Hello,

On 23 Aug 2023, at 15:43, Peter Müller peter.mueller@ipfire.org wrote:

Doing so avoids situations where a service is started without being configured to do so, thus reducing the potential for confusion and exposure of services not intended to be exposed by the user.

Signed-off-by: Peter Müller peter.mueller@ipfire.org

config/rootfiles/core/179/update.sh | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-)

diff --git a/config/rootfiles/core/179/update.sh b/config/rootfiles/core/179/update.sh index 636792d82..df89d702e 100644 --- a/config/rootfiles/core/179/update.sh +++ b/config/rootfiles/core/179/update.sh @@ -86,9 +86,13 @@ migrate_extrahd

# Start services /etc/init.d/udev restart -/etc/init.d/squid restart -/usr/local/bin/openvpnctrl -s -/usr/local/bin/openvpnctrl -sn2n +if [ -f /var/ipfire/proxy/enable ]; then

• /etc/init.d/squid restart

+fi +if grep -q "ENABLED=on" /var/ipfire/ovpn/settings; then

• /usr/local/bin/openvpnctrl -s
• /usr/local/bin/openvpnctrl -sn2n

+fi

This is slightly incorrect, because you are checking if the RW service is running. That is not required to use a N2N connection.

I merged this patch and moved the -sn2n command back.

Best, -Michael

# This update needs a reboot... touch /var/run/need_reboot -- 2.35.3