0.16.1

6 files changed, 97 insertions, 22 deletions

diff --git a/.SRCINFO b/.SRCINFO
index a4238fa84867..c019ade7c9fc 100644
--- a/.SRCINFO
+++ b/.SRCINFO
@@ -1,6 +1,6 @@
 pkgbase = navidrome-bin
 	pkgdesc = Music Server and Streamer compatible with Subsonic/Airsonic
-	pkgver = 0.15.0
+	pkgver = 0.16.1
 	pkgrel = 1
 	url = https://www.navidrome.org/
 	arch = x86_64
@@ -12,14 +12,20 @@ pkgbase = navidrome-bin
 	depends = ffmpeg
 	provides = navidrome
 	conflicts = navidrome
-	source_x86_64 = https://github.com/deluan/navidrome/releases/download/v0.15.0/navidrome_0.15.0_Linux_x86_64.tar.gz
-	md5sums_x86_64 = dfae861073d265852325aaa06394fae1
-	source_armv6h = https://github.com/deluan/navidrome/releases/download/v0.15.0/navidrome_0.15.0_Linux_armv6.tar.gz
-	md5sums_armv6h = 1c96e6d3b35dfacf5f1af6352f25374b
-	source_armv7h = https://github.com/deluan/navidrome/releases/download/v0.15.0/navidrome_0.15.0_Linux_armv7.tar.gz
-	md5sums_armv7h = d73863bfa6bcec739a35da1793fdff80
-	source_aarch64 = https://github.com/deluan/navidrome/releases/download/v0.15.0/navidrome_0.15.0_Linux_arm64.tar.gz
-	md5sums_aarch64 = f87f762307168343276e4ae43793cb68
+	source = navidrome.service
+	source = navidrome.sysusers
+	source = navidrome.tmpfiles
+	md5sums = 10adbf9f0f1f220d32fc044f76780916
+	md5sums = f3c106c001533c84a64b7238b58bd7ef
+	md5sums = b9362d660030646320f16b2c1436a4c2
+	source_x86_64 = https://github.com/deluan/navidrome/releases/download/v0.16.1/navidrome_0.16.1_Linux_x86_64.tar.gz
+	md5sums_x86_64 = 083cc5ea51861e6347a98f75a6c7dd19
+	source_armv6h = https://github.com/deluan/navidrome/releases/download/v0.16.1/navidrome_0.16.1_Linux_armv6.tar.gz
+	md5sums_armv6h = cf39c923a98955820cc3c6b874c7edd7
+	source_armv7h = https://github.com/deluan/navidrome/releases/download/v0.16.1/navidrome_0.16.1_Linux_armv7.tar.gz
+	md5sums_armv7h = b84d06e86acf7bb1ce52539e9388ab00
+	source_aarch64 = https://github.com/deluan/navidrome/releases/download/v0.16.1/navidrome_0.16.1_Linux_arm64.tar.gz
+	md5sums_aarch64 = f012a93cd229e369962c9a0d85ab9686
 
 pkgname = navidrome-bin
 
diff --git a/PKGBUILD b/PKGBUILD
index c3a86d48ebf0..a2bbfa581d31 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -2,7 +2,7 @@
 
 pkgbase='navidrome-bin'
 pkgname=(navidrome-bin)
-pkgver='0.15.0'
+pkgver='0.16.1'
 pkgrel=1
 pkgdesc='Music Server and Streamer compatible with Subsonic/Airsonic'
 url='https://www.navidrome.org/'
@@ -11,16 +11,28 @@ arch=(x86_64 armv6h armv7h aarch64)
 provides=('navidrome')
 conflicts=('navidrome')
 depends=('glibc' 'ffmpeg')
-source_x86_64=('https://github.com/deluan/navidrome/releases/download/v0.15.0/navidrome_0.15.0_Linux_x86_64.tar.gz')
-source_armv6h=('https://github.com/deluan/navidrome/releases/download/v0.15.0/navidrome_0.15.0_Linux_armv6.tar.gz')
-source_armv7h=('https://github.com/deluan/navidrome/releases/download/v0.15.0/navidrome_0.15.0_Linux_armv7.tar.gz')
-source_aarch64=('https://github.com/deluan/navidrome/releases/download/v0.15.0/navidrome_0.15.0_Linux_arm64.tar.gz')
-md5sums_x86_64=('dfae861073d265852325aaa06394fae1')
-md5sums_armv6h=('1c96e6d3b35dfacf5f1af6352f25374b')
-md5sums_armv7h=('d73863bfa6bcec739a35da1793fdff80')
-md5sums_aarch64=('f87f762307168343276e4ae43793cb68')
+source=(
+    navidrome.service
+    navidrome.sysusers
+    navidrome.tmpfiles
+)
+source_x86_64=('https://github.com/deluan/navidrome/releases/download/v0.16.1/navidrome_0.16.1_Linux_x86_64.tar.gz')
+source_armv6h=('https://github.com/deluan/navidrome/releases/download/v0.16.1/navidrome_0.16.1_Linux_armv6.tar.gz')
+source_armv7h=('https://github.com/deluan/navidrome/releases/download/v0.16.1/navidrome_0.16.1_Linux_armv7.tar.gz')
+source_aarch64=('https://github.com/deluan/navidrome/releases/download/v0.16.1/navidrome_0.16.1_Linux_arm64.tar.gz')
+md5sums=('10adbf9f0f1f220d32fc044f76780916'
+         'f3c106c001533c84a64b7238b58bd7ef'
+         'b9362d660030646320f16b2c1436a4c2')
+md5sums_x86_64=('083cc5ea51861e6347a98f75a6c7dd19')
+md5sums_armv6h=('cf39c923a98955820cc3c6b874c7edd7')
+md5sums_armv7h=('b84d06e86acf7bb1ce52539e9388ab00')
+md5sums_aarch64=('f012a93cd229e369962c9a0d85ab9686')
 
 package() {
   install -Dm755 "$srcdir/navidrome" "$pkgdir/usr/bin/navidrome"
+
+  install -Dm644 "${srcdir}/navidrome.service" "${pkgdir}/usr/lib/systemd/system/navidrome.service"
+  install -Dm644 "${srcdir}/navidrome.sysusers" "${pkgdir}/usr/lib/sysusers.d/navidrome.conf"
+  install -Dm644 "${srcdir}/navidrome.tmpfiles" "${pkgdir}/usr/lib/tmpfiles.d/navidrome.conf"
 }
 
diff --git a/navidrome.service b/navidrome.service
new file mode 100644
index 000000000000..2e38b14d6e01
--- /dev/null
+++ b/navidrome.service
@@ -0,0 +1,45 @@
+# This file ususaly goes in /etc/systemd/system
+
+[Unit]
+Description=Navidrome Music Server and Streamer compatible with Subsonic/Airsonic
+After=remote-fs.target network.target
+AssertPathExists=/var/lib/navidrome
+
+[Service]
+User=navidrome
+Group=navidrome
+Type=simple
+ExecStart=/usr/bin/navidrome
+WorkingDirectory=/var/lib/navidrome
+TimeoutStopSec=20
+KillMode=process
+Restart=on-failure
+
+EnvironmentFile=-/etc/sysconfig/navidrome
+
+# See https://www.freedesktop.org/software/systemd/man/systemd.exec.html
+DevicePolicy=closed
+NoNewPrivileges=yes
+PrivateTmp=yes
+PrivateUsers=yes
+ProtectControlGroups=yes
+ProtectKernelModules=yes
+ProtectKernelTunables=yes
+RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
+RestrictNamespaces=yes
+RestrictRealtime=yes
+SystemCallFilter=~@clock @debug @module @mount @obsolete @privileged @reboot @setuid @swap
+ReadWritePaths=/var/lib/navidrome
+
+# You can uncomment the following line if you're not using the jukebox This
+# will prevent navidrome from accessing any real (physical) devices
+#PrivateDevices=yes
+
+# You can change the following line to `strict` instead of `full` if you don't
+# want navidrome to be able to write anything on your filesystem outside of
+# /var/lib/navidrome.
+ProtectSystem=full
+
+# You can comment the following line if you don't have any media in /home/*.
+# This will prevent navidrome from ever reading/writing anything there.
+ProtectHome=true
diff --git a/navidrome.sysusers b/navidrome.sysusers
new file mode 100644
index 000000000000..42212ea8c582
--- /dev/null
+++ b/navidrome.sysusers
@@ -0,0 +1 @@
+u navidrome - "Navidrome user" /var/lib/navidrome
diff --git a/navidrome.tmpfiles b/navidrome.tmpfiles
new file mode 100644
index 000000000000..1c61c86e7a88
--- /dev/null
+++ b/navidrome.tmpfiles
@@ -0,0 +1 @@
+d /var/lib/navidrome 0755 navidrome navidrome
diff --git a/update.sh b/update.sh
index 945e9801da1d..650b49defa6a 100755
--- a/update.sh
+++ b/update.sh
@@ -30,17 +30,27 @@ arch=(x86_64 armv6h armv7h aarch64)
 provides=('${EXECUTABLE_NAME}')
 conflicts=('${EXECUTABLE_NAME}')
 depends=('glibc' 'ffmpeg')
+source=(
+    ${EXECUTABLE_NAME}.service
+    ${EXECUTABLE_NAME}.sysusers
+    ${EXECUTABLE_NAME}.tmpfiles
+)
 source_x86_64=('https://github.com/deluan/navidrome/releases/download/v$1/navidrome_$1_Linux_x86_64.tar.gz')
 source_armv6h=('https://github.com/deluan/navidrome/releases/download/v$1/navidrome_$1_Linux_armv6.tar.gz')
 source_armv7h=('https://github.com/deluan/navidrome/releases/download/v$1/navidrome_$1_Linux_armv7.tar.gz')
 source_aarch64=('https://github.com/deluan/navidrome/releases/download/v$1/navidrome_$1_Linux_arm64.tar.gz')
-sha256sums_x86_64=()
-sha256sums_armv6h=()
-sha256sums_armv7h=()
-sha256sums_aarch64=()
+md5sums=()
+md5sums_x86_64=()
+md5sums_armv6h=()
+md5sums_armv7h=()
+md5sums_aarch64=()
 
 package() {
   install -Dm755 \"\$srcdir/navidrome\" \"\$pkgdir/usr/bin/${EXECUTABLE_NAME}\"
+
+  install -Dm644 \"\${srcdir}/${EXECUTABLE_NAME}.service\" \"\${pkgdir}/usr/lib/systemd/system/${EXECUTABLE_NAME}.service\"
+  install -Dm644 \"\${srcdir}/${EXECUTABLE_NAME}.sysusers\" \"\${pkgdir}/usr/lib/sysusers.d/${EXECUTABLE_NAME}.conf\"
+  install -Dm644 \"\${srcdir}/${EXECUTABLE_NAME}.tmpfiles\" \"\${pkgdir}/usr/lib/tmpfiles.d/${EXECUTABLE_NAME}.conf\"
 }
 " >> PKGBUILD