# This repository: OPNsense plugin + packaging/build scripts.
# Push this generated repository to your own Git server and set its URL here.
PACKAGING_REPO_URL=git@github.com:YOUR_ORG/rustproxy-opnsense.git
PACKAGING_REPO_REF=main
PACKAGING_WORKDIR=/srv/rustproxy-opnsense/packaging

# RustProxy application source. This is fetched independently on every cron run.
APP_REPO_URL=https://git.linuxiarz.pl/gru/RustProxy
# HEAD follows the default branch of the upstream repository. You can pin a branch,
# tag or other fetchable ref instead, for example: main, stable, v0.21.0.
APP_REPO_REF=HEAD
APP_WORKDIR=/srv/rustproxy-opnsense/source/RustProxy

# Local Debian state.
STATE_DIR=/var/lib/rustproxy-opnsense-builder

# Release builder. Use a FreeBSD 15.1 amd64 host for production packages.
BUILD_MODE=native-freebsd
FREEBSD_HOST=freebsd-builder.example.net
FREEBSD_USER=builder
FREEBSD_SSH_KEY=/root/.ssh/rustproxy_freebsd_builder
FREEBSD_REMOTE_DIR=/usr/local/rustproxy-build/project

# OPNsense branch/ABI targeted by the plugin package.
OPNSENSE_PLUGINS_REF=stable/26.7
OPNSENSE_ABI=26.7

# Paths on the FreeBSD builder. Leave empty for an unsigned development repo.
PKG_REPO_SIGN_KEY=/usr/local/rustproxy-build/keys/rustproxy-repo.key
PKG_REPO_PUBLIC_KEY=/usr/local/rustproxy-build/keys/rustproxy-repo.pub

# Publish dist/ over SSH/rsync. This should be the document root for RustProxy packages.
PUBLISH_TARGET=repo-user@packages.example.net:/srv/www/rustproxy/
PUBLISH_SSH_KEY=/root/.ssh/rustproxy_package_publisher

# Optional automatic upgrade of explicitly listed TEST firewalls after a successful publish.
# Disabled by default. Space-separated SSH targets, for example: root@fw-test-01 root@fw-test-02
AUTO_DEPLOY_HOSTS=
AUTO_DEPLOY_SSH_KEY=/root/.ssh/rustproxy_opnsense_test