cgit: consider all repos safe
This commit is contained in:
parent
401f0e1159
commit
6b3e4de3b0
@ -468,6 +468,16 @@ let
|
|||||||
include ${pkgs.nginx}/conf/fastcgi_params;
|
include ${pkgs.nginx}/conf/fastcgi_params;
|
||||||
fastcgi_param GIT_HTTP_EXPORT_ALL "";
|
fastcgi_param GIT_HTTP_EXPORT_ALL "";
|
||||||
fastcgi_param GIT_PROJECT_ROOT ${cfg.dataDir};
|
fastcgi_param GIT_PROJECT_ROOT ${cfg.dataDir};
|
||||||
|
fastcgi_param HOME ${pkgs.write "git-http-backend.home" {
|
||||||
|
"/.gitconfig".text = /* ini */ ''
|
||||||
|
[safe]
|
||||||
|
directory = .
|
||||||
|
${concatMapStrings
|
||||||
|
(repo: "directory = ${cfg.dataDir}/${repo.name}\n")
|
||||||
|
(attrValues cfg.repos)
|
||||||
|
}
|
||||||
|
'';
|
||||||
|
}};
|
||||||
fastcgi_param PATH_INFO $fastcgi_script_name;
|
fastcgi_param PATH_INFO $fastcgi_script_name;
|
||||||
fastcgi_param SCRIPT_FILENAME ${pkgs.git}/bin/git-http-backend;
|
fastcgi_param SCRIPT_FILENAME ${pkgs.git}/bin/git-http-backend;
|
||||||
fastcgi_pass unix:${config.services.fcgiwrap.socketAddress};
|
fastcgi_pass unix:${config.services.fcgiwrap.socketAddress};
|
||||||
|
Loading…
Reference in New Issue
Block a user