[Bug 295819] www/adguardhome: update rc.d script, optimize permissions and add features.

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=295819

            Bug ID: 295819
           Summary: www/adguardhome: update rc.d script, optimize
                    permissions and add features.
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Many People
          Priority: ---
         Component: Individual Port(s)
          Assignee: yuri@freebsd.org
          Reporter: jordan@ostreff.info
             Flags: maintainer-feedback?(yuri@freebsd.org)
          Assignee: yuri@freebsd.org

Created attachment 271446
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=271446&action=edit
www/adguardhome improvements

- Move robust rc.d script improvements to main port
- Implement native privilege dropping (runs as root, drops to user)
- Optimize disk I/O in prestart by avoiding recursive chown unless owner
changes
- Relocate logs to a dedicated directory /var/log/adguardhome/
- Dynamic newsyslog configuration handling

Technical note on privileges:
By default, the service user is switched back to root:wheel. This change is
crucial for jail environments and standard installations alike, ensuring that
AdGuardHome can out-of-the-box bind to privileged DNS ports (53, 853) without
extra host-level configuration (such as mac_portacl or portacl-rc). 

However, for production environments, it is STRONGLY recommended to drop
privileges. Users are encouraged to utilize AdGuardHome's built-in (native)
privilege dropping mechanism by setting the desired 'user' and 'group' inside
the 'os:' section of AdGuardHome.yaml. Alternatively, for traditional setups,
the rc.d mechanism can still be used by overriding 'adguardhome_user' and
'adguardhome_group' via rc.conf.

-- 
You are receiving this mail because:
You are the assignee for the bug.