summaryrefslogtreecommitdiff
path: root/security/netbird
diff options
context:
space:
mode:
Diffstat (limited to 'security/netbird')
-rw-r--r--security/netbird/Makefile30
-rw-r--r--security/netbird/distinfo5
-rw-r--r--security/netbird/files/netbird.in64
-rw-r--r--security/netbird/pkg-descr18
4 files changed, 117 insertions, 0 deletions
diff --git a/security/netbird/Makefile b/security/netbird/Makefile
new file mode 100644
index 000000000000..4c189fbd0f94
--- /dev/null
+++ b/security/netbird/Makefile
@@ -0,0 +1,30 @@
+PORTNAME= netbird
+DISTVERSIONPREFIX= v
+DISTVERSION= 0.49.0
+CATEGORIES= security net net-vpn
+
+MAINTAINER= hakan.external@netbird.io
+COMMENT= Peer-to-peer VPN that seamlessly connects your devices
+WWW= https://netbird.io/
+
+LICENSE= BSD3CLAUSE
+LICENSE_FILE= ${WRKSRC}/LICENSE
+
+NOT_FOR_ARCHS= i386
+NOT_FOR_ARCHS_REASON= "no 32-bit builds supported"
+
+RUN_DEPENDS= ca_root_nss>0:security/ca_root_nss
+
+USES= go:modules
+USE_RC_SUBR= ${PORTNAME}
+
+GO_MODULE= github.com/netbirdio/netbird
+GO_TARGET= ./client:${PORTNAME}
+GO_BUILDFLAGS= -tags freebsd -o ${PORTNAME} -ldflags \
+ "-s -w -X github.com/netbirdio/netbird/version.version=${DISTVERSION}"
+
+WRKSRC= ${WRKDIR}/${PORTNAME}-${DISTVERSION}
+
+PLIST_FILES= bin/${PORTNAME}
+
+.include <bsd.port.mk>
diff --git a/security/netbird/distinfo b/security/netbird/distinfo
new file mode 100644
index 000000000000..0806cc6f24f0
--- /dev/null
+++ b/security/netbird/distinfo
@@ -0,0 +1,5 @@
+TIMESTAMP = 1750840361
+SHA256 (go/security_netbird/netbird-v0.49.0/v0.49.0.mod) = dd8e2b5f3ee570d2ef933101c6fb7bc5de05dae258f0c7ea7602e8db42238acb
+SIZE (go/security_netbird/netbird-v0.49.0/v0.49.0.mod) = 12507
+SHA256 (go/security_netbird/netbird-v0.49.0/v0.49.0.zip) = c1aa8b8749cdb1a471425ce5aac7d90e318e6f6280f51a8b72ca18ad241f7bfb
+SIZE (go/security_netbird/netbird-v0.49.0/v0.49.0.zip) = 2921705
diff --git a/security/netbird/files/netbird.in b/security/netbird/files/netbird.in
new file mode 100644
index 000000000000..ddd19f27cd52
--- /dev/null
+++ b/security/netbird/files/netbird.in
@@ -0,0 +1,64 @@
+#!/bin/sh
+#
+# PROVIDE: netbird
+# REQUIRE: SERVERS
+# KEYWORD: shutdown
+#
+# Add the following lines to /etc/rc.conf to enable this service:
+#
+# netbird_enable (bool): Set it to YES to run netbird on startup.
+# Default: NO
+# netbird_config (path): Path to the netbird configuration file.
+# Default: /var/db/netbird/config.json
+# netbird_socket (path): Path to the Unix-domain socket for daemon communication.
+# Default: /var/run/netbird.sock
+# netbird_loglevel (str): Set to 'panic', 'fatal', 'error', 'warn', 'info', 'debug' or 'trace'.
+# Default: 'info'
+# netbird_logfile (path): Path to the client log file.
+# Default: /var/log/netbird/client.log
+# netbird_tun_dev (str): Name of the TUN device used by Netbird for its VPN tunnel.
+# Default: wt0
+#
+
+. /etc/rc.subr
+
+name="netbird"
+rcvar="${name}_enable"
+
+load_rc_config "$name"
+
+: ${netbird_enable:="NO"}
+: ${netbird_config:="/var/db/netbird/config.json"}
+: ${netbird_socket:="/var/run/netbird.sock"}
+: ${netbird_loglevel:="info"}
+: ${netbird_logfile:="/var/log/netbird/client.log"}
+: ${netbird_tun_dev:="wt0"}
+
+pidfile="/var/run/${name}.pid"
+command="/usr/sbin/daemon"
+daemon_args="-P ${pidfile} -r -t \"${name}: daemon\""
+command_args="${daemon_args} %%PREFIX%%/bin/netbird service run --config ${netbird_config} --log-level ${netbird_loglevel} --daemon-addr unix://${netbird_socket} --log-file ${netbird_logfile}"
+start_precmd="${name}_start_precmd"
+stop_postcmd="${name}_stop_postcmd"
+
+netbird_start_precmd() {
+ logger -s -t netbird "Starting ${name}."
+ # Check for orphaned netbird tunnel interface
+ # And if it exists, then destroy it
+ if /sbin/ifconfig ${netbird_tun_dev} >/dev/null 2>&1; then
+ if ! /sbin/ifconfig ${netbird_tun_dev} | fgrep -qw PID; then
+ logger -s -t netbird "Found orphaned tunnel interface ${netbird_tun_dev}, destroying"
+ /sbin/ifconfig ${netbird_tun_dev} destroy
+ fi
+ fi
+}
+
+netbird_stop_postcmd() {
+ if /sbin/ifconfig ${netbird_tun_dev} >/dev/null 2>&1; then
+ logger -s -t netbird "Destroying tunnel interface ${netbird_tun_dev}"
+ /sbin/ifconfig ${netbird_tun_dev} destroy || \
+ logger -s -t netbird "Failed to destroy interface ${netbird_tun_dev}"
+ fi
+}
+
+run_rc_command "$1"
diff --git a/security/netbird/pkg-descr b/security/netbird/pkg-descr
new file mode 100644
index 000000000000..e3c155b98d5e
--- /dev/null
+++ b/security/netbird/pkg-descr
@@ -0,0 +1,18 @@
+NetBird is an open-source WireGuard-based overlay network combined with
+Zero Trust Network Access, providing secure and reliable connectivity
+to internal resources.
+
+Key features:
+- Zero-config VPN: Easily create secure connections between devices without
+manual network setup.
+- Built on WireGuard: Leverages WireGuard's high-performance encryption for
+fast and secure communication.
+- Self-hosted or Cloud-managed: Users can deploy their own NetBird management
+server or use NetBird Cloud for centralized control.
+- Access Control & Routing: Fine-grained access control policies and automatic
+network routing simplify connectivity.
+- This FreeBSD port provides the NetBird client daemon and CLI tools, allowing
+FreeBSD systems to join a NetBird mesh network and securely communicate with
+other peers.
+
+For more details, visit: https://netbird.io