4 files changed, 80 insertions, 0 deletions
diff --git a/meta-adservices-git/PKGBUILD b/meta-adservices-git/PKGBUILD
new file mode 100644
index 0000000..345f323
--- /dev/null
+++ b/meta-adservices-git/PKGBUILD
@@ -0,0 +1,42 @@
+# Maintainer: metamuffin <metamuffin@disroot.org>
+
+pkgname=meta-adservices-git
+pkgver=r15.27e6f6e
+pkgrel=1
+pkgdesc="Funny adservice."
+arch=('i686' 'x86_64' 'armv6h' 'armv7h' 'aarch64')
+url="https://codeberg.org/metamuffin/meta-adservices"
+license=('AGPL-3.0-only')
+depends=()
+makedepends=('rustup')
+backup=('etc/meta_adservices.toml')
+source=("git+https://codeberg.org/metamuffin/meta-adservices.git"
+        "meta_adservices.service"
+        "meta_adservices.toml"
+        "sysusers.conf")
+sha256sums=("SKIP"
+            "SKIP"
+            "SKIP"
+            "SKIP")
+
+pkgver() {
+    cd "meta-adservices"
+    printf "r%s.%s" "$(git rev-list --count HEAD)" "$(git rev-parse --short HEAD)"
+}
+prepare() {
+    cd "meta-adservices"
+    rustup default nightly
+    cargo +nightly fetch --target "$CHOST"
+}
+build() {
+    cd "meta-adservices"
+    cargo +nightly build --release --target "$CHOST"
+}
+package() {
+    install -Dm755 meta-adservices/target/$CHOST/release/meta-adservices "$pkgdir/usr/bin/meta-adservices"
+    install -Dm644 meta-adservices/COPYING "$pkgdir/usr/share/licenses/meta-adservices/COPYING"
+    install -Dm644 sysusers.conf "$pkgdir/usr/lib/sysusers.d/meta-adservices.conf"
+    install -Dm644 meta_adservices.service "$pkgdir/usr/lib/systemd/system/meta_adservices.service"
+    install -Dm644 meta_adservices.toml "$pkgdir/etc/meta_adservices.toml"
+    mkdir -p "$pkgdir/var/lib/meta_adservices"
+}
diff --git a/meta-adservices-git/meta_adservices.service b/meta-adservices-git/meta_adservices.service
new file mode 100644
index 0000000..09ab329
--- /dev/null
+++ b/meta-adservices-git/meta_adservices.service
@@ -0,0 +1,32 @@
+[Unit]
+Description=meta adservices
+After=network.target
+Wants=network-online.target
+
+[Service]
+ExecStart=/usr/bin/meta-adservices /etc/meta_adservices.toml
+User=meta_adservices
+LockPersonality=yes
+MemoryDenyWriteExecute=yes
+NoNewPrivileges=yes
+PrivateDevices=true
+PrivateTmp=true
+ProtectClock=yes
+ProtectControlGroups=yes
+ProtectHome=true
+ProtectHostname=yes
+ProtectKernelLogs=yes
+ProtectKernelModules=yes
+ProtectKernelTunables=yes
+ProtectSystem=full
+RestrictAddressFamilies=~AF_PACKET AF_NETLINK
+RestrictNamespaces=yes
+RestrictSUIDSGID=yes
+RestrictRealtime=yes
+Restart=always
+SystemCallArchitectures=native
+SystemCallFilter=@system-service
+Type=simple
+
+[Install]
+WantedBy=multi-user.target
diff --git a/meta-adservices-git/meta_adservices.toml b/meta-adservices-git/meta_adservices.toml
new file mode 100644
index 0000000..fccd0f7
--- /dev/null
+++ b/meta-adservices-git/meta_adservices.toml
@@ -0,0 +1,5 @@
+bloom_filter_size = 10000
+impression_weight_falloff = 0.9
+database_path = "/var/lib/meta_adservices/db"
+ad_dir = "/var/local/ads"
+port = 44492
diff --git a/meta-adservices-git/sysusers.conf b/meta-adservices-git/sysusers.conf
new file mode 100644
index 0000000..5de1ebe
--- /dev/null
+++ b/meta-adservices-git/sysusers.conf
@@ -0,0 +1 @@
+u meta_adservices - "meta adservices server user" /var/lib/meta_adservices -