(define-module (sigils packages security)
  #:use-module (guix packages)
  #:use-module (guix download)
  #:use-module (guix gexp)
  #:use-module ((guix licenses)
                #:prefix license:)
  ;; wazuh
  #:use-module (gnu packages benchmark)
  ;; opensnitch
  #:use-module (gnu packages linux)
  #:use-module (gnu packages golang)
  #:use-module (gnu packages golang-build)
  #:use-module (gnu packages golang-web)
  #:use-module (gnu packages golang-crypto)
  #:use-module (gnu packages golang-check)
  #:use-module (gnu packages prometheus)
  ;; libomemo-c
  #:use-module (guix build-system cmake)
  #:use-module (guix git-download)
  #:use-module (gnu packages check)
  #:use-module (gnu packages tls)
  #:use-module (gnu packages pkg-config)
  ;; seclists
  #:use-module (guix build-system copy)
  ;; torbrowser-remote-desktop-file
  #:use-module (guix build-system trivial)
  #:use-module (gnu packages tor-browsers))

(define-public torbrowser-remote-desktop-file
  (package
    (name "torbrowser-remote-desktop-file")
    (version "0.0")
    (source #f)
    (build-system trivial-build-system)
    (propagated-inputs (list torbrowser))
    (arguments
     '(#:modules ((guix build utils))
       #:builder
       (begin
         (use-modules (guix build utils))
         (install-file
          (string-append (assoc-ref %build-inputs "torbrowser")
                         "/share/applications/torbrowser.desktop")
          (string-append %output "/share/applications/"))
         (substitute* (string-append %output
                                     "/share/applications/torbrowser.desktop")
           (("%u\n$") "--allow-remote %u\n")
           (("^Name=Tor Browser\n$") "Name=Tor Browser (Remote)\n")))))
    (home-page #f)
    (synopsis "Desktop file allowing opening links with xdg-open for Tor Browser.")
    (description #f)
    (license license:wtfpl2)))



(define-public libomemo-c
  (package
   (name "libomemo-c")
   (version "0.5.0")
   (source (origin
            (method git-fetch)
            (uri (git-reference
                   (url "https://github.com/dino/libomemo-c")
                   (commit (string-append "v" version))))
            (file-name (git-file-name name version))
            (sha256
             (base32
              "1knsxsxr0rw9cz9msn2n3kbsa5s8f7rjj8dkc1dhm82n86kwrw8s"))))
   (arguments
    `(;; Required for proper linking and for tests to run.
      #:configure-flags '("-DBUILD_SHARED_LIBS=on" "-DBUILD_TESTING=1")))
   (build-system cmake-build-system)
   (inputs (list ;; Required for tests:
                 check openssl))
   (native-inputs (list pkg-config))
   (home-page "https://github.com/dino/libomemo-c")
   (synopsis "Fork of libsignal-protocol-c adding support for OMEMO XEP-0384 0.5.0+")
   (description "This is a fork of libsignal-protocol-c, an implementation
of Signal's ratcheting forward secrecy protocol that works in synchronous
and asynchronous messaging. The fork adds support for OMEMO as defined in
XEP-0384 versions 0.3.0 and later.")
   (license license:gpl3+)))

;; (define-public opensnitch
;;   (package
;;     (name "opensnitch")
;;     (version "1.6.6")
;;     (source
;;      (origin
;;        (method url-fetch)
;;        (uri (string-append
;;              "https://github.com/evilsocket/opensnitch/archive/refs/tags/v"
;;              version ".tar.gz"))
;;        (sha256
;;         (base32 "0l0kzpgxrscwmlrdmax22hhwakwqcs8ibzvpzxcnp3j16azmsaky"))))
;;     (build-system go-build-system)
;;     (native-inputs (list go-golang-org-x-sys go-github-com-varlink-go))
;;     (arguments
;;      '(#:import-path "github.com/evilsocket/opensnitch/daemon"
;;        #:unpack-path "github.com/evilsocket/opensnitch"))
;;     (home-page "https://github.com/evilsocket/opensnitch")
;;     (synopsis "A GNU/Linux application firewall.")
;;     (description #f)
;;     (license license:agpl3)))

;; (define-public wazuh-agent
;;   (package
;;    (name "wazuh-agent")
;;    (version "5.0.0")
;;    (source
;;     (origin
;;      (method git-fetch)
;;      (uri (git-reference
;;            (recursive? #t)
;;            (url "https://github.com/wazuh/wazuh-agent")
;;            (commit "1de5e8dc3cd27cc0aefc1bd7090db49e7c2aea8f")))
;;      (file-name (git-file-name name version))
;;      (sha256
;;       (base32 "0di92aiimxwc6kvi1hm4q7naa7vhpc915hla84l4v09qbqs5bq5c"))))
;;    (build-system cmake-build-system)
;;    (native-inputs (list nlohmann-json
;;                         googletest
;;                         benchmark
;;                         cpp-httplib
;;                         curl))
;;    (arguments
;;     (list
;;      #:configure-flags #~'("-DBUILD_TESTS=1" "-DTARGET=agent")
;;      #:phases
;;      #~(modify-phases %standard-phases
;;                       (add-before 'configure 'chdir-to-src
;;                                   (lambda _ (chdir "src")))
;;                       (add-after 'chdir-to-src 'link-nlohman
;;                                  (lambda _
;;                                    (copy-recursively #$(this-package-native-input "nlohmann-json")
;;                                                      "external/nlohmann")
;;                                    (copy-recursively #$(this-package-native-input "googletest")
;;                                                      "external/googletest")
;;                                    (copy-recursively #$(this-package-native-input "benchmark")
;;                                                      "external/benchmark")
;;                                    (copy-recursively #$(this-package-native-input "cpp-httplib")
;;                                                      "external/cpp-httplib")
;;                                    (copy-recursively #$(this-package-native-input "curl")
;;                                                      "external/curl"))))))
;;    (home-page "https://wazuh.com/")
;;    (synopsis "Wazuh agent, the Wazuh agent for endpoints.")
;;    (description "Wazuh is a free and open source platform used for threat prevention,
;; detection, and response. It is capable of protecting workloads across
;; on-premises, virtualized, containerized, and cloud-based environments.")
;;    (license license:agpl3)))