git: 19872ccd43fa - 2025Q2 - security/tailscale: Add telemetry opt-out to rc script

The branch 2025Q2 has been updated by ashish:

URL: https://cgit.FreeBSD.org/ports/commit/?id=19872ccd43faf6830ed288f3e07df4795570af50

commit 19872ccd43faf6830ed288f3e07df4795570af50
Author:     Allison Reid <root@cooltrainer.org>
AuthorDate: 2025-04-13 23:36:40 +0000
Commit:     Ashish SHUKLA <ashish@FreeBSD.org>
CommitDate: 2025-04-19 07:45:01 +0000

    security/tailscale: Add telemetry opt-out to rc script
    
    PR:             286085
    MFH:            2025Q2
    (cherry picked from commit 218beea3335c1f426312807802f4fb53ed79f512)
---
 security/tailscale/Makefile            |  2 +-
 security/tailscale/files/tailscaled.in | 17 ++++++++++++++++-
 2 files changed, 17 insertions(+), 2 deletions(-)

diff --git a/security/tailscale/Makefile b/security/tailscale/Makefile
index 6b77d1eca889..14a7539d9adc 100644
--- a/security/tailscale/Makefile
+++ b/security/tailscale/Makefile
@@ -1,7 +1,7 @@
 PORTNAME=	tailscale
 PORTVERSION=	1.82.0
 DISTVERSIONPREFIX=	v
-PORTREVISION=	1
+PORTREVISION=	2
 CATEGORIES=	security net-vpn
 
 MAINTAINER=	ashish@FreeBSD.org
diff --git a/security/tailscale/files/tailscaled.in b/security/tailscale/files/tailscaled.in
index ef6218876a10..1ffd6f41347c 100644
--- a/security/tailscale/files/tailscaled.in
+++ b/security/tailscale/files/tailscaled.in
@@ -21,6 +21,14 @@
 #						Default is "daemon". See daemon(8).
 # tailscaled_exitnode_enable (bool):	Set it to YES to announce tailscaled as
 #                                       an exit node. Default is "NO".
+# tailscaled_telemetry_enable (bool):	Set it to NO to disable real-time connection
+#                                       event streaming to `log.tailscale.io` for
+#                                       privacy when using alternate control planes.
+#                                       Default is "YES" because it's necessary if
+#                                       one wants technical support from Tailscale:
+#                                       https://tailscale.com/kb/1011#opting-out-of-client-logging
+# tailscaled_args (str):		Additional arguments to pass to tailscaled
+#                                       Default is "" (empty string).
 # tailscaled_up_args (str):		Additional arguments to pass to tailscale up
 #                                       Default is "" (empty string).
 # tailscaled_tun_dev (str):	Set the name of the tun interface tailscaled creates.
@@ -37,6 +45,8 @@ load_rc_config $name
 : ${tailscaled_state_dir:="/var/db/tailscale"}
 : ${tailscaled_port:="41641"}
 : ${tailscaled_exitnode_enable:="NO"}
+: ${tailscaled_telemetry_enable:="YES"}
+: ${tailscaled_args:=""}
 : ${tailscaled_up_args:=""}
 : ${tailscaled_tun_dev:="tailscale0"}
 
@@ -78,7 +88,12 @@ tailscaled_start()
 		/sbin/ifconfig ${tailscaled_tun_dev} destroy
 	)
 
-	/usr/sbin/daemon -f ${tailscaled_syslog_output_flags} -p ${pidfile} ${procname} -port ${tailscaled_port} -tun ${tailscaled_tun_dev} -statedir ${tailscaled_state_dir}
+        if ! checkyesno tailscaled_telemetry_enable; then
+		logger -s -t tailscale "Opting out of client logging telemetry."
+		tailscaled_args=" --no-logs-no-support ${tailscaled_args}"
+        fi
+
+	/usr/sbin/daemon -f ${tailscaled_syslog_output_flags} -p ${pidfile} ${procname} -port ${tailscaled_port} -tun ${tailscaled_tun_dev} -statedir ${tailscaled_state_dir} ${tailscaled_args}
 }
 
 tailscaled_poststart()