I had ported the Rust version a couple of months ago which I think
you'd be interested in since it adds flexibility in how you give
file and doas access to the (new) reaction user instead of giving
reaction root access.

New version will be attached, but initial post for reference:
https://marc.info/?l=openbsd-ports&m=177613283314721&w=2

Some notes about the port I forgot to mention:
The port is written from scratch since I wasn't sure if people
would want to specifically keep the Go version for their systems.

The default is that only wheel users get access to the reaction
socket.

The port might need more testing because as of v2.4.0 I would
get reaction failing on boot at times because of a database
lock file.

The rc.d boot script could really use some improvement.

On Sun, 14 Jun 2026 21:40:34 +0200
"Lydia Sobot" <chilledfrogs@disroot.org> wrote:

> Hi all, attached is a major update to reaction, bringing it finally into
> the 2.x series. It has been rewritten in Rust from Go, but its
> user-facing configuration hasn't changed much structurally by the looks
> of it, considering that the default configuration file provided in-tree
> only had to be lightly modified. I am willing to take maintainer if no
> one else wants to, and I am in touch with upstream regarding future
> development, in particular regarding more plugins (I already looked into
> using MULTI_PACKAGES then when it becomes relevant).
> 
> Tested for a few days on arm64, it seems to work like a charm in
> blocking bots for SSH with pf, more testing very welcome.

• sysutils-reaction.tar.gz (34K)