modules/private/gitolite/default.nix

   1 { lib, pkgs, config, ... }:
   2 let
   3     cfg = config.myServices.gitolite;
   4 in {
   5   options.myServices.gitolite = {
   6     enable = lib.mkEnableOption "my gitolite service";
   7     gitoliteDir = lib.mkOption {
   8       type = lib.types.string;
   9       default = "/var/lib/gitolite";
  10     };
  11   };
  12
  13   config = lib.mkIf cfg.enable {
  14     myServices.ssh.modules = [{
  15       snippet = builtins.readFile ./ldap_gitolite.sh;
  16       dependencies = [ pkgs.gitolite ];
  17     }];
  18     services.duplyBackup.profiles.gitolite = {
  19       rootDir = cfg.gitoliteDir;
  20     };
  21     networking.firewall.allowedTCPPorts = [ 9418 ];
  22
  23     services.gitDaemon = {
  24       enable = true;
  25       user = "gitolite";
  26       group = "gitolite";
  27       basePath = "${cfg.gitoliteDir}/repositories";
  28     };
  29
  30     system.activationScripts.gitolite = let
  31       gitolite_ldap_groups = pkgs.mylibs.wrap {
  32         name = "gitolite_ldap_groups.sh";
  33         file = ./gitolite_ldap_groups.sh;
  34         vars = {
  35           LDAP_PASS = config.myEnv.tools.gitolite.ldap.password;
  36         };
  37         paths = [ pkgs.openldap pkgs.stdenv.shellPackage pkgs.gnugrep pkgs.coreutils ];
  38       };
  39     in {
  40       deps = [ "users" ];
  41       text = ''
  42         if [ -d ${cfg.gitoliteDir} ]; then
  43           ln -sf ${gitolite_ldap_groups} ${cfg.gitoliteDir}/gitolite_ldap_groups.sh
  44           chmod g+rx ${cfg.gitoliteDir}
  45         fi
  46         if [ -f ${cfg.gitoliteDir}/projects.list ]; then
  47           chmod g+r ${cfg.gitoliteDir}/projects.list
  48         fi
  49       '';
  50     };
  51
  52     users.users.wwwrun.extraGroups = [ "gitolite" ];
  53
  54     users.users.gitolite.packages = let
  55       python-packages = python-packages: with python-packages; [
  56         simplejson
  57         urllib3
  58         sleekxmpp
  59       ];
  60     in
  61       [
  62         (pkgs.python3.withPackages python-packages)
  63       ];
  64     # Installation: https://git.immae.eu/mantisbt/view.php?id=93
  65     services.gitolite = {
  66       enable = true;
  67       adminPubkey = "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDXqRbiHw7QoHADNIEuo4nUT9fSOIEBMdJZH0bkQAxXyJFyCM1IMz0pxsHV0wu9tdkkr36bPEUj2aV5bkYLBN6nxcV2Y49X8bjOSCPfx3n6Own1h+NeZVBj4ZByrFmqCbTxUJIZ2bZKcWOFncML39VmWdsVhNjg0X4NBBehqXRIKr2gt3E/ESAxTYJFm0BnU0baciw9cN0bsRGqvFgf5h2P48CIAfwhVcGmPQnnAwabnosYQzRWxR0OygH5Kd8mePh6FheIRIigfXsDO8f/jdxwut8buvNIf3m5EBr3tUbTsvM+eV3M5vKGt7sk8T64DVtepTSdOOWtp+47ktsnHOMh immae@immae.eu";
  68     };
  69   };
  70 }