git: b6599732e234 - main - www/openresty: Add MODSECURITY option

The branch main has been updated by joneum:

URL: https://cgit.FreeBSD.org/ports/commit/?id=b6599732e2341c61362ddf6a96cd9825131f4e18

commit b6599732e2341c61362ddf6a96cd9825131f4e18
Author:     Jochen Neumeister <joneum@FreeBSD.org>
AuthorDate: 2026-09-24 15:01:50 +0000
Commit:     Jochen Neumeister <joneum@FreeBSD.org>
CommitDate: 2026-09-24 15:02:40 +0000

    www/openresty: Add MODSECURITY option
    
    Builds ModSecurity v3 as a dynamic module from the same sources and
    with the same configure arguments as the server itself, so it loads
    without --with-compat. Off by default.
    
    Setting USE_GITHUB drops the openresty tarball from DISTFILES, so set
    it explicitly.
    
    Sponsored by:   Netzkommune GmbH
---
 www/openresty/Makefile | 11 +++++++++--
 www/openresty/distinfo |  4 +++-
 2 files changed, 12 insertions(+), 3 deletions(-)

diff --git a/www/openresty/Makefile b/www/openresty/Makefile
index d8ce4fbdd429..6529c2ea7665 100644
--- a/www/openresty/Makefile
+++ b/www/openresty/Makefile
@@ -3,6 +3,7 @@ PORTVERSION=	1.31.1.1
 PORTREVISION=	0
 CATEGORIES=	www
 MASTER_SITES=	https://openresty.org/download/
+DISTFILES=	${DISTNAME}${EXTRACT_SUFX}
 
 MAINTAINER=	joneum@FreeBSD.org
 COMMENT=	Powerful web application server extending nginx
@@ -32,8 +33,8 @@ OPTIONS_DEFINE=		ARRAYVAR AUTHREQ COOLKIT DRIZZLE ECHO ENCSESSION \
 			HEADERSMORE HTTPV2 HTTPV3 ICONV LUACJSON LUARDS \
 			LUAREDISPARS LUARESTYDNS LUARESTYMEM LUARESTYMYSQL \
 			LUARESTYREDIS LUARESTYSTRING LUARESTYUPLOAD MEMC \
-			MISC NDK POSTGRES RDSCSV RDSJSON REDIS REDIS2 \
-			SRCACHE XSS
+			MISC MODSECURITY NDK POSTGRES RDSCSV RDSJSON REDIS \
+			REDIS2 SRCACHE XSS
 
 OPTIONS_DEFAULT=	ARRAYVAR AUTHREQ COOLKIT ECHO ENCSESSION HEADERSMORE \
 			HTTPV2 HTTPV3 ICONV MEMC MISC NDK RDSCSV RDSJSON \
@@ -62,6 +63,7 @@ LUARESTYSTRING_DESC=	Lua resty string library
 LUARESTYUPLOAD_DESC=	Lua resty upload library
 MEMC_DESC=		An extended memcached module
 MISC_DESC=		Various set_xxx directives added
+MODSECURITY_DESC=	ModSecurity v3 web application firewall
 NDK_DESC=		Nginx Development Kit
 POSTGRES_DESC=		Module for talking to PostgreSQL
 RDSCSV_DESC=		Output filter module to convert CSV
@@ -81,6 +83,11 @@ ENCSESSION_CONFIGURE_OFF=	--without-http_encrypted_session_module
 HEADERSMORE_CONFIGURE_OFF=	--without-http_headers_more_module
 HTTPV2_CONFIGURE_ON=		--with-http_v2_module
 HTTPV3_CONFIGURE_ON=		--with-http_v3_module
+MODSECURITY_USE=		GITHUB=nodefault
+MODSECURITY_GH_TUPLE=	owasp-modsecurity:ModSecurity-nginx:9eb44fd:modsecurity3
+MODSECURITY_LIB_DEPENDS=	libmodsecurity.so:security/modsecurity3
+MODSECURITY_CONFIGURE_ON=	--add-dynamic-module=${WRKSRC_modsecurity3}
+MODSECURITY_PLIST_FILES=	nginx/modules/ngx_http_modsecurity_module.so
 ICONV_USES=			iconv
 ICONV_CONFIGURE_ON=		--with-http_iconv_module
 LUACJSON_CONFIGURE_OFF=		--without-lua_cjson
diff --git a/www/openresty/distinfo b/www/openresty/distinfo
index 5c3b06b4af73..082fe49c4662 100644
--- a/www/openresty/distinfo
+++ b/www/openresty/distinfo
@@ -1,3 +1,5 @@
-TIMESTAMP = 1782194737
+TIMESTAMP = 1790051584
 SHA256 (openresty-1.31.1.1.tar.gz) = 65b78baadd3f0984055de89bf13f4a1932e5bfe9c31932037a134ea2b1a0ce42
 SIZE (openresty-1.31.1.1.tar.gz) = 6539776
+SHA256 (owasp-modsecurity-ModSecurity-nginx-9eb44fd_GH0.tar.gz) = 24981d81e119662acf3b949d132ba1afdd9845e7ba8c2fd084fcdf763c805802
+SIZE (owasp-modsecurity-ModSecurity-nginx-9eb44fd_GH0.tar.gz) = 1162429