]>
Commit | Line | Data |
---|---|---|
ab8f306d | 1 | { lib, pkgs, config, ... }: |
4d4f13f4 | 2 | let |
8d213e2b | 3 | cfg = config.myServices.gitolite; |
4d4f13f4 | 4 | in { |
8d213e2b | 5 | options.myServices.gitolite = { |
4d4f13f4 | 6 | enable = lib.mkEnableOption "my gitolite service"; |
950ca5ee | 7 | gitoliteDir = lib.mkOption { |
5400b9b6 | 8 | type = lib.types.str; |
950ca5ee IB |
9 | default = "/var/lib/gitolite"; |
10 | }; | |
4d4f13f4 IB |
11 | }; |
12 | ||
13 | config = lib.mkIf cfg.enable { | |
120bcf4d IB |
14 | myServices.chatonsProperties.services.gitolite = { |
15 | file.datetime = "2022-08-21T10:01:00"; | |
16 | service = { | |
17 | name = "Gitolite"; | |
18 | description = "Gitolite allows you to setup git hosting on a central server, with fine-grained access control and many more powerful features."; | |
19 | website = "https://git.immae.eu"; | |
20 | logo = "https://git.immae.eu/cgit-css/favicon.ico"; | |
21 | status.level = "OK"; | |
22 | status.description = "OK"; | |
23 | registration."" = ["MEMBER" "CLIENT"]; | |
24 | registration.load = "OPEN"; | |
25 | install.type = "PACKAGE"; | |
26 | guide.user = "https://www.immae.eu/docs/forge-logicielle.html"; | |
27 | }; | |
28 | software = { | |
29 | name = "Gitolite"; | |
30 | website = "https://gitolite.com/gitolite/"; | |
31 | license.url = "https://github.com/sitaramc/gitolite/blob/master/COPYING"; | |
32 | license.name = "GNU General Public License v2.0"; | |
33 | version = pkgs.gitolite.version; | |
34 | source.url = "https://github.com/sitaramc/gitolite"; | |
35 | }; | |
36 | }; | |
1b9150a5 IB |
37 | myServices.ssh.modules = [{ |
38 | snippet = builtins.readFile ./ldap_gitolite.sh; | |
39 | dependencies = [ pkgs.gitolite ]; | |
40 | }]; | |
10889174 IB |
41 | networking.firewall.allowedTCPPorts = [ 9418 ]; |
42 | ||
4c4652aa | 43 | secrets.keys."gitolite/ldap_password" = { |
ce7d09ef IB |
44 | user = "gitolite"; |
45 | group = "gitolite"; | |
46 | permissions = "0400"; | |
47 | text = config.myEnv.tools.gitolite.ldap.password; | |
4c4652aa | 48 | }; |
ce7d09ef | 49 | |
950ca5ee IB |
50 | services.gitDaemon = { |
51 | enable = true; | |
52 | user = "gitolite"; | |
53 | group = "gitolite"; | |
54 | basePath = "${cfg.gitoliteDir}/repositories"; | |
55 | }; | |
56 | ||
9d90e7e2 | 57 | system.activationScripts.gitolite = let |
0b3f9cb9 IB |
58 | deps = [ pkgs.openldap pkgs.stdenv.shellPackage pkgs.gnugrep pkgs.coreutils ]; |
59 | gitolite_ldap_groups = pkgs.runCommand "gitolite_ldap_groups.sh" { | |
60 | buildInputs = [ pkgs.makeWrapper ]; | |
61 | } '' | |
62 | makeWrapper "${./gitolite_ldap_groups.sh}" "$out" \ | |
63 | --prefix PATH : ${lib.makeBinPath deps} \ | |
ce7d09ef | 64 | --set LDAP_PASS_PATH ${config.secrets.fullPaths."gitolite/ldap_password"} |
0b3f9cb9 | 65 | ''; |
4d4f13f4 IB |
66 | in { |
67 | deps = [ "users" ]; | |
68 | text = '' | |
950ca5ee IB |
69 | if [ -d ${cfg.gitoliteDir} ]; then |
70 | ln -sf ${gitolite_ldap_groups} ${cfg.gitoliteDir}/gitolite_ldap_groups.sh | |
71 | chmod g+rx ${cfg.gitoliteDir} | |
4d4f13f4 | 72 | fi |
950ca5ee IB |
73 | if [ -f ${cfg.gitoliteDir}/projects.list ]; then |
74 | chmod g+r ${cfg.gitoliteDir}/projects.list | |
4d4f13f4 IB |
75 | fi |
76 | ''; | |
77 | }; | |
78 | ||
79 | users.users.wwwrun.extraGroups = [ "gitolite" ]; | |
ce7d09ef | 80 | users.users.gitolite.extraGroups = [ "keys" ]; |
4d4f13f4 IB |
81 | |
82 | users.users.gitolite.packages = let | |
83 | python-packages = python-packages: with python-packages; [ | |
84 | simplejson | |
de5b6cf1 | 85 | apprise |
4d4f13f4 | 86 | urllib3 |
256d607c | 87 | sleekxmpp |
2ff9258e | 88 | pyyaml |
4d4f13f4 IB |
89 | ]; |
90 | in | |
91 | [ | |
e34b3079 | 92 | (pkgs.python38.withPackages python-packages) |
878d1583 IB |
93 | pkgs.nettools |
94 | pkgs.findutils | |
4d4f13f4 | 95 | ]; |
a5365ec3 | 96 | # Installation: https://git.immae.eu/mantisbt/view.php?id=93 |
4d4f13f4 IB |
97 | services.gitolite = { |
98 | enable = true; | |
200690c9 | 99 | adminPubkey = config.myEnv.sshd.rootKeys.immae_dilion; |
4d4f13f4 IB |
100 | }; |
101 | }; | |
102 | } |