sysuser tmpfiles and systemd service file added

4 files changed, 48 insertions, 16 deletions

diff --git a/PKGBUILD b/PKGBUILD
index 82bcc13cf9fd..07516a96339f 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -20,30 +20,25 @@ backup=()
 options=()
 install=
 changelog=
-source=("https://dl.typesense.org/releases/${pkgver}/${_pkgroot}-server-${pkgver}-linux-amd64.tar.gz")
+source=("https://dl.typesense.org/releases/${pkgver}/${_pkgroot}-server-${pkgver}-linux-amd64.tar.gz"
+        'typesense.sysusers' 'typesense.tmpfiles' 'typesense-server.service')
 noextract=()
-sha256sums=('fc40c361a18fe372ee3aaf74571f33fdf9a9e28ba0cae8933f52f90e640f6744')
+sha256sums=('fc40c361a18fe372ee3aaf74571f33fdf9a9e28ba0cae8933f52f90e640f6744'
+            '3b9885c11980dfed653c98ee04c440a513f44a9676b8194623380381e9a6e1b1'
+            '884e2b52f2c4314ee6614a5b7f2d662e48c9ef7e065ada28bcdebfcff924f348'
+            '0b6b12af5ea5c12f0ef4321ab3cfbe54b9c4cf454921d7d6e970e3160631bad7')
 validpgpkeys=()
 
-# prepare() {
-# 	cd "$pkgname-$pkgver"
-# 	patch -p1 -i "$srcdir/$pkgname-$pkgver.patch"
-# }
-# 
-# build() {
-# 	cd "$pkgname-$pkgver"
-# 	./configure --prefix=/usr
-# 	make
-# }
-# 
 check() {
     cd "${srcdir}"
     diff -q <(md5sum typesense-server | awk '{printf $1}') typesense-server.md5.txt
 }
 
 package() {
-    :
-	# cd "$pkgname-$pkgver"
-	# make DESTDIR="$pkgdir/" install
+    cd "${srcdir}"
+    install -D -m 0755 typesense-server "${pkgdir}/usr/lib/typesense-server"
+    install -D -m 0644 typesense.sysusers "${pkgdir}/usr/lib/sysusers.d/typesense.conf"
+    install -D -m 0644 typesense.tmpfiles "${pkgdir}/usr/lib/tmpfiles.d/typesense.conf"
+    install -D -m 0644 typesense-server.service "${pkgdir}/usr/lib/systemd/system/typesense-server.service"
 }
 
diff --git a/typesense-server.service b/typesense-server.service
new file mode 100644
index 000000000000..53256adabc5f
--- /dev/null
+++ b/typesense-server.service
@@ -0,0 +1,35 @@
+[Unit]
+Description=Typesense server
+After=network.target
+Wants=network-online.target
+After=network-online.target
+
+[Service]
+User=typesense
+Group=typesense
+Type=simple
+Restart=on-failure
+
+Environment=TYPESENSE_API_KEY=xyz
+SyslogIdentifier=typesense-server
+ExecStart=/usr/lib/typesense-server --data-dir /var/lib/typesense --api-key xyz --enable-cors
+
+PrivateDevices=true
+ProtectHome=true
+ProtectSystem=strict
+ProtectKernelTunables=yes
+ProtectKernelModules=yes
+ProtectControlGroups=yes
+
+RestrictNamespaces=yes
+
+SystemCallArchitectures=native
+AmbientCapabilities=
+CapabilityBoundingSet=
+NoNewPrivileges=yes
+
+WorkingDirectory=/var/lib/typesense
+ReadWritePaths=/tmp /var/tmp /var/lib/typesense
+
+[Install]
+WantedBy=multi-user.target
diff --git a/typesense.sysusers b/typesense.sysusers
new file mode 100644
index 000000000000..c94567d2249b
--- /dev/null
+++ b/typesense.sysusers
@@ -0,0 +1 @@
+u typesense "Typesense system user" /var/lib/typesense /usr/bin/nologin
diff --git a/typesense.tmpfiles b/typesense.tmpfiles
new file mode 100644
index 000000000000..c42d87daaaf2
--- /dev/null
+++ b/typesense.tmpfiles
@@ -0,0 +1 @@
+d /var/lib/typesense 0750 typesense typesense