# -*- coding: utf-8; mode: tcl; tab-width: 4; indent-tabs-mode: nil; c-basic-offset: 4 -*- vim:fenc=utf-8:et:sw=4:ts=4:sts=4

PortSystem      1.0
PortGroup       legacysupport 1.0
PortGroup       compiler_blacklist_versions 1.0

name            bind9
version         9.18.15
categories      net
maintainers     {geeklair.net:dluke @danielluke} {jmr @jmroot}
platforms       darwin freebsd sunos

description     Domain Name System server
# see https://gitlab.isc.org/isc-projects/bind9/-/blob/main/LICENSE
license         {MPL-2 GPL-2+ LGPL-2.1+ AGPL-3+}

long_description \
                The BIND DNS Server is used on the vast majority of name \
                serving machines on the Internet, providing a robust \
                and stable architecture on top of which an \
                organization's naming architecture can be built. The \
                resolver library included in the BIND distribution \
                provides the standard APIs for translation between domain names \
                and Internet addresses and is intended to be linked with applications \
                requiring name service.

homepage        https://www.isc.org/

distname        bind-${version}
master_sites    isc:${name}/${version}

checksums       rmd160    651c6146c6d5468d54f7413a8d218d5d7a7075ac \
                sha256    28ae8db14862801bc2bd4fd820db00667d3f1ff9ae9cc2d06a0ef7810fed7a4e \
                size      5476876

use_xz          yes

depends_build   port:pkgconfig

depends_lib     path:lib/libssl.dylib:openssl  \
                port:libuv \
                port:libxml2 \
                port:nghttp2 \
                port:jemalloc \
                port:json-c \
                port:libidn2 \
                port:lmdb

universal_variant \
                no

# Needs working __atomic_* builtins
compiler.blacklist \
                gcc-4.2 \
                {clang < 500}

patchfiles      atomics.patch \
                configure.patch

# tests require `sudo bin/tests/system/ifconfig.sh up`
test.run        yes
test.target     test

startupitem.create      yes
startupitem.netchange   yes
startupitem.executable  ${prefix}/sbin/named -u named -f

add_users       named group=named

configure.env   STD_CDEFINES=-DDIG_SIGCHASE=1

configure.args  --disable-silent-rules \
                --mandir=${prefix}/share/man \
                --with-openssl=${prefix} \
                --with-libidn2=${prefix} \
                --enable-doh

platform darwin 8 {
    configure.args-append --with-dlopen=no \
                          --with-gssapi=no
}

platform darwin 9 {
    configure.args-append --with-dlopen=no
}

post-destroot    {
    # Ensure needed directories
    xinstall -o named -g named -m 755 -d \
        ${destroot}${prefix}/var/named \
        ${destroot}${prefix}/var/run/named

    # Install the conf file as a sample
    xinstall -o root -m 644 ${filespath}/named.conf \
        ${destroot}${prefix}/etc/named.conf.dist
    reinplace "s|%%PREFIX%%|${prefix}|g" \
        ${destroot}${prefix}/etc/named.conf.dist

    # Install the db files as samples
    foreach f "db.127.0.0 db.cache db.localhost" {
        xinstall -o named -g named -m 644 ${filespath}/${f} \
            ${destroot}${prefix}/var/named/${f}.dist
    }

    destroot.keepdirs ${destroot}${prefix}/var/run/named
}

notes "******************************************************
* To setup named to run, you need to copy named.conf.dist
* to named.conf:
* sudo cp ${prefix}/etc/named.conf.dist ${prefix}/etc/named.conf
* and edit as needed. If you use the default zone files for
* 127.0.0, localhost, and the cache, you also need to copy
* those files:
* sudo cp ${prefix}/var/named/db.127.0.0.dist ${prefix}/var/named/db.127.0.0
* sudo cp ${prefix}/var/named/db.cache.dist ${prefix}/var/named/db.cache
* sudo cp ${prefix}/var/named/db.localhost.dist ${prefix}/var/named/db.localhost
* 
* You may want to generate a key (for rndc):
* $ sudo rndc-confgen -a
*
* Remember to secure your configuration:
* http://www.cymru.com/Documents/secure-bind-template.html
*
* The bind9 port now sets up named to run as non-root, you may
* need to adjust your named.conf to put the pidfile and any
* logging into a directory where this new user can write files.
******************************************************"

livecheck.type   regex
livecheck.url    ${homepage}downloads/
livecheck.regex  {BIND(\d+\.\d*[02468]\.\d+(?:-P\d+)?)\.tar\.[gx]z</a>}