From 3c3e4531dac7f4ab591bf391be72a11121b45673 Mon Sep 17 00:00:00 2001 From: tzlil Date: Fri, 17 Feb 2023 16:50:09 +0200 Subject: cgit works, added git user to ssh AllowUser, added uid/gid maps to persist --- hosts/vps/git.nix | 64 ++++++++++++++++++++++++++++++++++++++----------------- 1 file changed, 44 insertions(+), 20 deletions(-) (limited to 'hosts/vps') diff --git a/hosts/vps/git.nix b/hosts/vps/git.nix index 3ad26c0..fcf8cfb 100644 --- a/hosts/vps/git.nix +++ b/hosts/vps/git.nix @@ -2,10 +2,13 @@ { config = { + users.groups.git = {}; users.users.git = { isSystemUser = true; - description = "git"; + description = "tzlil"; + group = "git"; home = "/home/git"; + packages = [pkgs.git]; shell = "${pkgs.git}/bin/git-shell"; openssh.authorizedKeys.keys = [ "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMDyzrs9sbstv3KFK5FV8qYlSknnEy8Cn+qch4dJLmHA" @@ -14,27 +17,48 @@ services = { fcgiwrap.enable = true; caddy = { - virtualHosts."http://localhost".extraConfig = '' - reverse_proxy localhost:5678 { - transport fastcgi { - env SCRIPT_FILENAME ${pkgs.cgit}/cgit/cgit.cgi - env CGIT_CONFIG ${pkgs.writeText "cgitrc" (lib.generators.toKeyValue { } { - clone-url = (lib.concatStringsSep " " [ - "http://$HTTP_HOST$SCRIPT_NAME/$CGIT_REPO_URL" - "ssh://git@git.example.com:$CGIT_REPO_URL" - ]); - enable-log-filecount = 1; - enable-log-linecount = 1; - enable-git-config = 1; - root-title = "git.example.com"; - root-desc = "Tzlil's Git Repositories"; - scan-path = "/home/git"; - })} - } + virtualHosts."http://100.67.217.90".extraConfig = '' + bind 100.67.217.90 + handle /cgit.png { + root * ${pkgs.cgit}/cgit + file_server + } + handle /cgit.css { + root * ${pkgs.cgit}/cgit + file_server + } + handle /favicon.ico { + root * ${pkgs.cgit}/cgit + file_server + } + handle { + reverse_proxy unix//run/fcgiwrap.sock { + transport fastcgi { + env SCRIPT_FILENAME ${pkgs.cgit}/cgit/cgit.cgi + env CGIT_CONFIG ${pkgs.writeText "cgitrc" (pkgs.lib.generators.toKeyValue { } { + css = "/cgit.css"; + logo = "/cgit.png"; + favicon = "/favicon.ico"; + clone-url = (pkgs.lib.concatStringsSep " " [ + "http://$HTTP_HOST$SCRIPT_NAME/$CGIT_REPO_URL" + "ssh://git@git.example.com:$CGIT_REPO_URL" + ]); + enable-log-filecount = 1; + enable-log-linecount = 1; + enable-git-config = 1; + root-title = "git.example.com"; + root-desc = "Tzlil's Git Repositories"; + scan-path = "/home/git"; + about-filter = "${pkgs.cgit}/lib/cgit/filters/about-formatting.sh"; + source-filter = "${pkgs.cgit}/lib/cgit/filters/syntax-highlighting.py"; + logo-link = "/"; + })} + } + } } ''; - } + }; }; - environment.persistence."/nix/persist".directories = [ "/home/git" ]; + environment.persistence."/nix/persist".directories = [ { directory = "/home/git"; user = "git"; group = "git"; } ]; }; } \ No newline at end of file -- cgit 1.4.1