Partial config wipe after update 26.1.3->26.1.4

Started by Crane_Train, May 07, 2026, 12:49:00 AM

Previous topic - Next topic
Ran firmware update this morning and had 3 VPN tunnel configs, interfaces, gateways, fw policies, associated aliases and gw groups wiped from my system on reboot. Snapshot is gone, last backup is dated 22/03/2026.

Absolutely no idea how/why this would happen, but not too happy about it.

Anyone else had a similar experience and managed a recovery somehow or should I just slug through the setups again? How can I be certain this won't happen again?


System: Configuration: History would shed some light on when and where these parts were removed (by whom).



Cheers,
Franco
"AI has absolutely reduced the cost of creating technical debt." -- ChatGPT

Quote from: franco on May 07, 2026, 10:45:17 AMSystem: Configuration: History would shed some light on when and where these parts were removed (by whom).



Cheers,
Franco

Hey, thanks for the reply.

Unfortunately it doesn't.

Context:
I had initially set up WAN traffic through a single gateway group with double failover (x2 ProtonVPN tunnels x1 Mullvad) and then progressed that to x3 gateway groups each with one failover tunnel for a total of 6 tunnels. I had aliases built out to define traffic flows with PBR fw rules depending on usecase for clean separation of concerns.

History shows absolutely none of this configuration post-single gateway group. No creation of wireguard peers, interfaces, gateways, aliases, Unbound DNS changes etc. etc., let alone their deletion.


Someone reset to an earlier snapshot? Or wrong machine? Both of these things happen more often than not so I better ask.


Cheers,
Franco
"AI has absolutely reduced the cost of creating technical debt." -- ChatGPT

I'm the only admin and there is only one device running OPNsense under my control, which rules both of those out unfortunately!

So strange that there are no logs or anything anywhere, mind...

Just going to bite the bullet and rebuild the config changes and be a bit stricter with my backup cadence.