| Commit message (Collapse) | Author | Age | |
|---|---|---|---|
| * | fix(git-server/cgit): Don't run `cgit` as `root` use `git` instead | Benedikt Peetz | 2024-09-06 |
| | | | | | | | | | | | | | This option was newly added, as previously only on `fcgiwrap` instance was run as root. We probably have not been affected by this, as our `fcgiwrap` instance was already running as `git:nginx`. Usage of the new options seems better either way, as they provide a finer grained control over the user _each_ `fcgiwrap`ped service is running at. The security advisory: https://discourse.nixos.org/t/51419 | ||
| * | docs(nixos/git-server): Improve the comment on the possible git config keys | Benedikt Peetz | 2024-08-14 |
| | | |||
| * | fix(nixos/git-server): Use the correct number in the `section-from-path` setting | Benedikt Peetz | 2024-08-14 |
| | | | | | | | | | | | | | | | Take for example a repository name like: `some/organisation/project_a/team_c/repo_b`. Setting the setting to `-1` means that cgit traverses the path from left to right, until it has found 1 element (and `section-from-path` (or n for short)is 0, because n is incremented after each iteration). E.g. : ~ [n=-1] starting point: `some/organisation/project_a/team_c/repo_b` ~ [n=0] after the first iteration: `some/organisation/project_a/team_c/repo_b` Now `some/organisation/project_a/team_c` becomes the section, whilst `repo_b` becomes the repo name. | ||
| * | fix(nixos/git-server): Correctly specify the section from path length | Benedikt Peetz | 2024-08-13 |
| | | | | | | | | | | | | | | | Cgit effectively splits the repo path on '/' and then takes `section-from-path` segments, which form the section. A negative value here results in cgit traversing the path from left to right instead of right to left. Beware that cgit only sets the section, if the path contains `section-from-path` or more slashes in it (thus rendering this setting defunct with the previous value of 1000). There seems to be no way to tell cgit to always use all components up-to the second to last for the section name, thus requiring all projects that need a longer than 1 section length to set the `cgit.section` git config variable via gitolite. | ||
| * | fix(nixos/git-server): Correctly enable the git config feature of gitolite | Benedikt Peetz | 2024-08-13 |
| | | | | | | | | | The previously set variable is only used in the gitolite.conf file for the `config` specifications on each repo. We can't use that because we use "wild-repos". Thus we need to add the `user-configs` option to each repo, allow users to change the git settings specified there with a simple `ssh git@git.vhack.eu config <repo> --set cgit.owner <name>`. | ||
| * | fix(nixos/git-server): Use correct regex syntax in allowed git config values | Benedikt Peetz | 2024-08-13 |
| | | |||
| * | fix(nixos/git-server): Correctly specify cgit's css path | Benedikt Peetz | 2024-08-13 |
| | | |||
| * | feat(nixos/git-server): Add nice gitolite features | Benedikt Peetz | 2024-08-13 |
| | | |||
| * | fix(nixos/git-server): Tell gitolite to allow changing some `git` settings | Benedikt Peetz | 2024-08-13 |
| | | |||
| * | feat(nixos/git-server): Add further cgit settings | Benedikt Peetz | 2024-08-13 |
| | | | | | | A lot of the added settings here have been tested. They will get get tests to ensure they stay working, in later commits. | ||
| * | refactor(nixos/openssh): Migrate from `system/services` | Benedikt Peetz | 2024-08-02 |
| | | |||
| * | fix(nixos/git-server): Add the required configuration to support http-clone | Benedikt Peetz | 2024-08-02 |
| | | |||
| * | refactor(nixos/{nginx, nix-sync}): Migrate from `system/services` | Benedikt Peetz | 2024-08-02 |
| | | | | | | Nix-sync was sort-of mixed into the nginx configuration, thus separating it completely seemed reasonable. | ||
| * | fix(git-server): set git default-branch to main | Silas Schöffel | 2024-07-30 |
| | | |||
| * | fix(peertube): allow sane user creation | Silas Schöffel | 2024-06-28 |
| | | | | | | This enables reviewed registration, assigns quota to new users and enables manual approval of new videos. | ||
| * | fix(peertube): configure https | Silas Schöffel | 2024-06-28 |
| | | |||
| * | fix(peertube): Specify admin email (where to send the reports to) | Benedikt Peetz | 2024-06-28 |
| | | |||
| * | fix(peertube): Use correct localhost ip | Benedikt Peetz | 2024-06-28 |
| | | |||
| * | fix(peertube): Add required listen setting | Benedikt Peetz | 2024-06-28 |
| | | |||
| * | fix(peertube): Activate smtp support | Benedikt Peetz | 2024-06-28 |
| | | |||
| * | fix(peertube): Ensure that the nginx reverse proxy works | Benedikt Peetz | 2024-06-28 |
| | | |||
| * | fix(peertube/secrets): Improve smtp secret | Benedikt Peetz | 2024-06-27 |
| | | |||
| * | feat(peertube): Init | Benedikt Peetz | 2024-06-27 |
| | | |||
| * | refactor(modules/etesync): Move to a complete module | Benedikt Peetz | 2024-06-13 |
| | | |||
| * | refactor(modules): Ensure strict coherence to patterns | Benedikt Peetz | 2024-06-13 |
| | | |||
| * | fix(git-server): enable http-clone through cgit | Silas Schöffel | 2024-06-11 |
| | | |||
| * | fix(gitolite): change user to git | Silas Schöffel | 2024-06-07 |
| | | |||
| * | fix(git-server): enable SSL for cgit | Silas Schöffel | 2024-06-05 |
| | | |||
| * | feat(treewide): add git-server module | Silas Schöffel | 2024-06-05 |
 |
index : nixos-server | |
| nixos-config for vhack.eu servers https://vhack.eu | Gitolite user |
| summary refs log tree commit diff stats |