blob: 6b573e3931bbee97ae9fd21f5191b480530cb232 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
|
{ lib, pkgs, config, ... }:
let
cfg = config.myServices.gitolite;
in {
options.myServices.gitolite = {
enable = lib.mkEnableOption "my gitolite service";
gitoliteDir = lib.mkOption {
type = lib.types.str;
default = "/var/lib/gitolite";
};
};
config = lib.mkIf cfg.enable {
myServices.ssh.modules = [{
snippet = builtins.readFile ./ldap_gitolite.sh;
dependencies = [ pkgs.gitolite ];
}];
services.duplyBackup.profiles.gitolite = {
rootDir = cfg.gitoliteDir;
remotes = [ "eriomem" "ovh" ];
};
networking.firewall.allowedTCPPorts = [ 9418 ];
secrets.keys = [{
dest = "gitolite/ldap_password";
user = "gitolite";
group = "gitolite";
permissions = "0400";
text = config.myEnv.tools.gitolite.ldap.password;
}];
services.gitDaemon = {
enable = true;
user = "gitolite";
group = "gitolite";
basePath = "${cfg.gitoliteDir}/repositories";
};
system.activationScripts.gitolite = let
deps = [ pkgs.openldap pkgs.stdenv.shellPackage pkgs.gnugrep pkgs.coreutils ];
gitolite_ldap_groups = pkgs.runCommand "gitolite_ldap_groups.sh" {
buildInputs = [ pkgs.makeWrapper ];
} ''
makeWrapper "${./gitolite_ldap_groups.sh}" "$out" \
--prefix PATH : ${lib.makeBinPath deps} \
--set LDAP_PASS_PATH ${config.secrets.fullPaths."gitolite/ldap_password"}
'';
in {
deps = [ "users" ];
text = ''
if [ -d ${cfg.gitoliteDir} ]; then
ln -sf ${gitolite_ldap_groups} ${cfg.gitoliteDir}/gitolite_ldap_groups.sh
chmod g+rx ${cfg.gitoliteDir}
fi
if [ -f ${cfg.gitoliteDir}/projects.list ]; then
chmod g+r ${cfg.gitoliteDir}/projects.list
fi
'';
};
users.users.wwwrun.extraGroups = [ "gitolite" ];
users.users.gitolite.extraGroups = [ "keys" ];
users.users.gitolite.packages = let
python-packages = python-packages: with python-packages; [
simplejson
urllib3
sleekxmpp
];
in
[
(pkgs.python3.withPackages python-packages)
];
# Installation: https://git.immae.eu/mantisbt/view.php?id=93
services.gitolite = {
enable = true;
adminPubkey = "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDXqRbiHw7QoHADNIEuo4nUT9fSOIEBMdJZH0bkQAxXyJFyCM1IMz0pxsHV0wu9tdkkr36bPEUj2aV5bkYLBN6nxcV2Y49X8bjOSCPfx3n6Own1h+NeZVBj4ZByrFmqCbTxUJIZ2bZKcWOFncML39VmWdsVhNjg0X4NBBehqXRIKr2gt3E/ESAxTYJFm0BnU0baciw9cN0bsRGqvFgf5h2P48CIAfwhVcGmPQnnAwabnosYQzRWxR0OygH5Kd8mePh6FheIRIigfXsDO8f/jdxwut8buvNIf3m5EBr3tUbTsvM+eV3M5vKGt7sk8T64DVtepTSdOOWtp+47ktsnHOMh immae@immae.eu";
};
};
}
|
