intrusion detection: provide custom.yaml stub #2268

plist

@@ -1182,5 +1182,6 @@
 @sample /usr/local/etc/bogons.sample
 @sample /usr/local/etc/bogonsv6.sample
 @sample /usr/local/etc/config.xml.sample
+@sample /usr/local/opnsense/service/templates/OPNsense/IDS/custom.yaml.sample
 @shadow /usr/local/etc/pkg/repos/FreeBSD.conf.sample
 @shadow /usr/local/etc/pkg/repos/origin.conf.sample

src/opnsense/service/templates/OPNsense/IDS/+TARGETS

@@ -1,8 +1,9 @@
+OPNsense.rules:/usr/local/etc/suricata/rules/OPNsense.rules
+classification.config:/usr/local/etc/suricata/classification.config
+custom.yaml:/usr/local/etc/suricata/custom.yaml
+newsyslog.conf:/etc/newsyslog.conf.d/suricata
 rc.conf.d:/etc/rc.conf.d/suricata
+reference.config:/usr/local/etc/suricata/reference.config
+rule-updater.config:/usr/local/etc/suricata/rule-updater.config
 rules.config:/usr/local/etc/suricata/rules.config
 suricata.yaml:/usr/local/etc/suricata/suricata.yaml
-newsyslog.conf:/etc/newsyslog.conf.d/suricata
-rule-updater.config:/usr/local/etc/suricata/rule-updater.config
-classification.config:/usr/local/etc/suricata/classification.config
-reference.config:/usr/local/etc/suricata/reference.config
-OPNsense.rules:/usr/local/etc/suricata/rules/OPNsense.rules

src/opnsense/service/templates/OPNsense/IDS/custom.yaml.sample

@@ -0,0 +1 @@
+# empty stub for custom modifications

src/opnsense/service/templates/OPNsense/IDS/suricata.yaml

@@ -1146,3 +1146,6 @@ napatech:
 
 # include installed rules list (generated by OPNsense install rules script)
 include: installed_rules.yaml
+
+# include custom file (may be persistently modified)
+include: custom.yaml