git: fcff0967fd32 - main - www/nginx-module-fips-check: Add New Port

The branch main has been updated by joneum:

URL: https://cgit.FreeBSD.org/ports/commit/?id=fcff0967fd323dace3bbe4f24f6abd39c9580bda

commit fcff0967fd323dace3bbe4f24f6abd39c9580bda
Author:     Jochen Neumeister <joneum@FreeBSD.org>
AuthorDate: 2026-10-14 12:02:46 +0000
Commit:     Jochen Neumeister <joneum@FreeBSD.org>
CommitDate: 2026-10-14 12:33:00 +0000

    www/nginx-module-fips-check: Add New Port
    
    Sources of the fips_check module for the NGINX ports.  The module reports
    whether the OpenSSL nginx is linked against runs in FIPS mode, and stops
    a worker whose answer differs.
    
    Sponsored by:   Netzkommune GmbH
---
 www/Makefile                                     |  1 +
 www/nginx-module-fips-check/Makefile             | 37 ++++++++++++++++++++++++
 www/nginx-module-fips-check/distinfo             |  3 ++
 www/nginx-module-fips-check/files/pkg-message.in | 14 +++++++++
 www/nginx-module-fips-check/pkg-descr            |  9 ++++++
 5 files changed, 64 insertions(+)

diff --git a/www/Makefile b/www/Makefile
index b803cdc29b31..b1e3b01a5f31 100644
--- a/www/Makefile
+++ b/www/Makefile
@@ -540,6 +540,7 @@
     SUBDIR += nginx-module-array-var
     SUBDIR += nginx-module-aws-auth
     SUBDIR += nginx-module-cache-purge
+    SUBDIR += nginx-module-fips-check
     SUBDIR += nginx-module-form-input
     SUBDIR += nginx-module-gridfs
     SUBDIR += nginx-module-let
diff --git a/www/nginx-module-fips-check/Makefile b/www/nginx-module-fips-check/Makefile
new file mode 100644
index 000000000000..0d6af0ff623d
--- /dev/null
+++ b/www/nginx-module-fips-check/Makefile
@@ -0,0 +1,37 @@
+PORTNAME=	nginx-module-fips-check
+DISTVERSIONPREFIX=	v
+DISTVERSION=	0.2
+CATEGORIES=	www
+
+MAINTAINER=	joneum@FreeBSD.org
+COMMENT=	Sources of the fips_check module for the NGINX ports
+WWW=		https://github.com/sysadmin-labs/nginx-fips-check-module
+
+LICENSE=	APACHE20
+LICENSE_FILE=	${WRKSRC}/LICENSE
+
+USE_GITHUB=	yes
+GH_ACCOUNT=	sysadmin-labs
+GH_PROJECT=	nginx-fips-check-module
+
+NO_ARCH=	yes
+NO_BUILD=	yes
+
+SUB_FILES=	pkg-message
+
+_MODDIR=	share/nginx/modules/${PORTNAME}
+MODULESDIR=	${PREFIX}/${_MODDIR}
+
+PLIST_FILES=	${_MODDIR}/config \
+		${_MODDIR}/NOTICE \
+		${_MODDIR}/src/ngx_core_fips_check_module.c
+
+do-install:
+	@${MKDIR} ${STAGEDIR}${MODULESDIR} ${STAGEDIR}${MODULESDIR}/src
+	${INSTALL_DATA} ${WRKSRC}/config ${STAGEDIR}${MODULESDIR}
+	${INSTALL_DATA} ${WRKSRC}/NOTICE \
+		${STAGEDIR}${MODULESDIR}
+	${INSTALL_DATA} ${WRKSRC}/src/ngx_core_fips_check_module.c \
+		${STAGEDIR}${MODULESDIR}/src
+
+.include <bsd.port.mk>
diff --git a/www/nginx-module-fips-check/distinfo b/www/nginx-module-fips-check/distinfo
new file mode 100644
index 000000000000..f5f9a2bb7199
--- /dev/null
+++ b/www/nginx-module-fips-check/distinfo
@@ -0,0 +1,3 @@
+TIMESTAMP = 1791967208
+SHA256 (sysadmin-labs-nginx-fips-check-module-v0.2_GH0.tar.gz) = c99a2e98504bfd8820dac5afc7c4ccf7e06d95230f614144ad40aeb0e8e054cf
+SIZE (sysadmin-labs-nginx-fips-check-module-v0.2_GH0.tar.gz) = 18016
diff --git a/www/nginx-module-fips-check/files/pkg-message.in b/www/nginx-module-fips-check/files/pkg-message.in
new file mode 100644
index 000000000000..62530438a42e
--- /dev/null
+++ b/www/nginx-module-fips-check/files/pkg-message.in
@@ -0,0 +1,14 @@
+[
+{ type: install
+  message: <<EOM
+This package contains the sources of the fips_check module only.  It does not
+install a loadable module.
+
+The module itself is built by the nginx ports.  To use fips_check, build
+www/nginx, www/nginx-devel or www/freenginx with the FIPS_CHECK option
+enabled.  Those ports pick the sources up from
+%%PREFIX%%/share/nginx/modules/nginx-module-fips-check and produce
+ngx_fips_check_module.so.
+EOM
+}
+]
diff --git a/www/nginx-module-fips-check/pkg-descr b/www/nginx-module-fips-check/pkg-descr
new file mode 100644
index 000000000000..078c90fb484c
--- /dev/null
+++ b/www/nginx-module-fips-check/pkg-descr
@@ -0,0 +1,9 @@
+The fips_check module reports whether the OpenSSL that nginx is linked
+against runs in FIPS mode, and stops a worker that finds a different answer
+than the master did at startup.  It has no directives: it writes one line
+when a cycle starts, so whoever has to show that a server runs in FIPS mode
+gets it from the process rather than from the configuration that was meant
+to arrange it.
+
+This port only installs the module sources.  The module itself is built by
+the nginx ports when their FIPS_CHECK option is enabled.