blob: 18c6e199396670fdbe0fd681f271daa99d3d059d (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
|
{
config,
lib,
...
}: let
cfg = config.collinux.services.cgit;
in
lib.mkIf cfg.enable {
hjem.users."git".files = {
"git-shell-commands/set-description" = {
executable = true;
text = ''
#!/usr/bin/env bash
set -euo pipefail
repo="$1"
desc="$2"
base="/var/lib/cgit"
repo_path="$base/$repo"
test -d "$repo_path" || { echo "Repository does not exist"; exit 1; }
# Prevent path traversal
real=$(realpath "$repo_path")
if [[ "$real" != "$base/"* ]]; then
echo "Invalid path"
exit 1
fi
echo "$desc" | head -n 1 > "$repo_path/description"
echo "Description updated for '$repo'"
'';
};
"git-shell-commands/create-repo" = {
executable = true;
text = ''
#!/usr/bin/env bash
set -euo pipefail
repo="$1"
base="/var/lib/cgit"
repo_path="$base/$repo"
test -d "$repo_path" && { echo "Repository already exists."; exit 1; }
git init --bare "$repo_path"
echo "Repository '$repo' created"
'';
};
};
}
|
