cgit: consider all repos safe
This commit is contained in:
parent
401f0e1159
commit
6b3e4de3b0
@ -468,6 +468,16 @@ let
|
||||
include ${pkgs.nginx}/conf/fastcgi_params;
|
||||
fastcgi_param GIT_HTTP_EXPORT_ALL "";
|
||||
fastcgi_param GIT_PROJECT_ROOT ${cfg.dataDir};
|
||||
fastcgi_param HOME ${pkgs.write "git-http-backend.home" {
|
||||
"/.gitconfig".text = /* ini */ ''
|
||||
[safe]
|
||||
directory = .
|
||||
${concatMapStrings
|
||||
(repo: "directory = ${cfg.dataDir}/${repo.name}\n")
|
||||
(attrValues cfg.repos)
|
||||
}
|
||||
'';
|
||||
}};
|
||||
fastcgi_param PATH_INFO $fastcgi_script_name;
|
||||
fastcgi_param SCRIPT_FILENAME ${pkgs.git}/bin/git-http-backend;
|
||||
fastcgi_pass unix:${config.services.fcgiwrap.socketAddress};
|
||||
|
Loading…
Reference in New Issue
Block a user