.gitmodules

@@ -49,6 +49,9 @@
 [submodule "cram"]
 	path = cram
 	url = ssh://aur@aur.archlinux.org/cram.git
+[submodule "dagger"]
+	path = dagger
+	url = ssh://aur@aur.archlinux.org/dagger.git
 [submodule "distrobuilder-git"]
 	path = distrobuilder-git
 	url = ssh://aur@aur.archlinux.org/distrobuilder-git.git

dagger

@@ -0,0 +1 @@
+Subproject commit 4101ac64a71daaa1e89b33e28a6772ea15ddc305

nextcloud-app-client-push/.SRCINFO

@@ -0,0 +1,21 @@
+pkgbase = nextcloud-app-client-push
+	pkgdesc = Push update support for Nextcloud clients
+	pkgver = 0.1.7
+	pkgrel = 2
+	url = https://github.com/nextcloud/notify_push
+	install = nextcloud-app-client-push.install
+	arch = x86_64
+	license = AGPL
+	makedepends = cargo
+	depends = nextcloud
+	depends = gcc-libs
+	optdepends = redis: use a local redis server
+	source = nextcloud-app-client-push-0.1.7.tar.gz::https://github.com/nextcloud/notify_push/archive/v0.1.7.tar.gz
+	source = nextcloud-app-client-push.hook
+	source = nextcloud-app-client-push.service
+	b2sums = 7365cf94fa17c1e0af8b88995e0763cc23b831ed94d43448973a2cacca260e06067b60981e2f078e0941087a1a6850ddcd224b2bc44193806c688154b29b81e8
+	b2sums = 1dd7720beba1482e1759f7dea8e9c07ae32f2107fc45fe94388993e66ad9a442771209af086b36e0cc50ab36e7a3990c6f3a120e24a525292f906e0d1a3434cd
+	b2sums = 28f2c102b1370ef7d9bc5bc736f71ccb4708e50285a1f6592535efe2ad0c301e99707021bdc4fe2be131082b1589329334b30ad0ad1e6a6764c189fb4f287170
+
+pkgname = nextcloud-app-client-push
+

nextcloud-app-client-push/PKGBUILD

@@ -0,0 +1,67 @@
+# Maintainer: George Rawlinson <george@rawlinson.net.nz>
+
+pkgname=nextcloud-app-client-push
+_pkgname=notify_push
+pkgver=0.3.0
+pkgrel=1
+pkgdesc="Push update support for Nextcloud clients"
+arch=('x86_64')
+url="https://apps.nextcloud.com/apps/notify_push"
+license=('AGPL')
+depends=('nextcloud')
+makedepends=('rust')
+optdepends=('redis: use a local redis server')
+source=(
+  "$pkgname-$pkgver.tar.gz::https://github.com/nextcloud/notify_push/archive/v$pkgver.tar.gz"
+	'pacman.hook'
+	'systemd.service'
+)
+sha512sums=('3bfa1a292222e85f0d361dfdf0958aa57ab3469fe7ebe7eb6b4de850cea6ecc8b477a41f0c1268b6e974ec52299081d2129965b1adbbc7e3f390ff49b499f091'
+            'cfc10cd3855bc35479db17eaf2d0ba25bf6455061c1fef51384443bbfa447e2b23465641a6cfea6203d12d7d5d4a7fb7397bd197e1049ab149a663ffac684b9d'
+            '0bb33af48e813ae5389df0c731823cd86147bd1d92d937ad6675b0073e09d162ab0e2eaf16ac11a62ed9a7c794ea31e671371cc09f575ea0cf3bcfb8bf6be033')
+b2sums=('e012e72bfd5bfcbe60c9dc5daa871a40b489e282e116c75822746992d8e73366900dce64c5f20516b807f682913b2c5962eb60b82d7e959a7a704d90c3676212'
+        '4ed61b199e995ecd29ef41505e8ce08a7e784c9e08350e2512b6cb6ad3b30d2601052d208e0d2f7d78e025971fa25a3091deb8eed232475bbd7155776ab99400'
+        '21f677df863f7d52b1fb5689e1270b1df592d4502d63fab21a922fe29191dc82402909b4c4b45b2f3f41e93965312fc375ec492ca44692dcab7aaa884f7300a9')
+
+prepare() {
+	# kludgy workaround to specify target architecture
+	sed -i "s/ARCH/$CARCH/" systemd.service
+
+  cd "$_pkgname-$pkgver"
+  cargo fetch --locked --target "$CARCH-unknown-linux-gnu"
+}
+
+build() {
+	cd "$_pkgname-$pkgver"
+	cargo build --frozen --release --all-features
+}
+
+check() {
+	cd "$_pkgname-$pkgver"
+	cargo test --frozen --release --all-features
+}
+
+package() {
+	# systemd integration
+	install -vDm644 systemd.service "$pkgdir/usr/lib/systemd/system/$pkgname.service"
+
+	cd "$_pkgname-$pkgver"
+
+	# documentation
+	install -vDm644 -t "$pkgdir/usr/share/doc/$pkgname" README.md
+  install -vDm644 "$srcdir/pacman.hook" \
+    "$pkgdir/usr/share/doc/$pkgname/$pkgname.hook"
+
+	# app files
+	local _appdir="$pkgdir/usr/share/webapps/nextcloud/apps/$_pkgname"
+	install -vd "$_appdir"
+	cp -va . "$_appdir"
+
+	# binary
+	install -vDm755 -t "$_appdir/bin/$CARCH" "target/release/$_pkgname"
+
+	# remove unnecessary files & folders
+	cd "$_appdir"
+	rm .dockerignore
+	cat .nextcloudignore | xargs echo rm -rf | sh
+}

nextcloud-app-client-push/pacman.hook

@@ -0,0 +1,11 @@
+# Copy or symlink this file in /usr/share/libalpm/hooks/ to force a
+# restart when nextcloud-app-client-push is updated.
+
+[Trigger]
+Operation = Upgrade
+Type = Package
+Target = nextcloud-app-client-push
+
+[Action]
+When = PostTransaction
+Exec = /usr/bin/systemctl try-restart nextcloud-app-client-push.service

nextcloud-app-client-push/systemd.service

@@ -0,0 +1,45 @@
+[Unit]
+Description=Push daemon for Nextcloud clients
+Documentation=https://apps.nextcloud.com/apps/notify_push https://github.com/nextcloud/notify_push
+
+[Service]
+# If NC_CLIENT_PUSH_ARGS needs to be adjusted, it should be adjusted
+# using a drop-in systemd file. See `man 5 systemd.unit` for details.
+Environment=NC_CLIENT_PUSH_ARGS="/etc/webapps/nextcloud/config/config.php"
+ExecStart=/usr/share/webapps/nextcloud/apps/notify_push/bin/ARCH/notify_push $NC_CLIENT_PUSH_ARGS
+User=nextcloud
+Group=nextcloud
+Restart=on-failure
+RestartSec=5s
+
+# hardening options
+UMask=0077
+NoNewPrivileges=true
+LimitNOFILE=1048576
+ProtectSystem=strict
+ProtectHome=true
+PrivateUsers=yes
+PrivateTmp=true
+PrivateDevices=true
+ProtectHostname=true
+ProtectClock=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectKernelLogs=true
+ProtectControlGroups=true
+RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
+RestrictNamespaces=true
+LockPersonality=true
+MemoryDenyWriteExecute=true
+RestrictRealtime=true
+RestrictSUIDSGID=true
+RemoveIPC=true
+CapabilityBoundingSet=
+AmbientCapabilities=
+
+SystemCallFilter=@system-service
+SystemCallFilter=~@privileged @resources
+SystemCallArchitectures=native
+
+[Install]
+WantedBy=multi-user.target

rollup/PKGBUILD

@@ -2,18 +2,18 @@
 # Contributor: George Rawlinson <george@rawlinson.net.nz>
 
 pkgname=rollup
-pkgver=2.71.0
+pkgver=2.70.1
 pkgrel=1
-pkgdesc='Next-generation ES6 module bundler'
+pkgdesc="Next-generation ES6 module bundler"
 arch=(any)
-url='https://rollupjs.org/'
+url="https://rollupjs.org/"
 license=('MIT')
 depends=('nodejs')
 makedepends=('npm' 'jq')
 source=("$pkgname-$pkgver.tar.gz::https://registry.npmjs.org/$pkgname/-/$pkgname-$pkgver.tgz")
 noextract=("$pkgname-$pkgver.tar.gz")
-sha512sums=('919581e0503d37f89953f3bdb55a74f293ddc4b3348b68940ef712efb5d3f760c8f35b37c1841c53f700d850975a3f878098fc4540b6334757102c2839f0c160')
-b2sums=('e1018e4ff324cc028fe58ab3b2721a012b5b97db364b350c5123c8b33c46273b5e3a640db7b052085c3d18fa1ad0c530e6e2c0052be651686d53a7d265255bb6')
+sha512sums=('09162c23912eccb6d77710ba4676213ae45db73e1b85e8cf3125a3b052df54cffbc3ff399f6b3366feb2131a945ec05dcf9293f1ea2e6dec835038e12c712c94')
+b2sums=('1f68bcea41f171b31cea6be6ad789ae5113ce0fd61103b44ebbf0cd0f29f81866f3fb534a4f1dadb87aed9df3282bb69c0b0fa7da3d0afbd96c6c445a39a0b77')
 
 package() {
   local NPM_FLAGS=(--no-audit --no-fund --no-update-notifier)

xemu

@@ -1 +1 @@
-Subproject commit eb451b2b14723f9181fcb8a83dc0ad70745643cc
+Subproject commit 729fdd3f0fc916d89f191cc8ae4c3e7295a5a67f