diff options
| author | Kleidi Bujari <mail@4kb.net> | 2024-12-10 13:24:51 -0500 |
|---|---|---|
| committer | Kleidi Bujari <mail@4kb.net> | 2024-12-10 13:24:51 -0500 |
| commit | f5ed731abbc38d765333b005b9815a5f6d3e59c2 (patch) | |
| tree | ff4b4f0c4aa1a51742fcefac3f40e05cddceb60e /modules/xnet/gitserver | |
| parent | f08f3812f40322b6098d75573413ed83f358871f (diff) | |
| download | depot-f5ed731abbc38d765333b005b9815a5f6d3e59c2.tar.gz depot-f5ed731abbc38d765333b005b9815a5f6d3e59c2.tar.bz2 depot-f5ed731abbc38d765333b005b9815a5f6d3e59c2.zip | |
Finalize working configs and prior to adding secrets
System configurations in a known good state. Secrets still have to be
integrated, at this point the nixos-anywhere project will likely handle
this to keep the bootstrap completely automatic since it can copy ssh
host keys to the host prior to install/activation. This would work
nicely with the sops secret module, but a good way to manage host keys
for each machine still has to be decided.
Diffstat (limited to 'modules/xnet/gitserver')
| -rw-r--r-- | modules/xnet/gitserver/default.nix | 1 | ||||
| -rw-r--r-- | modules/xnet/gitserver/gitweb.nix | 1 |
2 files changed, 2 insertions, 0 deletions
diff --git a/modules/xnet/gitserver/default.nix b/modules/xnet/gitserver/default.nix index 5e04398..da83f73 100644 --- a/modules/xnet/gitserver/default.nix +++ b/modules/xnet/gitserver/default.nix @@ -31,6 +31,7 @@ in initialPassword = ""; isSystemUser = true; home = cfg.path; + homeMode = "755"; createHome = true; shell = "${pkgs.git}/bin/git-shell"; openssh.authorizedKeys.keys = cfg.keys; diff --git a/modules/xnet/gitserver/gitweb.nix b/modules/xnet/gitserver/gitweb.nix index c3696ab..bfd593d 100644 --- a/modules/xnet/gitserver/gitweb.nix +++ b/modules/xnet/gitserver/gitweb.nix @@ -21,6 +21,7 @@ in config = mkIf cfg.enable { xnet.nginx.enable = true; + users.users.nginx.extraGroups = [ "git" ]; services.cgit.main = { enable = true; scanPath = config.xnet.gitServer.path; |