diff --git a/anubis/APKBUILD b/anubis/APKBUILD old mode 100644 new mode 100755 diff --git a/anubis/anubis.initd b/anubis/anubis.initd old mode 100644 new mode 100755 diff --git a/anubis/anubis.pre-install b/anubis/anubis.pre-install old mode 100644 new mode 100755 diff --git a/beszel/APKBUILD b/beszel/APKBUILD old mode 100644 new mode 100755 diff --git a/beszel/beszel-agent.confd b/beszel/beszel-agent.confd old mode 100644 new mode 100755 diff --git a/beszel/beszel-agent.initd b/beszel/beszel-agent.initd old mode 100644 new mode 100755 diff --git a/beszel/beszel-agent.pre-install b/beszel/beszel-agent.pre-install old mode 100644 new mode 100755 diff --git a/beszel/beszel.confd b/beszel/beszel.confd old mode 100644 new mode 100755 diff --git a/beszel/beszel.initd b/beszel/beszel.initd old mode 100644 new mode 100755 diff --git a/beszel/beszel.pre-install b/beszel/beszel.pre-install old mode 100644 new mode 100755 diff --git a/minoplhy-crowdsec-firewall-bouncer/APKBUILD b/minoplhy-crowdsec-firewall-bouncer/APKBUILD new file mode 100755 index 0000000..df4cdcb --- /dev/null +++ b/minoplhy-crowdsec-firewall-bouncer/APKBUILD @@ -0,0 +1,41 @@ +pkgname=crowdsec-firewall-bouncer +pkgver=0.0.31 +pkgrel=0 +pkgdesc="Crowdsec Bouncer: Iptables Firewall" +url="https://crowdsec.net/" +arch="all" +license="MIT" +depends="iptables ipset" +makedepends="go" +subpackages=" + $pkgname-openrc + " +options="!check" # no test suite identified +source="$pkgname-$pkgver.tar.gz::https://github.com/crowdsecurity/cs-firewall-bouncer/archive/refs/tags/v$pkgver.tar.gz + "$pkgname".initd + " + +export GOCACHE="${GOCACHE:-"$srcdir/go-cache"}" +export GOTMPDIR="${GOTMPDIR:-"$srcdir"}" +export GOMODCACHE="${GOMODCACHE:-"$srcdir/go"}" + +builddir="$srcdir"/cs-firewall-bouncer-$pkgver + +build() { + make binary \ + BUILD_VERSION=v$pkgver \ + BUILD_TAG="aports" +} + + +package() { + install -Dm 0755 "$builddir"/crowdsec-firewall-bouncer "$pkgdir"/usr/bin/crowdsec-firewall-bouncer + install -Dm 0755 "$srcdir"/"$pkgname".initd "$pkgdir"/etc/init.d/"$pkgname" + + install -dm 0755 \ + "$pkgdir"/etc/crowdsec/bouncers + + install -m 0600 \ + "$builddir"/config/crowdsec-firewall-bouncer.yaml \ + "$pkgdir"/etc/crowdsec/bouncers +} \ No newline at end of file diff --git a/minoplhy-crowdsec-firewall-bouncer/crowdsec-firewall-bouncer.initd b/minoplhy-crowdsec-firewall-bouncer/crowdsec-firewall-bouncer.initd new file mode 100755 index 0000000..53b4041 --- /dev/null +++ b/minoplhy-crowdsec-firewall-bouncer/crowdsec-firewall-bouncer.initd @@ -0,0 +1,20 @@ +#!/sbin/openrc-run + +command=/usr/bin/crowdsec-firewall-bouncer +command_args="-c /etc/crowdsec/bouncers/crowdsec-firewall-bouncer.yaml" +pidfile="/run/${RC_SVCNAME}.pid" +command_background=true +extra_started_commands="reload" +description_reload="Reload configuration" + +depend() { + need net + after firewall + use logger +} + +reload() { + ebegin "Reloading $RC_SVCNAME" + start-stop-daemon --signal HUP --pidfile "$pidfile" + eend $? +} diff --git a/minoplhy-crowdsec/APKBUILD b/minoplhy-crowdsec/APKBUILD new file mode 100755 index 0000000..19c2a75 --- /dev/null +++ b/minoplhy-crowdsec/APKBUILD @@ -0,0 +1,103 @@ +# Contributor: tetsumaki +# Contributor: Nicolas Lorin +# Maintainer: Nicolas Lorin +pkgname=crowdsec +pkgver=1.6.8 +pkgrel=0 +pkgdesc="behavior detection engine, coupled with a global IP reputation network" +url="https://crowdsec.net/" +arch="all" +license="MIT" +makedepends="go sqlite-dev re2-dev" +subpackages=" + $pkgname-openrc + $pkgname-email-plugin:_plugin + $pkgname-http-plugin:_plugin + $pkgname-sentinel-plugin:_plugin + $pkgname-slack-plugin:_plugin + $pkgname-splunk-plugin:_plugin + $pkgname-discord-plugin:_plugin + " +options="!check" # no test suite identified +source="$pkgname-$pkgver-2.tar.gz::https://github.com/crowdsecurity/crowdsec/archive/refs/tags/v$pkgver.tar.gz + discord.yaml::https://owu.se/p-p/minoplhy/scriptbox/raw/branch/main/crowdsec-notifications/discord.yaml + system-sqlite.patch + crowdsec.initd + " + +export GOCACHE="${GOCACHE:-"$srcdir/go-cache"}" +export GOTMPDIR="${GOTMPDIR:-"$srcdir"}" +export GOMODCACHE="${GOMODCACHE:-"$srcdir/go"}" + +build() { + make \ + BUILD_VERSION=v$pkgver \ + BUILD_TAG="aports" +} + +package() { + install -dm 0755 \ + "$pkgdir"/etc/crowdsec/acquis.d \ + "$pkgdir"/etc/crowdsec/hub \ + "$pkgdir"/etc/crowdsec/notifications \ + "$pkgdir"/etc/crowdsec/patterns \ + "$pkgdir"/usr/libexec/crowdsec/plugins \ + "$pkgdir"/var/lib/crowdsec/data + install -Dm 0755 "$srcdir"/crowdsec.initd "$pkgdir"/etc/init.d/crowdsec + install -Dm 0755 cmd/crowdsec-cli/cscli "$pkgdir"/usr/bin/cscli + install -m 0755 cmd/crowdsec/crowdsec "$pkgdir"/usr/bin/crowdsec + install -m 0644 config/patterns/* "$pkgdir"/etc/crowdsec/patterns/ + install -m 0644 \ + config/acquis.yaml \ + config/console.yaml \ + config/profiles.yaml \ + config/simulation.yaml \ + "$pkgdir"/etc/crowdsec/ + install -m 0600 \ + config/local_api_credentials.yaml \ + config/online_api_credentials.yaml \ + "$pkgdir"/etc/crowdsec/ + install -m 0600 \ + cmd/notification-email/email.yaml \ + cmd/notification-http/http.yaml \ + cmd/notification-sentinel/sentinel.yaml \ + cmd/notification-slack/slack.yaml \ + cmd/notification-splunk/splunk.yaml \ + cmd/notification-sentinel/sentinel.yaml \ + "$srcdir"/discord.yaml \ + "$pkgdir"/etc/crowdsec/notifications + install -m 0551 \ + cmd/notification-email/notification-email \ + cmd/notification-http/notification-http \ + cmd/notification-sentinel/notification-sentinel \ + cmd/notification-slack/notification-slack \ + cmd/notification-splunk/notification-splunk \ + cmd/notification-sentinel/notification-sentinel \ + "$pkgdir"/usr/libexec/crowdsec/plugins/ + sed \ + -e '/^\s*pid_dir:/d' \ + -e 's/^\(\s*log_dir:\s*\)\(.*\)$/\1\/var\/log\/crowdsec\//' \ + -e 's/^\(\s*plugin_dir:\s*\)\(.*\)$/\1\/usr\/libexec\/crowdsec\/plugins\//' \ + -e 's/^\(\s*group:\s*\)\(\w*\)\(.*\)$/\1nobody\3/' \ + config/config.yaml \ + | install -m 0600 /dev/stdin "$pkgdir"/etc/crowdsec/config.yaml + sed 's/systemctl reload crowdsec/rc-service crowdsec reload/' config/crowdsec.cron.daily \ + | install -Dm 0750 /dev/stdin "$pkgdir"/etc/periodic/daily/crowdsec +} + +_plugin() { + _subpkgname="${subpkgname:9:(${#subpkgname}-16)}" + pkgdesc="$pkgname plugin: $_subpkgname" + depends="$pkgname=$pkgver-r$pkgrel" + amove etc/crowdsec/notifications/$_subpkgname.yaml + if [[ $_subpkgname -ne "discord" ]]; then + amove usr/libexec/crowdsec/plugins/notification-$_subpkgname + fi +} + +sha512sums=" +088456e434ca5908b4dd2ca90dc886a262bd12ff2f8e3e38430355500d19f5b0e1c8cc2ac4c6967cd0126a087c473b734a53ffda0e1a28eba89100278b2a5614 crowdsec-1.6.8-2.tar.gz +445c731b0b01a8219b00cac3ad5c02af3c9676ce620b6c202a0e85afb04ce9b351b408a07c2d5f07fba1f23d75a9427807f0852eb43658f91d49b39ed02ec49a discord.yaml +7a23e7b8551339f60dad0a391a7ccbce47c27901515ec12895c0092b7497f49c09df0e5626c859e6b0eba8a85ba460bb2e7da7dddce04f36483145657acd1023 system-sqlite.patch +098db47afd457c9d68c69097c31fae29cd0c0dc98199b254f75b130ac228ac43c024182bebd7eae756ae4fa2f54682b7f0534cb04311468224d9df2ce4f67ec2 crowdsec.initd +" diff --git a/minoplhy-crowdsec/crowdsec.initd b/minoplhy-crowdsec/crowdsec.initd new file mode 100755 index 0000000..78f4940 --- /dev/null +++ b/minoplhy-crowdsec/crowdsec.initd @@ -0,0 +1,18 @@ +#!/sbin/openrc-run + +command=/usr/bin/crowdsec +command_args="-c /etc/crowdsec/config.yaml" +pidfile="/run/${RC_SVCNAME}.pid" +command_background=true +extra_started_commands="reload" +description_reload="Reload configuration" + +depend() { + after firewall +} + +reload() { + ebegin "Reloading $RC_SVCNAME" + start-stop-daemon --signal HUP --pidfile "$pidfile" + eend $? +} diff --git a/minoplhy-crowdsec/system-sqlite.patch b/minoplhy-crowdsec/system-sqlite.patch new file mode 100755 index 0000000..5a9529c --- /dev/null +++ b/minoplhy-crowdsec/system-sqlite.patch @@ -0,0 +1,12 @@ +--- a/Makefile 2024-11-20 11:12:20.000000000 +0000 ++++ b/Makefile 2024-11-20 21:29:51.335969720 +0000 +@@ -78,7 +78,7 @@ + endif + + #expr_debug tag is required to enable the debug mode in expr +-GO_TAGS := netgo,osusergo,sqlite_omit_load_extension,expr_debug ++GO_TAGS := netgo,osusergo,sqlite_omit_load_extension,expr_debug,libsqlite3 + + # Allow building on ubuntu 24.10, see https://github.com/golang/go/issues/70023 + export CGO_LDFLAGS_ALLOW=-Wl,--(push|pop)-state.* + \ No newline at end of file diff --git a/minoplhy-gitea/APKBUILD b/minoplhy-gitea/APKBUILD old mode 100644 new mode 100755 index 2937047..8247136 --- a/minoplhy-gitea/APKBUILD +++ b/minoplhy-gitea/APKBUILD @@ -31,7 +31,7 @@ export GOCACHE="${GOCACHE:-"$srcdir/go-cache"}" export GOTMPDIR="${GOTMPDIR:-"$srcdir"}" export GOMODCACHE="${GOMODCACHE:-"$srcdir/go"}" -preparre() { +prepare() { mkdir -p "$builddir" default_prepare } diff --git a/minoplhy-gitea/gitea.initd b/minoplhy-gitea/gitea.initd old mode 100644 new mode 100755 diff --git a/minoplhy-gitea/gitealogo/apple-touch-icon.png b/minoplhy-gitea/gitealogo/apple-touch-icon.png old mode 100644 new mode 100755 diff --git a/minoplhy-gitea/gitealogo/avatar_default.png b/minoplhy-gitea/gitealogo/avatar_default.png old mode 100644 new mode 100755 diff --git a/minoplhy-gitea/gitealogo/favicon.png b/minoplhy-gitea/gitealogo/favicon.png old mode 100644 new mode 100755 diff --git a/minoplhy-gitea/gitealogo/favicon.svg b/minoplhy-gitea/gitealogo/favicon.svg old mode 100644 new mode 100755 diff --git a/minoplhy-gitea/gitealogo/icon.png b/minoplhy-gitea/gitealogo/icon.png old mode 100644 new mode 100755 diff --git a/minoplhy-gitea/gitealogo/icon.svg b/minoplhy-gitea/gitealogo/icon.svg old mode 100644 new mode 100755 diff --git a/minoplhy-gitea/gitealogo/logo.png b/minoplhy-gitea/gitealogo/logo.png old mode 100644 new mode 100755 diff --git a/minoplhy-gitea/gitealogo/logo.svg b/minoplhy-gitea/gitealogo/logo.svg old mode 100644 new mode 100755 diff --git a/minoplhy-gitea/minoplhy-gitea.pre-install b/minoplhy-gitea/minoplhy-gitea.pre-install old mode 100644 new mode 100755 diff --git a/minoplhy-gitea/patches/1.23.6-no-activity.fakepatch b/minoplhy-gitea/patches/1.23.6-no-activity.fakepatch old mode 100644 new mode 100755 diff --git a/minoplhy-gitea/patches/1.23.7-no-activity.fakepatch b/minoplhy-gitea/patches/1.23.7-no-activity.fakepatch old mode 100644 new mode 100755 diff --git a/minoplhy-nginx-allstar/APKBUILD b/minoplhy-nginx-allstar/APKBUILD old mode 100644 new mode 100755 diff --git a/minoplhy-nginx-allstar/minoplhy-nginx-allstar.pre-install b/minoplhy-nginx-allstar/minoplhy-nginx-allstar.pre-install old mode 100644 new mode 100755 diff --git a/minoplhy-nginx-allstar/nginx.initd b/minoplhy-nginx-allstar/nginx.initd old mode 100644 new mode 100755 diff --git a/minoplhy-nginx-vanilla/APKBUILD b/minoplhy-nginx-vanilla/APKBUILD old mode 100644 new mode 100755 diff --git a/minoplhy-nginx-vanilla/minoplhy-nginx-vanilla.pre-install b/minoplhy-nginx-vanilla/minoplhy-nginx-vanilla.pre-install old mode 100644 new mode 100755 diff --git a/minoplhy-nginx-vanilla/nginx.initd b/minoplhy-nginx-vanilla/nginx.initd old mode 100644 new mode 100755