feat: auto-generate self-signed certs, hoover modal processing guard, refactor backends/proxy pages

2026-07-13 14:30:35 +00:00
parent 05524f3756
commit 2e49dec633
34 changed files with 790 additions and 411 deletions
@@ -691,6 +691,10 @@ def set_masquerade(_request: Any, body: dict[str, Any] | None) -> dict[str, Any]
    enable = body.get("enable")
    if not zone or enable is None:
        raise ValueError("'zone' and 'enable' (bool) are required")
+    if zone == "public" and enable:
+        raise ValueError(
+            "Masquerade (NAT) is not supported on the public zone — enable it on 'internal' or 'vpn' instead"
+        )
    action = "--add-masquerade" if enable else "--remove-masquerade"
    run(["firewall-cmd", f"--zone={zone}", action, "--permanent"], sudo=True)
    _reload()