From 81aef2a3bbf8e3d71a6be653b1fe5a68d39ea120 Mon Sep 17 00:00:00 2001
From: ale <ale@incal.net>
Date: Mon, 18 Jun 2018 08:11:05 +0100
Subject: [PATCH] Add Debian package metadata
---
debian/acmeserver.default | 1 +
debian/acmeserver.service | 23 +++++++++++++++++++++++
debian/changelog | 5 +++++
debian/compat | 1 +
debian/control | 13 +++++++++++++
debian/copyright | 25 +++++++++++++++++++++++++
debian/postinst | 16 ++++++++++++++++
debian/rules | 19 +++++++++++++++++++
debian/source/format | 1 +
9 files changed, 104 insertions(+)
create mode 100644 debian/acmeserver.default
create mode 100644 debian/acmeserver.service
create mode 100644 debian/changelog
create mode 100644 debian/compat
create mode 100644 debian/control
create mode 100644 debian/copyright
create mode 100755 debian/postinst
create mode 100755 debian/rules
create mode 100644 debian/source/format
diff --git a/debian/acmeserver.default b/debian/acmeserver.default
new file mode 100644
index 0000000..8536d13
--- /dev/null
+++ b/debian/acmeserver.default
@@ -0,0 +1 @@
+ADDR=:5004
diff --git a/debian/acmeserver.service b/debian/acmeserver.service
new file mode 100644
index 0000000..bc73174
--- /dev/null
+++ b/debian/acmeserver.service
@@ -0,0 +1,23 @@
+[Unit]
+Description=ACMEserver
+After=network.target
+
+[Service]
+User=acmeserver
+Group=acmeserver
+EnvironmentFile=-/etc/default/acmeserver
+ExecStart=/usr/bin/acmeserver --addr $ADDR
+Restart=always
+
+# Hardening
+NoNewPrivileges=yes
+PrivateTmp=yes
+PrivateDevices=yes
+ProtectHome=yes
+ProtectSystem=full
+ReadOnlyDirectories=/
+CapabilityBoundingSet=CAP_NET_BIND_SERVICE
+
+[Install]
+WantedBy=multi-user.target
+
diff --git a/debian/changelog b/debian/changelog
new file mode 100644
index 0000000..6ddd715
--- /dev/null
+++ b/debian/changelog
@@ -0,0 +1,5 @@
+acmeserver (2.0) unstable; urgency=medium
+
+ * Initial Release.
+
+ -- Autistici/Inventati <debian@autistici.org> Sat, 15 Jun 2018 09:23:40 +0000
diff --git a/debian/compat b/debian/compat
new file mode 100644
index 0000000..f599e28
--- /dev/null
+++ b/debian/compat
@@ -0,0 +1 @@
+10
diff --git a/debian/control b/debian/control
new file mode 100644
index 0000000..22160a5
--- /dev/null
+++ b/debian/control
@@ -0,0 +1,13 @@
+Source: acmeserver
+Section: admin
+Priority: optional
+Maintainer: Autistici/Inventati <debian@autistici.org>
+Build-Depends: debhelper (>=9), golang-go, dh-systemd, dh-golang
+Standards-Version: 3.9.6
+
+Package: acmeserver
+Architecture: any
+Depends: ${shlibs:Depends}, ${misc:Depends}
+Description: ACME server
+ Automatically manages and renews public SSL certificates.
+
diff --git a/debian/copyright b/debian/copyright
new file mode 100644
index 0000000..f268beb
--- /dev/null
+++ b/debian/copyright
@@ -0,0 +1,25 @@
+Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
+Upstream-Name: acmeserver
+Source: <https://git.autistici.org/ai3/acmeserver>
+
+Files: *
+Copyright: 2018 Autistici/Inventati <info@autistici.org>
+License: GPL-3.0+
+
+License: GPL-3.0+
+ This program is free software: you can redistribute it and/or modify
+ it under the terms of the GNU General Public License as published by
+ the Free Software Foundation, either version 3 of the License, or
+ (at your option) any later version.
+ .
+ This package is distributed in the hope that it will be useful,
+ but WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ GNU General Public License for more details.
+ .
+ You should have received a copy of the GNU General Public License
+ along with this program. If not, see <https://www.gnu.org/licenses/>.
+ .
+ On Debian systems, the complete text of the GNU General
+ Public License version 3 can be found in "/usr/share/common-licenses/GPL-3".
+
diff --git a/debian/postinst b/debian/postinst
new file mode 100755
index 0000000..9766d93
--- /dev/null
+++ b/debian/postinst
@@ -0,0 +1,16 @@
+#!/bin/sh
+
+set -e
+
+case "$1" in
+configure)
+ addgroup --system --quiet acmeserver
+ adduser --system --no-create-home --home /run/acmeserver \
+ --disabled-password --disabled-login \
+ --quiet --ingroup acmeserver acmeserver
+ ;;
+esac
+
+#DEBHELPER#
+
+exit 0
diff --git a/debian/rules b/debian/rules
new file mode 100755
index 0000000..f0ecee8
--- /dev/null
+++ b/debian/rules
@@ -0,0 +1,19 @@
+#!/usr/bin/make -f
+
+export DH_GOPKG = git.autistici.org/ai3/acmeserver
+export DH_GOLANG_EXCLUDES = vendor
+
+
+%:
+ dh $@ --with systemd --with golang --buildsystem golang
+
+override_dh_install:
+ rm -fr $(CURDIR)/debian/acmeserver/usr/share/gocode
+ dh_install
+
+override_dh_systemd_enable:
+ dh_systemd_enable --no-enable
+
+override_dh_systemd_start:
+ dh_systemd_start --no-start
+
diff --git a/debian/source/format b/debian/source/format
new file mode 100644
index 0000000..89ae9db
--- /dev/null
+++ b/debian/source/format
@@ -0,0 +1 @@
+3.0 (native)
--
GitLab