#!/bin/mkpkg
# description: WireGuard userspace tools — wg(8) and wg-quick(8)
# url: https://www.wireguard.com/

name=wireguard-tools
version=1.0.20260223
release=2
depends=(bash openresolv)
makedeps=()
services=(wireguard)
source=(https://git.zx2c4.com/wireguard-tools/snapshot/wireguard-tools-$version.tar.xz)
sha256sums=(
    "af459827b80bfd31b83b08077f4b5843acb7d18ad9a33a2ef532d3090f291fbf"
)

build() {
    cd $name-$version/src

    make \
        CC=clang \
        WITH_BASHCOMPLETION=yes \
        WITH_WGQUICK=yes \
        WITH_SYSTEMDUNITS=no \
        DESTDIR=$PKG \
        PREFIX=/usr \
        MANDIR=/usr/share/man \
        BASHCOMPDIR=/usr/share/bash-completion/completions

    make \
        WITH_BASHCOMPLETION=yes \
        WITH_WGQUICK=yes \
        WITH_SYSTEMDUNITS=no \
        DESTDIR=$PKG \
        PREFIX=/usr \
        MANDIR=/usr/share/man \
        BASHCOMPDIR=/usr/share/bash-completion/completions \
        install
}

post_build() {
    install -d $PKG/etc/sv/wireguard
    install -d $PKG/etc/sv/wireguard/log
    install -d -m 700 $PKG/etc/wireguard

    printf '%s\n' \
        '#!/bin/sh' \
        'exec 2>&1' \
        'set -e' \
        'for conf in /etc/wireguard/*.conf; do' \
        '    [ -e "$conf" ] || continue' \
        '    wg-quick up "$conf"' \
        'done' \
        'exec chpst -b wireguard pause' \
        > $PKG/etc/sv/wireguard/run
    chmod 755 $PKG/etc/sv/wireguard/run

    printf '%s\n' \
        '#!/bin/sh' \
        'set -e' \
        'for conf in /etc/wireguard/*.conf; do' \
        '    [ -e "$conf" ] || continue' \
        '    wg-quick down "$conf"' \
        'done' \
        > $PKG/etc/sv/wireguard/finish
    chmod 755 $PKG/etc/sv/wireguard/finish

    printf '%s\n' \
        '#!/bin/sh' \
        'mkdir -p /var/log/wireguard' \
        'exec svlogd -tt /var/log/wireguard' \
        > $PKG/etc/sv/wireguard/log/run

    chmod 755 $PKG/etc/sv/wireguard/log/run

    # Service disabled by default - must explicitly: rm /etc/sv/wireguard/down
    touch $PKG/etc/sv/wireguard/down
}

signify() {
    untrusted comment: public key
    RWTZ9IduCSQ/mL8337TEUinPwT92xFEUpD92hkS7IxcOnzTt9QdpohT3
}

# vim: filetype=sh