head 1.7; access; symbols pkgsrc-2026Q3:1.6.0.2 pkgsrc-2026Q3-base:1.6 pkgsrc-2026Q2:1.4.0.2 pkgsrc-2026Q2-base:1.4 pkgsrc-2026Q1:1.2.0.2 pkgsrc-2026Q1-base:1.2 pkgsrc-2025Q4:1.1.0.2 pkgsrc-2025Q4-base:1.1; locks; strict; comment @# @; 1.7 date 2026.11.09.08.14.56; author adam; state Exp; branches; next 1.6; commitid mdVbwlvlRwt9fL2H; 1.6 date 2026.09.05.05.08.24; author adam; state Exp; branches; next 1.5; commitid vku457qWklDAioUG; 1.5 date 2026.07.13.07.29.18; author adam; state Exp; branches; next 1.4; commitid 0WcjqVzr98LxOsNG; 1.4 date 2026.05.15.09.02.08; author adam; state Exp; branches; next 1.3; commitid DYPsRkwhfoM6eTFG; 1.3 date 2026.05.05.18.00.36; author adam; state Exp; branches; next 1.2; commitid EwZHApi2uW2svEEG; 1.2 date 2026.03.12.12.21.15; author adam; state Exp; branches; next 1.1; commitid ok93E4Pv0HsTnGxG; 1.1 date 2025.12.07.11.24.57; author adam; state Exp; branches; next ; commitid cLaNndDSCuA18tlG; desc @@ 1.7 log @defguard: updatd to 2.2.0 2.2.0 Multi-step configurable MFA methods - build MFA flows from ordered steps, each with the factors allowed to pass it, enforce them per location and assign different flows to selected groups. Use FIDO2 hardware key as MFA factor - add it using the Desktop Client, configure an MFA Flow with FIDO2 Security Key factor, assign it to your location and connect using the latest Desktop and Mobile Client (NFC). Configuring MFA factors in the Desktop Client - when a location requires an MFA method a user hasn't set up, the desktop client shows Configure MFA and guides them through the setup, without re-enrolling the instance. Users can also add more methods at any time. Bulk actions for Firewall module - select several rules to enable, disable, deploy or delete them at once. Split-DNS for Defguard clients - only your internal domains are resolved by the location's DNS servers through the VPN, while all other names use the device's normal DNS (check this issue for context). Handling multiple locations with DNS configuration connected simultaneously - each connected location's domains are resolved by that location's DNS servers, so users can stay connected to several locations at the same time. Ability to apply custom MTU to the client apps - set the MTU sent to the client apps per location, with group-level overrides for selected groups. Automatic WireGuard interface metric on Windows - in all traffic mode, the tunnel interface gets the highest priority to prevent traffic and DNS leaks outside the VPN. Bulk action to put enrolment token in Active Directory for the auto-provisioning process - select users and store their enrollment tokens in an Active Directory attribute in one step, ready for client auto-provisioning. Completely redesigned Mobile Client - update from Google Play, the App Store, or use the assets from the mobile release. @ text @$NetBSD: patch-Cargo.toml,v 1.6 2026/09/05 05:08:24 adam Exp $ Local path to defguard_version crate. --- Cargo.toml.orig 2026-05-05 09:30:27.078637284 +0000 +++ Cargo.toml @@@@ -7,9 +7,9 @@@@ homepage = "https://github.com/DefGuard/ repository = "https://github.com/DefGuard/proxy" [dependencies] -defguard_certs = { git = "https://github.com/DefGuard/defguard.git", rev = "442048165cdd0a084f5d14e7b268fbc7a9332775" } -defguard_grpc_tls = { git = "https://github.com/DefGuard/defguard.git", rev = "442048165cdd0a084f5d14e7b268fbc7a9332775" } -defguard_version = { git = "https://github.com/DefGuard/defguard.git", rev = "442048165cdd0a084f5d14e7b268fbc7a9332775" } +defguard_certs = { path = "../defguard-2.2.0/crates/defguard_certs" } +defguard_grpc_tls = { path = "../defguard-2.2.0/crates/defguard_grpc_tls" } +defguard_version = { path = "../defguard-2.2.0/crates/defguard_version" } rustls-webpki = { version = "0.103", features = ["aws-lc-rs", "std"] } rustls-pki-types = "1" # base `axum` deps @ 1.6 log @defguard*: updated to 2.1.0 2.1 makes the device itself part of the access decision - admins define the security criteria a machine must meet, and non-compliant endpoints simply can't establish a connection - and it ships a rebuilt Desktop Client whose tray mode gets your users onto the VPN in two clicks. @ text @d1 1 a1 1 $NetBSD: patch-Cargo.toml,v 1.5 2026/07/13 07:29:18 adam Exp $ d11 6 a16 6 -defguard_certs = { git = "https://github.com/DefGuard/defguard.git", rev = "b2bac0d3d70c2a6d7b18b9432a5fa1720c702bf3" } -defguard_grpc_tls = { git = "https://github.com/DefGuard/defguard.git", rev = "b2bac0d3d70c2a6d7b18b9432a5fa1720c702bf3" } -defguard_version = { git = "https://github.com/DefGuard/defguard.git", rev = "b2bac0d3d70c2a6d7b18b9432a5fa1720c702bf3" } +defguard_certs = { path = "../defguard-2.1.0/crates/defguard_certs" } +defguard_grpc_tls = { path = "../defguard-2.1.0/crates/defguard_grpc_tls" } +defguard_version = { path = "../defguard-2.1.0/crates/defguard_version" } @ 1.5 log @defguard, defguard-gateway, defguard-proxy: updated to 2.0.2 2.0.2: SMTP OAuth configuration for Microsoft and Google Bulk user actions Synchronization of disabled Active Directory users LDAP integration improvements Synchronization of users only from specified groups in Microsoft directory synchronization Security improvements to the Forward Auth functionality Bug fixes and UX improvements @ text @d1 1 a1 1 $NetBSD: patch-Cargo.toml,v 1.4 2026/05/15 09:02:08 adam Exp $ d11 6 a16 6 -defguard_certs = { git = "https://github.com/DefGuard/defguard.git", rev = "b6e69565394662eb0b81199eb9efba3aea43b414" } -defguard_grpc_tls = { git = "https://github.com/DefGuard/defguard.git", rev = "b6e69565394662eb0b81199eb9efba3aea43b414" } -defguard_version = { git = "https://github.com/DefGuard/defguard.git", rev = "b6e69565394662eb0b81199eb9efba3aea43b414" } +defguard_certs = { path = "../defguard-2.0.2/crates/defguard_certs" } +defguard_grpc_tls = { path = "../defguard-2.0.2/crates/defguard_grpc_tls" } +defguard_version = { path = "../defguard-2.0.2/crates/defguard_version" } @ 1.4 log @defguard defguard-proxy: updated to 2.0.1 2.0.1 Bug fixes @ text @d1 1 a1 1 $NetBSD: patch-Cargo.toml,v 1.3 2026/05/05 18:00:36 adam Exp $ d14 3 a16 3 +defguard_certs = { path = "../defguard-2.0.1/crates/defguard_certs" } +defguard_grpc_tls = { path = "../defguard-2.0.1/crates/defguard_grpc_tls" } +defguard_version = { path = "../defguard-2.0.1/crates/defguard_version" } @ 1.3 log @defguard: updated to 2.0.0 2.0.0 It’s a significant step up from version 1.x, featuring: a completely redesigned UI, a new and easy deployment approach (and component communication security), and some other major architectural changes. @ text @d1 1 a1 1 $NetBSD: patch-Cargo.toml,v 1.2 2026/03/12 12:21:15 adam Exp $ d11 6 a16 6 -defguard_certs = { git = "https://github.com/DefGuard/defguard.git", rev = "dc0b70e69335c4be98d5b17615003922c9464994" } -defguard_grpc_tls = { git = "https://github.com/DefGuard/defguard.git", rev = "dc0b70e69335c4be98d5b17615003922c9464994" } -defguard_version = { git = "https://github.com/DefGuard/defguard.git", rev = "dc0b70e69335c4be98d5b17615003922c9464994" } +defguard_certs = { path = "../defguard-2.0.0/crates/defguard_certs" } +defguard_grpc_tls = { path = "../defguard-2.0.0/crates/defguard_grpc_tls" } +defguard_version = { path = "../defguard-2.0.0/crates/defguard_version" } @ 1.2 log @defguard-proxy: updated to 1.6.3 1.6.3 This is a patch for the major 1.6 release. It includes dependency updates to resolve the following CVEs: CVE-2026-25541 CVE-2026-25727 CVE-2026-25639 CVE-2026-2391 @ text @d1 1 a1 1 $NetBSD: patch-Cargo.toml,v 1.1 2025/12/07 11:24:57 adam Exp $ d5 1 a5 1 --- Cargo.toml.orig 2025-10-21 13:05:14.884614632 +0000 d7 1 a7 1 @@@@ -7,7 +7,7 @@@@ homepage = "https://github.com/DefGuard/ d11 8 a18 2 -defguard_version = { git = "https://github.com/DefGuard/defguard.git", rev = "8649a9ba225d7bd2066a09c9e1347705c34bd158" } +defguard_version = { path = "../defguard-1.6.4/crates/defguard_version" } a19 2 axum = { version = "0.8", features = ["ws"] } axum-client-ip = "0.7" @ 1.1 log @defguard-proxy: add missing patch @ text @d1 1 a1 1 $NetBSD$ d12 1 a12 1 +defguard_version = { path = "../defguard-1.5.1/crates/defguard_version" } @