diff --git a/dns/powerdns/Makefile b/dns/powerdns/Makefile
index a37a569ab628..a67e9f7bb13d 100644
--- a/dns/powerdns/Makefile
+++ b/dns/powerdns/Makefile
@@ -1,129 +1,129 @@
 PORTNAME=	powerdns
-DISTVERSION=	4.9.8
+DISTVERSION=	5.0.0
 CATEGORIES=	dns
 MASTER_SITES=	https://downloads.powerdns.com/releases/
 DISTNAME=	pdns-${DISTVERSION}
 
 MAINTAINER=	tremere@cainites.net
 COMMENT=	Advanced DNS server with multiple backends including SQL
 WWW=		https://www.powerdns.com/auth.html
 
 LICENSE=	GPLv2
 
 NOT_FOR_ARCHS=	i386
 NOT_FOR_ARCHS_REASON=	archs with 32-bits time_t are no longer supported by upstream
 
 LIB_DEPENDS=	libboost_program_options.so:devel/boost-libs \
 		libcurl.so:ftp/curl
 
 USES=		autoreconf compiler:c++11-lib cpe gmake libtool \
 		localbase:ldflags pathfix pkgconfig ssl tar:bzip2
 
 USE_RC_SUBR=	pdns
 USE_SUBMAKE=	yes
 
 GNU_CONFIGURE=	yes
 CONFIGURE_ARGS=	--disable-static \
 		--docdir="${PREFIX}/share/doc/powerdns" \
 		--sysconfdir="${PREFIX}/etc/pdns" \
 		--with-boost="${LOCALBASE}" \
 		--with-dynmodules="pipe bind ${MODULES}" \
 		--with-libsodium=no \
 		--with-modules=""
 
 SCRIPTS_ENV=	CURDIR2="${.CURDIR}" \
 		DISTNAME="${DISTNAME}" \
 		MKDIR="${MKDIR}" \
 		POWERDNS_OPTIONS="${POWERDNS_OPTIONS}" \
 		WRKDIRPREFIX="${WRKDIRPREFIX}"
 INSTALL_TARGET=	install-strip
 SUB_FILES=	pkg-message
 
 USERS=		pdns
 GROUPS=		pdns
 
 OPTIONS_DEFINE=		DOCS EXAMPLES GEOIP IXFRDIST LMDB LUABACKEND MYSQL \
 			OPENLDAP PGSQL REMOTE SQLITE3 TINYDNS TOOLS UNIXODBC \
 			ZEROMQ
 OPTIONS_DEFAULT=	LMDB LUA MYSQL PGSQL SQLITE3
 OPTIONS_SINGLE=		EXTLUA
 OPTIONS_SINGLE_EXTLUA=	LUA LUAJIT
 
 OPTIONS_SUB=		yes
 
 EXTLUA_DESC=		Lua library
 GEOIP_DESC=		GeoIP backend (GeoIP2 DB)
 IXFRDIST_DESC=		Build ixfrdist
 LMDB_DESC=		LMDB backend
 LUABACKEND_DESC=	Lua2 backend
 LUAJIT_DESC=		Use luajit
 LUA_DESC=		Use lang/lua
 MYSQL_DESC=		MySQL backend
 OPENLDAP_DESC=		OpenLDAP backend
 PGSQL_DESC=		PostgreSQL backend
 REMOTE_DESC=		Remote backend
 SQLITE3_DESC=		SQLite 3 backend
 TINYDNS_DESC=		TinyDNS backend
 TOOLS_DESC=		Build extra tools
 ZEROMQ_DESC=		Enable ZeroMQ connector (Implies REMOTE enabled)
 
 GEOIP_LIB_DEPENDS=	libmaxminddb.so:net/libmaxminddb \
 			libyaml-cpp.so:devel/yaml-cpp
 GEOIP_VARS=		MODULES+=geoip
 
 IXFRDIST_LIB_DEPENDS=	libyaml-cpp.so:devel/yaml-cpp
 IXFRDIST_CONFIGURE_ENABLE=	ixfrdist
 
 LMDB_LIB_DEPENDS=	liblmdb.so:databases/lmdb \
 			libboost_serialization.so:devel/boost-libs
 LMDB_CONFIGURE_ON=	--with-lmdb=${LOCALBASE}
 LMDB_CONFIGURE_OFF=	--without-lmdb
 LMDB_VARS=		MODULES+=lmdb
 
 LUABACKEND_VARS=	MODULES+=lua2
 
 LUAJIT_USES=		luajit
 LUAJIT_CONFIGURE_ON=	--with-lua=luajit
 
 LUA_USES=		lua
 
 MYSQL_LIB_DEPENDS=	libunwind.so:devel/libunwind
 MYSQL_USES=		mysql
 MYSQL_CONFIGURE_ON=	--with-mysql=${LOCALBASE}
 MYSQL_CONFIGURE_OFF=	--without-mysql
 MYSQL_VARS=		MODULES+=gmysql
 
 OPENLDAP_USES=		ldap
 OPENLDAP_CXXFLAGS=	-DLDAP_DEPRECATED=1
 OPENLDAP_VARS=		MODULES+=ldap
 
 PGSQL_USES=		pgsql
 PGSQL_CONFIGURE_ON=	--with-pg-config=${LOCALBASE}/bin/pg_config
 PGSQL_VARS=		MODULES+=gpgsql
 
 REMOTE_VARS=		MODULES+=remote
 
 SQLITE3_USES=		sqlite:3
 SQLITE3_VARS=		MODULES+=gsqlite3
 
 TINYDNS_LIB_DEPENDS=	libcdb.so:databases/tinycdb
 TINYDNS_CONFIGURE_ON=	CDB_CFLAGS="-I${LOCALBASE}/include" \
 			CDB_LIBS="-L${LOCALBASE}/lib -lcdb"
 TINYDNS_VARS=		MODULES+=tinydns
 
 TOOLS_CONFIGURE_ENABLE=	tools
 
 UNIXODBC_LIB_DEPENDS=	libodbc.so:databases/unixODBC
 UNIXODBC_VARS=		MODULES+=godbc
 
 ZEROMQ_IMPLIES=		REMOTE
 ZEROMQ_LIB_DEPENDS=	libzmq.so:net/libzmq4
 ZEROMQ_CONFIGURE_ON=	--enable-remotebackend-zeromq
 
 post-install::
 	@${MKDIR} ${STAGEDIR}${EXAMPLESDIR} ${STAGEDIR}/var/run/pdns
 	@${STAGEDIR}${PREFIX}/sbin/pdns_server --module-dir=${STAGEDIR}${PREFIX}/lib/pdns \
 		--launch="pipe bind ${MODULES}" --config > ${STAGEDIR}${EXAMPLESDIR}/pdns.conf
 	@${REINPLACE_CMD} -e 's;${STAGEDIR};;' -i '' ${STAGEDIR}${EXAMPLESDIR}/pdns.conf
 
 .include <bsd.port.mk>
diff --git a/dns/powerdns/distinfo b/dns/powerdns/distinfo
index 29ad512c09c1..1fcc8a85a098 100644
--- a/dns/powerdns/distinfo
+++ b/dns/powerdns/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1754983765
-SHA256 (pdns-4.9.8.tar.bz2) = 180b66ae332d3166968e013bff7cbf6f0c72869d6be697db74a02df3ac6e8a91
-SIZE (pdns-4.9.8.tar.bz2) = 1363358
+TIMESTAMP = 1755867970
+SHA256 (pdns-5.0.0.tar.bz2) = 0dcce355d97a99acefc1d45d63c117d952149867dc7983236f7efc9e041b0a30
+SIZE (pdns-5.0.0.tar.bz2) = 1432702
diff --git a/dns/powerdns/files/patch-m4_pdns__check__libcrypto.m4 b/dns/powerdns/files/patch-m4_pdns__check__libcrypto.m4
index 6bd1ed29d7ef..93d52cf80054 100644
--- a/dns/powerdns/files/patch-m4_pdns__check__libcrypto.m4
+++ b/dns/powerdns/files/patch-m4_pdns__check__libcrypto.m4
@@ -1,14 +1,15 @@
---- m4/pdns_check_libcrypto.m4.orig	2023-06-01 06:54:16 UTC
+--- m4/pdns_check_libcrypto.m4.orig	2025-08-22 07:51:37 UTC
 +++ m4/pdns_check_libcrypto.m4
 @@ -75,8 +75,10 @@ AC_DEFUN([PDNS_CHECK_LIBCRYPTO], [
          for ssldir in $ssldirs; do
              AC_MSG_CHECKING([for openssl/crypto.h in $ssldir])
              if test -f "$ssldir/include/openssl/crypto.h"; then
 -                LIBCRYPTO_INCLUDES="-I$ssldir/include"
 -                LIBCRYPTO_LDFLAGS="-L$ssldir/lib"
 +                if test $ssldir != /usr; then
 +                    LIBCRYPTO_INCLUDES="-I$ssldir/include"
 +                    LIBCRYPTO_LDFLAGS="-L$ssldir/lib"
 +                fi
                  LIBCRYPTO_LIBS="-lcrypto"
                  found=true
+                 AC_MSG_RESULT([yes])
diff --git a/dns/powerdns/files/patch-m4_pdns__with__lua.m4 b/dns/powerdns/files/patch-m4_pdns__with__lua.m4
index ca71a8619a53..bafc55a676d8 100644
--- a/dns/powerdns/files/patch-m4_pdns__with__lua.m4
+++ b/dns/powerdns/files/patch-m4_pdns__with__lua.m4
@@ -1,11 +1,11 @@
---- m4/pdns_with_lua.m4.orig	2020-09-30 10:42:53 UTC
+--- m4/pdns_with_lua.m4.orig	2025-09-05 09:28:15 UTC
 +++ m4/pdns_with_lua.m4
-@@ -41,7 +41,7 @@ AC_DEFUN([PDNS_WITH_LUA],[
-       ], [ : ])
-       AS_IF([test -z "$LUAPC"], [
-         found_lua=n
--        m4_foreach_w([luapc], [lua5.3 lua-5.3 lua53 lua5.2 lua-5.2 lua52 lua5.1 lua-5.1 lua51 lua], [
-+        m4_foreach_w([luapc], [lua5.4 lua-5.4 lua54 lua5.3 lua-5.3 lua53 lua5.2 lua-5.2 lua52 lua5.1 lua-5.1 lua51 lua], [
-           AS_IF([test "$found_lua" != "y"], [
-             PKG_CHECK_MODULES([LUA], [luapc >= ${lua_min_version}], [
-               AC_DEFINE([HAVE_LUA], [1], [Define to 1 if you have lua])
+@@ -40,7 +40,7 @@ AC_DEFUN([PDNS_WITH_LUA],[
+     ], [ : ])
+     AS_IF([test -z "$LUAPC"], [
+       found_lua=n
+-      m4_foreach_w([luapc], [lua5.3 lua-5.3 lua53 lua5.2 lua-5.2 lua52 lua5.1 lua-5.1 lua51 lua], [
++      m4_foreach_w([luapc], [lua5.4 lua5.3 lua-5.4 lua-5.3 lua54 lua53 lua5.2 lua-5.2 lua52 lua5.1 lua-5.1 lua51 lua], [
+         AS_IF([test "$found_lua" != "y"], [
+           PKG_CHECK_MODULES([LUA], [luapc >= ${lua_min_version}], [
+             AC_DEFINE([HAVE_LUA], [1], [Define to 1 if you have lua])
diff --git a/dns/powerdns/files/patch-pdns_auth-main.cc b/dns/powerdns/files/patch-pdns_auth-main.cc
index 38c715a46e17..e3b3fe86fe2a 100644
--- a/dns/powerdns/files/patch-pdns_auth-main.cc
+++ b/dns/powerdns/files/patch-pdns_auth-main.cc
@@ -1,13 +1,13 @@
---- pdns/auth-main.cc.orig	2023-06-01 06:54:16 UTC
+--- pdns/auth-main.cc.orig	2025-08-22 07:51:37 UTC
 +++ pdns/auth-main.cc
-@@ -278,8 +278,8 @@ static void declareArguments()
+@@ -282,8 +282,8 @@ static void declareArguments()
  
    ::arg().setSwitch("no-shuffle", "Set this to prevent random shuffling of answers - for regression testing") = "off";
  
 -  ::arg().set("setuid", "If set, change user id to this uid for more security") = "";
 -  ::arg().set("setgid", "If set, change group id to this gid for more security") = "";
 +  ::arg().set("setuid", "If set, change user id to this uid for more security") = "pdns";
 +  ::arg().set("setgid", "If set, change group id to this gid for more security") = "pdns";
  
    ::arg().set("max-cache-entries", "Maximum number of entries in the query cache") = "1000000";
    ::arg().set("max-packet-cache-entries", "Maximum number of entries in the packet cache") = "1000000";
diff --git a/dns/powerdns/files/pdns.in b/dns/powerdns/files/pdns.in
index 1326371c92dc..f3865623b017 100644
--- a/dns/powerdns/files/pdns.in
+++ b/dns/powerdns/files/pdns.in
@@ -1,37 +1,37 @@
 #!/bin/sh
 
 # PROVIDE: pdns_server
 # REQUIRE: DAEMON SERVERS mysql postgresql slapd
 # KEYWORD: shutdown
 
 #
 # Add the following lines to /etc/rc.conf to enable powerdns:
 #
 # pdns_enable="YES"
 # pdns_flags="<set as needed>"
 #
 # See pdns_server(8) for flags.
 #
 
 . /etc/rc.subr
 
 name=pdns
 rcvar=pdns_enable
 
 load_rc_config ${name}
 
 pdns_enable=${pdns_enable:-"NO"}
 : ${pdns_svcj_options:="net_basic"}
 pdns_conf=${pdns_conf:-"%%PREFIX%%/etc/pdns/pdns.conf"}
 
 required_files=${pdns_conf}
 
-pidfile=/var/run/pdns/${name}.pid
+pidfile=/var/run/${name}/${name}.pid
 
 command=%%PREFIX%%/sbin/pdns_server
 command_args="${pdns_flags} --daemon --guardian"
 
 monitor_cmd="${command} --daemon=no --guardian=no --control-console --loglevel=9"
 extra_commands="monitor"
 
 run_rc_command "$1"