initial spec file and gear rules

.gear/rules

@@ -0,0 +1 @@
+tar: @name@

lk-jwt-service.spec

@@ -0,0 +1,54 @@
+Name:           lk-jwt-service
+Version:        0.4.1
+Release:        alt1%{?dist}
+Summary:        Minimal service to issue LiveKit JWTs for MatrixRTC
+
+License:        AGPL-3.0-only
+URL:            https://github.com/element-hq/lk-jwt-service
+Source0:        %{url}/archive/refs/tags/v%{version}.tar.gz
+
+# Vendored Go modules (directory "vendor/"), generated once with:
+#   tar -xzf v%{version}.tar.gz
+#   cd %{name}-%{version}
+#   GOTOOLCHAIN=local go mod vendor
+#   cd ..
+#   tar -cJf %{name}-%{version}-vendor.tar.xz %{name}-%{version}/vendor
+Source1:        %{name}-%{version}-vendor.tar.xz
+
+BuildRequires:  golang >= 1.23
+Requires:       ca-certificates
+
+%description
+MatrixRTC Authorization Service: issues LiveKit JWTs for MatrixRTC clients.
+
+%prep
+%autosetup -n %{name}-%{version}
+# unpack vendored modules to avoid network during build
+tar -xf %{SOURCE1}
+
+%build
+# go.mod contains a "toolchain ..." directive; force using local Go toolchain (no auto-download)
+export GOTOOLCHAIN=local
+export GOPATH=%{_builddir}/%{name}-%{version}/_gopath
+export GOCACHE=%{_builddir}/%{name}-%{version}/_gocache
+
+go build -trimpath -buildmode=pie -mod=vendor -o %{name} .
+
+%check
+export GOTOOLCHAIN=local
+export GOPATH=%{_builddir}/%{name}-%{version}/_gopath
+export GOCACHE=%{_builddir}/%{name}-%{version}/_gocache
+
+go test -mod=vendor ./...
+
+%install
+install -Dpm0755 %{name} %{buildroot}%{_bindir}/%{name}
+
+%files
+%license LICENSE LICENSE-COMMERCIAL
+%doc README.md
+%{_bindir}/%{name}
+
+%changelog
+* Mon Feb 23 2026 Your Name <romenskiy2012@altlinux.ru> - 0.4.1-alt1
+- Initial package