pkgbase=example-base
pkgname=('example-cli' 'example-gui')
pkgver=1.0.0
pkgrel=1

build() {
    cd "$srcdir/$pkgbase-$pkgver"
    make all
}

package_example-cli() {
    pkgdesc="CLI tool"
    depends=('lib1')
    
    cd "$srcdir/$pkgbase-$pkgver"
    make DESTDIR="$pkgdir" install-cli
}

package_example-gui() {
    pkgdesc="GUI application"
    depends=('lib1' 'gtk3')
    
    cd "$srcdir/$pkgbase-$pkgver"
    make DESTDIR="$pkgdir" install-gui
}

_pkgbase=example
pkgname=example-dkms
pkgver=1.0.0
pkgrel=1
pkgdesc="Example kernel module (DKMS)"
arch=('x86_64')
url="https://example.com"
license=('GPL2')
depends=('dkms')
conflicts=("$_pkgbase")
install=${pkgname}.install
source=("https://example.com/tarball.tar.gz"
        'dkms.conf'
        "${pkgname}.conf")
sha256sums=('...')

package() {
    # Install dkms.conf
    install -Dm644 dkms.conf "$pkgdir/usr/src/$_pkgbase-$pkgver/dkms.conf"
    
    # Set name and version in dkms.conf
    sed -e "s/@_PKGBASE@/$_pkgbase/" \
        -e "s/@PKGVER@/$pkgver/" \
        -i "$pkgdir/usr/src/$_pkgbase-$pkgver/dkms.conf"
    
    # Copy sources (including Makefile)
    cp -r "$_pkgbase"/* "$pkgdir/usr/src/$_pkgbase-$pkgver/"
    
    # Blacklist conflicting modules
    install -Dm644 ${pkgname}.conf "$pkgdir/usr/lib/modprobe.d/${pkgname}.conf"
}

PACKAGE_NAME="@_PKGBASE@"
PACKAGE_VERSION="@PKGVER@"
BUILT_MODULE_NAME[0]="example"
DEST_MODULE_LOCATION[0]="/kernel/drivers/misc"
AUTOINSTALL="yes"
MAKE[0]="make KERNELRELEASE=${kernelver}"
CLEAN="make clean"

pkgname=nvidia
pkgver=550.54.14
pkgrel=1
pkgdesc="NVIDIA drivers for linux kernel"
arch=('x86_64')
url="https://www.nvidia.com"
license=('custom')
depends=('linux' 'nvidia-utils')
makedepends=('linux-headers')
source=("https://example.com/nvidia-$pkgver.tar.gz")
sha256sums=('...')

build() {
    cd "$pkgname-$pkgver"
    
    # Get kernel version
    _kernver=$(cat /usr/lib/modules/extramodules-*/version)
    
    # Build module
    make SYSSRC=/usr/lib/modules/$_kernver/build module
}

package() {
    cd "$pkgname-$pkgver"
    
    # Get kernel version
    _kernver=$(cat /usr/lib/modules/extramodules-*/version)
    
    # Install kernel module
    install -Dm644 nvidia.ko \
        "$pkgdir/usr/lib/modules/$_kernver/extramodules/nvidia.ko"
}

_pkgbasename=example
pkgname=lib32-$_pkgbasename
pkgver=1.0.0
pkgrel=1
pkgdesc="Example library (32-bit)"
arch=('x86_64')
url="https://example.com"
license=('GPL')
depends=('lib32-glibc' "$_pkgbasename")
makedepends=('gcc-multilib')
source=("https://example.com/$_pkgbasename-$pkgver.tar.gz")
sha256sums=('...')

build() {
    cd "$_pkgbasename-$pkgver"
    
    export CC='gcc -m32'
    export CXX='g++ -m32'
    export PKG_CONFIG_PATH='/usr/lib32/pkgconfig'
    
    ./configure \
        --prefix=/usr \
        --libdir=/usr/lib32 \
        --disable-static
    make
}

package() {
    cd "$_pkgbasename-$pkgver"
    make DESTDIR="$pkgdir" install
    
    # Remove everything except libraries
    rm -rf "$pkgdir"/usr/{bin,include,share}
}

license=('custom')  # Or 'custom:VendorName'

package() {
    # ... install files ...
    
    # Install EULA
    install -Dm644 EULA.txt "$pkgdir/usr/share/licenses/$pkgname/EULA"
    
    # Or proprietary license
    install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
}

pkgname=example-proprietary
pkgver=1.0.0
pkgrel=1
pkgdesc="Example proprietary application"
arch=('x86_64')
url="https://example.com"
license=('custom')
depends=('glibc')
options=('!strip')  # Don't strip proprietary binaries
source=("https://example.com/downloads/example-$pkgver-linux-x86_64.tar.gz")
sha256sums=('...')

package() {
    cd "$srcdir/example-$pkgver"
    
    # Install to /opt for proprietary software
    install -dm755 "$pkgdir/opt/$pkgname"
    cp -r * "$pkgdir/opt/$pkgname/"
    
    # Create wrapper in /usr/bin
    install -dm755 "$pkgdir/usr/bin"
    ln -s "/opt/$pkgname/example" "$pkgdir/usr/bin/example"
    
    # Install license
    install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
}

pkgname=example-restricted
pkgver=1.0.0
pkgrel=1
pkgdesc="Example software with download restrictions"
arch=('x86_64')
url="https://example.com"
license=('custom:Example')
depends=('glibc')
# NO source= - user must download
DLAGENTS=('http::/usr/bin/curl -fLC - --retry 3 --retry-delay 3 -o %o %u')

# PKGBUILD should error with download instructions
if [ ! -f "$startdir/example-$pkgver.tar.gz" ]; then
    error "Please download example-$pkgver.tar.gz manually from:"
    error "  https://example.com/download"
    error "Place the file in the same directory as this PKGBUILD."
    exit 1
fi

source=("file://example-$pkgver.tar.gz")
sha256sums=('...')  # Checksum of manual download

package() {
    cd "$srcdir/example-$pkgver"
    
    # Install application
    install -dm755 "$pkgdir/opt/$pkgname"
    cp -r * "$pkgdir/opt/$pkgname/"
    
    # Install license
    install -Dm644 EULA.txt "$pkgdir/usr/share/licenses/$pkgname/EULA"
}

post_install() {
    cat << EOF

==> EULA ACCEPTANCE REQUIRED
    
    By installing $pkgname, you agree to the End User License Agreement.
    License text: /usr/share/licenses/$pkgname/EULA
    
    Key restrictions:
    - Non-commercial use only
    - No redistribution
    - No reverse engineering
    
    If you do not agree, remove this package: pacman -R $pkgname

EOF
}

post_upgrade() {
    post_install
}

pkgname=example-webapp
pkgver=1.0.0
pkgrel=1
pkgdesc="Example web application"
arch=('any')
url="https://example.com"
license=('GPL')
depends=('php' 'php-sqlite')
optdepends=(
    'apache: Web server'
    'nginx: Web server'
    'mysql: Database backend'
)
backup=('etc/webapps/example/config.php')
install=$pkgname.install
source=("https://example.com/releases/$pkgname-$pkgver.tar.gz"
        'apache.example.conf'
        'nginx.example.conf'
        "$pkgname.tmpfiles")
sha256sums=('...')

package() {
    cd "$pkgname-$pkgver"
    
    # Install application
    install -dm755 "$pkgdir/usr/share/webapps/$pkgname"
    cp -r * "$pkgdir/usr/share/webapps/$pkgname/"
    
    # Remove writable directories from application (will be created by tmpfiles.d)
    rm -rf "$pkgdir/usr/share/webapps/$pkgname"/{uploads,cache,logs,data}
    
    # Move config to /etc
    install -dm755 "$pkgdir/etc/webapps/$pkgname"
    mv "$pkgdir/usr/share/webapps/$pkgname/config.php" \
        "$pkgdir/etc/webapps/$pkgname/"
    ln -s "/etc/webapps/$pkgname/config.php" \
        "$pkgdir/usr/share/webapps/$pkgname/config.php"
    
    # Create symlinks to /var/lib (actual dirs created by tmpfiles.d at runtime)
    ln -s /var/lib/$pkgname/uploads "$pkgdir/usr/share/webapps/$pkgname/uploads"
    ln -s /var/lib/$pkgname/cache "$pkgdir/usr/share/webapps/$pkgname/cache"
    
    # Install systemd-tmpfiles.d configuration
    install -Dm644 "$srcdir/$pkgname.tmpfiles" \
        "$pkgdir/usr/lib/tmpfiles.d/$pkgname.conf"
    
    # Install example web server configs
    install -Dm644 "$srcdir/apache.example.conf" \
        "$pkgdir/etc/webapps/$pkgname/apache.example.conf"
    install -Dm644 "$srcdir/nginx.example.conf" \
        "$pkgdir/etc/webapps/$pkgname/nginx.example.conf"
    
    # Install license
    install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
}

# systemd-tmpfiles configuration for appname
# See tmpfiles.d(5) for details

# Type Path                    Mode User  Group Age Argument
d     /var/lib/appname          0755 http  http  -   -
d     /var/lib/appname/uploads  0755 http  http  -   -
d     /var/lib/appname/cache    0755 http  http  30d -
d     /var/log/appname          0755 http  http  -   -

# If application writes to config (e.g., web installers):
# Files are root:http 0660 (root owns, http group can write)
z     /etc/webapps/appname/config.php      0660 root  http  -   -
z     /etc/webapps/appname/database.php    0660 root  http  -   -  # Contains DB password!

# Type 'z' adjusts ownership/permissions on files installed by the package
# root:http 0660 = root owns file (secure), http group can write, NOT world-readable
# Config directory /etc/webapps/appname remains root:root (default from install)

source=('...' "$pkgname.tmpfiles")
sha256sums=('...')

package() {
    # Install tmpfiles.d configuration
    install -Dm644 "$srcdir/$pkgname.tmpfiles" \
        "$pkgdir/usr/lib/tmpfiles.d/$pkgname.conf"
    
    # DO NOT create directories with install -dm755
    # Directories are created at runtime by systemd-tmpfiles
    
    # Create symlinks to /var directories (optional, if app needs them)
    ln -s /var/lib/$pkgname/uploads "$pkgdir/usr/share/webapps/$pkgname/uploads"
}

post_install() {
    cat <<EOF
==> Configuration and setup instructions...
==> 
==> Writable directories are automatically created in /var/lib/$pkgname/
==> by systemd-tmpfiles.d during package installation.
EOF
}

post_upgrade() {
    # Only show upgrade-relevant information
    # Database setup is one-time, not needed on upgrades
    cat <<EOF

==> Web Application Upgrade Notes
==> 

1. Configuration Review:
   - Check for .pacnew files: /etc/webapps/$pkgname/
   - Review new configuration options

2. Database Migrations (if applicable):
   - Check for migration scripts in /usr/share/webapps/$pkgname/updates/
   - Run database updates through application update interface

3. Service Restart:
   - Restart web server: systemctl restart httpd (or nginx + php-fpm)

4. Directories:
   - Writable directories maintained automatically at /var/lib/$pkgname/

Changelog: https://upstream.project/releases
EOF
}

php_admin_value open_basedir "/tmp:/usr/share/webapps/example:/etc/webapps/example:/var/lib/example"