--- nginx-auth-saslauthd-1.008.orig/debian/changelog
+++ nginx-auth-saslauthd-1.008/debian/changelog
@@ -0,0 +1,11 @@
+nginx-auth-saslauthd (1.008-1+9.128) unstable; urgency=low
+
+  * version number update by debtransform
+
+ -- debtransform <build@opensuse.org>  Thu, 18 Jun 2026 02:44:59 +0000
+
+nginx-auth-saslauthd (1.008-1) unstable; urgency=low
+
+  * Package nginx-auth-saslauthd 1.008
+
+ -- Andreas Vögele <andreas@andreasvoegele.com>  Tue, 01 Feb 2022 08:16:09 +0100
--- nginx-auth-saslauthd-1.008.orig/debian/control
+++ nginx-auth-saslauthd-1.008/debian/control
@@ -0,0 +1,24 @@
+Source: nginx-auth-saslauthd
+Section: web
+Priority: optional
+Maintainer: Andreas Vögele <andreas@andreasvoegele.com>
+Build-Depends: debhelper-compat (= 13),
+               libmojolicious-perl (>= 7.27),
+               libtemplate-perl (>= 2),
+               perl,
+               systemd
+Standards-Version: 4.7.0
+Homepage: https://github.com/voegelas/nginx-auth-saslauthd/wiki
+Rules-Requires-Root: no
+
+Package: nginx-auth-saslauthd
+Architecture: all
+Depends: ${misc:Depends},
+         ${perl:Depends},
+         libmojolicious-perl (>= 7.27),
+         libnss-systemd,
+         sasl2-bin
+Suggests: nginx
+Description: Authenticate web users with LDAP, PAM etc.
+ This nginx utility verifies web users with Basic authentication and LDAP, PAM
+ or other mechanisms supported by saslauthd.
--- nginx-auth-saslauthd-1.008.orig/debian/copyright
+++ nginx-auth-saslauthd-1.008/debian/copyright
@@ -0,0 +1,23 @@
+Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
+Source: https://github.com/voegelas/nginx-auth-saslauthd
+
+Files: *
+Copyright: 2017-2022 Andreas Vögele
+License: ISC
+
+Files: debian/*
+Copyright: 2024 Andreas Vögele
+License: ISC
+
+License: ISC
+ Permission to use, copy, modify, and distribute this software for any
+ purpose with or without fee is hereby granted, provided that the above
+ copyright notice and this permission notice appear in all copies.
+ .
+ THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+ WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+ MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+ WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
+ OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
--- nginx-auth-saslauthd-1.008.orig/debian/docs
+++ nginx-auth-saslauthd-1.008/debian/docs
@@ -0,0 +1,2 @@
+CONTRIBUTING.md
+README.md
--- nginx-auth-saslauthd-1.008.orig/debian/nginx-auth-saslauthd.nginx.pam
+++ nginx-auth-saslauthd-1.008/debian/nginx-auth-saslauthd.nginx.pam
@@ -0,0 +1,3 @@
+#%PAM-1.0
+@include common-auth
+@include common-account
--- nginx-auth-saslauthd-1.008.orig/debian/nginx-auth-saslauthd.service.tt
+++ nginx-auth-saslauthd-1.008/debian/nginx-auth-saslauthd.service.tt
@@ -0,0 +1,26 @@
+[%# vim: set ft=tt2: -%]
+[% DEFAULT
+group = 'nginx'
+sbindir = '/usr/sbin'
+-%]
+[Unit]
+Description=Basic authentication with saslauthd
+After=network.target saslauthd.service
+Before=nginx.service
+
+[Service]
+Type=simple
+DynamicUser=yes
+User=nginx-auth
+Group=[% group %]
+[% IF supplementary_groups -%]
+SupplementaryGroups=[% supplementary_groups %]
+[% END -%]
+RuntimeDirectory=nginx-auth
+RuntimeDirectoryMode=0750
+UMask=0007
+ExecStart=[% sbindir %]/nginx-auth-saslauthd daemon -m production -l http+unix://%%2Frun%%2Fnginx-auth%%2Fsaslauthd.sock
+[% INCLUDE $systemd_security -%]
+
+[Install]
+WantedBy=multi-user.target
--- nginx-auth-saslauthd-1.008.orig/debian/rules
+++ nginx-auth-saslauthd-1.008/debian/rules
@@ -0,0 +1,31 @@
+#!/usr/bin/make -f
+# vim: ft=make
+
+PRGNAM = nginx-auth-saslauthd
+INSTALL = $(CURDIR)/debian/$(PRGNAM)
+SYSTEMD_VERSION = $(shell systemctl --version | head -n 1 | cut -d ' ' -f 2)
+TEMPLATE_VARS = \
+	--define group="www-data" \
+	--define sbindir="/usr/sbin" \
+	--define supplementary_groups="sasl" \
+	--define systemd_security="debian/systemd_security.tt" \
+	--define systemd_version=$(SYSTEMD_VERSION)
+
+%:
+	dh $@
+
+override_dh_auto_install:
+	install -d $(INSTALL)/usr/sbin
+	install bin/$(PRGNAM) $(INSTALL)/usr/sbin/$(PRGNAM)
+	install -d $(INSTALL)/usr/share/man/man8
+	pod2man -c "System Manager's Manual" -r "Perl" -s 8 bin/$(PRGNAM) \
+		$(INSTALL)/usr/share/man/man8/$(PRGNAM).8
+	install -d $(INSTALL)/lib/systemd/system
+	tpage $(TEMPLATE_VARS) debian/$(PRGNAM).service.tt \
+		> $(INSTALL)/lib/systemd/system/$(PRGNAM).service
+
+override_dh_installchangelogs:
+	dh_installchangelogs Changes
+
+override_dh_installpam:
+	dh_installpam --name=nginx
--- nginx-auth-saslauthd-1.008.orig/debian/systemd_security.tt
+++ nginx-auth-saslauthd-1.008/debian/systemd_security.tt
@@ -0,0 +1,39 @@
+[%# vim: set ft=tt2: -%]
+[% DEFAULT
+systemd_version = 0
+-%]
+CapabilityBoundingSet=
+DevicePolicy=closed
+NoNewPrivileges=yes
+ProtectHome=yes
+PrivateNetwork=yes
+PrivateTmp=yes
+PrivateDevices=yes
+RestrictAddressFamilies=AF_UNIX
+SystemCallArchitectures=native
+[% IF systemd_version >= 235 -%]
+IPAddressDeny=any
+MemoryDenyWriteExecute=yes
+PrivateUsers=yes
+ProtectSystem=strict
+ProtectKernelTunables=yes
+ProtectKernelModules=yes
+ProtectControlGroups=yes
+RestrictNamespaces=yes
+RestrictRealtime=yes
+[% END -%]
+[% IF systemd_version >= 245 -%]
+LockPersonality=yes
+ProtectClock=yes
+ProtectHostname=yes
+ProtectKernelLogs=yes
+RemoveIPC=yes
+RestrictSUIDSGID=yes
+SystemCallFilter=@system-service
+SystemCallFilter=~@resources
+[% END -%]
+SystemCallFilter=~@privileged
+[% IF systemd_version >= 247 -%]
+ProtectProc=invisible
+ProcSubset=pid
+[% END -%]
