1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
|
{
config,
pkgs,
...
}: let
domain = "git.${config.customOps.domain.fqdn}";
cgitPatched = pkgs.fetchpatch2 {
url = "https://git.zx2c4.com/cgit/patch/?id=601ba0f25d6d9df488a5a37c7877818ac47966b0";
sha256 = "sha256-yW54g40Bj2QxUwj4KZUjHMT1JGvVKW7o16NM83XDqsQ=";
};
in {
programs.git = {
enable = true;
lfs.enable = true;
config = {
init = {
defaultBranch = "main";
};
};
};
services.gitolite = {
enable = true;
user = "git";
group = "git";
adminPubkey = config.customOps.owner.pubkey;
extraGitoliteRc = ''
%RC = (
UMASK => 0027,
GIT_CONFIG_KEYS => '.*',
LOG_EXTRA => 1,
ROLES => {
READERS => 1,
WRITERS => 1,
},
ENABLE => [
'help',
'desc',
'info',
'perms',
'writable',
'ssh-authkeys',
'git-config',
'daemon',
'gitweb',
],
);
'';
};
services.cgit.${domain} = {
enable = true;
package = pkgs.cgit.overrideAttrs (old: {
patches = (old.patches or []) ++ [cgitPatched];
});
user = "git";
group = "git";
gitHttpBackend = {
enable = true;
checkExportOkFiles = true;
};
scanPath = "${config.services.gitolite.dataDir}/repositories";
settings = {
root-title = domain;
root-desc = "toufy's project repositories";
snapshots = "tar.gz zip";
clone-url = "https://${domain}/$CGIT_REPO_URL";
enable-index-owner = true;
enable-index-links = true;
remove-suffix = true;
enable-blame = true;
enable-commit-graph = true;
enable-log-filecount = true;
enable-log-linecount = true;
strict-export = "git-daemon-export-ok";
branch-sort = "age";
virtual-root = "/";
enable-git-config = true;
"mimetype.gif" = "image/gif";
"mimetype.html" = "text/html";
"mimetype.jpg" = "image/jpeg";
"mimetype.jpeg" = "image/jpeg";
"mimetype.pdf" = "application/pdf";
"mimetype.png" = "image/png";
"mimetype.svg" = "image/svg+xml";
readme = ":README.md";
project-list = "${config.services.gitolite.dataDir}/projects.list";
};
};
services.nginx.virtualHosts.${domain} = {
forceSSL = true;
enableACME = true;
};
}
|
