3,299
edits
Changes
From SME Server
Jump to navigationJump to search→SME Server 11.X
Line 94:
Line 94:
* moving service name from httpd-e-smith to httpd
−* moving httpd user from www to the standard apache
* Git (Marco Hess)
−** Move the development of SME Server and SME Contribs to a more modern version controls system like Git instead of CVS.
−** Some work/investigation has already be done https://github.com/smeserver a few years ago.
−* Minimise Required Reboots (Marco Hess)
−** It would be nice if a contrib package on install (or upgrade) could flag that the full blown signal-event post-upgrade and signal-event reboot is not required.
−
== SME Server 11.X ==
== SME Server 11.X ==
−SME Server 11.0 is likely to be based on Rocky 8.X
+SME Server 11.0 is to be based on Rocky 8.X
Line 115:
Line 115:
* change DNS stack to bind
* change DNS stack to bind
* change Qmail to Postfix keeping qpsmtpd
* change Qmail to Postfix keeping qpsmtpd
−* rethink the apache auth to make it pluggable (eg: allow adding a geoip filter)
* rethink the apache auth to make it pluggable (eg: allow adding a geoip filter)
* Support IEEE 802.1Q, which will allow companies to create VLAN (separate business critical LAN from Guest LAN)
* Support IEEE 802.1Q, which will allow companies to create VLAN (separate business critical LAN from Guest LAN)
Line 122:
Line 120:
== SME Server 12.x ==
== SME Server 12.x ==
+* rewrite backup system
* IPv6
* IPv6
* new firewall using Shorewall
* new firewall using Shorewall
* multiple network interface
* multiple network interface
* rethink the backup management
* rethink the backup management
+* moving service name from httpd-e-smith to httpd
+* moving httpd user from www to the standard apache
+* oauth2
+* MFA
== Nice to have ==
== Nice to have ==
Line 131:
Line 134:
* IPV6 (Ian)
* IPV6 (Ian)
** support IPv6. See [[bugzilla:6393|Bug 6393]]
** support IPv6. See [[bugzilla:6393|Bug 6393]]
−* DNS Block - [[Pihole]] available on SME10
* DNS Block - [[Pihole]] available on SME10
** Allow more control on what DNS enters in your LAN to protect from malware and adds
** Allow more control on what DNS enters in your LAN to protect from malware and adds
** See also https://wiki.koozali.org/DNS_Block and https://wiki.koozali.org/DNS_Stack
** See also https://wiki.koozali.org/DNS_Block and https://wiki.koozali.org/DNS_Stack
−* NFS server (David Harper)
* NFS server (David Harper)
Line 142:
Line 143:
** Would allow for "roaming profile" like setups for clients like Ubuntu and CentOS Desktop
** Would allow for "roaming profile" like setups for clients like Ubuntu and CentOS Desktop
** David, would you be able to work on a smeserver-nfs as a contrib and I would support change to the core where needed to make this work. (Ian)
** David, would you be able to work on a smeserver-nfs as a contrib and I would support change to the core where needed to make this work. (Ian)
−* High Availability (HF)
* High Availability (HF)
Line 149:
Line 149:
** Includes real-time replication of data between the 2 nodes (LAN/WAN Raid1 based on DRBD)
** Includes real-time replication of data between the 2 nodes (LAN/WAN Raid1 based on DRBD)
** Proof of concept available
** Proof of concept available
−* Re-ordered server configuration pages (HF)
* Re-ordered server configuration pages (HF)
** Start with server role, then continue with existing order (POC available)
** Start with server role, then continue with existing order (POC available)
** Add new server role 'Hosted virtual server'. If only 1 NIC present, a second dummy will be used, otherwise usual server/gateway mode (POC available)
** Add new server role 'Hosted virtual server'. If only 1 NIC present, a second dummy will be used, otherwise usual server/gateway mode (POC available)
−* Delegation - into core (larieu)
* Delegation - into core (larieu)
Line 168:
Line 165:
*** to be able to delegate ibay administration
*** to be able to delegate ibay administration
*** to be able to delegate access to some panels
*** to be able to delegate access to some panels
−* chpst (wellsi)
* chpst (wellsi)
−** Make a decision on chpst vs softlimit (runit rather than daemontools). See [[bugzilla:509|Bug 509]]
+** Make a decision on chpst vs softlimit (runit rather than daemontools). See [[bugzilla:509|Bug 509]]<br />
−* Add SNMP monitoring in default installation (Simon van Sleuwen)
* Add SNMP monitoring in default installation (Simon van Sleuwen)
Line 191:
Line 176:
** 2 LAN - one for "normal" LAN and one for guest / wireless access - or VLAN support - multiple LAN
** 2 LAN - one for "normal" LAN and one for guest / wireless access - or VLAN support - multiple LAN
*** Nice to have 2 LAN, but to have VLAN on a single physical network we need to supporting IEEE 802.1Q. See my request in SME Server 11.X
*** Nice to have 2 LAN, but to have VLAN on a single physical network we need to supporting IEEE 802.1Q. See my request in SME Server 11.X
−* ARM processor support (Mike)
* ARM processor support (Mike)
Line 198:
Line 182:
** For more information on JMAP see http://jmap.io
** For more information on JMAP see http://jmap.io
* Wireguard VPN *in kernel since 3/20 (Seems to be a very professionally scripted new and opensource VPN solution that is a big improvement over OpenVPN and it is also much easier to setup/integrate)
* Wireguard VPN *in kernel since 3/20 (Seems to be a very professionally scripted new and opensource VPN solution that is a big improvement over OpenVPN and it is also much easier to setup/integrate)
−* journaled quota (larieu)
* journaled quota (larieu)
