"
Hi, and thanks to dev for mentioning it. I'm the maintainer of OPNexus, so take this with the usual grain of salt.
Both concerns are fair. It's a one-person project and it's young, I won't argue with that. What I can say is that it only talks to the firewalls through the regular OPNsense API, so if I disappear tomorrow your firewalls keep running exactly as they are. The config lives on the firewalls, not in OPNexus.
The source is public, so checking whether it's malicious is easy and I'd encourage that. It's not meant to face the internet, it comes with HTTPS and 2FA, and the images are signed. Trying it on a test box first is the sensible way anyway.
Small correction: the licence is PolyForm Shield, so source-available, not open source.
Happy to answer questions or take bug reports.
Both concerns are fair. It's a one-person project and it's young, I won't argue with that. What I can say is that it only talks to the firewalls through the regular OPNsense API, so if I disappear tomorrow your firewalls keep running exactly as they are. The config lives on the firewalls, not in OPNexus.
The source is public, so checking whether it's malicious is easy and I'd encourage that. It's not meant to face the internet, it comes with HTTPS and 2FA, and the images are signed. Trying it on a test box first is the sensible way anyway.
Small correction: the licence is PolyForm Shield, so source-available, not open source.
Happy to answer questions or take bug reports.
