blob: 2311a100d13b7c9d18179274c4a748d7058fb701 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
|
# This derivation configures a 'cgit' instance to serve repositories
# from a different source.
#
# In the first round this will just serve my GitHub repositories until
# I'm happy with the display.
{ pkgs, ... }:
with pkgs.third_party;
let
cgitConfig = writeText "cgitrc" ''
# Global configuration
virtual-root=/cgit.cgi/
enable-http-clone=1
# Repository configuration
repo.url=depot
repo.path=/srv/git/depot
repo.desc=tazjin's personal monorepo
repo.owner=tazjin <tazjin@google.com>
repo.clone-url=https://git.tazj.in ssh://source.developers.google.com:2022/p/tazjins-infrastructure/r/depot
'';
thttpdConfig = writeText "thttpd.conf" ''
port=8080
dir=${cgit}/cgit
nochroot
novhost
logfile=/dev/stdout
cgipat=**.cgi
'';
# Patched version of thttpd that serves cgit.cgi as the index and
# sets the environment variable for pointing cgit at the correct
# configuration.
#
# Things are done this way because recompilation of thttpd is much
# faster than cgit and I don't want to wait long when iterating on
# config.
thttpdConfigPatch = writeText "thttpd_cgit_conf.patch" ''
diff --git a/libhttpd.c b/libhttpd.c
index c6b1622..eef4b73 100644
--- a/libhttpd.c
+++ b/libhttpd.c
@@ -3055,4 +3055,6 @@ make_envp( httpd_conn* hc )
envn = 0;
+ // force cgit to load the correct configuration
+ envp[envn++] = "CGIT_CONFIG=${cgitConfig}";
envp[envn++] = build_env( "PATH=%s", CGI_PATH );
#ifdef CGI_LD_LIBRARY_PATH
'';
thttpdCgit = thttpd.overrideAttrs(old: {
patches = [ ./cgit_idx.patch thttpdConfigPatch ];
});
in writeShellScriptBin "cgit-launch" ''
${coreutils}/bin/mkdir -p /srv/git
# Create users required by SSH
echo 'somebody:x:1000:nixbld' >> /etc/group
echo 'somebody:x:1000:1000:somebody:/tmp:/bin/bash' >> /etc/passwd
# The SSH keys are placed in the container by Kubernetes.
export GIT_SSH_COMMAND="${openssh}/bin/ssh -F /var/cgit/ssh_config"
${git}/bin/git clone --mirror \
-c http.sslcainfo=${cacert}/etc/ssl/certs/ca-bundle.crt \
ssh://source.developers.google.com:2022/p/tazjins-infrastructure/r/depot \
/srv/git/depot
exec ${thttpdCgit}/bin/thttpd -D -C ${thttpdConfig}
# ''
|
