34 lines
684 B
Nix
34 lines
684 B
Nix
{ pkgs, var, ... }:
|
|
let
|
|
gitpath = "/git";
|
|
in
|
|
{
|
|
programs.git.enable = true;
|
|
users.groups.git = { };
|
|
users.users.git = {
|
|
isSystemUser = true;
|
|
home = gitpath;
|
|
homeMode = "755";
|
|
createHome = true;
|
|
group = "git";
|
|
shell = "${pkgs.git}/bin/git-shell";
|
|
openssh.authorizedKeys.keys = var.ssh-keys.hd;
|
|
hashedPassword = "!";
|
|
};
|
|
|
|
services =
|
|
let
|
|
cgit-host = "git.lan";
|
|
in
|
|
{
|
|
nginx = {
|
|
privateVirtualHosts.${cgit-host} = { };
|
|
};
|
|
cgit."git" = {
|
|
group = "git";
|
|
enable = false; # FIXME: find out what breaks here
|
|
scanPath = gitpath;
|
|
nginx.virtualHost = cgit-host;
|
|
};
|
|
};
|
|
}
|