Adding debian version 20221223-2.debian/20221223-2debian

Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>

14 files changed, 1435 insertions, 0 deletions

diff --git a/debian/changelog b/debian/changelog
new file mode 100644
index 0000000..dd13d60
--- /dev/null
+++ b/debian/changelog
@@ -0,0 +1,400 @@
+open-infrastructure-service-tools (20221223-2) sid; urgency=medium
+
+  * Uploading to sid.
+  * Updating control for apt-tools.
+  * Updating control for znuny-tools.
+
+ -- Daniel Baumann <daniel.baumann@progress-linux.org>  Wed, 01 Mar 2023 20:27:19 +0100
+
+open-infrastructure-service-tools (20221223-1) sid; urgency=medium
+
+  * Uploading to sid.
+  * Merging upstream version 20221223.
+
+ -- Daniel Baumann <daniel.baumann@progress-linux.org>  Tue, 28 Feb 2023 19:00:15 +0100
+
+open-infrastructure-service-tools (20221122-3) sid; urgency=medium
+
+  * Uploading to sid.
+  * Reverting downgrade of apache2 depends to suggests (Closes: #1029436).
+  * Using codename instead of suitename in changelog.
+
+ -- Daniel Baumann <daniel.baumann@progress-linux.org>  Mon, 23 Jan 2023 09:37:07 +0100
+
+open-infrastructure-service-tools (20221122-2) sid; urgency=medium
+
+  * Uploading to sid.
+  * Updating to standards version 4.6.2.
+  * Downgrading apache2-data depends to suggests.
+  * Adding missing breaks and replaces for apache-tools package renaming
+    (Closes: #1028060).
+
+ -- Daniel Baumann <daniel.baumann@progress-linux.org>  Mon, 16 Jan 2023 14:30:31 +0100
+
+open-infrastructure-service-tools (20221122-1) sid; urgency=medium
+
+  * Uploading to sid.
+  * Merging upstream version 20221122.
+
+ -- Daniel Baumann <daniel.baumann@progress-linux.org>  Tue, 22 Nov 2022 15:37:18 +0100
+
+open-infrastructure-service-tools (20221108-2) sid; urgency=medium
+
+  * Uploading to sid.
+  * Renaming apache-tools package to service-tools to avoid future micro-
+    packaging by using one consistent name for the binary package.
+
+ -- Daniel Baumann <daniel.baumann@progress-linux.org>  Tue, 15 Nov 2022 15:51:59 +0100
+
+open-infrastructure-service-tools (20221108-1) sid; urgency=medium
+
+  * Uploading to sid.
+  * Merging upstream version 20221108.
+  * Adding preseeding for preferred-chain in dehydrated.
+
+ -- Daniel Baumann <daniel.baumann@progress-linux.org>  Tue, 15 Nov 2022 11:46:45 +0100
+
+open-infrastructure-service-tools (20221101-1) sid; urgency=medium
+
+  * Uploading to sid.
+  * Merging upstream version 20221101.
+
+ -- Daniel Baumann <daniel.baumann@progress-linux.org>  Mon, 31 Oct 2022 10:32:56 +0100
+
+open-infrastructure-service-tools (20221030-1) sid; urgency=medium
+
+  * Uploading to sid.
+  * Merging upstream version 20221030.
+  * Updating http links to https in copyright.
+  * Updating control for kea-tools.
+
+ -- Daniel Baumann <daniel.baumann@progress-linux.org>  Sun, 30 Oct 2022 13:58:43 +0100
+
+open-infrastructure-service-tools (20220704-1) sid; urgency=medium
+
+  * Uploading to sid.
+  * Merging upstream version 20220704.
+
+ -- Daniel Baumann <daniel.baumann@progress-linux.org>  Mon, 04 Jul 2022 19:14:00 +0200
+
+open-infrastructure-service-tools (20220626-1) sid; urgency=medium
+
+  * Uploading to sid.
+  * Merging upstream version 20220626.
+  * Adding support for preseeding multiple certificates in dehydrated-
+    tools.
+
+ -- Daniel Baumann <daniel.baumann@progress-linux.org>  Sun, 26 Jun 2022 19:11:03 +0200
+
+open-infrastructure-service-tools (20220624-1) sid; urgency=medium
+
+  * Uploading to sid.
+  * Merging upstream version 20220624 (Closes: #1013624).
+  * Adding dehydrated-tools TODO.
+
+ -- Daniel Baumann <daniel.baumann@progress-linux.org>  Fri, 24 Jun 2022 13:51:57 +0200
+
+open-infrastructure-service-tools (20220615-1) sid; urgency=medium
+
+  * Uploading to sid.
+  * Merging upstream version 20220615.
+  * Avoid running linux-i40e automatically after installation and
+    upgrades.
+
+ -- Daniel Baumann <daniel.baumann@progress-linux.org>  Fri, 17 Jun 2022 00:03:31 +0200
+
+open-infrastructure-service-tools (20220614-1) sid; urgency=medium
+
+  * Uploading to sid.
+  * Merging upstream version 20220614.
+  * Simplifying rules file by removing overrides superseeded by upstream
+    makefile.
+
+ -- Daniel Baumann <daniel.baumann@progress-linux.org>  Tue, 14 Jun 2022 13:54:48 +0200
+
+open-infrastructure-service-tools (20220609-1) sid; urgency=medium
+
+  * Uploading to sid.
+  * Merging upstream version 20220609.
+  * Updating control for dnsdist-tools.
+
+ -- Daniel Baumann <daniel.baumann@progress-linux.org>  Thu, 09 Jun 2022 16:20:48 +0200
+
+open-infrastructure-service-tools (20220525-1) sid; urgency=medium
+
+  * Uploading to sid.
+  * Merging upstream version 20220525.
+  * Updating control for ethtool-tools rename.
+
+ -- Daniel Baumann <daniel.baumann@progress-linux.org>  Tue, 24 May 2022 11:37:52 +0200
+
+open-infrastructure-service-tools (20220524-1) sid; urgency=medium
+
+  * Uploading to sid.
+  * Merging upstream version 20220524.
+  * Updating to standards version 4.6.1.
+  * Updating control for ethtool-tools.
+
+ -- Daniel Baumann <daniel.baumann@progress-linux.org>  Tue, 24 May 2022 06:17:17 +0200
+
+open-infrastructure-service-tools (20220430-1) sid; urgency=medium
+
+  * Uploading to sid.
+  * Merging upstream version 20220430.
+
+ -- Daniel Baumann <daniel.baumann@progress-linux.org>  Sun, 01 May 2022 00:02:39 +0200
+
+open-infrastructure-service-tools (20220414-1) sid; urgency=medium
+
+  * Uploading to sid.
+  * Merging upstream version 20220414.
+
+ -- Daniel Baumann <daniel.baumann@progress-linux.org>  Thu, 14 Apr 2022 22:15:08 +0200
+
+open-infrastructure-service-tools (20220105-2) sid; urgency=medium
+
+  * Uploading to sid.
+  * Adding socat to knot-resolver-tools depends.
+
+ -- Daniel Baumann <daniel.baumann@progress-linux.org>  Sun, 27 Feb 2022 10:15:05 +0100
+
+open-infrastructure-service-tools (20220105-1) sid; urgency=medium
+
+  * Uploading to sid.
+  * Merging upstream version 20220105.
+  * Updating packaging copyright for 2022.
+
+ -- Daniel Baumann <daniel.baumann@progress-linux.org>  Wed, 05 Jan 2022 08:07:31 +0100
+
+open-infrastructure-service-tools (20211231-1) sid; urgency=medium
+
+  * Uploading to sid.
+  * Merging upstream version 20211231.
+  * Adding KEY_ALGO debconf handling in dehydrated-tools.
+  * Updating control for vim-tools.
+
+ -- Daniel Baumann <daniel.baumann@progress-linux.org>  Fri, 31 Dec 2021 10:30:38 +0100
+
+open-infrastructure-service-tools (20211213-1) sid; urgency=medium
+
+  * Uploading to sid.
+  * Merging upstream version 20211213.
+  * Removing superfluous debconf variables not used in dehydrated-tools
+    config.
+  * Removing wrongly transformation of debconf boolean for dehydrated
+    register.
+  * Adding dehydrated debconf question to run dehydrated.
+  * Silencing downloading of tsig in dehydrated-tools.
+
+ -- Daniel Baumann <daniel.baumann@progress-linux.org>  Mon, 13 Dec 2021 15:01:21 +0100
+
+open-infrastructure-service-tools (20210928-1) sid; urgency=medium
+
+  * Uploading to sid.
+  * Merging upstream version 20210928.
+
+ -- Daniel Baumann <daniel.baumann@progress-linux.org>  Tue, 28 Sep 2021 21:14:38 +0200
+
+open-infrastructure-service-tools (20210926-2) sid; urgency=medium
+
+  * Uploading to sid.
+  * Handling empty acme-challenges directory.
+
+ -- Daniel Baumann <daniel.baumann@progress-linux.org>  Sun, 26 Sep 2021 16:45:34 +0200
+
+open-infrastructure-service-tools (20210926-1) sid; urgency=medium
+
+  * Uploading to sid.
+  * Merging upstream version 20210926.
+
+ -- Daniel Baumann <daniel.baumann@progress-linux.org>  Sun, 26 Sep 2021 15:10:09 +0200
+
+open-infrastructure-service-tools (20210908-1) sid; urgency=medium
+
+  * Uploading to sid.
+  * Merging upstream version 20210908.
+  * If no domain is specified in dehydrated preseeding, do not assume the
+    systems hostname automatically.
+
+ -- Daniel Baumann <daniel.baumann@progress-linux.org>  Tue, 07 Sep 2021 21:24:31 +0200
+
+open-infrastructure-service-tools (20210907-1) sid; urgency=medium
+
+  * Uploading to sid.
+  * Merging upstream version 20210907.
+  * Adding depends to ssl-cert to ensure group is present.
+  * Adding support to fetch dehydrated tsig file from URL.
+
+ -- Daniel Baumann <daniel.baumann@progress-linux.org>  Tue, 07 Sep 2021 06:20:42 +0200
+
+open-infrastructure-service-tools (20210906-1) sid; urgency=medium
+
+  * Uploading to sid.
+  * Merging upstream version 20210906.
+
+ -- Daniel Baumann <daniel.baumann@progress-linux.org>  Mon, 06 Sep 2021 07:24:44 +0200
+
+open-infrastructure-service-tools (20210905-1) sid; urgency=medium
+
+  * Uploading to sid.
+  * Merging upstream version 20210905.
+  * Updating hook debconf handling for dehydrated-hook rename.
+  * Adding tsig debconf handling for dehydrated-nsupdate.
+  * Adding domain preseeding for dehydrated.
+  * Don't fail in rules if apache-tools have been disabled.
+
+ -- Daniel Baumann <daniel.baumann@progress-linux.org>  Sun, 05 Sep 2021 09:16:11 +0200
+
+open-infrastructure-service-tools (20210904-1) sid; urgency=medium
+
+  * Uploading to sid.
+  * Merging upstream version 20210904.
+  * Updating control for knot-tools.
+  * Correcting typo in debconf templates for dehydrated/auto-cleanup
+    field.
+  * Reworking dehydrated debconf handling completely.
+
+ -- Daniel Baumann <daniel.baumann@progress-linux.org>  Sat, 04 Sep 2021 18:49:00 +0200
+
+open-infrastructure-service-tools (20210828-2) sid; urgency=medium
+
+  * Uploading to sid.
+  * Allowing to specify 'ALL' in dehydrated hooks preseeding.
+  * Run dehydration registration only when no account is already present.
+  * Actually moving dehydrated directory if needed.
+  * Avoiding error when trying to creating directories ontop of symlinks
+    when moving directories.
+  * Parsing control file in rules to automatically enable packages.
+  * Adding remaining configuration options for dehydrated preseeding.
+
+ -- Daniel Baumann <daniel.baumann@progress-linux.org>  Fri, 03 Sep 2021 13:00:56 +0200
+
+open-infrastructure-service-tools (20210828-1) sid; urgency=medium
+
+  * Uploading to sid.
+  * Merging upstream version 20210828.
+  * Updating to debhelper version 13.
+  * Updating to standards version 4.6.0.
+  * Updating year in copyright file.
+  * Removing ftbfs-asciidoc.patch, not needed anymore.
+  * Updating build-depends for new upstream version.
+  * Removing apache-icons transitional package, not needed anymore.
+  * Updating package description (Closes: #921238).
+  * Updating rules for new upstream directory layout.
+  * Removing unused gitignore in debian directory.
+  * Adding additional tool packages, disabled for the time being.
+
+ -- Daniel Baumann <daniel.baumann@progress-linux.org>  Sat, 28 Aug 2021 11:26:50 +0200
+
+open-infrastructure-service-tools (20190301-lts1-2) sid; urgency=medium
+
+  * Uploading to sid.
+  * Using codenames as upload targets in changelog.
+  * Updating years in copyright file for 2020.
+  * Updating to standards version 4.5.0.
+  * Adding patch to fix FTBFS with newer asciidoc versions (Closes:
+    #948901).
+
+ -- Daniel Baumann <daniel.baumann@progress-linux.org>  Tue, 21 Jan 2020 21:47:55 +0100
+
+open-infrastructure-service-tools (20190301-lts1-1) sid; urgency=medium
+
+  * Uploading to sid.
+  * Merging upstream version 20190301-lts1.
+
+ -- Daniel Baumann <daniel.baumann@progress-linux.org>  Sat, 02 Mar 2019 16:10:29 +0100
+
+open-infrastructure-service-tools (20190301-1) sid; urgency=medium
+
+  * Uploading to sid.
+  * Merging upstream version 20190301.
+  * Updating packaging for upstream rename.
+  * Removing source local-options, not needed anymore.
+  * Adding entries with upload targets in changelog.
+  * Switching priorities, prefering tango alternatives over awesome.
+
+ -- Daniel Baumann <daniel.baumann@progress-linux.org>  Sat, 02 Mar 2019 16:01:19 +0100
+
+open-infrastructure-service-tools (20170701-3) sid; urgency=medium
+
+  * Uploading to sid.
+  * Renaming binary package to open-infrastructure-apache-tools for
+    consistency and future-proofing.
+
+ -- Daniel Baumann <daniel.baumann@progress-linux.org>  Sun, 03 Feb 2019 10:37:50 +0100
+
+open-infrastructure-service-tools (20170701-2) sid; urgency=medium
+
+  * Uploading to sid.
+  * Using lzip tarball in watch file.
+  * Updating to standards version 4.1.1.
+  * Adding Rules-Requires-Root field.
+  * Adding enhances for apache2.
+  * Updating to standards version 4.3.0.
+  * Updating vcs fields.
+  * Updating year in copyright for 2019.
+  * Updating to debhelper 12.
+  * Using build-depends to specify debhelper compatibility.
+  * Repeating Section for binary packages in control.
+  * Renaming source package to open-infrastructure-service-tools for
+    consistency and future-proofing.
+
+ -- Daniel Baumann <daniel.baumann@progress-linux.org>  Sat, 02 Feb 2019 16:15:20 +0100
+
+open-infrastructure-apache-icons (20170701-1) sid; urgency=medium
+
+  * Uploading to sid.
+  * Merging upstream version 20170701.
+  * Removing superfluous --parallel when invoking debhelper as it's the
+    default with compat level 10, thanks to Gianfranco Costamagna
+    <locutusofborg@debian.org>.
+  * Generalizing rules file.
+  * Updating to standards version 4.0.0.
+  * Using https for copyright format url.
+
+ -- Daniel Baumann <daniel.baumann@progress-linux.org>  Sat, 01 Jul 2017 10:16:43 +0200
+
+open-infrastructure-apache-icons (20170405-1) experimental; urgency=low
+
+  * Uploading to experimental.
+  * Merging upstream version 20170405.
+  * Updating year in copyright information for 2017.
+  * Using consistent email address for all downstream work.
+  * Updating vcs fields.
+
+ -- Daniel Baumann <daniel.baumann@progress-linux.org>  Fri, 07 Apr 2017 14:15:33 +0200
+
+open-infrastructure-apache-icons (20161210-1) experimental; urgency=low
+
+  * Uploading to experimental.
+  * Merging upstream version 20161210.
+  * Updating upstream contact in copyright file.
+  * Making maintainer scripts executable in source tree.
+  * Updating upstream signing key.
+
+ -- Daniel Baumann <daniel.baumann@progress-linux.org>  Sun, 11 Dec 2016 11:03:05 +0100
+
+open-infrastructure-apache-icons (20161101-1) sid; urgency=medium
+
+  * Uploading to sid.
+  * Merging upstream version 20161101.
+  * Updating debhelper build-depends for version 10.
+
+ -- Daniel Baumann <daniel.baumann@progress-linux.org>  Tue, 25 Oct 2016 17:23:44 +0200
+
+open-infrastructure-apache-icons (20160701-1) sid; urgency=low
+
+  * Uploading to sid.
+  * Merging upstream version 20160701.
+  * Adding provides apache-icons.
+  * Updating upstream git location.
+  * Updating vcs fields.
+  * Updating build-depends to include tools for manpage generation.
+
+ -- Daniel Baumann <daniel.baumann@progress-linux.org>  Sun, 03 Jul 2016 15:35:06 +0200
+
+open-infrastructure-apache-icons (20160601-1) sid; urgency=low
+
+  * Initial upload to sid (Closes: #826323).
+
+ -- Daniel Baumann <daniel.baumann@progress-linux.org>  Sat, 04 Jun 2016 11:54:42 +0200
diff --git a/debian/control b/debian/control
new file mode 100644
index 0000000..844c104
--- /dev/null
+++ b/debian/control
@@ -0,0 +1,192 @@
+Source: open-infrastructure-service-tools
+Section: admin
+Priority: optional
+Maintainer: Daniel Baumann <daniel.baumann@progress-linux.org>
+Build-Depends:
+ debhelper-compat (= 13),
+ dh-apache2,
+ imagemagick,
+ librsvg2-bin,
+ python3-docutils,
+Rules-Requires-Root: no
+Standards-Version: 4.6.2
+Homepage: https://open-infrastructure.net/software/service-tools
+Vcs-Browser: https://git.progress-linux.org/users/daniel.baumann/debian/packages/open-infrastructure-service-tools
+Vcs-Git: https://git.progress-linux.org/users/daniel.baumann/debian/packages/open-infrastructure-service-tools
+
+Package: open-infrastructure-service-tools
+Section: admin
+Architecture: all
+Depends:
+ apache2-data,
+ ${misc:Depends},
+Breaks:
+ open-infrastructure-apache-tools (<< 20221108-2),
+Replaces:
+ open-infrastructure-apache-tools,
+Enhances:
+ apache2,
+Description: additional tools to ease system administration and integration
+ This package contains some usefull tools, e.g.:
+ .
+   * alternative icons for Apache autoindex (Tango Icons and Font Awesome
+     based themes)
+
+Package: open-infrastructure-apache-tools
+Section: oldlibs
+Priority: extra
+Architecture: all
+Depends:
+ open-infrastructure-service-tools,
+ ${misc:Depends},
+Description: additional tools for Apache HTTP server (transitional package)
+ Package to ease upgrading from older open-infrastructure-apache-tools package
+ to the new open-infrastructure-service-tools package.
+ .
+ This package can be purged at anytime once the open-infrastructure-service-tools
+ package has been installed.
+
+#Package: open-infrastructure-apt-tools
+#Section: admin
+#Architecture: all
+#Depends:
+# apt,
+# ${misc:Depends},
+#Provides:
+# apt-tools,
+#Enhances:
+# apt,
+#Description: additional tools for apt
+# This package contains additional tools for apt.
+
+#Package: open-infrastructure-dehydrated-tools
+#Section: admin
+#Architecture: all
+#Depends:
+# dehydrated,
+# ssl-cert,
+# ${misc:Depends},
+#Provides:
+# dehydrated-tools,
+#Enhances:
+# dehydrated,
+#Description: additional tools for dehydrated Letsencrypt client
+# This package contains additional tools for the dehydrated Letsencrypt client.
+
+#Package: open-infrastructure-dnsdist-tools
+#Section: admin
+#Architecture: all
+#Depends:
+# dnsdist,
+# ${misc:Depends},
+#Provides:
+# dnsdist-tools,
+#Enhances:
+# dnsdist,
+#Description: additional tools for dnsdist
+# This package contains additional tools for the dnsdist.
+
+#Package: open-infrastructure-git-tools
+#Section: admin
+#Architecture: all
+#Depends:
+# git,
+# ${misc:Depends},
+#Provides:
+# git-tools,
+#Enhances:
+# git,
+#Description: additional tools for Git version control system
+# This package contains additional tools for the Git version control system.
+
+#Package: open-infrastructure-irker-tools
+#Section: admin
+#Architecture: all
+#Depends:
+# irker,
+# ${misc:Depends},
+#Provides:
+# irker-tools,
+#Enhances:
+# irker,
+#Description: additional tools for irker IRC notification daemon
+# This package contains additional tools for the irker IRC notification daemon:
+
+#Package: open-infrastructure-kea-tools
+#Section: admin
+#Architecture: all
+#Depends:
+# kea,
+# ${misc:Depends},
+#Provides:
+# kea-tools,
+#Enhances:
+# kea,
+#Description: additional tools for kea DHCP server
+# This package contains additional tools for the kea DHCP server.
+
+#Package: open-infrastructure-knot-tools
+#Section: admin
+#Architecture: all
+#Depends:
+# knot,
+# ${misc:Depends},
+#Provides:
+# knot-tools,
+#Enhances:
+# knot,
+#Description: additional tools for knot DNS server
+# This package contains additional tools for the knot DNS server.
+
+#Package: open-infrastructure-knot-resolver-tools
+#Section: admin
+#Architecture: all
+#Depends:
+# knot-resolver,
+# socat,
+# ${misc:Depends},
+#Provides:
+# knot-resolver-tools,
+#Enhances:
+# knot-resolver,
+#Description: additional tools for knot DNS resolver
+# This package contains additional tools for the knot DNS resolver.
+
+#Package: open-infrastructure-linux-tools
+#Section: admin
+#Architecture: all
+#Depends:
+# ethtool,
+# ${misc:Depends},
+#Provides:
+# linux-tools,
+#Enhances:
+# ethtool,
+#Description: additional tools for Linux kernel related things
+# This package contains additional tools for the Linux kernel.
+
+#Package: open-infrastructure-vim-tools
+#Section: admin
+#Architecture: all
+#Depends:
+# vim,
+# ${misc:Depends},
+#Provides:
+# vim-tools,
+#Enhances:
+# vim,
+#Description: additional tools for vim text editor
+# This package contains additional tools for the vim text editor.
+
+#Package: open-infrastructure-znuny-tools
+#Section: admin
+#Architecture: all
+#Depends:
+# znuny,
+# ${misc:Depends},
+#Provides:
+# znuny-tools,
+#Enhances:
+# znuny,
+#Description: additional tools for znuny ticketing system
+# This package contains additional tools for the znuny ticketing system.
diff --git a/debian/copyright b/debian/copyright
new file mode 100644
index 0000000..9206d71
--- /dev/null
+++ b/debian/copyright
@@ -0,0 +1,125 @@
+Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
+Upstream-Name: service-tools
+Upstream-Contact: Open Infrastructure <software@lists.open-infrastructure.net>
+Source: https://git.open-infrastructure.net/software/service-tools
+
+Files: *
+Copyright: 2014-2022 Daniel Baumann <daniel.baumann@open-infrastructure.net>
+License: GPL-3+
+
+Files: share/icons/awesome/*
+Copyright: 2012-2016 Dave Gandy <drgandy@alum.mit.edu>
+License: OFL-1.1
+
+Files: share/icons/tango/*
+Copyright: 2005-2009 Jakub Steiner <jimmac@novell.com> et al.
+License: PD
+
+License: GPL-3+
+ This program is free software: you can redistribute it and/or modify
+ it under the terms of the GNU General Public License as published by
+ the Free Software Foundation, either version 3 of the License, or
+ (at your option) any later version.
+ .
+ This program is distributed in the hope that it will be useful,
+ but WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ GNU General Public License for more details.
+ .
+ You should have received a copy of the GNU General Public License
+ along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ .
+ The full text of the GNU General Public License version 3
+ can be found in the file /usr/share/common-licenses/GPL-3.
+
+License: OFL-1.1
+ PREAMBLE
+ The goals of the Open Font License (OFL) are to stimulate worldwide
+ development of collaborative font projects, to support the font creation
+ efforts of academic and linguistic communities, and to provide a free and
+ open framework in which fonts may be shared and improved in partnership
+ with others.
+ .
+ The OFL allows the licensed fonts to be used, studied, modified and
+ redistributed freely as long as they are not sold by themselves. The
+ fonts, including any derivative works, can be bundled, embedded,
+ redistributed and/or sold with any software provided that any reserved
+ names are not used by derivative works. The fonts and derivatives,
+ however, cannot be released under any other type of license. The
+ requirement for fonts to remain under this license does not apply
+ to any document created using the fonts or their derivatives.
+ .
+ DEFINITIONS
+ "Font Software" refers to the set of files released by the Copyright
+ Holder(s) under this license and clearly marked as such. This may
+ include source files, build scripts and documentation.
+ .
+ "Reserved Font Name" refers to any names specified as such after the
+ copyright statement(s).
+ .
+ "Original Version" refers to the collection of Font Software components as
+ distributed by the Copyright Holder(s).
+ .
+ "Modified Version" refers to any derivative made by adding to, deleting,
+ or substituting -- in part or in whole -- any of the components of the
+ Original Version, by changing formats or by porting the Font Software to a
+ new environment.
+ .
+ "Author" refers to any designer, engineer, programmer, technical
+ writer or other person who contributed to the Font Software.
+ .
+ PERMISSION & CONDITIONS
+ Permission is hereby granted, free of charge, to any person obtaining
+ a copy of the Font Software, to use, study, copy, merge, embed, modify,
+ redistribute, and sell modified and unmodified copies of the Font
+ Software, subject to the following conditions:
+ .
+ 1) Neither the Font Software nor any of its individual components,
+ in Original or Modified Versions, may be sold by itself.
+ .
+ 2) Original or Modified Versions of the Font Software may be bundled,
+ redistributed and/or sold with any software, provided that each copy
+ contains the above copyright notice and this license. These can be
+ included either as stand-alone text files, human-readable headers or
+ in the appropriate machine-readable metadata fields within text or
+ binary files as long as those fields can be easily viewed by the user.
+ .
+ 3) No Modified Version of the Font Software may use the Reserved Font
+ Name(s) unless explicit written permission is granted by the corresponding
+ Copyright Holder. This restriction only applies to the primary font name as
+ presented to the users.
+ .
+ 4) The name(s) of the Copyright Holder(s) or the Author(s) of the Font
+ Software shall not be used to promote, endorse or advertise any
+ Modified Version, except to acknowledge the contribution(s) of the
+ Copyright Holder(s) and the Author(s) or with their explicit written
+ permission.
+ .
+ 5) The Font Software, modified or unmodified, in part or in whole,
+ must be distributed entirely under this license, and must not be
+ distributed under any other license. The requirement for fonts to
+ remain under this license does not apply to any document created
+ using the Font Software.
+ .
+ TERMINATION
+ This license becomes null and void if any of the above conditions are
+ not met.
+ .
+ DISCLAIMER
+ THE FONT SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+ EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF
+ MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT
+ OF COPYRIGHT, PATENT, TRADEMARK, OR OTHER RIGHT. IN NO EVENT SHALL THE
+ COPYRIGHT HOLDER BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
+ INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL
+ DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+ FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM
+ OTHER DEALINGS IN THE FONT SOFTWARE.
+
+License: PD
+ This program is free software: you have unlimited permission
+ to copy, distribute and modify it.
+ .
+ This program is distributed in the hope that it will be useful,
+ but WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
diff --git a/debian/open-infrastructure-dehydrated-tools.TODO b/debian/open-infrastructure-dehydrated-tools.TODO
new file mode 100644
index 0000000..a97f1a7
--- /dev/null
+++ b/debian/open-infrastructure-dehydrated-tools.TODO
@@ -0,0 +1 @@
+* automatically guess domain.txt by using DNS or /etc/hostname
diff --git a/debian/open-infrastructure-dehydrated-tools.config b/debian/open-infrastructure-dehydrated-tools.config
new file mode 100644
index 0000000..646f67f
--- /dev/null
+++ b/debian/open-infrastructure-dehydrated-tools.config
@@ -0,0 +1,85 @@
+#!/bin/sh
+
+set -e
+
+. /usr/share/debconf/confmodule
+
+CONFFILE="/etc/dehydrated/conf.d/config.sh"
+
+if [ -e "${CONFFILE}" ]
+then
+	. ${CONFFILE} || true
+
+	db_set open-infrastructure-dehydrated-tools/auto-cleanup "${AUTO_CLEANUP}"
+	db_set open-infrastructure-dehydrated-tools/ca "${CA}"
+	db_set open-infrastructure-dehydrated-tools/challengetype "${CHALLENGETYPE}"
+	db_set open-infrastructure-dehydrated-tools/contact-email "${CONTACT_EMAIL}"
+	db_set open-infrastructure-dehydrated-tools/key-algo "${KEY_ALGO}"
+	db_set open-infrastructure-dehydrated-tools/ocsp-fetch "${OCSP_FETCH}"
+	db_set open-infrastructure-dehydrated-tools/ocsp-must-staple "${OCSP_MUST_STAPLE}"
+	db_set open-infrastructure-dehydrated-tools/preferred-chain "${PREFERRED_CHAIN}"
+fi
+
+db_settitle open-infrastructure-dehydrated-tools/title
+db_input low open-infrastructure-dehydrated-tools/auto-cleanup "${AUTO_CLEANUP}" || true
+db_go
+
+db_settitle open-infrastructure-dehydrated-tools/title
+db_input low open-infrastructure-dehydrated-tools/ca "${CA}" || true
+db_go
+
+db_settitle open-infrastructure-dehydrated-tools/title
+db_input low open-infrastructure-dehydrated-tools/challengetype "${CHALLENGETYPE}" || true
+db_go
+
+db_settitle open-infrastructure-dehydrated-tools/title
+db_input low open-infrastructure-dehydrated-tools/contact-email "${CONTACT_EMAIL}" || true
+db_go
+
+db_settitle open-infrastructure-dehydrated-tools/title
+db_input low open-infrastructure-dehydrated-tools/key-algo "${KEY_ALGO}" || true
+db_go
+
+db_settitle open-infrastructure-dehydrated-tools/title
+db_input low open-infrastructure-dehydrated-tools/ocsp-fetch "${OCSP_FETCH}" || true
+db_go
+
+db_settitle open-infrastructure-dehydrated-tools/title
+db_input low open-infrastructure-dehydrated-tools/ocsp-must-staple "${OCSP_MUST_STAPLE}" || true
+db_go
+
+db_settitle open-infrastructure-dehydrated-tools/title
+db_input low open-infrastructure-dehydrated-tools/preferred-chain "${PREFERRED_CHAIN}" || true
+db_go
+
+db_settitle open-infrastructure-dehydrated-tools/title
+db_input low open-infrastructure-dehydrated-tools/basedir "${BASEDIR}" || true
+db_go
+
+if [ -e /usr/share/dehydrated/hooks ]
+then
+	HOOKS_CHOICES="$(cd /usr/share/dehydrated/hooks && find -maxdepth 1 -not -type d -printf '%P\n' | sort)"
+	db_subst open-infrastructure-dehydrated-tools/hooks HOOKS_CHOICES "ALL, $(echo ${HOOKS_CHOICES} | sed -e 's| |, |g')"
+
+	db_settitle open-infrastructure-dehydrated-tools/title
+	db_input low open-infrastructure-dehydrated-tools/hooks || true
+	db_go
+fi
+
+db_settitle open-infrastructure-dehydrated-tools/title
+db_input low open-infrastructure-dehydrated-tools/domains "${DOMAINS}" || true
+db_go
+
+db_settitle open-infrastructure-dehydrated-tools/title
+db_input low open-infrastructure-dehydrated-tools/tsig "${TSIG}" || true
+db_go
+
+db_settitle open-infrastructure-dehydrated-tools/title
+db_input low open-infrastructure-dehydrated-tools/register "${REGISTER}" || true
+db_go
+
+db_settitle open-infrastructure-dehydrated-tools/title
+db_input low open-infrastructure-dehydrated-tools/run "${RUN}" || true
+db_go
+
+db_stop
diff --git a/debian/open-infrastructure-dehydrated-tools.postinst b/debian/open-infrastructure-dehydrated-tools.postinst
new file mode 100755
index 0000000..3eb3a04
--- /dev/null
+++ b/debian/open-infrastructure-dehydrated-tools.postinst
@@ -0,0 +1,370 @@
+#!/bin/sh
+
+set -e
+
+. /usr/share/debconf/confmodule
+
+CONFFILE="/etc/dehydrated/conf.d/config.sh"
+
+Install ()
+{
+	DEFAULT="${1}"
+	TARGET="${2}"
+
+	mkdir -p "${DEFAULT}" > /dev/null 2>&1 || true
+	mkdir -p "${TARGET}" > /dev/null 2>&1 || true
+
+	if [ "${TARGET}" != "${DEFAULT}" ]
+	then
+		if [ -h "${DEFAULT}" ]
+		then
+			rm -f "${DEFAULT}"
+			ln -s "${TARGET}" "${DEFAULT}"
+		else
+			if [ -e "${DEFAULT}" ] && [ -z "$(ls -A ${DEFAULT})" ]
+			then
+				rmdir "${DEFAULT}"
+				ln -s "${TARGET}" "${DEFAULT}"
+			elif [ -n "$(ls -A ${DEFAULT})" ] && [ -z "$(ls -A ${TARGET})" ]
+			then
+				rmdir "${TARGET}"
+				mv "${DEFAULT}" "${TARGET}"
+				ln -s "${TARGET}" "${DEFAULT}"
+			fi
+		fi
+	fi
+
+	if ! dpkg-statoverride --list "${DEFAULT}" > /dev/null 2>&1 &&
+	   ! dpkg-statoverride --list "${TARGET}" > /dev/null 2>&1
+	then
+		if getent group ssl-cert > /dev/null 2>&1
+		then
+			GROUP="ssl-cert"
+		else
+			GROUP="root"
+		fi
+
+		chmod 0770 "${TARGET}"
+		chown root:"${GROUP}" "${TARGET}"
+
+		chmod 0770 "${DEFAULT}"
+		chown root:"${GROUP}" "${DEFAULT}"
+	fi
+}
+
+case "${1}" in
+	configure)
+		db_get open-infrastructure-dehydrated-tools/ca
+		CA="${RET}" # select
+
+		db_get open-infrastructure-dehydrated-tools/auto-cleanup
+		AUTO_CLEANUP="${RET}" # boolean
+
+		db_get open-infrastructure-dehydrated-tools/challengetype
+		CHALLENGETYPE="${RET}" # select
+
+		db_get open-infrastructure-dehydrated-tools/contact-email
+		CONTACT_EMAIL="${RET}" # string (w/ empty)
+
+		db_get open-infrastructure-dehydrated-tools/key-algo
+		KEY_ALGO="${RET}" # select
+
+		db_get open-infrastructure-dehydrated-tools/ocsp-fetch
+		OCSP_FETCH="${RET}" # boolean
+
+		db_get open-infrastructure-dehydrated-tools/ocsp-must-staple
+		OCSP_MUST_STAPLE="${RET}" # boolean
+
+		db_get open-infrastructure-dehydrated-tools/preferred-chain
+		PREFERRED_CHAIN="${RET}" # string w/ empty
+
+		db_get open-infrastructure-dehydrated-tools/hooks
+		HOOKS="${RET}" # multi-select (w/ empty)
+
+		db_get open-infrastructure-dehydrated-tools/basedir
+		NEW_BASEDIR="${RET}" # string (w/o empty)
+
+		db_get open-infrastructure-dehydrated-tools/domains
+		DOMAINS="${RET}" # string (w/ empty)
+
+		db_get open-infrastructure-dehydrated-tools/tsig
+		TSIG="${RET}" # string (w/ empty)
+
+		db_get open-infrastructure-dehydrated-tools/register
+		REGISTER="${RET}" # boolean
+
+		db_get open-infrastructure-dehydrated-tools/run
+		RUN="${RET}" # boolean
+
+		db_stop
+
+		case "${AUTO_CLEANUP}" in
+			true)
+				AUTO_CLEANUP="yes"
+				;;
+
+			false)
+				AUTO_CLEANUP="no"
+				;;
+		esac
+
+		case "${OCSP_FETCH}" in
+			true)
+				OCSP_FETCH="yes"
+				;;
+
+			false)
+				OCSP_FETCH="no"
+				;;
+		esac
+
+		case "${OCSP_MUST_STAPLE}" in
+			true)
+				OCSP_MUST_STAPLE="yes"
+				;;
+
+			false)
+				OCSP_MUST_STAPLE="no"
+				;;
+		esac
+
+		HOOK="/usr/bin/dehydrated-hook"
+
+		if [ ! -e "${CONFFILE}" ]
+		then
+
+cat > "${CONFFILE}" << EOF
+# /etc/dehydrated/conf.d/config.sh
+
+AUTO_CLEANUP="${AUTO_CLEANUP}"
+CA="${CA}"
+CHALLENGETYPE="${CHALLENGETYPE}"
+CONTACT_EMAIL="${CONTACT_EMAIL}"
+HOOK="${HOOK}"
+KEY_ALGO="${KEY_ALGO}"
+OCSP_FETCH="${OCSP_FETCH}"
+OCSP_MUST_STAPLE="${OCSP_MUST_STAPLE}"
+PREFERRED_CHAIN="${PREFERRED_CHAIN}"
+EOF
+
+		fi
+
+		cp -a -f "${CONFFILE}" "${CONFFILE}.tmp"
+
+		# If the admin deleted or commented some variables but then set
+		# them via debconf, (re-)add them to the config file.
+
+		test -z "${AUTO_CLEANUP}" || \
+		grep -Eq '^ *AUTO_CLEANUP=' "${CONFFILE}" || \
+		echo "AUTO_CLEANUP=" >> "${CONFFILE}"
+
+		test -z "${CA}" || \
+		grep -Eq '^ *CA=' "${CONFFILE}" || \
+		echo "CA=" >> "${CONFFILE}"
+
+		test -z "${CHALLENGETYPE}" || \
+		grep -Eq '^ *CHALLENGETYPE=' "${CONFFILE}" || \
+		echo "CHALLENGETYPE=" >> "${CONFFILE}"
+
+		test -z "${CONTACT_EMAIL}" || \
+		grep -Eq '^ *CONTACT_EMAIL=' "${CONFFILE}" || \
+		echo "CONTACT_EMAIL=" >> "${CONFFILE}"
+
+		test -z "${HOOK}" || \
+		grep -Eq '^ *HOOK=' "${CONFFILE}" || \
+		echo "HOOK=" >> "${CONFFILE}"
+
+		test -z "${KEY_ALGO}" || \
+		grep -Eq '^ *KEY_ALGO=' "${CONFFILE}" || \
+		echo "KEY_ALGO=" >> "${CONFFILE}"
+
+		test -z "${OCSP_FETCH}" || \
+		grep -Eq '^ *OCSP_FETCH=' "${CONFFILE}" || \
+		echo "OCSP_FETCH=" >> "${CONFFILE}"
+
+		test -z "${OCSP_MUST_STAPLE}" || \
+		grep -Eq '^ *OCSP_MUST_STAPLE=' "${CONFFILE}" || \
+		echo "OCSP_MUST_STAPLE=" >> "${CONFFILE}"
+
+		test -z "${PREFERRED_CHAIN}" || \
+		grep -Eq '^ *PREFERRED_CHAIN=' "${CONFFILE}" || \
+		echo "PREFERRED_CHAIN=" >> "${CONFFILE}"
+
+		sed -e "s|^ *AUTO_CLEANUP=.*|AUTO_CLEANUP=\"${AUTO_CLEANUP}\"|" \
+		    -e "s|^ *CA=.*|CA=\"${CA}\"|" \
+		    -e "s|^ *CHALLENGETYPE=.*|CHALLENGETYPE=\"${CHALLENGETYPE}\"|" \
+		    -e "s|^ *CONTACT_EMAIL=.*|CONTACT_EMAIL=\"${CONTACT_EMAIL}\"|" \
+		    -e "s|^ *HOOK=.*|HOOK=\"${HOOK}\"|" \
+		    -e "s|^ *KEY_ALGO=.*|KEY_ALGO=\"${KEY_ALGO}\"|" \
+		    -e "s|^ *OCSP_FETCH=.*|OCSP_FETCH=\"${OCSP_FETCH}\"|" \
+		    -e "s|^ *OCSP_MUST_STAPLE=.*|OCSP_MUST_STAPLE=\"${OCSP_MUST_STAPLE}\"|" \
+		    -e "s|^ *PREFERRED_CHAIN=.*|PREFERRED_CHAIN=\"${PREFERRED_CHAIN}\"|" \
+		< "${CONFFILE}" > "${CONFFILE}.tmp"
+
+		mv -f "${CONFFILE}.tmp" "${CONFFILE}"
+
+		for HOOK in $(cd /usr/share/dehydrated/hooks && find -maxdepth 1 -not -type d -printf '%P\n' | sort)
+		do
+			if [ -L "/etc/dehydrated/hook.d/${HOOK}" ]
+			then
+				rm -f "/etc/dehydrated/hook.d/${HOOK}"
+			fi
+		done
+
+		if [ -n "${HOOKS}" ]
+		then
+			HOOKS="$(echo ${HOOKS} | sed -e 's|,| |g')"
+
+			if echo "${HOOKS}" | grep -qs "ALL"
+			then
+				HOOKS="$(cd /usr/share/dehydrated/hooks && find -maxdepth 1 -not -type d -printf '%P\n' | sort)"
+			fi
+
+			for HOOK in ${HOOKS}
+			do
+				if [ ! -e "/etc/dehydrated/hook.d/${HOOK}" ] && [ -e "/usr/share/dehydrated/hooks/${HOOK}" ]
+				then
+					ln -sf "/usr/share/dehydrated/hooks/${HOOK}" "/etc/dehydrated/hook.d/${HOOK}"
+				fi
+			done
+		fi
+
+		for FILE in /etc/dehydrated/config /etc/dehydrated/conf.d/*.sh
+		do
+			if [ -e "${FILE}" ]
+			then
+				. ${FILE} || true
+			fi
+		done
+
+		if [ -n "${NEW_BASEDIR}" ] && [ "${BASEDIR}" != "${NEW_BASEDIR}" ]
+		then
+			rmdir "${BASEDIR}/acme-challenges" > /dev/null 2>&1 || true
+			Install "${BASEDIR}" "${NEW_BASEDIR}"
+			mkdir -p "${BASEDIR}/acme-challenges"
+		fi
+
+		if [ -n "${DOMAINS}" ] && [ "${DOMAINS}" != "none" ]
+		then
+			rm -f /etc/dehydrated/domains.txt
+
+			GROUPS="$(echo ${DOMAINS} | sed -e 's/ /#/g' -e 's/|/ /g')"
+
+			for GROUP in ${GROUPS}
+			do
+				DOMAINS="$(echo ${GROUP} | sed -e 's/#/ /g' -e 's/^ //g')"
+
+				echo "${DOMAINS}" >> /etc/dehydrated/domains.txt
+			done
+		fi
+
+		if [ -n "${TSIG}" ]
+		then
+			case "${TSIG}" in
+				http*)
+					# tsig is a URL
+					echo -n "Downloading tsig.key from '${TSIG}'..."
+
+					if command -v wget -q "${TSIG}" -O /dev/null > /dev/null 2>&1
+					then
+						rm -f /etc/dehydrated/tsig.key
+
+						wget -q "${TSIG}" -O /etc/dehydrated/tsig.key
+						chmod 0600 /etc/dehydrated/tsig.key
+
+						TSIG_FILE="/etc/dehydrated/tsig.key"
+					elif command -v curl -s "${TSIG}" -o /dev/null > /dev/null 2>&1
+					then
+						rm -f /etc/dehydrated/tsig.key
+
+						curl -s "${TSIG}" -o /etc/dehydrated/tsig.key
+						chmod 0600 /etc/dehydrated/tsig.key
+
+						TSIG_FILE="/etc/dehydrated/tsig.key"
+					else
+						echo
+						echo "W: need wget or curl" >&2
+					fi
+
+					if [ -n "${TSIG_FILE}" ]
+					then
+						echo " done."
+					fi
+					;;
+
+				*:*)
+					# tsig is a string
+					echo "${TSIG}" > /etc/dehydrated/tsig.key
+					chmod 0600 /etc/dehydrated/tsig.key
+
+					TSIG_FILE="/etc/dehydrated/tsig.key"
+					;;
+
+				*/*)
+					# tsig is a path
+					TSIG_FILE="${TSIG}"
+					;;
+
+				*)
+					echo "'${TSIG}' is neither a valid tsig nor a path to an existing file - ignoring"
+					;;
+			esac
+		fi
+
+		if [ -n "${TSIG_FILE}" ]
+		then
+			DEFAULT_FILE="/etc/default/dehydrated-nsupdate"
+
+			if [ ! -e "${DEFAULT_FILE}" ]
+			then
+
+cat > "${DEFAULT_FILE}" << EOF
+# ${DEFAULT_FILE}
+
+TSIG_KEYFILE="${TSIG_FILE}"
+EOF
+
+			fi
+
+			cp -a -f "${DEFAULT_FILE}" "${DEFAULT_FILE}.tmp"
+
+			# If the admin deleted or commented some variables but then set
+			# them via debconf, (re-)add them to the config file.
+
+			test -z "${TSIG_FILE}" || \
+			grep -Eq '^ *TSIG_KEYFILE=' "${DEFAULT_FILE}" || \
+			echo "TSIG_KEYFILE=" >> "${DEFAULT_FILE}"
+
+			sed -e "s|^ *TSIG_KEYFILE=.*|TSIG_KEYFILE=\"${TSIG_FILE}\"|" \
+			< "${DEFAULT_FILE}" > "${DEFAULT_FILE}.tmp"
+
+			mv -f "${DEFAULT_FILE}.tmp" "${DEFAULT_FILE}"
+		fi
+
+		case "${REGISTER}" in
+			true)
+				dehydrated --register --accept-terms
+				;;
+		esac
+
+		case "${RUN}" in
+			true)
+				dehydrated --cron --keep-going
+				;;
+		esac
+
+		;;
+
+	abort-upgrade|abort-remove|abort-deconfigure)
+
+		;;
+
+	*)
+		echo "postinst called with unknown argument \`${1}'" >&2
+		exit 1
+		;;
+esac
+
+#DEBHELPER#
+
+exit 0
diff --git a/debian/open-infrastructure-dehydrated-tools.templates b/debian/open-infrastructure-dehydrated-tools.templates
new file mode 100644
index 0000000..a29c550
--- /dev/null
+++ b/debian/open-infrastructure-dehydrated-tools.templates
@@ -0,0 +1,121 @@
+Template: open-infrastructure-dehydrated-tools/title
+Type: title
+Description: dehydrated-tools: Setup
+
+Template: open-infrastructure-dehydrated-tools/auto-cleanup
+Type: boolean
+Default: no
+Description: dehydrated auto clean:
+ Please select the Certificate Authority to use with dehydrated.
+ .
+ If unsure, use letsencrypt (default).
+
+Template: open-infrastructure-dehydrated-tools/ca
+Type: select
+Choices: letsencrypt, letsencrypt-test, zerossl, buypass, buypass-test
+Default: letsencrypt
+Description: dehydrated Certificate Authority (CA):
+ Please select the Certificate Authority to use with dehydrated.
+ .
+ If unsure, use letsencrypt (default).
+
+Template: open-infrastructure-dehydrated-tools/challengetype
+Type: select
+Choices: dns-01, http-01
+Default: http-01
+Description: dehydrated Challenge Type:
+ Please select the challenge type to use with dehydrated.
+ .
+ If unsure, use http-01 (default).
+
+Template: open-infrastructure-dehydrated-tools/contact-email
+Type: string
+Default: 
+Description: dehydrated Contact Email:
+ Please select an optional contact email address for notifications of your CA.
+ .
+ If unsure, leave empty (default).
+
+Template: open-infrastructure-dehydrated-tools/key-algo
+Type: select
+Choices: prime256v1, rsa, secp384r1
+Default: secp384r1
+Description: dehydrated key algorithm:
+ Please select the key algorithm to use.
+ .
+ If unsure, use 'secp384r1' (default).
+
+Template: open-infrastructure-dehydrated-tools/ocsp-fetch
+Type: boolean
+Default: false
+Description: dehydrated OCSP fetch:
+ Should dehydrated automatically fetch the OCSP signature?
+ .
+ If unsure, use 'no' (default).
+
+Template: open-infrastructure-dehydrated-tools/ocsp-must-staple
+Type: boolean
+Default: false
+Description: dehydrated OCSP must staple:
+ Should dehydrated request certificates that must use OCSP stapling?
+ .
+ If unsure, use 'no' (default).
+
+Template: open-infrastructure-dehydrated-tools/preferred-chain
+Type: string
+Default: 
+Description: dehydrated preferred chain:
+ Should an alternative root certificate by used in the certificat verification chain?
+ .
+ If unsure, leave empty.
+
+Template: open-infrastructure-dehydrated-tools/basedir
+Type: string
+Default: 
+Description: dehydrated base directory:
+ Please enter the base directory where all the certificates are stored.
+ .
+ If unsure, use /var/lib/dehydrated (default).
+
+Template: open-infrastructure-dehydrated-tools/hooks
+Type: multiselect
+Choices: ${HOOKS_CHOICES}
+Default: 
+Description: dehydrated hooks:
+ Please select any hooks that should be enabled for dehydrated.
+
+Template: open-infrastructure-dehydrated-tools/domains
+Type: string
+Default: 
+Description: dehydrated domains:
+ Please enter the domains to be configured for dehydrated.
+ .
+ If unsure, leave empty (default) which will use the hostname
+ of the system. Use 'none' to not generate any certificates.
+ .
+ Multiple certificates can be separated by '|', additional
+ names (SAN) can are whitespace separated.
+
+Template: open-infrastructure-dehydrated-tools/tsig
+Type: string
+Default: 
+Description: dehydrated TSIG:
+ When using the dehydrated-nsupdate hook, a TSIG can be used. If you like
+ to do so, please enter either the path to the TSIG file or the TSIG string
+ itself (format as used by nsupdate -y in algorithm:name:base64).
+ .
+ If unsure, leave empty (default).
+
+Template: open-infrastructure-dehydrated-tools/register
+Type: boolean
+Default: false
+Description: dehydrated register:
+ Should a 'dehydrated --register --accept-terms' be executed now to create
+ an account for this system with your CA.
+
+Template: open-infrastructure-dehydrated-tools/run
+Type: boolean
+Default: false
+Description: dehydrated:
+ Should a 'dehydrated --cron --keep-going' be executed now to renew
+ non-existent/changed/expiring certificates for this system.
diff --git a/debian/open-infrastructure-service-tools.lintian-overrides b/debian/open-infrastructure-service-tools.lintian-overrides
new file mode 100644
index 0000000..9970e45
--- /dev/null
+++ b/debian/open-infrastructure-service-tools.lintian-overrides
@@ -0,0 +1,4 @@
+# '000-' prefix is required to keep order of apache parsing working
+open-infrastructure-service-tools: non-standard-apache2-configuration-name
+# service-tools is for apache2 only
+open-infrastructure-service-tools: web-application-depends-on-apache2-data-package
diff --git a/debian/open-infrastructure-service-tools.postinst b/debian/open-infrastructure-service-tools.postinst
new file mode 100755
index 0000000..2cd7822
--- /dev/null
+++ b/debian/open-infrastructure-service-tools.postinst
@@ -0,0 +1,30 @@
+#!/bin/sh
+
+set -e
+
+case "${1}" in
+	configure)
+		update-alternatives --quiet --install /usr/share/open-infrastructure/apache-icons/default apache-icons /usr/share/apache2/icons 1000
+		update-alternatives --quiet --install /usr/share/open-infrastructure/apache-icons/default apache-icons /usr/share/open-infrastructure/apache-icons/awesome-png 2000 \
+			--slave /usr/share/open-infrastructure/apache-icons/default.conf apache-icons.conf /usr/share/open-infrastructure/apache-icons/awesome-png.conf
+		update-alternatives --quiet --install /usr/share/open-infrastructure/apache-icons/default apache-icons /usr/share/open-infrastructure/apache-icons/awesome-svg 3000 \
+			--slave /usr/share/open-infrastructure/apache-icons/default.conf apache-icons.conf /usr/share/open-infrastructure/apache-icons/awesome-svg.conf
+		update-alternatives --quiet --install /usr/share/open-infrastructure/apache-icons/default apache-icons /usr/share/open-infrastructure/apache-icons/tango-png 4000 \
+			--slave /usr/share/open-infrastructure/apache-icons/default.conf apache-icons.conf /usr/share/open-infrastructure/apache-icons/tango-png.conf
+		update-alternatives --quiet --install /usr/share/open-infrastructure/apache-icons/default apache-icons /usr/share/open-infrastructure/apache-icons/tango-svg 5000 \
+			--slave /usr/share/open-infrastructure/apache-icons/default.conf apache-icons.conf /usr/share/open-infrastructure/apache-icons/tango-svg.conf
+		;;
+
+	abort-upgrade|abort-remove|abort-deconfigure)
+
+		;;
+
+	*)
+		echo "postinst called with unknown argument \`${1}'" >&2
+		exit 1
+		;;
+esac
+
+#DEBHELPER#
+
+exit 0
diff --git a/debian/open-infrastructure-service-tools.prerm b/debian/open-infrastructure-service-tools.prerm
new file mode 100755
index 0000000..b580074
--- /dev/null
+++ b/debian/open-infrastructure-service-tools.prerm
@@ -0,0 +1,26 @@
+#!/bin/sh
+
+set -e
+
+case "${1}" in
+	remove|upgrade|deconfigure)
+		update-alternatives --quiet --remove apache-icons /usr/share/apache2/icons
+		update-alternatives --quiet --remove apache-icons /usr/share/open-infrastructure/apache-icons/awesome-png
+		update-alternatives --quiet --remove apache-icons /usr/share/open-infrastructure/apache-icons/awesome-svg
+		update-alternatives --quiet --remove apache-icons /usr/share/open-infrastructure/apache-icons/tango-png
+		update-alternatives --quiet --remove apache-icons /usr/share/open-infrastructure/apache-icons/tango-svg
+		;;
+
+	failed-upgrade)
+
+		;;
+
+	*)
+		echo "prerm called with unknown argument \`${1}'" >&2
+		exit 1
+		;;
+esac
+
+#DEBHELPER#
+
+exit 0
diff --git a/debian/rules b/debian/rules
new file mode 100755
index 0000000..62c4dda
--- /dev/null
+++ b/debian/rules
@@ -0,0 +1,13 @@
+#!/usr/bin/make -f
+
+%:
+	dh ${@} --with apache2
+
+override_dh_auto_install:
+	# apache-tools
+	$(MAKE) -C apache DESTDIR=$(CURDIR)/debian/open-infrastructure-service-tools install
+
+	# service-tools
+	rm -f debian/open-infrastructure-service-tools/usr/share/doc/service-tools/CHANGELOG.txt
+	rm -f debian/open-infrastructure-service-tools/usr/share/doc/service-tools/LICENSE.txt
+	-mv debian/open-infrastructure-service-tools/usr/share/doc/* debian/open-infrastructure-service-tools/usr/share/doc/open-infrastructure-service-tools
diff --git a/debian/source/format b/debian/source/format
new file mode 100644
index 0000000..163aaf8
--- /dev/null
+++ b/debian/source/format
@@ -0,0 +1 @@
+3.0 (quilt)
diff --git a/debian/upstream/signing-key.asc b/debian/upstream/signing-key.asc
new file mode 100644
index 0000000..09df62b
--- /dev/null
+++ b/debian/upstream/signing-key.asc
@@ -0,0 +1,64 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+
+mQINBFPK4rYBEADgnTdmknlyGyYf703c/evE/O3LjzuuDiIIexX/9wXHjiqQeGFe
+RIdTIJghG7qKwHzWKpb/OB5dNxVcgqeaOjfDFcpmld7Bophw34lo4sMCGQAWriwL
+LkF8xQaFAhaGMqso0Z6epxgxypZ4jZqsjB5KV4rAKHsd3fFQ+0ACH/GyPfrtmmiT
+JAePMyuYMT5j9NY95Lh8+xYg32zbvueLkmyVSQQ62fnv/Rx7cQAToO3pFzM0Gc1T
+OaSXwBeXDUR7xjOfLq4n4cCRCzdCet/PW1L5mXqe8k9yKEyrBp9OiaMHyp7YKgor
+ANEsGcIWWZL6hXzK7m8GxzMALrna85FA2YdAq5QMS8OBmLHIiFKy9AsMunZyZrcL
+IMHyC5duoY6Q7fjVdZHzPwKs5yVwvwU1dyEQZUvihK08vuswKcH9JrLmfOXmUsRM
+GAgAvZhtHyANLEuoDVIL29BALpjYMqTThqnJqkxHesgaYGrA9VZjGwDbBQGa3uXm
+LazkTZbLmEffkX+K00lYVhXbjv3HpP4b8SEQ3IyZrOltpKo2QzWDp4l7VF0a75Qq
+K4NW8tvlhn+7Ip9H2KoW7o0W4ftAO2VF7N7Z0Ouyh9mP7XF2Us2KPx1Me2jk/UwO
+3PtIqstzr8qOTWrKwwSE8zYYEzeIW+UuG8PAHkr4KmhRfptrvcpMrxNjFQARAQAB
+tDdEYW5pZWwgQmF1bWFubiA8ZGFuaWVsLmJhdW1hbm5Ab3Blbi1pbmZyYXN0cnVj
+dHVyZS5uZXQ+iQI9BBMBCgAnBQJTyuK2AhsDBQkTqtCABQsJCAcDBRUKCQgLBRYD
+AgEAAh4BAheAAAoJEB6bOu0tn6j2fWwP/RiqNt4bb5P8fjsvPxcxSvuTgVGjIjO8
+DliBebyP9qzE9h5P7dZawtUVG5V+A8yPotjovuCT+NhcaTgr1UjH3l0SSKIZC9zC
+UFJq0IlgTjOCzBnJW3MIRJ814Vxp9OVFOjiDTdE2BxBiZH98MAeIS06B5SvC3oBC
+U5VMoQPk1jl7vxYU16kbhSbB0/cTbOitVWiKmV8BqIN+oZl4xfDMQyuNYcXhrZdK
+TT0g7X6u4GA6Ii1zjq2jqWWXnCuQCksQpwqN1LQvYhF4lTigqUzkkGjI7+jPFZ1F
+7d4QeiNf4eyCdMTnAs7dkdHB2Uap7JVn4yd438wggoV34Zxn45qdnX1zvs1jcQ4+
+7o0m5KussjQGVnWfDcssN3qjQswzZuMIsRw5uPbC7bmkStETGyqtXNOFGwlRPcql
+GYxu4KDkw4jg2zhSeuTDGerYq/ucEKpLgFWdy/7vHjSjlwEawMl2MtahGuMoXPU3
+E3HX+qFRemTIzlsQ2shUNHYcWcrDjmwyxSsxBnUdH73/Ac30I5zaWPGkgqqGWoEq
+5brzm7kM46cVkhgX544wMy1LeCUni6rRkvGLYFUMa4T12Lz03vmBBzjvzlz8MEPs
+ER0gOgpkBN+jLu1CnnVc0EKwf2raUMXMIJQnrgyIbY179rC8n8Tk8lQiy0wyeQ/d
+5LJw1yXgoNwdiEYEExEKAAYFAlPK+j8ACgkQ+C5cwEsrK57UtACfTdvGc2v9DNpf
+zY+bDibonutellIAn0MXjSI6wa/xEeaoIq6pIiE+oBWgiQIcBBMBCgAGBQJTyvrW
+AAoJEFXPG/mGq7nHHP8QAJ077KjmM0r+vMBW8p/sbnJ5p/0mgU6NscC7DodnfJas
+3I4CbMxm7D8G/YkJ+4iXmemY4/TALc4l337yDOYQeJTitXhZWI0aTvccesWAToSy
+m+vYQu7E34W+tFaS9AEWgbsJ/2lGUvIt+VLyTwzZ/V/GwprkcqBCdQY5lw7n2yJP
+9BHpEpX5Bo8UEMXHI8eouDoPboRjuVK+ygEvcZnHAoWfvpoiNpzgK2p63jIzy1Xx
+JZb0jNUMuFTlKNU5yLFnlfxxT8Kmg9qIhBzI4WngOVYkpQkEGMBoT020CXe7BDoR
+fxVjw7z8TIZ7SOSM/1ef+fsvdr3GroXqllKIG0E0MZrdKZwWp0lG/09ynE09//il
+MNZILYeVsm13mnO/jrC9W0i8CAYBzthwgRfXRRwnZ7PktIvmuY7mGHfUjo29F9mu
+fw+YmycxfJjV7cLo6XiPeKQuTtRH4tT1Gr9kBaK0dH+sbTmWHYL3GcENHM4tfX3M
+91q8194dbSzCF5gVKioYW1fMHooG93EHdOsV5lVEUpL3YWf96wZgpUf99zcwkrKz
+5APjQSA+Sp2zO6AljWLv9h3bVvhZJsWLndn245H7BNjQyW8LvwkdywHiuYiJiiNK
+uk9VRYNVGarrsfIkETcfxTm4fkhgpj6ex5YkQ2v/GD8SmgPnYkY6Tz5lAnn3AqYn
+uQINBFPK4rYBEAC5UoYbyL6hE/V5yP7jUtNbTrcnuVhPcZvexBZmM1cJRiPbfxNc
+UTzrxlVHOyIELLzVZqL43rOM7iVM9g9C9owkw+oYHleRX95OEAXxNC2XZ11CQMmM
+iGapwyKV+MvP93fD+jrplPlFQdMD9VInfPsvOt+fr0MN3QWzxDsGeqfXKkJ3HQCb
+1P9pY9cCRxaLN7yY95yzuh2eXP+j5XFM35YxkR7nH2Z7VRZkwhHk2OOmEho2wkeu
+n9AIsFSTgV56u6Txcy5FfSV16ANXRWgK9TqJkD6YMGTOx8jN3MaDacb7XyhmabxQ
+fYcTqGujRHu6rwHoi4AP0dWMQseX2n5GFaSIngcSZJiKCVELcOs9M0J8KZKzIqPQ
+lL/tgGYnf6Ev/ZoVfkKrH6hSnSMU7bXXCHUpo1Jq/vZWdEdRtXOCcitA1THAUMI5
+O8dqCR1dtzf0iS0C9BsL7uzpAyJ+ph0VuKygQZIBPdORzUXK8DVdf7WdKYe6HA/O
+Gpm7j0uaqRK4GPYir/apHbU2jpyzyjeVn845MIMwSC+A0tYNVz+vFLPUdi5setW2
+X9Y0EkxBm8gawAxp0jNBGJLDh/oakuacjKyL4Z/obSF/Jtie8TAsFDdIkySlRP6q
+3cUkxDhMJVTI3opFeHJ/uRtiqbCUqj5Az0xVf13i7JsahHfeqjo3ED8sGQARAQAB
+iQIlBBgBCgAPBQJTyuK2AhsMBQkTqtCAAAoJEB6bOu0tn6j2yO0QAIaxHBbYylKC
+QEsTp5zksVv+m6scg3hB35X9TrhSsxOZx9bgkgvlndTTh5Zn5UMzACO88wiRcMtT
+uFoP9OZi+SYmMHhHHcrAXvGk1oPugcm5zjlLvdfMCtYPtzcHFxWzyTv5Jdkgdt11
+UtVu2N/fdfjH+A65zF8FYddlHT6nVTuwYYz3h4jaqDyDwvuZEg7KxgFxhaIiRxIH
+lhYk7CE8GNVrUHPldPKOXAHubkbXrjJ6+b45/5wj7+zXsbYbaiOZkaPCuM6whR/4
++NTR2StLX02bwFy6X58/COuVuQ0ryZkfbYWnrFlPAUXiJvCdBaIR93/t6Wd/q5fJ
+XC0VEcZabNnDduJ8R5K1qI2PowUbSXbsL8E9FTiArrY63oC5nMpxnPKMQ9ajhZoz
+PfXhSBJ5+aPQiMmlts1FYkORuMP42PQh7cwKRzVNqsNSXe97SuKrn3Rhac8QwXbF
+QwmJLzesJk45OLfNaAxJEo89Ew0GFPwU2ySJu+Diccv+EftS9q3GS+0K57F5/JBf
+TvspSXFIV9DD+3J39RX6NTUOI4nhL+AdkDmJFoCIAAX3WyFGGweO9hSQV3cLq1k4
+dT4MOovoVtIZJgPdUd1IMBxlTVYV4CpbEgkcKQ8wHJWz8mHfFFOzoZm9rrW+Hacp
+cpQlFP9BkBNUyXjn218uHOJ20k5VgncS
+=0dto
+-----END PGP PUBLIC KEY BLOCK-----
diff --git a/debian/watch b/debian/watch
new file mode 100644
index 0000000..2bafd3d
--- /dev/null
+++ b/debian/watch
@@ -0,0 +1,3 @@
+version=4
+opts="pgpmode=auto" \
+https://get.open-infrastructure.net/software/service-tools/upstream/service-tools-(.+)\.tar\.lz