Mic92/stockholm
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

host cd: use irc-announce and cgit

Browse Source
This commit is contained in:
tv 2015-06-18 21:22:21 +02:00
parent 94488da95f
commit 1325e5a675
2 changed files with 22 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

35
modules/cd/default.nix
View File

@ -59,31 +59,38 @@
makefu = { pubkey = "xxx"; };
};
# TODO warn about stale repodirs
repos = addNames {
testing = {
shitment = {
desc = "shitment repository";
hooks = {
update = ''
#! /bin/sh
set -euf
echo update hook: $* >&2
'';
post-update = ''
#! /bin/sh
set -euf
echo post-update hook: $* >&2
'';
post-receive = git.irc-announce {
nick = config.networking.hostName; # TODO make this the default
channel = "#retiolum";
server = "ire.retiolum";
};
};
public = true;
};
testing = {
desc = "testing repository";
hooks = {
post-receive = git.irc-announce {
nick = config.networking.hostName; # TODO make this the default
channel = "#repository";
server = "ire.retiolum";
};
};
public = true;
};
};
rules = with git; with users; with repos; [
{ user = tv;
repo = testing;
repo = [ testing shitment ];
perm = push master [ non-fast-forward create delete merge ];
}
{ user = [ lass makefu ];
repo = testing;
repo = [ testing shitment ];
perm = fetch;
}
];

1
modules/cd/iptables.nix
View File

@ -63,6 +63,7 @@
ip4tables -A Retiolum -j ACCEPT -p icmp --icmp-type echo-request
ip6tables -A Retiolum -j ACCEPT -p ipv6-icmp -m icmp6 --icmpv6-type echo-request
ipXtables -A Retiolum -j ACCEPT -p tcp --dport http -m conntrack --ctstate NEW
${when log "ipXtables -A Retiolum -j LOG --log-level info --log-prefix 'REJECT '"}
ipXtables -A Retiolum -j REJECT -p tcp --reject-with tcp-reset