable; urgency=medium

  * Version bump 

 -- Paolo Dongilli <dongilli@fuss.bz.it>  Fri, 22 Sep 2023 17:07:16 +0200

fuss-server (12.0.18) unstable; urgency=medium

  [ Marco Marinello ]
  * Implement new variables for samba and web proxy overrides

  [ Paolo Dongilli ]
  * Added freeradius parameter to allow MS-CHAPv2 authentication 

 -- Paolo Dongilli <dongilli@fuss.bz.it>  Fri, 22 Sep 2023 16:52:27 +0200

fuss-server (12.0.17) unstable; urgency=medium

  * Set SSH daemon listening addressfamily to inet on non-IPv6 servers
  * Disable clamav-clamonacc.service

 -- Marco Marinello <mmarinello@fuss.bz.it>  Wed, 02 Aug 2023 09:14:50 +0200

fuss-server (12.0.16) unstable; urgency=medium

  [ Marco Marinello ]
  * Save fuss-backup configuration in fuss-dump.

  [ Paolo Dongilli ]
  * Added fuss-backup to be installed by common role.

 -- Paolo Dongilli <dongilli@fuss.bz.it>  Mon, 05 Jun 2023 08:56:13 +0200

fuss-server (12.0.15) unstable; urgency=medium

  [Paolo Dongilli]
  * Added python3-pexpect as dependency.

  [Marco Marinello]
  * Set EASYRSA_BATCH=1 in EasyRSA environment
  * Add whole /opt to files handled by fuss-backup
  * Restore freeradius role
  * Edit isc-dhcp-server configuration to only announce proxy (option 252) on LAN interface
  * Avoid inter-client communications on WLAN net by sending /32 subnet via DHCP
  * Automatically advertise correct subet mask via DHCP when vendor-class-identifier is ArubaInstantAP
  * Revise firewall to log outgoing traffic from WLAN net

 -- Paolo Dongilli <dongilli@fuss.bz.it>  Wed, 31 May 2023 19:22:09 +0200

fuss-server (12.0.14) unstable; urgency=medium

  * Corrected certificate creation which needs interaction.

 -- Paolo Dongilli <dongilli@fuss.bz.it>  Wed, 31 May 2023 18:45:00 +0200

fuss-server (12.0.13) unstable; urgency=medium

  * Configure apt-cacher-ng to tunnel HTTPS connections.

 -- Paolo Dongilli <dongilli@fuss.bz.it>  Mon, 08 May 2023 19:40:49 +0200

fuss-server (12.0.12) unstable; urgency=medium

  * Changed SSH_ORIGINAL_COMMAND.

 -- Paolo Dongilli <dongilli@fuss.bz.it>  Fri, 05 May 2023 17:35:25 +0200

fuss-server (12.0.11) unstable; urgency=medium

  * More corrections for forget_client script
  * Corrections to home-cleanup script

 -- Simone Piccardi <piccardi@truelite.it>  Thu, 23 Mar 2023 12:09:12 +0100

fuss-server (12.0.10) unstable; urgency=medium

  * Reworked forget_client script to fully remove client principals
  * Added ocs-agent-inst playbook to configure OCS agent on a server

 -- Simone Piccardi <piccardi@truelite.it>  Thu, 16 Mar 2023 18:41:43 +0100

fuss-server (12.0.9) unstable; urgency=medium

  * Test release for new wifi network management
  * Removed coova-chilli, we will use just proxy authentication
  * Removed freeradius, now no more needed
  * Added IP configuration for ethernet interface facing wifi
  * Revert slapd to use CRYPT-SHA512 as freeradius is no more needed
  * Add DHCP configuration for wifi interface also
  * Use correct reverse zone for internal network

 -- Simone Piccardi <piccardi@truelite.it>  Mon, 20 Feb 2023 15:30:48 +0100

fuss-server (12.0.8) unstable; urgency=medium

  [ Elena Grandi ]
  * Move all configuration defaults to files in /usr/share/fuss-server, go
    back to using /etc/fuss-server/fuss-server-defaults.yaml as the file for
    custom settings.

  [ Simone Piccardi ]
  * Adding use of WPAD in captive portal, force use of proxy blocking outside
    connections to http and https
  * Corrections to freeradius role to support custom timeouts
  * Setup slapd to use SSHA512 as CRYPT-SHA512 is not supported by radius

 -- Simone Piccardi <piccardi@truelite.it>  Fri, 10 Feb 2023 15:20:16 +0100

fuss-server (12.0.7) unstable; urgency=medium

  * Updated apache2 role for use of php 8.2 

 -- Simone Piccardi <piccardi@truelite.it>  Thu, 26 Jan 2023 09:51:41 +0100

fuss-server (12.0.6) unstable; urgency=medium

  * Updated mpwchange script for of LDAP admin password new management
  * Setup LDAP password to use CRYPT-SHA512 instead of SSHA
  * Removed unneeded LDAP ACL for admin user in new config
  * Adding variable to set RADIUS idle_timeout for captive portal

 -- Simone Piccardi <piccardi@truelite.it>  Wed, 25 Jan 2023 11:15:15 +0100

fuss-server (12.0.5) unstable; urgency=medium

  * Splitted e2guardian config in to a task file to support making it optional
  * Put squid fuss-server specific configs in a separated file
  * Added missing endscript on octofussd role logrotate.d files
  * Moved dhcp-reservations to /etc/dhcp/ to make apparmor happy
  * Copied DDNS TSIG key to /etc/dhcp/ to make apparmor happy

 -- Simone Piccardi <piccardi@truelite.it>  Wed, 18 Jan 2023 14:55:36 +0100

fuss-server (12.0.4) unstable; urgency=medium

  * Correct bug on SSH configs in a separated file 

 -- Simone Piccardi <piccardi@truelite.it>  Thu, 12 Jan 2023 12:14:26 +0100

fuss-server (12.0.3) unstable; urgency=medium

  * Added libpam-pwquality to replace deprecated libpam-cracklib
  * Added tasks to install apt-cacher-ng in role web_proxy
  * Moved to a separate unused file tasks to install squid-deb-proxy
  * Use apt-cacher-ng on fuss-server itself
  * Re-enable fuss-manager install
  * Put fuss-server specific SSH configs in a separated file

 -- Simone Piccardi <piccardi@truelite.it>  Wed, 11 Jan 2023 18:05:39 +0100

fuss-server (12.0.2) unstable; urgency=medium

  * Correction to bind role to work also with cloud-init images

 -- Simone Piccardi <piccardi@truelite.it>  Mon, 09 Jan 2023 16:16:29 +0100

fuss-server (12.0.1) unstable; urgency=medium

  [ Elena Grandi ]
  * Fix only upgrading the captive portal if it is configured.

  [ Simone Piccardi ]
  * Immediatly restart bind9 after configuration when passing to IPv4

 -- Elena Grandi <elena@truelite.it>  Wed, 04 Jan 2023 14:13:35 +0100

fuss-server (12.0.0) unstable; urgency=medium

  [ Elena Grandi ]
  * Explicitely install netcat-traditional instead of netcat (as per the
    buster default).
  * Removed python-ipaddr (in the stdlib as ipaddress from python 3.3)
  * Temporarily removed atop (not in testing).
  * Removed libpam-cracklib, deprecated upstream, and we're managing the
    password changes elsewhere.
  * Removed uses of python-gnome2, no longer available.
  * Removed gosa-schema (not in testing).
  * Removed python-smbpasswd, no longer in Debian.
  * Installed python3-ldap instead of python-ldap.
  * Temporarily disable squid-deb-proxy (not in testing).
  * Updated configuration for ntp to apply to ntpsec.
  * Work around issues with easy-rsa (#1016759 in Debian).

  [ Simone Piccardi ]
  * Providing directly Samba3 schema for slapd
  * Define rootdn/rootpw in slapd.conf avoiding cn=admin on database
  * Adding protocols indications in smb.conf for PDC compatibility
  * Use tsig-keygen to create DDNS key for DHCP and BIND
  * Use php-fpm for webpasswd, removing obsolete mod_php
  * Update dnsreserv.py script for new TSIG key management
  * Temporarily disable fuss-manager role

 -- Simone Piccardi <piccardi@truelite.it>  Tue, 03 Jan 2023 14:44:36 +0100

fuss-server (10.0.48) unstable; urgency=medium

  * By default boot the clients from disk even when they try to boot from the
    network.

 -- Elena Grandi <elena@truelite.it>  Wed, 23 Nov 2022 11:16:24 +0100

fuss-server (10.0.47) unstable; urgency=medium

  * Fix for a wpad regression.

 -- Simone Piccardi <piccardi@truelite.it>  Wed, 26 Oct 2022 13:58:24 +0200

fuss-server (10.0.46) unstable; urgency=medium

  [ Elena Grandi ]
  * Do not use the proxy for the localnet in wpad
  * Rotate logs for octofussd and octofuss-client. refs: #943, #785
  * Compress logs for e2guardian.
  * Added the forget_client script to forget clients on the server.

  [ Simone Piccardi ]
  * added children-startup=3 for squid unix_group external_acl
  * changed permission for dstats.log e2guardian log file

 -- Elena Grandi <elena@truelite.it>  Tue, 25 Oct 2022 10:06:27 +0200

fuss-server (10.0.45) unstable; urgency=medium

  * Also upgrade the captive portal if it is installed. refs: #977
  * Install and configure squid-deb-proxy.

 -- Elena Grandi <elena@truelite.it>  Thu, 30 Jun 2022 11:28:07 +0200

fuss-server (10.0.44) unstable; urgency=medium

  * Step for preparing coova-chilli role to use WPAD

 -- Simone Piccardi <piccardi@truelite.it>  Thu, 09 Jun 2022 10:17:52 +0200

fuss-server (10.0.43) unstable; urgency=medium

  * Revised coova-chilli role for WPAD, available from 1.6+fuss10+1
  * Correct typo in e2guardian configuration (mostly unused)
  * Added mask on smb.conf, see #978
  * Added post-up config for CP interface see #980

 -- Simone Piccardi <piccardi@truelite.it>  Tue, 31 May 2022 10:44:08 +0200

fuss-server (10.0.42) unstable; urgency=medium

  [ Marco Marinello ]
  * Add scripts to create links for roaming profile

  [ Paolo ]
  * Enlarged standard max-block-size (512 B) used by tftpd to 1468 B. This is necessary to overcome problems while network-booting Clonezilla with some specific RealTek network devices (driver r8168) available e.g. in computer model HP ProDesk 405 G6.

 -- Paolo <dongilli@fuss.bz.it>  Wed, 25 May 2022 10:51:05 +0200

fuss-server (10.0.41) testing; urgency=critical

  * Fix "restart chilli" handler

 -- Marco Marinello <mmarinello@fuss.bz.it>  Fri, 21 Jan 2022 09:33:08 +0100

fuss-server (10.0.40) testing; urgency=critical

  * Further mitigations to allow password login via ssh
  * Add root ssh (authorized) keys / known hosts to fuss-dump.sh

 -- Marco Marinello <mmarinello@fuss.bz.it>  Sat, 15 Jan 2022 15:34:04 +0100

fuss-server (10.0.39) unstable; urgency=medium

  * Allow ssh password authentication

 -- Marco Marinello <mmarinello@fuss.bz.it>  Mon, 10 Jan 2022 15:42:34 +0100

fuss-server (10.0.38) unstable; urgency=medium

  * Replaced /etc/exports template with lineinfile
    Avoid breaking compatibility with FUSS LAMP
  * Preferred IPv4 also in squid dns configuration

 -- Marco Marinello <mmarinello@fuss.bz.it>  Thu, 06 Jan 2022 12:45:38 +0100

fuss-server (10.0.37) unstable; urgency=medium

  * Added new repos in the standard proxy exclusion list
  * First implementation of Windows Roaming Profile
  * Set an higher priority to fuss-server.yaml on fuss-server-defaults.yaml:
    now variables can be override via the first file so that the second one can always be updated via apt
  * Network manager is stopped and disabled if present on create
  * Restored copy of freeradius default site with limitation to "wifi" group members
  * Disabled IPv6 per default

 -- Marco Marinello <mmarinello@fuss.bz.it>  Tue, 28 Dec 2021 16:33:32 +0100

fuss-server (10.0.36) unstable; urgency=medium

  * Added netdev to perms group in octofuss.conf. 

 -- Paolo Dongilli <dongilli@fuss.bz.it>  Fri, 08 Oct 2021 18:08:07 +0200

fuss-server (10.0.35) unstable; urgency=medium

  [ Paolo Dongilli ]
  * Corrected wrong text wrapping in file pxelinux-default.

 -- Elena Grandi <elena@truelite.it>  Fri, 30 Jul 2021 11:32:05 +0200

fuss-server (10.0.34) unstable; urgency=medium

  [ Simone Piccardi ]
  * Removed from dumped tar fuss-server-defaults.yaml

  [ Paolo Dongilli ]
  * Corrections to fuss-fucc configuration.

 -- Elena Grandi <elena@truelite.it>  Fri, 30 Jul 2021 10:01:31 +0200

fuss-server (10.0.33) unstable; urgency=medium

  [ Elena Grandi ]
  * Make the time of the home cleanup cron configurable.

  [ Simone Piccardi ]
  * Added name to cron cleanup script to avoid duplication
  * Cleanup of misc role tasks 

 -- Elena Grandi <elena@truelite.it>  Wed, 07 Jul 2021 10:09:48 +0200

fuss-server (10.0.32) unstable; urgency=medium

  [ Simone Piccardi ]
  * Adding cron home cleanup script
  * Added coova-chilli network split (static and dynamic)
  * Reworked coova-chilli restart

 -- Elena Grandi <elena@truelite.it>  Tue, 08 Jun 2021 10:43:11 +0200

fuss-server (10.0.31) unstable; urgency=medium

  [ Simone Piccardi ]
  * Updating man page

  [ Elena Grandi ]
  * build the manpage while building the package.

 -- Elena Grandi <elena@truelite.it>  Thu, 04 Mar 2021 14:11:58 +0100

fuss-server (10.0.30) unstable; urgency=medium

  [ Elena Grandi ]
  * Fix bug #972 when crosschecking hotspot configuration.

 -- Elena Grandi <elena@truelite.it>  Mon, 18 Jan 2021 10:13:09 +0100

fuss-server (10.0.29) unstable; urgency=medium

  [ Simone Piccardi ]
  * Forcing bind to use IPv4 address instead of IPv6
  * Adding detectportal.firefox.com to firefox acl on squid
  * Up to 10240 the file descriptor limit for squid
  * Raise to 8192 the file descriptor limit for e2guardian
  * Raise to 1024 the httpworkers for e2guardian

  [ Elena Grandi ]
  * Setup rotation of /var/log/e2guardian/dstats.log.

 -- Elena Grandi <elena@truelite.it>  Fri, 11 Dec 2020 12:47:31 +0100

fuss-server (10.0.28) unstable; urgency=medium

  [ Simone Piccardi ]
  * Correction for a name error on dump and restore script

 -- Elena Grandi <elena@truelite.it>  Tue, 01 Dec 2020 10:47:25 +0100

fuss-server (10.0.27) unstable; urgency=medium

  [ Simone Piccardi ]
  * Some corrections for the restore script
  * Adding Kerberos keytab to dumped files
  * Adding messages to dump script and changed dump directory
  * Adding an octonet restart (via flush_handlers) before setting password

 -- Elena Grandi <valhalla@debian.org>  Fri, 27 Nov 2020 10:21:34 +0100

fuss-server (10.0.26) unstable; urgency=medium

  * Improvements to the dump/restore scripts

 -- Elena Grandi <elena@truelite.it>  Wed, 18 Nov 2020 14:37:52 +0100

fuss-server (10.0.25) unstable; urgency=medium

  [ Simone Piccardi ]
  * Removed old and unused dansguardian2 role
  * Added initial draft of server dump/restore scripts
  * Added dnsreserv.py script to put reservation names into DNS

  [ Elena Grandi ]
  * Forbid passwords that contain just numbers

 -- Elena Grandi <elena@truelite.it>  Tue, 17 Nov 2020 14:33:59 +0100

fuss-server (10.0.24) unstable; urgency=medium

  * Added bluetooth to perms group in octofuss.conf.

 -- Elena Grandi <elena@truelite.it>  Fri, 25 Sep 2020 13:49:06 +0200

fuss-server (10.0.23) unstable; urgency=medium

  * Moving from nscd to unscd

 -- Simone Piccardi <piccardi@truelite.it>  Fri, 21 Aug 2020 18:47:06 +0200

fuss-server (10.0.22) unstable; urgency=medium

  * Typo fix.

 -- Elena Grandi <elena@truelite.it>  Mon, 08 Jun 2020 11:54:33 +0200

fuss-server (10.0.21) unstable; urgency=medium

  * Remove configuration files from /etc/skel; migrated to fuss-client.
  * Further fixes for the TFTP server.

 -- Elena Grandi <elena@truelite.it>  Mon, 08 Jun 2020 10:36:11 +0200

fuss-server (10.0.20) unstable; urgency=medium

  * Fixes for the TFTP server

 -- Elena Grandi <elena@truelite.it>  Thu, 04 Jun 2020 10:31:38 +0200

fuss-server (10.0.19) unstable; urgency=medium

  * Configure TFTP to also serve files for efi boot.

 -- Elena Grandi <elena@truelite.it>  Thu, 28 May 2020 15:51:41 +0200

fuss-server (10.0.18) unstable; urgency=medium

  * Configure user-dirs-update-gtk in /etc/skel

 -- Elena Grandi <elena@truelite.it>  Wed, 27 May 2020 12:40:26 +0200

fuss-server (10.0.17) unstable; urgency=medium

  * Enable default-ssl vhost

 -- Simone Piccardi <piccardi@truelite.it>  Tue, 19 May 2020 15:29:22 +0200

fuss-server (10.0.16) unstable; urgency=medium

  * Add a custom gnome-keyring-secrets.desktop to /etc/skel

 -- Elena Grandi <elena@truelite.it>  Thu, 14 May 2020 10:54:35 +0200

fuss-server (10.0.15) unstable; urgency=medium

  * Reworked resolv.conf template for cloud-init compatibility
  * Reworked webpasswd to manage also non student password change

 -- Simone Piccardi <piccardi@truelite.it>  Mon, 06 Apr 2020 16:55:33 +0200

fuss-server (10.0.14) unstable; urgency=medium

  * Set the real BASEDN for fuss-manager, not a specific one.
  * Make e2guardian listen on all interfaces (needed for captive portal)
  * Corrections for coova-chilli firewall
  * Use tun0 address for proxy and DNS 
  * added local.conf file for coova-chilli
  * added configurations for wpad.dat and ssl redir

 -- Simone Piccardi <piccardi@truelite.it>  Tue, 31 Mar 2020 12:50:18 +0200

fuss-server (10.0.13) unstable; urgency=medium

  * Missing configuration change and added wrong package name

 -- Simone Piccardi <piccardi@truelite.it>  Mon, 02 Mar 2020 18:02:05 +0100

fuss-server (10.0.12) unstable; urgency=medium

  [ Elena Grandi ]
  * Install missing packages left in TODO
  * Retrieve version from the installed package.

  [ Simone Piccardi ]
  * Correction for e2guardian configuration, force forwarding to squid

 -- Elena Grandi <elena@truelite.it>  Wed, 05 Feb 2020 08:42:56 +0100

fuss-server (10.0.11) unstable; urgency=medium

  * Enable arpwatch on the internal interfaces

 -- Elena Grandi <elena@truelite.it>  Tue, 04 Feb 2020 11:45:41 +0100

fuss-server (10.0.10) unstable; urgency=medium

  * Added script chguserpwd.sh to change password to an user

 -- Simone Piccardi <piccardi@truelite.it>  Mon, 27 Jan 2020 15:22:38 +0100

fuss-server (10.0.9) unstable; urgency=medium

  * Fixes to pxelinux configuration

 -- Elena Grandi <elena@truelite.it>  Wed, 22 Jan 2020 14:28:27 +0100

fuss-server (10.0.8) unstable; urgency=medium

  * Remove old role “pxe-server” superseded by fuss-fucc.
  * Fixes to the fuss-fucc role.

 -- Elena Grandi <elena@truelite.it>  Fri, 03 Jan 2020 12:51:47 +0100

fuss-server (10.0.7) unstable; urgency=medium

  * Configure xscreensaver in /etc/skel
  * Install fuss-fucc and configure the server for it

 -- Elena Grandi <elena@truelite.it>  Mon, 23 Dec 2019 14:29:49 +0100

fuss-server (10.0.6) unstable; urgency=medium

  * Write fuss-manager configuration in the right location

 -- Elena Grandi <elena@truelite.it>  Thu, 05 Dec 2019 09:30:47 +0100

fuss-server (10.0.5) unstable; urgency=medium

  * Bugfixes for python3
  * Fixes to the fuss-manager configuration

 -- Elena Grandi <elena@truelite.it>  Wed, 04 Dec 2019 14:34:41 +0100

fuss-server (10.0.4) unstable; urgency=medium

  [ Simone Piccardi ]
  * porting of captive portal completed
  * captive portal refactoring: no more tinyproxy
  * captive portal refactoring: using a single e2guardian instance

  [ Elena Grandi ]
  * Updated Standards-Version
  * Use python3 for fuss-server
  * Install fuss-manager

 -- Elena Grandi <elena@truelite.it>  Fri, 22 Nov 2019 14:20:33 +0100

fuss-server (10.0.3) unstable; urgency=medium

  [ Elena Grandi ]
  * Update packaging: debhelper-compat, Standards-Version etc.

  [ Simone Piccardi ]
  * added script to propagate user network permission
  * correction to kdc.conf to avoid kdc using TCP port 88 used by kadmin
  * explicit enable of octofussd unit

 -- Elena Grandi <elena@truelite.it>  Fri, 30 Aug 2019 14:36:54 +0200

fuss-server (10.0.2) unstable; urgency=medium

  [ Elena Grandi ]
  * Create basic LDAP groups.

 -- Simone Piccardi <piccardi@truelite.it>  Fri, 30 Aug 2019 13:51:36 +0200

fuss-server (10.0.1) unstable; urgency=medium

  [ Simone Piccardi ]
  * Update proxy rules

 -- Elena Grandi <elena@truelite.it>  Tue, 27 Aug 2019 12:00:53 +0200

fuss-server (10.0.0) unstable; urgency=medium

  [ Simone Piccardi ]
  * Update to buster

 -- Elena Grandi <elena@truelite.it>  Mon, 19 Aug 2019 12:34:38 +0200

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog fuss-server`.
