|
1
|
ALLOW_UNSUPPORTED_SYSTEM=yes
|
|
2
|
|
|
3
|
# Define pfSense repos
|
|
4
|
PFSENSE_REPOS= pfSense-repo pfSense-repo-devel pfSense-repo-244
|
|
5
|
|
|
6
|
# Generic options
|
|
7
|
OPTIONS_UNSET_FORCE= X11 DOCS EXAMPLES MAN INFO MANPAGES
|
|
8
|
|
|
9
|
# Individual ports options
|
|
10
|
.if ${.CURDIR:N*net/quagga*}=="" || ${.CURDIR:N*net/frr*}==""
|
|
11
|
CUR_ARCH!= /usr/bin/uname -p
|
|
12
|
. if ${CUR_ARCH} == "armv7"
|
|
13
|
WITH_DEBUG=yes
|
|
14
|
. endif
|
|
15
|
.endif
|
|
16
|
|
|
17
|
.if ${.CURDIR:N*net/frr*}==""
|
|
18
|
ETCDIR= /var/etc/frr
|
|
19
|
.endif
|
|
20
|
|
|
21
|
DEFAULT_VERSIONS= php=74 ssl=base
|
|
22
|
PHP_FD_SETSIZE= 3172
|
|
23
|
|
|
24
|
. if ${.CURDIR:N*sysutils/check_reload_status*}==""
|
|
25
|
WITH_DEBUG= yes
|
|
26
|
. endif
|
|
27
|
|
|
28
|
# Options for packages
|
|
29
|
|
|
30
|
# databases
|
|
31
|
databases_rrdtool_UNSET_FORCE= PYTHON_MODULE RUBY_MODULE PERL_MODULE DEJAVU GRAPH
|
|
32
|
|
|
33
|
# devel
|
|
34
|
devel_git_UNSET_FORCE=CVS GITWEB GUI HTMLDOCS P4 SVN CONTRIB PERL ETCSHELLS
|
|
35
|
|
|
36
|
# dns
|
|
37
|
dns_unbound_SET_FORCE= LIBEVENT PYTHON
|
|
38
|
|
|
39
|
dns_bind916_SET_FORCE=DLZ_FILESYSTEM FILTER_AAAA IPV6 LINKS RRL SIGCHASE SSL THREADS GSSAPI_NONE
|
|
40
|
dns_bind916_UNSET_FORCE=FIXED_RRSET IDN LARGE_FILE LMDB
|
|
41
|
|
|
42
|
# graphics
|
|
43
|
graphics_cairo_UNSET_FORCE=X11 XCB OPENGL
|
|
44
|
|
|
45
|
graphics_gd_SET_FORCE=ICONV
|
|
46
|
graphics_gd_UNSET_FORCE=FONTCONFIG XPM
|
|
47
|
|
|
48
|
graphics_graphviz_SET_FORCE=ICONV NLS
|
|
49
|
graphics_graphviz_UNSET_FORCE=DIGCOLA IPSEPCOLA PANGOCAIRO XPM
|
|
50
|
|
|
51
|
# lang
|
|
52
|
lang_gcc_UNSET_FORCE=JAVA
|
|
53
|
|
|
54
|
# mail
|
|
55
|
mail_pear-Mail_SET_FORCE= PEAR_NET_SMTP
|
|
56
|
|
|
57
|
# net
|
|
58
|
net_freeradius3_SET_FORCE=EXPERIMENTAL HEIMDAL LDAP MYSQL PERL PGSQL PYTHON SQLITE3
|
|
59
|
|
|
60
|
net_haproxy18_SET_FORCE=OPENSSL SPCRE LUA
|
|
61
|
net_haproxy18_UNSET_FORCE=DPCRE
|
|
62
|
|
|
63
|
net_haproxy_SET_FORCE=OPENSSL SPCRE LUA PROMEX
|
|
64
|
net_haproxy_UNSET_FORCE=DPCRE
|
|
65
|
|
|
66
|
net_haproxy-devel_SET_FORCE=OPENSSL SPCRE LUA
|
|
67
|
net_haproxy-devel_UNSET_FORCE=DPCRE
|
|
68
|
|
|
69
|
net_libpcap_SET_FORCE=IPV6
|
|
70
|
net_libpcap_UNSET_FORCE=DAG
|
|
71
|
|
|
72
|
net_libzmq4_UNSET_FORCE=PGM
|
|
73
|
|
|
74
|
net_miniupnpd_SET_FORCE= PF_FILTER_RULES IPV6 CHECK_PORTINUSE
|
|
75
|
|
|
76
|
net_mtr_UNSET_FORCE=X11
|
|
77
|
|
|
78
|
net_nss_ldap_UNSET_FORCE=SASL KERBEROS
|
|
79
|
|
|
80
|
net_ntp_UNSET_FORCE= PERL_UTILS
|
|
81
|
|
|
82
|
# net-mgmt
|
|
83
|
net-mgmt_net-snmp_SET_FORCE=IPV6 MFD_REWRITES TLS
|
|
84
|
net-mgmt_net-snmp_UNSET_FORCE=AX_DISABLE_TRAP AX_SOCKONLY DOCS DUMMY JAIL MYSQL PYTHON SMUX TKMIB UNPRIVILEGED
|
|
85
|
|
|
86
|
net-mgmt_zabbix3-agent_SET_FORCE=IPV6
|
|
87
|
|
|
88
|
net-mgmt_zabbix3-proxy_SET_FORCE=IPMI IPV6 LIBXML2 SQLITE SSH
|
|
89
|
net-mgmt_zabbix3-proxy_UNSET_FORCE=MYSQL
|
|
90
|
|
|
91
|
net-mgmt_zabbix4-agent_SET_FORCE=IPV6
|
|
92
|
|
|
93
|
net-mgmt_zabbix4-proxy_SET_FORCE=IPMI IPV6 LIBXML2 SQLITE SSH
|
|
94
|
net-mgmt_zabbix4-proxy_UNSET_FORCE=MYSQL
|
|
95
|
|
|
96
|
net-mgmt_zabbix44-agent_SET_FORCE=IPV6
|
|
97
|
|
|
98
|
net-mgmt_zabbix44-proxy_SET_FORCE=IPMI IPV6 LIBXML2 SQLITE SSH
|
|
99
|
net-mgmt_zabbix44-proxy_UNSET_FORCE=MYSQL
|
|
100
|
|
|
101
|
net-mgmt_zabbix5-agent_SET_FORCE=IPV6
|
|
102
|
|
|
103
|
net-mgmt_zabbix5-proxy_SET_FORCE=IPMI IPV6 LIBXML2 SQLITE SSH
|
|
104
|
net-mgmt_zabbix5-proxy_UNSET_FORCE=MYSQL
|
|
105
|
|
|
106
|
# security
|
|
107
|
security_ca_root_nss_SET_FORCE= ETCSYMLINK
|
|
108
|
|
|
109
|
security_opensc_SET_FORCE= PCSC
|
|
110
|
security_opensc_UNSET_FORCE= DOCS MANPAGES
|
|
111
|
|
|
112
|
security_openvpn_SET_FORCE= X509ALTUSERNAME ASYNC_PUSH
|
|
113
|
security_openvpn_UNSET_FORCE= EASYRSA
|
|
114
|
|
|
115
|
shells_scponly_SET_FORCE=CHROOT SCP WILDCARDS WINSCP
|
|
116
|
shells_scponly_UNSET_FORCE=DEFAULT_CHDIR DOCS GFTP RSYNC SVN SVNSERVE UNISON
|
|
117
|
|
|
118
|
security_sudo_SET_FORCE=LDAP
|
|
119
|
|
|
120
|
security_snort_SET_FORCE=APPID GRE IPV6 NORMALIZER PERFPROFILE SOURCEFIRE
|
|
121
|
security_snort_UNSET_FORCE=BARNYARD FILEINSPECT HA PULLEDPORK
|
|
122
|
|
|
123
|
.if ${.CURDIR:N*security/snort3*}==""
|
|
124
|
CUR_ARCH!= /usr/bin/uname -p
|
|
125
|
.if ${CUR_ARCH} == "armv7" || ${CUR_ARCH} == "aarch64"
|
|
126
|
security_snort3_SET_FORCE=LARGEPCAP STATICDAQ
|
|
127
|
security_snort3_UNSET_FORCE=HYPERSCAN TSC
|
|
128
|
else
|
|
129
|
security_snort3_SET_FORCE=LARGEPCAP STATICDAQ HYPERSCAN
|
|
130
|
.endif
|
|
131
|
.endif
|
|
132
|
|
|
133
|
security_strongswan_SET_FORCE= CURL EAPDYNAMIC EAPRADIUS EAPSIMFILE \
|
|
134
|
IKEv1 UNBOUND XAUTH IPSECKEY PKCS11 PKI UNITY VICI VSTR SWANCTL
|
|
135
|
security_strongswan_UNSET_FORCE= EAPAKA3GPP2 BUILTIN LIBC SMP
|
|
136
|
|
|
137
|
security_suricata_SET_FORCE=GEOIP HTP_PORT IPFW JSON LUAJIT NSS PORTS_PCAP NETMAP HYPERSCAN REDIS
|
|
138
|
security_suricata4_SET_FORCE=GEOIP HTP_PORT IPFW JSON LUAJIT NSS PORTS_PCAP NETMAP HYPERSCAN REDIS
|
|
139
|
.if ${.CURDIR:N*security/suricata*}==""
|
|
140
|
CUR_ARCH!= /usr/bin/uname -p
|
|
141
|
NATIVE_BUILD!= /sbin/sysctl -qn kern.supported_archs | grep -q ${CUR_ARCH} && echo yes || /usr/bin/true
|
|
142
|
.if ${NATIVE_BUILD} != "yes"
|
|
143
|
security_suricata_UNSET_FORCE=LUA PRELUDE SC TESTS RUST
|
|
144
|
security_suricata4_UNSET_FORCE=LUA PRELUDE SC TESTS RUST
|
|
145
|
.else
|
|
146
|
security_suricata_UNSET_FORCE=LUA PRELUDE SC TESTS
|
|
147
|
security_suricata4_UNSET_FORCE=LUA PRELUDE SC TESTS
|
|
148
|
.endif
|
|
149
|
.endif
|
|
150
|
|
|
151
|
security_xinetd_UNSET_FORCE= XCONV
|
|
152
|
|
|
153
|
# sysutils
|
|
154
|
sysutils_apcupsd_SET_FORCE=APCDUMB_DRV APCSMART_DRV PCNET_DRV SNMP_DRV TCP_WRAPPERS USB
|
|
155
|
sysutils_apcupsd_UNSET_FORCE=CGI CLIENT_ONLY GAPCMON SNMP_DRV_OLD TEST_DRV
|
|
156
|
|
|
157
|
sysutils_flashrom_UNSET_FORCE= FTDI BUSPIRATE
|
|
158
|
|
|
159
|
sysutils_pftop_SET_FORCE=ALTQ
|
|
160
|
|
|
161
|
sysutils_syslog-ng_SET_FORCE= SYS_SSL
|
|
162
|
sysutils_syslog-ng_UNSET_FORCE= PORTS_SSL
|
|
163
|
|
|
164
|
# www
|
|
165
|
www_c-icap_SET_FORCE=LARGE_FILES
|
|
166
|
www_c-icap_UNSET_FORCE=IPV6
|
|
167
|
|
|
168
|
www_lightsquid_SET_FORCE=GD
|
|
169
|
|
|
170
|
www_lighttpd_SET_FORCE= NODELAY
|
|
171
|
|
|
172
|
www_nginx_SET_FORCE= LUA
|
|
173
|
|
|
174
|
www_squid_SET_FORCE=ARP_ACL AUTH_LDAP AUTH_NIS AUTH_SASL CACHE_DIGESTS DELAY_POOLS FOLLOW_XFF FS_AUFS FS_DISKD GSSAPI_MIT HTCP ICAP ICMP IDENT IPV6 KQUEUE LARGEFILE LAX_HTTP SNMP SSL SSL_CRTD TP_PF WCCP WCCPV2
|
|
175
|
www_squid_UNSET_FORCE=AUTH_SMB AUTH_SQL DEBUG DNS_HELPER ECAP ESI FS_ROCK GSSAPI_NONE GSSAPI_BASE GSSAPI_HEIMDAL STACKTRACES TP_IPF TP_IPFW VIA_DB
|
|
176
|
|
|
177
|
www_squidguard_SET_FORCE=DNS_BL LDAP STRIP_NTDOMAIN
|
|
178
|
www_squidguard_UNSET_FORCE=QUOTE_STRING
|
|
179
|
|
|
180
|
www_e2guardian_SET_FORCE=ICAP NTLM SSL_MITM
|
|
181
|
|
|
182
|
net_frr7_SET_FORCE=SNMP
|