www/linkwarden: New port
Linkwarden is a self-hosted, collaborative bookmark manager that collects,
organizes and preserves webpages. Every saved link is archived as a
screenshot, a PDF, a single file HTML copy and a readable article, so the
content stays available even when the original page is gone.
Co-authored-by: Jochen Neumeister <joneum@FreeBSD.org>
databases/mysql{80,84,97}-server: Add rc script and user for MySQL Router
All three server ports build and install MySQL Router, but it was never
usable out of the box: there is no mysqlrouter user, no rc script, no
configuration directory, and no log, runtime or data directory. The only
trace of an integration was etc/logrotate.d/mysqlrouter, whose
"create 600 mysqlrouter mysqlrouter" refers to an account that no port
creates, so logrotate(8) skipped that entry with an error and exited
non-zero.
Upstream names that account itself: scripts/CMakeLists.txt sets
MYSQLROUTER_USER to "mysqlrouter", the built-in help of mysqlrouter
suggests --user=mysqlrouter, and the systemd unit shipped for Linux runs
the service under it.
Add the user and group, an rc script, and a configuration sample in
etc/mysqlrouter. mysqlrouter does not detach itself, so it runs under
daemon(8), which also writes the PID file that the postrotate script in
etc/logrotate.d/mysqlrouter expects. The runtime, log and data
directories
are created by the rc script, and only when they are missing, so a host
that already runs MySQL Router under a different account keeps working
untouched. This matches the init script in upstream's own packaging.
The service is off by default.
PR: 253245
Sponsored by: Netzkommune GmbH
net/freeipa-server: Add New Port
FreeIPA is an integrated identity and authentication solution: an LDAP
directory (389 Directory Server), a Kerberos KDC (MIT krb5), a Dogtag
PKI certificate authority and a web UI/CLI, combined into a single managed
domain, the Free Software counterpart to Active Directory.
This port provides the FreeIPA server on FreeBSD together with the
FreeBSD-specific integration that upstream (Linux/systemd oriented) does
not ship: an ipaplatform "freebsd" backend, rc.d service scripts, and
the glue required to run the whole stack against the ports MIT Kerberos
(security/krb5).
WWW: https://www.freeipa.org/
Sponsored by: Netzkommune GmbH
www/immich: Add New Port
High performance self-hosted photo and video management solution.
This port contains the Immich server including the bundled web
frontend, built natively with node22/pnpm against the system
libvips. Requires PostgreSQL with the pgvector and vchord
extensions and a Redis-compatible cache such as valkey. Smart
search, duplicate detection and facial recognition additionally
require the machine-learning service from www/immich-ml.
WWW: https://immich.app/
Sponsored by: Netzkommune GmbH
sysutils/bhyvemgrd: New port: privileged helper daemon for bhyvemgr
Bhyvemgrd exposes a JSON-based IPC interface over a UNIX domain socket,
allowing the bhyvemgr client to request privileged operations required for
bhyve virtual machines, execute system-level tasks, monitor VM process states,
and receive asynchronous state notifications.
textproc/languagetool: New port
LanguageTool is an open-source proofreading tool for English, Italian,
French, German, Spanish, Portuguese, Dutch, and many other languages.
It detects grammar, style, and spelling errors that a simple spell
checker cannot find, such as subject-verb agreement problems, incorrect
articles, and commonly confused words.
Both command-line and GUI checkers are included, as well as an embedded
HTTP server to expose the LanguageTool API locally. The server allows
clients such as Emacs (via flymake-languagetool or langtool.el), Neovim,
and browser extensions to request proofreading without sending text to
third-party services.
Sponsored by: The FreeBSD Foundation
net/389-ds-base: Fix instance creation
Add a dedicated dirsrv user and group.
Use FreeBSD-compatible paths for runtime files, databases, backups,
LDIF files, and logs. Create the persistent database and log parent
directories with suitable permissions.
Detect getpeereid(3) during configuration and fix peer credential
handling for LDAPI SASL EXTERNAL authentication.
Sponsored by: Netzkommune GmbH
UIDs/GIDs: remove duplicated entries
Fix duplicated autopulse and ldap entries introduced while
adding the bunkerweb user and group.
Reported by: osa
Sponsored by: Netzkommune GmbH
www/bunkerweb: add new port
BunkerWeb is an open-source next-generation web application firewall
(WAF) and security platform designed to protect and manage web services.
It provides integrated security features such as request filtering,
rate limiting, TLS management, GeoIP support and a web management
interface.
As this is a newly introduced port, users are encouraged to validate
their deployment before using it in production environments.
WWW: https://github.com/bunkerity/bunkerweb
Sponsored by: Netzkommune GmbH
www/tt-rss: Run ttrssd as ttrssd user and move data to /var
- Create a ttrssd user and group to run ttrssd.
- Move log file to /var/log/tt-rss directorie.
- Move pid files to /var/run/tt-rss directorie.
- Move on disk data to /var/tt-rss/.
PR: 282245
Approved by: maintainer
Differential Revision: https://reviews.freebsd.org/D49128
www/evcc: add version 0.304.1
Software to enhance charging of electric vehicle.
evcc can be used as an energy management system.
See here for more details:
https://evcc.io/
www/zoraxy: Add new port
www/zoraxy: Add Zoraxy reverse proxy
Zoraxy is a general-purpose HTTP reverse proxy and forwarding tool
written in Go. It provides a web-based interface for managing
reverse proxy rules, routing, and access control.
Features:
- Web-based management interface
- Reverse proxy and forwarding capabilities
- Plugin support
- Lightweight and self-contained (no external web server required)
WWW: https://github.com/tobychui/zoraxy
Sponsored by: Netzkommune GmbH
www/garage: Update to 2.2.0
* Take MAINTAINERSHIP.
* Pet portclippy/portfmt.
* Run garage as a unprivileged user.
* Create a sample configuration file to use /var/db/garage as default
meta and data directory.
* Add DOCS option.
* Fix pkg-message formatting.
ChangeLog: https://git.deuxfleurs.fr/Deuxfleurs/garage/releases/tag/v2.2.0
PR: 293011
Reported by: yds@Necessitu.de
Approved by: ashish@ (email)
www/vinyl09: New port
Vinyl Cache, formerly known as Varnish Cache, is a web application accelerator
also known as a caching HTTP reverse proxy. You install it in front of any
server that speaks HTTP and configure it to cache the contents. Vinyl Cache is
really, really fast. It typically speeds up delivery by a factor of 300-1000x,
depending on your architecture.
Documentation and additional information about vinyl is available on
https://vinyl-cache.org/docs/index.html
Technical questions about vinyl and this release should be addressed
to <vinyl-dev@vinyl-cache.org>
net-p2p/autopulse: New port autopulse v1.5.0 - Scan MultiMedia library on
webhook triggers
An automated scanning tool that bridges media organizers
such as Sonarr and Radarr with media servers
such as Plex and Jellyfin.
The goal is to provide a simple, efficient, and reliable way to update
your media library reducing full library scans.
A key feature is the ability to provide a hash of the file to the API,
which will then wait for the file to match that hash before updating targets.
Another benefit over autoscan is support for PostgreSQL as backend.
WWW: https://github.com/dan-online/autopulse
PR: 282175
sysutils/mtail: New Port
mtail is a tool for extracting metrics from application logs to be
exported into a timeseries database or timeseries calculator for
alerting and dashboarding.
It fills a monitoring niche by being the glue between applications that
do not export their own internal state (other than via logs) and
existing monitoring systems, such that system operators do not need to
patch those applications to instrument them or writing custom extraction
code for every such application.
security/opkssh: New port: Tool which enables SSH to be used with OpenID Connect
opkssh is a tool which enables ssh to be used with OpenID Connect
allowing SSH access to be managed via identities like alice@example.com
instead of long-lived SSH keys. It does not replace SSH, but instead
generates SSH public keys containing PK Tokens and configures sshd
to verify them. These PK Tokens contain standard OpenID Connect ID
Tokens. This protocol builds on the OpenPubkey which adds user
public keys to OpenID Connect without breaking compatibility with
existing OpenID Provider.
mail/stalwart: New port: Stalwart Mail Server
Stalwart Mail Server is an open-source mail server solution with
JMAP, IMAP4, POP3, and SMTP support and a wide range of modern
features. It is written in Rust and designed to be secure, fast,
robust and scalable.
WWW: https://stalw.art/
PR: 286326
Submitted by: Orville Song <orville@anislet.dev>
www/tinyauth: Update to 4.0.0
* Use /var/db/tinyauth as the user's home directory, since Tinyauth is
now a stateful application and needs to store the database somewhere.
ChangeLog: https://github.com/steveiliop56/tinyauth/releases/tag/v4.0.0
dns/cascade: New port
Cascade is a purpose-built, standalone DNSSEC signer, shaped by the
real-world demands of TLD operators. People for whom safety, stability
and speed aren’t features — they’re the foundation.
WWW: https://github.com/NLnetLabs/cascade
archivers/unpackerr: New port
Unpackerr is an application that runs on Windows, macOS, Linux, FreeBSD
and in Docker. You can use it to watch a download folder and extract new
items. The more common use is to watch starr apps (radarr, sonarr,
readarr, lidarr, whisparr) and extract items they download. It can do
both, at the same time even.
WWW: https://unpackerr.zip
deskutils/readur: New port: Quick, painless, intuitive OCR platform
Readur is a powerful, modern document management system built with
Rust and React. Readur provides intelligent document processing
with OCR capabilities, full-text search, and a beautiful web interface
designed for 2026 tech standards.
Approved by: acm (mentor)
finance/homebox: New port: Inventory and organization system built for the Home
User
HomeBox is the inventory and organization system built for the Home
User! With a focus on simplicity and ease of use, Homebox is the
perfect solution for your home inventory, organization, and management
needs. While developing this project, I've tried to keep the following
principles in mind:
- Simple - Homebox is designed to be simple and easy to use. No
complicated setup or configuration required. Use either a single
docker container, or deploy yourself by compiling the binary for
your platform of choice.
- Blazingly Fast - Homebox is written in Go, which makes it extremely
fast and requires minimal resources to deploy. In general, idle
memory usage is less than 50MB for the whole container.
- Portable - Homebox is designed to be portable and run on anywhere.
We use SQLite and an embedded Web UI to make it easy to deploy,
use, and backup.
Approved by: acm (mentor)
sysutils/py-healthchecks: New port: Open-source cron job and background task
monitoring service
Healthchecks is a cron job monitoring service. It listens for HTTP
requests and email messages ("pings") from your cron jobs and
scheduled tasks ("checks"). When a ping does not arrive on time,
Healthchecks sends out alerts.
Healthchecks comes with a web dashboard, API, 25+ integrations for
delivering notifications, monthly email reports, WebAuthn 2FA
support, team management features: projects, team members, read-only
access.
Approved by: acm (mentor)
lang/erlang: enhance epmd security
- Add dedicated beam user (UID/GID 372) for non-root execution
- Use daemon(8) for epmd process supervision and auto-restart
This addresses security concerns with epmd running as root by
providing privilege separation and automatic restart capability.
PR: 213001
Reviewed by: dch
Differential Revision: https://reviews.freebsd.org/D50874
www/tinyauth: New port: Simplest way to protect your apps with a login screen
Tinyauth is a simple authentication middleware that adds a simple
login screen or OAuth with Google, Github and any provider to all
of your docker apps. It supports all the popular proxies like
Traefik, Nginx and Caddy.
Approved by: acm (mentor)
www/pocket-id: New port: OIDC provider that allows users to authenticate with
their passkeys
Pocket ID is a simple OIDC provider that allows users to authenticate
with their passkeys to your services.
The goal of Pocket ID is to be a simple and easy-to-use. There are
other self-hosted OIDC providers like Keycloak or ORY Hydra but
they are often too complex for simple use cases.
Additionally, what makes Pocket ID special is that it only supports
passkey authentication, which means you don't need a password. Some
people might not like this idea at first, but I believe passkeys
are the future, and once you try them, you'll love them. For example,
you can now use a physical Yubikey to sign in to all your self-hosted
services easily and securely
Approved by: acm (mentor)
www/filebrowser: New port: Web File Browser
File Browser provides a file managing interface within a specified
directory and it can be used to upload, delete, preview, rename and
edit your files. It allows the creation of multiple users and each
user can have its own directory. It can be used as a standalone
app.
Approved by: acm (mentor)
mail/py-tlsrpt-reporter: new port
tlsrpt-reporter is a TLSRPT reporting service for SMTP TLS Reporting
as defined in RFC 8460. It receives TLSRPT datagrams from a MTA,
collects them, creates a report in conformance with the TLSRPT
Reporting Schema and finally delivers the report either via SMTP,
indirectly by submitting it to a local MTA which ultimately will be
responsible for delivering the report, or directly via HTTP POST.
PR: 285012
Reported by: Yusuf Yaman
databases/neo4j: Fix run-time
- Assign UID and GIT to neo4j (both 369)
- Instruct neo4j to run as neo4j user
- Move config directory to PREFIX/etc/neo4j
- Move certificates base directory to PREFIX/etc/neo4j/certificates
- Move data directory to /var/db/neo4j/data
- Move metrics directory to /var/db/neo4j/metrics
- Move import directory to /var/db/neo4j/import
- Fix rc.d script accordingly
Partially based on information from [1] and [2]
PR: 268526 [1]
PR: 228532 [2]
Sponsored by: resulta.sk
security/rekor: New port
Software Supply Chain Transparency Log
Rekor's goals are to provide an immutable tamper resistant ledger of
metadata generated within a software projects supply chain. Rekor will
enable software maintainers and build systems to record signed metadata
to an immutable record. Other parties can then query said metadata to
enable them to make informed decisions on trust and non-repudiation of
an object's lifecycle.
The Rekor project provides a restful API based server for validation and
a transparency log for storage. A CLI application is available to make
and verify entries, query the transparency log for inclusion proof,
integrity verification of the transparency log or retrieval of entries
by either public key or artifact.
Rekor fulfils the signature transparency role of sigstore's software
signing infrastructure. However, Rekor can be run on its own and is
designed to be extensible to working with different manifest schemas and
PKI tooling.
WWW: https://www.sigstore.dev/
security/timestamp-authority: New port
Service for issuing RFC 3161 timestamps
Trusted timestamping is a process that has been around for some time. It
provides a timestamp record of when a document was created or modified.
A timestamp authority creates signed timestamps using public key
infrastructure. The operator of the timestamp authority must secure the
signing key material to prevent unauthorized timestamp signing.
A timestamp authority should also verify its own clock. We provide a
configuration to periodically check the current time against well-known
NTP sources.
WWW: https://sigstore.dev/
security/trillian: New port
General transparency
Trillian is an implementation of the concepts described in the
Verifiable Data Structures white paper, which in turn is an extension
and generalisation of the ideas which underpin Certificate Transparency.
Trillian implements a Merkle tree whose contents are served from a data
storage layer, to allow scalability to extremely large trees. On top of
this Merkle tree, Trillian provides the following:
- An append-only Log mode, analogous to the original Certificate
Transparency logs. In this mode, the Merkle tree is effectively filled
up from the left, giving a dense Merkle tree.
Note that Trillian requires particular applications to provide their own
personalities on top of the core transparent data store functionality.
WWW: https://github.com/google/trillian
security/sshesame: new port
An easy to set up and use SSH honeypot, a fake SSH server that lets anyone in
and logs their activity. sshesame accepts and logs SSH connections and activity
(channels, requests), without doing anything on the host (e.g. executing
commands, making network requests).
net-p2p/{renterd,hostd,walletd}: new ports
renterd is an advanced Sia renter engineered by the Sia
Foundation. Designed to cater to both casual users seeking
straightforward data storage and developers requiring a robust API for
building apps on Sia.
hostd is an advanced Sia host solution created by the Sia Foundation,
designed to enhance the experience for storage providers within the
Sia network. Tailored for both individual and large-scale storage
providers, hostd boasts a user-friendly interface and a robust API,
empowering providers to efficiently manage their storage resources and
revenue. hostd incorporates an embedded web-UI, simplifying deployment
and enabling remote management capabilities, ensuring a smooth user
experience across a diverse range of devices.
walletd is the flagship Sia wallet, suitable for miners, exchanges,
and everyday hodlers. Its client-server architecture gives you the
flexibility to access your funds from anywhere, on any device, without
compromising the security of your private keys. The server is
agnostic, so you can derive those keys from a 12-word seed phrase, a
legacy (siad) 28-word phrase, a Ledger hardware wallet, or another
preferred method. Like other Foundation node software, walletd ships
with a slick embedded UI, but developers can easily build headless
integrations leveraging its powerful JSON API. Whether you're using a
single address or millions, walletd scales to your needs.
WWW: https://sia.tech/software/hostd
WWW: https://sia.tech/software/renterd
WWW: https://sia.tech/software/walletd
PR: 285367
www/opengist: Build fixes and improvements
un-break arm64 by installing both esbuild arches
- stop lang/go from fetching newer toolchains during build
- pet port with portfmt & portclippy, fix pkg-plist
run under non-root user by default
- add UID, GID for opengist user
- amend rc script to support user
PR: 285179
Reviewed by: fox
Sponsored by: SkunkWerks, GmbH
devel/gitea-act_runner: Refactor
- Add act_runner user and group
- Install sample config
- Add rc script
Thanks to Anish for the pointers.
Sponsored by: The FreeBSD Foundation
games/qwfwd: New port: QuakeWorld proxy
QWFWD is a QuakeWorld proxy.
Typically used to improve routing to the server, namely to reduce ping.
https://github.com/QW-Group/qwfwd
multimedia/mediamtx: New Port: Ready-to-use RTSP / RTMP / LL-HLS / WebRTC server
and proxy
Remove rpicamera support, patch obtained from Alpine Linux
MediaMTX is a ready-to-use and zero-dependency real-time media server and
media proxy that allows to publish, read, proxy, record and playback video and
audio streams. It supports multiple protocols such as SRT, WebRTC, RTSP, RTMP,
HLS, UDP/MPEG-TS and also able to record and serve media on demand.
WWW: https://github.com/bluenviron/mediamtx
Source:
https://gitlab.alpinelinux.org/alpine/aports/-/merge_requests/79233
security/tinc-devel: security/tinc: add user and group tinc
The tinc daemon is now setgid
The daemon can drop privileges with:
sysrc tincd_flags=--user=tinc
Reported by: Poul-Henning Kamp
filesystems/davfs2: new port had been added (+)
This is a FUSE file system driver that allows mounting a
WebDAV server as a local file system, like a disk drive.
PR: 267518 (heavily modified)
Submitted by: Ali Abdallah (current main developer)
comms/zigbee2mqtt: Add new port
zigbee2mqtt allows you to use your Zigbee devices without the vendor's
bridge or gateway.
It bridges events and allows you to control your Zigbee devices via
MQTT. In this way you can integrate your Zigbee devices with whatever
smart home infrastructure you are using.
net-im/snac: new port
Snac is a simple, minimalistic ActivityPub instance.
It features:
- Lightweight, minimal dependencies
- Extensive support of ActivityPub operations.
- Multiuser
- Mastodon API support, so Mastodon-compatible apps can be used
- Simple but effective web interface
- Easily-accessed MUTE button
- Tested interoperability with related software
- No database needed
- Totally JavaScript-free
PR: 278385
Reviewed by: bofh
audio/supysonic: New port: Python implementation of the Subsonic server API
Supysonic is a Python implementation of the Subsonic server API.
Current supported features are:
* browsing (by folders or tags)
* streaming of various audio files formats
* transcoding
* user or random playlists
* cover art
* starred tracks/albums and ratings
* lastfm scrobbling
* Jukebox mode
WWW: https://supysonic.readthedocs.io/
PR: 270751
net/gotify-server: create new port version 2.5.0 of gotify-server
A simple selfhosted message service with nice UI and a client for
Android.
Thanks a lot for help I received here:
https://github.com/gotify/server/issues/199
security/openbao: New port: open source, community-driven fork of Vault
OpenBao exists to provide a software solution to manage, store, and
distribute sensitive data including secrets, certificates, and keys.
The OpenBao community intends to provide this software under an
OSI-approved open-source license, led by a community run under open
governance principles.
https://openbao.orghttps://github.com/openbao/openbao
PR: 280619
www/elog: Fast and lightweight, customizable weblog
The Electronic Logbook (ELOG) provides a Web interface to manage notes.
Its general purpose is to make it easy for people to put and access
information online; in the form of short, time stamped text messages
with optional HTML markup for presentation, and optional file
attachments.
WWW: https://elog.psi.ch/elog/
PR: 274813
irc/ngircd: Update 26.1 → 27, change maintainership
Changelog:
https://github.com/ngircd/ngircd/releases/tag/rel-27
Change maintainership:
* all commits from 2017 are "maintainer timeout" or "portmgr blanket":
https://cgit.freebsd.org/ports/log/irc/ngircdhttps://www.freshports.org/irc/ngircd/
* fgsch@lodoss.net - no user in bugzilla with this email
Port changes:
* Add a dedicated system user/group pair for better daemon permissions
* Move PLIST files into pkg-plist for better conditional installation
of files
* Fix installation of documentation files to %%DOCSDIR%%
* Put configuration file (and sample) into %%ETCDIR%%
* Run a --configtest before starting daemon for sanity check
* Replace PORTVERSION with DISTVERSION
* Remove GNU_CONFIGURE_MANPREFIX
* Sort options to make happy portclippy
PR: 278919
mail/hydroxide: Fix rc.d script
- hydroxide does want to store some files and users were running
"hydroxide auth" with normal user. Now, hydroxide user has a home
directory, and it does store them there now.
- Change upstream.
PR: 280886
mail/hydroxide: Add rc.d script to run as daemon and minor changes to Makefile
Changes:
* Add rc.d script to run as daemon because users had to run the port
somehow in the background on terminal.
* Minor changes to Makefile.
PR: 280754
net/spoofdpi: New port: Simple and fast anti-censorship tool
SpoofDPI is a simple and fast anti-censorship tool written in Go that
bypasses Deep Packet Inspection (DPI) by splitting HTTPS requests
into chunks and sending the first byte separately.
It can be run as daemon via rc.d script spoofdpi.
https://github.com/xvzc/SpoofDPI
PR: 280591
net-mgmt/victoria-logs: Add VictoriaLogs 0.27.1
VictoriaLogs is a fast and easy-to-use, open source logs solution. It can accept
logs from popular log collectors. It provides easy yet powerful query language
with full-text search capabilities across all the log fields via LogsQL query
language and supports fast full-text search over high-cardinality log fields.
UIDs,GIDs: claim 648 for net/xrdp{,-devel}
Upcoming xrdp update will run daemon as non-root user.
648 (= 3*3*8*9) comes from port 3389 for remote desktop protocol.
net-mgmt/promxy: Add new port
Promxy is a prometheus proxy that makes many shards of prometheus appear
as a single API endpoint to the user. This significantly simplifies
operations and use of prometheus at scale (when you have more than one
prometheus host). Promxy delivers this unified access endpoint without
requiring any sidecars, custom-builds, or other changes to your
prometheus infrastructure.
PR: 269195
databases/foundationdb*: split, update to 7.1.59 & 7.3.41
Update FoundationDB to both main supported versions, and also split
between server and client builds for convenience.
PR: 277262
Reviewed by: dch
Sponsored by: SkunkWerks, GmbH
net-mgmt/net-snmp: Let snmpd run as a non-root user
- Compile without /dev/kmem access. This requires a small patch which
opens libkvm in a dummy mode which uses sysctls to implement most of
its interfaces rather than /dev/kmem access. This way we can drop the
dependency on /dev/kmem without rewriting existing code.
- Add a new snmpd user. Configure snmpd to drop privileges once it's
finished initialization.
- Remove the JAIL option. Now that snmpd avoids using /dev/kmem,
there's no need to have a special mode for running snmpd in jails.
The patch has been proposed upstream here:
https://sourceforge.net/p/net-snmp/mailman/net-snmp-coders/thread/ZjEwNV5BiTOQ-Adi%40nuc/#msg58766857
Approved by: zi
Sponsored by: Klara, Inc.
Sponsored by: Stormshield
Differential Revision: https://reviews.freebsd.org/D45031
net/benthos: Add new port
Benthos solves common data engineering tasks such as transformations,
integrations, and multiplexing with declarative and unit testable
configuration. This allows you to easily and incrementally adapt your data
pipelines as requirements change, letting you focus on the more exciting stuff.
Benthos is able to glue a wide range of sources and sinks together and hook
into a variety of databases, caches, HTTP APIs, lambdas and more, enabling you
to seamlessly drop it into your existing infrastructure.
databases/percona-orchestrator: new port!
Orchestrator is a replication topology manager for MySQL.
Features include:
* The topology and status of the replication tree is automatically detected
and monitored.
* Either a GUI, CLI or API can be used to check the status and perform
operations.
* Supports automatic failover of the master, and the replication tree can
be fixed when servers in the tree fail - either manually or automatically.
* It is not dependent on any specific version or flavor of MySQL (MySQL,
Percona Server, MariaDB or even MaxScale binlog servers).
* Orchestrator supports many different types of topologies, from a single
master -> slave to complex multi-layered replication trees consisting of
hundreds of servers.
* Orchestrator can make topology changes and will do so based on the state
at that moment; it does not require a configuration to be defined with what
corresponds to the database topology.
* The GUI is not only there to report the status - one of the cooler things
you can do is change replication just by doing a drag and drop in the web
interface (of course you can do this and much more through the CLI and API
as well).
net/keycloak: update to 23.0.6
- Update to 23.0.6
- Add keycloak user and group
- Add pkg-message
- Add support for development(start-dev) and production (start) mode at rc
script
- Export JAVA_HOME from rc script
- Add keycloak build function into rc script
PR: 275658276859
Approved by: maintainer timeout (2 weeks)
security/certspotter: Add new port
Cert Spotter is a Certificate Transparency log monitor from SSLMate
that alerts you when an SSL/TLS certificate is issued for one of your
domains. Cert Spotter is easier to use than other open source CT
monitors, since it does not require a database. It's also more robust,
since it uses a special certificate parser that ensures it won't miss
certificates.
