# /etc/make.conf
#
# Please consult /usr/share/portage/config/make.conf.example for a more
# detailed example.

CFLAGS="-march=native -O2 -pipe"
CFLAGS="-march=native -O2 -pipe -fstack-clash-protection -fstack-protector-all"

#CFLAGS="-march=corei7 -mtune=corei7 -O2 -pipe"
#CFLAGS="-march=corei7 -mtune=corei7 -O2 -pipe -msse4.2"
CXXFLAGS="${CFLAGS}"
# WARNING: Changing your CHOST is not something that should be done lightly.
# Please consult http://www.gentoo.org/doc/en/change-chost.xml before changing.
CHOST="x86_64-pc-linux-gnu"

# Set extra environment files per package, either or, we use flat files
#EXTRA_ECONF="package.env"

# CPU flags - use app-portage/cpuid2cpuflags to dtermine
# Intel NUC PC
CPU_FLAGS_X86="aes avx avx2 f16c fma3 mmx mmxext pclmul popcnt sse sse2 sse3 sse4_1 sse4_2 ssse3"
# Compulan Intense PC
#CPU_FLAGS_X86="aes avx mmx mmxext popcnt sse sse2 sse3 sse4_1 sse4_2 ssse3"
USE="-3dnow -debug -gdbm -gnome -gtk -gtkhtml -gpm -kde -ldap \
     -mailwrapper -openmp -qt3 -qt4 -sdl -urandom -X -xorg \
     acl amd64 apache2 bash-completion berkdb bzip2 caps ctype curl custom-cflags \
     fam gd gmp hardened http2 iconv idn imap innodb ipv6 jbig jpeg jpeg2k \
     libtirpc libwww lm-sensors lvm maildir mhash mysql mysqli ncurses nls nptl \
     openmp pam pax-kernel pcre perl pie png posix ptpax python readline \
     seccomp session snmp sockets split-usr ssl ssp tcpd threads tiff unicode usb \
     verify-sig vhosts xattr xml xtpax zlib"

#GENTOO_MIRRORS="<your_mirror_here> http://distfiles.gentoo.org http://www.ibiblio.org/pub/Linux/distributions/gentoo"
GENTOO_MIRRORS="https://ftp.fau.de/gentoo/ \
                http://ftp.fau.de/gentoo/ \
                ftp://ftp.fau.de/gentoo/ \
                rsync://ftp.fau.de/gentoo/ \
                https://ftp.halifax.rwth-aachen.de/gentoo/ \
                http://ftp.halifax.rwth-aachen.de/gentoo/ \
                ftp://ftp.halifax.rwth-aachen.de/gentoo/ \
                rsync://ftp.halifax.rwth-aachen.de/gentoo/ \
                https://linux.rz.ruhr-uni-bochum.de/download/gentoo-mirror/ \
                http://linux.rz.ruhr-uni-bochum.de/download/gentoo-mirror/ \
                http://distfiles.gentoo.org"

FEATURES="buildpkg metadata-transfer parallel-fetch sfperms strict suidctl userfetch usersync -config-protect-if-modified -userpriv -usersandbox"
#FEATURES="buildpkg  metadata-transfer parallel-fetch sfperms strict suidctl -userfetch"

# default set of accepted licenses
#ACCEPT_LICENSE="-* @FREE"
ACCEPT_LICENSE="* -@EULA"

MAKEOPTS="-j2"
LINGUAS="en"
L10N="en-US"

PAX_MARKINGS="XT"

PORTAGE_NICENESS=18
PORTAGE_RSYNC_RETRIES="5"
PORTAGE_RSYNC_EXTRA_OPTS="--exclude-from=/etc/portage/rsync_excludes --delete-excluded"
PORTAGE_ELOG_CLASSES="*"
#PORTAGE_ELOG_CLASSES="info warn error log"
PORTAGE_ELOG_SYSTEM="save syslog mail"
# First the mail-to address, then the SMTP server
PORTAGE_ELOG_MAILURI="root@xxxxx.xxxxx.xx /usr/sbin/sendmail"
PORTAGE_ELOG_MAILFROM="portage@xxxxx.xxxxx.xx"
PORTAGE_ELOG_MAILSUBJECT="[portage] ebuild log for \${PACKAGE} on \${HOST}"
#
PORTAGE_ECLASS_WARNING_ENABLE="0"
DISTDIR="/var/cache/portage/distfiles"
PKGDIR="/var/cache/portage/packages"

# Microcode
MICROCODE_SIGNATURES="-s 0x000806e9"

EMERGE_DEFAULT_OPTS="--complete-graph --with-bdeps=y"
#EMERGE_DEFAULT_OPTS="-j8 --complete-graph --with-bdeps=y"

### GRUB2
# Standard PC(BIOS)
#GRUB_PLATFORMS="pc"
# UEFI on amd64
#GRUB_PLATFORMS="efi-64"
## Both UEFI AND BIOS
#GRUB_PLATFORMS="efi-64 pc"

APACHE2_MODULES="$APACHE2_MODULES auth_digest authn_dbd authz_dbd cache_disk dbd http2 ident imagemap lbmethod_heartbeat log_forensic proxy proxy_ajp proxy_balancer proxy_connect proxy_fcgi proxy_http proxy_http2 proxy_wstunnel slotmem_shm"

# see http://serverfault.com/questions/383526/how-do-i-select-which-apache-mpm-to-use#383634
#APACHE2_MPMS="event itk peruser prefork worker"
APACHE2_MPMS="event"

NGINX_MODULES_HTTP="access auth_basic autoindex browser charset empty_gif fastcgi geo gzip limit_conn limit_req map memcached proxy referer rewrite scgi split_clients ssi upstream_ip_hash userid uwsgi stub_status"
#NGINX_MODULES_HTTP="fastcgi"
#NGINX_MODULES_MAIL="$NGINX_MODULES imap"
#NGINX_MODULES_STREAM="$NGINX_MODULES_STREAM access geo geoip geoip2 javascript"


# Run PHP 8
# phased out - see https://bugs.gentoo.org/611214
#PHP_INI_VERSION="production"
#PHP_TARGETS="php8-1"

# disable python 2.7
#PYTHON_TARGETS="python3_8 python3_9"
#PYTHON_SINGLE_TARGET="python3_8"

# Set PORTDIR for backward compatibility with various tools:
#   gentoo-bashcomp - bug #478444
#   euse - bug #474574
#   euses and ufed - bug #478318
PORTDIR="/var/db/portage/gentoo"

# prevent portage from modifying passwd, group and shadow files
# see bug: https://bugs.gentoo.org/803500
#ACCT_USER_NO_MODIFY=1
#
ACCT_USER_APACHE_GROUPS_ADD="apandtt,svnusers"