]>
Commit | Line | Data |
---|---|---|
ab8f306d | 1 | { lib, pkgs, config, ... }: |
4d4f13f4 | 2 | let |
8d213e2b | 3 | cfg = config.myServices.gitolite; |
4d4f13f4 | 4 | in { |
8d213e2b | 5 | options.myServices.gitolite = { |
4d4f13f4 | 6 | enable = lib.mkEnableOption "my gitolite service"; |
950ca5ee IB |
7 | gitoliteDir = lib.mkOption { |
8 | type = lib.types.string; | |
9 | default = "/var/lib/gitolite"; | |
10 | }; | |
4d4f13f4 IB |
11 | }; |
12 | ||
13 | config = lib.mkIf cfg.enable { | |
1b9150a5 IB |
14 | myServices.ssh.modules = [{ |
15 | snippet = builtins.readFile ./ldap_gitolite.sh; | |
16 | dependencies = [ pkgs.gitolite ]; | |
17 | }]; | |
d2e703c5 | 18 | services.duplyBackup.profiles.gitolite = { |
6a8252b1 IB |
19 | rootDir = cfg.gitoliteDir; |
20 | }; | |
10889174 IB |
21 | networking.firewall.allowedTCPPorts = [ 9418 ]; |
22 | ||
950ca5ee IB |
23 | services.gitDaemon = { |
24 | enable = true; | |
25 | user = "gitolite"; | |
26 | group = "gitolite"; | |
27 | basePath = "${cfg.gitoliteDir}/repositories"; | |
28 | }; | |
29 | ||
9d90e7e2 | 30 | system.activationScripts.gitolite = let |
a1a8649a | 31 | gitolite_ldap_groups = pkgs.mylibs.wrap { |
4d4f13f4 | 32 | name = "gitolite_ldap_groups.sh"; |
10889174 | 33 | file = ./gitolite_ldap_groups.sh; |
4d4f13f4 | 34 | vars = { |
ab8f306d | 35 | LDAP_PASS = config.myEnv.tools.gitolite.ldap.password; |
4d4f13f4 IB |
36 | }; |
37 | paths = [ pkgs.openldap pkgs.stdenv.shellPackage pkgs.gnugrep pkgs.coreutils ]; | |
38 | }; | |
39 | in { | |
40 | deps = [ "users" ]; | |
41 | text = '' | |
950ca5ee IB |
42 | if [ -d ${cfg.gitoliteDir} ]; then |
43 | ln -sf ${gitolite_ldap_groups} ${cfg.gitoliteDir}/gitolite_ldap_groups.sh | |
44 | chmod g+rx ${cfg.gitoliteDir} | |
4d4f13f4 | 45 | fi |
950ca5ee IB |
46 | if [ -f ${cfg.gitoliteDir}/projects.list ]; then |
47 | chmod g+r ${cfg.gitoliteDir}/projects.list | |
4d4f13f4 IB |
48 | fi |
49 | ''; | |
50 | }; | |
51 | ||
52 | users.users.wwwrun.extraGroups = [ "gitolite" ]; | |
53 | ||
54 | users.users.gitolite.packages = let | |
55 | python-packages = python-packages: with python-packages; [ | |
56 | simplejson | |
57 | urllib3 | |
256d607c | 58 | sleekxmpp |
4d4f13f4 IB |
59 | ]; |
60 | in | |
61 | [ | |
62 | (pkgs.python3.withPackages python-packages) | |
63 | ]; | |
a5365ec3 | 64 | # Installation: https://git.immae.eu/mantisbt/view.php?id=93 |
4d4f13f4 IB |
65 | services.gitolite = { |
66 | enable = true; | |
4d4f13f4 IB |
67 | adminPubkey = "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDXqRbiHw7QoHADNIEuo4nUT9fSOIEBMdJZH0bkQAxXyJFyCM1IMz0pxsHV0wu9tdkkr36bPEUj2aV5bkYLBN6nxcV2Y49X8bjOSCPfx3n6Own1h+NeZVBj4ZByrFmqCbTxUJIZ2bZKcWOFncML39VmWdsVhNjg0X4NBBehqXRIKr2gt3E/ESAxTYJFm0BnU0baciw9cN0bsRGqvFgf5h2P48CIAfwhVcGmPQnnAwabnosYQzRWxR0OygH5Kd8mePh6FheIRIigfXsDO8f/jdxwut8buvNIf3m5EBr3tUbTsvM+eV3M5vKGt7sk8T64DVtepTSdOOWtp+47ktsnHOMh immae@immae.eu"; |
68 | }; | |
69 | }; | |
70 | } |