<feed xmlns='http://www.w3.org/2005/Atom'>
<title>luci/applications/luci-app-nut/root, branch master</title>
<subtitle>Lua Configuration Interface (mirror)</subtitle>
<id>https://git.openwrt.org/project/luci/atom?h=master</id>
<link rel='self' href='https://git.openwrt.org/project/luci/atom?h=master'/>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/project/luci/'/>
<updated>2026-09-05T15:14:56Z</updated>
<entry>
<title>luci-app-nut: add/update SSL configuration for full support</title>
<updated>2026-09-05T15:14:56Z</updated>
<author>
<name>Daniel F. Dickinson</name>
</author>
<published>2026-07-05T04:47:20Z</published>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/project/luci/commit/?id=33195648741311ca36d951034b470318b0373776'/>
<id>urn:sha1:33195648741311ca36d951034b470318b0373776</id>
<content type='text'>
Both the configuration for NSS-based SSL and the configuration for
OpenSSL-based SSL were incomplete, so add missing options, and enhance
existing settings.

Additionally, the method of checking for being compiled with SSL changes
with https://github.com/openwrt/packages/pull/29893. We now have a file
/usr/share/nut/ssl_backend which contains either 'nss', 'openssl', or
'none'. We use this to show the applicable configuration options in the
UI when it is available. For compatibility with previous version of the
nut package, we keep the 'ldd' method of determining availability of
SSL, for now.

That same pull request adds server-side CERTPATH and so on handling in
https://github.com/danielfdickinson/packages/blob/c0ec3741ce64b8613b8324575f907342303563fc/net/nut/files/nut-server-config.sh.functions#L94-L107

Finally, SSL settings are security-sensitive so move them to the 'admin'
NUT screens to reduce visibility, and to prepare for a future commit to
the NUT package which will separate the UCI configs for admin and
non-privileged users.

Signed-off-by: Daniel F. Dickinson &lt;dfdpublic@wildtechgarden.ca&gt;
</content>
</entry>
<entry>
<title>luci-app-nut: only allow admin write access and limit read access</title>
<updated>2026-07-11T17:22:27Z</updated>
<author>
<name>Daniel F. Dickinson</name>
</author>
<published>2026-07-04T01:31:20Z</published>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/project/luci/commit/?id=5cf20c5741dc34eea0faaf7324ef3751b05fa1f3'/>
<id>urn:sha1:5cf20c5741dc34eea0faaf7324ef3751b05fa1f3</id>
<content type='text'>
In order to mitigate GHSA-4f29-2ff2-6hqf: 'authenticated luci-app-nut
configuration user can execute NUT monitor notify commands as root', we
write access to the nut UCI configuration only for admin user, and also
limit some additional read access for non-admin users.

Remove unneeded permissions in luci-app-nut* ACLs

Signed-off-by: Daniel F. Dickinson &lt;dfdpublic@wildtechgarden.ca&gt;
</content>
</entry>
<entry>
<title>luci-app-nut: update to work with drivers in libexec</title>
<updated>2026-06-23T13:30:48Z</updated>
<author>
<name>Daniel F. Dickinson</name>
</author>
<published>2026-05-10T05:37:05Z</published>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/project/luci/commit/?id=eca60f74efa12b1f395717641d6ba023a11ea3c0'/>
<id>urn:sha1:eca60f74efa12b1f395717641d6ba023a11ea3c0</id>
<content type='text'>
Briefly, due to recent CI changes, it is was longer possible to have
NUT drivers in /lib/nut as they are not libraries. This motivated
moving them to /usr/libexec/nut (as they are executable binaries not
libraries), which is the right thing to do even though the CI now
allows using /lib/nut for the drivers.

openwrt/packages#29592 makes that change for the nut package.

We update luci-app-nut so that it can work with either location. As a
side benefit, this means this commit does not need to wait for the
above PR to land in packages before adding this commit.

Signed-off-by: Daniel F. Dickinson &lt;dfdpublic@wildtechgarden.ca&gt;
</content>
</entry>
<entry>
<title>luci-app-nut: Convert to JS</title>
<updated>2024-10-09T22:42:40Z</updated>
<author>
<name>Paul Donald</name>
</author>
<published>2024-10-09T13:27:46Z</published>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/project/luci/commit/?id=84c04c3707b992ba8aa1c66ee876d46eaeeb47ef'/>
<id>urn:sha1:84c04c3707b992ba8aa1c66ee876d46eaeeb47ef</id>
<content type='text'>
Tested on 23.05.5

Signed-off-by: Paul Donald &lt;newtwen+github@gmail.com&gt;
</content>
</entry>
<entry>
<title>luci-app-nut: Remove old no-op uci-defaults script</title>
<updated>2024-04-07T12:16:24Z</updated>
<author>
<name>Hannu Nyman</name>
</author>
<published>2024-04-07T12:16:24Z</published>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/project/luci/commit/?id=983047a505d57d72b52e7a291f9a36b4e8c41794'/>
<id>urn:sha1:983047a505d57d72b52e7a291f9a36b4e8c41794</id>
<content type='text'>
Remove old uci-defaults script that was supposed to be run
if nut was older than 2.4.7-8. Nut has been at 2.7.4-9 or newer
since 2018.

(Ps. The script had faulty logic: the version check never matched.)

Fixes #6966

Signed-off-by: Hannu Nyman &lt;hannu.nyman@iki.fi&gt;
</content>
</entry>
<entry>
<title>luci-app-nut: use filesystem dependencies for configuration files</title>
<updated>2022-10-15T12:18:57Z</updated>
<author>
<name>Jo-Philipp Wich</name>
</author>
<published>2022-10-15T12:18:57Z</published>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/project/luci/commit/?id=bfc0fcfe6e97b1b39317f42d96debf3286c42696'/>
<id>urn:sha1:bfc0fcfe6e97b1b39317f42d96debf3286c42696</id>
<content type='text'>
Don't use uci dependencies for nut related config files as the nut packages
ship with completely commented out uci files. Such files do not satisfy the
uci menu dependencies as those expect at least one section within the file.

To solve this issue, use a regular file dependency on /etc/config/nut_*
instead.

Supersedes: #5964
Signed-off-by: Jo-Philipp Wich &lt;jo@mein.io&gt;
</content>
</entry>
<entry>
<title>treewide: add ACL annotations to menu entries</title>
<updated>2020-04-17T10:40:31Z</updated>
<author>
<name>Jo-Philipp Wich</name>
</author>
<published>2020-04-17T10:14:50Z</published>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/project/luci/commit/?id=8f34e105c059575a9c75e43468345e3651210b81'/>
<id>urn:sha1:8f34e105c059575a9c75e43468345e3651210b81</id>
<content type='text'>
Signed-off-by: Jo-Philipp Wich &lt;jo@mein.io&gt;
</content>
</entry>
<entry>
<title>treewide: stage ACL rules for legacy applications</title>
<updated>2020-04-10T21:21:35Z</updated>
<author>
<name>Jo-Philipp Wich</name>
</author>
<published>2020-04-10T21:21:35Z</published>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/project/luci/commit/?id=43e872871a85dce70509c3c97c10e9c61788c378'/>
<id>urn:sha1:43e872871a85dce70509c3c97c10e9c61788c378</id>
<content type='text'>
Fixes: #3866
Signed-off-by: Jo-Philipp Wich &lt;jo@mein.io&gt;
</content>
</entry>
<entry>
<title>luci.mk: move /tmp/luci-indexcache remove to package postinst script</title>
<updated>2020-02-14T08:20:33Z</updated>
<author>
<name>Florian Eckert</name>
</author>
<published>2020-02-13T14:11:16Z</published>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/project/luci/commit/?id=1f8a3c04178e21f45f3908fd476ec3b3dad73c69'/>
<id>urn:sha1:1f8a3c04178e21f45f3908fd476ec3b3dad73c69</id>
<content type='text'>
Signed-off-by: Florian Eckert &lt;fe@dev.tdt.de&gt;
</content>
</entry>
<entry>
<title>treewide: convert simple Lua controllers to declarative JSON</title>
<updated>2020-02-05T15:52:58Z</updated>
<author>
<name>Jo-Philipp Wich</name>
</author>
<published>2020-02-05T15:51:19Z</published>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/project/luci/commit/?id=625abbfdbe94dada023ebd8ea69778173d1a7351'/>
<id>urn:sha1:625abbfdbe94dada023ebd8ea69778173d1a7351</id>
<content type='text'>
Signed-off-by: Jo-Philipp Wich &lt;jo@mein.io&gt;
</content>
</entry>
</feed>
