blob: 3c225ee9a2ddc41b0d31077ae877706b854fe2a3 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
|
{
pkgs,
config,
lib,
...
}: let
cfg = config.collinux.services.cgit;
custom_cgit = pkgs.stdenv.mkDerivation {
name = "custom-cgit-assets";
src = pkgs.cgit;
installPhase = ''
mkdir -p $out
cp -pPR ./cgit/* $out/
rm -f $out/cgit.png $out/favicon.ico $out/cgit.css
cp -f ${./favicon.svg} $out/favicon.svg
cp -f ${./cgit.css} $out/cgit.css
'';
};
in {
imports = [
(import ../mkCaddyCfg.nix cfg)
./gitShellCommands.nix
];
config = lib.mkIf cfg.enable {
users.groups."git" = {};
users.users."git" = {
isSystemUser = true;
group = "git";
shell = "${pkgs.git}/bin/git-shell";
home = "/var/lib/cgit";
createHome = true;
homeMode = "755";
openssh.authorizedKeys.keys = ["ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIC3SjzIs3YI8PWJaNrAuaEeRcTcvIVHOKyCh2VwHTHEF"];
};
services.openssh.extraConfig = lib.mkAfter ''
Match User git
AllowTcpForwarding no
X11Forwarding no
PermitTunnel no
PubkeyAuthentication yes
AuthenticationMethods publickey
'';
environment.etc."cgitrc".text = ''
logo=/favicon.svg
favicon=/favicon.svg
repo.sort=age
enable-http-clone=1
enable-commit-graph=1
side-by-side-diffs=1
root-title=git@ganymede
root-desc=Git repos associated with Ganymede
readme=:README.md
about-filter=${pkgs.cgit}/lib/cgit/filters/html-converters/md2html
source-filter=${pkgs.cgit}/lib/cgit/filters/syntax-highlighting.py
footer=
virtual-root=/
scan-path=/var/lib/cgit
'';
services.fcgiwrap.instances."cgit" = {
process = {
user = "git";
group = "git";
};
socket = {
user = "caddy";
group = "caddy";
type = "unix";
address = "/run/fcgiwrap-cgit.sock";
};
};
collinux.services.cgit.manualCaddyConfig = ''
@assets path /cgit.css /cgit.js /favicon.svg /robots.txt
handle @assets {
root * ${custom_cgit}
file_server
}
reverse_proxy unix//run/fcgiwrap-cgit.sock {
transport fastcgi {
env SCRIPT_FILENAME ${custom_cgit}/cgit.cgi
}
}
'';
};
}
|
