Add gost

.gitignore

@@ -7,6 +7,7 @@ secret/radicale-httpauth/secret
 secret/seedbox-mount/secret
 secret/letsencrypt/private.key
 openrc/vtun/secret
+openrc/gost/secret
 
 config/telegraf/secret
 config/grafana/secret

config/nftables/APKBUILD

@@ -3,14 +3,14 @@
 
 . ../APKBUILD-config.template
 
-pkgver=2022.06.17.01
+pkgver=2023.05.24.01
 pkgrel=0
 options="!check" # check requires root?
 
 subpackages="
 	$pkgname-base
 	$pkgname-openssh
-	$pkgname-vtun
+	$pkgname-gost
 	$pkgname-haproxy:_defmodule
 	$pkgname-murmur:_defmodule
 	$pkgname-dovecot:_defmodule
@@ -52,7 +52,7 @@ openssh() {
 	_module "$_modname"
 }
 
-vtun() {
+gost() {
 	_modname="${subpkgname##$pkgname-}"
 	install_if="$pkgname redxen-openrc-$_modname"
 	_module "$_modname"

config/unbound/APKBUILD

@@ -3,7 +3,7 @@
 
 . ../APKBUILD-config.template
 
-pkgver=2022.03.26.02
+pkgver=2023.05.24.01
 pkgrel=0
 depends="alpine-baselayout ca-certificates-bundle dns-root-hints dnssec-root"
 checkdepends="unbound"
@@ -13,13 +13,11 @@ source="
 	acl.conf
 	rctrl.conf
 	wireguard.conf
-	vtun.conf
 "
 subpackages="
 	$pkgname-acl
 	$pkgname-rctrl
 	$pkgname-wireguard
-	$pkgname-vtun
 "
 
 _zones="
@@ -59,12 +57,6 @@ wireguard() {
 	_rx_installdir="$_rx_installdir/module" rx_install wireguard.conf
 }
 
-vtun() {
-	install_if="$pkgname redxen-openrc-vtun"
-	_rx_installdir="$_rx_installdir/module" rx_install vtun.conf
-}
-
-
 _zone_ins() {
 	_modname="${subpkgname##${pkgname}-}"
 	_authname="${_modname##auth-}"

openrc/gost/APKBUILD

@@ -0,0 +1,31 @@
+# Contributor: Alex Denes <caskd@redxen.eu>
+# Maintainer: Alex Denes <caskd@redxen.eu>
+
+. ../APKBUILD-openrc.template
+
+pkgver=2023.05.24.03
+pkgrel=0
+source="$source secret"
+depends="openrc $_rx_pkgname"
+
+prepare() {
+	default_prepare
+	cp conffile conffile-mod
+}
+
+build() {
+	. secret
+	rx_replace "AUTH_CREDS" "${AUTH_CREDS:?'Missing auth key'}" "conffile-mod"
+}
+
+package() {
+	rx_openrc_runlevel_add
+	rx_openrc_runfile_install
+	rx_openrc_conffile_install "conffile-mod"
+}
+
+sha512sums="
+dbbd5ac20c80afaded42cd78a0a789b117d36bdd2b4deee3e575748ee25be29dc117eb544c997deed388f17989f1754f61c958a79c5e826b2c752cbb7e07b0b0  runfile
+d2e754ce04dd1aa8f642ef68cbcd621cf602acee438f0b969339c8db5d403fe7c4b8ced85aa07b005ead4477337dc4f8ae8e362f2c2d2998d8c7b6128bc99eee  conffile
+b9be5588e9ae46cf7aa262511e6bec573a1ab103e3bfa3625c29338ed11377936a65b98daf88a0c269a605e68bbec4d31ff03a41df2b70b12604bb8f058b1426  secret
+"

openrc/gost/conffile

@@ -0,0 +1 @@
+command_args='-L "relay+ws://AUTH_CREDS@:7591?bind=true"'

openrc/gost/runfile

@@ -0,0 +1,10 @@
+#!/sbin/openrc-run
+supervisor=supervise-daemon
+
+command="/usr/bin/gost"
+command_background="yes"
+
+depend() {
+	need net
+	after firewall
+}