blob: e99f9f2c81c6480960798212a14235f7e34533ba (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
|
{
hjem.users."git".files = {
"git-shell-commands/set-description" = {
executable = true;
text = ''
#!/usr/bin/env bash
set -euo pipefail
repo="$1"
desc="$2"
base="/var/lib/cgit"
repo_path="$base/$repo"
test -d "$repo_path" || { echo "Repository does not exist"; exit 1; }
# Prevent path traversal
real=$(realpath "$repo_path")
if [[ "$real" != "$base/"* ]]; then
echo "Invalid path"
exit 1
fi
echo "$desc" | head -n 1 > "$repo_path/description"
echo "Description updated for '$repo'"
'';
};
"git-shell-commands/create-repo" = {
executable = true;
text = ''
#!/usr/bin/env bash
set -euo pipefail
repo="$1"
base="/var/lib/cgit"
repo_path="$base/$repo"
test -d "$repo_path" && { echo "Repository already exists."; exit 1; }
git init --bare "$repo_path"
echo "Repository '$repo' created"
'';
};
};
}
|
