foo.sh/ansible
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

git: Convert to CentOS 8 and Apache

Browse source 
* Update git hosts to CentOS 8
 * Drop nslscd and use sssd instead
 * Change nginx to apache for future GSSAPI support
 * Fix SELinux contexts from git data directory
This commit is contained in:
Timo Makinen 2021-03-17 21:29:47 +00:00
parent 51aede7c00
commit 58de72e85a
5 changed files with 33 additions and 50 deletions
Download patch file Download diff file Expand all files Collapse all files

64
roles/git/server/files/git.conf
View file

@ -1,46 +1,24 @@
error_page 418 = @query_auth;
SetEnv GIT_PROJECT_ROOT /srv/git
SetEnv GIT_HTTP_EXPORT_ALL
# Git over HTTP
location ~ ^/.*\.git/objects/([0-9a-f]+/[0-9a-f]+|pack/pack-[0-9a-f]+.(pack|idx))$ {
root /srv/git;
}
# Git operations that require authentication should go here
location @query_auth {
auth_basic "Authentication Required";
auth_basic_user_file /etc/nginx/htpasswd;
rewrite ^(/.*)$ $1 break;
fastcgi_pass unix:/run/fcgiwrap/fcgiwrap-nginx.sock;
fastcgi_param SCRIPT_FILENAME /usr/libexec/git-core/git-http-backend;
fastcgi_param PATH_INFO $uri;
fastcgi_param GIT_PROJECT_ROOT /srv/git;
fastcgi_param GIT_HTTP_EXPORT_ALL "";
include fastcgi_params;
fastcgi_param REMOTE_USER $remote_user;
}
location ~ ^(.*\.git/git-receive-pack)$ {
return 418;
}
location ~ ^/(.*\.git/(HEAD|info/refs|objects/(info/[^/]+)|git-upload-pack))$ {
if ( $query_string = "service=git-receive-pack" ) { return 418; }
rewrite ^(/.*)$ $1 break;
fastcgi_pass unix:/run/fcgiwrap/fcgiwrap-nginx.sock;
fastcgi_param SCRIPT_FILENAME /usr/libexec/git-core/git-http-backend;
fastcgi_param PATH_INFO $uri;
fastcgi_param GIT_PROJECT_ROOT /srv/git;
fastcgi_param GIT_HTTP_EXPORT_ALL "";
include fastcgi_params;
}
Alias /static/ /var/www/git/static/
# Gitweb
location /gitweb.cgi {
root /var/www/git/;
include fastcgi_params;
fastcgi_param SCRIPT_NAME $uri;
fastcgi_param GITWEB_CONFIG /etc/gitweb.conf;
fastcgi_pass unix:/run/fcgiwrap/fcgiwrap-nginx.sock;
}
location / {
root /var/www/git;
index gitweb.cgi;
}
#AliasMatch ^/(.*/objects/[0-9a-f]{2}/[0-9a-f]{38})$ /srv/git/$1
#AliasMatch ^/(.*/objects/pack/pack-[0-9a-f]{40}.(pack|idx))$ /srv/git/$1
<Directory /usr/libexec/git-core>
Require all granted
</Directory>
ScriptAliasMatch \
"(?x)^/(.*/(HEAD | \
info/refs | \
objects/info/[^/]+ | \
git-(upload|receive)-pack))$" \
/usr/libexec/git-core/git-http-backend/$1
ScriptAlias /gitweb.cgi /var/www/git/gitweb.cgi
<Location />
SetEnv GITWEB_CONFIG /etc/gitweb.conf
DirectoryIndex gitweb.cgi
</Location>