name: easysiem-opnsense-agent
version: "1.0.0"
origin: "sysutils/easysiem-opnsense-agent"
comment: "EasySIEM agent for OPNsense: ships pf filter log and Suricata alerts"
desc: <<EOD
Ships OPNsense's firewall (pf) filter log and, if the os-suricata plugin
is installed, Suricata IDS/IPS alerts, to an EasySIEM ingest-api server
over HTTPS. Installs an rc.d service (easysiem_opnsense) -- enable with
'sysrc easysiem_opnsense_enable=YES' and configure
/usr/local/etc/easysiem/agent.json (copy from agent.json.example) before
starting it with 'service easysiem_opnsense start'.

See https://easysiem.com for the full project and server-side setup.
EOD
maintainer: "tysonpdx@proton.me"
www: "https://easysiem.com"
abi: "FreeBSD:*:amd64"
arch: "freebsd:*:amd64"
prefix: "/usr/local"
flatsize: 9864696
licenselogic: "single"
deps: {}
files: {
    "/usr/local/bin/easysiem-opnsense-agent": "1$8830d0145edebf6d01ac82a094d21639f514036fa2ff92db666a797472a53fbc",
    "/usr/local/etc/rc.d/easysiem_opnsense": "1$ead5b06fbb6c7a1b9f51edc7e4292a71aa457d35c9465cb2de303f8bcc411237",
    "/usr/local/etc/easysiem/agent.json.example": "1$1f4b4d1c3e12f17a2eb0bdcc1d3c7d49e4a405869f1e8a9d96d3c5c4d3f6faa9"
}
scripts: {
    "post-install": <<EOD
echo "===================================================================="
echo "EasySIEM OPNsense agent installed."
echo ""
echo "1. Copy /usr/local/etc/easysiem/agent.json.example to"
echo "   /usr/local/etc/easysiem/agent.json and fill in server_url,"
echo "   api_key (from the server's GETTING-STARTED.txt or genkey), and"
echo "   agent_id."
echo "2. Copy the server's server.crt to /usr/local/etc/easysiem/server.crt"
echo "   (or set insecure_skip_verify for a quick lab test)."
echo "3. sysrc easysiem_opnsense_enable=YES"
echo "4. service easysiem_opnsense start"
echo "===================================================================="
EOD
}
