add existing pkgbuilds

3 files changed, 75 insertions, 0 deletions

diff --git a/keks-meet-server-git/PKGBUILD b/keks-meet-server-git/PKGBUILD
new file mode 100644
index 0000000..121fd26
--- /dev/null
+++ b/keks-meet-server-git/PKGBUILD
@@ -0,0 +1,40 @@
+# Maintainer: metamuffin <metamuffin@disroot.org>
+
+pkgname=keks-meet-server-git
+pkgver=r383.4f926ff
+pkgrel=1
+pkgdesc="Server for keks-meet, a simple and secure conferencing application for the web."
+arch=('i686' 'x86_64' 'armv6h' 'armv7h' 'aarch64')
+url="https://codeberg.org/metamuffin/keks-meet"
+license=('AGPL3')
+makedepends=('rustup' 'esbuild')
+conflics=('keks-meet-server')
+provides=('keks-meet-server')
+backup=('etc/keks-meet-server.toml')
+source=("git+https://codeberg.org/metamuffin/keks-meet.git"
+        "keks-meet-server.service"
+        "sysusers.conf")
+sha256sums=("SKIP"
+            "SKIP"
+            "SKIP")
+
+pkgver() {
+    cd "keks-meet"
+    printf "r%s.%s" "$(git rev-list --count HEAD)" "$(git rev-parse --short HEAD)"
+}
+prepare() {
+    cd "keks-meet"
+    cargo fetch --locked --target "$CHOST"
+}
+build() {
+    cd "keks-meet"
+    make client-build
+    cargo +nightly build --frozen --release --bin keks-meet-server --target "$CHOST"
+}
+package() {
+    install -Dm755 keks-meet/target/$CHOST/release/keks-meet-server "$pkgdir/usr/bin/keks-meet-server"
+    install -Dm644 sysusers.conf "$pkgdir/usr/lib/sysusers.d/keks-meet-server.conf"
+    install -Dm644 keks-meet-server.service "$pkgdir/usr/lib/systemd/system/keks-meet-server.service"
+    install -Dm644 keks-meet/COPYING "$pkgdir/usr/share/licenses/keks-meet/COPYING"
+    install -Dm644 keks-meet/config/default.toml "$pkgdir/etc/keks-meet-server.toml"
+}
diff --git a/keks-meet-server-git/keks-meet-server.service b/keks-meet-server-git/keks-meet-server.service
new file mode 100644
index 0000000..79c55cd
--- /dev/null
+++ b/keks-meet-server-git/keks-meet-server.service
@@ -0,0 +1,34 @@
+[Unit]
+Description=keks-meet Server Daemon
+After=network.target
+Wants=network-online.target
+
+[Service]
+AmbientCapabilities=CAP_NET_BIND_SERVICE
+CapabilityBoundingSet=CAP_NET_BIND_SERVICE
+ExecStart=/usr/bin/keks-meet-server /etc/keks-meet-server.toml
+User=keks-meet-server
+LockPersonality=yes
+MemoryDenyWriteExecute=yes
+NoNewPrivileges=yes
+PrivateDevices=true
+PrivateTmp=true
+ProtectClock=yes
+ProtectControlGroups=yes
+ProtectHome=true
+ProtectHostname=yes
+ProtectKernelLogs=yes
+ProtectKernelModules=yes
+ProtectKernelTunables=yes
+ProtectSystem=full
+RestrictAddressFamilies=~AF_PACKET AF_NETLINK
+RestrictNamespaces=yes
+RestrictSUIDSGID=yes
+RestrictRealtime=yes
+Restart=always
+SystemCallArchitectures=native
+SystemCallFilter=@system-service
+Type=simple
+
+[Install]
+WantedBy=multi-user.target
diff --git a/keks-meet-server-git/sysusers.conf b/keks-meet-server-git/sysusers.conf
new file mode 100644
index 0000000..0853982
--- /dev/null
+++ b/keks-meet-server-git/sysusers.conf
@@ -0,0 +1 @@
+u keks-meet-server - "keks-meet server daemon" - -