Fixes CVE-2022-32174 and CVE-2022-2024. https://github.com/gogs/gogs/releases/tag/v0.13.0 https://github.com/gogs/gogs/releases/tag/v0.12.11
49 lines
986 B
Nix
49 lines
986 B
Nix
{ lib, buildGoModule, fetchFromGitHub, makeWrapper
|
|
, git, bash, gzip, openssh, pam
|
|
, sqliteSupport ? true
|
|
, pamSupport ? true
|
|
}:
|
|
|
|
with lib;
|
|
|
|
buildGoModule rec {
|
|
pname = "gogs";
|
|
version = "0.13.0";
|
|
|
|
src = fetchFromGitHub {
|
|
owner = "gogs";
|
|
repo = "gogs";
|
|
rev = "v${version}";
|
|
sha256 = "sha256-UfxE+NaqDr3XUXpvlV989Iwjq/lsAwpMTDAPkcOmma8=";
|
|
};
|
|
|
|
vendorSha256 = "sha256-ISJOEJ1DWO4nnMpDuZ36Nq528LhgekDh3XUF8adlj2w=";
|
|
|
|
subPackages = [ "." ];
|
|
|
|
postPatch = ''
|
|
patchShebangs .
|
|
'';
|
|
|
|
nativeBuildInputs = [ makeWrapper openssh ];
|
|
|
|
buildInputs = optional pamSupport pam;
|
|
|
|
tags =
|
|
( optional sqliteSupport "sqlite"
|
|
++ optional pamSupport "pam");
|
|
|
|
postInstall = ''
|
|
|
|
wrapProgram $out/bin/gogs \
|
|
--prefix PATH : ${makeBinPath [ bash git gzip openssh ]}
|
|
'';
|
|
|
|
meta = {
|
|
description = "A painless self-hosted Git service";
|
|
homepage = "https://gogs.io";
|
|
license = licenses.mit;
|
|
maintainers = [ maintainers.schneefux ];
|
|
};
|
|
}
|