Git daemon: packaged.
svn path=/nixos/trunk/; revision=25163
This commit is contained in:
parent
5055c6dc29
commit
3b28efd00d
|
@ -59,6 +59,7 @@ in
|
||||||
sabnzbd = 38;
|
sabnzbd = 38;
|
||||||
kdm = 39;
|
kdm = 39;
|
||||||
ghostOne = 40;
|
ghostOne = 40;
|
||||||
|
git = 41;
|
||||||
# When adding a uid, make sure it doesn't match an existing gid.
|
# When adding a uid, make sure it doesn't match an existing gid.
|
||||||
|
|
||||||
nixbld = 30000; # start of range of uids
|
nixbld = 30000; # start of range of uids
|
||||||
|
@ -100,6 +101,7 @@ in
|
||||||
disnix = 33;
|
disnix = 33;
|
||||||
osgi = 34;
|
osgi = 34;
|
||||||
ghostOne = 40;
|
ghostOne = 40;
|
||||||
|
git = 41;
|
||||||
# When adding a gid, make sure it doesn't match an existing uid.
|
# When adding a gid, make sure it doesn't match an existing uid.
|
||||||
|
|
||||||
users = 100;
|
users = 100;
|
||||||
|
|
|
@ -92,6 +92,7 @@
|
||||||
./services/networking/dhcpd.nix
|
./services/networking/dhcpd.nix
|
||||||
./services/networking/ejabberd.nix
|
./services/networking/ejabberd.nix
|
||||||
./services/networking/firewall.nix
|
./services/networking/firewall.nix
|
||||||
|
./services/networking/git-daemon.nix
|
||||||
./services/networking/gnunet.nix
|
./services/networking/gnunet.nix
|
||||||
./services/networking/gvpe.nix
|
./services/networking/gvpe.nix
|
||||||
./services/networking/gw6c.nix
|
./services/networking/gw6c.nix
|
||||||
|
|
112
modules/services/networking/git-daemon.nix
Normal file
112
modules/services/networking/git-daemon.nix
Normal file
|
@ -0,0 +1,112 @@
|
||||||
|
{pkgs, config, ...}:
|
||||||
|
with pkgs.lib;
|
||||||
|
let
|
||||||
|
|
||||||
|
cfg = config.services.gitDaemon;
|
||||||
|
gitUser = "git";
|
||||||
|
|
||||||
|
in
|
||||||
|
{
|
||||||
|
|
||||||
|
###### interface
|
||||||
|
|
||||||
|
options = {
|
||||||
|
services.gitDaemon = {
|
||||||
|
|
||||||
|
enable = mkOption {
|
||||||
|
default = false;
|
||||||
|
description = ''
|
||||||
|
Enable Git daemon, which allows public hosting of git repositories
|
||||||
|
without any access controls. This is mostly intended for read-only access.
|
||||||
|
|
||||||
|
You can allow write access by setting daemon.receivepack configuration
|
||||||
|
item of the repository to true. This is solely meant for a closed LAN setting
|
||||||
|
where everybody is friendly.
|
||||||
|
|
||||||
|
If you need any access controls, use something else.
|
||||||
|
'';
|
||||||
|
};
|
||||||
|
|
||||||
|
basePath = mkOption {
|
||||||
|
default = "";
|
||||||
|
example = "/srv/git/";
|
||||||
|
description = ''
|
||||||
|
Remap all the path requests as relative to the given path. For example,
|
||||||
|
if you set base-path to /srv/git, then if you later try to pull
|
||||||
|
git://example.com/hello.git, Git daemon will interpret the path as /srv/git/hello.git.
|
||||||
|
'';
|
||||||
|
};
|
||||||
|
|
||||||
|
exportAll = mkOption {
|
||||||
|
default = false;
|
||||||
|
description = ''
|
||||||
|
Publish all directories that look like Git repositories (have the objects
|
||||||
|
and refs subdirectories), even if they do not have the git-daemon-export-ok file.
|
||||||
|
|
||||||
|
If disabled, you need to touch .git/git-daemon-export-ok in each repository
|
||||||
|
you want the daemon to publish.
|
||||||
|
|
||||||
|
Warning: enabling this without a repository whitelist or basePath
|
||||||
|
publishes every git repository you have.
|
||||||
|
'';
|
||||||
|
};
|
||||||
|
|
||||||
|
repositories = mkOption {
|
||||||
|
default = [];
|
||||||
|
example = [ "/srv/git" "/home/user/git/repo2" ];
|
||||||
|
description = ''
|
||||||
|
A whitelist of paths of git repositories, or directories containing repositories
|
||||||
|
all of which would be published. Paths must not end in "/".
|
||||||
|
|
||||||
|
Warning: leaving this empty and enabling exportAll publishes all
|
||||||
|
repositories in your filesystem or basePath if specified.
|
||||||
|
'';
|
||||||
|
};
|
||||||
|
|
||||||
|
listenAddress = mkOption {
|
||||||
|
default = "";
|
||||||
|
example = "example.com";
|
||||||
|
description = "Listen on a specific IP address or hostname.";
|
||||||
|
};
|
||||||
|
|
||||||
|
port = mkOption {
|
||||||
|
default = 9418;
|
||||||
|
description = "Port to listen on.";
|
||||||
|
};
|
||||||
|
|
||||||
|
options = mkOption {
|
||||||
|
default = "";
|
||||||
|
description = "Extra configuration options to be passed to Git daemon.";
|
||||||
|
};
|
||||||
|
|
||||||
|
};
|
||||||
|
};
|
||||||
|
|
||||||
|
###### implementation
|
||||||
|
|
||||||
|
config = mkIf cfg.enable {
|
||||||
|
|
||||||
|
users.extraUsers = singleton
|
||||||
|
{ name = gitUser;
|
||||||
|
uid = config.ids.uids.git;
|
||||||
|
description = "Git daemon user";
|
||||||
|
};
|
||||||
|
|
||||||
|
users.extraGroups = singleton
|
||||||
|
{ name = gitUser;
|
||||||
|
gid = config.ids.gids.git;
|
||||||
|
};
|
||||||
|
|
||||||
|
jobs.gitDaemon = {
|
||||||
|
name = "git-daemon";
|
||||||
|
startOn = "ip-up";
|
||||||
|
exec = "${pkgs.git}/bin/git daemon --reuseaddr "
|
||||||
|
+ (optionalString (cfg.basePath != "") "--basepath=${cfg.basePath} ")
|
||||||
|
+ (optionalString (cfg.listenAddress != "") "--listen=${cfg.listenAddress} ")
|
||||||
|
+ "--port=${toString cfg.port} --user=${gitUser} --group=${gitUser} ${cfg.options} "
|
||||||
|
+ "--verbose " + (optionalString cfg.exportAll "--export-all") + concatStringsSep " " cfg.repositories;
|
||||||
|
};
|
||||||
|
|
||||||
|
};
|
||||||
|
|
||||||
|
}
|
Loading…
Reference in a new issue