various devices like: Lights, Switches, various sensors/meters like
Temperature, Rain, Wind, UV, Electra, Gas, Water and much more.
Notifications/Alerts can be sent to any mobile device
WWW: http://www.domoticz.com/
PR: 205583
Submitted by: kiwi@oav.net
Grafana is an open source, feature rich metrics dashboard
and graph editor for Graphite, InfluxDB & OpenTSDB.
WWW: https://github.com/grafana/grafana
PR: 201682
Submitted by: Thomas Bartelmess <thomas@bartelmess.io>, loic.blot@unix-experience.fr
Reviewed by: koobs
titus is a TLS/SSL proxy server (like stunnel or stud) that protects you
from vulnerabilities in the TLS implementation such as Heartbleed (or
worse).
titus requires FreeBSD 10.2 or newer due to PROC_TRACE_CTL which was
introduced at r277322
- Create a separate plist file
- Add @sample option to the sample file
- Rename rc script without .sh suffix
- Switch from postfix user to _rmilter dedicated user
- Add _rmilter:_rmilter to UIDs/GIDs
- Add UPDATING entry
Staging was broken due to touching /root/.java during build
UID and GID was lost in old copy of the review
While here, also fix hardcoded path to ETCDIR
Pointyhat: me
Differential Revision: https://reviews.freebsd.org/D4083
There might be some rough edges with getting it running properly, but
time will tell.
Add UID/GID 158 for pootle.
Differential Revision: https://reviews.freebsd.org/D1234
Riak CS is an object storage system built on top of Riak. It facilitates
storing large objects in Riak and presents an S3-compatible interface. It also
provides multi-tenancy features such as user accounts, authentication, access
control mechanisms, and per account usage reporting.
WWW: https://github.com/basho/riak_cs
Submitted by: Scott Kamp (based on)
Stanchion is an application to enforce the serialization of requests. It
consists of two main parts: a simple HTTP interface and a processing backend
that manages requests and interacts with a local Riak instance.
WWW: https://github.com/basho/stanchion
Submitted by: Scott Kamp (based on)
- now uses UIDs/GIDs
- fix build in certain cases
PR: 198436, 202467
Submitted by: Pavel Nedoshivkin <nedoshivkin@gmail.com>, dim
Approved by: maintainer (timeout)
SOGo is a fully supported and trusted groupware server with a focus on
scalability and open standards. It provides a rich AJAX-based Web
interface and supports multiple native clients through the use of
standard protocols such as CalDAV, CardDAV and GroupDAV.
WWW: http://sogo.nu/
PR: 200750
Submitted by: Euan Thoms <euan@potensol.com>
This is a port of dnscrypt-wrapper, which adds dnscrypt support to any name
resolver. It is the server-side counterpart of dnscrypt-proxy, and is in
fact derived from its source.
PR: 200015
Submitted by: freebsd@toyingwithfate.com
Approved by: feld (mentor)
Differential Revision: https://reviews.freebsd.org/D3535
OpenConnect server (ocserv) is an SSL VPN server. Its purpose is
to be a secure, small, fast and configurable VPN server. It implements
the OpenConnect SSL VPN protocol, and has also (currently experimental)
compatibility with clients using the AnyConnect SSL VPN protocol.
The OpenConnect protocol provides a dual TCP/UDP VPN channel, and
uses the standard IETF security protocols to secure it. Both IPv4
and IPv6 are supported.
Ocserv's main features are security through provilege separation
and sandboxing, accounting, and resilience due to a combined use
of TCP and UDP. Authentication occurs in an isolated security
module process, and each user is assigned an unprivileged worker
process, and a networking (tun) device. That not only eases the
control of the resources of each user or group of users, but also
prevents data leak (e.g., heartbleed-style attacks), and privilege
escalation due to any bug on the VPN handling (worker) process. A
management interface allows for viewing and querying logged-in
users.
WWW: http://www.infradead.org/ocserv/
PR: 202253
Submitted by: Carlos Jacobo Puga Medina <cpm@fbsd.es>
Reviewed by: pi
Change the home directory of the quagga user to /var/empty which prevent QA
First the home does not need to be harcoded to /usr/local/etc/quagga, second
it fixes issues where the home created by the user addition is 755 then the
plist modifies it to 750
Reviewed by: mat
Approved by: mat (maintainer)
Sponsored by: gandi.net
Differential Revision: https://reviews.freebsd.org/D3135
Vault is a tool for securely accessing secrets. A secret is anything that you
want to tightly control access to, such as API keys, passwords, certificates,
and more. Vault provides a unified interface to any secret, while providing
tight access control and recording a detailed audit log.
WWW: https://vaultproject.io/
An open-source, distributed, time series database with no external dependencies.
WWW: http://influxdb.com
PR: 198073
Submitted by: Stefan Lambrev <cheffo@freebsd-bg.org>
Orthanc aims at providing a simple, yet powerful standalone DICOM
server. It is designed to improve the DICOM flows in hospitals and to
support research about the automated analysis of medical images.
Orthanc can turn any computer running Windows, Linux, FreeBSD or OS X
into a DICOM store (in other words, a mini-PACS system). Its
architecture is lightweight and standalone, meaning that no complex
database administration is required, nor the installation of third-party
dependencies.
What makes Orthanc unique is the fact that it provides a RESTful API.
Thanks to this major feature, it is possible to drive Orthanc from any
computer language. The DICOM tags of the stored medical images can be
downloaded in the JSON file format. Furthermore, standard PNG images can
be generated on-the-fly from the DICOM instances by Orthanc.
Orthanc lets its users focus on the content of the DICOM files, hiding
the complexity of the DICOM format and of the DICOM protocol.
WWW: http://www.orthanc-server.com/
PR: 199146
Submitted by: mp39590@gmail.com
to 3.0.5572.0.
The user and group names have change, but the uid/gid remain the same.
The port will continue to use the old database and user/group names if
they exist, but will default to the new names for new installs.
Instructions are in pkg-message for how to manually migrate things
yourself.
PR: 199093
Submitted by: maintainer (Ben Woods)
Riemann monitors low-latency, transient shared state for systems with many
moving parts.
Riemann aggregates events from your servers and applications with a powerful
stream processing language. Send an email for every exception raised by your
code. Track the latency distribution of your web app. See the top processes
on any host, by memory and CPU. Combine statistics from every Riak node in
your cluster and forward to Graphite. Send alerts when a key process fails
to check in. Know how many users signed up right this second.
WWW: http://riemann.io/
PR: 197403
Submitted by: Dave Cottlehuber <dch@skunkwerks.at>
Media Browser Server is a home media server built on top of other popular
open source technologies such as Service Stack, jQuery, jQuery mobile,
and Mono.
It features a REST-based api with built-in documention to facilitate
client development. We also have client libraries for our api to enable
rapid development.
WWW: http://mediabrowser.tv/
PR: 194634
Submitted by: Ben Woods
Server Density Agent for FreeBSD
Monitor CPU, memory, disk usage, network, Apache, MySQL + more via the
ServerDensity platform.
WWW: https://www.serverdensity.com/
PR: 191562
Submitted by: arcade (b1t.name)
Welcome to Rundeck, the human interface to your operations. Rundeck
features fine-grain access controls, a built-in job scheduler, and the
ability to define workflows that dispatch commands and scripts to your
nodes.
The open source Calendar and Contacts Server project is a standards-compliant
server implementing the CalDAV and CardDAV protocols (RFC 4791, RFC 6352).
It provides a shared location on the network allowing multiple users to store
and edit calendaring and contact information.
WWW: http://www.calendarserver.org
PR: 186201 (with changes)
Submitted by: Axel.Rau Chaos1 de
Kamailio is an open source SIP proxy server that is capable of
handling thousands of up calls in a second. Among the features
it provides, are support for TCP, UDP and SCTP, secure communication
via TLS for VoIP (voice, video), accounting, the most popular open
source databases and much more.
Originally starting out as the SIP Express Router (SER) project by
the Fraunhofer Society in 2001, the design team got together in
2008, merged old and new source code and rebranded SER to Kamailio.
WWW: http://www.kamailio.org/
PR: 181301
Submitted by: Oliver Mahmoudi <olivermahmoudi@gmail.com>
Reviewed by: marino
- Use nsd instead of bind user
This release has new features and bugfixes. In nsd.conf you can
configure database: "" this makes NSD not use the large mmapped nsd.db
file, but instead read and write the zonefiles in text format, which
saves about 50% of the memory usage. Also zonefile reading and
writing has been optimised to be faster, as well as processing time
for zone transfers. NSD writes the (changed) zonefiles every hour.
The new nsd-checkzone tool reports if a zonefile parses so you can check
it before reading it into the daemon.
A bug is fixed where NSD 4 causes rising load average and memory
consumption on Linux systems, which is caused by a bug in Linux that
slowly deteriorates system performance by repeated recursive forks.
Full release notes: http://open.nlnetlabs.nl/pipermail/nsd-users/2014-September/002007.html
PR: 193332
Submitted by: Jaap Akkerhuis <jaap@NLnetLabs.nl> (maintainer)
Sponsored by: DK Hostmaster A/S
- Separate dtv-scan-tables in his own port
- Add XMLTV option
- Create a new user/group for tvheadend
- Improve tvheadend startscript
- Convert manual patching to USES=shebangfix
Submitted by: Dreamcat4 <dreamcat4@gmail.com>
pkg-message suggesting a user to create user and group
manually
- Add uid/gid to the UID and GID files respectively
- Add an UPDATING entry to suggest users of scanlogd to
drop existing users to avoid conflicts
- Bump PORTREVISION
PR: 191948
Submitted by: TEUBEL György
-Utilize opendns if no provider configured to preserve documented behavior
-rc script passes rclint
-Fix the _dnscrypt-proxy user's home directory and add UPDATING entry
PR: 190406
Submitted by: AllanJude
- zetacoind now runs as the zetacoin user
- Fixed stop function in rc.d script
- Minor changes to pkg-message.in, pkg-plist, and rc.d script to use the PORTNAME variable
- Remove patch files: patch-src__serialize.h and patch-src__rpcdump.cpp since they are no longer needed.
- Added user and group "zetacoin" to ports/UIDs and ports/GIDs
- Added update instructions to ports/UPDATING
PR: 188567
Submitted by: daniel@morante.net (maintainer)
- Add memcached dependency since it seems required to run
- Use UIDs and GIDs and create a user for swift since that seems required
PR: ports/187421
Submitted by: swills (myself)
Approved by: Gea-Suan Lin <gslin@gslin.org> (maintainer)
Zabbix uses /bin/sh as a command line interpreter under UNIX operating systems
for commands run via the UserParameters feature [1]
Adjust the login shell for the zabbix user in UIDs to allow them to function.
[1] http://www.zabbix.com/documentation/2.2/manual/config/items/userparameters
PR: ports/186298
Submitted by: Felix Ehlers <felix-freebsd@fleximus.de>
This new user carries a generic 'tests' name because, even though it is
only used by devel/kyua at this point, it could conceivably be used by
other tools.
Bump PORTREVISION of devel/kyua to 1.
PR: ports/182891
Approved by: asomers (maintainer), bdrewery (ports), rpaulo (mentor)
- Fix: Disable downloading of images in notices. It was crashing the UI.
- Fix: Properly handle the exclusive application feature from the UI.
- Fix option helper
- Change login shell for BOINC user to /bin/sh so that
'service boinc-client start' works properly
like counters and timers, sent over UDP and sends aggregates to one or more
pluggable backend services (e.g., Graphite).
WWW: https://github.com/etsy/statsd
PR: ports/171855
Submitted by: kimor79@yahoo.com
- Did not convert to staging as it fails to build when enabled currently
Riak is a distributed database designed for maximum availability:
so long as your client can reach one server, it should be able to
write data. In most failure scenarios the data you want to read
should be available, albeit possibly stale.
WWW: http://basho.com/riak/
PR: ports/182317
Submitted by: Bartek Rutkowski <ports@robakdesign.com>
manually creating them.
It is still possible to overrride the defaults by setting
BOINC_CLIENT_USER , BOINC_CLIENT_GROUP , and BOINC_CLIENT_HOME but that
means the entries in UIDs and GIDs have to be changed too.
PR: ports/176274 (part, based on)
Submitted by: Andrey Simonenko <simon@comsys.ntu-kpi.kiev.ua>
Reviewed by: crees (slightly)
Note that from 2.5, shibd is run as the user shibd. The port tries to fix the
key file ownership but if you have changed the file name of the key from the
default sp-key.pem, make sure you chown your key file(s) to user shibd.
Also, take maintainership of the entire tool chain (approved by all previous
maintainers).
Incorporates the ideas suggested by Craig Leres [177668], making sure that the
ssl key is not added to the package.
PR: 177668, 178694
- Runs as its own user
- Switch to @unexec rmdir since portlint warns about absolute path in @dirrmtry
not working
PR: ports/178834
Submitted by: Mark Felder <feld@feld.me> (maintainer)
- Bump PORTEPOCH
- Add additional USERS for privilege separation
- Add instructions for fixing permissions in pkg-message
- Add a note about privilege separation to UPDATING file
Changes: http://article.gmane.org/gmane.mail.opensmtpd.general/446
- Remove leading article from COMMENT
- Get database dependency through USE_BDB
- Support OptionsNG, add DOCS and SASL options
- Use port framework for user and group creation
- Make daemon binary look for config files in ETCDIR not /etc
- Install config files in ETCDIR and preserve them when modified
- Trimmed Makefile headers
- Removed patches incorporated into upstream
- Added conditional patch for compilation on 7.x, early 8.x systems
- Fixed QAT-reported plist problems
- Added new users and group for use with daemons
Requested by: various users (via private email)
- Install the existing rc.d script (define USE_RC_SUBR at Makefile)
- Define the command_interpreter variable at the rc.d script (stop and status commands need it)
- Create needed directories at trytond_prestart (rc.d script) with appropriate gid and launch install once
- Rename option OPENSSL -> PYOPENSSL
- Make use of configuration and sample file (both for the port and for the package)
PR: 171716
Submitted by: bsam@, Matthias Petermann <matthias@d2ux.net>(via Email)
- Add hadoop user to GIDs/UIDs (955)
The Apache Hadoop software library is a framework that allows for the
distributed processing of large data sets across clusters of computers
using a simple programming model.
WWW: http://hadoop.apache.org/
Approved by: culot@, jadawin@ (mentors)
Feature safe: yes
- Add mcserver user to GIDs/UIDs [1]
- Added rc startup script [1]
- Lots of PLIST_SUB/SUB_FILES patches to allow substitution, moved several pkg* files to files/*.in [1]
- made USERS a ?= in case server had previously been running as a different user [2]
PR: ports/163920 [1]
Submitted by: maintainer [1]
Reviewed by: scheidell [2]
Approved by: maintainer, gabor (mentor)
- Change amanda user's homedir to /var/db/amanda [1].
- Make amanda user added into operator group by default for dumping
disks.
- Remove deprecation messages of old variables.
PR: ports/155987 [1]
Submitted by: Goran Lowkrantz <goran.lowkrantz@ismobile.com> [1]
Feature safe: yes
4.7.2. The official release notes can be found at:
http://kde.org/announcements/announce-4.7.2.php
This release ships with many improvements. Read more about them here:
http://FreeBSD.kde.org/news.php#itemKDESC472availableinports
We'd like to say thanks to all testers and contributors, especially to
lwhsu@ for his effort on hosting our test packages.
PR: 156293 [1]
159219 [2]
160164 [3]
Submitted by: Oleg Sidorkin <osidorkin@gmail.com> [1]
Alvaro Castillo <gobledb@gmail.com> [2]
dkeav04@gmail.com [3]
Tested by: exp-run via pav
