head	1.10;
access;
symbols
	pkgsrc-2026Q2:1.6.0.2
	pkgsrc-2026Q2-base:1.6
	pkgsrc-2026Q1:1.4.0.2
	pkgsrc-2026Q1-base:1.4
	pkgsrc-2025Q4:1.3.0.2
	pkgsrc-2025Q4-base:1.3
	pkgsrc-2025Q3:1.1.0.2
	pkgsrc-2025Q3-base:1.1;
locks; strict;
comment	@# @;


1.10
date	2026.09.05.05.08.24;	author adam;	state Exp;
branches;
next	1.9;
commitid	vku457qWklDAioUG;

1.9
date	2026.09.02.19.04.14;	author wiz;	state Exp;
branches;
next	1.8;
commitid	vXszxoxOqka005UG;

1.8
date	2026.07.24.09.03.52;	author adam;	state Exp;
branches;
next	1.7;
commitid	PinmqtRbiEF8ZSOG;

1.7
date	2026.07.13.07.29.18;	author adam;	state Exp;
branches;
next	1.6;
commitid	0WcjqVzr98LxOsNG;

1.6
date	2026.05.15.09.02.08;	author adam;	state Exp;
branches;
next	1.5;
commitid	DYPsRkwhfoM6eTFG;

1.5
date	2026.05.05.18.00.35;	author adam;	state Exp;
branches;
next	1.4;
commitid	EwZHApi2uW2svEEG;

1.4
date	2026.03.12.12.21.15;	author adam;	state Exp;
branches;
next	1.3;
commitid	ok93E4Pv0HsTnGxG;

1.3
date	2025.10.23.20.39.05;	author wiz;	state Exp;
branches;
next	1.2;
commitid	1V2hBZn9ypXaCJfG;

1.2
date	2025.10.21.18.31.28;	author adam;	state Exp;
branches;
next	1.1;
commitid	mq3nkrGy1O8SZsfG;

1.1
date	2025.07.14.05.36.33;	author adam;	state Exp;
branches;
next	;
commitid	GuIY4LNqN4vpTF2G;


desc
@@


1.10
log
@defguard*: updated to 2.1.0

2.1 makes the device itself part of the access decision - admins define the
security criteria a machine must meet, and non-compliant endpoints simply can't
establish a connection - and it ships a rebuilt Desktop Client whose tray mode
gets your users onto the VPN in two clicks.
@
text
@# $NetBSD: Makefile,v 1.9 2026/09/02 19:04:14 wiz Exp $

.include "../../security/defguard/version.mk"

DISTNAME=	defguard-proxy-${DEFGUARD_VERSION}
GITHUB_PROJECT=	proxy

COMMENT=	True Zero-Trust WireGuard VPN with 2FA/MFA

# For internal crates.
EXTRA_DIST+=	defguard-${DEFGUARD_VERSION}.tar.xz

WRKSRC=		${WRKDIR}/proxy-${DEFGUARD_VERSION}

INSTALLATION_DIRS=	bin

do-install:
	${INSTALL_PROGRAM} ${WRKSRC}/target/release/defguard-proxy ${DESTDIR}${PREFIX}/bin/

.include "cargo-depends.mk"

.include "../../devel/libgit2/buildlink3.mk"
.include "../../lang/rust/cargo.mk"
.include "../../security/openssl/buildlink3.mk"
.include "../../mk/bsd.pkg.mk"
@


1.9
log
@*: recursive bump for pcre2 10.48
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.8 2026/07/24 09:03:52 adam Exp $
a2 1
PKGREVISION= 1
d5 1
a5 1
DISTNAME=	defguard-proxy-2.0.2
a6 1
GITHUB_TAG=	v${PKGVERSION_NOREV}
a9 3
EXTRA_DIST+=	defguard-${DEFGUARD_VERSION}-proto${EXTRACT_SUFX}
# Building web requires pnpm, which can't be easily build.
EXTRA_DIST+=	${DISTNAME}-web-dist${EXTRACT_SUFX}
d11 3
a13 1
EXTRA_DIST+=	defguard-${DEFGUARD_VERSION}${EXTRACT_SUFX}
a16 3
post-extract:
	${RMDIR} ${WRKSRC}/proto && ${LN} -f -s ${WRKDIR}/proto ${WRKSRC}/proto

@


1.8
log
@defguard-gateway: updated to 2.0.3

2.0.3
Fix memory access problem on BSD.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.7 2026/07/13 07:29:18 adam Exp $
d3 1
@


1.7
log
@defguard, defguard-gateway, defguard-proxy: updated to 2.0.2

2.0.2:

SMTP OAuth configuration for Microsoft and Google
Bulk user actions
Synchronization of disabled Active Directory users
LDAP integration improvements
Synchronization of users only from specified groups in Microsoft directory synchronization
Security improvements to the Forward Auth functionality
Bug fixes and UX improvements
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.6 2026/05/15 09:02:08 adam Exp $
d7 1
d11 1
d19 3
@


1.6
log
@defguard defguard-proxy: updated to 2.0.1

2.0.1
Bug fixes
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.5 2026/05/05 18:00:35 adam Exp $
d5 1
a5 1
DISTNAME=	defguard-proxy-2.0.1
d10 3
a12 1
# For defguard-version crate.
@


1.5
log
@defguard: updated to 2.0.0

2.0.0

It’s a significant step up from version 1.x, featuring:

a completely redesigned UI,
a new and easy deployment approach (and component communication security),
and some other major architectural changes.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.4 2026/03/12 12:21:15 adam Exp $
d5 1
a5 1
DISTNAME=	defguard-proxy-2.0.0
@


1.4
log
@defguard-proxy: updated to 1.6.3

1.6.3

This is a patch for the major 1.6 release.
It includes dependency updates to resolve the following CVEs:

CVE-2026-25541
CVE-2026-25727
CVE-2026-25639
CVE-2026-2391
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.3 2025/10/23 20:39:05 wiz Exp $
d5 1
a5 1
DISTNAME=	defguard-proxy-1.6.3
@


1.3
log
@*: recursive bump for pcre2

Running an old binary against the new pcre doesn't work:
/usr/pkg/lib/libpcre2-8.so.0: version PCRE2_10.47 required by /usr/pkg/lib/libglib-2.0.so.0 not defined
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.2 2025/10/21 18:31:28 adam Exp $
a2 1
PKGREVISION= 1
d5 1
a5 1
DISTNAME=	defguard-proxy-${DEFGUARD_VERSION}
a12 5
USE_TOOLS+=	pkg-config
MAKE_ENV+=	OPENSSL_DIR=${BUILDLINK_PREFIX.openssl}
RUSTFLAGS+=	-C link-arg=${COMPILER_RPATH_FLAG}${BUILDLINK_PREFIX.libgit2}/lib
RUSTFLAGS+=	-C link-arg=${COMPILER_RPATH_FLAG}${BUILDLINK_PREFIX.openssl}/lib

@


1.2
log
@defguard*: updated to 1.5.1

1.5.1
This patch for version 1.5 includes fixes for vulnerabilities identified during our latest penetration test. As a fully transparent organization, Defguard publishes a Pentesting Security Report page where you can track the status of our vulnerability fixes.

1.5.0
This is the biggest, most feature packed (and fixes) release we have ever done!
We’ve introduced 11 major features! and nearly 100 bugfixes.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.1 2025/07/14 05:36:33 adam Exp $
d3 1
@


1.1
log
@defguard-proxy: added version 1.4.0

This service is meant to serve as a proxy for a subset of functionalities of
Defguard core which require public access. It provides a public REST API and
communicates with core over gRPC.
@
text
@d1 1
a1 1
# $NetBSD$
d10 4
d15 1
d25 1
@