diff --git a/srcpkgs/blocky/files/blocky/run b/srcpkgs/blocky/files/blocky/run
new file mode 100644
index 00000000000..6305c655a08
--- /dev/null
+++ b/srcpkgs/blocky/files/blocky/run
@@ -0,0 +1,8 @@
+#!/bin/sh
+exec 2>&1
+[ -r ./conf ] && . ./conf
+exec setpriv --reuid _blocky --regid _blocky --clear-groups \
+	--ambient-caps -all,+net_bind_service \
+	--inh-caps -all,+net_bind_service \
+	--bounding-set -all,+net_bind_service \
+	--no-new-privs -- blocky --config "${CONFFILE:-/etc/blocky/config.yml}"
diff --git a/srcpkgs/blocky/template b/srcpkgs/blocky/template
new file mode 100644
index 00000000000..5b59c87905b
--- /dev/null
+++ b/srcpkgs/blocky/template
@@ -0,0 +1,31 @@
+# Template file for 'blocky'
+pkgname=blocky
+version=0.26.2
+revision=1
+build_style=go
+go_import_path=github.com/0xERR0R/blocky
+hostmakedepends="go"
+short_desc="DNS proxy as ad-blocker for local network"
+maintainer="krum <git@kris.sh>"
+license="Apache-2.0"
+homepage="https://0xerr0r.github.io/blocky/latest"
+changelog="https://github.com/0xERR0R/blocky/releases"
+distfiles="https://github.com/0xERR0R/blocky/archive/v${version}.tar.gz"
+checksum=b6aadd53253fe51d1bd41a1c19911091b944657fd034cd3dfad8c139ac5870b3
+# test requires existing docker socket
+make_check=extended
+
+system_accounts="_blocky"
+_blocky_descr="blocky daemon"
+
+conf_files="/etc/blocky/config.yml"
+
+make_dirs="
+ /var/log/blocky 0750 _blocky _blocky"
+
+post_install() {
+	vsv blocky
+
+	printf "\n" >> config.yml
+	vinstall config.yml 644 etc/blocky
+}