#
# Copyright (C) 2010-2015 Jo-Philipp Wich <jo@mein.io>
#
# This is free software, licensed under the GNU General Public License v2.
# See /LICENSE for more information.
#

include $(TOPDIR)/rules.mk

PKG_NAME:=uhttpd
PKG_RELEASE:=16

PKG_SOURCE_VERSION=15346de8d3ba422002496526ee24c62a3601ab8c
PKG_SOURCE_DATE:=2021-03-21
PKG_MAINTAINER:=Felix Fietkau <nbd@nbd.name>
PKG_LICENSE:=ISC
PKG_LICENSE_FILES:=LICENSE

PKG_ASLR_PIE_REGULAR:=1
PKG_BUILD_DEPENDS = ustream-ssl

PKG_CONFIG_DEPENDS += \
	CONFIG_uhttpd_lua \
	CONFIG_USE_PROCD \
	CONFIG_USE_OPENRC

PKG_SOURCE_PROTO:=git
PKG_SOURCE_URL=$(PROJECT_GIT)/project/uhttpd.git
PKG_SOURCE_VERSION:=15346de8d3ba422002496526ee24c62a3601ab8c

include $(INCLUDE_DIR)/package.mk
include $(INCLUDE_DIR)/cmake.mk
include $(INCLUDE_DIR)/version.mk

define Package/uhttpd/default
  SECTION:=net
  CATEGORY:=Network
  SUBMENU:=Web Servers/Proxies
  TITLE:=uHTTPd - tiny, single threaded HTTP server
endef

define Package/uhttpd
  $(Package/uhttpd/default)
  DEPENDS:=+libubox +libblobmsg-json +libjson-script +libjson-c +libubus +liblua +libcap +libtlt-logger +TPM_SUPPORT:libtpm2_importer +TPM_SUPPORT:openssl-util
  FATTRS:=/usr/sbin/uhttpd::::cap_net_bind_service,cap_net_admin,cap_net_raw=ep;/usr/lib/uhttpd_ubus.so:uhttpd:::;/usr/lib/uhttpd_lua.so:uhttpd:::
endef

define Package/uhttpd/description
 uHTTPd is a tiny single threaded HTTP server with TLS, CGI and Lua
 support. It is intended as a drop-in replacement for the Busybox
 HTTP daemon.
endef

define Package/uhttpd/config
  config uhttpd_lua
    depends on PACKAGE_uhttpd-mod-lua
    bool "Enable Integrated Lua interpreter"
	default y
endef

define Build/InstallDev
	$(INSTALL_DIR) $(1)/usr/include/uhttpd
	$(INSTALL_DIR) $(1)/usr/lib

	$(INSTALL_DATA) $(PKG_BUILD_DIR)/uhttpd.h $(1)/usr/include/uhttpd/
	$(INSTALL_DATA) $(PKG_BUILD_DIR)/utils.h $(1)/usr/include/uhttpd/
	$(INSTALL_DATA) $(PKG_BUILD_DIR)/plugin.h $(1)/usr/include/uhttpd/
	$(INSTALL_DATA) $(PKG_BUILD_DIR)/ubus_uhttpd.h $(1)/usr/include/uhttpd/
endef

define Package/uhttpd-mod-lua
  $(Package/uhttpd/default)
  TITLE+= (Lua plugin)
  DEPENDS:=uhttpd +liblua
endef

define Package/uhttpd-mod-lua/description
 The Lua plugin adds a CGI-like Lua runtime interface to uHTTPd.
endef


define Package/uhttpd-mod-ubus
  $(Package/uhttpd/default)
  TITLE+= (ubus plugin)
  DEPENDS:=uhttpd +libubus +libblobmsg-json
  ifneq (,$(filter m,$(CONFIG_PACKAGE_uhttpd-mod-ubus))$(DUMP))
    PKG_TLT_NAME:=JSON-RPC support
    PKG_ROUTER:=$(TLT_PLATFORM_NAME)
    PKG_APP_NAME:=json_rpc_support
  endif
endef

define Package/uhttpd-mod-ubus/description
 The ubus plugin adds a HTTP/JSON RPC proxy for ubus and publishes the
 session.* namespace and procedures.
endef

define Package/uhttpd-mod-ubus/postinst
#!/bin/sh
[ -z "$${IPKG_INSTROOT}" ] || exit 0
kill -1 $$(pgrep uhttpd)
exit 0
endef

define Package/uhttpd-mod-ubus/postrm
#!/bin/sh
[ -z "$${IPKG_INSTROOT}" ] || exit 0
uci delete uhttpd.main.ubus_prefix
uci commit uhttpd
exit 0
endef

define Package/uhttpd/conffiles
/etc/config/uhttpd
/etc/certificates/uhttpd.crt
/etc/certificates/uhttpd.key
/etc/certificates/uhttpd-ca.crt
/etc/certificates/uhttpd-ca.key
endef

ifneq ($(CONFIG_USE_GLIBC),)
  TARGET_CFLAGS += -D_DEFAULT_SOURCE
endif

TARGET_LDFLAGS += -lcrypt -llua -lm

CMAKE_OPTIONS += -DTLS_SUPPORT=on
CMAKE_OPTIONS += $(if $(CONFIG_TPM_SUPPORT),-DUHTTPD_TPM_SUPPORT=on)

# excluding x86 test target, because of test running. Excluding production target because it does not have the same security requirements
OPTION_HTTPS_SED_SCRIPT := sed -i "/config.*main/a\\\toption redirect_https '1'" $(1)

define Package/uhttpd/install
	$(INSTALL_DIR) $(1)/www/cgi-bin/custom $(1)/etc/init.d $(1)/etc/config $(1)/usr/sbin $(1)/etc/permtab.d $(1)/tmp/vuci
	$(INSTALL_BIN_USR) ./files/uhttpd.init $(1)/etc/init.d/uhttpd
	$(INSTALL_CONF_USR) ./files/uhttpd.config $(1)/etc/config/uhttpd
	$(INSTALL_DATA) ./files/uhttpd.permtab $(1)/etc/permtab.d/uhttpd
	$(VERSION_SED_SCRIPT) $(1)/etc/config/uhttpd
	$(INSTALL_BIN) $(PKG_BUILD_DIR)/uhttpd $(1)/usr/sbin/uhttpd
	$(INSTALL_BIN) ./files/generate_uhttpd_certificates $(1)/usr/sbin/generate_uhttpd_certificates
	$(if $(or $(CONFIG_TEST_IMAGE),$(CONFIG_x86_64)),,\
		$(OPTION_HTTPS_SED_SCRIPT) $(1)/etc/config/uhttpd)
	$(if $(CONFIG_USE_OPENRC), \
		$(OPENRC_INSTALL) boot uhttpd ./files/uhttpd.openrc $(1))

	$(INSTALL_DIR) $(1)/etc/uci-defaults/7.18 $(1)/etc/uci-defaults/7.22
	$(INSTALL_DATA) ./files/uci-defaults/7.18/99_restore_json_rpc $(1)/etc/uci-defaults/7.18/
	$(INSTALL_DATA) ./files/uci-defaults/7.22/99_migrate_cert_location $(1)/etc/uci-defaults/7.22/
endef

define Package/uhttpd-mod-lua/install
	$(INSTALL_DIR) $(1)/usr/lib
	$(INSTALL_BIN) $(PKG_BUILD_DIR)/uhttpd_lua.so $(1)/usr/lib/
endef

define Package/uhttpd-mod-ubus/install
	$(INSTALL_DIR) $(1)/usr/lib
	$(INSTALL_BIN) $(PKG_BUILD_DIR)/uhttpd_ubus.so $(1)/usr/lib/
	$(INSTALL_DIR) $(1)/usr/share/acl.d
	$(INSTALL_DATA) ./files/json_rpc.json $(1)/usr/share/acl.d/json_rpc.json
endef

$(eval $(call BuildPackage,uhttpd))
$(eval $(call BuildPackage,uhttpd-mod-lua))
$(eval $(call BuildPackage,uhttpd-mod-ubus))
