Announce: new OPNsense community repository

[mimugmail]

Dear all,

Within the last weeks I started a new project: OPNsense community repository

What is it all about?

A couple of packages don't really make sense on a Firewall platform like Java or MySQL DB, but may be important for some individuals trying to achieve own goals.
It starts with hosting Unifi Controller on the Firewall itself cause of missing extra device and goes over to InfluxDB and Grafana on the local system.

Since these dependencies like JDK are too big or may be only distributed via binary blob there is no way they will find their way into core and makes totally sense.
To overcome this quality assurance you can now load an external repository which will also allow the addition of plugins also with custom fields.

But finally this will have a couple of drawbacks like OpenSSL-only and limited time to test every update.
If you still feel brave and want to join you can go over here and start on:

https://www.routerperformance.net/opnsense-repo/

Hav fun

[Georges]

"Unifi Controller"
This guy know me very well.
Off course we need a plugin for Unify, it's awesome!!!

InfluxDB, Grafana?
Nice! I will try the OPNsense dashboard i have publish on my github
If you are adding Elasticsearch, this can be awesome!
But we are starting to put too many things on a Firewall.... or it's going to be a Firewall ++++++ x'D.
Be crazy, add Docker x'D... (Good luck with Hardened BSD ahah), maybe a Jail will be better

Anyway, thank you very much for Sharing this!

I guess you didn't fill your repo with your plugins yet here ? https://github.com/mimugmail/opn-repo

[mimugmail]

No, the GitHub repo is only to track bugs, issues and feature requests. Elastic shouldnt be a problem, just add a feature request

[miruoy]

Good job mimugmail.

This community repo idea has great potential imho.

[mihak]

@mimugmail: how about adding the latest ntopng 4.3 (from ntop.org) into the repo?

[mimugmail]

I already had a look but we have to see how ofter they update the pkg's as this are development builds. It may be more unreliabe than the usual plugin

[mihak]

Perhaps we could differentiate stable and development packages? Unifi controller could have stable and development branch too...

[mimugmail]

I added a plugin for Zeek right now

[mihak]

I am voting to add a plugin for nprobe so we could forward the information to an external ntopng

[hushcoden]

@mimugmail - great stuff!

[mimugmail]

I am voting to add a plugin for nprobe so we could forward the information to an external ntopng

Can you open an issue via my GitHub repo?

[Drinyth]

Thanks for your work on this. I have your Adguard package installed (although I have to run it manually for the time being as it looks like there are some startup issues with it). I didn't realize that this runs natively on FreeBSD so I'm looking forward to being able to move DNS services to opnsense and remove a server (dedicated linux Adguard [formerly pi-hole] server) off the network.

Any thoughts of incorporating static DHCP names into the DNS Rewrites section of Adguard? I have a few static DHCP entries on my network so to resolve these names, I have unbound running on a different port (which maps these names) and then have Adguard running on port 53 that forwards to this unbound service.

If the static name entries could be added directly into adguard, I could remove the unbound service from running entirely and forward directly to something upstream.

Thanks again!

[mimugmail]

AdGuardHome needs more love, I still work in it

[mimugmail]

I finally got AdGuardHome working as an opnsense plugin. Grab it from here: https://www.routerperformance.net/opnsense-repo/

It's still lacking status view, but after install and enabling it's available via port 3000 (if no other service listens to it).

[Drinyth]

Looks like the service started up just fine after it was enabled. Turned down my old, physical pi-hole device yesterday. Thank you for your work on this!