net-dns/dnscrypt-proxy: add 2.1.12

Signed-off-by: Sam James <sam@gentoo.org>

net-dns/dnscrypt-proxy/Manifest

@@ -1,2 +1,3 @@
 DIST dnscrypt-proxy-2.1.11.tar.gz 4290751 BLAKE2B eacfc3a52d541f3dcd40e94dc5580d3ac8122ae09845070542ecc33d075e1bd036cb317ade0c09e686d974672247a794bc69856bf07093857912a6f753987ec4 SHA512 a6ec90a17e7075e41777cdcb5703cee1ffeea142d476e98608739417b2da498cdbfccafb15a2daf97bd9ef5697ba00eb3185e57ea8dff74d81942b84c75c2e23
+DIST dnscrypt-proxy-2.1.12.tar.gz 4294076 BLAKE2B 24c857ce4678b7404d515e0e6f8cd184de5e54cf52d7a1826bfd31555976a4cd6ceb6097ccda60158ca4a4859282b94135a452d2d99f46d73af2e8513cc0422d SHA512 fa5c0341d67137df90754a886908cb9f5bf4d6091ba332b6fe12f7730a25e1e5167615da5d34ebe8cc2a7ed7696bfda899b2eaa0697019c4a66bfba5b0ba8d11
 DIST dnscrypt-proxy-2.1.8.tar.gz 4185376 BLAKE2B bf2c6e8fbe83980579a4ba460d7648647b998bd589ad83c633f6fc9f6e855d846fa7a867df6d7c7b6331070999b643c0114d805739ad53dc8173cb63f2b74536 SHA512 249e2d22b4b7f2c7142a7a626aa13fd80e5e250e2c84093e74360c895b0b8a7105d413fcd78e118bf51ffbf887fde654a7277f34bb6beb7b11a25531895edb6e

net-dns/dnscrypt-proxy/dnscrypt-proxy-2.1.12.ebuild

@@ -0,0 +1,102 @@
+# Copyright 1999-2025 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=8
+
+inherit fcaps go-module prefix systemd
+
+DESCRIPTION="Flexible DNS proxy, with support for encrypted DNS protocols"
+HOMEPAGE="https://github.com/DNSCrypt/dnscrypt-proxy"
+
+if [[ ${PV} == 9999 ]]; then
+	EGIT_REPO_URI="https://github.com/DNSCrypt/dnscrypt-proxy.git"
+	inherit git-r3
+else
+	SRC_URI="https://github.com/DNSCrypt/dnscrypt-proxy/archive/${PV}.tar.gz -> ${P}.tar.gz"
+	KEYWORDS="~amd64 ~arm ~arm64 ~ppc64 ~x86"
+fi
+
+LICENSE="Apache-2.0 BSD ISC MIT MPL-2.0"
+SLOT="0"
+
+RDEPEND="
+	acct-group/dnscrypt-proxy
+	acct-user/dnscrypt-proxy
+"
+
+FILECAPS=( cap_net_bind_service+ep usr/bin/dnscrypt-proxy )
+
+PATCHES=(
+	"${FILESDIR}"/${PN}-2.1.11-config-full-paths.patch
+)
+
+src_compile() {
+	pushd "${PN}" >/dev/null || die
+	ego build -v -x -mod=readonly -mod=vendor
+	popd >/dev/null || die
+}
+
+src_test() {
+	cd "${PN}" || die
+	ego test -mod=vendor
+}
+
+src_install() {
+	pushd "${PN}" >/dev/null || die
+
+	dobin dnscrypt-proxy
+
+	eprefixify example-dnscrypt-proxy.toml
+	insinto /etc/dnscrypt-proxy
+	newins example-dnscrypt-proxy.toml dnscrypt-proxy.toml
+	doins example-{allowed,blocked}-{ips.txt,names.txt}
+	doins example-{cloaking-rules.txt,forwarding-rules.txt}
+
+	popd >/dev/null || die
+
+	insinto /usr/share/dnscrypt-proxy
+	doins -r "utils/generate-domains-blocklist/."
+
+	newinitd "${FILESDIR}"/dnscrypt-proxy.initd dnscrypt-proxy
+	newconfd "${FILESDIR}"/dnscrypt-proxy.confd dnscrypt-proxy
+
+	systemd_newunit "${FILESDIR}"/dnscrypt-proxy.service dnscrypt-proxy.service
+	systemd_newunit "${FILESDIR}"/dnscrypt-proxy.socket dnscrypt-proxy.socket
+
+	insinto /etc/logrotate.d
+	newins "${FILESDIR}"/dnscrypt-proxy.logrotate dnscrypt-proxy
+
+	einstalldocs
+}
+
+pkg_postinst() {
+	fcaps_pkg_postinst
+
+	if ! use filecaps; then
+		ewarn "'filecaps' USE flag is disabled"
+		ewarn "${PN} will fail to listen on port 53"
+		ewarn "please do one the following:"
+		ewarn "1) re-enable 'filecaps'"
+		ewarn "2) change port to > 1024"
+		ewarn "3) configure to run ${PN} as root (not recommended)"
+		ewarn
+	fi
+
+	if systemd_is_booted || has_version sys-apps/systemd; then
+		elog "Using systemd socket activation may cause issues with speed"
+		elog "latency and reliability of ${PN} and is discouraged by upstream"
+		elog "Existing installations advised to disable 'dnscrypt-proxy.socket'"
+		elog "It is disabled by default for new installations"
+		elog "check "$(systemd_get_systemunitdir)/${PN}.service" for details"
+		elog
+
+	fi
+
+	elog "After starting the service you will need to update your"
+	elog "${EROOT}/etc/resolv.conf and replace your current set of resolvers"
+	elog "with:"
+	elog
+	elog "nameserver 127.0.0.1"
+	elog
+	elog "Also see https://github.com/DNSCrypt/${PN}/wiki"
+}