To reduce conflicts with other packages and improve security, avoid
using the uucp UID and GID. This avoids potential conflicts with the
net/freebsd-uucp port.
Users who wish to continue using the uucp user and group may add
NUT_USER=uucp and NUT_GROUP=uucp to their make.conf.
PR: 268960
Reported by: delphij
MFH: 2023Q1
Includes adding a new group "pot" which is used to grant
unprivileged users access to read-only pot commands.
Depend on security/signify for pot image signatures.
While there, add a stub man page so users entering `man pot` see
something slightly useful, readd pkg-message.in to package.
Add a longer pkg-descr to make portlint happy.
Approved by: pizzamig (maintainer)
pgagroal is a high-performance protocol-native connection pool for
PostgreSQL. Which features High performance, Connection pool, Limit
connections for users and databases, Prefill support, Remove idle
connections, Connection validation, Enable / disable database access,
Graceful / fast shutdown, Prometheus support, Grafana 8 dashboard,
Remote management, Authentication query support, Failover support,
Transport Layer Security (TLS) v1.2+ support, Daemon support, User
vault, Lightweight connection pooler for PostgreSQL.
WWW: https://agroal.github.io/pgagroal/
Sponsored by: Bounce Experts
Loki is a horizontally-scalable, highly-available, multi-tenant log
aggregation system inspired by Prometheus. It is designed to be very
cost effective and easy to operate. It does not index the contents of
the logs, but rather a set of labels for each log stream.
WWW: https://github.com/grafana/loki
PR: 256030
With GoToSocial, you can keep in touch with your friends, post, read,
and share images and articles. All without being tracked or advertised
to!
GoToSocial provides a lightweight, customizable, and safety-focused
entryway into the Fediverse, and is comparable to (but distinct from)
existing projects such as Mastodon, Pleroma, Friendica, and PixelFed.
WWW: https://docs.gotosocial.org/en/latest/
devel/py-buildbot and devel/py-buildbot-worker requires a user buildbot
which is used in the rc script to drop privileges to unfortunately the
respective users and group do not exist.
PR: 248233
Reported by: ari@ish.com.au
- Add nats to UIDs and GIDs
- Add extra commands for logrotate and 'lame duck mode'.
From the docs:
In production we recommend that a server is shut down with "lame duck mode"
as a graceful way to slowly evict clients. With large deployments this
mitigates the "thundering herd" situation that will place CPU pressure on
servers as TLS enabled clients reconnect.
After entering lame duck mode, the server will stop accepting new
connections, wait for a 10 second grace period, then begin to evict clients
over a period of time configurable by the configuration option. This
period defaults to 2 minutes.
This does not unbreak the port, but brings it somemwhat nearer to
building.
The dependency devel/hoel still contains an incorrect USES line for
the MARIADB option, which causes a build failure, if enabled.
But the www/glewlywed port needs hoel with mariadb support, since
it unconditionally calls mariadb functions.
(It contains the unsupported USES=mariadb, while USES=mysql:105m
would be a working albeit inconvenient definition, since it includes
a fixed database version number, although any recent version would
do.)
I have informed the maintainer of the port a few days ago, but did
not get any response back. Due to multiple issues with the glewlywed
port (and its dependency devel/hoel), it cannot have been built from
the committed files before these were added to the ports tree.
Since the UID and GID additions will be required in any case and my
local patches to add them have lead to conflicts with other ports
taking the logically next ids, I'm taking liberty to commit those
UID and GID entries, now.
ONLYOFFICE Document Server is an online office suite comprising viewers and
editors for texts, spreadsheets and presentations, fully compatible with
Office Open XML formats: .docx, .xlsx, .pptx and enabling collaborative editing
in real time.
WWW: https://www.onlyoffice.com/
Reviewed by: bapt
Differential Revision: https://reviews.freebsd.org/D33923
Prowlarr is an indexer manager/proxy built on the popular *arr .net/reactjs
base stack to integrate with your various PVR apps.
Prowlarr supports management of both Torrent Trackers and Usenet Indexers.
It integrates seamlessly with Lidarr, Mylar3, Radarr, Readarr, and Sonarr
offering complete management of your indexers with no per app Indexer setup
required (we do it all).
Autoscan replaces the default Plex and Emby behaviour for picking up
file changes on the file system.
Autoscan integrates with Sonarr, Radarr, Lidarr and Google Drive to
fetch changes in near real-time without relying on the file system.
PR: 258873
Neolink allows you to use NVR software such as Shinobi or Blue Iris to
receive video from Reolink cameras, avoiding the need to purchase
proprietary NVR units.
WWW: https://github.com/thirtythreeforty/neolink
OpenSearch is a fork of Elasticsearch which aims to be a Distributed,
RESTful, Search Engine built on top of Apache Lucene.
WWW: http://opensearch.org
PR: 257558
With hat: opensearch
An efficient Matrix homeserver that's easy to set up
and just works. You can install it on a mini-computer
like the Raspberry Pi to host Matrix for your family,
friends or company.
WWW: https://conduit.rs/
Krill is a free, open source RPKI Certificate Authority that lets you
run delegated RPKI under one or multiple Regional Internet Registries
(RIRs). Through its built-in publication server, Krill can publish Route
Origin Authorisations (ROAs) on your own servers or with a third party.
WWW: https://www.nlnetlabs.nl/projects/rpki/krill/
PR: 257355
Biboumi is a Free, Libre and Open Source XMPP gateway that connects to
IRC servers and translates between the two protocols. Its goal is to
let XMPP users take part in IRC discussions, using their favourite XMPP
client.
WWW: https://biboumi.louiz.org/
PR: 250705
Bazarr is a companion application to Sonarr and Radarr that manages and
downloads subtitles based on your requirements.
- net-p2p/bazarr uses latest stable release
- net-p2p/bazarr-devel uses beta builds (created automatically from
development branch once a day, if there were changes to that branch)
- Ports dont have bundled dependencies unbundled (yet).
Talked this over with upstream, they are not going to unbundle
for support-workload avoidance and ease-of-install they get from the
fact they bundle all dependencies on specific versions.
- Reserve UID and GID for bazarr daemon process
- Add to net-p2p/Makefile
- The plists are auto-generated as in multimedia/tautulli.
Website: https://www.bazarr.media
Changelog: https://github.com/morpheus65535/bazarr/releases
Bugtracker: https://github.com/morpheus65535/bazarr/issues
PR: 243967
Fully featured and highly configurable SFTP server with optional FTP/S
and WebDAV support, written in Go. Several storage backends are
supported: local filesystem, encrypted local filesystem,
S3 (compatible) Object Storage, Google Cloud Storage,
Azure Blob Storage, SFTP.
WWW: https://github.com/drakkan/sftpgo
Approved by: koobs
Differential Revision: https://reviews.freebsd.org/D30661
Summary:
Pydio cells uses a custom version of packr to embed the static
resources into the `cells` binary. Previously, the embedding process
was not peformed, resulting in a non-functional binary. When trying
to use the app, user will just get "404 Not Found" error instead of
a web page.
To fix this - before the build `gmake generate` has to be performed
in the WRKSRC, and a special custom version of packr v1
(devel/pydio-packr) has to be used.
Other changes:
- DOCS option was removed, as the README.md file didn't really provide
any useful information for the port's users
- Generation of bash and zsh completion files was added
- App version is now provided during the build process (previously 0.1.0
would be indicated instead of the real version)
- Indicate failure to build on i386
- Create separate user/group for running the daemon, as recommended by
the administrator's manual
- Add rc script
- Add pkg-message with configuration instructions
- Add more patches fixing bugs and adapting the code for FreeBSD
No UPDATING is required, as the port was not functional previously
Reviewed by: koobs
MFH: No (port isn't in any of the quarterly branches yet)
Differential Revision: https://reviews.freebsd.org/D30323
daemon as devices are attached and detached, respectively. (On by default)
Add GIDs/UIDs for usbmuxd to facilitate use with devd(8).
Patch configure.ac instead of configure since we are using autoreconf. Merge
post-patch target into this new patch for a cleaner Makefile.
SeaweedFS is a distributed object store and file system to store and
serve billions of files fast! Its object store has O(1) disk seek,
and transparent cloud integration. The Filer supports cross-cluster
active-active replication, POSIX, S3 API, encryption, Erasure Coding for
warm storage, FUSE mount, Hadoop, and WebDAV.
WWW: https://github.com/chrislusf/seaweedfs/wiki
Sponsored by: SkunkWerks, GmbH
Differential Revision: https://reviews.freebsd.org/D27391
