summaryrefslogtreecommitdiff
path: root/conduit-git
diff options
context:
space:
mode:
authormetamuffin <metamuffin@disroot.org>2024-10-12 16:39:21 +0200
committermetamuffin <metamuffin@disroot.org>2024-10-12 16:39:21 +0200
commita9fd82ae18eb67f6288d46d40bc893598922d181 (patch)
tree0f8f2d2cef42fcac145d5beb097e76197bc6f232 /conduit-git
downloadpkgbuilds-a9fd82ae18eb67f6288d46d40bc893598922d181.tar
pkgbuilds-a9fd82ae18eb67f6288d46d40bc893598922d181.tar.bz2
pkgbuilds-a9fd82ae18eb67f6288d46d40bc893598922d181.tar.zst
add existing pkgbuilds
Diffstat (limited to 'conduit-git')
-rw-r--r--conduit-git/PKGBUILD42
-rw-r--r--conduit-git/conduit.service55
-rw-r--r--conduit-git/config.toml13
-rw-r--r--conduit-git/sysusers.conf1
-rw-r--r--conduit-git/tmpfiles.conf3
5 files changed, 114 insertions, 0 deletions
diff --git a/conduit-git/PKGBUILD b/conduit-git/PKGBUILD
new file mode 100644
index 0000000..c5dbe93
--- /dev/null
+++ b/conduit-git/PKGBUILD
@@ -0,0 +1,42 @@
+# Maintainer: metamuffin <metamuffin@disroot.org>
+
+pkgname=conduit-git
+pkgver=r2330.be1b8b68
+pkgrel=1
+pkgdesc="conduit matrix homeserver"
+arch=('i686' 'x86_64' 'armv6h' 'armv7h' 'aarch64')
+url="https://codeberg.org/metamuffin/conduit"
+license=('AGPL3')
+depends=('gcc-libs')
+makedepends=('rustup' 'clang')
+backup=('etc/conduit.toml')
+source=("git+https://gitlab.com/famedly/conduit.git"
+ "conduit.service"
+ "config.toml"
+ "tmpfiles.conf"
+ "sysusers.conf")
+sha256sums=("SKIP"
+ "SKIP"
+ "SKIP"
+ "SKIP"
+ "SKIP")
+pkgver() {
+ cd "conduit"
+ printf "r%s.%s" "$(git rev-list --count HEAD)" "$(git rev-parse --short HEAD)"
+}
+prepare() {
+ cd "conduit"
+ cargo fetch --locked --target "$CHOST"
+}
+build() {
+ cd "conduit"
+ cargo build --frozen --release --target "$CHOST"
+}
+package() {
+ install -Dm755 conduit/target/$CHOST/release/conduit "$pkgdir/usr/bin/conduit"
+ install -Dm644 config.toml "$pkgdir/etc/conduit.toml"
+ install -Dm644 sysusers.conf "$pkgdir/usr/lib/sysusers.d/conduit.conf"
+ install -Dm644 tmpfiles.conf "$pkgdir/usr/lib/tmpfiles.d/conduit.conf"
+ install -Dm644 conduit.service "$pkgdir/usr/lib/systemd/system/conduit.service"
+ install -Dm644 conduit/LICENSE "$pkgdir/usr/share/licenses/conduit/LICENSE"
+}
diff --git a/conduit-git/conduit.service b/conduit-git/conduit.service
new file mode 100644
index 0000000..d39a33b
--- /dev/null
+++ b/conduit-git/conduit.service
@@ -0,0 +1,55 @@
+
+[Unit]
+Description=Conduit Matrix Homeserver
+After=network.target nss-lookup.target
+
+[Service]
+Type=notify
+ExecStart=/usr/bin/conduit-matrix
+ExecReload=/bin/kill -HUP ${MAINPID}
+TimeoutSec=10
+Restart=on-failure
+
+Environment="CONDUIT_CONFIG=/etc/conduit.toml"
+WorkingDirectory=/var/lib/conduit-matrix
+
+StartLimitInterval=1m
+StartLimitBurst=5
+
+AmbientCapabilities=
+CapabilityBoundingSet=
+LockPersonality=yes
+ProcSubset=pid
+ProtectProc=invisible
+MemoryDenyWriteExecute=yes
+NoNewPrivileges=yes
+ProtectClock=yes
+ProtectControlGroups=yes
+ProtectHome=yes
+ProtectHostname=yes
+ProtectKernelLogs=yes
+ProtectKernelModules=yes
+ProtectKernelTunables=yes
+ProtectSystem=strict
+PrivateDevices=yes
+PrivateMounts=yes
+PrivateTmp=yes
+PrivateUsers=yes
+RemoveIPC=yes
+RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX
+RestrictNamespaces=yes
+RestrictRealtime=yes
+RestrictSUIDSGID=yes
+SystemCallArchitectures=native
+SystemCallFilter=@system-service
+SystemCallErrorNumber=EPERM
+StateDirectory=conduit-matrix
+RuntimeDirectory=conduit-matrix
+
+User=conduit-matrix
+Group=conduit-matrix
+ReadWriteDirectories=-/var/lib/conduit-matrix
+ReadWriteDirectories=-/var/log/conduit-matrix
+
+[Install]
+WantedBy=multi-user.target
diff --git a/conduit-git/config.toml b/conduit-git/config.toml
new file mode 100644
index 0000000..d72932c
--- /dev/null
+++ b/conduit-git/config.toml
@@ -0,0 +1,13 @@
+[global]
+server_name = "CHANGE THIS"
+database_path = "/var/lib/conduit-matrix/conduit_db"
+database_backend = "rocksdb"
+port = 6167
+address = "127.0.0.1"
+max_request_size = 20_000_000
+allow_registration = false
+registration_token = "CHANGE THIS"
+allow_encryption = true
+allow_federation = true
+enable_lightning_bolt = true
+trusted_servers = ["matrix.org"]
diff --git a/conduit-git/sysusers.conf b/conduit-git/sysusers.conf
new file mode 100644
index 0000000..feff1dc
--- /dev/null
+++ b/conduit-git/sysusers.conf
@@ -0,0 +1 @@
+u conduit - "conduit matrix homeserver" /var/lib/conduit-matrix -
diff --git a/conduit-git/tmpfiles.conf b/conduit-git/tmpfiles.conf
new file mode 100644
index 0000000..0647300
--- /dev/null
+++ b/conduit-git/tmpfiles.conf
@@ -0,0 +1,3 @@
+d /var/lib/conduit 0700 conduit conduit - -
+d /var/lib/conduit/conduit_db 0700 conduit conduit - -
+d /var/log/conduit 0700 conduit conduit - -