www/sqlpage: Add new port for SQLPage
SQLPage is an Open-source low-code web application server. It allows
you to create full websites writing only simple database queries.
databases/keydb: New port!
KeyDB is a high performance fork of Redis with a focus on multithreading,
memory efficiency, and high throughput. In addition to performance
improvements, KeyDB offers features such as Active Replication, FLASH
Storage and Subkey Expires. KeyDB has a MVCC architecture that allows you
to execute queries such as KEYS and SCAN without blocking the database and
degrading performance.
KeyDB maintains full compatibility with the Redis protocol, modules, and
scripts. This includes the atomicity guarantees for scripts and transactions.
Because KeyDB keeps in sync with Redis development KeyDB is a superset of
Redis functionality, making KeyDB a drop in replacement for existing Redis
deployments.
On the same hardware KeyDB can achieve significantly higher throughput than
Redis. Active-Replication simplifies hot-spare failover allowing you to
easily distribute writes over replicas and use simple TCP based load
balancing/failover. KeyDB's higher performance allows you to do more on less
hardware which reduces operation costs and complexity.
WWW: https://docs.keydb.dev/
sysutils/loki: add promtail rc.d script
Promtail is a log reader and it can be run as a service to gather the
logs to be sent to remote loki server. For nodes that need to send logs
only, promtail service and configuration file is needed
PR: 274194, 274473
Signed-off-by: Christopher Beppler <freebsd@funzi.org>
Approved by: Chirstopher Beppler <freebsd@funzi.org> (maintainer)
www/galene: new port
Galène (or Galene) is a videoconference server (an “SFU”) that is easy to
deploy and that requires moderate server resources. It was originally designed
for lectures, conferences and student tutorials, but is also useful for
traditional meetings.
Galène has been used in production at two major universities (Université de
Paris and Sorbonne Université) for lectures, practicals, seminars, and for
staff meetings. It has been used to host two conferences (SOCS'2020 and
JFLA'2021).
mail/py-dkimpy-milter: New port
This is a DKIM signing and verification milter. It has been tested
with both Postfix and Sendmail.
Of note: this supports RFC8463 ED25519-SHA256 DKIM signatures
net-p2p/namecoin: Update to 24.0
A few minor changes made to submitted patch:
* Switch PORTVERSION to DISTVERSION
* Use USES= localbase for UPNP option
* Disable autodetection of sqlite when WALLET option is selected
* Fix plist for net-p2p/namecoin-utils
Changelog: https://github.com/namecoin/namecoin-core/releases/tag/nc24.0
PR: 270753
net-mgmt/netdisco: Update to 2.061001
While here, fix install instructions.
New features:
* ACLs portctl_no and portctl_only for limiting port control targets
* Config setting portctl_nowaps to prevent port control on WAP ports
* Feature to gather SNMP Walk, use as Pseudo Device, and Browse Objects
* Added SSHCollector::Platform::ASAContext
* new addpseudodevice worker action
* option to display vlan names instead of numbers in device ports
* renumber device option in the device details web page
* add option in device ports sidebar to hide vlan 1002-1005
* Group Cisco subinterfaces in Device Ports view (like LAG)
* add FortiOS SSH collector implementation from @jpvelders
* make Port VLAN mismatch respect setting hiding VLAN 1002-1005
* make VLAN hiding and VLAN names configurable options and move to port
properties sidebar section
* new discover_routed_neighbors setting to skip adding next-hops for discovery
* new setting macsuck_no_deviceport to ignore nodes on a device port
* implement ignore_deviceports and hide_deviceports settings
* implement multi tenancy with tenant_databases setting
* add worker to collect various PortAccessEntity (NAC) attributes
* API Endpoints to submit arpnip and macsuck results
* custom fields on devices and ports in the web from config
* sidebar support for custom reports with bind params; add show_sidebar setting
* support for FQDN node search while domain_suffix is set; add fallback to
IPv4 host lookup search
* implement ignore_layers, force_macsuck, force_arpnip config settings
Many bug fixes and enhancements too, see
https://metacpan.org/dist/App-Netdisco/changes for full list
PR: 271329
Reported by: einar@isnic.is
security/tlsc: Update to 1.3
Also add a dedicated user/group and use that by default instead of
nobody.
Changes: https://github.com/Zirias/tlsc/releases/tag/v1.3
Approved by: tcberner (mentor, implicit)
net-im/teleirc: New port
TeleIRC is a Go implementation of a Telegram <=> IRC bridge. TeleIRC
works with any IRC channel and Telegram group. It bridges messages
between a Telegram group and an IRC channel.
PR: 265916
Approved by: Jesús Daniel Colmenares Oviedo (maintainer)
irc/py-sopel: New port
Sopel is a simple, lightweight, open source, easy-to-use IRC Utility
bot, written in Python. It's designed to be easy to use, run and
extend.
PR: 265807
Approved by: Jesús Daniel Colmenares Oviedo (maintainer)
sysutils/tuptime: installation upgrade with _tuptime UID/GID
Create an unprivileged user/group for their execution.
Also, add the cron file and update the rc.d script.
PR: 270433
Reported by: r@rfmoz.eu
Approved by: jeremy@smart-serv.net (maintainer)
multimedia/jellyfin: Add port
Jellyfin is the volunteer-built media solution that
puts you in control of your media.
Stream to any device from your own server, with no strings attached.
Your media, your server, your way.
WWW: https://jellyfin.org/
Maintainer becomes submitter. Already maintainer of other ports.
Port installs binaries downloaded from a website without any
local compilation. The submitter has done the same for numerous
previous ports due to difficulties in locally building .NET based
ports. See PR for some discussion.
PR: 269754
Approved by: flo (mentor)
Differential Revision: https://reviews.freebsd.org/D38861
net/xapsd: New port: Apple push notifications daemon for dovecot
Apple push notification daemon for dovecot.
Together with dovecot-xaps-plugin, this will enable push email
for iOS devices that talk to your dovecot IMAP server.
WWW: https://github.com/freswa/dovecot-xaps-daemon
Submitter becomes maintainer. Is already maintainer of other ports.
PR: 269748
Approved by: flo (mentor)
Differential Revision: https://reviews.freebsd.org/D38779
net-mgmt/icingaweb2-module-director: Enable Icinga Director Background Daemon
Deploys in the director don't work/finish since the last update. The
reason is, that the update didn't enable the Icinga Director Background
Daemon, that has been mandatory since 1.7.0, see
https://github.com/Icinga/icingaweb2-module-director/blob/master/doc/75-Background-Daemon.md
PR: 269227
Reported by: flo
Sponsored by: Netzkommune GmbH
sysutils/nut*: Use a dedicated UID and GID
To reduce conflicts with other packages and improve security, avoid
using the uucp UID and GID. This avoids potential conflicts with the
net/freebsd-uucp port.
Users who wish to continue using the uucp user and group may add
NUT_USER=uucp and NUT_GROUP=uucp to their make.conf.
PR: 268960
Reported by: delphij
MFH: 2023Q1
net/lavinmq: new port AMQP-compliant message broker
High performance AMQP-0.9.1 compatible, written in Crystal.
Differential Revision: https://reviews.freebsd.org/D31410
sysutils/nomad: Change home of nomad user to /nonexistent
The port's default datadir is /var/tmp/nomad, which also happens to be
its user's home directory. Therefore installing the package always
creates a default datadir with permissions too lose to actually start
the service.
PR: 265230
Reported by: Michael Gmelin <grembo@FreeBSD.org>
databases/pgagroal: New Port
pgagroal is a high-performance protocol-native connection pool for
PostgreSQL. Which features High performance, Connection pool, Limit
connections for users and databases, Prefill support, Remove idle
connections, Connection validation, Enable / disable database access,
Graceful / fast shutdown, Prometheus support, Grafana 8 dashboard,
Remote management, Authentication query support, Failover support,
Transport Layer Security (TLS) v1.2+ support, Daemon support, User
vault, Lightweight connection pooler for PostgreSQL.
WWW: https://agroal.github.io/pgagroal/
Sponsored by: Bounce Experts
sysutils/loki: Add new port
Loki is a horizontally-scalable, highly-available, multi-tenant log
aggregation system inspired by Prometheus. It is designed to be very
cost effective and easy to operate. It does not index the contents of
the logs, but rather a set of labels for each log stream.
WWW: https://github.com/grafana/loki
PR: 256030
net-im/gotosocial: new port
With GoToSocial, you can keep in touch with your friends, post, read,
and share images and articles. All without being tracked or advertised
to!
GoToSocial provides a lightweight, customizable, and safety-focused
entryway into the Fediverse, and is comparable to (but distinct from)
existing projects such as Mastodon, Pleroma, Friendica, and PixelFed.
WWW: https://docs.gotosocial.org/en/latest/
Add buildbot user and group
devel/py-buildbot and devel/py-buildbot-worker requires a user buildbot
which is used in the rc script to drop privileges to unfortunately the
respective users and group do not exist.
PR: 248233
Reported by: ari@ish.com.au
net/nats-server: improve rc.d
- Add nats to UIDs and GIDs
- Add extra commands for logrotate and 'lame duck mode'.
From the docs:
In production we recommend that a server is shut down with "lame duck mode"
as a graceful way to slowly evict clients. With large deployments this
mitigates the "thundering herd" situation that will place CPU pressure on
servers as TLS enabled clients reconnect.
After entering lame duck mode, the server will stop accepting new
connections, wait for a 10 second grace period, then begin to evict clients
over a period of time configurable by the configuration option. This
period defaults to 2 minutes.
UIDs: add glewlywed user and group
This does not unbreak the port, but brings it somemwhat nearer to
building.
The dependency devel/hoel still contains an incorrect USES line for
the MARIADB option, which causes a build failure, if enabled.
But the www/glewlywed port needs hoel with mariadb support, since
it unconditionally calls mariadb functions.
(It contains the unsupported USES=mariadb, while USES=mysql:105m
would be a working albeit inconvenient definition, since it includes
a fixed database version number, although any recent version would
do.)
I have informed the maintainer of the port a few days ago, but did
not get any response back. Due to multiple issues with the glewlywed
port (and its dependency devel/hoel), it cannot have been built from
the committed files before these were added to the ports tree.
Since the UID and GID additions will be required in any case and my
local patches to add them have lead to conflicts with other ports
taking the logically next ids, I'm taking liberty to commit those
UID and GID entries, now.
www/onlyoffice-documentserver: Add new port
ONLYOFFICE Document Server is an online office suite comprising viewers and
editors for texts, spreadsheets and presentations, fully compatible with
Office Open XML formats: .docx, .xlsx, .pptx and enabling collaborative editing
in real time.
WWW: https://www.onlyoffice.com/
Reviewed by: bapt
Differential Revision: https://reviews.freebsd.org/D33923
net-p2p/prowlarr: Add new port
Prowlarr is an indexer manager/proxy built on the popular *arr .net/reactjs
base stack to integrate with your various PVR apps.
Prowlarr supports management of both Torrent Trackers and Usenet Indexers.
It integrates seamlessly with Lidarr, Mylar3, Radarr, Readarr, and Sonarr
offering complete management of your indexers with no per app Indexer setup
required (we do it all).
net-p2p/autoscan: Add new port
Autoscan replaces the default Plex and Emby behaviour for picking up
file changes on the file system.
Autoscan integrates with Sonarr, Radarr, Lidarr and Google Drive to
fetch changes in near real-time without relying on the file system.
PR: 258873
multimedia/neolink: RTSP bridge for Neolink cameras [NEW]
Neolink allows you to use NVR software such as Shinobi or Blue Iris to
receive video from Reolink cameras, avoiding the need to purchase
proprietary NVR units.
WWW: https://github.com/thirtythreeforty/neolink
textproc/opensearch: New port
OpenSearch is a fork of Elasticsearch which aims to be a Distributed,
RESTful, Search Engine built on top of Apache Lucene.
WWW: http://opensearch.org
PR: 257558
With hat: opensearch
net-im/conduit: New port: Matrix server implemented in Rust
An efficient Matrix homeserver that's easy to set up
and just works. You can install it on a mini-computer
like the Raspberry Pi to host Matrix for your family,
friends or company.
WWW: https://conduit.rs/
net/krill: add new port
Krill is a free, open source RPKI Certificate Authority that lets you
run delegated RPKI under one or multiple Regional Internet Registries
(RIRs). Through its built-in publication server, Krill can publish Route
Origin Authorisations (ROAs) on your own servers or with a third party.
WWW: https://www.nlnetlabs.nl/projects/rpki/krill/
PR: 257355
net-im/biboumi: new port: XMPP gateway to IRC
Biboumi is a Free, Libre and Open Source XMPP gateway that connects to
IRC servers and translates between the two protocols. Its goal is to
let XMPP users take part in IRC discussions, using their favourite XMPP
client.
WWW: https://biboumi.louiz.org/
PR: 250705
net-p2p/bazarr*: new ports for bazarr and bazarr-devel
Bazarr is a companion application to Sonarr and Radarr that manages and
downloads subtitles based on your requirements.
- net-p2p/bazarr uses latest stable release
- net-p2p/bazarr-devel uses beta builds (created automatically from
development branch once a day, if there were changes to that branch)
- Ports dont have bundled dependencies unbundled (yet).
Talked this over with upstream, they are not going to unbundle
for support-workload avoidance and ease-of-install they get from the
fact they bundle all dependencies on specific versions.
- Reserve UID and GID for bazarr daemon process
- Add to net-p2p/Makefile
- The plists are auto-generated as in multimedia/tautulli.
Website: https://www.bazarr.media
Changelog: https://github.com/morpheus65535/bazarr/releases
Bugtracker: https://github.com/morpheus65535/bazarr/issues
PR: 243967
ftp/sftpgo: SFTP, FTP/S, and WebDAV server [NEW]
Fully featured and highly configurable SFTP server with optional FTP/S
and WebDAV support, written in Go. Several storage backends are
supported: local filesystem, encrypted local filesystem,
S3 (compatible) Object Storage, Google Cloud Storage,
Azure Blob Storage, SFTP.
WWW: https://github.com/drakkan/sftpgo
Approved by: koobs
Differential Revision: https://reviews.freebsd.org/D30661
www/pydio-cells: Fix build and overhaul
Summary:
Pydio cells uses a custom version of packr to embed the static
resources into the `cells` binary. Previously, the embedding process
was not peformed, resulting in a non-functional binary. When trying
to use the app, user will just get "404 Not Found" error instead of
a web page.
To fix this - before the build `gmake generate` has to be performed
in the WRKSRC, and a special custom version of packr v1
(devel/pydio-packr) has to be used.
Other changes:
- DOCS option was removed, as the README.md file didn't really provide
any useful information for the port's users
- Generation of bash and zsh completion files was added
- App version is now provided during the build process (previously 0.1.0
would be indicated instead of the real version)
- Indicate failure to build on i386
- Create separate user/group for running the daemon, as recommended by
the administrator's manual
- Add rc script
- Add pkg-message with configuration instructions
- Add more patches fixing bugs and adapting the code for FreeBSD
No UPDATING is required, as the port was not functional previously
Reviewed by: koobs
MFH: No (port isn't in any of the quarterly branches yet)
Differential Revision: https://reviews.freebsd.org/D30323
net-mgmt/unifi-poller: update to 2.1.0
- add user and group unifi-poller that daemon runs as
- tidy up DOCSDIR locations
PR: 254482
Submitted by: anthony AT found-it DOT net (maintainer)
comms/usbmuxd: Add optional devd(8) configuration file to start and stop the
daemon as devices are attached and detached, respectively. (On by default)
Add GIDs/UIDs for usbmuxd to facilitate use with devd(8).
Patch configure.ac instead of configure since we are using autoreconf. Merge
post-patch target into this new patch for a cleaner Makefile.
net/seaweedfs: new port - distributed object store
SeaweedFS is a distributed object store and file system to store and
serve billions of files fast! Its object store has O(1) disk seek,
and transparent cloud integration. The Filer supports cross-cluster
active-active replication, POSIX, S3 API, encryption, Erasure Coding for
warm storage, FUSE mount, Hadoop, and WebDAV.
WWW: https://github.com/chrislusf/seaweedfs/wiki
Sponsored by: SkunkWerks, GmbH
Differential Revision: https://reviews.freebsd.org/D27391
New Port: net-im/dendrite
Dendrite is a second-generation Matrix homeserver written in Go. It
intends to provide an efficient, reliable and scalable alternative to
Synapse:
o Efficient: A small memory footprint with better baseline
performance than an out-of-the-box Synapse.
o Reliable: Implements the Matrix specification as written, using
the same test suite as Synapse as well as a brand new Go test suite.
o Scalable: can run on multiple machines and eventually scale to
massive homeserver deployments.
WWW: https://github.com/matrix-org/dendrite
net/gerbera: New port, UPnP/DLNA media server
Gerbera is a DLNA compatible media server and a continuation of MediaTomb
It allows you to browse and playback your media via your network, supports
metadata extraction, media thumbnail support and generation, media transcoding
and offers a Web UI.
WWW: https://gerbera.io/
PR: 248475
Submitted by: daniel.engberg.lists@pyret.net
Reviewed by: meena
dns/powerdns: Adjust dependencies for tools
- Adjust dependencies (IXFRTOOL needs yaml-cpp)
- Explicitly disable decaf and sodium in case they are not enabled.
Otherwise they default to "auto" and if detected in the system,
stage-qa reports unresolved dependency.
- Drop user privilges for worker processes to pdns/pdns (UID is new; GUID
already exists)
- Always depend on protobuf. I do the same for dnsdist and powerdns-recursor
- Actually do something with the pdns_flags variable in the rc-script instead of
just mentioning it in the comment block
- Bump PORTREVISION
PR: 250961
Submitted by: Juraj Lutter, Ralf van der Enden
Approved by: Ralf van der Enden (maintainer)
dns/encrypted-dns-server: create port
An easy to install, high-performance, zero maintenance proxy to run an
encrypted DNS server.
WWW: https://github.com/jedisct1/encrypted-dns-server
PR: 250195
Submitted by: Felix Hanley <felix@userspace.com.au>
sysutils/datadog: new port of datadog agent
The eponymous server and application monitoring agent from DataDogHQ.com
Additional agent integrations will be submitted in a further port.
PR: 208561
Submitted by: Uros Gruber <uros@gruber.si>
Sponsored by: SkunkWerks, GmbH
Differential Revision: https://reviews.freebsd.org/D27182
net-mgmt/bosun: create port
Bosun is an open-source, MIT licensed, monitoring and alerting system by
Stack Exchange.
It has an expressive domain specific language for evaluating alerts
and creating detailed notifications.
It also lets you test your alerts against history
for a faster development experience.
WWW: https://bosun.org/
PR: 250209
Submitted by: Markus Langer <langer.markus@gmail.com>
Create dedicated sandbox user for wsdd service
This changes the account the wsdd service runs under from the generic
'daemon' user to its own dedicated '_wsdd' user.
Approved by: hiroo.ono+freebsd@gmail.com (maintainer)
PR: 250159
MFH: 2020Q4
sysutils/tenshi: Update to 0.17
- Assume maintainership
- Drop coreutils from dependencies; tenshi works fine now with FreeBSD tail
- Get tarballs from to GitHub; this is where upstream moved
- Install configuration files in upstream default location
Add new port: net/rpki-client
rpki-client is a FREE, easy-to-use implementation of the Resource Public Key
Infrastructure (RPKI) for Relying Parties (RP) to facilitate validation of the
Route Origin of a BGP announcement. The program queries the RPKI repository
system and outputs Validated ROA Payloads in the configuration format of either
OpenBGPD or BIRD, but also as CSV or JSON objects for consumption by other
routing stacks. rpki-client originated in OpenBSD.
This version is based on the portable version of rpki-client.
WWW: https://www.rpki-client.org/
WWW: https://github.com/rpki-client/rpki-client-portable
Allocate UID and GID 270 for use when running rpki-client.
Add mail/py-spf-engine, Deprecate mail/postfix-policyd-spf-python
Give time to users to change their env
The new port is the successor, it supports milter feature and its
config file is in another path.
PR: 244424
Submitted by: Yasuhiro KIMURA <yasu@utahime.org> (maintainer)
Introducing PostgREST
Using PostgREST is an alternative to manual CRUD programming. Custom API
servers suffer problems. Writing business logic often duplicates, ignores or
hobbles database structure. Object-relational mapping is a leaky abstraction
leading to slow imperative code. The PostgREST philosophy establishes a single
declarative source of truth: the data itself.
WWW: http://postgrest.org/en/v7.0.0/
PR: 246383
Submitted by: Dmitry Wagin
x11/sddm: Switch SDDM user's HOME directory from /usr/local/etc/sddm/home to
/var/lib/sddm, as sddm(5) man page requests.
PR: 244756
Reviewed by: tcberner, adridg
devel/clixon: Add user and group
- clixon user and group will be used to listen to a socket
- Updated pkg-message
PR: 246264
Submitted by: Dave Cornejo <dcornejo@netgate.com> (maintainer)
Sponsored by: Rubicon Communications, LLC (Netgate)
Create and use a tests group for the tests user.
Nobody but nobody should be a member of the nobody group.
PR: 245107
Approved by: maintainer timeout
Sponsored by: DARPA
This port contains the Smallstep step-ca certificates component
It can be used together with the Smallstep step-ca client.
step-ca is a local CA. It can be used to create your own local PKI
Infrastructure and includes things like e.g. the possibility to have your
own ACME server.
A private certificate authority (X.509 & SSH) & ACME server for secure
automated certificate management, so you can use TLS everywhere & SSO for SSH.
WWW: https://smallstep.com/certificates/
PR: 245535
Submitted by: Markus Wipp <mw@wipp.bayern>
New port net-im/sshout: Instant-messaging solution based on SSH
Secure Shout Host Oriented Unified Talk is an instant-messaging platform
designed to make uses of the existing SSH server in your system.
SSHOUT creates a private chat room in your host. The authentication of the
chat room is done by SSH public authentication. Users can join your chat room
by either directly connecting your SSH server with any SSH client; or using a
SSHOUT client that implemented the client side SSHOUT API.
This package provides the SSHOUT server side programs; if you are finding a
SSHOUT client, go to project page and find out a suitable client; or you can
also write your own client using SSHOUT API.
PR: 228723
Submitted by: WHR <msl0000023508@gmail.com>
Use canonical spelling of "/nonexistent".
I accidentally spelled this as "/nonexistent/" yesterday, which broke
the special handling of that path and resulted in /nonexistent existing.
PR: 245537
Submitted by: Thomas Hurst
New port audio/gonic
music streaming server / subsonic server API implementation
features
* browsing by folder (keeping your full tree intact)
* browsing by tags (using taglib - supports mp3, opus, flac, ape, m4a, wav,
etc.)
* on-the-fly audio transcoding and caching (requires ffmpeg) (thank you spijet)
* pretty fast scanning (with my library of ~27k tracks, initial scan takes
about 10m, and about 5s after incrementally)
* multiple users, each with their own transcoding preferences, playlists, top
tracks, top artists, etc.
* last.fm scrobbling
* artist similarities and biographies from the last.fm api
* a web interface for configuration (set up last.fm, manage users, start scans,
etc.)
* support for the album-artist tag, to not clutter your artist list with
compilation album appearances
* written in go, so lightweight and suitable for a raspberry pi, etc.
* newer salt and token auth
* tested on dsub, jamstash, sublime music, and soundwaves
WWW: https://github.com/sentriz/gonic
net/irrd: Update version 2.3.10=>4.0.8
- Change LICENSE to BSD2CLAUSE from BSD4CLAUSE
- Utilizes UID and GID irrd for 252
- Take MAINTAINERSHIP
- Mentioned in UPDATING
- Both irrd-legacy and irrd can bes installed and run concurrently
Approved by: ume (private mail)
