[gentoo-commits] repo/gentoo:master commit in: net-dns/dnscrypt-proxy/

["Sam James" <sam@gentoo.org>]

commit:     19809745817a6da868275285ac988ed7e7dcb4b1
Author:     Sam James <sam <AT> gentoo <DOT> org>
AuthorDate: Wed Sep 10 06:06:54 2025 +0000
Commit:     Sam James <sam <AT> gentoo <DOT> org>
CommitDate: Wed Sep 10 06:11:18 2025 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=19809745

net-dns/dnscrypt-proxy: add 2.1.14

Signed-off-by: Sam James <sam <AT> gentoo.org>

 net-dns/dnscrypt-proxy/Manifest                    |   1 +
 .../dnscrypt-proxy/dnscrypt-proxy-2.1.14.ebuild    | 102 +++++++++++++++++++++
 2 files changed, 103 insertions(+)

diff --git a/net-dns/dnscrypt-proxy/Manifest b/net-dns/dnscrypt-proxy/Manifest
index 9355555c3a44..d1df6aa75449 100644
--- a/net-dns/dnscrypt-proxy/Manifest
+++ b/net-dns/dnscrypt-proxy/Manifest
@@ -1,2 +1,3 @@
 DIST dnscrypt-proxy-2.1.12.tar.gz 4294076 BLAKE2B 24c857ce4678b7404d515e0e6f8cd184de5e54cf52d7a1826bfd31555976a4cd6ceb6097ccda60158ca4a4859282b94135a452d2d99f46d73af2e8513cc0422d SHA512 fa5c0341d67137df90754a886908cb9f5bf4d6091ba332b6fe12f7730a25e1e5167615da5d34ebe8cc2a7ed7696bfda899b2eaa0697019c4a66bfba5b0ba8d11
 DIST dnscrypt-proxy-2.1.13.tar.gz 4180107 BLAKE2B 3afb620e7f119f568f2582e65de8f7468ea0e12f6a20800b955effa9207a4cb5fedcc082b0a6f128c14477bf0273338134fa6c4b8ae19fb10b400cb11327fa4c SHA512 5863f15c8e8904266cb948afcd6c8ba109eee6f4fd3301735f8b2731733205b22facb6cd2a075a7ef215922e3b0aebff520fe51659e64587d8b85b2eeb055590
+DIST dnscrypt-proxy-2.1.14.tar.gz 4190307 BLAKE2B 86c77287b8e4db0157989b79a3616120f387034d3176836cbdcb9be5896532fa856a14fa018da849a712a272366e46dfd5eee8677c472675bff1601ab4ab8429 SHA512 e147e2a5f01f37219eb9756444684c954cdc90674d99900347c8aef6aea27d067e5e60429072e33681c0bb2d34536c252c6cb90277fca93aefe7c7931f7af5ad

diff --git a/net-dns/dnscrypt-proxy/dnscrypt-proxy-2.1.14.ebuild b/net-dns/dnscrypt-proxy/dnscrypt-proxy-2.1.14.ebuild
new file mode 100644
index 000000000000..86f9e1eadf37
--- /dev/null
+++ b/net-dns/dnscrypt-proxy/dnscrypt-proxy-2.1.14.ebuild
@@ -0,0 +1,102 @@
+# Copyright 1999-2025 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=8
+
+inherit fcaps go-module prefix systemd
+
+DESCRIPTION="Flexible DNS proxy, with support for encrypted DNS protocols"
+HOMEPAGE="https://github.com/DNSCrypt/dnscrypt-proxy"
+
+if [[ ${PV} == 9999 ]]; then
+	EGIT_REPO_URI="https://github.com/DNSCrypt/dnscrypt-proxy.git"
+	inherit git-r3
+else
+	SRC_URI="https://github.com/DNSCrypt/dnscrypt-proxy/archive/${PV}.tar.gz -> ${P}.tar.gz"
+	KEYWORDS="~amd64 ~arm ~arm64 ~ppc64 ~x86"
+fi
+
+LICENSE="Apache-2.0 BSD ISC MIT MPL-2.0"
+SLOT="0"
+
+RDEPEND="
+	acct-group/dnscrypt-proxy
+	acct-user/dnscrypt-proxy
+"
+
+FILECAPS=( cap_net_bind_service+ep usr/bin/dnscrypt-proxy )
+
+PATCHES=(
+	"${FILESDIR}"/${PN}-2.1.11-config-full-paths.patch
+)
+
+src_compile() {
+	pushd "${PN}" >/dev/null || die
+	ego build -v -x -mod=readonly -mod=vendor
+	popd >/dev/null || die
+}
+
+src_test() {
+	cd "${PN}" || die
+	ego test -mod=vendor
+}
+
+src_install() {
+	pushd "${PN}" >/dev/null || die
+
+	dobin dnscrypt-proxy
+
+	eprefixify example-dnscrypt-proxy.toml
+	insinto /etc/dnscrypt-proxy
+	newins example-dnscrypt-proxy.toml dnscrypt-proxy.toml
+	doins example-{allowed,blocked}-{ips.txt,names.txt}
+	doins example-{cloaking-rules.txt,forwarding-rules.txt}
+
+	popd >/dev/null || die
+
+	insinto /usr/share/dnscrypt-proxy
+	doins -r "utils/generate-domains-blocklist/."
+
+	newinitd "${FILESDIR}"/dnscrypt-proxy.initd dnscrypt-proxy
+	newconfd "${FILESDIR}"/dnscrypt-proxy.confd dnscrypt-proxy
+
+	systemd_newunit "${FILESDIR}"/dnscrypt-proxy.service dnscrypt-proxy.service
+	systemd_newunit "${FILESDIR}"/dnscrypt-proxy.socket dnscrypt-proxy.socket
+
+	insinto /etc/logrotate.d
+	newins "${FILESDIR}"/dnscrypt-proxy.logrotate dnscrypt-proxy
+
+	einstalldocs
+}
+
+pkg_postinst() {
+	fcaps_pkg_postinst
+
+	if ! use filecaps; then
+		ewarn "'filecaps' USE flag is disabled"
+		ewarn "${PN} will fail to listen on port 53"
+		ewarn "please do one the following:"
+		ewarn "1) re-enable 'filecaps'"
+		ewarn "2) change port to > 1024"
+		ewarn "3) configure to run ${PN} as root (not recommended)"
+		ewarn
+	fi
+
+	if systemd_is_booted || has_version sys-apps/systemd; then
+		elog "Using systemd socket activation may cause issues with speed"
+		elog "latency and reliability of ${PN} and is discouraged by upstream"
+		elog "Existing installations advised to disable 'dnscrypt-proxy.socket'"
+		elog "It is disabled by default for new installations"
+		elog "check "$(systemd_get_systemunitdir)/${PN}.service" for details"
+		elog
+
+	fi
+
+	elog "After starting the service you will need to update your"
+	elog "${EROOT}/etc/resolv.conf and replace your current set of resolvers"
+	elog "with:"
+	elog
+	elog "nameserver 127.0.0.1"
+	elog
+	elog "Also see https://github.com/DNSCrypt/${PN}/wiki"
+}